{
    "3833085": [
        {
            "dateadded": "2026-04-27 15:02:08 UTC",
            "url": "https://h4rbor-phase.rax2liven.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 15:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833085/",
            "reporter": "anonymous"
        }
    ],
    "3833084": [
        {
            "dateadded": "2026-04-27 14:59:27 UTC",
            "url": "http://125.43.45.227:44314/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833084/",
            "reporter": "geenensp"
        }
    ],
    "3833083": [
        {
            "dateadded": "2026-04-27 14:58:12 UTC",
            "url": "https://arkmarkix.rax2liven.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833083/",
            "reporter": "anonymous"
        }
    ],
    "3833082": [
        {
            "dateadded": "2026-04-27 14:51:19 UTC",
            "url": "http://115.50.93.180:45327/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833082/",
            "reporter": "geenensp"
        }
    ],
    "3833081": [
        {
            "dateadded": "2026-04-27 14:48:26 UTC",
            "url": "http://119.118.76.143:60669/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:48:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833081/",
            "reporter": "geenensp"
        }
    ],
    "3833080": [
        {
            "dateadded": "2026-04-27 14:48:20 UTC",
            "url": "http://115.53.246.215:33981/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833080/",
            "reporter": "geenensp"
        }
    ],
    "3833079": [
        {
            "dateadded": "2026-04-27 14:45:08 UTC",
            "url": "https://syntarepo.qim8vorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833079/",
            "reporter": "anonymous"
        }
    ],
    "3833078": [
        {
            "dateadded": "2026-04-27 14:44:12 UTC",
            "url": "http://219.155.203.189:58705/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833078/",
            "reporter": "geenensp"
        }
    ],
    "3833077": [
        {
            "dateadded": "2026-04-27 14:42:07 UTC",
            "url": "https://ioszf.qim8vorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833077/",
            "reporter": "anonymous"
        }
    ],
    "3833076": [
        {
            "dateadded": "2026-04-27 14:39:13 UTC",
            "url": "https://cedthe.qim8vorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833076/",
            "reporter": "anonymous"
        }
    ],
    "3833075": [
        {
            "dateadded": "2026-04-27 14:32:12 UTC",
            "url": "http://39.73.242.5:59924/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833075/",
            "reporter": "geenensp"
        }
    ],
    "3833074": [
        {
            "dateadded": "2026-04-27 14:31:09 UTC",
            "url": "https://meta-5umm.qim8vorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833074/",
            "reporter": "anonymous"
        }
    ],
    "3833073": [
        {
            "dateadded": "2026-04-27 14:30:19 UTC",
            "url": "http://42.230.70.3:43826/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833073/",
            "reporter": "geenensp"
        }
    ],
    "3833072": [
        {
            "dateadded": "2026-04-27 14:27:17 UTC",
            "url": "http://220.192.254.101:41071/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:27:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833072/",
            "reporter": "geenensp"
        }
    ],
    "3833071": [
        {
            "dateadded": "2026-04-27 14:27:08 UTC",
            "url": "https://birchpayload.qim8vorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833071/",
            "reporter": "anonymous"
        }
    ],
    "3833070": [
        {
            "dateadded": "2026-04-27 14:23:13 UTC",
            "url": "http://222.214.101.40:53694/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833070/",
            "reporter": "geenensp"
        }
    ],
    "3833069": [
        {
            "dateadded": "2026-04-27 14:23:07 UTC",
            "url": "https://shield-sile.sokla3ren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833069/",
            "reporter": "anonymous"
        }
    ],
    "3833068": [
        {
            "dateadded": "2026-04-27 14:21:13 UTC",
            "url": "https://nubebdn.sokla3ren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833068/",
            "reporter": "anonymous"
        }
    ],
    "3833067": [
        {
            "dateadded": "2026-04-27 14:16:07 UTC",
            "url": "https://1r72in.sokla3ren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833067/",
            "reporter": "anonymous"
        }
    ],
    "3833066": [
        {
            "dateadded": "2026-04-27 14:15:16 UTC",
            "url": "http://219.155.203.189:58705/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833066/",
            "reporter": "geenensp"
        }
    ],
    "3833065": [
        {
            "dateadded": "2026-04-27 14:11:18 UTC",
            "url": "http://110.37.61.34:50710/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833065/",
            "reporter": "geenensp"
        }
    ],
    "3833064": [
        {
            "dateadded": "2026-04-27 14:08:12 UTC",
            "url": "https://rn3tric-grid.sokla3ren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833064/",
            "reporter": "anonymous"
        }
    ],
    "3833063": [
        {
            "dateadded": "2026-04-27 14:05:09 UTC",
            "url": "https://4hs7joli.sokla3ren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833063/",
            "reporter": "anonymous"
        }
    ],
    "3833062": [
        {
            "dateadded": "2026-04-27 14:00:15 UTC",
            "url": "https://rydr.vex7lurin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 14:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833062/",
            "reporter": "anonymous"
        }
    ],
    "3833061": [
        {
            "dateadded": "2026-04-27 13:59:19 UTC",
            "url": "http://222.214.101.40:53694/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:59:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833061/",
            "reporter": "geenensp"
        }
    ],
    "3833060": [
        {
            "dateadded": "2026-04-27 13:59:18 UTC",
            "url": "http://112.93.203.27:32779/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:59:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833060/",
            "reporter": "geenensp"
        }
    ],
    "3833059": [
        {
            "dateadded": "2026-04-27 13:58:11 UTC",
            "url": "http://42.178.235.5:34541/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833059/",
            "reporter": "geenensp"
        }
    ],
    "3833058": [
        {
            "dateadded": "2026-04-27 13:58:10 UTC",
            "url": "https://m35h1-loop.vex7lurin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833058/",
            "reporter": "anonymous"
        }
    ],
    "3833057": [
        {
            "dateadded": "2026-04-27 13:55:15 UTC",
            "url": "https://cin3m2-frame.vex7lurin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833057/",
            "reporter": "anonymous"
        }
    ],
    "3833056": [
        {
            "dateadded": "2026-04-27 13:55:13 UTC",
            "url": "http://111.164.253.1:57439/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833056/",
            "reporter": "geenensp"
        }
    ],
    "3833055": [
        {
            "dateadded": "2026-04-27 13:51:13 UTC",
            "url": "https://knyo.vex7lurin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833055/",
            "reporter": "anonymous"
        }
    ],
    "3833054": [
        {
            "dateadded": "2026-04-27 13:47:08 UTC",
            "url": "https://hiddenbyt.vex7lurin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833054/",
            "reporter": "anonymous"
        }
    ],
    "3833053": [
        {
            "dateadded": "2026-04-27 13:45:15 UTC",
            "url": "http://110.85.108.221:41787/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833053/",
            "reporter": "geenensp"
        }
    ],
    "3833052": [
        {
            "dateadded": "2026-04-27 13:44:22 UTC",
            "url": "http://110.37.61.34:50710/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833052/",
            "reporter": "geenensp"
        }
    ],
    "3833051": [
        {
            "dateadded": "2026-04-27 13:37:09 UTC",
            "url": "https://quor-meshis.vex7lurin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833051/",
            "reporter": "anonymous"
        }
    ],
    "3833050": [
        {
            "dateadded": "2026-04-27 13:34:08 UTC",
            "url": "https://bcfapelw.mer4talon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833050/",
            "reporter": "anonymous"
        }
    ],
    "3833049": [
        {
            "dateadded": "2026-04-27 13:29:07 UTC",
            "url": "https://vitalpalette.mer4talon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833049/",
            "reporter": "anonymous"
        }
    ],
    "3833048": [
        {
            "dateadded": "2026-04-27 13:27:05 UTC",
            "url": "http://124.66.99.93:58559/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:27:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833048/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3833047": [
        {
            "dateadded": "2026-04-27 13:25:14 UTC",
            "url": "http://115.57.231.197:52795/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833047/",
            "reporter": "geenensp"
        }
    ],
    "3833046": [
        {
            "dateadded": "2026-04-27 13:23:13 UTC",
            "url": "http://117.211.44.13:39875/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833046/",
            "reporter": "geenensp"
        }
    ],
    "3833045": [
        {
            "dateadded": "2026-04-27 13:19:06 UTC",
            "url": "https://subtledust.mer4talon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833045/",
            "reporter": "anonymous"
        }
    ],
    "3833044": [
        {
            "dateadded": "2026-04-27 13:17:22 UTC",
            "url": "http://110.85.108.221:41787/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833044/",
            "reporter": "geenensp"
        }
    ],
    "3833043": [
        {
            "dateadded": "2026-04-27 13:17:07 UTC",
            "url": "http://175.167.243.126:36974/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:17:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833043/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3833042": [
        {
            "dateadded": "2026-04-27 13:16:08 UTC",
            "url": "https://sche9-track.mer4talon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833042/",
            "reporter": "anonymous"
        }
    ],
    "3833041": [
        {
            "dateadded": "2026-04-27 13:08:09 UTC",
            "url": "https://lumlithex.mer4talon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833041/",
            "reporter": "anonymous"
        }
    ],
    "3833040": [
        {
            "dateadded": "2026-04-27 13:07:20 UTC",
            "url": "http://196.189.197.131:45432/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:07:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833040/",
            "reporter": "geenensp"
        }
    ],
    "3833039": [
        {
            "dateadded": "2026-04-27 13:04:12 UTC",
            "url": "https://clif7-bridge.mer4talon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 13:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833039/",
            "reporter": "anonymous"
        }
    ],
    "3833038": [
        {
            "dateadded": "2026-04-27 13:03:14 UTC",
            "url": "http://117.211.44.13:39875/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833038/",
            "reporter": "geenensp"
        }
    ],
    "3833036": [
        {
            "dateadded": "2026-04-27 12:57:07 UTC",
            "url": "http://175.167.243.126:36974/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:57:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833036/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3833037": [
        {
            "dateadded": "2026-04-27 12:57:07 UTC",
            "url": "http://124.66.99.93:58559/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833037/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3833035": [
        {
            "dateadded": "2026-04-27 12:56:14 UTC",
            "url": "http://58.255.47.2:34846/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833035/",
            "reporter": "geenensp"
        }
    ],
    "3833034": [
        {
            "dateadded": "2026-04-27 12:56:13 UTC",
            "url": "http://110.39.246.127:33435/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833034/",
            "reporter": "geenensp"
        }
    ],
    "3833033": [
        {
            "dateadded": "2026-04-27 12:55:10 UTC",
            "url": "https://sterilebundle.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833033/",
            "reporter": "anonymous"
        }
    ],
    "3833032": [
        {
            "dateadded": "2026-04-27 12:54:20 UTC",
            "url": "http://115.57.231.197:52795/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833032/",
            "reporter": "geenensp"
        }
    ],
    "3833031": [
        {
            "dateadded": "2026-04-27 12:51:08 UTC",
            "url": "https://queryspecimen.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833031/",
            "reporter": "anonymous"
        }
    ],
    "3833030": [
        {
            "dateadded": "2026-04-27 12:49:12 UTC",
            "url": "http://120.28.137.87:50039/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833030/",
            "reporter": "geenensp"
        }
    ],
    "3833029": [
        {
            "dateadded": "2026-04-27 12:48:13 UTC",
            "url": "https://sortdynamic.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833029/",
            "reporter": "anonymous"
        }
    ],
    "3833028": [
        {
            "dateadded": "2026-04-27 12:47:26 UTC",
            "url": "http://73.163.164.37:55439/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:47:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833028/",
            "reporter": "geenensp"
        }
    ],
    "3833027": [
        {
            "dateadded": "2026-04-27 12:47:18 UTC",
            "url": "http://115.49.2.47:35247/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:47:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833027/",
            "reporter": "geenensp"
        }
    ],
    "3833026": [
        {
            "dateadded": "2026-04-27 12:45:21 UTC",
            "url": "http://119.189.192.199:58063/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833026/",
            "reporter": "geenensp"
        }
    ],
    "3833025": [
        {
            "dateadded": "2026-04-27 12:45:18 UTC",
            "url": "https://gatewa-qua.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833025/",
            "reporter": "anonymous"
        }
    ],
    "3833024": [
        {
            "dateadded": "2026-04-27 12:41:20 UTC",
            "url": "http://196.189.197.131:45432/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833024/",
            "reporter": "geenensp"
        }
    ],
    "3833023": [
        {
            "dateadded": "2026-04-27 12:41:13 UTC",
            "url": "https://xrcbdu11.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833023/",
            "reporter": "anonymous"
        }
    ],
    "3833022": [
        {
            "dateadded": "2026-04-27 12:38:26 UTC",
            "url": "http://123.10.59.4:57129/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833022/",
            "reporter": "geenensp"
        }
    ],
    "3833021": [
        {
            "dateadded": "2026-04-27 12:38:13 UTC",
            "url": "https://fa1thf6-gate.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833021/",
            "reporter": "anonymous"
        }
    ],
    "3833020": [
        {
            "dateadded": "2026-04-27 12:35:09 UTC",
            "url": "https://5urvey-spark.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833020/",
            "reporter": "anonymous"
        }
    ],
    "3833019": [
        {
            "dateadded": "2026-04-27 12:33:23 UTC",
            "url": "http://120.28.219.42:49517/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833019/",
            "reporter": "geenensp"
        }
    ],
    "3833018": [
        {
            "dateadded": "2026-04-27 12:32:08 UTC",
            "url": "http://123.13.147.16:44310/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833018/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3833017": [
        {
            "dateadded": "2026-04-27 12:31:22 UTC",
            "url": "http://37.112.234.154:47828/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833017/",
            "reporter": "geenensp"
        }
    ],
    "3833016": [
        {
            "dateadded": "2026-04-27 12:30:24 UTC",
            "url": "http://110.39.246.127:33435/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833016/",
            "reporter": "geenensp"
        }
    ],
    "3833015": [
        {
            "dateadded": "2026-04-27 12:27:13 UTC",
            "url": "https://lzukd.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833015/",
            "reporter": "anonymous"
        }
    ],
    "3833014": [
        {
            "dateadded": "2026-04-27 12:24:11 UTC",
            "url": "https://schem-mark.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833014/",
            "reporter": "anonymous"
        }
    ],
    "3833013": [
        {
            "dateadded": "2026-04-27 12:22:07 UTC",
            "url": "http://110.252.98.42:49352/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833013/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3833012": [
        {
            "dateadded": "2026-04-27 12:20:24 UTC",
            "url": "http://120.28.137.87:50039/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833012/",
            "reporter": "geenensp"
        }
    ],
    "3833011": [
        {
            "dateadded": "2026-04-27 12:18:20 UTC",
            "url": "http://115.49.2.47:35247/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833011/",
            "reporter": "geenensp"
        }
    ],
    "3833010": [
        {
            "dateadded": "2026-04-27 12:18:18 UTC",
            "url": "http://176.65.139.177/cat.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-177",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833010/",
            "reporter": "BlinkzSec"
        }
    ],
    "3833009": [
        {
            "dateadded": "2026-04-27 12:12:15 UTC",
            "url": "https://eswcaywn.judges-spire.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833009/",
            "reporter": "anonymous"
        }
    ],
    "3833008": [
        {
            "dateadded": "2026-04-27 12:08:17 UTC",
            "url": "http://123.13.39.228:52088/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833008/",
            "reporter": "geenensp"
        }
    ],
    "3833007": [
        {
            "dateadded": "2026-04-27 12:07:11 UTC",
            "url": "https://columdee.judges-spire.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833007/",
            "reporter": "anonymous"
        }
    ],
    "3833006": [
        {
            "dateadded": "2026-04-27 12:06:22 UTC",
            "url": "http://119.189.192.199:58063/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833006/",
            "reporter": "geenensp"
        }
    ],
    "3833005": [
        {
            "dateadded": "2026-04-27 12:03:16 UTC",
            "url": "http://42.58.218.21:60383/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833005/",
            "reporter": "geenensp"
        }
    ],
    "3833004": [
        {
            "dateadded": "2026-04-27 12:02:22 UTC",
            "url": "http://120.28.219.42:49517/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833004/",
            "reporter": "geenensp"
        }
    ],
    "3833003": [
        {
            "dateadded": "2026-04-27 12:02:21 UTC",
            "url": "http://66.212.185.81:42543/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833003/",
            "reporter": "geenensp"
        }
    ],
    "3833002": [
        {
            "dateadded": "2026-04-27 12:02:14 UTC",
            "url": "https://genomeobserver.judges-spire.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833002/",
            "reporter": "anonymous"
        }
    ],
    "3833001": [
        {
            "dateadded": "2026-04-27 12:01:22 UTC",
            "url": "http://222.142.68.20:33589/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833001/",
            "reporter": "geenensp"
        }
    ],
    "3833000": [
        {
            "dateadded": "2026-04-27 12:00:28 UTC",
            "url": "http://113.239.6.98:41199/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3833000/",
            "reporter": "geenensp"
        }
    ],
    "3832999": [
        {
            "dateadded": "2026-04-27 11:57:19 UTC",
            "url": "http://182.121.186.236:56347/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832999/",
            "reporter": "geenensp"
        }
    ],
    "3832998": [
        {
            "dateadded": "2026-04-27 11:56:15 UTC",
            "url": "https://nor-lithix.judges-spire.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832998/",
            "reporter": "anonymous"
        }
    ],
    "3832997": [
        {
            "dateadded": "2026-04-27 11:55:18 UTC",
            "url": "http://39.90.147.47:58334/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832997/",
            "reporter": "geenensp"
        }
    ],
    "3832996": [
        {
            "dateadded": "2026-04-27 11:50:16 UTC",
            "url": "https://arkcoreix.judges-spire.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832996/",
            "reporter": "anonymous"
        }
    ],
    "3832995": [
        {
            "dateadded": "2026-04-27 11:44:13 UTC",
            "url": "https://tal-draet.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832995/",
            "reporter": "anonymous"
        }
    ],
    "3832994": [
        {
            "dateadded": "2026-04-27 11:41:27 UTC",
            "url": "http://39.90.147.47:58334/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832994/",
            "reporter": "geenensp"
        }
    ],
    "3832993": [
        {
            "dateadded": "2026-04-27 11:40:09 UTC",
            "url": "https://93f5qz.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832993/",
            "reporter": "anonymous"
        }
    ],
    "3832992": [
        {
            "dateadded": "2026-04-27 11:38:23 UTC",
            "url": "http://115.55.55.254:40797/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832992/",
            "reporter": "geenensp"
        }
    ],
    "3832991": [
        {
            "dateadded": "2026-04-27 11:36:13 UTC",
            "url": "https://23ofcfv.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832991/",
            "reporter": "anonymous"
        }
    ],
    "3832990": [
        {
            "dateadded": "2026-04-27 11:35:19 UTC",
            "url": "http://115.55.55.254:40797/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832990/",
            "reporter": "geenensp"
        }
    ],
    "3832989": [
        {
            "dateadded": "2026-04-27 11:35:18 UTC",
            "url": "http://66.212.185.81:42543/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832989/",
            "reporter": "geenensp"
        }
    ],
    "3832988": [
        {
            "dateadded": "2026-04-27 11:33:12 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_d3e84787a97146b9abcfef73b43d6532.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832988/",
            "reporter": "abuse_ch"
        }
    ],
    "3832987": [
        {
            "dateadded": "2026-04-27 11:27:13 UTC",
            "url": "https://daemon-hill.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832987/",
            "reporter": "anonymous"
        }
    ],
    "3832986": [
        {
            "dateadded": "2026-04-27 11:20:09 UTC",
            "url": "http://91.92.241.243/files/file_db7515e10aba84f0.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "54e64e",
                "dropped-by-amadey",
                "Stealc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832986/",
            "reporter": "Bitsight"
        }
    ],
    "3832985": [
        {
            "dateadded": "2026-04-27 11:15:21 UTC",
            "url": "http://110.37.95.117:48552/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832985/",
            "reporter": "geenensp"
        }
    ],
    "3832984": [
        {
            "dateadded": "2026-04-27 11:15:15 UTC",
            "url": "https://kelforgeet4.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832984/",
            "reporter": "anonymous"
        }
    ],
    "3832983": [
        {
            "dateadded": "2026-04-27 11:11:24 UTC",
            "url": "http://60.22.49.203:48413/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832983/",
            "reporter": "geenensp"
        }
    ],
    "3832982": [
        {
            "dateadded": "2026-04-27 11:10:12 UTC",
            "url": "https://aq4saw1.khudrukmumb1es.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832982/",
            "reporter": "anonymous"
        }
    ],
    "3832981": [
        {
            "dateadded": "2026-04-27 11:08:24 UTC",
            "url": "http://193.233.202.17:8080/svchost_update.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:24 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832981/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832980": [
        {
            "dateadded": "2026-04-27 11:08:13 UTC",
            "url": "http://193.233.202.17:8080/update.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832980/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832975": [
        {
            "dateadded": "2026-04-27 11:08:12 UTC",
            "url": "http://193.233.202.17:8080/svcload.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832975/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832976": [
        {
            "dateadded": "2026-04-27 11:08:12 UTC",
            "url": "http://193.233.202.17:8080/ws37.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832976/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832977": [
        {
            "dateadded": "2026-04-27 11:08:12 UTC",
            "url": "http://193.233.202.17:8080/assa161_new.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832977/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832978": [
        {
            "dateadded": "2026-04-27 11:08:12 UTC",
            "url": "http://193.233.202.17:8080/da_shell_39.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832978/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832979": [
        {
            "dateadded": "2026-04-27 11:08:12 UTC",
            "url": "http://193.233.202.17:8080/arc39_new.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-202-17-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832979/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832974": [
        {
            "dateadded": "2026-04-27 11:05:16 UTC",
            "url": "https://velcrestos8.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832974/",
            "reporter": "anonymous"
        }
    ],
    "3832973": [
        {
            "dateadded": "2026-04-27 10:59:16 UTC",
            "url": "http://182.121.186.236:56347/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832973/",
            "reporter": "geenensp"
        }
    ],
    "3832972": [
        {
            "dateadded": "2026-04-27 10:59:09 UTC",
            "url": "https://reed8-drive.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832972/",
            "reporter": "anonymous"
        }
    ],
    "3832971": [
        {
            "dateadded": "2026-04-27 10:55:10 UTC",
            "url": "http://46.226.166.203/uzbot/Barcha%20to%e2%80%98liq%20videolar.apk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "46-226-166-203",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832971/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832969": [
        {
            "dateadded": "2026-04-27 10:55:09 UTC",
            "url": "http://46.226.166.203/uzbot/Intim%20videolar%20arxivi%2020_042026.apk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "46-226-166-203",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832969/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832970": [
        {
            "dateadded": "2026-04-27 10:55:09 UTC",
            "url": "http://46.226.166.203/uzbot/Barcha%20to%e2%80%98liq%20videolar%f0%9f%94%9e.apk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "46-226-166-203",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832970/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832968": [
        {
            "dateadded": "2026-04-27 10:52:08 UTC",
            "url": "https://v0ya1-cast.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832968/",
            "reporter": "anonymous"
        }
    ],
    "3832967": [
        {
            "dateadded": "2026-04-27 10:52:07 UTC",
            "url": "http://196.190.69.149:56255/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832967/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832966": [
        {
            "dateadded": "2026-04-27 10:51:21 UTC",
            "url": "http://110.37.95.117:48552/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832966/",
            "reporter": "geenensp"
        }
    ],
    "3832965": [
        {
            "dateadded": "2026-04-27 10:48:12 UTC",
            "url": "https://x9xus7.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832965/",
            "reporter": "anonymous"
        }
    ],
    "3832964": [
        {
            "dateadded": "2026-04-27 10:47:20 UTC",
            "url": "http://123.13.39.228:52088/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832964/",
            "reporter": "geenensp"
        }
    ],
    "3832963": [
        {
            "dateadded": "2026-04-27 10:46:13 UTC",
            "url": "http://182.119.123.32:37490/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832963/",
            "reporter": "geenensp"
        }
    ],
    "3832962": [
        {
            "dateadded": "2026-04-27 10:42:07 UTC",
            "url": "http://182.126.83.121:51122/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832962/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832961": [
        {
            "dateadded": "2026-04-27 10:41:10 UTC",
            "url": "https://talnexal2.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832961/",
            "reporter": "anonymous"
        }
    ],
    "3832960": [
        {
            "dateadded": "2026-04-27 10:39:19 UTC",
            "url": "http://27.37.103.135:60780/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832960/",
            "reporter": "geenensp"
        }
    ],
    "3832959": [
        {
            "dateadded": "2026-04-27 10:38:09 UTC",
            "url": "http://42.229.232.234:53524/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832959/",
            "reporter": "geenensp"
        }
    ],
    "3832958": [
        {
            "dateadded": "2026-04-27 10:32:08 UTC",
            "url": "https://yaisxm.pares-system.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832958/",
            "reporter": "anonymous"
        }
    ],
    "3832957": [
        {
            "dateadded": "2026-04-27 10:32:06 UTC",
            "url": "http://196.190.69.149:56255/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832957/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832956": [
        {
            "dateadded": "2026-04-27 10:27:08 UTC",
            "url": "http://182.126.83.121:51122/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832956/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832955": [
        {
            "dateadded": "2026-04-27 10:26:17 UTC",
            "url": "http://42.59.86.111:44283/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832955/",
            "reporter": "geenensp"
        }
    ],
    "3832954": [
        {
            "dateadded": "2026-04-27 10:25:23 UTC",
            "url": "http://182.119.123.32:37490/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832954/",
            "reporter": "geenensp"
        }
    ],
    "3832953": [
        {
            "dateadded": "2026-04-27 10:22:07 UTC",
            "url": "https://ejge.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832953/",
            "reporter": "anonymous"
        }
    ],
    "3832952": [
        {
            "dateadded": "2026-04-27 10:21:20 UTC",
            "url": "http://123.13.3.183:34746/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832952/",
            "reporter": "geenensp"
        }
    ],
    "3832951": [
        {
            "dateadded": "2026-04-27 10:16:09 UTC",
            "url": "https://tj0x.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832951/",
            "reporter": "anonymous"
        }
    ],
    "3832950": [
        {
            "dateadded": "2026-04-27 10:12:12 UTC",
            "url": "https://campaigndefen.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832950/",
            "reporter": "anonymous"
        }
    ],
    "3832949": [
        {
            "dateadded": "2026-04-27 10:09:14 UTC",
            "url": "https://frwyaofu.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832949/",
            "reporter": "anonymous"
        }
    ],
    "3832948": [
        {
            "dateadded": "2026-04-27 10:02:07 UTC",
            "url": "http://123.5.124.21:32938/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832948/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832947": [
        {
            "dateadded": "2026-04-27 10:00:17 UTC",
            "url": "https://loose-mount.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 10:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832947/",
            "reporter": "anonymous"
        }
    ],
    "3832946": [
        {
            "dateadded": "2026-04-27 09:55:15 UTC",
            "url": "http://92.88.98.199/GuruITDDoS/RpcSecurity.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:34 UTC",
            "threat": "malware_download",
            "tags": [
                "64-bit",
                "elf",
                "mirai",
                "x86-64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832946/",
            "reporter": "geenensp"
        }
    ],
    "3832945": [
        {
            "dateadded": "2026-04-27 09:54:10 UTC",
            "url": "https://pb6cs.eggman8eisha.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832945/",
            "reporter": "anonymous"
        }
    ],
    "3832944": [
        {
            "dateadded": "2026-04-27 09:52:06 UTC",
            "url": "http://39.86.84.13:44787/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832944/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832943": [
        {
            "dateadded": "2026-04-27 09:49:22 UTC",
            "url": "http://123.189.23.213:53655/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832943/",
            "reporter": "geenensp"
        }
    ],
    "3832942": [
        {
            "dateadded": "2026-04-27 09:48:07 UTC",
            "url": "https://culturebrook.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832942/",
            "reporter": "anonymous"
        }
    ],
    "3832940": [
        {
            "dateadded": "2026-04-27 09:47:07 UTC",
            "url": "http://113.230.24.170:35476/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832940/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832941": [
        {
            "dateadded": "2026-04-27 09:47:07 UTC",
            "url": "http://42.176.198.13:58513/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832941/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832939": [
        {
            "dateadded": "2026-04-27 09:42:07 UTC",
            "url": "https://4wyk.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832939/",
            "reporter": "anonymous"
        }
    ],
    "3832938": [
        {
            "dateadded": "2026-04-27 09:37:08 UTC",
            "url": "https://yj97hpfx.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832938/",
            "reporter": "anonymous"
        }
    ],
    "3832937": [
        {
            "dateadded": "2026-04-27 09:37:07 UTC",
            "url": "http://123.11.0.41:45611/i",
            "url_status": "offline",
            "last_online": "2026-04-27 09:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832937/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832936": [
        {
            "dateadded": "2026-04-27 09:34:07 UTC",
            "url": "https://sx56boo.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832936/",
            "reporter": "anonymous"
        }
    ],
    "3832935": [
        {
            "dateadded": "2026-04-27 09:33:20 UTC",
            "url": "http://27.14.213.227:43443/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832935/",
            "reporter": "geenensp"
        }
    ],
    "3832934": [
        {
            "dateadded": "2026-04-27 09:32:22 UTC",
            "url": "http://39.86.84.13:44787/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832934/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832933": [
        {
            "dateadded": "2026-04-27 09:32:09 UTC",
            "url": "http://123.11.0.41:45611/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 09:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832933/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832932": [
        {
            "dateadded": "2026-04-27 09:32:07 UTC",
            "url": "http://110.37.68.195:40711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 09:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832932/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832931": [
        {
            "dateadded": "2026-04-27 09:24:24 UTC",
            "url": "http://27.14.213.227:43443/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832931/",
            "reporter": "geenensp"
        }
    ],
    "3832930": [
        {
            "dateadded": "2026-04-27 09:24:14 UTC",
            "url": "https://biomecave.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832930/",
            "reporter": "anonymous"
        }
    ],
    "3832929": [
        {
            "dateadded": "2026-04-27 09:20:19 UTC",
            "url": "http://42.239.154.170:59243/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832929/",
            "reporter": "geenensp"
        }
    ],
    "3832928": [
        {
            "dateadded": "2026-04-27 09:17:09 UTC",
            "url": "https://2585gqld.incub-teahouse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832928/",
            "reporter": "anonymous"
        }
    ],
    "3832926": [
        {
            "dateadded": "2026-04-27 09:16:17 UTC",
            "url": "http://115.57.248.167:34210/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832926/",
            "reporter": "geenensp"
        }
    ],
    "3832927": [
        {
            "dateadded": "2026-04-27 09:16:17 UTC",
            "url": "http://219.155.200.56:44669/i",
            "url_status": "offline",
            "last_online": "2026-04-27 09:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832927/",
            "reporter": "geenensp"
        }
    ],
    "3832925": [
        {
            "dateadded": "2026-04-27 09:15:12 UTC",
            "url": "http://110.39.237.185:45451/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832925/",
            "reporter": "geenensp"
        }
    ],
    "3832924": [
        {
            "dateadded": "2026-04-27 09:12:08 UTC",
            "url": "https://keltideal.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832924/",
            "reporter": "anonymous"
        }
    ],
    "3832923": [
        {
            "dateadded": "2026-04-27 09:07:06 UTC",
            "url": "http://123.10.232.238:40556/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832923/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832922": [
        {
            "dateadded": "2026-04-27 09:06:10 UTC",
            "url": "https://massivedisco.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832922/",
            "reporter": "anonymous"
        }
    ],
    "3832921": [
        {
            "dateadded": "2026-04-27 09:02:09 UTC",
            "url": "https://jp4j.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 09:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832921/",
            "reporter": "anonymous"
        }
    ],
    "3832920": [
        {
            "dateadded": "2026-04-27 08:57:13 UTC",
            "url": "http://202.62.41.165:13217/.i",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:56 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832920/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832919": [
        {
            "dateadded": "2026-04-27 08:55:13 UTC",
            "url": "https://kel-coreex.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832919/",
            "reporter": "anonymous"
        }
    ],
    "3832918": [
        {
            "dateadded": "2026-04-27 08:53:12 UTC",
            "url": "http://115.57.248.167:34210/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832918/",
            "reporter": "geenensp"
        }
    ],
    "3832917": [
        {
            "dateadded": "2026-04-27 08:50:10 UTC",
            "url": "https://17393sm.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832917/",
            "reporter": "anonymous"
        }
    ],
    "3832916": [
        {
            "dateadded": "2026-04-27 08:47:06 UTC",
            "url": "http://123.10.232.238:40556/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832916/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832915": [
        {
            "dateadded": "2026-04-27 08:44:13 UTC",
            "url": "https://reelfla.asso7tunexpl.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832915/",
            "reporter": "anonymous"
        }
    ],
    "3832914": [
        {
            "dateadded": "2026-04-27 08:39:13 UTC",
            "url": "https://kidjo.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832914/",
            "reporter": "anonymous"
        }
    ],
    "3832913": [
        {
            "dateadded": "2026-04-27 08:34:11 UTC",
            "url": "https://f532v.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832913/",
            "reporter": "anonymous"
        }
    ],
    "3832912": [
        {
            "dateadded": "2026-04-27 08:28:09 UTC",
            "url": "https://surve-chain.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832912/",
            "reporter": "anonymous"
        }
    ],
    "3832911": [
        {
            "dateadded": "2026-04-27 08:27:10 UTC",
            "url": "https://hot13oct.blogspot.com/dudu.docx.pdf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832911/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3832910": [
        {
            "dateadded": "2026-04-27 08:27:07 UTC",
            "url": "https://hot13oct.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832910/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3832909": [
        {
            "dateadded": "2026-04-27 08:27:05 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_a39f713f8cbc4bf59319a1dcf3145247.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832909/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3832908": [
        {
            "dateadded": "2026-04-27 08:27:03 UTC",
            "url": "https://carrefban.portailcnnt.sbs/cas/education.gouv",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832908/",
            "reporter": "ehuguet45"
        }
    ],
    "3832907": [
        {
            "dateadded": "2026-04-27 08:26:20 UTC",
            "url": "http://175.165.83.124:55254/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832907/",
            "reporter": "geenensp"
        }
    ],
    "3832906": [
        {
            "dateadded": "2026-04-27 08:25:09 UTC",
            "url": "https://crawlerstory.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832906/",
            "reporter": "anonymous"
        }
    ],
    "3832905": [
        {
            "dateadded": "2026-04-27 08:23:14 UTC",
            "url": "http://182.127.177.193:55020/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832905/",
            "reporter": "geenensp"
        }
    ],
    "3832904": [
        {
            "dateadded": "2026-04-27 08:14:17 UTC",
            "url": "https://dynvaleis.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832904/",
            "reporter": "anonymous"
        }
    ],
    "3832903": [
        {
            "dateadded": "2026-04-27 08:13:22 UTC",
            "url": "http://182.113.9.82:53154/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832903/",
            "reporter": "geenensp"
        }
    ],
    "3832902": [
        {
            "dateadded": "2026-04-27 08:11:07 UTC",
            "url": "https://traile-proc.oasis-reimburse.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832902/",
            "reporter": "anonymous"
        }
    ],
    "3832901": [
        {
            "dateadded": "2026-04-27 08:07:19 UTC",
            "url": "http://111.127.235.52:47753/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832901/",
            "reporter": "geenensp"
        }
    ],
    "3832900": [
        {
            "dateadded": "2026-04-27 08:07:18 UTC",
            "url": "http://27.207.189.110:58179/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832900/",
            "reporter": "geenensp"
        }
    ],
    "3832899": [
        {
            "dateadded": "2026-04-27 08:05:30 UTC",
            "url": "http://175.165.115.144:49360/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832899/",
            "reporter": "geenensp"
        }
    ],
    "3832898": [
        {
            "dateadded": "2026-04-27 08:01:09 UTC",
            "url": "https://trimeshum.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 08:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832898/",
            "reporter": "anonymous"
        }
    ],
    "3832896": [
        {
            "dateadded": "2026-04-27 08:00:26 UTC",
            "url": "http://182.127.177.193:55020/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832896/",
            "reporter": "geenensp"
        }
    ],
    "3832897": [
        {
            "dateadded": "2026-04-27 08:00:26 UTC",
            "url": "http://42.224.70.24:45652/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832897/",
            "reporter": "geenensp"
        }
    ],
    "3832895": [
        {
            "dateadded": "2026-04-27 07:55:09 UTC",
            "url": "https://broadfilte.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832895/",
            "reporter": "anonymous"
        }
    ],
    "3832894": [
        {
            "dateadded": "2026-04-27 07:53:15 UTC",
            "url": "http://112.246.22.170:45791/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832894/",
            "reporter": "geenensp"
        }
    ],
    "3832893": [
        {
            "dateadded": "2026-04-27 07:49:09 UTC",
            "url": "https://gathgolde.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832893/",
            "reporter": "anonymous"
        }
    ],
    "3832892": [
        {
            "dateadded": "2026-04-27 07:43:18 UTC",
            "url": "http://222.137.23.46:46179/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832892/",
            "reporter": "geenensp"
        }
    ],
    "3832891": [
        {
            "dateadded": "2026-04-27 07:43:15 UTC",
            "url": "https://wint3-array.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:43:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832891/",
            "reporter": "anonymous"
        }
    ],
    "3832890": [
        {
            "dateadded": "2026-04-27 07:42:09 UTC",
            "url": "http://27.37.115.249:43603/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832890/",
            "reporter": "geenensp"
        }
    ],
    "3832889": [
        {
            "dateadded": "2026-04-27 07:42:06 UTC",
            "url": "http://119.163.209.129:53129/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832889/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832888": [
        {
            "dateadded": "2026-04-27 07:41:16 UTC",
            "url": "http://175.147.226.202:33342/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832888/",
            "reporter": "geenensp"
        }
    ],
    "3832887": [
        {
            "dateadded": "2026-04-27 07:40:17 UTC",
            "url": "https://du5k-panel.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832887/",
            "reporter": "anonymous"
        }
    ],
    "3832886": [
        {
            "dateadded": "2026-04-27 07:31:26 UTC",
            "url": "http://112.246.22.170:45791/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832886/",
            "reporter": "geenensp"
        }
    ],
    "3832885": [
        {
            "dateadded": "2026-04-27 07:30:13 UTC",
            "url": "https://gent1-lab.exhumat8urgle.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832885/",
            "reporter": "anonymous"
        }
    ],
    "3832884": [
        {
            "dateadded": "2026-04-27 07:26:07 UTC",
            "url": "https://uwfw.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832884/",
            "reporter": "anonymous"
        }
    ],
    "3832883": [
        {
            "dateadded": "2026-04-27 07:25:20 UTC",
            "url": "http://105.186.143.102:42887/i",
            "url_status": "offline",
            "last_online": "2026-04-27 07:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832883/",
            "reporter": "geenensp"
        }
    ],
    "3832882": [
        {
            "dateadded": "2026-04-27 07:22:19 UTC",
            "url": "http://178.64.188.159:59663/i",
            "url_status": "offline",
            "last_online": "2026-04-27 07:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832882/",
            "reporter": "geenensp"
        }
    ],
    "3832881": [
        {
            "dateadded": "2026-04-27 07:21:10 UTC",
            "url": "https://meta-cl1p.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832881/",
            "reporter": "anonymous"
        }
    ],
    "3832880": [
        {
            "dateadded": "2026-04-27 07:14:20 UTC",
            "url": "http://175.147.226.202:33342/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832880/",
            "reporter": "geenensp"
        }
    ],
    "3832879": [
        {
            "dateadded": "2026-04-27 07:13:12 UTC",
            "url": "https://br4nd-forge.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832879/",
            "reporter": "anonymous"
        }
    ],
    "3832878": [
        {
            "dateadded": "2026-04-27 07:12:07 UTC",
            "url": "http://119.163.209.129:53129/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832878/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832877": [
        {
            "dateadded": "2026-04-27 07:05:22 UTC",
            "url": "http://182.126.206.124:39445/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832877/",
            "reporter": "geenensp"
        }
    ],
    "3832876": [
        {
            "dateadded": "2026-04-27 07:02:19 UTC",
            "url": "http://221.15.14.130:49273/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832876/",
            "reporter": "geenensp"
        }
    ],
    "3832875": [
        {
            "dateadded": "2026-04-27 07:02:13 UTC",
            "url": "https://norcresta.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 07:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832875/",
            "reporter": "anonymous"
        }
    ],
    "3832874": [
        {
            "dateadded": "2026-04-27 06:58:18 UTC",
            "url": "http://105.186.143.102:42887/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832874/",
            "reporter": "geenensp"
        }
    ],
    "3832873": [
        {
            "dateadded": "2026-04-27 06:57:15 UTC",
            "url": "https://5qpfwfow.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832873/",
            "reporter": "anonymous"
        }
    ],
    "3832872": [
        {
            "dateadded": "2026-04-27 06:53:19 UTC",
            "url": "http://42.85.247.56:49208/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832872/",
            "reporter": "geenensp"
        }
    ],
    "3832871": [
        {
            "dateadded": "2026-04-27 06:52:07 UTC",
            "url": "http://115.55.131.80:42979/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832871/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832870": [
        {
            "dateadded": "2026-04-27 06:51:17 UTC",
            "url": "https://trimeshor6.foot-ricochet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:51:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832870/",
            "reporter": "anonymous"
        }
    ],
    "3832869": [
        {
            "dateadded": "2026-04-27 06:46:09 UTC",
            "url": "https://qdacqez.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832869/",
            "reporter": "anonymous"
        }
    ],
    "3832868": [
        {
            "dateadded": "2026-04-27 06:44:09 UTC",
            "url": "https://theorymin.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832868/",
            "reporter": "anonymous"
        }
    ],
    "3832867": [
        {
            "dateadded": "2026-04-27 06:34:09 UTC",
            "url": "https://duskmor.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832867/",
            "reporter": "anonymous"
        }
    ],
    "3832866": [
        {
            "dateadded": "2026-04-27 06:29:08 UTC",
            "url": "http://60.23.193.75:53299/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832866/",
            "reporter": "geenensp"
        }
    ],
    "3832865": [
        {
            "dateadded": "2026-04-27 06:28:12 UTC",
            "url": "https://streamsol.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832865/",
            "reporter": "anonymous"
        }
    ],
    "3832864": [
        {
            "dateadded": "2026-04-27 06:22:10 UTC",
            "url": "https://vorline8et.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832864/",
            "reporter": "anonymous"
        }
    ],
    "3832863": [
        {
            "dateadded": "2026-04-27 06:21:09 UTC",
            "url": "http://113.228.109.3:34549/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832863/",
            "reporter": "geenensp"
        }
    ],
    "3832862": [
        {
            "dateadded": "2026-04-27 06:18:14 UTC",
            "url": "http://222.140.184.232:50276/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832862/",
            "reporter": "geenensp"
        }
    ],
    "3832861": [
        {
            "dateadded": "2026-04-27 06:18:13 UTC",
            "url": "http://115.50.94.254:35954/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832861/",
            "reporter": "geenensp"
        }
    ],
    "3832860": [
        {
            "dateadded": "2026-04-27 06:17:08 UTC",
            "url": "https://gdxmgmf8.sleazyhe2ded.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832860/",
            "reporter": "anonymous"
        }
    ],
    "3832859": [
        {
            "dateadded": "2026-04-27 06:12:13 UTC",
            "url": "https://open-2p.mivis-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832859/",
            "reporter": "anonymous"
        }
    ],
    "3832858": [
        {
            "dateadded": "2026-04-27 06:11:10 UTC",
            "url": "http://160.30.142.2:35903/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832858/",
            "reporter": "geenensp"
        }
    ],
    "3832857": [
        {
            "dateadded": "2026-04-27 06:10:18 UTC",
            "url": "http://113.228.109.3:34549/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832857/",
            "reporter": "geenensp"
        }
    ],
    "3832856": [
        {
            "dateadded": "2026-04-27 06:09:18 UTC",
            "url": "https://soft-berg-9.mivis-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 06:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832856/",
            "reporter": "anonymous"
        }
    ],
    "3832855": [
        {
            "dateadded": "2026-04-27 06:07:15 UTC",
            "url": "http://42.235.92.188:47608/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832855/",
            "reporter": "geenensp"
        }
    ],
    "3832854": [
        {
            "dateadded": "2026-04-27 06:07:06 UTC",
            "url": "http://222.127.154.221:48702/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832854/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832853": [
        {
            "dateadded": "2026-04-27 06:06:14 UTC",
            "url": "http://119.114.139.55:59775/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832853/",
            "reporter": "geenensp"
        }
    ],
    "3832852": [
        {
            "dateadded": "2026-04-27 05:59:17 UTC",
            "url": "http://42.224.168.70:60815/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:59:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832852/",
            "reporter": "geenensp"
        }
    ],
    "3832851": [
        {
            "dateadded": "2026-04-27 05:58:12 UTC",
            "url": "https://rouge-6.mivis-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832851/",
            "reporter": "anonymous"
        }
    ],
    "3832850": [
        {
            "dateadded": "2026-04-27 05:57:07 UTC",
            "url": "http://182.116.14.165:51635/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832850/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832849": [
        {
            "dateadded": "2026-04-27 05:53:07 UTC",
            "url": "https://petit-fire-5.mivis-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832849/",
            "reporter": "anonymous"
        }
    ],
    "3832848": [
        {
            "dateadded": "2026-04-27 05:52:07 UTC",
            "url": "http://59.103.116.117:46933/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832848/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832847": [
        {
            "dateadded": "2026-04-27 05:49:15 UTC",
            "url": "http://27.37.114.112:60944/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832847/",
            "reporter": "geenensp"
        }
    ],
    "3832846": [
        {
            "dateadded": "2026-04-27 05:47:09 UTC",
            "url": "https://bleu-3.mivis-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832846/",
            "reporter": "anonymous"
        }
    ],
    "3832845": [
        {
            "dateadded": "2026-04-27 05:46:22 UTC",
            "url": "http://182.117.107.234:34642/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832845/",
            "reporter": "geenensp"
        }
    ],
    "3832844": [
        {
            "dateadded": "2026-04-27 05:45:08 UTC",
            "url": "http://42.235.92.188:47608/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832844/",
            "reporter": "geenensp"
        }
    ],
    "3832843": [
        {
            "dateadded": "2026-04-27 05:44:15 UTC",
            "url": "http://175.165.84.192:41728/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832843/",
            "reporter": "geenensp"
        }
    ],
    "3832842": [
        {
            "dateadded": "2026-04-27 05:42:06 UTC",
            "url": "http://222.127.154.221:48702/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832842/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832841": [
        {
            "dateadded": "2026-04-27 05:41:14 UTC",
            "url": "https://dark-land-8b.mivis-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832841/",
            "reporter": "anonymous"
        }
    ],
    "3832840": [
        {
            "dateadded": "2026-04-27 05:41:08 UTC",
            "url": "http://119.114.139.55:59775/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832840/",
            "reporter": "geenensp"
        }
    ],
    "3832839": [
        {
            "dateadded": "2026-04-27 05:39:17 UTC",
            "url": "http://160.30.142.2:35903/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832839/",
            "reporter": "geenensp"
        }
    ],
    "3832838": [
        {
            "dateadded": "2026-04-27 05:36:12 UTC",
            "url": "https://haus-1.dexon-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832838/",
            "reporter": "anonymous"
        }
    ],
    "3832837": [
        {
            "dateadded": "2026-04-27 05:30:10 UTC",
            "url": "https://holz-baum-7k.dexon-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832837/",
            "reporter": "anonymous"
        }
    ],
    "3832836": [
        {
            "dateadded": "2026-04-27 05:27:06 UTC",
            "url": "http://59.103.116.117:46933/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832836/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832835": [
        {
            "dateadded": "2026-04-27 05:25:13 UTC",
            "url": "https://cdn-clouds.ru/download/",
            "url_status": "offline",
            "last_online": "2026-04-27 05:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "apk ",
                "mamont"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832835/",
            "reporter": "SanchoZZ"
        }
    ],
    "3832834": [
        {
            "dateadded": "2026-04-27 05:25:09 UTC",
            "url": "https://144.31.15.21/download/",
            "url_status": "offline",
            "last_online": "2026-04-27 05:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "apk ",
                "mamont"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832834/",
            "reporter": "SanchoZZ"
        }
    ],
    "3832833": [
        {
            "dateadded": "2026-04-27 05:24:12 UTC",
            "url": "https://vert-4.dexon-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832833/",
            "reporter": "anonymous"
        }
    ],
    "3832832": [
        {
            "dateadded": "2026-04-27 05:24:07 UTC",
            "url": "http://115.50.94.254:35954/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832832/",
            "reporter": "geenensp"
        }
    ],
    "3832831": [
        {
            "dateadded": "2026-04-27 05:23:15 UTC",
            "url": "http://110.39.225.86:55636/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832831/",
            "reporter": "geenensp"
        }
    ],
    "3832830": [
        {
            "dateadded": "2026-04-27 05:22:07 UTC",
            "url": "http://182.116.14.165:51635/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832830/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832829": [
        {
            "dateadded": "2026-04-27 05:21:06 UTC",
            "url": "http://175.167.160.207:57206/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832829/",
            "reporter": "geenensp"
        }
    ],
    "3832828": [
        {
            "dateadded": "2026-04-27 05:19:13 UTC",
            "url": "https://gold-mond-2.dexon-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832828/",
            "reporter": "anonymous"
        }
    ],
    "3832827": [
        {
            "dateadded": "2026-04-27 05:16:08 UTC",
            "url": "http://175.165.84.192:41728/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832827/",
            "reporter": "geenensp"
        }
    ],
    "3832826": [
        {
            "dateadded": "2026-04-27 05:15:10 UTC",
            "url": "http://176.106.241.72:47350/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832826/",
            "reporter": "geenensp"
        }
    ],
    "3832825": [
        {
            "dateadded": "2026-04-27 05:14:13 UTC",
            "url": "https://noir-9.dexon-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832825/",
            "reporter": "anonymous"
        }
    ],
    "3832824": [
        {
            "dateadded": "2026-04-27 05:12:10 UTC",
            "url": "http://42.238.241.170:55097/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832824/",
            "reporter": "geenensp"
        }
    ],
    "3832823": [
        {
            "dateadded": "2026-04-27 05:11:13 UTC",
            "url": "https://fast-star-5x.dexon-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832823/",
            "reporter": "anonymous"
        }
    ],
    "3832822": [
        {
            "dateadded": "2026-04-27 05:00:16 UTC",
            "url": "https://open-3n.noven-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 05:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832822/",
            "reporter": "anonymous"
        }
    ],
    "3832821": [
        {
            "dateadded": "2026-04-27 04:59:09 UTC",
            "url": "http://190.109.227.219:53829/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832821/",
            "reporter": "geenensp"
        }
    ],
    "3832820": [
        {
            "dateadded": "2026-04-27 04:57:12 UTC",
            "url": "http://27.37.26.103:48312/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832820/",
            "reporter": "geenensp"
        }
    ],
    "3832819": [
        {
            "dateadded": "2026-04-27 04:54:12 UTC",
            "url": "https://zeit-berg-8.noven-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832819/",
            "reporter": "anonymous"
        }
    ],
    "3832818": [
        {
            "dateadded": "2026-04-27 04:52:06 UTC",
            "url": "http://123.14.32.168:39781/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832818/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832817": [
        {
            "dateadded": "2026-04-27 04:48:09 UTC",
            "url": "https://kalt-5.noven-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832817/",
            "reporter": "anonymous"
        }
    ],
    "3832816": [
        {
            "dateadded": "2026-04-27 04:46:17 UTC",
            "url": "http://222.140.178.231:50647/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832816/",
            "reporter": "geenensp"
        }
    ],
    "3832815": [
        {
            "dateadded": "2026-04-27 04:45:08 UTC",
            "url": "http://91.92.241.243/files/file_a272baff45cae6c4.exe",
            "url_status": "offline",
            "last_online": "2026-04-27 04:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "54e64e",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832815/",
            "reporter": "Bitsight"
        }
    ],
    "3832814": [
        {
            "dateadded": "2026-04-27 04:44:07 UTC",
            "url": "https://soft-land-1.noven-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832814/",
            "reporter": "anonymous"
        }
    ],
    "3832813": [
        {
            "dateadded": "2026-04-27 04:43:15 UTC",
            "url": "http://175.167.160.207:57206/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832813/",
            "reporter": "geenensp"
        }
    ],
    "3832812": [
        {
            "dateadded": "2026-04-27 04:40:09 UTC",
            "url": "https://rouge-4.noven-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832812/",
            "reporter": "anonymous"
        }
    ],
    "3832811": [
        {
            "dateadded": "2026-04-27 04:33:11 UTC",
            "url": "http://190.109.227.219:53829/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832811/",
            "reporter": "geenensp"
        }
    ],
    "3832810": [
        {
            "dateadded": "2026-04-27 04:32:12 UTC",
            "url": "http://125.40.39.172:45417/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832810/",
            "reporter": "geenensp"
        }
    ],
    "3832809": [
        {
            "dateadded": "2026-04-27 04:31:10 UTC",
            "url": "http://115.55.226.202:40078/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832809/",
            "reporter": "geenensp"
        }
    ],
    "3832808": [
        {
            "dateadded": "2026-04-27 04:30:15 UTC",
            "url": "https://iron-fire-6s.noven-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832808/",
            "reporter": "anonymous"
        }
    ],
    "3832807": [
        {
            "dateadded": "2026-04-27 04:27:07 UTC",
            "url": "http://123.14.32.168:39781/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832807/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832806": [
        {
            "dateadded": "2026-04-27 04:27:06 UTC",
            "url": "http://115.63.8.202:45844/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832806/",
            "reporter": "geenensp"
        }
    ],
    "3832805": [
        {
            "dateadded": "2026-04-27 04:25:13 UTC",
            "url": "https://haus-2x.sylor-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832805/",
            "reporter": "anonymous"
        }
    ],
    "3832804": [
        {
            "dateadded": "2026-04-27 04:24:13 UTC",
            "url": "http://105.225.155.2:55977/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832804/",
            "reporter": "geenensp"
        }
    ],
    "3832803": [
        {
            "dateadded": "2026-04-27 04:17:07 UTC",
            "url": "https://dark-wald-3.sylor-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832803/",
            "reporter": "anonymous"
        }
    ],
    "3832802": [
        {
            "dateadded": "2026-04-27 04:12:07 UTC",
            "url": "http://125.41.104.139:47020/i",
            "url_status": "offline",
            "last_online": "2026-04-27 04:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832802/",
            "reporter": "geenensp"
        }
    ],
    "3832801": [
        {
            "dateadded": "2026-04-27 04:11:16 UTC",
            "url": "http://105.225.155.2:55977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832801/",
            "reporter": "geenensp"
        }
    ],
    "3832800": [
        {
            "dateadded": "2026-04-27 04:11:08 UTC",
            "url": "https://bleu-9.sylor-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832800/",
            "reporter": "anonymous"
        }
    ],
    "3832799": [
        {
            "dateadded": "2026-04-27 04:07:14 UTC",
            "url": "http://222.140.178.231:50647/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:51:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832799/",
            "reporter": "geenensp"
        }
    ],
    "3832798": [
        {
            "dateadded": "2026-04-27 04:04:15 UTC",
            "url": "http://125.40.39.172:45417/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832798/",
            "reporter": "geenensp"
        }
    ],
    "3832797": [
        {
            "dateadded": "2026-04-27 04:03:18 UTC",
            "url": "http://115.55.226.202:40078/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832797/",
            "reporter": "geenensp"
        }
    ],
    "3832796": [
        {
            "dateadded": "2026-04-27 04:03:11 UTC",
            "url": "https://holz-berg-5.sylor-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 04:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832796/",
            "reporter": "anonymous"
        }
    ],
    "3832795": [
        {
            "dateadded": "2026-04-27 04:02:15 UTC",
            "url": "http://115.63.8.202:45844/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832795/",
            "reporter": "geenensp"
        }
    ],
    "3832794": [
        {
            "dateadded": "2026-04-27 03:59:17 UTC",
            "url": "http://123.11.78.40:34397/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832794/",
            "reporter": "geenensp"
        }
    ],
    "3832793": [
        {
            "dateadded": "2026-04-27 03:58:07 UTC",
            "url": "http://115.63.151.175:49147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:11:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832793/",
            "reporter": "geenensp"
        }
    ],
    "3832792": [
        {
            "dateadded": "2026-04-27 03:58:06 UTC",
            "url": "https://vert-1.sylor-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:58:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832792/",
            "reporter": "anonymous"
        }
    ],
    "3832791": [
        {
            "dateadded": "2026-04-27 03:53:10 UTC",
            "url": "https://petit-star-8z.sylor-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832791/",
            "reporter": "anonymous"
        }
    ],
    "3832790": [
        {
            "dateadded": "2026-04-27 03:45:09 UTC",
            "url": "https://open-6.raxen-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832790/",
            "reporter": "anonymous"
        }
    ],
    "3832789": [
        {
            "dateadded": "2026-04-27 03:43:10 UTC",
            "url": "http://125.41.104.139:47020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 03:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832789/",
            "reporter": "geenensp"
        }
    ],
    "3832788": [
        {
            "dateadded": "2026-04-27 03:39:12 UTC",
            "url": "https://gold-land-4m.raxen-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832788/",
            "reporter": "anonymous"
        }
    ],
    "3832787": [
        {
            "dateadded": "2026-04-27 03:31:09 UTC",
            "url": "https://noir-2.raxen-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832787/",
            "reporter": "anonymous"
        }
    ],
    "3832786": [
        {
            "dateadded": "2026-04-27 03:29:19 UTC",
            "url": "http://192.21.160.221:42411/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832786/",
            "reporter": "botnetkiller"
        }
    ],
    "3832785": [
        {
            "dateadded": "2026-04-27 03:27:14 UTC",
            "url": "http://182.116.117.162:37931/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832785/",
            "reporter": "geenensp"
        }
    ],
    "3832784": [
        {
            "dateadded": "2026-04-27 03:27:07 UTC",
            "url": "http://125.44.43.28:49287/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832784/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832783": [
        {
            "dateadded": "2026-04-27 03:26:07 UTC",
            "url": "https://fast-fire-9.raxen-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832783/",
            "reporter": "anonymous"
        }
    ],
    "3832782": [
        {
            "dateadded": "2026-04-27 03:20:10 UTC",
            "url": "https://zeit-5.raxen-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832782/",
            "reporter": "anonymous"
        }
    ],
    "3832781": [
        {
            "dateadded": "2026-04-27 03:18:11 UTC",
            "url": "http://182.114.198.247:41420/i",
            "url_status": "offline",
            "last_online": "2026-04-27 03:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832781/",
            "reporter": "geenensp"
        }
    ],
    "3832780": [
        {
            "dateadded": "2026-04-27 03:15:10 UTC",
            "url": "https://blue-mond-3k.raxen-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832780/",
            "reporter": "anonymous"
        }
    ],
    "3832779": [
        {
            "dateadded": "2026-04-27 03:14:10 UTC",
            "url": "http://61.52.157.229:44309/i",
            "url_status": "offline",
            "last_online": "2026-04-27 03:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832779/",
            "reporter": "geenensp"
        }
    ],
    "3832777": [
        {
            "dateadded": "2026-04-27 03:14:09 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832777/",
            "reporter": "botnetkiller"
        }
    ],
    "3832778": [
        {
            "dateadded": "2026-04-27 03:14:09 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832778/",
            "reporter": "botnetkiller"
        }
    ],
    "3832776": [
        {
            "dateadded": "2026-04-27 03:13:06 UTC",
            "url": "https://haus-7v.zexis-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832776/",
            "reporter": "anonymous"
        }
    ],
    "3832775": [
        {
            "dateadded": "2026-04-27 03:09:13 UTC",
            "url": "http://happytugsbakery.com/x",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832775/",
            "reporter": "botnetkiller"
        }
    ],
    "3832774": [
        {
            "dateadded": "2026-04-27 03:05:08 UTC",
            "url": "https://dark-berg-1.zexis-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 03:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832774/",
            "reporter": "anonymous"
        }
    ],
    "3832773": [
        {
            "dateadded": "2026-04-27 02:58:16 UTC",
            "url": "http://222.142.202.125:34260/i",
            "url_status": "offline",
            "last_online": "2026-04-27 02:58:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832773/",
            "reporter": "geenensp"
        }
    ],
    "3832772": [
        {
            "dateadded": "2026-04-27 02:56:06 UTC",
            "url": "https://kalt-8.zexis-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:56:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832772/",
            "reporter": "anonymous"
        }
    ],
    "3832771": [
        {
            "dateadded": "2026-04-27 02:51:07 UTC",
            "url": "https://soft-wald-2.zexis-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832771/",
            "reporter": "anonymous"
        }
    ],
    "3832769": [
        {
            "dateadded": "2026-04-27 02:48:14 UTC",
            "url": "http://79.106.231.163:48147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:18:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832769/",
            "reporter": "geenensp"
        }
    ],
    "3832770": [
        {
            "dateadded": "2026-04-27 02:48:14 UTC",
            "url": "https://rouge-5.zexis-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832770/",
            "reporter": "anonymous"
        }
    ],
    "3832768": [
        {
            "dateadded": "2026-04-27 02:47:13 UTC",
            "url": "http://182.114.198.247:41420/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 02:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832768/",
            "reporter": "geenensp"
        }
    ],
    "3832767": [
        {
            "dateadded": "2026-04-27 02:37:09 UTC",
            "url": "https://iron-land-9q.zexis-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832767/",
            "reporter": "anonymous"
        }
    ],
    "3832766": [
        {
            "dateadded": "2026-04-27 02:31:11 UTC",
            "url": "http://178.141.30.134:2145/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832766/",
            "reporter": "geenensp"
        }
    ],
    "3832765": [
        {
            "dateadded": "2026-04-27 02:26:11 UTC",
            "url": "https://open-1x.qivor-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832765/",
            "reporter": "anonymous"
        }
    ],
    "3832764": [
        {
            "dateadded": "2026-04-27 02:21:10 UTC",
            "url": "https://petit-zeit-4.qivor-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832764/",
            "reporter": "anonymous"
        }
    ],
    "3832763": [
        {
            "dateadded": "2026-04-27 02:17:08 UTC",
            "url": "http://120.28.194.30:41117/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832763/",
            "reporter": "geenensp"
        }
    ],
    "3832762": [
        {
            "dateadded": "2026-04-27 02:16:07 UTC",
            "url": "https://noir-6.qivor-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832762/",
            "reporter": "anonymous"
        }
    ],
    "3832761": [
        {
            "dateadded": "2026-04-27 02:12:12 UTC",
            "url": "http://27.207.145.175:34143/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832761/",
            "reporter": "geenensp"
        }
    ],
    "3832760": [
        {
            "dateadded": "2026-04-27 02:11:08 UTC",
            "url": "https://holz-berg-3.qivor-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832760/",
            "reporter": "anonymous"
        }
    ],
    "3832759": [
        {
            "dateadded": "2026-04-27 02:08:09 UTC",
            "url": "https://vert-8.qivor-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 02:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832759/",
            "reporter": "anonymous"
        }
    ],
    "3832757": [
        {
            "dateadded": "2026-04-27 01:57:08 UTC",
            "url": "http://27.207.145.175:34143/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 01:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832757/",
            "reporter": "geenensp"
        }
    ],
    "3832758": [
        {
            "dateadded": "2026-04-27 01:57:08 UTC",
            "url": "https://gold-star-2s.qivor-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832758/",
            "reporter": "anonymous"
        }
    ],
    "3832756": [
        {
            "dateadded": "2026-04-27 01:55:08 UTC",
            "url": "https://fast-7.mivon-data.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832756/",
            "reporter": "anonymous"
        }
    ],
    "3832754": [
        {
            "dateadded": "2026-04-27 01:54:15 UTC",
            "url": "http://123.11.205.247:53767/i",
            "url_status": "offline",
            "last_online": "2026-04-27 01:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832754/",
            "reporter": "geenensp"
        }
    ],
    "3832755": [
        {
            "dateadded": "2026-04-27 01:54:15 UTC",
            "url": "http://115.55.176.141:40176/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832755/",
            "reporter": "geenensp"
        }
    ],
    "3832753": [
        {
            "dateadded": "2026-04-27 01:51:15 UTC",
            "url": "http://120.28.194.30:41117/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832753/",
            "reporter": "geenensp"
        }
    ],
    "3832752": [
        {
            "dateadded": "2026-04-27 01:49:12 UTC",
            "url": "http://42.178.125.25:36319/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832752/",
            "reporter": "geenensp"
        }
    ],
    "3832751": [
        {
            "dateadded": "2026-04-27 01:45:18 UTC",
            "url": "http://171.81.102.2:49238/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832751/",
            "reporter": "geenensp"
        }
    ],
    "3832750": [
        {
            "dateadded": "2026-04-27 01:43:06 UTC",
            "url": "https://wald-baum-1.mivon-data.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832750/",
            "reporter": "anonymous"
        }
    ],
    "3832749": [
        {
            "dateadded": "2026-04-27 01:38:10 UTC",
            "url": "https://bleu-4k.mivon-data.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832749/",
            "reporter": "anonymous"
        }
    ],
    "3832748": [
        {
            "dateadded": "2026-04-27 01:32:07 UTC",
            "url": "https://zeit-land-9.mivon-data.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832748/",
            "reporter": "anonymous"
        }
    ],
    "3832747": [
        {
            "dateadded": "2026-04-27 01:29:13 UTC",
            "url": "https://haus-6.mivon-data.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832747/",
            "reporter": "anonymous"
        }
    ],
    "3832746": [
        {
            "dateadded": "2026-04-27 01:28:06 UTC",
            "url": "http://91.92.241.243/files/file_53bb5fbf7030800d.exe",
            "url_status": "offline",
            "last_online": "2026-04-27 01:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "54e64e",
                "CoinMiner",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832746/",
            "reporter": "Bitsight"
        }
    ],
    "3832745": [
        {
            "dateadded": "2026-04-27 01:27:08 UTC",
            "url": "http://91.92.241.243/files/file_c8e4af3ea647650f.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:32 UTC",
            "threat": "malware_download",
            "tags": [
                "54e64e",
                "CoinMiner",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832745/",
            "reporter": "Bitsight"
        }
    ],
    "3832744": [
        {
            "dateadded": "2026-04-27 01:20:14 UTC",
            "url": "https://blue-fire-3w.mivon-data.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832744/",
            "reporter": "anonymous"
        }
    ],
    "3832743": [
        {
            "dateadded": "2026-04-27 01:19:09 UTC",
            "url": "http://111.127.235.52:47753/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832743/",
            "reporter": "geenensp"
        }
    ],
    "3832742": [
        {
            "dateadded": "2026-04-27 01:17:14 UTC",
            "url": "http://88.88.191.25:4472/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832742/",
            "reporter": "geenensp"
        }
    ],
    "3832741": [
        {
            "dateadded": "2026-04-27 01:13:08 UTC",
            "url": "https://iron-8.bexis-cloud.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832741/",
            "reporter": "anonymous"
        }
    ],
    "3832740": [
        {
            "dateadded": "2026-04-27 01:08:08 UTC",
            "url": "https://petit-mond-5.bexis-cloud.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 01:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832740/",
            "reporter": "anonymous"
        }
    ],
    "3832739": [
        {
            "dateadded": "2026-04-27 00:59:12 UTC",
            "url": "https://soft-2.bexis-cloud.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832739/",
            "reporter": "anonymous"
        }
    ],
    "3832738": [
        {
            "dateadded": "2026-04-27 00:57:09 UTC",
            "url": "http://171.81.102.2:49238/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832738/",
            "reporter": "geenensp"
        }
    ],
    "3832737": [
        {
            "dateadded": "2026-04-27 00:55:16 UTC",
            "url": "http://42.178.125.25:36319/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832737/",
            "reporter": "geenensp"
        }
    ],
    "3832736": [
        {
            "dateadded": "2026-04-27 00:54:09 UTC",
            "url": "https://kalt-berg-7.bexis-cloud.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832736/",
            "reporter": "anonymous"
        }
    ],
    "3832735": [
        {
            "dateadded": "2026-04-27 00:48:12 UTC",
            "url": "https://rouge-4v.bexis-cloud.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832735/",
            "reporter": "anonymous"
        }
    ],
    "3832734": [
        {
            "dateadded": "2026-04-27 00:43:06 UTC",
            "url": "https://dark-star-1.bexis-cloud.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832734/",
            "reporter": "anonymous"
        }
    ],
    "3832733": [
        {
            "dateadded": "2026-04-27 00:38:16 UTC",
            "url": "http://31.57.109.131/scripts/xmrig.tar.gz",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:17 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832733/",
            "reporter": "botnetkiller"
        }
    ],
    "3832732": [
        {
            "dateadded": "2026-04-27 00:37:14 UTC",
            "url": "http://31.57.109.131/scripts/watcher",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:51 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832732/",
            "reporter": "botnetkiller"
        }
    ],
    "3832731": [
        {
            "dateadded": "2026-04-27 00:36:13 UTC",
            "url": "https://open-9.vortex-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832731/",
            "reporter": "anonymous"
        }
    ],
    "3832730": [
        {
            "dateadded": "2026-04-27 00:34:14 UTC",
            "url": "http://125.43.231.105:37998/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:49:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832730/",
            "reporter": "geenensp"
        }
    ],
    "3832729": [
        {
            "dateadded": "2026-04-27 00:31:14 UTC",
            "url": "http://119.52.131.178:54273/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832729/",
            "reporter": "geenensp"
        }
    ],
    "3832728": [
        {
            "dateadded": "2026-04-27 00:30:08 UTC",
            "url": "https://holz-baum-4.vortex-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832728/",
            "reporter": "anonymous"
        }
    ],
    "3832727": [
        {
            "dateadded": "2026-04-27 00:25:17 UTC",
            "url": "https://vert-1k.vortex-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832727/",
            "reporter": "anonymous"
        }
    ],
    "3832726": [
        {
            "dateadded": "2026-04-27 00:24:24 UTC",
            "url": "http://42.239.154.170:59243/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832726/",
            "reporter": "geenensp"
        }
    ],
    "3832725": [
        {
            "dateadded": "2026-04-27 00:20:14 UTC",
            "url": "https://gold-land-8.vortex-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832725/",
            "reporter": "anonymous"
        }
    ],
    "3832724": [
        {
            "dateadded": "2026-04-27 00:16:21 UTC",
            "url": "http://59.88.37.134:35590/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832724/",
            "reporter": "geenensp"
        }
    ],
    "3832723": [
        {
            "dateadded": "2026-04-27 00:14:14 UTC",
            "url": "https://noir-5.vortex-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832723/",
            "reporter": "anonymous"
        }
    ],
    "3832722": [
        {
            "dateadded": "2026-04-27 00:12:19 UTC",
            "url": "http://221.203.123.44:60683/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:26:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832722/",
            "reporter": "geenensp"
        }
    ],
    "3832721": [
        {
            "dateadded": "2026-04-27 00:09:08 UTC",
            "url": "https://fast-zeit-2.vortex-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-27 00:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832721/",
            "reporter": "anonymous"
        }
    ],
    "3832720": [
        {
            "dateadded": "2026-04-27 00:02:07 UTC",
            "url": "http://113.236.222.42:44409/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:00:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832720/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832719": [
        {
            "dateadded": "2026-04-26 23:58:12 UTC",
            "url": "http://221.203.123.44:60683/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832719/",
            "reporter": "geenensp"
        }
    ],
    "3832718": [
        {
            "dateadded": "2026-04-26 23:49:32 UTC",
            "url": "http://176.65.139.177/iran.sparc",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832718/",
            "reporter": "botnetkiller"
        }
    ],
    "3832710": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.armv6l",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832710/",
            "reporter": "botnetkiller"
        }
    ],
    "3832711": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832711/",
            "reporter": "botnetkiller"
        }
    ],
    "3832712": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832712/",
            "reporter": "botnetkiller"
        }
    ],
    "3832713": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832713/",
            "reporter": "botnetkiller"
        }
    ],
    "3832714": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832714/",
            "reporter": "botnetkiller"
        }
    ],
    "3832715": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832715/",
            "reporter": "botnetkiller"
        }
    ],
    "3832716": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.aarch64",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832716/",
            "reporter": "botnetkiller"
        }
    ],
    "3832717": [
        {
            "dateadded": "2026-04-26 23:49:22 UTC",
            "url": "http://176.65.139.177/iran.armv7l",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832717/",
            "reporter": "botnetkiller"
        }
    ],
    "3832706": [
        {
            "dateadded": "2026-04-26 23:49:15 UTC",
            "url": "http://176.65.139.177/iran.arc",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832706/",
            "reporter": "botnetkiller"
        }
    ],
    "3832707": [
        {
            "dateadded": "2026-04-26 23:49:15 UTC",
            "url": "http://176.65.139.177/iran.armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832707/",
            "reporter": "botnetkiller"
        }
    ],
    "3832708": [
        {
            "dateadded": "2026-04-26 23:49:15 UTC",
            "url": "http://176.65.139.177/iran.powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832708/",
            "reporter": "botnetkiller"
        }
    ],
    "3832709": [
        {
            "dateadded": "2026-04-26 23:49:15 UTC",
            "url": "http://176.65.139.177/iran.armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832709/",
            "reporter": "botnetkiller"
        }
    ],
    "3832705": [
        {
            "dateadded": "2026-04-26 23:47:25 UTC",
            "url": "http://59.88.37.134:35590/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:47:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832705/",
            "reporter": "geenensp"
        }
    ],
    "3832704": [
        {
            "dateadded": "2026-04-26 23:45:10 UTC",
            "url": "http://91.92.241.243/files/file_e1a96e130788ce89.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 23:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "54e64e",
                "CoinMiner",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832704/",
            "reporter": "Bitsight"
        }
    ],
    "3832703": [
        {
            "dateadded": "2026-04-26 23:33:23 UTC",
            "url": "http://176.65.139.177/iran.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:01 UTC",
            "threat": "malware_download",
            "tags": [
                "64-bit",
                "elf",
                "mirai",
                "x86-64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832703/",
            "reporter": "geenensp"
        }
    ],
    "3832702": [
        {
            "dateadded": "2026-04-26 23:30:27 UTC",
            "url": "http://85.11.167.177/Yboats.spc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832702/",
            "reporter": "botnetkiller"
        }
    ],
    "3832701": [
        {
            "dateadded": "2026-04-26 23:29:19 UTC",
            "url": "http://85.11.167.177/Yboats.arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 23:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832701/",
            "reporter": "botnetkiller"
        }
    ],
    "3832699": [
        {
            "dateadded": "2026-04-26 23:28:20 UTC",
            "url": "http://85.11.167.177/Yboats.x86",
            "url_status": "offline",
            "last_online": "2026-04-26 23:28:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832699/",
            "reporter": "botnetkiller"
        }
    ],
    "3832700": [
        {
            "dateadded": "2026-04-26 23:28:20 UTC",
            "url": "http://85.11.167.177/Yboats.sh4",
            "url_status": "offline",
            "last_online": "2026-04-26 23:28:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832700/",
            "reporter": "botnetkiller"
        }
    ],
    "3832698": [
        {
            "dateadded": "2026-04-26 23:27:28 UTC",
            "url": "http://85.11.167.177/Yboats.arm",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832698/",
            "reporter": "botnetkiller"
        }
    ],
    "3832692": [
        {
            "dateadded": "2026-04-26 23:27:23 UTC",
            "url": "http://85.11.167.177/Yboats.arm6",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832692/",
            "reporter": "botnetkiller"
        }
    ],
    "3832693": [
        {
            "dateadded": "2026-04-26 23:27:23 UTC",
            "url": "http://85.11.167.177/Yboats.m68k",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832693/",
            "reporter": "botnetkiller"
        }
    ],
    "3832694": [
        {
            "dateadded": "2026-04-26 23:27:23 UTC",
            "url": "http://85.11.167.177/Yboats.ppc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832694/",
            "reporter": "botnetkiller"
        }
    ],
    "3832695": [
        {
            "dateadded": "2026-04-26 23:27:23 UTC",
            "url": "http://85.11.167.177/Yboats.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832695/",
            "reporter": "botnetkiller"
        }
    ],
    "3832696": [
        {
            "dateadded": "2026-04-26 23:27:23 UTC",
            "url": "http://85.11.167.177/Yboats.mips",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832696/",
            "reporter": "botnetkiller"
        }
    ],
    "3832697": [
        {
            "dateadded": "2026-04-26 23:27:23 UTC",
            "url": "http://85.11.167.177/Yboats.arm5",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832697/",
            "reporter": "botnetkiller"
        }
    ],
    "3832691": [
        {
            "dateadded": "2026-04-26 23:22:08 UTC",
            "url": "http://39.81.20.88:45937/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832691/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832690": [
        {
            "dateadded": "2026-04-26 23:15:27 UTC",
            "url": "http://91.80.188.11:36740/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832690/",
            "reporter": "geenensp"
        }
    ],
    "3832689": [
        {
            "dateadded": "2026-04-26 23:12:23 UTC",
            "url": "http://115.49.24.139:43825/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832689/",
            "reporter": "geenensp"
        }
    ],
    "3832688": [
        {
            "dateadded": "2026-04-26 23:12:15 UTC",
            "url": "https://hglj.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 23:12:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832688/",
            "reporter": "anonymous"
        }
    ],
    "3832687": [
        {
            "dateadded": "2026-04-26 23:09:23 UTC",
            "url": "http://112.232.9.229:43291/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832687/",
            "reporter": "geenensp"
        }
    ],
    "3832686": [
        {
            "dateadded": "2026-04-26 23:06:16 UTC",
            "url": "https://7xekivp.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 23:06:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832686/",
            "reporter": "anonymous"
        }
    ],
    "3832685": [
        {
            "dateadded": "2026-04-26 23:03:17 UTC",
            "url": "http://66.212.184.137:54079/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832685/",
            "reporter": "geenensp"
        }
    ],
    "3832684": [
        {
            "dateadded": "2026-04-26 23:02:20 UTC",
            "url": "http://182.85.168.32:45847/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832684/",
            "reporter": "geenensp"
        }
    ],
    "3832683": [
        {
            "dateadded": "2026-04-26 23:02:19 UTC",
            "url": "http://175.147.153.230:50437/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832683/",
            "reporter": "geenensp"
        }
    ],
    "3832682": [
        {
            "dateadded": "2026-04-26 23:02:07 UTC",
            "url": "http://222.140.177.16:33143/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832682/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832681": [
        {
            "dateadded": "2026-04-26 23:00:14 UTC",
            "url": "https://m3rge-mark.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 23:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832681/",
            "reporter": "anonymous"
        }
    ],
    "3832679": [
        {
            "dateadded": "2026-04-26 22:57:08 UTC",
            "url": "http://39.81.20.88:45937/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832679/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832680": [
        {
            "dateadded": "2026-04-26 22:57:08 UTC",
            "url": "http://115.56.12.41:36588/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832680/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832678": [
        {
            "dateadded": "2026-04-26 22:55:11 UTC",
            "url": "https://4ppcd.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832678/",
            "reporter": "anonymous"
        }
    ],
    "3832677": [
        {
            "dateadded": "2026-04-26 22:53:07 UTC",
            "url": "http://20.198.18.136:8080/agent.x64.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:05 UTC",
            "threat": "malware_download",
            "tags": [
                "AdaptixC2",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832677/",
            "reporter": "botnetkiller"
        }
    ],
    "3832676": [
        {
            "dateadded": "2026-04-26 22:51:26 UTC",
            "url": "http://aps.voltpanel.cloud/agent_ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832676/",
            "reporter": "botnetkiller"
        }
    ],
    "3832675": [
        {
            "dateadded": "2026-04-26 22:51:20 UTC",
            "url": "http://aps.voltpanel.cloud/agent_armv7",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832675/",
            "reporter": "botnetkiller"
        }
    ],
    "3832674": [
        {
            "dateadded": "2026-04-26 22:51:19 UTC",
            "url": "http://91.80.188.11:36740/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832674/",
            "reporter": "geenensp"
        }
    ],
    "3832670": [
        {
            "dateadded": "2026-04-26 22:51:18 UTC",
            "url": "http://aps.voltpanel.cloud/agent_arm64",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832670/",
            "reporter": "botnetkiller"
        }
    ],
    "3832671": [
        {
            "dateadded": "2026-04-26 22:51:18 UTC",
            "url": "http://aps.voltpanel.cloud/agent_amd64",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832671/",
            "reporter": "botnetkiller"
        }
    ],
    "3832672": [
        {
            "dateadded": "2026-04-26 22:51:18 UTC",
            "url": "http://aps.voltpanel.cloud/agent_x86",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832672/",
            "reporter": "botnetkiller"
        }
    ],
    "3832673": [
        {
            "dateadded": "2026-04-26 22:51:18 UTC",
            "url": "http://aps.voltpanel.cloud/agent_armv6",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832673/",
            "reporter": "botnetkiller"
        }
    ],
    "3832669": [
        {
            "dateadded": "2026-04-26 22:51:17 UTC",
            "url": "http://aps.voltpanel.cloud/agent_mipsle",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832669/",
            "reporter": "botnetkiller"
        }
    ],
    "3832666": [
        {
            "dateadded": "2026-04-26 22:51:16 UTC",
            "url": "http://aps.voltpanel.cloud/agent_sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832666/",
            "reporter": "botnetkiller"
        }
    ],
    "3832667": [
        {
            "dateadded": "2026-04-26 22:51:16 UTC",
            "url": "http://aps.voltpanel.cloud/agent_spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832667/",
            "reporter": "botnetkiller"
        }
    ],
    "3832668": [
        {
            "dateadded": "2026-04-26 22:51:16 UTC",
            "url": "http://aps.voltpanel.cloud/agent_mips",
            "url_status": "offline",
            "last_online": "2026-04-26 22:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832668/",
            "reporter": "botnetkiller"
        }
    ],
    "3832665": [
        {
            "dateadded": "2026-04-26 22:51:15 UTC",
            "url": "http://aps.voltpanel.cloud/agent_x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832665/",
            "reporter": "botnetkiller"
        }
    ],
    "3832661": [
        {
            "dateadded": "2026-04-26 22:50:22 UTC",
            "url": "http://142.248.80.139/agent_mipsle",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832661/",
            "reporter": "botnetkiller"
        }
    ],
    "3832662": [
        {
            "dateadded": "2026-04-26 22:50:22 UTC",
            "url": "http://142.248.80.139/agent_arm64",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832662/",
            "reporter": "botnetkiller"
        }
    ],
    "3832663": [
        {
            "dateadded": "2026-04-26 22:50:22 UTC",
            "url": "http://142.248.80.139/agent_mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832663/",
            "reporter": "botnetkiller"
        }
    ],
    "3832664": [
        {
            "dateadded": "2026-04-26 22:50:22 UTC",
            "url": "http://142.248.80.139/agent_amd64",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832664/",
            "reporter": "botnetkiller"
        }
    ],
    "3832658": [
        {
            "dateadded": "2026-04-26 22:50:21 UTC",
            "url": "http://142.248.80.139/agent_armv6",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832658/",
            "reporter": "botnetkiller"
        }
    ],
    "3832659": [
        {
            "dateadded": "2026-04-26 22:50:21 UTC",
            "url": "http://142.248.80.139/agent_armv7",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832659/",
            "reporter": "botnetkiller"
        }
    ],
    "3832660": [
        {
            "dateadded": "2026-04-26 22:50:21 UTC",
            "url": "http://142.248.80.139/agent_x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832660/",
            "reporter": "botnetkiller"
        }
    ],
    "3832653": [
        {
            "dateadded": "2026-04-26 22:50:18 UTC",
            "url": "http://142.248.80.139/agent_x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832653/",
            "reporter": "botnetkiller"
        }
    ],
    "3832654": [
        {
            "dateadded": "2026-04-26 22:50:18 UTC",
            "url": "http://142.248.80.139/agent_spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832654/",
            "reporter": "botnetkiller"
        }
    ],
    "3832655": [
        {
            "dateadded": "2026-04-26 22:50:18 UTC",
            "url": "http://142.248.80.139/agent_ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832655/",
            "reporter": "botnetkiller"
        }
    ],
    "3832656": [
        {
            "dateadded": "2026-04-26 22:50:18 UTC",
            "url": "http://142.248.80.139/agent_sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832656/",
            "reporter": "botnetkiller"
        }
    ],
    "3832657": [
        {
            "dateadded": "2026-04-26 22:50:18 UTC",
            "url": "http://142.248.80.139/install.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832657/",
            "reporter": "botnetkiller"
        }
    ],
    "3832652": [
        {
            "dateadded": "2026-04-26 22:50:17 UTC",
            "url": "https://aps.voltpanel.cloud/install.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832652/",
            "reporter": "botnetkiller"
        }
    ],
    "3832651": [
        {
            "dateadded": "2026-04-26 22:49:07 UTC",
            "url": "https://taldra2ex.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832651/",
            "reporter": "anonymous"
        }
    ],
    "3832649": [
        {
            "dateadded": "2026-04-26 22:46:22 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832649/",
            "reporter": "botnetkiller"
        }
    ],
    "3832650": [
        {
            "dateadded": "2026-04-26 22:46:22 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 00:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832650/",
            "reporter": "botnetkiller"
        }
    ],
    "3832644": [
        {
            "dateadded": "2026-04-26 22:46:20 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832644/",
            "reporter": "botnetkiller"
        }
    ],
    "3832645": [
        {
            "dateadded": "2026-04-26 22:46:20 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": "2026-04-26 23:21:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832645/",
            "reporter": "botnetkiller"
        }
    ],
    "3832646": [
        {
            "dateadded": "2026-04-26 22:46:20 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 00:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832646/",
            "reporter": "botnetkiller"
        }
    ],
    "3832647": [
        {
            "dateadded": "2026-04-26 22:46:20 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-26 22:59:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832647/",
            "reporter": "botnetkiller"
        }
    ],
    "3832648": [
        {
            "dateadded": "2026-04-26 22:46:20 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.arc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832648/",
            "reporter": "botnetkiller"
        }
    ],
    "3832643": [
        {
            "dateadded": "2026-04-26 22:46:18 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": "2026-04-27 00:12:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832643/",
            "reporter": "botnetkiller"
        }
    ],
    "3832639": [
        {
            "dateadded": "2026-04-26 22:46:16 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": "2026-04-26 23:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832639/",
            "reporter": "botnetkiller"
        }
    ],
    "3832640": [
        {
            "dateadded": "2026-04-26 22:46:16 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 00:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832640/",
            "reporter": "botnetkiller"
        }
    ],
    "3832641": [
        {
            "dateadded": "2026-04-26 22:46:16 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 23:05:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832641/",
            "reporter": "botnetkiller"
        }
    ],
    "3832642": [
        {
            "dateadded": "2026-04-26 22:46:16 UTC",
            "url": "http://163.61.39.140/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": "2026-04-27 00:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832642/",
            "reporter": "botnetkiller"
        }
    ],
    "3832637": [
        {
            "dateadded": "2026-04-26 22:44:28 UTC",
            "url": "http://105.158.193.79:58038/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832637/",
            "reporter": "botnetkiller"
        }
    ],
    "3832638": [
        {
            "dateadded": "2026-04-26 22:44:28 UTC",
            "url": "http://14.1.107.44:53652/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832638/",
            "reporter": "botnetkiller"
        }
    ],
    "3832636": [
        {
            "dateadded": "2026-04-26 22:44:27 UTC",
            "url": "http://58.252.114.171:45647/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832636/",
            "reporter": "botnetkiller"
        }
    ],
    "3832634": [
        {
            "dateadded": "2026-04-26 22:44:26 UTC",
            "url": "http://223.123.73.167:60208/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832634/",
            "reporter": "botnetkiller"
        }
    ],
    "3832635": [
        {
            "dateadded": "2026-04-26 22:44:26 UTC",
            "url": "http://139.135.60.162:58061/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832635/",
            "reporter": "botnetkiller"
        }
    ],
    "3832631": [
        {
            "dateadded": "2026-04-26 22:44:25 UTC",
            "url": "http://110.37.44.250:33994/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832631/",
            "reporter": "botnetkiller"
        }
    ],
    "3832632": [
        {
            "dateadded": "2026-04-26 22:44:25 UTC",
            "url": "http://202.70.139.133:51644/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832632/",
            "reporter": "botnetkiller"
        }
    ],
    "3832633": [
        {
            "dateadded": "2026-04-26 22:44:25 UTC",
            "url": "http://42.224.2.129:53615/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832633/",
            "reporter": "botnetkiller"
        }
    ],
    "3832630": [
        {
            "dateadded": "2026-04-26 22:44:12 UTC",
            "url": "http://42.224.7.121:44950/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-26 22:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832630/",
            "reporter": "botnetkiller"
        }
    ],
    "3832629": [
        {
            "dateadded": "2026-04-26 22:43:09 UTC",
            "url": "https://neo-rnead.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832629/",
            "reporter": "anonymous"
        }
    ],
    "3832628": [
        {
            "dateadded": "2026-04-26 22:42:19 UTC",
            "url": "http://115.49.24.139:43825/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832628/",
            "reporter": "geenensp"
        }
    ],
    "3832627": [
        {
            "dateadded": "2026-04-26 22:40:20 UTC",
            "url": "http://66.212.184.137:54079/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832627/",
            "reporter": "geenensp"
        }
    ],
    "3832626": [
        {
            "dateadded": "2026-04-26 22:39:10 UTC",
            "url": "https://lfixa2ax.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832626/",
            "reporter": "anonymous"
        }
    ],
    "3832625": [
        {
            "dateadded": "2026-04-26 22:36:16 UTC",
            "url": "http://112.93.200.227:37392/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832625/",
            "reporter": "geenensp"
        }
    ],
    "3832624": [
        {
            "dateadded": "2026-04-26 22:35:12 UTC",
            "url": "http://27.37.114.188:36350/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832624/",
            "reporter": "geenensp"
        }
    ],
    "3832622": [
        {
            "dateadded": "2026-04-26 22:32:08 UTC",
            "url": "https://cl1e-panel.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832622/",
            "reporter": "anonymous"
        }
    ],
    "3832623": [
        {
            "dateadded": "2026-04-26 22:32:08 UTC",
            "url": "http://110.85.99.159:38787/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832623/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832621": [
        {
            "dateadded": "2026-04-26 22:26:10 UTC",
            "url": "https://5ynt46-node.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832621/",
            "reporter": "anonymous"
        }
    ],
    "3832620": [
        {
            "dateadded": "2026-04-26 22:24:21 UTC",
            "url": "http://36.71.248.15:55244/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:05:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832620/",
            "reporter": "geenensp"
        }
    ],
    "3832619": [
        {
            "dateadded": "2026-04-26 22:23:08 UTC",
            "url": "https://quorcresten1.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832619/",
            "reporter": "anonymous"
        }
    ],
    "3832618": [
        {
            "dateadded": "2026-04-26 22:18:16 UTC",
            "url": "http://182.123.199.192:53273/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832618/",
            "reporter": "geenensp"
        }
    ],
    "3832617": [
        {
            "dateadded": "2026-04-26 22:16:33 UTC",
            "url": "http://42.180.13.124:39937/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832617/",
            "reporter": "geenensp"
        }
    ],
    "3832616": [
        {
            "dateadded": "2026-04-26 22:16:07 UTC",
            "url": "https://9hq5.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832616/",
            "reporter": "anonymous"
        }
    ],
    "3832615": [
        {
            "dateadded": "2026-04-26 22:10:11 UTC",
            "url": "https://vfge.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832615/",
            "reporter": "anonymous"
        }
    ],
    "3832614": [
        {
            "dateadded": "2026-04-26 22:07:08 UTC",
            "url": "http://110.85.99.159:38787/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832614/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832613": [
        {
            "dateadded": "2026-04-26 22:06:09 UTC",
            "url": "https://hen1a.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832613/",
            "reporter": "anonymous"
        }
    ],
    "3832612": [
        {
            "dateadded": "2026-04-26 22:03:12 UTC",
            "url": "https://ax2e.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 22:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832612/",
            "reporter": "anonymous"
        }
    ],
    "3832611": [
        {
            "dateadded": "2026-04-26 21:59:20 UTC",
            "url": "http://110.181.235.167:38695/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832611/",
            "reporter": "geenensp"
        }
    ],
    "3832610": [
        {
            "dateadded": "2026-04-26 21:57:16 UTC",
            "url": "http://27.37.24.47:44153/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832610/",
            "reporter": "geenensp"
        }
    ],
    "3832609": [
        {
            "dateadded": "2026-04-26 21:55:29 UTC",
            "url": "http://196.190.1.39:48472/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832609/",
            "reporter": "geenensp"
        }
    ],
    "3832608": [
        {
            "dateadded": "2026-04-26 21:53:09 UTC",
            "url": "https://mernex1ar.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832608/",
            "reporter": "anonymous"
        }
    ],
    "3832607": [
        {
            "dateadded": "2026-04-26 21:53:06 UTC",
            "url": "https://9al62yq7.souf1atwindow.digital/?ublib=EYTxhtIxrnUbiDDB",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832607/",
            "reporter": "anonymous"
        }
    ],
    "3832606": [
        {
            "dateadded": "2026-04-26 21:52:19 UTC",
            "url": "http://182.123.199.192:53273/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832606/",
            "reporter": "geenensp"
        }
    ],
    "3832605": [
        {
            "dateadded": "2026-04-26 21:52:08 UTC",
            "url": "http://175.149.182.189:60731/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832605/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832604": [
        {
            "dateadded": "2026-04-26 21:47:09 UTC",
            "url": "https://54lzq.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832604/",
            "reporter": "anonymous"
        }
    ],
    "3832603": [
        {
            "dateadded": "2026-04-26 21:46:18 UTC",
            "url": "http://110.181.235.167:38695/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:57:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832603/",
            "reporter": "geenensp"
        }
    ],
    "3832602": [
        {
            "dateadded": "2026-04-26 21:42:07 UTC",
            "url": "https://quor-valeix.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832602/",
            "reporter": "anonymous"
        }
    ],
    "3832601": [
        {
            "dateadded": "2026-04-26 21:41:16 UTC",
            "url": "http://182.117.11.57:33814/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832601/",
            "reporter": "geenensp"
        }
    ],
    "3832600": [
        {
            "dateadded": "2026-04-26 21:37:07 UTC",
            "url": "http://119.166.42.132:55035/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832600/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832599": [
        {
            "dateadded": "2026-04-26 21:36:11 UTC",
            "url": "https://harbquarr.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832599/",
            "reporter": "anonymous"
        }
    ],
    "3832598": [
        {
            "dateadded": "2026-04-26 21:31:07 UTC",
            "url": "https://uxmidt.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832598/",
            "reporter": "anonymous"
        }
    ],
    "3832597": [
        {
            "dateadded": "2026-04-26 21:27:31 UTC",
            "url": "http://196.190.1.39:48472/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832597/",
            "reporter": "geenensp"
        }
    ],
    "3832596": [
        {
            "dateadded": "2026-04-26 21:25:15 UTC",
            "url": "https://pixel9-layer.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832596/",
            "reporter": "anonymous"
        }
    ],
    "3832595": [
        {
            "dateadded": "2026-04-26 21:22:09 UTC",
            "url": "http://175.148.204.152:33124/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832595/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832594": [
        {
            "dateadded": "2026-04-26 21:19:09 UTC",
            "url": "https://vel-draex.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832594/",
            "reporter": "anonymous"
        }
    ],
    "3832593": [
        {
            "dateadded": "2026-04-26 21:13:07 UTC",
            "url": "https://soundatom.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832593/",
            "reporter": "anonymous"
        }
    ],
    "3832592": [
        {
            "dateadded": "2026-04-26 21:12:08 UTC",
            "url": "http://119.166.42.132:55035/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832592/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832591": [
        {
            "dateadded": "2026-04-26 21:08:08 UTC",
            "url": "https://10ya0-dock.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832591/",
            "reporter": "anonymous"
        }
    ],
    "3832590": [
        {
            "dateadded": "2026-04-26 21:08:06 UTC",
            "url": "http://42.224.68.214:53177/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832590/",
            "reporter": "geenensp"
        }
    ],
    "3832588": [
        {
            "dateadded": "2026-04-26 21:02:09 UTC",
            "url": "https://networkhub.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 21:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832588/",
            "reporter": "anonymous"
        }
    ],
    "3832587": [
        {
            "dateadded": "2026-04-26 21:01:18 UTC",
            "url": "http://113.228.133.199:34212/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832587/",
            "reporter": "geenensp"
        }
    ],
    "3832586": [
        {
            "dateadded": "2026-04-26 21:00:10 UTC",
            "url": "http://175.43.166.190:37777/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:59:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832586/",
            "reporter": "geenensp"
        }
    ],
    "3832585": [
        {
            "dateadded": "2026-04-26 20:56:08 UTC",
            "url": "https://warmcon.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832585/",
            "reporter": "anonymous"
        }
    ],
    "3832584": [
        {
            "dateadded": "2026-04-26 20:54:15 UTC",
            "url": "http://101.109.203.143:38523/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:58:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832584/",
            "reporter": "geenensp"
        }
    ],
    "3832583": [
        {
            "dateadded": "2026-04-26 20:49:12 UTC",
            "url": "https://resolvercultur.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832583/",
            "reporter": "anonymous"
        }
    ],
    "3832582": [
        {
            "dateadded": "2026-04-26 20:43:08 UTC",
            "url": "https://kellithis.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832582/",
            "reporter": "anonymous"
        }
    ],
    "3832580": [
        {
            "dateadded": "2026-04-26 20:39:09 UTC",
            "url": "https://84.54.33.214/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:52 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-214",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832580/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832581": [
        {
            "dateadded": "2026-04-26 20:39:09 UTC",
            "url": "https://84.54.33.77/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-77",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832581/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832579": [
        {
            "dateadded": "2026-04-26 20:39:06 UTC",
            "url": "https://84.54.33.214/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-214",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832579/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832578": [
        {
            "dateadded": "2026-04-26 20:38:09 UTC",
            "url": "https://84.54.33.71/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:57 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-71",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832578/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832577": [
        {
            "dateadded": "2026-04-26 20:38:06 UTC",
            "url": "https://84.54.33.71/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:22 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-71",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832577/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832576": [
        {
            "dateadded": "2026-04-26 20:37:11 UTC",
            "url": "https://84.54.33.157/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-157",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832576/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832574": [
        {
            "dateadded": "2026-04-26 20:37:07 UTC",
            "url": "https://84.54.33.77/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-77",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832574/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832575": [
        {
            "dateadded": "2026-04-26 20:37:07 UTC",
            "url": "https://84.54.33.157/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "84-54-33-157",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832575/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832573": [
        {
            "dateadded": "2026-04-26 20:36:12 UTC",
            "url": "http://175.43.166.190:37777/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832573/",
            "reporter": "geenensp"
        }
    ],
    "3832572": [
        {
            "dateadded": "2026-04-26 20:36:11 UTC",
            "url": "http://42.224.68.214:53177/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832572/",
            "reporter": "geenensp"
        }
    ],
    "3832571": [
        {
            "dateadded": "2026-04-26 20:36:07 UTC",
            "url": "https://stead5-switch.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832571/",
            "reporter": "anonymous"
        }
    ],
    "3832570": [
        {
            "dateadded": "2026-04-26 20:32:07 UTC",
            "url": "http://58.47.110.47:41025/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832570/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832569": [
        {
            "dateadded": "2026-04-26 20:31:12 UTC",
            "url": "http://115.52.71.132:52267/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832569/",
            "reporter": "geenensp"
        }
    ],
    "3832559": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/titanjr.spc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:05:57 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832559/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832560": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-27 05:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832560/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832561": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 06:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832561/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832562": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 05:11:02 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832562/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832563": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 05:00:46 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832563/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832564": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 05:02:53 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832564/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832565": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 06:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832565/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832566": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:05 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832566/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832567": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 06:05:42 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832567/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832568": [
        {
            "dateadded": "2026-04-26 20:29:22 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.arm",
            "url_status": "offline",
            "last_online": "2026-04-27 05:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832568/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832552": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-27 05:56:42 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832552/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832553": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/windyloveyou/debug",
            "url_status": "offline",
            "last_online": "2026-04-27 06:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832553/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832554": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:18:04 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832554/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832555": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832555/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832556": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/1.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:24:47 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832556/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832557": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.x86",
            "url_status": "offline",
            "last_online": "2026-04-27 05:26:03 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832557/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832558": [
        {
            "dateadded": "2026-04-26 20:29:21 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.arc",
            "url_status": "offline",
            "last_online": "2026-04-27 06:26:26 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832558/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832548": [
        {
            "dateadded": "2026-04-26 20:29:20 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 05:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832548/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832549": [
        {
            "dateadded": "2026-04-26 20:29:20 UTC",
            "url": "http://194.163.151.12/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 05:08:42 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832549/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832550": [
        {
            "dateadded": "2026-04-26 20:29:20 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.ppc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832550/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832551": [
        {
            "dateadded": "2026-04-26 20:29:20 UTC",
            "url": "http://194.163.151.12/windyloveyou/windy.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 06:22:38 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832551/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832547": [
        {
            "dateadded": "2026-04-26 20:29:19 UTC",
            "url": "http://194.163.151.12/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-27 05:52:25 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832547/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832546": [
        {
            "dateadded": "2026-04-26 20:28:23 UTC",
            "url": "http://194.163.151.12/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 05:11:41 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832546/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832533": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 06:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832533/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832534": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-27 05:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832534/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832535": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/titanjr.i486",
            "url_status": "offline",
            "last_online": "2026-04-27 10:48:30 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832535/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832536": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 05:33:33 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832536/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832537": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 05:14:48 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832537/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832538": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-27 05:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832538/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832539": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 05:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832539/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832540": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-27 06:03:18 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832540/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832541": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/titanjr.arc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832541/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832542": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-27 05:55:20 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832542/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832543": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 05:25:00 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832543/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832544": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 06:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832544/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832545": [
        {
            "dateadded": "2026-04-26 20:28:19 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 06:13:49 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832545/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832520": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-27 06:23:34 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832520/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832521": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-27 05:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832521/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832522": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.spc",
            "url_status": "offline",
            "last_online": "2026-04-27 06:23:21 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832522/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832523": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.i486",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:03 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832523/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832524": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-27 06:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832524/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832525": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 06:17:44 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832525/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832526": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 06:03:40 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832526/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832527": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 05:27:56 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832527/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832528": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-27 05:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832528/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832529": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-27 06:18:29 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832529/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832530": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.arc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832530/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832531": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://194.163.151.12/huhu/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 06:10:32 UTC",
            "threat": "malware_download",
            "tags": [
                "194-163-151-12",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832531/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832532": [
        {
            "dateadded": "2026-04-26 20:28:17 UTC",
            "url": "http://222.140.159.143:58189/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832532/",
            "reporter": "geenensp"
        }
    ],
    "3832519": [
        {
            "dateadded": "2026-04-26 20:27:07 UTC",
            "url": "https://48oni.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832519/",
            "reporter": "anonymous"
        }
    ],
    "3832518": [
        {
            "dateadded": "2026-04-26 20:21:12 UTC",
            "url": "https://creehid.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832518/",
            "reporter": "anonymous"
        }
    ],
    "3832517": [
        {
            "dateadded": "2026-04-26 20:19:25 UTC",
            "url": "http://45.88.186.69/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 20:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "45-88-186-69",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832517/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832516": [
        {
            "dateadded": "2026-04-26 20:18:35 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ladvix",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832516/",
            "reporter": "botnetkiller"
        }
    ],
    "3832514": [
        {
            "dateadded": "2026-04-26 20:18:32 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832514/",
            "reporter": "botnetkiller"
        }
    ],
    "3832515": [
        {
            "dateadded": "2026-04-26 20:18:32 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:45 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832515/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832512": [
        {
            "dateadded": "2026-04-26 20:18:31 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832512/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832513": [
        {
            "dateadded": "2026-04-26 20:18:31 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.spc",
            "url_status": "offline",
            "last_online": "2026-04-27 00:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832513/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832508": [
        {
            "dateadded": "2026-04-26 20:18:26 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832508/",
            "reporter": "botnetkiller"
        }
    ],
    "3832509": [
        {
            "dateadded": "2026-04-26 20:18:26 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832509/",
            "reporter": "botnetkiller"
        }
    ],
    "3832510": [
        {
            "dateadded": "2026-04-26 20:18:26 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832510/",
            "reporter": "botnetkiller"
        }
    ],
    "3832511": [
        {
            "dateadded": "2026-04-26 20:18:26 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832511/",
            "reporter": "botnetkiller"
        }
    ],
    "3832502": [
        {
            "dateadded": "2026-04-26 20:18:25 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832502/",
            "reporter": "botnetkiller"
        }
    ],
    "3832503": [
        {
            "dateadded": "2026-04-26 20:18:25 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832503/",
            "reporter": "botnetkiller"
        }
    ],
    "3832504": [
        {
            "dateadded": "2026-04-26 20:18:25 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832504/",
            "reporter": "botnetkiller"
        }
    ],
    "3832505": [
        {
            "dateadded": "2026-04-26 20:18:25 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 13:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832505/",
            "reporter": "botnetkiller"
        }
    ],
    "3832506": [
        {
            "dateadded": "2026-04-26 20:18:25 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832506/",
            "reporter": "botnetkiller"
        }
    ],
    "3832507": [
        {
            "dateadded": "2026-04-26 20:18:25 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832507/",
            "reporter": "botnetkiller"
        }
    ],
    "3832500": [
        {
            "dateadded": "2026-04-26 20:18:24 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832500/",
            "reporter": "botnetkiller"
        }
    ],
    "3832501": [
        {
            "dateadded": "2026-04-26 20:18:24 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832501/",
            "reporter": "botnetkiller"
        }
    ],
    "3832499": [
        {
            "dateadded": "2026-04-26 20:18:23 UTC",
            "url": "http://140.233.190.47/terrabot/023782pler.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832499/",
            "reporter": "botnetkiller"
        }
    ],
    "3832498": [
        {
            "dateadded": "2026-04-26 20:18:17 UTC",
            "url": "http://156.229.165.225//arm5",
            "url_status": "online",
            "last_online": "2026-04-27 14:58:57 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832498/",
            "reporter": "botnetkiller"
        }
    ],
    "3832497": [
        {
            "dateadded": "2026-04-26 20:18:15 UTC",
            "url": "https://dibzyqjy.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832497/",
            "reporter": "anonymous"
        }
    ],
    "3832496": [
        {
            "dateadded": "2026-04-26 20:18:14 UTC",
            "url": "https://trinexa.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832496/",
            "reporter": "anonymous"
        }
    ],
    "3832495": [
        {
            "dateadded": "2026-04-26 20:18:11 UTC",
            "url": "http://45.88.186.209/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 20:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "45-88-186-209",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832495/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832492": [
        {
            "dateadded": "2026-04-26 20:18:10 UTC",
            "url": "http://45.88.186.69/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 20:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "45-88-186-69",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832492/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832493": [
        {
            "dateadded": "2026-04-26 20:18:10 UTC",
            "url": "http://58.47.110.47:41025/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832493/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832494": [
        {
            "dateadded": "2026-04-26 20:18:10 UTC",
            "url": "http://45.88.186.209/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 20:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "45-88-186-209",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832494/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832490": [
        {
            "dateadded": "2026-04-26 20:18:09 UTC",
            "url": "https://45.92.1.43/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "45-92-1-43",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832490/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832491": [
        {
            "dateadded": "2026-04-26 20:18:09 UTC",
            "url": "http://112.244.233.1:55173/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832491/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832485": [
        {
            "dateadded": "2026-04-26 20:03:28 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832485/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832486": [
        {
            "dateadded": "2026-04-26 20:03:28 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:34 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832486/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832487": [
        {
            "dateadded": "2026-04-26 20:03:28 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.x86",
            "url_status": "offline",
            "last_online": "2026-04-26 23:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832487/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832488": [
        {
            "dateadded": "2026-04-26 20:03:28 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 00:36:46 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832488/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832480": [
        {
            "dateadded": "2026-04-26 20:03:23 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 00:23:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832480/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832481": [
        {
            "dateadded": "2026-04-26 20:03:23 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm",
            "url_status": "offline",
            "last_online": "2026-04-26 23:47:42 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832481/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832482": [
        {
            "dateadded": "2026-04-26 20:03:23 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.m68k",
            "url_status": "offline",
            "last_online": "2026-04-26 23:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832482/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832483": [
        {
            "dateadded": "2026-04-26 20:03:23 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832483/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832484": [
        {
            "dateadded": "2026-04-26 20:03:23 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832484/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832471": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.sh4",
            "url_status": "offline",
            "last_online": "2026-04-26 23:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832471/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832472": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 00:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832472/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832473": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:33 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832473/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832474": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:30 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832474/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832475": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832475/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832476": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/debug",
            "url_status": "offline",
            "last_online": "2026-04-26 23:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832476/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832477": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:57 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832477/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832478": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832478/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832479": [
        {
            "dateadded": "2026-04-26 20:03:22 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832479/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832464": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/debug",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:01 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832464/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832465": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.ppc",
            "url_status": "offline",
            "last_online": "2026-04-26 23:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832465/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832466": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:27 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832466/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832467": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-26 22:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832467/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832468": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 00:04:29 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832468/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832469": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "vmi3229260-contaboserver-net"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832469/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832470": [
        {
            "dateadded": "2026-04-26 20:03:21 UTC",
            "url": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.i686",
            "url_status": "offline",
            "last_online": "2026-04-26 23:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "luxzzc2servers-my-id",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832470/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832463": [
        {
            "dateadded": "2026-04-26 20:01:29 UTC",
            "url": "http://101.109.203.143:38523/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:48:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832463/",
            "reporter": "geenensp"
        }
    ],
    "3832462": [
        {
            "dateadded": "2026-04-26 20:01:16 UTC",
            "url": "https://clustchoru.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 20:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832462/",
            "reporter": "anonymous"
        }
    ],
    "3832461": [
        {
            "dateadded": "2026-04-26 20:00:26 UTC",
            "url": "http://222.140.159.143:58189/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832461/",
            "reporter": "geenensp"
        }
    ],
    "3832460": [
        {
            "dateadded": "2026-04-26 19:56:07 UTC",
            "url": "https://45.80.158.96/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 19:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "45-80-158-96",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832460/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832456": [
        {
            "dateadded": "2026-04-26 19:55:14 UTC",
            "url": "https://45.138.16.51/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 19:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "45-138-16-51",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832456/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832457": [
        {
            "dateadded": "2026-04-26 19:55:14 UTC",
            "url": "https://203.159.90.245/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 19:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "203-159-90-245",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832457/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832458": [
        {
            "dateadded": "2026-04-26 19:55:14 UTC",
            "url": "https://45.154.98.122/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "45-154-98-122",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832458/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832459": [
        {
            "dateadded": "2026-04-26 19:55:14 UTC",
            "url": "http://203.159.90.22/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:23 UTC",
            "threat": "malware_download",
            "tags": [
                "203-159-90-22",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832459/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832455": [
        {
            "dateadded": "2026-04-26 19:55:13 UTC",
            "url": "https://193.26.115.225/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 19:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "193-26-115-225",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832455/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832454": [
        {
            "dateadded": "2026-04-26 19:55:09 UTC",
            "url": "https://45.138.16.223/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 19:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "45-138-16-223",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832454/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832453": [
        {
            "dateadded": "2026-04-26 19:54:11 UTC",
            "url": "https://railspark.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832453/",
            "reporter": "anonymous"
        }
    ],
    "3832452": [
        {
            "dateadded": "2026-04-26 19:53:20 UTC",
            "url": "https://124.198.131.61/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:39 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-131-61",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832452/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832451": [
        {
            "dateadded": "2026-04-26 19:53:17 UTC",
            "url": "https://185.241.208.194/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 19:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "185-241-208-194",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832451/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832450": [
        {
            "dateadded": "2026-04-26 19:48:10 UTC",
            "url": "https://ark-valeen.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832450/",
            "reporter": "anonymous"
        }
    ],
    "3832445": [
        {
            "dateadded": "2026-04-26 19:46:32 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832445/",
            "reporter": "botnetkiller"
        }
    ],
    "3832446": [
        {
            "dateadded": "2026-04-26 19:46:32 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832446/",
            "reporter": "botnetkiller"
        }
    ],
    "3832447": [
        {
            "dateadded": "2026-04-26 19:46:32 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832447/",
            "reporter": "botnetkiller"
        }
    ],
    "3832448": [
        {
            "dateadded": "2026-04-26 19:46:32 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832448/",
            "reporter": "botnetkiller"
        }
    ],
    "3832449": [
        {
            "dateadded": "2026-04-26 19:46:32 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832449/",
            "reporter": "botnetkiller"
        }
    ],
    "3832439": [
        {
            "dateadded": "2026-04-26 19:46:31 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832439/",
            "reporter": "botnetkiller"
        }
    ],
    "3832440": [
        {
            "dateadded": "2026-04-26 19:46:31 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832440/",
            "reporter": "botnetkiller"
        }
    ],
    "3832441": [
        {
            "dateadded": "2026-04-26 19:46:31 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832441/",
            "reporter": "botnetkiller"
        }
    ],
    "3832442": [
        {
            "dateadded": "2026-04-26 19:46:31 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832442/",
            "reporter": "botnetkiller"
        }
    ],
    "3832443": [
        {
            "dateadded": "2026-04-26 19:46:31 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832443/",
            "reporter": "botnetkiller"
        }
    ],
    "3832444": [
        {
            "dateadded": "2026-04-26 19:46:31 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832444/",
            "reporter": "botnetkiller"
        }
    ],
    "3832435": [
        {
            "dateadded": "2026-04-26 19:46:30 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832435/",
            "reporter": "botnetkiller"
        }
    ],
    "3832436": [
        {
            "dateadded": "2026-04-26 19:46:30 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832436/",
            "reporter": "botnetkiller"
        }
    ],
    "3832437": [
        {
            "dateadded": "2026-04-26 19:46:30 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832437/",
            "reporter": "botnetkiller"
        }
    ],
    "3832438": [
        {
            "dateadded": "2026-04-26 19:46:30 UTC",
            "url": "http://144.172.98.94/terrabot/023782pler.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832438/",
            "reporter": "botnetkiller"
        }
    ],
    "3832426": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832426/",
            "reporter": "botnetkiller"
        }
    ],
    "3832427": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.arc",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832427/",
            "reporter": "botnetkiller"
        }
    ],
    "3832428": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832428/",
            "reporter": "botnetkiller"
        }
    ],
    "3832429": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832429/",
            "reporter": "botnetkiller"
        }
    ],
    "3832430": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832430/",
            "reporter": "botnetkiller"
        }
    ],
    "3832431": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/debug",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832431/",
            "reporter": "botnetkiller"
        }
    ],
    "3832432": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832432/",
            "reporter": "botnetkiller"
        }
    ],
    "3832433": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832433/",
            "reporter": "botnetkiller"
        }
    ],
    "3832434": [
        {
            "dateadded": "2026-04-26 19:44:24 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.spc",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832434/",
            "reporter": "botnetkiller"
        }
    ],
    "3832422": [
        {
            "dateadded": "2026-04-26 19:44:23 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832422/",
            "reporter": "botnetkiller"
        }
    ],
    "3832423": [
        {
            "dateadded": "2026-04-26 19:44:23 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832423/",
            "reporter": "botnetkiller"
        }
    ],
    "3832424": [
        {
            "dateadded": "2026-04-26 19:44:23 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832424/",
            "reporter": "botnetkiller"
        }
    ],
    "3832425": [
        {
            "dateadded": "2026-04-26 19:44:23 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832425/",
            "reporter": "botnetkiller"
        }
    ],
    "3832421": [
        {
            "dateadded": "2026-04-26 19:44:20 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832421/",
            "reporter": "botnetkiller"
        }
    ],
    "3832420": [
        {
            "dateadded": "2026-04-26 19:42:29 UTC",
            "url": "http://112.244.233.1:55173/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832420/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832419": [
        {
            "dateadded": "2026-04-26 19:40:24 UTC",
            "url": "http://83.168.95.185/shabak.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832419/",
            "reporter": "botnetkiller"
        }
    ],
    "3832418": [
        {
            "dateadded": "2026-04-26 19:40:11 UTC",
            "url": "https://ve1ve-loop.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832418/",
            "reporter": "anonymous"
        }
    ],
    "3832417": [
        {
            "dateadded": "2026-04-26 19:37:08 UTC",
            "url": "http://27.37.121.190:36056/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:01 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832417/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832416": [
        {
            "dateadded": "2026-04-26 19:34:13 UTC",
            "url": "https://tfoq2qdi.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832416/",
            "reporter": "anonymous"
        }
    ],
    "3832402": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832402/",
            "reporter": "botnetkiller"
        }
    ],
    "3832403": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:48 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832403/",
            "reporter": "botnetkiller"
        }
    ],
    "3832404": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/cometome",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832404/",
            "reporter": "botnetkiller"
        }
    ],
    "3832405": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832405/",
            "reporter": "botnetkiller"
        }
    ],
    "3832406": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:32 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832406/",
            "reporter": "botnetkiller"
        }
    ],
    "3832407": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/cache",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832407/",
            "reporter": "botnetkiller"
        }
    ],
    "3832408": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832408/",
            "reporter": "botnetkiller"
        }
    ],
    "3832409": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832409/",
            "reporter": "botnetkiller"
        }
    ],
    "3832410": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.i586",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832410/",
            "reporter": "botnetkiller"
        }
    ],
    "3832411": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.arm4",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832411/",
            "reporter": "botnetkiller"
        }
    ],
    "3832412": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832412/",
            "reporter": "botnetkiller"
        }
    ],
    "3832413": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.sparc",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832413/",
            "reporter": "botnetkiller"
        }
    ],
    "3832414": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832414/",
            "reporter": "botnetkiller"
        }
    ],
    "3832415": [
        {
            "dateadded": "2026-04-26 19:30:24 UTC",
            "url": "http://83.168.95.185/shabak.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832415/",
            "reporter": "botnetkiller"
        }
    ],
    "3832401": [
        {
            "dateadded": "2026-04-26 19:30:13 UTC",
            "url": "https://www.dropbox.com/scl/fi/60w9rf0up01o2256sej7q/userenv.txt?rlkey=jvvjl998pgu4aqx8w8l5bf7ek&st=k4tk7s0w&raw=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832401/",
            "reporter": "abuse_ch"
        }
    ],
    "3832400": [
        {
            "dateadded": "2026-04-26 19:30:12 UTC",
            "url": "http://83.168.95.185/shabak.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832400/",
            "reporter": "botnetkiller"
        }
    ],
    "3832399": [
        {
            "dateadded": "2026-04-26 19:29:12 UTC",
            "url": "http://83.168.95.185/shabak.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832399/",
            "reporter": "botnetkiller"
        }
    ],
    "3832398": [
        {
            "dateadded": "2026-04-26 19:25:17 UTC",
            "url": "https://brigh-gold.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832398/",
            "reporter": "anonymous"
        }
    ],
    "3832397": [
        {
            "dateadded": "2026-04-26 19:22:07 UTC",
            "url": "https://royapuls.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832397/",
            "reporter": "anonymous"
        }
    ],
    "3832396": [
        {
            "dateadded": "2026-04-26 19:21:21 UTC",
            "url": "http://125.44.222.212:47601/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832396/",
            "reporter": "geenensp"
        }
    ],
    "3832395": [
        {
            "dateadded": "2026-04-26 19:17:26 UTC",
            "url": "http://happytugsbakery.com/ultron.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832395/",
            "reporter": "abuse_ch"
        }
    ],
    "3832393": [
        {
            "dateadded": "2026-04-26 19:17:23 UTC",
            "url": "http://happytugsbakery.com/ultron.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832393/",
            "reporter": "abuse_ch"
        }
    ],
    "3832394": [
        {
            "dateadded": "2026-04-26 19:17:23 UTC",
            "url": "http://happytugsbakery.com/ultron.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832394/",
            "reporter": "abuse_ch"
        }
    ],
    "3832389": [
        {
            "dateadded": "2026-04-26 19:17:22 UTC",
            "url": "http://happytugsbakery.com/ultron.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832389/",
            "reporter": "abuse_ch"
        }
    ],
    "3832390": [
        {
            "dateadded": "2026-04-26 19:17:22 UTC",
            "url": "http://happytugsbakery.com/ultron.ppc4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832390/",
            "reporter": "abuse_ch"
        }
    ],
    "3832391": [
        {
            "dateadded": "2026-04-26 19:17:22 UTC",
            "url": "http://happytugsbakery.com/ultron.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832391/",
            "reporter": "abuse_ch"
        }
    ],
    "3832392": [
        {
            "dateadded": "2026-04-26 19:17:22 UTC",
            "url": "http://happytugsbakery.com/ultron.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832392/",
            "reporter": "abuse_ch"
        }
    ],
    "3832388": [
        {
            "dateadded": "2026-04-26 19:17:21 UTC",
            "url": "http://happytugsbakery.com/ultron.x64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832388/",
            "reporter": "abuse_ch"
        }
    ],
    "3832387": [
        {
            "dateadded": "2026-04-26 19:17:20 UTC",
            "url": "http://happytugsbakery.com/ultron.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832387/",
            "reporter": "abuse_ch"
        }
    ],
    "3832386": [
        {
            "dateadded": "2026-04-26 19:17:14 UTC",
            "url": "http://happytugsbakery.com/ultron.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832386/",
            "reporter": "abuse_ch"
        }
    ],
    "3832382": [
        {
            "dateadded": "2026-04-26 19:17:12 UTC",
            "url": "http://happytugsbakery.com/ultron.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832382/",
            "reporter": "abuse_ch"
        }
    ],
    "3832383": [
        {
            "dateadded": "2026-04-26 19:17:12 UTC",
            "url": "http://happytugsbakery.com/ultron.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832383/",
            "reporter": "abuse_ch"
        }
    ],
    "3832384": [
        {
            "dateadded": "2026-04-26 19:17:12 UTC",
            "url": "http://happytugsbakery.com/ultron.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832384/",
            "reporter": "abuse_ch"
        }
    ],
    "3832385": [
        {
            "dateadded": "2026-04-26 19:17:12 UTC",
            "url": "http://happytugsbakery.com/ultron.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832385/",
            "reporter": "abuse_ch"
        }
    ],
    "3832381": [
        {
            "dateadded": "2026-04-26 19:11:13 UTC",
            "url": "https://boos-gri.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832381/",
            "reporter": "anonymous"
        }
    ],
    "3832380": [
        {
            "dateadded": "2026-04-26 19:05:21 UTC",
            "url": "http://115.48.49.164:60266/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832380/",
            "reporter": "geenensp"
        }
    ],
    "3832379": [
        {
            "dateadded": "2026-04-26 19:03:13 UTC",
            "url": "https://warm-senso.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 19:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832379/",
            "reporter": "anonymous"
        }
    ],
    "3832378": [
        {
            "dateadded": "2026-04-26 19:02:27 UTC",
            "url": "http://115.50.93.180:45327/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832378/",
            "reporter": "geenensp"
        }
    ],
    "3832377": [
        {
            "dateadded": "2026-04-26 18:57:07 UTC",
            "url": "http://36.88.136.194:43687/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:49:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832377/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832376": [
        {
            "dateadded": "2026-04-26 18:56:08 UTC",
            "url": "https://mer-lithor.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832376/",
            "reporter": "anonymous"
        }
    ],
    "3832375": [
        {
            "dateadded": "2026-04-26 18:50:18 UTC",
            "url": "https://wo0hv.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832375/",
            "reporter": "anonymous"
        }
    ],
    "3832374": [
        {
            "dateadded": "2026-04-26 18:48:25 UTC",
            "url": "http://125.40.122.254:36102/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832374/",
            "reporter": "geenensp"
        }
    ],
    "3832373": [
        {
            "dateadded": "2026-04-26 18:45:30 UTC",
            "url": "http://123.10.10.81:39731/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832373/",
            "reporter": "geenensp"
        }
    ],
    "3832372": [
        {
            "dateadded": "2026-04-26 18:45:19 UTC",
            "url": "https://xzgik.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:45:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832372/",
            "reporter": "anonymous"
        }
    ],
    "3832371": [
        {
            "dateadded": "2026-04-26 18:40:16 UTC",
            "url": "https://darcymotors2.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=ford&c=&c=&c=&c=&c=&c=&c=",
            "url_status": "offline",
            "last_online": "2026-04-26 23:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832371/",
            "reporter": "abuse_ch"
        }
    ],
    "3832370": [
        {
            "dateadded": "2026-04-26 18:39:23 UTC",
            "url": "http://115.48.49.164:60266/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:02:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832370/",
            "reporter": "geenensp"
        }
    ],
    "3832369": [
        {
            "dateadded": "2026-04-26 18:37:13 UTC",
            "url": "https://l1chen-hold.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832369/",
            "reporter": "anonymous"
        }
    ],
    "3832368": [
        {
            "dateadded": "2026-04-26 18:37:07 UTC",
            "url": "http://45.166.51.206:57693/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832368/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832367": [
        {
            "dateadded": "2026-04-26 18:29:20 UTC",
            "url": "http://61.137.206.59:55164/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832367/",
            "reporter": "geenensp"
        }
    ],
    "3832366": [
        {
            "dateadded": "2026-04-26 18:27:18 UTC",
            "url": "http://222.124.100.43:51617/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832366/",
            "reporter": "geenensp"
        }
    ],
    "3832365": [
        {
            "dateadded": "2026-04-26 18:27:09 UTC",
            "url": "https://wildsai.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832365/",
            "reporter": "anonymous"
        }
    ],
    "3832364": [
        {
            "dateadded": "2026-04-26 18:17:08 UTC",
            "url": "http://42.225.60.249:36698/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:09:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832364/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832363": [
        {
            "dateadded": "2026-04-26 18:16:21 UTC",
            "url": "http://123.235.223.17:54551/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832363/",
            "reporter": "geenensp"
        }
    ],
    "3832362": [
        {
            "dateadded": "2026-04-26 18:15:20 UTC",
            "url": "https://fldenmd.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832362/",
            "reporter": "anonymous"
        }
    ],
    "3832361": [
        {
            "dateadded": "2026-04-26 18:13:27 UTC",
            "url": "https://lumennix.live/uploads/Lumen.zip",
            "url_status": "offline",
            "last_online": "2026-04-26 18:13:27 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-LUMEN"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832361/",
            "reporter": "burger"
        }
    ],
    "3832360": [
        {
            "dateadded": "2026-04-26 18:13:26 UTC",
            "url": "https://gitlab.com/streffy/999/-/raw/main/API.exe",
            "url_status": "online",
            "last_online": "2026-04-27 14:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "gitlab",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832360/",
            "reporter": "burger"
        }
    ],
    "3832359": [
        {
            "dateadded": "2026-04-26 18:13:17 UTC",
            "url": "https://etomoidomen.cfd/api/index.php?a=dl&token=d0a5e3b511c293206448ac44451b87f717fbdfa0c2f97242082bd2f29748a486&src=uranuseng.com&mode=cloudflare",
            "url_status": "offline",
            "last_online": "2026-04-26 18:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832359/",
            "reporter": "burger"
        }
    ],
    "3832358": [
        {
            "dateadded": "2026-04-26 18:13:16 UTC",
            "url": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/BootstrapperNew.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "adeladel32951",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832358/",
            "reporter": "burger"
        }
    ],
    "3832356": [
        {
            "dateadded": "2026-04-26 18:13:15 UTC",
            "url": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/ReevLoader.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:43 UTC",
            "threat": "malware_download",
            "tags": [
                "adeladel32951",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832356/",
            "reporter": "burger"
        }
    ],
    "3832357": [
        {
            "dateadded": "2026-04-26 18:13:15 UTC",
            "url": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/stub.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "EvelynStealer",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832357/",
            "reporter": "burger"
        }
    ],
    "3832352": [
        {
            "dateadded": "2026-04-26 18:13:14 UTC",
            "url": "https://gitlab.com/streffy/999/-/blob/main/S8D70IPCZNAA.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "gitlab"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832352/",
            "reporter": "burger"
        }
    ],
    "3832353": [
        {
            "dateadded": "2026-04-26 18:13:14 UTC",
            "url": "https://github.com/nerd1337-afk/1337/raw/refs/heads/main/abe_decrypt.dll",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:39 UTC",
            "threat": "malware_download",
            "tags": [
                "EvelynStealer",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832353/",
            "reporter": "burger"
        }
    ],
    "3832354": [
        {
            "dateadded": "2026-04-26 18:13:14 UTC",
            "url": "https://gitlab.com/streffy/999/-/blob/main/L7XH7UR9695U.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "gitlab"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832354/",
            "reporter": "burger"
        }
    ],
    "3832355": [
        {
            "dateadded": "2026-04-26 18:13:14 UTC",
            "url": "https://gitlab.com/streffy/999/-/raw/main/Mega_Joiner.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:48 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "gitlab"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832355/",
            "reporter": "burger"
        }
    ],
    "3832351": [
        {
            "dateadded": "2026-04-26 18:13:13 UTC",
            "url": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/Solara.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:04 UTC",
            "threat": "malware_download",
            "tags": [
                "adeladel32951",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832351/",
            "reporter": "burger"
        }
    ],
    "3832349": [
        {
            "dateadded": "2026-04-26 18:13:11 UTC",
            "url": "https://gitlab.com/streffy/999/-/blob/main/Mega_Joiner.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "gitlab"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832349/",
            "reporter": "burger"
        }
    ],
    "3832350": [
        {
            "dateadded": "2026-04-26 18:13:11 UTC",
            "url": "https://gitlab.com/streffy/999/-/blob/main/API.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "gitlab"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832350/",
            "reporter": "burger"
        }
    ],
    "3832346": [
        {
            "dateadded": "2026-04-26 18:13:05 UTC",
            "url": "http://176.65.139.46/sys_arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832346/",
            "reporter": "adliwahid"
        }
    ],
    "3832347": [
        {
            "dateadded": "2026-04-26 18:13:05 UTC",
            "url": "http://62.171.142.33/payload.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832347/",
            "reporter": "adliwahid"
        }
    ],
    "3832348": [
        {
            "dateadded": "2026-04-26 18:13:05 UTC",
            "url": "http://140.233.190.47/wawan.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832348/",
            "reporter": "geenensp"
        }
    ],
    "3832345": [
        {
            "dateadded": "2026-04-26 18:09:10 UTC",
            "url": "https://edit8-grid.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832345/",
            "reporter": "anonymous"
        }
    ],
    "3832344": [
        {
            "dateadded": "2026-04-26 18:06:26 UTC",
            "url": "http://222.124.100.43:51617/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832344/",
            "reporter": "geenensp"
        }
    ],
    "3832343": [
        {
            "dateadded": "2026-04-26 18:01:11 UTC",
            "url": "https://snovv8-mesh.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 18:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832343/",
            "reporter": "anonymous"
        }
    ],
    "3832342": [
        {
            "dateadded": "2026-04-26 18:00:12 UTC",
            "url": "http://61.137.206.59:55164/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832342/",
            "reporter": "geenensp"
        }
    ],
    "3832341": [
        {
            "dateadded": "2026-04-26 17:56:13 UTC",
            "url": "http://123.235.223.17:54551/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:12:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832341/",
            "reporter": "geenensp"
        }
    ],
    "3832340": [
        {
            "dateadded": "2026-04-26 17:55:14 UTC",
            "url": "https://8ltu2.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832340/",
            "reporter": "anonymous"
        }
    ],
    "3832339": [
        {
            "dateadded": "2026-04-26 17:52:06 UTC",
            "url": "http://193.187.101.209:46771/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832339/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832338": [
        {
            "dateadded": "2026-04-26 17:50:19 UTC",
            "url": "http://182.119.71.40:46769/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:12:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832338/",
            "reporter": "geenensp"
        }
    ],
    "3832337": [
        {
            "dateadded": "2026-04-26 17:49:13 UTC",
            "url": "https://ofdqgn.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832337/",
            "reporter": "anonymous"
        }
    ],
    "3832336": [
        {
            "dateadded": "2026-04-26 17:42:12 UTC",
            "url": "https://ughckpku.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832336/",
            "reporter": "anonymous"
        }
    ],
    "3832335": [
        {
            "dateadded": "2026-04-26 17:40:30 UTC",
            "url": "http://115.63.14.76:52965/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:40:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832335/",
            "reporter": "geenensp"
        }
    ],
    "3832334": [
        {
            "dateadded": "2026-04-26 17:39:14 UTC",
            "url": "https://minorclosed.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832334/",
            "reporter": "anonymous"
        }
    ],
    "3832333": [
        {
            "dateadded": "2026-04-26 17:38:35 UTC",
            "url": "http://112.232.9.229:43291/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832333/",
            "reporter": "geenensp"
        }
    ],
    "3832332": [
        {
            "dateadded": "2026-04-26 17:30:16 UTC",
            "url": "https://fembiq.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832332/",
            "reporter": "anonymous"
        }
    ],
    "3832331": [
        {
            "dateadded": "2026-04-26 17:20:08 UTC",
            "url": "http://203.159.90.22/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 13:50:53 UTC",
            "threat": "malware_download",
            "tags": [
                "203-159-90-22",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832331/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832330": [
        {
            "dateadded": "2026-04-26 17:19:13 UTC",
            "url": "https://okqgg.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832330/",
            "reporter": "anonymous"
        }
    ],
    "3832329": [
        {
            "dateadded": "2026-04-26 17:15:17 UTC",
            "url": "https://sand-tar.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832329/",
            "reporter": "anonymous"
        }
    ],
    "3832328": [
        {
            "dateadded": "2026-04-26 17:12:16 UTC",
            "url": "http://42.225.60.249:36698/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832328/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832327": [
        {
            "dateadded": "2026-04-26 17:03:14 UTC",
            "url": "https://marshform.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 17:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832327/",
            "reporter": "anonymous"
        }
    ],
    "3832326": [
        {
            "dateadded": "2026-04-26 16:59:13 UTC",
            "url": "https://gl0ss-vault.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832326/",
            "reporter": "anonymous"
        }
    ],
    "3832324": [
        {
            "dateadded": "2026-04-26 16:51:08 UTC",
            "url": "http://193.26.115.162/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "193-26-115-162",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832324/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832325": [
        {
            "dateadded": "2026-04-26 16:51:08 UTC",
            "url": "https://192.159.99.32/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "192-159-99-32",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832325/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832323": [
        {
            "dateadded": "2026-04-26 16:50:10 UTC",
            "url": "https://192.159.99.209/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "192-159-99-209",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832323/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832319": [
        {
            "dateadded": "2026-04-26 16:50:09 UTC",
            "url": "http://192.159.99.152:8080/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "192-159-99-152-8080",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832319/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832320": [
        {
            "dateadded": "2026-04-26 16:50:09 UTC",
            "url": "https://124.198.132.54/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-132-54",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832320/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832321": [
        {
            "dateadded": "2026-04-26 16:50:09 UTC",
            "url": "https://124.198.132.14/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-132-14",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832321/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832322": [
        {
            "dateadded": "2026-04-26 16:50:09 UTC",
            "url": "https://124.198.132.37/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:53 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-132-37",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832322/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832318": [
        {
            "dateadded": "2026-04-26 16:49:07 UTC",
            "url": "https://vqq7jll.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832318/",
            "reporter": "anonymous"
        }
    ],
    "3832316": [
        {
            "dateadded": "2026-04-26 16:47:18 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.x86",
            "url_status": "offline",
            "last_online": "2026-04-26 20:06:43 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832316/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832317": [
        {
            "dateadded": "2026-04-26 16:47:18 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.arm4",
            "url_status": "offline",
            "last_online": "2026-04-26 19:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832317/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832315": [
        {
            "dateadded": "2026-04-26 16:47:09 UTC",
            "url": "http://124.198.131.54/Bin/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-131-54",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832315/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832314": [
        {
            "dateadded": "2026-04-26 16:47:08 UTC",
            "url": "http://124.198.131.54/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 16:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-131-54",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832314/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832311": [
        {
            "dateadded": "2026-04-26 16:46:20 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.sparc",
            "url_status": "offline",
            "last_online": "2026-04-26 19:34:54 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832311/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832312": [
        {
            "dateadded": "2026-04-26 16:46:20 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.arm6",
            "url_status": "offline",
            "last_online": "2026-04-26 19:42:53 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832312/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832313": [
        {
            "dateadded": "2026-04-26 16:46:20 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 19:08:49 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832313/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832306": [
        {
            "dateadded": "2026-04-26 16:46:19 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.ppc",
            "url_status": "offline",
            "last_online": "2026-04-26 18:42:42 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832306/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832307": [
        {
            "dateadded": "2026-04-26 16:46:19 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 19:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832307/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832308": [
        {
            "dateadded": "2026-04-26 16:46:19 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:00:48 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832308/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832309": [
        {
            "dateadded": "2026-04-26 16:46:19 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.arm5",
            "url_status": "offline",
            "last_online": "2026-04-26 19:08:05 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832309/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832310": [
        {
            "dateadded": "2026-04-26 16:46:19 UTC",
            "url": "http://45.156.87.140/fuckjewishpeople.mips",
            "url_status": "offline",
            "last_online": "2026-04-26 19:53:57 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832310/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832305": [
        {
            "dateadded": "2026-04-26 16:45:21 UTC",
            "url": "http://221.13.232.134:33101/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:49:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832305/",
            "reporter": "geenensp"
        }
    ],
    "3832304": [
        {
            "dateadded": "2026-04-26 16:44:07 UTC",
            "url": "https://thor-hinge.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832304/",
            "reporter": "anonymous"
        }
    ],
    "3832303": [
        {
            "dateadded": "2026-04-26 16:32:07 UTC",
            "url": "https://temmodul.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832303/",
            "reporter": "anonymous"
        }
    ],
    "3832302": [
        {
            "dateadded": "2026-04-26 16:27:09 UTC",
            "url": "https://zazsvrye.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832302/",
            "reporter": "anonymous"
        }
    ],
    "3832301": [
        {
            "dateadded": "2026-04-26 16:24:10 UTC",
            "url": "https://sermarken.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832301/",
            "reporter": "anonymous"
        }
    ],
    "3832300": [
        {
            "dateadded": "2026-04-26 16:19:17 UTC",
            "url": "http://219.156.191.74:47648/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832300/",
            "reporter": "geenensp"
        }
    ],
    "3832299": [
        {
            "dateadded": "2026-04-26 16:14:21 UTC",
            "url": "http://110.36.91.244:54235/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832299/",
            "reporter": "geenensp"
        }
    ],
    "3832298": [
        {
            "dateadded": "2026-04-26 16:12:11 UTC",
            "url": "https://geo-ca5t.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832298/",
            "reporter": "anonymous"
        }
    ],
    "3832297": [
        {
            "dateadded": "2026-04-26 16:10:23 UTC",
            "url": "http://123.129.131.232:43915/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832297/",
            "reporter": "geenensp"
        }
    ],
    "3832296": [
        {
            "dateadded": "2026-04-26 16:08:09 UTC",
            "url": "https://aa5sf.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 16:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832296/",
            "reporter": "anonymous"
        }
    ],
    "3832292": [
        {
            "dateadded": "2026-04-26 16:06:18 UTC",
            "url": "http://188.209.129.88/arm4",
            "url_status": "offline",
            "last_online": "2026-04-26 16:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832292/",
            "reporter": "botnetkiller"
        }
    ],
    "3832293": [
        {
            "dateadded": "2026-04-26 16:06:18 UTC",
            "url": "http://188.209.129.88/arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 16:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832293/",
            "reporter": "botnetkiller"
        }
    ],
    "3832294": [
        {
            "dateadded": "2026-04-26 16:06:18 UTC",
            "url": "http://188.209.129.88/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 16:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832294/",
            "reporter": "botnetkiller"
        }
    ],
    "3832295": [
        {
            "dateadded": "2026-04-26 16:06:18 UTC",
            "url": "http://188.209.129.88/arm5",
            "url_status": "offline",
            "last_online": "2026-04-26 16:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832295/",
            "reporter": "botnetkiller"
        }
    ],
    "3832291": [
        {
            "dateadded": "2026-04-26 16:05:22 UTC",
            "url": "http://188.209.129.88/mips",
            "url_status": "offline",
            "last_online": "2026-04-26 16:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832291/",
            "reporter": "botnetkiller"
        }
    ],
    "3832289": [
        {
            "dateadded": "2026-04-26 16:04:10 UTC",
            "url": "http://188.209.129.88/tplink.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 16:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832289/",
            "reporter": "botnetkiller"
        }
    ],
    "3832290": [
        {
            "dateadded": "2026-04-26 16:04:10 UTC",
            "url": "http://182.123.161.149:34889/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:22:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832290/",
            "reporter": "geenensp"
        }
    ],
    "3832288": [
        {
            "dateadded": "2026-04-26 15:57:06 UTC",
            "url": "http://203.101.187.22:53636/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832288/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832287": [
        {
            "dateadded": "2026-04-26 15:56:11 UTC",
            "url": "http://219.156.191.74:47648/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 04:59:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832287/",
            "reporter": "geenensp"
        }
    ],
    "3832286": [
        {
            "dateadded": "2026-04-26 15:55:08 UTC",
            "url": "https://foplq.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832286/",
            "reporter": "anonymous"
        }
    ],
    "3832285": [
        {
            "dateadded": "2026-04-26 15:53:17 UTC",
            "url": "http://182.121.86.93:41234/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 15:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832285/",
            "reporter": "geenensp"
        }
    ],
    "3832284": [
        {
            "dateadded": "2026-04-26 15:51:20 UTC",
            "url": "http://137.184.57.43/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-26 15:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832284/",
            "reporter": "botnetkiller"
        }
    ],
    "3832283": [
        {
            "dateadded": "2026-04-26 15:49:19 UTC",
            "url": "http://221.13.232.134:33101/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:16:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832283/",
            "reporter": "geenensp"
        }
    ],
    "3832282": [
        {
            "dateadded": "2026-04-26 15:48:09 UTC",
            "url": "https://norcorear3.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832282/",
            "reporter": "anonymous"
        }
    ],
    "3832281": [
        {
            "dateadded": "2026-04-26 15:46:12 UTC",
            "url": "http://115.62.165.203:45213/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832281/",
            "reporter": "geenensp"
        }
    ],
    "3832280": [
        {
            "dateadded": "2026-04-26 15:43:20 UTC",
            "url": "http://45.166.51.206:57693/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832280/",
            "reporter": "geenensp"
        }
    ],
    "3832279": [
        {
            "dateadded": "2026-04-26 15:43:19 UTC",
            "url": "http://200.6.91.47:53338/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832279/",
            "reporter": "geenensp"
        }
    ],
    "3832278": [
        {
            "dateadded": "2026-04-26 15:42:20 UTC",
            "url": "http://123.129.131.232:43915/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:11:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832278/",
            "reporter": "geenensp"
        }
    ],
    "3832277": [
        {
            "dateadded": "2026-04-26 15:42:07 UTC",
            "url": "https://alt-rnetr.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832277/",
            "reporter": "anonymous"
        }
    ],
    "3832276": [
        {
            "dateadded": "2026-04-26 15:36:21 UTC",
            "url": "http://123.14.148.70:60939/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832276/",
            "reporter": "geenensp"
        }
    ],
    "3832275": [
        {
            "dateadded": "2026-04-26 15:36:08 UTC",
            "url": "https://rklpwx.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832275/",
            "reporter": "anonymous"
        }
    ],
    "3832274": [
        {
            "dateadded": "2026-04-26 15:35:15 UTC",
            "url": "http://61.52.33.105:44211/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832274/",
            "reporter": "geenensp"
        }
    ],
    "3832273": [
        {
            "dateadded": "2026-04-26 15:30:11 UTC",
            "url": "https://medi4-spark.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832273/",
            "reporter": "anonymous"
        }
    ],
    "3832272": [
        {
            "dateadded": "2026-04-26 15:24:20 UTC",
            "url": "http://182.127.188.204:47075/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:53:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832272/",
            "reporter": "geenensp"
        }
    ],
    "3832271": [
        {
            "dateadded": "2026-04-26 15:22:11 UTC",
            "url": "https://insivisual.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832271/",
            "reporter": "anonymous"
        }
    ],
    "3832270": [
        {
            "dateadded": "2026-04-26 15:22:08 UTC",
            "url": "http://203.101.187.22:53636/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832270/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832269": [
        {
            "dateadded": "2026-04-26 15:17:08 UTC",
            "url": "https://exposerv.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832269/",
            "reporter": "anonymous"
        }
    ],
    "3832268": [
        {
            "dateadded": "2026-04-26 15:13:08 UTC",
            "url": "https://lightinn.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832268/",
            "reporter": "anonymous"
        }
    ],
    "3832267": [
        {
            "dateadded": "2026-04-26 15:10:22 UTC",
            "url": "http://110.37.120.17:47456/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832267/",
            "reporter": "geenensp"
        }
    ],
    "3832266": [
        {
            "dateadded": "2026-04-26 15:03:10 UTC",
            "url": "https://3eums.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832266/",
            "reporter": "anonymous"
        }
    ],
    "3832265": [
        {
            "dateadded": "2026-04-26 15:00:09 UTC",
            "url": "https://uy2qx.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 15:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832265/",
            "reporter": "anonymous"
        }
    ],
    "3832264": [
        {
            "dateadded": "2026-04-26 14:51:09 UTC",
            "url": "https://runt11-drive.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832264/",
            "reporter": "anonymous"
        }
    ],
    "3832263": [
        {
            "dateadded": "2026-04-26 14:49:15 UTC",
            "url": "http://77.236.74.65:43488/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:04:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832263/",
            "reporter": "geenensp"
        }
    ],
    "3832262": [
        {
            "dateadded": "2026-04-26 14:45:12 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:17 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832262/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832261": [
        {
            "dateadded": "2026-04-26 14:44:23 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832261/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832260": [
        {
            "dateadded": "2026-04-26 14:44:19 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832260/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832259": [
        {
            "dateadded": "2026-04-26 14:44:18 UTC",
            "url": "http://182.127.188.204:47075/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:04:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832259/",
            "reporter": "geenensp"
        }
    ],
    "3832255": [
        {
            "dateadded": "2026-04-26 14:44:12 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832255/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832256": [
        {
            "dateadded": "2026-04-26 14:44:12 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:37 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "happytugsbakery-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832256/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832257": [
        {
            "dateadded": "2026-04-26 14:44:12 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832257/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832258": [
        {
            "dateadded": "2026-04-26 14:44:12 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832258/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832253": [
        {
            "dateadded": "2026-04-26 14:44:08 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:21 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832253/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832254": [
        {
            "dateadded": "2026-04-26 14:44:08 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832254/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832250": [
        {
            "dateadded": "2026-04-26 14:44:07 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.x64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832250/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832251": [
        {
            "dateadded": "2026-04-26 14:44:07 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832251/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832252": [
        {
            "dateadded": "2026-04-26 14:44:07 UTC",
            "url": "http://happytugsbakery.com/js/assets/xdf.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "happytugsbakery-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832252/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832249": [
        {
            "dateadded": "2026-04-26 14:43:17 UTC",
            "url": "http://125.47.68.25:38536/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832249/",
            "reporter": "geenensp"
        }
    ],
    "3832248": [
        {
            "dateadded": "2026-04-26 14:41:16 UTC",
            "url": "http://182.126.247.164:49192/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832248/",
            "reporter": "geenensp"
        }
    ],
    "3832247": [
        {
            "dateadded": "2026-04-26 14:40:08 UTC",
            "url": "https://quarrytrav.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832247/",
            "reporter": "anonymous"
        }
    ],
    "3832246": [
        {
            "dateadded": "2026-04-26 14:39:16 UTC",
            "url": "http://204.76.203.195/xx.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:42 UTC",
            "threat": "malware_download",
            "tags": [
                "204-76-203-195",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832246/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832245": [
        {
            "dateadded": "2026-04-26 14:38:12 UTC",
            "url": "http://192.109.200.9/svc.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 17:02:27 UTC",
            "threat": "malware_download",
            "tags": [
                "192-109-200-9",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832245/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832244": [
        {
            "dateadded": "2026-04-26 14:38:08 UTC",
            "url": "http://204.76.203.195/bj",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:42 UTC",
            "threat": "malware_download",
            "tags": [
                "204-76-203-195",
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832244/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832243": [
        {
            "dateadded": "2026-04-26 14:38:07 UTC",
            "url": "http://204.76.203.248/x",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "204-76-203-248",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832243/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832242": [
        {
            "dateadded": "2026-04-26 14:37:06 UTC",
            "url": "http://123.5.158.112:43874/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:22:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832242/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832241": [
        {
            "dateadded": "2026-04-26 14:35:15 UTC",
            "url": "http://68.185.152.86:45230/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:14:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832241/",
            "reporter": "geenensp"
        }
    ],
    "3832240": [
        {
            "dateadded": "2026-04-26 14:34:13 UTC",
            "url": "https://sandbhar.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832240/",
            "reporter": "anonymous"
        }
    ],
    "3832239": [
        {
            "dateadded": "2026-04-26 14:32:23 UTC",
            "url": "http://61.53.236.184:39448/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:17:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832239/",
            "reporter": "geenensp"
        }
    ],
    "3832238": [
        {
            "dateadded": "2026-04-26 14:31:09 UTC",
            "url": "https://ridgegentle.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832238/",
            "reporter": "anonymous"
        }
    ],
    "3832236": [
        {
            "dateadded": "2026-04-26 14:28:07 UTC",
            "url": "https://192.109.200.12/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-27 05:44:43 UTC",
            "threat": "malware_download",
            "tags": [
                "192-109-200-12",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832236/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832237": [
        {
            "dateadded": "2026-04-26 14:28:07 UTC",
            "url": "https://192.109.200.131/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:48 UTC",
            "threat": "malware_download",
            "tags": [
                "192-109-200-131",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832237/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832235": [
        {
            "dateadded": "2026-04-26 14:27:13 UTC",
            "url": "http://77.236.74.65:43488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:25:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832235/",
            "reporter": "geenensp"
        }
    ],
    "3832234": [
        {
            "dateadded": "2026-04-26 14:22:09 UTC",
            "url": "http://59.58.190.87:56557/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832234/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832233": [
        {
            "dateadded": "2026-04-26 14:20:14 UTC",
            "url": "http://42.235.170.165:44576/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832233/",
            "reporter": "geenensp"
        }
    ],
    "3832232": [
        {
            "dateadded": "2026-04-26 14:20:09 UTC",
            "url": "https://qkkrhea.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832232/",
            "reporter": "anonymous"
        }
    ],
    "3832231": [
        {
            "dateadded": "2026-04-26 14:19:15 UTC",
            "url": "http://42.235.170.165:44576/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832231/",
            "reporter": "geenensp"
        }
    ],
    "3832230": [
        {
            "dateadded": "2026-04-26 14:14:17 UTC",
            "url": "http://182.126.247.164:49192/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832230/",
            "reporter": "geenensp"
        }
    ],
    "3832229": [
        {
            "dateadded": "2026-04-26 14:12:13 UTC",
            "url": "https://r4vxeem.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832229/",
            "reporter": "anonymous"
        }
    ],
    "3832228": [
        {
            "dateadded": "2026-04-26 14:07:22 UTC",
            "url": "http://112.239.96.219:54525/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:42:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832228/",
            "reporter": "adliwahid"
        }
    ],
    "3832227": [
        {
            "dateadded": "2026-04-26 14:07:14 UTC",
            "url": "http://163.142.92.24:45008/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:13:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832227/",
            "reporter": "adliwahid"
        }
    ],
    "3832222": [
        {
            "dateadded": "2026-04-26 14:07:09 UTC",
            "url": "http://182.121.224.70:39796/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:11:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832222/",
            "reporter": "adliwahid"
        }
    ],
    "3832223": [
        {
            "dateadded": "2026-04-26 14:07:09 UTC",
            "url": "http://36.49.34.147:32875/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832223/",
            "reporter": "adliwahid"
        }
    ],
    "3832224": [
        {
            "dateadded": "2026-04-26 14:07:09 UTC",
            "url": "http://42.235.175.195:36566/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:52:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832224/",
            "reporter": "adliwahid"
        }
    ],
    "3832225": [
        {
            "dateadded": "2026-04-26 14:07:09 UTC",
            "url": "http://42.237.57.50:34153/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832225/",
            "reporter": "adliwahid"
        }
    ],
    "3832226": [
        {
            "dateadded": "2026-04-26 14:07:09 UTC",
            "url": "http://105.186.231.182:57649/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832226/",
            "reporter": "adliwahid"
        }
    ],
    "3832219": [
        {
            "dateadded": "2026-04-26 14:07:08 UTC",
            "url": "http://176.106.241.72:47350/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832219/",
            "reporter": "adliwahid"
        }
    ],
    "3832220": [
        {
            "dateadded": "2026-04-26 14:07:08 UTC",
            "url": "http://216.126.86.125:51859/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832220/",
            "reporter": "adliwahid"
        }
    ],
    "3832221": [
        {
            "dateadded": "2026-04-26 14:07:08 UTC",
            "url": "http://110.36.80.169:42693/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:57:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832221/",
            "reporter": "adliwahid"
        }
    ],
    "3832217": [
        {
            "dateadded": "2026-04-26 14:06:10 UTC",
            "url": "http://219.156.20.102:52257/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832217/",
            "reporter": "adliwahid"
        }
    ],
    "3832218": [
        {
            "dateadded": "2026-04-26 14:06:10 UTC",
            "url": "http://123.10.68.84:51695/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832218/",
            "reporter": "adliwahid"
        }
    ],
    "3832205": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://123.190.95.26:36634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:18:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832205/",
            "reporter": "adliwahid"
        }
    ],
    "3832206": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://123.12.81.174:53457/i",
            "url_status": "offline",
            "last_online": "2026-04-27 02:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832206/",
            "reporter": "adliwahid"
        }
    ],
    "3832207": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://42.229.157.42:48039/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:20:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832207/",
            "reporter": "adliwahid"
        }
    ],
    "3832208": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://211.93.95.46:60983/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832208/",
            "reporter": "adliwahid"
        }
    ],
    "3832209": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://190.109.228.167:47438/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:16:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832209/",
            "reporter": "adliwahid"
        }
    ],
    "3832210": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://219.156.88.198:51945/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:59:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832210/",
            "reporter": "adliwahid"
        }
    ],
    "3832211": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://120.28.196.250:55247/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832211/",
            "reporter": "adliwahid"
        }
    ],
    "3832212": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://61.53.92.185:51484/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832212/",
            "reporter": "adliwahid"
        }
    ],
    "3832213": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://116.11.143.247:34713/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832213/",
            "reporter": "adliwahid"
        }
    ],
    "3832214": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://113.116.148.48:46412/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832214/",
            "reporter": "adliwahid"
        }
    ],
    "3832215": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://42.55.28.223:51070/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832215/",
            "reporter": "adliwahid"
        }
    ],
    "3832216": [
        {
            "dateadded": "2026-04-26 14:06:09 UTC",
            "url": "http://182.117.11.57:33814/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832216/",
            "reporter": "adliwahid"
        }
    ],
    "3832203": [
        {
            "dateadded": "2026-04-26 14:06:08 UTC",
            "url": "http://77.79.160.210:34358/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832203/",
            "reporter": "adliwahid"
        }
    ],
    "3832204": [
        {
            "dateadded": "2026-04-26 14:06:08 UTC",
            "url": "http://193.163.187.69:57456/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832204/",
            "reporter": "adliwahid"
        }
    ],
    "3832202": [
        {
            "dateadded": "2026-04-26 14:05:20 UTC",
            "url": "https://loose-bun.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 14:05:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832202/",
            "reporter": "anonymous"
        }
    ],
    "3832199": [
        {
            "dateadded": "2026-04-26 14:05:13 UTC",
            "url": "http://221.15.14.130:49273/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832199/",
            "reporter": "adliwahid"
        }
    ],
    "3832200": [
        {
            "dateadded": "2026-04-26 14:05:13 UTC",
            "url": "http://61.52.83.18:52767/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832200/",
            "reporter": "adliwahid"
        }
    ],
    "3832201": [
        {
            "dateadded": "2026-04-26 14:05:13 UTC",
            "url": "http://123.12.81.174:53457/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:00:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832201/",
            "reporter": "adliwahid"
        }
    ],
    "3832185": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://114.216.182.208:45485/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832185/",
            "reporter": "adliwahid"
        }
    ],
    "3832186": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://175.150.78.242:55160/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832186/",
            "reporter": "adliwahid"
        }
    ],
    "3832187": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://182.117.79.47:56010/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 14:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832187/",
            "reporter": "adliwahid"
        }
    ],
    "3832188": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://200.6.91.47:53338/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832188/",
            "reporter": "adliwahid"
        }
    ],
    "3832189": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://45.171.177.193:32935/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832189/",
            "reporter": "adliwahid"
        }
    ],
    "3832190": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://110.37.120.17:47456/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832190/",
            "reporter": "adliwahid"
        }
    ],
    "3832191": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://113.221.27.110:38224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 14:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832191/",
            "reporter": "adliwahid"
        }
    ],
    "3832192": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://27.204.198.85:42435/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 01:02:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832192/",
            "reporter": "adliwahid"
        }
    ],
    "3832193": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://116.167.107.251:51865/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:28:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832193/",
            "reporter": "adliwahid"
        }
    ],
    "3832194": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://182.121.224.70:39796/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:23:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832194/",
            "reporter": "adliwahid"
        }
    ],
    "3832195": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://36.49.34.147:32875/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:43:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832195/",
            "reporter": "adliwahid"
        }
    ],
    "3832196": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://116.167.107.251:51865/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:19:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832196/",
            "reporter": "adliwahid"
        }
    ],
    "3832197": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://61.52.83.18:52767/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832197/",
            "reporter": "adliwahid"
        }
    ],
    "3832198": [
        {
            "dateadded": "2026-04-26 14:05:12 UTC",
            "url": "http://111.164.253.1:57439/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:31:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832198/",
            "reporter": "adliwahid"
        }
    ],
    "3832184": [
        {
            "dateadded": "2026-04-26 14:04:21 UTC",
            "url": "http://216.126.86.125:51859/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832184/",
            "reporter": "adliwahid"
        }
    ],
    "3832183": [
        {
            "dateadded": "2026-04-26 14:04:20 UTC",
            "url": "http://60.3.23.156:34909/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832183/",
            "reporter": "adliwahid"
        }
    ],
    "3832182": [
        {
            "dateadded": "2026-04-26 14:04:18 UTC",
            "url": "http://36.70.98.87:36204/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:58:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832182/",
            "reporter": "adliwahid"
        }
    ],
    "3832181": [
        {
            "dateadded": "2026-04-26 14:04:16 UTC",
            "url": "http://175.148.69.89:46078/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:14:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832181/",
            "reporter": "adliwahid"
        }
    ],
    "3832178": [
        {
            "dateadded": "2026-04-26 14:04:12 UTC",
            "url": "http://222.127.90.242:37706/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832178/",
            "reporter": "adliwahid"
        }
    ],
    "3832179": [
        {
            "dateadded": "2026-04-26 14:04:12 UTC",
            "url": "http://222.127.90.242:37706/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832179/",
            "reporter": "adliwahid"
        }
    ],
    "3832180": [
        {
            "dateadded": "2026-04-26 14:04:12 UTC",
            "url": "http://175.148.69.89:46078/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:28:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832180/",
            "reporter": "adliwahid"
        }
    ],
    "3832164": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://27.37.32.13:57584/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 10:27:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832164/",
            "reporter": "adliwahid"
        }
    ],
    "3832165": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://36.70.229.69:39320/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832165/",
            "reporter": "adliwahid"
        }
    ],
    "3832166": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://222.137.145.138:50494/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:41:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832166/",
            "reporter": "adliwahid"
        }
    ],
    "3832167": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://42.55.1.57:44711/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832167/",
            "reporter": "adliwahid"
        }
    ],
    "3832168": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://42.229.175.13:53936/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 14:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832168/",
            "reporter": "adliwahid"
        }
    ],
    "3832169": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://110.37.39.234:41490/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832169/",
            "reporter": "adliwahid"
        }
    ],
    "3832170": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://221.15.189.92:58009/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832170/",
            "reporter": "adliwahid"
        }
    ],
    "3832171": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://110.37.53.25:37443/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:30:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832171/",
            "reporter": "adliwahid"
        }
    ],
    "3832172": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://27.213.140.201:60251/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832172/",
            "reporter": "adliwahid"
        }
    ],
    "3832173": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://27.204.199.139:41263/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832173/",
            "reporter": "adliwahid"
        }
    ],
    "3832174": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://178.81.6.145:60572/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:20:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832174/",
            "reporter": "adliwahid"
        }
    ],
    "3832175": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://42.177.185.201:51331/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832175/",
            "reporter": "adliwahid"
        }
    ],
    "3832176": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://42.7.246.99:55750/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:41:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832176/",
            "reporter": "adliwahid"
        }
    ],
    "3832177": [
        {
            "dateadded": "2026-04-26 14:04:11 UTC",
            "url": "http://222.137.100.236:48665/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832177/",
            "reporter": "adliwahid"
        }
    ],
    "3832163": [
        {
            "dateadded": "2026-04-26 14:03:21 UTC",
            "url": "http://116.139.183.5:48771/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832163/",
            "reporter": "adliwahid"
        }
    ],
    "3832154": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://113.221.27.110:38224/i",
            "url_status": "offline",
            "last_online": "2026-04-26 14:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832154/",
            "reporter": "adliwahid"
        }
    ],
    "3832155": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://175.150.78.242:55160/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832155/",
            "reporter": "adliwahid"
        }
    ],
    "3832156": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://118.253.80.3:48921/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:03:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832156/",
            "reporter": "adliwahid"
        }
    ],
    "3832157": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://42.229.157.42:48039/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832157/",
            "reporter": "adliwahid"
        }
    ],
    "3832158": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://123.12.11.204:60425/i",
            "url_status": "offline",
            "last_online": "2026-04-27 03:23:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832158/",
            "reporter": "adliwahid"
        }
    ],
    "3832159": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://36.70.229.69:39320/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832159/",
            "reporter": "adliwahid"
        }
    ],
    "3832160": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://27.37.32.13:57584/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832160/",
            "reporter": "adliwahid"
        }
    ],
    "3832161": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://114.216.182.208:45485/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832161/",
            "reporter": "adliwahid"
        }
    ],
    "3832162": [
        {
            "dateadded": "2026-04-26 14:03:11 UTC",
            "url": "http://115.59.30.87:34637/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832162/",
            "reporter": "adliwahid"
        }
    ],
    "3832144": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://182.119.71.40:46769/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832144/",
            "reporter": "adliwahid"
        }
    ],
    "3832145": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://123.173.89.126:52537/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832145/",
            "reporter": "adliwahid"
        }
    ],
    "3832146": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://110.136.98.126:52422/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832146/",
            "reporter": "adliwahid"
        }
    ],
    "3832147": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://221.15.189.92:58009/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832147/",
            "reporter": "adliwahid"
        }
    ],
    "3832148": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://39.80.82.101:53795/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832148/",
            "reporter": "adliwahid"
        }
    ],
    "3832149": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://120.28.196.250:55247/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832149/",
            "reporter": "adliwahid"
        }
    ],
    "3832150": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://110.36.28.183:57160/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:09:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832150/",
            "reporter": "adliwahid"
        }
    ],
    "3832151": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://112.84.219.118:37931/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832151/",
            "reporter": "adliwahid"
        }
    ],
    "3832152": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://222.127.49.161:45371/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832152/",
            "reporter": "adliwahid"
        }
    ],
    "3832153": [
        {
            "dateadded": "2026-04-26 14:03:10 UTC",
            "url": "http://222.139.105.248:51446/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832153/",
            "reporter": "adliwahid"
        }
    ],
    "3832143": [
        {
            "dateadded": "2026-04-26 14:02:27 UTC",
            "url": "http://static-host119-30-117-248.link.net.pk/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832143/",
            "reporter": "botnetkiller"
        }
    ],
    "3832141": [
        {
            "dateadded": "2026-04-26 14:02:20 UTC",
            "url": "http://206.135.172.47:44212/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832141/",
            "reporter": "botnetkiller"
        }
    ],
    "3832142": [
        {
            "dateadded": "2026-04-26 14:02:20 UTC",
            "url": "http://119.30.117.248:52528/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832142/",
            "reporter": "botnetkiller"
        }
    ],
    "3832140": [
        {
            "dateadded": "2026-04-26 14:02:11 UTC",
            "url": "http://123.190.95.26:36634/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:19:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832140/",
            "reporter": "adliwahid"
        }
    ],
    "3832139": [
        {
            "dateadded": "2026-04-26 14:02:10 UTC",
            "url": "http://180.108.190.219:38059/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832139/",
            "reporter": "adliwahid"
        }
    ],
    "3832135": [
        {
            "dateadded": "2026-04-26 14:02:09 UTC",
            "url": "http://125.47.33.178:44410/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:27:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832135/",
            "reporter": "adliwahid"
        }
    ],
    "3832136": [
        {
            "dateadded": "2026-04-26 14:02:09 UTC",
            "url": "http://222.137.145.138:50494/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832136/",
            "reporter": "adliwahid"
        }
    ],
    "3832137": [
        {
            "dateadded": "2026-04-26 14:02:09 UTC",
            "url": "http://182.124.45.152:48610/i",
            "url_status": "offline",
            "last_online": "2026-04-26 14:02:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832137/",
            "reporter": "adliwahid"
        }
    ],
    "3832138": [
        {
            "dateadded": "2026-04-26 14:02:09 UTC",
            "url": "http://222.139.198.206:51925/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:11:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832138/",
            "reporter": "adliwahid"
        }
    ],
    "3832129": [
        {
            "dateadded": "2026-04-26 14:02:08 UTC",
            "url": "http://110.39.233.38:43023/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832129/",
            "reporter": "adliwahid"
        }
    ],
    "3832130": [
        {
            "dateadded": "2026-04-26 14:02:08 UTC",
            "url": "http://219.155.195.93:42238/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832130/",
            "reporter": "adliwahid"
        }
    ],
    "3832131": [
        {
            "dateadded": "2026-04-26 14:02:08 UTC",
            "url": "http://110.39.233.38:43023/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832131/",
            "reporter": "adliwahid"
        }
    ],
    "3832132": [
        {
            "dateadded": "2026-04-26 14:02:08 UTC",
            "url": "http://61.52.214.178:47741/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832132/",
            "reporter": "adliwahid"
        }
    ],
    "3832133": [
        {
            "dateadded": "2026-04-26 14:02:08 UTC",
            "url": "http://190.109.228.167:47438/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:28:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832133/",
            "reporter": "adliwahid"
        }
    ],
    "3832134": [
        {
            "dateadded": "2026-04-26 14:02:08 UTC",
            "url": "http://39.80.82.101:53795/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832134/",
            "reporter": "adliwahid"
        }
    ],
    "3832128": [
        {
            "dateadded": "2026-04-26 14:02:05 UTC",
            "url": "http://176.65.139.141/zyxel.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832128/",
            "reporter": "botnetkiller"
        }
    ],
    "3832127": [
        {
            "dateadded": "2026-04-26 14:02:04 UTC",
            "url": "http://176.65.139.141/bins/x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832127/",
            "reporter": "botnetkiller"
        }
    ],
    "3832126": [
        {
            "dateadded": "2026-04-26 13:58:09 UTC",
            "url": "https://zentideor.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832126/",
            "reporter": "anonymous"
        }
    ],
    "3832125": [
        {
            "dateadded": "2026-04-26 13:56:17 UTC",
            "url": "http://39.74.110.57:36761/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832125/",
            "reporter": "geenensp"
        }
    ],
    "3832124": [
        {
            "dateadded": "2026-04-26 13:52:08 UTC",
            "url": "https://peak7-frame.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832124/",
            "reporter": "anonymous"
        }
    ],
    "3832123": [
        {
            "dateadded": "2026-04-26 13:46:21 UTC",
            "url": "http://27.215.137.96:60807/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832123/",
            "reporter": "geenensp"
        }
    ],
    "3832122": [
        {
            "dateadded": "2026-04-26 13:46:12 UTC",
            "url": "https://ion-cra.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832122/",
            "reporter": "anonymous"
        }
    ],
    "3832121": [
        {
            "dateadded": "2026-04-26 13:41:11 UTC",
            "url": "http://42.239.231.177:48699/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832121/",
            "reporter": "geenensp"
        }
    ],
    "3832120": [
        {
            "dateadded": "2026-04-26 13:37:10 UTC",
            "url": "https://zenmeshix1.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832120/",
            "reporter": "anonymous"
        }
    ],
    "3832119": [
        {
            "dateadded": "2026-04-26 13:36:20 UTC",
            "url": "http://61.53.236.184:39448/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:12:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832119/",
            "reporter": "geenensp"
        }
    ],
    "3832118": [
        {
            "dateadded": "2026-04-26 13:30:24 UTC",
            "url": "http://217.208.145.20:33976/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832118/",
            "reporter": "geenensp"
        }
    ],
    "3832117": [
        {
            "dateadded": "2026-04-26 13:30:08 UTC",
            "url": "https://tigmjuy.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832117/",
            "reporter": "anonymous"
        }
    ],
    "3832116": [
        {
            "dateadded": "2026-04-26 13:29:07 UTC",
            "url": "http://27.215.137.96:60807/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832116/",
            "reporter": "geenensp"
        }
    ],
    "3832115": [
        {
            "dateadded": "2026-04-26 13:28:15 UTC",
            "url": "http://61.53.89.79:42608/i",
            "url_status": "offline",
            "last_online": "2026-04-26 13:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832115/",
            "reporter": "geenensp"
        }
    ],
    "3832114": [
        {
            "dateadded": "2026-04-26 13:27:06 UTC",
            "url": "http://112.239.96.219:54525/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:13:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832114/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832113": [
        {
            "dateadded": "2026-04-26 13:26:18 UTC",
            "url": "http://182.121.224.139:33604/i",
            "url_status": "offline",
            "last_online": "2026-04-26 13:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832113/",
            "reporter": "geenensp"
        }
    ],
    "3832108": [
        {
            "dateadded": "2026-04-26 13:22:19 UTC",
            "url": "http://176.65.148.160/bins/redis-initd",
            "url_status": "offline",
            "last_online": "2026-04-27 05:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832108/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832109": [
        {
            "dateadded": "2026-04-26 13:22:19 UTC",
            "url": "http://176.65.148.160/bins/redis-conteinerd-shim",
            "url_status": "offline",
            "last_online": "2026-04-27 05:22:54 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832109/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832110": [
        {
            "dateadded": "2026-04-26 13:22:19 UTC",
            "url": "http://176.65.148.160/bins/redis-sbomd",
            "url_status": "offline",
            "last_online": "2026-04-27 06:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832110/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832111": [
        {
            "dateadded": "2026-04-26 13:22:19 UTC",
            "url": "http://176.65.148.160/bins/redis-daemon",
            "url_status": "offline",
            "last_online": "2026-04-27 06:58:05 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832111/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832112": [
        {
            "dateadded": "2026-04-26 13:22:19 UTC",
            "url": "http://176.65.148.160/bins/redis-conteinerd",
            "url_status": "offline",
            "last_online": "2026-04-27 05:11:03 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832112/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832107": [
        {
            "dateadded": "2026-04-26 13:22:12 UTC",
            "url": "https://glolab.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832107/",
            "reporter": "anonymous"
        }
    ],
    "3832102": [
        {
            "dateadded": "2026-04-26 13:21:24 UTC",
            "url": "http://176.65.148.160/bins/redis-proxyd",
            "url_status": "offline",
            "last_online": "2026-04-27 05:22:23 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832102/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832103": [
        {
            "dateadded": "2026-04-26 13:21:24 UTC",
            "url": "http://176.65.148.160/bins/redis-buildxd",
            "url_status": "offline",
            "last_online": "2026-04-27 06:10:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832103/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832104": [
        {
            "dateadded": "2026-04-26 13:21:24 UTC",
            "url": "http://176.65.148.160/bins/redis-scand",
            "url_status": "offline",
            "last_online": "2026-04-27 05:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832104/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832105": [
        {
            "dateadded": "2026-04-26 13:21:24 UTC",
            "url": "http://176.65.148.160/redis-daemon",
            "url_status": "offline",
            "last_online": "2026-04-27 06:49:21 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832105/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832106": [
        {
            "dateadded": "2026-04-26 13:21:24 UTC",
            "url": "http://176.65.148.160/bins/redis-runcd",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832106/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832101": [
        {
            "dateadded": "2026-04-26 13:21:23 UTC",
            "url": "http://176.65.148.160/init.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-148-160",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832101/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832100": [
        {
            "dateadded": "2026-04-26 13:19:18 UTC",
            "url": "http://182.121.224.139:33604/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 13:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832100/",
            "reporter": "geenensp"
        }
    ],
    "3832099": [
        {
            "dateadded": "2026-04-26 13:17:19 UTC",
            "url": "http://42.86.62.202:47199/i",
            "url_status": "offline",
            "last_online": "2026-04-26 13:17:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832099/",
            "reporter": "geenensp"
        }
    ],
    "3832098": [
        {
            "dateadded": "2026-04-26 13:16:13 UTC",
            "url": "https://cargoquery.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832098/",
            "reporter": "anonymous"
        }
    ],
    "3832097": [
        {
            "dateadded": "2026-04-26 13:15:35 UTC",
            "url": "http://176.65.132.197/iran.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-27 06:05:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832097/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832096": [
        {
            "dateadded": "2026-04-26 13:15:34 UTC",
            "url": "http://176.65.132.197/iran.mipsrouter",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832096/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832094": [
        {
            "dateadded": "2026-04-26 13:15:29 UTC",
            "url": "http://176.65.132.197/iran.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832094/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832095": [
        {
            "dateadded": "2026-04-26 13:15:29 UTC",
            "url": "http://176.65.132.197/iran.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 05:23:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832095/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832092": [
        {
            "dateadded": "2026-04-26 13:15:28 UTC",
            "url": "http://176.65.132.197/iran.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 05:59:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832092/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832093": [
        {
            "dateadded": "2026-04-26 13:15:28 UTC",
            "url": "http://176.65.132.197/iran.arc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832093/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832091": [
        {
            "dateadded": "2026-04-26 13:15:27 UTC",
            "url": "http://176.65.132.197/iran.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-27 10:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832091/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832089": [
        {
            "dateadded": "2026-04-26 13:15:26 UTC",
            "url": "http://176.65.132.197/iran.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832089/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832090": [
        {
            "dateadded": "2026-04-26 13:15:26 UTC",
            "url": "http://176.65.132.197/iran.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-27 06:01:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832090/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832087": [
        {
            "dateadded": "2026-04-26 13:15:25 UTC",
            "url": "http://176.65.132.197/iran.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-27 05:21:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832087/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832088": [
        {
            "dateadded": "2026-04-26 13:15:25 UTC",
            "url": "http://176.65.132.197/iran.armv5l",
            "url_status": "offline",
            "last_online": "2026-04-27 05:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832088/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832086": [
        {
            "dateadded": "2026-04-26 13:15:24 UTC",
            "url": "http://176.65.132.197/iran.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 06:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832086/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832084": [
        {
            "dateadded": "2026-04-26 13:15:19 UTC",
            "url": "http://176.65.132.197/iran.i486",
            "url_status": "offline",
            "last_online": "2026-04-27 05:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832084/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832085": [
        {
            "dateadded": "2026-04-26 13:15:19 UTC",
            "url": "http://176.65.132.197/iran.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 05:40:44 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832085/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832083": [
        {
            "dateadded": "2026-04-26 13:15:14 UTC",
            "url": "http://176.65.132.197/iran.sparc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:43:53 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832083/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832082": [
        {
            "dateadded": "2026-04-26 13:15:13 UTC",
            "url": "http://176.65.132.197/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:56:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832082/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832081": [
        {
            "dateadded": "2026-04-26 13:15:08 UTC",
            "url": "http://176.65.132.197/sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:55 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-197",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832081/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832080": [
        {
            "dateadded": "2026-04-26 13:10:16 UTC",
            "url": "https://arkmesh7al.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832080/",
            "reporter": "anonymous"
        }
    ],
    "3832079": [
        {
            "dateadded": "2026-04-26 13:02:09 UTC",
            "url": "https://gr1m-index.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 13:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832079/",
            "reporter": "anonymous"
        }
    ],
    "3832078": [
        {
            "dateadded": "2026-04-26 12:59:07 UTC",
            "url": "https://176.65.132.139/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-132-139",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832078/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832077": [
        {
            "dateadded": "2026-04-26 12:57:07 UTC",
            "url": "http://182.121.118.216:37127/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832077/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832076": [
        {
            "dateadded": "2026-04-26 12:56:20 UTC",
            "url": "https://vocalatomic.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832076/",
            "reporter": "anonymous"
        }
    ],
    "3832075": [
        {
            "dateadded": "2026-04-26 12:54:06 UTC",
            "url": "http://194.26.192.44/iciv36xx0z",
            "url_status": "offline",
            "last_online": "2026-04-26 12:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "194-26-192-44",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832075/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832074": [
        {
            "dateadded": "2026-04-26 12:53:18 UTC",
            "url": "http://42.86.62.202:47199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:53:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832074/",
            "reporter": "geenensp"
        }
    ],
    "3832073": [
        {
            "dateadded": "2026-04-26 12:52:07 UTC",
            "url": "http://42.230.24.165:59393/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832073/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832072": [
        {
            "dateadded": "2026-04-26 12:50:11 UTC",
            "url": "https://3vnp4.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832072/",
            "reporter": "anonymous"
        }
    ],
    "3832071": [
        {
            "dateadded": "2026-04-26 12:47:09 UTC",
            "url": "http://42.230.24.165:59393/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832071/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832070": [
        {
            "dateadded": "2026-04-26 12:43:13 UTC",
            "url": "https://studi-fores.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832070/",
            "reporter": "anonymous"
        }
    ],
    "3832069": [
        {
            "dateadded": "2026-04-26 12:40:10 UTC",
            "url": "https://alphsummer.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832069/",
            "reporter": "anonymous"
        }
    ],
    "3832068": [
        {
            "dateadded": "2026-04-26 12:38:19 UTC",
            "url": "http://79.106.231.163:48147/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:04:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832068/",
            "reporter": "geenensp"
        }
    ],
    "3832067": [
        {
            "dateadded": "2026-04-26 12:30:17 UTC",
            "url": "http://176.65.148.212/tvt",
            "url_status": "offline",
            "last_online": "2026-04-27 05:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-148-212",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832067/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832066": [
        {
            "dateadded": "2026-04-26 12:27:12 UTC",
            "url": "https://lum-lineon.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832066/",
            "reporter": "anonymous"
        }
    ],
    "3832065": [
        {
            "dateadded": "2026-04-26 12:26:21 UTC",
            "url": "http://42.57.216.164:39355/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832065/",
            "reporter": "geenensp"
        }
    ],
    "3832064": [
        {
            "dateadded": "2026-04-26 12:21:17 UTC",
            "url": "http://162.255.251.91:51769/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:19:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832064/",
            "reporter": "geenensp"
        }
    ],
    "3832063": [
        {
            "dateadded": "2026-04-26 12:19:17 UTC",
            "url": "https://zenmesh9en.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832063/",
            "reporter": "anonymous"
        }
    ],
    "3832062": [
        {
            "dateadded": "2026-04-26 12:17:22 UTC",
            "url": "http://115.63.151.175:49147/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832062/",
            "reporter": "geenensp"
        }
    ],
    "3832061": [
        {
            "dateadded": "2026-04-26 12:13:13 UTC",
            "url": "https://5ob0.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832061/",
            "reporter": "anonymous"
        }
    ],
    "3832060": [
        {
            "dateadded": "2026-04-26 12:12:07 UTC",
            "url": "http://42.239.188.71:54439/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:01:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832060/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832059": [
        {
            "dateadded": "2026-04-26 12:05:18 UTC",
            "url": "http://42.59.113.127:60362/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832059/",
            "reporter": "geenensp"
        }
    ],
    "3832058": [
        {
            "dateadded": "2026-04-26 12:05:09 UTC",
            "url": "https://sthj.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 12:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832058/",
            "reporter": "anonymous"
        }
    ],
    "3832057": [
        {
            "dateadded": "2026-04-26 12:03:26 UTC",
            "url": "http://123.5.170.255:53437/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832057/",
            "reporter": "geenensp"
        }
    ],
    "3832056": [
        {
            "dateadded": "2026-04-26 11:59:16 UTC",
            "url": "https://39hwegfg.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832056/",
            "reporter": "anonymous"
        }
    ],
    "3832055": [
        {
            "dateadded": "2026-04-26 11:57:12 UTC",
            "url": "http://59.58.190.87:56557/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:34:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832055/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832054": [
        {
            "dateadded": "2026-04-26 11:57:08 UTC",
            "url": "http://115.55.197.147:40588/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832054/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832053": [
        {
            "dateadded": "2026-04-26 11:52:14 UTC",
            "url": "https://compressout.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832053/",
            "reporter": "anonymous"
        }
    ],
    "3832052": [
        {
            "dateadded": "2026-04-26 11:52:07 UTC",
            "url": "http://42.229.219.41:48005/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832052/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832051": [
        {
            "dateadded": "2026-04-26 11:50:24 UTC",
            "url": "http://185.30.145.245:33836/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832051/",
            "reporter": "geenensp"
        }
    ],
    "3832050": [
        {
            "dateadded": "2026-04-26 11:46:13 UTC",
            "url": "https://5pruc7-mount.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832050/",
            "reporter": "anonymous"
        }
    ],
    "3832049": [
        {
            "dateadded": "2026-04-26 11:45:22 UTC",
            "url": "http://123.4.236.78:52026/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832049/",
            "reporter": "geenensp"
        }
    ],
    "3832048": [
        {
            "dateadded": "2026-04-26 11:44:28 UTC",
            "url": "http://beautiful-roentgen.176-65-139-130.plesk.page/mirai.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "beautiful-roentgen-176-65-139-130-plesk-page",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832048/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832046": [
        {
            "dateadded": "2026-04-26 11:44:16 UTC",
            "url": "http://www.176-65-139-130.plesk.page/mirai.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "www-176-65-139-130-plesk-page"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832046/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832047": [
        {
            "dateadded": "2026-04-26 11:44:16 UTC",
            "url": "http://www.176-65-139-130.plesk.page/mirai.mips",
            "url_status": "online",
            "last_online": "2026-04-27 13:27:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget",
                "www-176-65-139-130-plesk-page"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832047/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832045": [
        {
            "dateadded": "2026-04-26 11:44:14 UTC",
            "url": "http://beautiful-roentgen.176-65-139-130.plesk.page/mirai.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "beautiful-roentgen-176-65-139-130-plesk-page",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832045/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832044": [
        {
            "dateadded": "2026-04-26 11:42:22 UTC",
            "url": "http://123.5.170.255:53437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832044/",
            "reporter": "geenensp"
        }
    ],
    "3832043": [
        {
            "dateadded": "2026-04-26 11:40:23 UTC",
            "url": "http://180.119.166.69:50062/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:10:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832043/",
            "reporter": "geenensp"
        }
    ],
    "3832042": [
        {
            "dateadded": "2026-04-26 11:39:09 UTC",
            "url": "https://vorline5is.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832042/",
            "reporter": "anonymous"
        }
    ],
    "3832041": [
        {
            "dateadded": "2026-04-26 11:35:44 UTC",
            "url": "http://171.114.227.72:37553/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832041/",
            "reporter": "geenensp"
        }
    ],
    "3832040": [
        {
            "dateadded": "2026-04-26 11:35:28 UTC",
            "url": "http://60.22.58.204:45685/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:35:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832040/",
            "reporter": "geenensp"
        }
    ],
    "3832039": [
        {
            "dateadded": "2026-04-26 11:35:09 UTC",
            "url": "http://91.92.242.236/oPvjr94jfe/Plugins/cred64.dll",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-242-236",
                "Amadey",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832039/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832038": [
        {
            "dateadded": "2026-04-26 11:34:08 UTC",
            "url": "http://91.92.242.236/oPvjr94jfe/Plugins/cred.dll",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-242-236",
                "Amadey",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832038/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832037": [
        {
            "dateadded": "2026-04-26 11:32:11 UTC",
            "url": "http://171.114.227.72:37553/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832037/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832036": [
        {
            "dateadded": "2026-04-26 11:32:10 UTC",
            "url": "https://calm-spool.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832036/",
            "reporter": "anonymous"
        }
    ],
    "3832035": [
        {
            "dateadded": "2026-04-26 11:26:23 UTC",
            "url": "http://123.4.236.78:52026/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832035/",
            "reporter": "geenensp"
        }
    ],
    "3832034": [
        {
            "dateadded": "2026-04-26 11:25:26 UTC",
            "url": "http://111.220.135.39:51282/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:23:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832034/",
            "reporter": "geenensp"
        }
    ],
    "3832033": [
        {
            "dateadded": "2026-04-26 11:25:17 UTC",
            "url": "https://echogate.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832033/",
            "reporter": "anonymous"
        }
    ],
    "3832032": [
        {
            "dateadded": "2026-04-26 11:22:07 UTC",
            "url": "http://196.189.198.193:33759/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832032/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832031": [
        {
            "dateadded": "2026-04-26 11:20:13 UTC",
            "url": "https://sub-h11l.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832031/",
            "reporter": "anonymous"
        }
    ],
    "3832030": [
        {
            "dateadded": "2026-04-26 11:17:16 UTC",
            "url": "http://180.119.166.69:50062/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832030/",
            "reporter": "geenensp"
        }
    ],
    "3832029": [
        {
            "dateadded": "2026-04-26 11:17:07 UTC",
            "url": "http://61.53.132.232:56927/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832029/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832028": [
        {
            "dateadded": "2026-04-26 11:14:33 UTC",
            "url": "http://gamecheap.store/lilin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:19:00 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "gamecheap-store",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832028/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832026": [
        {
            "dateadded": "2026-04-26 11:14:31 UTC",
            "url": "http://gamecheap.store/gamesdior/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 05:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832026/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832027": [
        {
            "dateadded": "2026-04-26 11:14:31 UTC",
            "url": "http://222.137.79.170:34209/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832027/",
            "reporter": "geenensp"
        }
    ],
    "3832025": [
        {
            "dateadded": "2026-04-26 11:14:29 UTC",
            "url": "http://gamecheap.store/ohshit.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:25:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "gamecheap-store",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832025/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832023": [
        {
            "dateadded": "2026-04-26 11:14:19 UTC",
            "url": "http://110.136.98.126:52422/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832023/",
            "reporter": "geenensp"
        }
    ],
    "3832024": [
        {
            "dateadded": "2026-04-26 11:14:19 UTC",
            "url": "http://60.22.58.204:45685/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832024/",
            "reporter": "geenensp"
        }
    ],
    "3832020": [
        {
            "dateadded": "2026-04-26 11:14:18 UTC",
            "url": "http://68.185.152.86:45230/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832020/",
            "reporter": "geenensp"
        }
    ],
    "3832021": [
        {
            "dateadded": "2026-04-26 11:14:18 UTC",
            "url": "http://45.232.75.25:46943/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:47:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832021/",
            "reporter": "geenensp"
        }
    ],
    "3832022": [
        {
            "dateadded": "2026-04-26 11:14:18 UTC",
            "url": "http://115.63.55.146:56956/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832022/",
            "reporter": "geenensp"
        }
    ],
    "3832019": [
        {
            "dateadded": "2026-04-26 11:14:15 UTC",
            "url": "https://solflux6ix.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832019/",
            "reporter": "anonymous"
        }
    ],
    "3832018": [
        {
            "dateadded": "2026-04-26 11:14:14 UTC",
            "url": "https://parcelquick.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 11:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832018/",
            "reporter": "anonymous"
        }
    ],
    "3832017": [
        {
            "dateadded": "2026-04-26 11:14:08 UTC",
            "url": "http://182.124.43.198:38849/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832017/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3832016": [
        {
            "dateadded": "2026-04-26 10:59:39 UTC",
            "url": "http://gamecheap.store/gamesdior/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:05 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832016/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832007": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 06:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "gamecheap-store",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832007/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832008": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 06:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832008/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832009": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-27 05:46:05 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832009/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832010": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_spc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "gamecheap-store",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832010/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832011": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-27 06:09:04 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832011/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832012": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 05:58:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "gamecheap-store",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832012/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832013": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-27 05:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832013/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832014": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-27 00:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832014/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832015": [
        {
            "dateadded": "2026-04-26 10:59:28 UTC",
            "url": "http://gamecheap.store/gamesdior/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 05:20:53 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832015/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832006": [
        {
            "dateadded": "2026-04-26 10:59:24 UTC",
            "url": "http://gamecheap.store/gamesdior/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-27 05:25:55 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gamecheap-store",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832006/",
            "reporter": "BlinkzSec"
        }
    ],
    "3832005": [
        {
            "dateadded": "2026-04-26 10:59:18 UTC",
            "url": "http://111.220.135.39:51282/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832005/",
            "reporter": "geenensp"
        }
    ],
    "3832004": [
        {
            "dateadded": "2026-04-26 10:58:13 UTC",
            "url": "https://talnexos5.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832004/",
            "reporter": "anonymous"
        }
    ],
    "3832002": [
        {
            "dateadded": "2026-04-26 10:54:21 UTC",
            "url": "http://42.226.220.145:60168/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:06:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832002/",
            "reporter": "geenensp"
        }
    ],
    "3832003": [
        {
            "dateadded": "2026-04-26 10:54:21 UTC",
            "url": "http://42.224.1.86:50677/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:02:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832003/",
            "reporter": "geenensp"
        }
    ],
    "3832001": [
        {
            "dateadded": "2026-04-26 10:52:11 UTC",
            "url": "https://vaultink.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832001/",
            "reporter": "anonymous"
        }
    ],
    "3832000": [
        {
            "dateadded": "2026-04-26 10:50:20 UTC",
            "url": "http://156.229.165.225/arm4",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:22 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3832000/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831993": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831993/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831994": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831994/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831995": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831995/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831996": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:38 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831996/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831997": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:59 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831997/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831998": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:55 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831998/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831999": [
        {
            "dateadded": "2026-04-26 10:50:19 UTC",
            "url": "http://156.229.165.225/bins.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:04 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831999/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831992": [
        {
            "dateadded": "2026-04-26 10:50:07 UTC",
            "url": "http://156.229.165.225/arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "156-229-165-225",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831992/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831990": [
        {
            "dateadded": "2026-04-26 10:48:10 UTC",
            "url": "https://empty-violet-63e1.maskify.workers.dev/earnify-client-x86_64-linux-android",
            "url_status": "offline",
            "last_online": "2026-04-26 10:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "earnify",
                "maskify",
                "proxy-sdk"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831990/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831991": [
        {
            "dateadded": "2026-04-26 10:48:10 UTC",
            "url": "https://empty-violet-63e1.maskify.workers.dev/earnify-client-aarch64-linux-android",
            "url_status": "offline",
            "last_online": "2026-04-26 10:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "earnify",
                "maskify",
                "proxy-sdk"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831991/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831989": [
        {
            "dateadded": "2026-04-26 10:48:07 UTC",
            "url": "https://empty-violet-63e1.maskify.workers.dev/earnify-client-armv7-linux-androideabi",
            "url_status": "offline",
            "last_online": "2026-04-26 10:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "earnify",
                "maskify",
                "proxy-sdk"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831989/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831988": [
        {
            "dateadded": "2026-04-26 10:47:08 UTC",
            "url": "http://182.124.43.198:38849/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831988/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831987": [
        {
            "dateadded": "2026-04-26 10:46:10 UTC",
            "url": "http://42.226.220.145:60168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:25:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831987/",
            "reporter": "geenensp"
        }
    ],
    "3831978": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:54 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831978/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831979": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831979/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831980": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/test.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831980/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831981": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831981/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831982": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831982/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831983": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831983/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831984": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831984/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831985": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:34 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831985/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831986": [
        {
            "dateadded": "2026-04-26 10:45:20 UTC",
            "url": "http://176.65.139.141/m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831986/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831977": [
        {
            "dateadded": "2026-04-26 10:45:10 UTC",
            "url": "https://bajbvqgz.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831977/",
            "reporter": "anonymous"
        }
    ],
    "3831975": [
        {
            "dateadded": "2026-04-26 10:44:21 UTC",
            "url": "http://176.65.139.141/i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831975/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831976": [
        {
            "dateadded": "2026-04-26 10:44:21 UTC",
            "url": "http://176.65.139.141/i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831976/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831974": [
        {
            "dateadded": "2026-04-26 10:43:19 UTC",
            "url": "http://176.65.139.141/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831974/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831972": [
        {
            "dateadded": "2026-04-26 10:42:13 UTC",
            "url": "http://176.65.139.141/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831972/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831973": [
        {
            "dateadded": "2026-04-26 10:42:13 UTC",
            "url": "http://176.65.139.141/arm4",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831973/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831970": [
        {
            "dateadded": "2026-04-26 10:41:14 UTC",
            "url": "http://113.229.51.120:47545/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831970/",
            "reporter": "geenensp"
        }
    ],
    "3831971": [
        {
            "dateadded": "2026-04-26 10:41:14 UTC",
            "url": "http://42.239.188.71:54439/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:09:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831971/",
            "reporter": "geenensp"
        }
    ],
    "3831968": [
        {
            "dateadded": "2026-04-26 10:41:13 UTC",
            "url": "http://176.65.139.141/arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831968/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831969": [
        {
            "dateadded": "2026-04-26 10:41:13 UTC",
            "url": "http://176.65.139.141/arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:37 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831969/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831966": [
        {
            "dateadded": "2026-04-26 10:39:10 UTC",
            "url": "https://loadtin.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831966/",
            "reporter": "anonymous"
        }
    ],
    "3831967": [
        {
            "dateadded": "2026-04-26 10:39:10 UTC",
            "url": "http://45.232.75.25:46943/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:23:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831967/",
            "reporter": "geenensp"
        }
    ],
    "3831965": [
        {
            "dateadded": "2026-04-26 10:38:15 UTC",
            "url": "http://120.28.218.170:55837/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:56:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831965/",
            "reporter": "geenensp"
        }
    ],
    "3831964": [
        {
            "dateadded": "2026-04-26 10:37:07 UTC",
            "url": "http://176.65.139.46/sys_x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-46",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831964/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831963": [
        {
            "dateadded": "2026-04-26 10:36:20 UTC",
            "url": "http://176.65.139.47/lilin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:33:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831963/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831953": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:48 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831953/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831954": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:19 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831954/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831955": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:41 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831955/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831956": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_spc",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:43 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831956/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831957": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:35 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831957/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831958": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831958/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831959": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831959/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831960": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831960/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831961": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831961/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831962": [
        {
            "dateadded": "2026-04-26 10:36:19 UTC",
            "url": "http://176.65.139.47/gamesdior/main_sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831962/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831951": [
        {
            "dateadded": "2026-04-26 10:36:17 UTC",
            "url": "http://176.65.139.47/gamesdior/main_ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:03 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831951/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831952": [
        {
            "dateadded": "2026-04-26 10:36:17 UTC",
            "url": "http://176.65.139.47/gamesdior/main_x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:46 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831952/",
            "reporter": "BlinkzSec"
        }
    ],
    "3831950": [
        {
            "dateadded": "2026-04-26 10:32:15 UTC",
            "url": "http://115.63.55.146:56956/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831950/",
            "reporter": "geenensp"
        }
    ],
    "3831949": [
        {
            "dateadded": "2026-04-26 10:32:08 UTC",
            "url": "https://jloj7ws.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831949/",
            "reporter": "anonymous"
        }
    ],
    "3831948": [
        {
            "dateadded": "2026-04-26 10:28:13 UTC",
            "url": "http://123.14.219.120:53137/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:22:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831948/",
            "reporter": "geenensp"
        }
    ],
    "3831947": [
        {
            "dateadded": "2026-04-26 10:26:16 UTC",
            "url": "https://st4ge-pulse.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831947/",
            "reporter": "anonymous"
        }
    ],
    "3831946": [
        {
            "dateadded": "2026-04-26 10:25:22 UTC",
            "url": "http://222.137.79.170:34209/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831946/",
            "reporter": "geenensp"
        }
    ],
    "3831945": [
        {
            "dateadded": "2026-04-26 10:23:11 UTC",
            "url": "https://bin4ry-trail.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831945/",
            "reporter": "anonymous"
        }
    ],
    "3831944": [
        {
            "dateadded": "2026-04-26 10:20:19 UTC",
            "url": "http://42.234.143.46:57984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831944/",
            "reporter": "geenensp"
        }
    ],
    "3831943": [
        {
            "dateadded": "2026-04-26 10:20:16 UTC",
            "url": "http://61.52.55.164:35279/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831943/",
            "reporter": "geenensp"
        }
    ],
    "3831942": [
        {
            "dateadded": "2026-04-26 10:18:21 UTC",
            "url": "http://42.57.220.19:34397/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831942/",
            "reporter": "geenensp"
        }
    ],
    "3831941": [
        {
            "dateadded": "2026-04-26 10:15:12 UTC",
            "url": "https://fre5h-logic.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831941/",
            "reporter": "anonymous"
        }
    ],
    "3831940": [
        {
            "dateadded": "2026-04-26 10:07:11 UTC",
            "url": "http://42.239.231.220:47064/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831940/",
            "reporter": "geenensp"
        }
    ],
    "3831939": [
        {
            "dateadded": "2026-04-26 10:04:09 UTC",
            "url": "https://g4th-sheet.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 10:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831939/",
            "reporter": "anonymous"
        }
    ],
    "3831938": [
        {
            "dateadded": "2026-04-26 09:58:07 UTC",
            "url": "https://otter0-field.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 09:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831938/",
            "reporter": "anonymous"
        }
    ],
    "3831937": [
        {
            "dateadded": "2026-04-26 09:57:20 UTC",
            "url": "http://42.57.220.19:34397/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831937/",
            "reporter": "geenensp"
        }
    ],
    "3831936": [
        {
            "dateadded": "2026-04-26 09:56:22 UTC",
            "url": "http://61.52.55.164:35279/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831936/",
            "reporter": "geenensp"
        }
    ],
    "3831935": [
        {
            "dateadded": "2026-04-26 09:55:17 UTC",
            "url": "http://112.248.184.57:53298/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:04:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831935/",
            "reporter": "geenensp"
        }
    ],
    "3831934": [
        {
            "dateadded": "2026-04-26 09:51:07 UTC",
            "url": "https://40l627.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 09:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831934/",
            "reporter": "anonymous"
        }
    ],
    "3831933": [
        {
            "dateadded": "2026-04-26 09:47:16 UTC",
            "url": "http://115.57.183.201:60586/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:47:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831933/",
            "reporter": "geenensp"
        }
    ],
    "3831932": [
        {
            "dateadded": "2026-04-26 09:47:13 UTC",
            "url": "http://115.63.14.76:52965/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831932/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831931": [
        {
            "dateadded": "2026-04-26 09:46:10 UTC",
            "url": "http://61.52.44.193:42095/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:44:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831931/",
            "reporter": "geenensp"
        }
    ],
    "3831930": [
        {
            "dateadded": "2026-04-26 09:45:23 UTC",
            "url": "http://116.139.240.205:56269/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831930/",
            "reporter": "geenensp"
        }
    ],
    "3831929": [
        {
            "dateadded": "2026-04-26 09:45:22 UTC",
            "url": "http://182.121.12.231:54760/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831929/",
            "reporter": "geenensp"
        }
    ],
    "3831928": [
        {
            "dateadded": "2026-04-26 09:44:15 UTC",
            "url": "http://42.239.231.220:47064/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831928/",
            "reporter": "geenensp"
        }
    ],
    "3831927": [
        {
            "dateadded": "2026-04-26 09:42:41 UTC",
            "url": "http://112.248.184.57:53298/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831927/",
            "reporter": "geenensp"
        }
    ],
    "3831926": [
        {
            "dateadded": "2026-04-26 09:26:16 UTC",
            "url": "http://222.136.55.84:51011/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831926/",
            "reporter": "geenensp"
        }
    ],
    "3831924": [
        {
            "dateadded": "2026-04-26 09:24:24 UTC",
            "url": "http://105.111.18.139:59736/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831924/",
            "reporter": "geenensp"
        }
    ],
    "3831925": [
        {
            "dateadded": "2026-04-26 09:24:24 UTC",
            "url": "http://61.52.44.193:42095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 14:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831925/",
            "reporter": "geenensp"
        }
    ],
    "3831923": [
        {
            "dateadded": "2026-04-26 09:17:09 UTC",
            "url": "http://115.50.88.89:58590/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831923/",
            "reporter": "geenensp"
        }
    ],
    "3831922": [
        {
            "dateadded": "2026-04-26 09:12:09 UTC",
            "url": "http://113.53.121.31:54087/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831922/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831921": [
        {
            "dateadded": "2026-04-26 09:02:07 UTC",
            "url": "http://61.52.34.102:36508/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:42:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831921/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831920": [
        {
            "dateadded": "2026-04-26 08:57:18 UTC",
            "url": "http://222.136.55.84:51011/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831920/",
            "reporter": "geenensp"
        }
    ],
    "3831919": [
        {
            "dateadded": "2026-04-26 08:54:33 UTC",
            "url": "http://42.55.1.57:44711/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831919/",
            "reporter": "geenensp"
        }
    ],
    "3831918": [
        {
            "dateadded": "2026-04-26 08:52:08 UTC",
            "url": "http://77.247.88.72:60515/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831918/",
            "reporter": "geenensp"
        }
    ],
    "3831917": [
        {
            "dateadded": "2026-04-26 08:51:19 UTC",
            "url": "http://115.50.88.89:58590/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831917/",
            "reporter": "geenensp"
        }
    ],
    "3831916": [
        {
            "dateadded": "2026-04-26 08:49:16 UTC",
            "url": "http://123.14.148.70:60939/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831916/",
            "reporter": "geenensp"
        }
    ],
    "3831915": [
        {
            "dateadded": "2026-04-26 08:44:19 UTC",
            "url": "http://115.50.81.160:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:47:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831915/",
            "reporter": "geenensp"
        }
    ],
    "3831914": [
        {
            "dateadded": "2026-04-26 08:42:10 UTC",
            "url": "http://105.111.18.139:59736/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:29:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831914/",
            "reporter": "geenensp"
        }
    ],
    "3831913": [
        {
            "dateadded": "2026-04-26 08:42:09 UTC",
            "url": "http://77.247.88.68:49446/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831913/",
            "reporter": "geenensp"
        }
    ],
    "3831912": [
        {
            "dateadded": "2026-04-26 08:31:17 UTC",
            "url": "http://221.15.14.100:51147/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:15:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831912/",
            "reporter": "geenensp"
        }
    ],
    "3831911": [
        {
            "dateadded": "2026-04-26 08:27:17 UTC",
            "url": "http://109.236.44.113:60418/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831911/",
            "reporter": "geenensp"
        }
    ],
    "3831910": [
        {
            "dateadded": "2026-04-26 08:22:21 UTC",
            "url": "http://61.53.108.180:59280/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831910/",
            "reporter": "geenensp"
        }
    ],
    "3831908": [
        {
            "dateadded": "2026-04-26 08:21:10 UTC",
            "url": "http://42.230.25.83:59989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831908/",
            "reporter": "geenensp"
        }
    ],
    "3831909": [
        {
            "dateadded": "2026-04-26 08:21:10 UTC",
            "url": "http://218.16.164.144:36113/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831909/",
            "reporter": "geenensp"
        }
    ],
    "3831907": [
        {
            "dateadded": "2026-04-26 08:19:14 UTC",
            "url": "http://113.237.99.238:43141/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831907/",
            "reporter": "geenensp"
        }
    ],
    "3831906": [
        {
            "dateadded": "2026-04-26 08:19:13 UTC",
            "url": "http://123.4.44.239:47011/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:21:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831906/",
            "reporter": "geenensp"
        }
    ],
    "3831905": [
        {
            "dateadded": "2026-04-26 08:16:22 UTC",
            "url": "http://110.37.14.156:40884/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831905/",
            "reporter": "geenensp"
        }
    ],
    "3831904": [
        {
            "dateadded": "2026-04-26 08:12:17 UTC",
            "url": "http://103.164.128.162:43849/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831904/",
            "reporter": "geenensp"
        }
    ],
    "3831903": [
        {
            "dateadded": "2026-04-26 08:04:14 UTC",
            "url": "http://221.15.14.100:51147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:19:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831903/",
            "reporter": "geenensp"
        }
    ],
    "3831901": [
        {
            "dateadded": "2026-04-26 08:03:17 UTC",
            "url": "http://60.23.126.49:37671/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831901/",
            "reporter": "geenensp"
        }
    ],
    "3831902": [
        {
            "dateadded": "2026-04-26 08:03:17 UTC",
            "url": "http://119.162.179.246:35125/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831902/",
            "reporter": "geenensp"
        }
    ],
    "3831900": [
        {
            "dateadded": "2026-04-26 08:02:08 UTC",
            "url": "http://202.107.99.225:50487/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831900/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831899": [
        {
            "dateadded": "2026-04-26 07:59:26 UTC",
            "url": "http://66.167.169.176:59030/Mozi.7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831899/",
            "reporter": "NDA0E"
        }
    ],
    "3831898": [
        {
            "dateadded": "2026-04-26 07:58:20 UTC",
            "url": "http://115.57.250.157:54114/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 07:24:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831898/",
            "reporter": "geenensp"
        }
    ],
    "3831897": [
        {
            "dateadded": "2026-04-26 07:58:15 UTC",
            "url": "http://110.36.2.23:43952/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:25:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831897/",
            "reporter": "geenensp"
        }
    ],
    "3831896": [
        {
            "dateadded": "2026-04-26 07:54:10 UTC",
            "url": "http://123.4.44.239:47011/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:44:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831896/",
            "reporter": "geenensp"
        }
    ],
    "3831895": [
        {
            "dateadded": "2026-04-26 07:52:16 UTC",
            "url": "http://61.53.122.240:54576/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831895/",
            "reporter": "geenensp"
        }
    ],
    "3831894": [
        {
            "dateadded": "2026-04-26 07:47:18 UTC",
            "url": "http://60.23.126.49:37671/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831894/",
            "reporter": "geenensp"
        }
    ],
    "3831893": [
        {
            "dateadded": "2026-04-26 07:47:08 UTC",
            "url": "http://123.5.158.112:43874/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831893/",
            "reporter": "geenensp"
        }
    ],
    "3831892": [
        {
            "dateadded": "2026-04-26 07:45:14 UTC",
            "url": "http://61.53.92.185:51484/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:18:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831892/",
            "reporter": "geenensp"
        }
    ],
    "3831891": [
        {
            "dateadded": "2026-04-26 07:43:20 UTC",
            "url": "http://42.224.7.121:44950/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831891/",
            "reporter": "geenensp"
        }
    ],
    "3831890": [
        {
            "dateadded": "2026-04-26 07:42:07 UTC",
            "url": "http://202.107.99.225:50487/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831890/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831889": [
        {
            "dateadded": "2026-04-26 07:36:23 UTC",
            "url": "http://119.162.179.246:35125/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831889/",
            "reporter": "geenensp"
        }
    ],
    "3831888": [
        {
            "dateadded": "2026-04-26 07:34:16 UTC",
            "url": "http://125.47.68.25:38536/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831888/",
            "reporter": "geenensp"
        }
    ],
    "3831887": [
        {
            "dateadded": "2026-04-26 07:33:16 UTC",
            "url": "http://222.138.133.162:56860/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831887/",
            "reporter": "geenensp"
        }
    ],
    "3831886": [
        {
            "dateadded": "2026-04-26 07:28:18 UTC",
            "url": "http://110.36.2.23:43952/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831886/",
            "reporter": "geenensp"
        }
    ],
    "3831885": [
        {
            "dateadded": "2026-04-26 07:17:07 UTC",
            "url": "http://125.45.63.184:53578/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:59:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831885/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831884": [
        {
            "dateadded": "2026-04-26 07:14:10 UTC",
            "url": "http://42.224.7.121:44950/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831884/",
            "reporter": "geenensp"
        }
    ],
    "3831883": [
        {
            "dateadded": "2026-04-26 07:03:21 UTC",
            "url": "https://dynline6os.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831883/",
            "reporter": "anonymous"
        }
    ],
    "3831882": [
        {
            "dateadded": "2026-04-26 07:01:11 UTC",
            "url": "http://175.167.161.194:38359/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831882/",
            "reporter": "geenensp"
        }
    ],
    "3831881": [
        {
            "dateadded": "2026-04-26 06:57:08 UTC",
            "url": "https://primeshore.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831881/",
            "reporter": "anonymous"
        }
    ],
    "3831880": [
        {
            "dateadded": "2026-04-26 06:56:18 UTC",
            "url": "http://222.138.133.162:56860/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831880/",
            "reporter": "geenensp"
        }
    ],
    "3831879": [
        {
            "dateadded": "2026-04-26 06:53:08 UTC",
            "url": "https://ultra-enzyrn.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831879/",
            "reporter": "anonymous"
        }
    ],
    "3831878": [
        {
            "dateadded": "2026-04-26 06:47:07 UTC",
            "url": "http://113.229.50.80:60620/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:47:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831878/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831877": [
        {
            "dateadded": "2026-04-26 06:45:23 UTC",
            "url": "http://119.116.38.166:36079/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:19:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831877/",
            "reporter": "geenensp"
        }
    ],
    "3831876": [
        {
            "dateadded": "2026-04-26 06:44:24 UTC",
            "url": "http://175.167.161.194:38359/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831876/",
            "reporter": "geenensp"
        }
    ],
    "3831875": [
        {
            "dateadded": "2026-04-26 06:41:11 UTC",
            "url": "https://neroc5j.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831875/",
            "reporter": "anonymous"
        }
    ],
    "3831874": [
        {
            "dateadded": "2026-04-26 06:37:08 UTC",
            "url": "http://114.244.232.184:36815/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831874/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831873": [
        {
            "dateadded": "2026-04-26 06:36:13 UTC",
            "url": "https://voit-wjw.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831873/",
            "reporter": "anonymous"
        }
    ],
    "3831872": [
        {
            "dateadded": "2026-04-26 06:31:11 UTC",
            "url": "http://60.23.79.137:42873/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831872/",
            "reporter": "geenensp"
        }
    ],
    "3831871": [
        {
            "dateadded": "2026-04-26 06:25:17 UTC",
            "url": "https://mund4c.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831871/",
            "reporter": "anonymous"
        }
    ],
    "3831870": [
        {
            "dateadded": "2026-04-26 06:24:25 UTC",
            "url": "http://42.230.199.156:33257/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:49:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831870/",
            "reporter": "geenensp"
        }
    ],
    "3831869": [
        {
            "dateadded": "2026-04-26 06:22:07 UTC",
            "url": "http://182.114.35.199:41811/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831869/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831868": [
        {
            "dateadded": "2026-04-26 06:18:16 UTC",
            "url": "https://breagc.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:18:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831868/",
            "reporter": "anonymous"
        }
    ],
    "3831867": [
        {
            "dateadded": "2026-04-26 06:17:27 UTC",
            "url": "http://119.116.38.166:36079/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831867/",
            "reporter": "geenensp"
        }
    ],
    "3831866": [
        {
            "dateadded": "2026-04-26 06:16:29 UTC",
            "url": "http://201.149.107.54:58302/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831866/",
            "reporter": "geenensp"
        }
    ],
    "3831865": [
        {
            "dateadded": "2026-04-26 06:15:21 UTC",
            "url": "http://182.117.79.47:56010/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:20:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831865/",
            "reporter": "geenensp"
        }
    ],
    "3831864": [
        {
            "dateadded": "2026-04-26 06:12:08 UTC",
            "url": "http://123.10.10.81:39731/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831864/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831863": [
        {
            "dateadded": "2026-04-26 06:11:17 UTC",
            "url": "https://fami-wp.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:11:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831863/",
            "reporter": "anonymous"
        }
    ],
    "3831862": [
        {
            "dateadded": "2026-04-26 06:04:15 UTC",
            "url": "https://sunhq.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831862/",
            "reporter": "anonymous"
        }
    ],
    "3831861": [
        {
            "dateadded": "2026-04-26 06:00:24 UTC",
            "url": "http://60.23.79.137:42873/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831861/",
            "reporter": "geenensp"
        }
    ],
    "3831860": [
        {
            "dateadded": "2026-04-26 05:57:08 UTC",
            "url": "http://182.114.35.199:41811/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831860/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831859": [
        {
            "dateadded": "2026-04-26 05:56:11 UTC",
            "url": "https://voxx1.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831859/",
            "reporter": "anonymous"
        }
    ],
    "3831858": [
        {
            "dateadded": "2026-04-26 05:50:16 UTC",
            "url": "https://cuer-e30q.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831858/",
            "reporter": "anonymous"
        }
    ],
    "3831857": [
        {
            "dateadded": "2026-04-26 05:43:19 UTC",
            "url": "http://42.229.219.41:48005/i",
            "url_status": "offline",
            "last_online": "2026-04-26 22:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831857/",
            "reporter": "geenensp"
        }
    ],
    "3831856": [
        {
            "dateadded": "2026-04-26 05:39:10 UTC",
            "url": "https://casa-zw9e.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831856/",
            "reporter": "anonymous"
        }
    ],
    "3831855": [
        {
            "dateadded": "2026-04-26 05:32:07 UTC",
            "url": "http://182.127.44.241:35304/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831855/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831854": [
        {
            "dateadded": "2026-04-26 05:31:10 UTC",
            "url": "https://homm6uc.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831854/",
            "reporter": "anonymous"
        }
    ],
    "3831853": [
        {
            "dateadded": "2026-04-26 05:24:12 UTC",
            "url": "https://alph-qhj.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831853/",
            "reporter": "anonymous"
        }
    ],
    "3831852": [
        {
            "dateadded": "2026-04-26 05:23:25 UTC",
            "url": "http://61.52.60.6:49773/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:12:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831852/",
            "reporter": "geenensp"
        }
    ],
    "3831851": [
        {
            "dateadded": "2026-04-26 05:19:28 UTC",
            "url": "http://39.89.163.22:51003/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831851/",
            "reporter": "geenensp"
        }
    ],
    "3831850": [
        {
            "dateadded": "2026-04-26 05:18:08 UTC",
            "url": "https://proc-256.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831850/",
            "reporter": "anonymous"
        }
    ],
    "3831848": [
        {
            "dateadded": "2026-04-26 05:12:27 UTC",
            "url": "http://42.55.33.212:49390/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831848/",
            "reporter": "geenensp"
        }
    ],
    "3831849": [
        {
            "dateadded": "2026-04-26 05:12:27 UTC",
            "url": "http://42.5.51.200:52422/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831849/",
            "reporter": "geenensp"
        }
    ],
    "3831847": [
        {
            "dateadded": "2026-04-26 05:12:12 UTC",
            "url": "https://eart-l4.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831847/",
            "reporter": "anonymous"
        }
    ],
    "3831846": [
        {
            "dateadded": "2026-04-26 05:07:07 UTC",
            "url": "http://42.229.218.145:40175/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831846/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831845": [
        {
            "dateadded": "2026-04-26 05:04:12 UTC",
            "url": "https://homo-ph.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 05:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831845/",
            "reporter": "anonymous"
        }
    ],
    "3831844": [
        {
            "dateadded": "2026-04-26 04:58:13 UTC",
            "url": "https://mar-jlk.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831844/",
            "reporter": "anonymous"
        }
    ],
    "3831843": [
        {
            "dateadded": "2026-04-26 04:53:10 UTC",
            "url": "https://lebe6wwf.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831843/",
            "reporter": "anonymous"
        }
    ],
    "3831842": [
        {
            "dateadded": "2026-04-26 04:47:08 UTC",
            "url": "http://117.10.39.242:54463/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:39:42 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831842/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831841": [
        {
            "dateadded": "2026-04-26 04:46:13 UTC",
            "url": "http://42.5.51.200:52422/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831841/",
            "reporter": "geenensp"
        }
    ],
    "3831840": [
        {
            "dateadded": "2026-04-26 04:45:20 UTC",
            "url": "http://182.127.7.248:34529/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831840/",
            "reporter": "geenensp"
        }
    ],
    "3831839": [
        {
            "dateadded": "2026-04-26 04:42:11 UTC",
            "url": "https://landem.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831839/",
            "reporter": "anonymous"
        }
    ],
    "3831838": [
        {
            "dateadded": "2026-04-26 04:42:10 UTC",
            "url": "http://125.47.89.3:51530/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831838/",
            "reporter": "geenensp"
        }
    ],
    "3831837": [
        {
            "dateadded": "2026-04-26 04:40:20 UTC",
            "url": "http://39.89.163.22:51003/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831837/",
            "reporter": "geenensp"
        }
    ],
    "3831836": [
        {
            "dateadded": "2026-04-26 04:37:11 UTC",
            "url": "https://stra-j2.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831836/",
            "reporter": "anonymous"
        }
    ],
    "3831835": [
        {
            "dateadded": "2026-04-26 04:37:07 UTC",
            "url": "http://210.212.28.129:58266/i",
            "url_status": "offline",
            "last_online": "2026-04-26 04:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831835/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831834": [
        {
            "dateadded": "2026-04-26 04:31:16 UTC",
            "url": "http://182.121.160.200:35263/i",
            "url_status": "offline",
            "last_online": "2026-04-26 04:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831834/",
            "reporter": "geenensp"
        }
    ],
    "3831833": [
        {
            "dateadded": "2026-04-26 04:29:19 UTC",
            "url": "http://112.140.190.123:60327/i",
            "url_status": "offline",
            "last_online": "2026-04-26 04:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831833/",
            "reporter": "geenensp"
        }
    ],
    "3831832": [
        {
            "dateadded": "2026-04-26 04:26:07 UTC",
            "url": "https://paniwcfh.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831832/",
            "reporter": "anonymous"
        }
    ],
    "3831831": [
        {
            "dateadded": "2026-04-26 04:19:08 UTC",
            "url": "https://amic-po1.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831831/",
            "reporter": "anonymous"
        }
    ],
    "3831830": [
        {
            "dateadded": "2026-04-26 04:18:07 UTC",
            "url": "http://182.127.7.248:34529/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831830/",
            "reporter": "geenensp"
        }
    ],
    "3831829": [
        {
            "dateadded": "2026-04-26 04:15:21 UTC",
            "url": "http://112.140.190.123:60327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 04:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831829/",
            "reporter": "geenensp"
        }
    ],
    "3831828": [
        {
            "dateadded": "2026-04-26 04:13:33 UTC",
            "url": "http://110.182.253.77:51274/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 11:02:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831828/",
            "reporter": "geenensp"
        }
    ],
    "3831827": [
        {
            "dateadded": "2026-04-26 04:11:16 UTC",
            "url": "https://meer-in.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831827/",
            "reporter": "anonymous"
        }
    ],
    "3831826": [
        {
            "dateadded": "2026-04-26 04:05:11 UTC",
            "url": "https://aguarw2y.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831826/",
            "reporter": "anonymous"
        }
    ],
    "3831825": [
        {
            "dateadded": "2026-04-26 04:03:13 UTC",
            "url": "http://222.142.220.84:54716/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:25:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831825/",
            "reporter": "geenensp"
        }
    ],
    "3831824": [
        {
            "dateadded": "2026-04-26 04:01:09 UTC",
            "url": "https://etab-0d.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 04:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831824/",
            "reporter": "anonymous"
        }
    ],
    "3831823": [
        {
            "dateadded": "2026-04-26 03:50:10 UTC",
            "url": "https://spia-vo.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831823/",
            "reporter": "anonymous"
        }
    ],
    "3831822": [
        {
            "dateadded": "2026-04-26 03:43:19 UTC",
            "url": "http://222.142.220.84:54716/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:20:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831822/",
            "reporter": "geenensp"
        }
    ],
    "3831821": [
        {
            "dateadded": "2026-04-26 03:42:07 UTC",
            "url": "https://ocul-xq7.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831821/",
            "reporter": "anonymous"
        }
    ],
    "3831820": [
        {
            "dateadded": "2026-04-26 03:35:12 UTC",
            "url": "https://mati-ns3w.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831820/",
            "reporter": "anonymous"
        }
    ],
    "3831819": [
        {
            "dateadded": "2026-04-26 03:32:08 UTC",
            "url": "http://182.113.11.27:53368/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831819/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831818": [
        {
            "dateadded": "2026-04-26 03:32:07 UTC",
            "url": "http://123.8.11.12:47705/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:18:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831818/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831817": [
        {
            "dateadded": "2026-04-26 03:29:12 UTC",
            "url": "https://homb-1h.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831817/",
            "reporter": "anonymous"
        }
    ],
    "3831816": [
        {
            "dateadded": "2026-04-26 03:24:14 UTC",
            "url": "https://pes-ghj0.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831816/",
            "reporter": "anonymous"
        }
    ],
    "3831815": [
        {
            "dateadded": "2026-04-26 03:18:18 UTC",
            "url": "http://42.232.108.110:49333/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:47:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831815/",
            "reporter": "geenensp"
        }
    ],
    "3831814": [
        {
            "dateadded": "2026-04-26 03:07:09 UTC",
            "url": "http://113.239.244.238:54927/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831814/",
            "reporter": "geenensp"
        }
    ],
    "3831813": [
        {
            "dateadded": "2026-04-26 03:06:10 UTC",
            "url": "https://freur6r.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831813/",
            "reporter": "anonymous"
        }
    ],
    "3831812": [
        {
            "dateadded": "2026-04-26 03:02:06 UTC",
            "url": "http://196.190.105.170:35252/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831812/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831811": [
        {
            "dateadded": "2026-04-26 03:00:12 UTC",
            "url": "https://fire-02k6.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 03:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831811/",
            "reporter": "anonymous"
        }
    ],
    "3831810": [
        {
            "dateadded": "2026-04-26 02:58:19 UTC",
            "url": "http://125.41.9.170:40666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:52:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831810/",
            "reporter": "geenensp"
        }
    ],
    "3831809": [
        {
            "dateadded": "2026-04-26 02:57:08 UTC",
            "url": "http://123.8.11.12:47705/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:09:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831809/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831808": [
        {
            "dateadded": "2026-04-26 02:55:32 UTC",
            "url": "http://116.11.143.247:34713/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831808/",
            "reporter": "geenensp"
        }
    ],
    "3831807": [
        {
            "dateadded": "2026-04-26 02:55:20 UTC",
            "url": "http://115.49.242.181:54229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:10:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831807/",
            "reporter": "geenensp"
        }
    ],
    "3831806": [
        {
            "dateadded": "2026-04-26 02:54:08 UTC",
            "url": "https://acti-cmf.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831806/",
            "reporter": "anonymous"
        }
    ],
    "3831805": [
        {
            "dateadded": "2026-04-26 02:52:06 UTC",
            "url": "http://202.1.26.13:36849/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831805/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831804": [
        {
            "dateadded": "2026-04-26 02:49:07 UTC",
            "url": "https://ocche0o.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831804/",
            "reporter": "anonymous"
        }
    ],
    "3831803": [
        {
            "dateadded": "2026-04-26 02:48:20 UTC",
            "url": "http://113.239.244.238:54927/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831803/",
            "reporter": "geenensp"
        }
    ],
    "3831802": [
        {
            "dateadded": "2026-04-26 02:45:20 UTC",
            "url": "http://123.11.171.104:45430/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:41:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831802/",
            "reporter": "geenensp"
        }
    ],
    "3831801": [
        {
            "dateadded": "2026-04-26 02:44:07 UTC",
            "url": "https://piedmg3.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831801/",
            "reporter": "anonymous"
        }
    ],
    "3831800": [
        {
            "dateadded": "2026-04-26 02:42:17 UTC",
            "url": "http://42.232.108.110:49333/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:49:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831800/",
            "reporter": "geenensp"
        }
    ],
    "3831799": [
        {
            "dateadded": "2026-04-26 02:42:07 UTC",
            "url": "http://202.1.26.13:36849/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831799/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831798": [
        {
            "dateadded": "2026-04-26 02:38:07 UTC",
            "url": "https://travb7.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831798/",
            "reporter": "anonymous"
        }
    ],
    "3831797": [
        {
            "dateadded": "2026-04-26 02:34:07 UTC",
            "url": "https://fuss-kx01.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831797/",
            "reporter": "anonymous"
        }
    ],
    "3831796": [
        {
            "dateadded": "2026-04-26 02:28:18 UTC",
            "url": "http://42.229.175.13:53936/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831796/",
            "reporter": "geenensp"
        }
    ],
    "3831795": [
        {
            "dateadded": "2026-04-26 02:25:19 UTC",
            "url": "http://123.5.115.191:52881/i",
            "url_status": "offline",
            "last_online": "2026-04-26 02:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831795/",
            "reporter": "geenensp"
        }
    ],
    "3831794": [
        {
            "dateadded": "2026-04-26 02:25:12 UTC",
            "url": "https://soci-84i6.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:25:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831794/",
            "reporter": "anonymous"
        }
    ],
    "3831793": [
        {
            "dateadded": "2026-04-26 02:19:07 UTC",
            "url": "https://filo-8ao.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831793/",
            "reporter": "anonymous"
        }
    ],
    "3831792": [
        {
            "dateadded": "2026-04-26 02:13:06 UTC",
            "url": "https://etoi-fbll.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831792/",
            "reporter": "anonymous"
        }
    ],
    "3831789": [
        {
            "dateadded": "2026-04-26 02:12:06 UTC",
            "url": "http://182.126.95.184:42374/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:05:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831789/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831790": [
        {
            "dateadded": "2026-04-26 02:12:06 UTC",
            "url": "http://182.121.156.166:52113/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831790/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831791": [
        {
            "dateadded": "2026-04-26 02:12:06 UTC",
            "url": "http://182.121.156.166:52113/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:58:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831791/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831788": [
        {
            "dateadded": "2026-04-26 02:10:19 UTC",
            "url": "http://61.52.45.96:50832/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831788/",
            "reporter": "geenensp"
        }
    ],
    "3831787": [
        {
            "dateadded": "2026-04-26 02:08:07 UTC",
            "url": "https://kopf-wkeu.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 02:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831787/",
            "reporter": "anonymous"
        }
    ],
    "3831786": [
        {
            "dateadded": "2026-04-26 02:02:07 UTC",
            "url": "http://123.148.229.86:43983/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831786/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831785": [
        {
            "dateadded": "2026-04-26 02:00:11 UTC",
            "url": "https://ami-mfs.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 06:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831785/",
            "reporter": "anonymous"
        }
    ],
    "3831784": [
        {
            "dateadded": "2026-04-26 01:59:20 UTC",
            "url": "http://61.52.214.178:47741/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831784/",
            "reporter": "geenensp"
        }
    ],
    "3831783": [
        {
            "dateadded": "2026-04-26 01:54:22 UTC",
            "url": "http://112.225.49.44:54822/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831783/",
            "reporter": "geenensp"
        }
    ],
    "3831782": [
        {
            "dateadded": "2026-04-26 01:54:07 UTC",
            "url": "https://koerhl.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831782/",
            "reporter": "anonymous"
        }
    ],
    "3831781": [
        {
            "dateadded": "2026-04-26 01:49:13 UTC",
            "url": "http://115.50.248.71:51435/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831781/",
            "reporter": "geenensp"
        }
    ],
    "3831780": [
        {
            "dateadded": "2026-04-26 01:49:09 UTC",
            "url": "https://trab-7t.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831780/",
            "reporter": "anonymous"
        }
    ],
    "3831779": [
        {
            "dateadded": "2026-04-26 01:45:12 UTC",
            "url": "http://222.139.84.23:50581/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831779/",
            "reporter": "geenensp"
        }
    ],
    "3831778": [
        {
            "dateadded": "2026-04-26 01:43:10 UTC",
            "url": "https://pieqt.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831778/",
            "reporter": "anonymous"
        }
    ],
    "3831777": [
        {
            "dateadded": "2026-04-26 01:39:08 UTC",
            "url": "https://fine7t.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831777/",
            "reporter": "anonymous"
        }
    ],
    "3831776": [
        {
            "dateadded": "2026-04-26 01:37:08 UTC",
            "url": "http://123.148.229.86:43983/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831776/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831775": [
        {
            "dateadded": "2026-04-26 01:32:35 UTC",
            "url": "http://112.225.49.44:54822/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831775/",
            "reporter": "geenensp"
        }
    ],
    "3831774": [
        {
            "dateadded": "2026-04-26 01:31:09 UTC",
            "url": "https://treexw.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831774/",
            "reporter": "anonymous"
        }
    ],
    "3831773": [
        {
            "dateadded": "2026-04-26 01:30:17 UTC",
            "url": "http://222.139.84.23:50581/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:02:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831773/",
            "reporter": "geenensp"
        }
    ],
    "3831772": [
        {
            "dateadded": "2026-04-26 01:22:07 UTC",
            "url": "http://42.228.234.76:50330/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:49:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831772/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831771": [
        {
            "dateadded": "2026-04-26 01:19:19 UTC",
            "url": "http://182.127.0.39:50922/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:28:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831771/",
            "reporter": "geenensp"
        }
    ],
    "3831770": [
        {
            "dateadded": "2026-04-26 01:19:07 UTC",
            "url": "https://day-g6qh.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831770/",
            "reporter": "anonymous"
        }
    ],
    "3831769": [
        {
            "dateadded": "2026-04-26 01:14:07 UTC",
            "url": "https://plag59o.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831769/",
            "reporter": "anonymous"
        }
    ],
    "3831768": [
        {
            "dateadded": "2026-04-26 01:12:19 UTC",
            "url": "http://115.50.248.71:51435/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831768/",
            "reporter": "geenensp"
        }
    ],
    "3831767": [
        {
            "dateadded": "2026-04-26 01:12:18 UTC",
            "url": "http://58.35.126.149:36975/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831767/",
            "reporter": "geenensp"
        }
    ],
    "3831766": [
        {
            "dateadded": "2026-04-26 01:09:07 UTC",
            "url": "https://terr-53p.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831766/",
            "reporter": "anonymous"
        }
    ],
    "3831765": [
        {
            "dateadded": "2026-04-26 01:03:10 UTC",
            "url": "https://lichxz.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 01:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831765/",
            "reporter": "anonymous"
        }
    ],
    "3831764": [
        {
            "dateadded": "2026-04-26 00:57:07 UTC",
            "url": "https://estrqmi.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831764/",
            "reporter": "anonymous"
        }
    ],
    "3831763": [
        {
            "dateadded": "2026-04-26 00:56:21 UTC",
            "url": "http://146.103.41.62/bot.arm",
            "url_status": "offline",
            "last_online": "2026-04-26 00:56:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831763/",
            "reporter": "geenensp"
        }
    ],
    "3831762": [
        {
            "dateadded": "2026-04-26 00:52:08 UTC",
            "url": "https://poditt0j.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831762/",
            "reporter": "anonymous"
        }
    ],
    "3831761": [
        {
            "dateadded": "2026-04-26 00:49:19 UTC",
            "url": "http://61.54.234.2:39396/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831761/",
            "reporter": "geenensp"
        }
    ],
    "3831760": [
        {
            "dateadded": "2026-04-26 00:47:14 UTC",
            "url": "http://58.35.126.149:36975/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831760/",
            "reporter": "geenensp"
        }
    ],
    "3831757": [
        {
            "dateadded": "2026-04-26 00:46:14 UTC",
            "url": "http://176.65.139.159/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 00:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831757/",
            "reporter": "botnetkiller"
        }
    ],
    "3831758": [
        {
            "dateadded": "2026-04-26 00:46:14 UTC",
            "url": "http://176.65.139.159/mips",
            "url_status": "offline",
            "last_online": "2026-04-26 00:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831758/",
            "reporter": "botnetkiller"
        }
    ],
    "3831759": [
        {
            "dateadded": "2026-04-26 00:46:14 UTC",
            "url": "http://176.65.139.159/arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 00:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831759/",
            "reporter": "botnetkiller"
        }
    ],
    "3831756": [
        {
            "dateadded": "2026-04-26 00:45:14 UTC",
            "url": "http://176.65.139.159/arm4",
            "url_status": "offline",
            "last_online": "2026-04-26 00:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831756/",
            "reporter": "botnetkiller"
        }
    ],
    "3831755": [
        {
            "dateadded": "2026-04-26 00:44:23 UTC",
            "url": "http://176.65.139.159/tplink.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:44:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831755/",
            "reporter": "botnetkiller"
        }
    ],
    "3831754": [
        {
            "dateadded": "2026-04-26 00:44:18 UTC",
            "url": "http://182.123.161.149:34889/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:44:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831754/",
            "reporter": "geenensp"
        }
    ],
    "3831753": [
        {
            "dateadded": "2026-04-26 00:44:17 UTC",
            "url": "http://176.65.139.159/arm5",
            "url_status": "offline",
            "last_online": "2026-04-26 00:44:17 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831753/",
            "reporter": "botnetkiller"
        }
    ],
    "3831752": [
        {
            "dateadded": "2026-04-26 00:42:09 UTC",
            "url": "https://fore-k6mz.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831752/",
            "reporter": "anonymous"
        }
    ],
    "3831751": [
        {
            "dateadded": "2026-04-26 00:37:07 UTC",
            "url": "https://mens-tu.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831751/",
            "reporter": "anonymous"
        }
    ],
    "3831750": [
        {
            "dateadded": "2026-04-26 00:24:17 UTC",
            "url": "http://42.230.25.83:59989/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831750/",
            "reporter": "geenensp"
        }
    ],
    "3831749": [
        {
            "dateadded": "2026-04-26 00:24:10 UTC",
            "url": "https://fleuytfp.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831749/",
            "reporter": "anonymous"
        }
    ],
    "3831748": [
        {
            "dateadded": "2026-04-26 00:23:23 UTC",
            "url": "http://182.123.248.178:52559/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831748/",
            "reporter": "geenensp"
        }
    ],
    "3831747": [
        {
            "dateadded": "2026-04-26 00:17:23 UTC",
            "url": "http://39.74.37.132:49908/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831747/",
            "reporter": "geenensp"
        }
    ],
    "3831746": [
        {
            "dateadded": "2026-04-26 00:15:21 UTC",
            "url": "http://182.123.92.189:37787/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831746/",
            "reporter": "geenensp"
        }
    ],
    "3831745": [
        {
            "dateadded": "2026-04-26 00:12:12 UTC",
            "url": "https://manngua.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831745/",
            "reporter": "anonymous"
        }
    ],
    "3831744": [
        {
            "dateadded": "2026-04-26 00:10:11 UTC",
            "url": "https://etaknqgp.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831744/",
            "reporter": "anonymous"
        }
    ],
    "3831743": [
        {
            "dateadded": "2026-04-26 00:04:15 UTC",
            "url": "http://182.123.92.189:37787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:48:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831743/",
            "reporter": "geenensp"
        }
    ],
    "3831742": [
        {
            "dateadded": "2026-04-26 00:04:13 UTC",
            "url": "http://42.239.231.177:48699/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831742/",
            "reporter": "geenensp"
        }
    ],
    "3831741": [
        {
            "dateadded": "2026-04-26 00:02:14 UTC",
            "url": "https://enfa1p13.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-26 00:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831741/",
            "reporter": "anonymous"
        }
    ],
    "3831740": [
        {
            "dateadded": "2026-04-26 00:02:07 UTC",
            "url": "http://58.47.105.203:38728/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831740/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831738": [
        {
            "dateadded": "2026-04-26 00:01:12 UTC",
            "url": "https://github.com/aiermass/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:28 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831738/",
            "reporter": "tcains1"
        }
    ],
    "3831739": [
        {
            "dateadded": "2026-04-26 00:01:12 UTC",
            "url": "http://140.237.48.240:53906/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831739/",
            "reporter": "geenensp"
        }
    ],
    "3831737": [
        {
            "dateadded": "2026-04-25 23:58:17 UTC",
            "url": "https://gitlab.com/streffy/999/-/raw/main/S8D70IPCZNAA.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 23:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831737/",
            "reporter": "tcains1"
        }
    ],
    "3831736": [
        {
            "dateadded": "2026-04-25 23:56:22 UTC",
            "url": "http://182.123.248.178:52559/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:56:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831736/",
            "reporter": "geenensp"
        }
    ],
    "3831735": [
        {
            "dateadded": "2026-04-25 23:51:08 UTC",
            "url": "https://haus-mp.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831735/",
            "reporter": "anonymous"
        }
    ],
    "3831734": [
        {
            "dateadded": "2026-04-25 23:46:11 UTC",
            "url": "https://onli6sp.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831734/",
            "reporter": "anonymous"
        }
    ],
    "3831733": [
        {
            "dateadded": "2026-04-25 23:45:25 UTC",
            "url": "http://125.40.83.30:45417/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:45:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831733/",
            "reporter": "geenensp"
        }
    ],
    "3831732": [
        {
            "dateadded": "2026-04-25 23:44:22 UTC",
            "url": "http://24.95.54.96:53383/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831732/",
            "reporter": "geenensp"
        }
    ],
    "3831731": [
        {
            "dateadded": "2026-04-25 23:43:24 UTC",
            "url": "http://125.40.83.30:45417/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 04:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831731/",
            "reporter": "geenensp"
        }
    ],
    "3831730": [
        {
            "dateadded": "2026-04-25 23:41:09 UTC",
            "url": "https://comp-os4d.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831730/",
            "reporter": "anonymous"
        }
    ],
    "3831729": [
        {
            "dateadded": "2026-04-25 23:39:26 UTC",
            "url": "http://182.117.144.170:42311/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831729/",
            "reporter": "geenensp"
        }
    ],
    "3831728": [
        {
            "dateadded": "2026-04-25 23:38:15 UTC",
            "url": "http://140.237.48.240:53906/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831728/",
            "reporter": "geenensp"
        }
    ],
    "3831727": [
        {
            "dateadded": "2026-04-25 23:36:20 UTC",
            "url": "http://182.117.144.170:42311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831727/",
            "reporter": "geenensp"
        }
    ],
    "3831726": [
        {
            "dateadded": "2026-04-25 23:34:13 UTC",
            "url": "https://open-2.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831726/",
            "reporter": "anonymous"
        }
    ],
    "3831725": [
        {
            "dateadded": "2026-04-25 23:30:31 UTC",
            "url": "http://101.206.197.73:55589/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:28:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831725/",
            "reporter": "geenensp"
        }
    ],
    "3831724": [
        {
            "dateadded": "2026-04-25 23:30:09 UTC",
            "url": "https://soft-berg-6p.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831724/",
            "reporter": "anonymous"
        }
    ],
    "3831723": [
        {
            "dateadded": "2026-04-25 23:24:22 UTC",
            "url": "http://125.41.106.205:47020/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831723/",
            "reporter": "geenensp"
        }
    ],
    "3831722": [
        {
            "dateadded": "2026-04-25 23:24:14 UTC",
            "url": "https://rouge-9.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831722/",
            "reporter": "anonymous"
        }
    ],
    "3831721": [
        {
            "dateadded": "2026-04-25 23:17:23 UTC",
            "url": "http://24.95.54.96:53383/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831721/",
            "reporter": "geenensp"
        }
    ],
    "3831720": [
        {
            "dateadded": "2026-04-25 23:13:07 UTC",
            "url": "https://petit-fire-1.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831720/",
            "reporter": "anonymous"
        }
    ],
    "3831719": [
        {
            "dateadded": "2026-04-25 23:12:25 UTC",
            "url": "http://182.124.204.144:32991/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:12:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831719/",
            "reporter": "geenensp"
        }
    ],
    "3831718": [
        {
            "dateadded": "2026-04-25 23:09:14 UTC",
            "url": "https://bleu-4.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 23:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831718/",
            "reporter": "anonymous"
        }
    ],
    "3831717": [
        {
            "dateadded": "2026-04-25 22:59:12 UTC",
            "url": "https://dark-land-7b.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831717/",
            "reporter": "anonymous"
        }
    ],
    "3831716": [
        {
            "dateadded": "2026-04-25 22:57:22 UTC",
            "url": "http://103.181.158.75:39949/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831716/",
            "reporter": "geenensp"
        }
    ],
    "3831715": [
        {
            "dateadded": "2026-04-25 22:53:12 UTC",
            "url": "https://haus-3.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831715/",
            "reporter": "anonymous"
        }
    ],
    "3831714": [
        {
            "dateadded": "2026-04-25 22:47:09 UTC",
            "url": "https://holz-baum-5k.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831714/",
            "reporter": "anonymous"
        }
    ],
    "3831713": [
        {
            "dateadded": "2026-04-25 22:44:20 UTC",
            "url": "http://182.124.204.144:32991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:45:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831713/",
            "reporter": "geenensp"
        }
    ],
    "3831712": [
        {
            "dateadded": "2026-04-25 22:44:19 UTC",
            "url": "http://123.10.25.235:52554/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831712/",
            "reporter": "geenensp"
        }
    ],
    "3831711": [
        {
            "dateadded": "2026-04-25 22:42:08 UTC",
            "url": "https://vert-1.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831711/",
            "reporter": "anonymous"
        }
    ],
    "3831710": [
        {
            "dateadded": "2026-04-25 22:41:08 UTC",
            "url": "http://219.156.103.96:33562/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:22:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831710/",
            "reporter": "geenensp"
        }
    ],
    "3831709": [
        {
            "dateadded": "2026-04-25 22:38:08 UTC",
            "url": "http://42.235.93.178:49970/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831709/",
            "reporter": "geenensp"
        }
    ],
    "3831708": [
        {
            "dateadded": "2026-04-25 22:37:07 UTC",
            "url": "https://gold-mond-8.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831708/",
            "reporter": "anonymous"
        }
    ],
    "3831707": [
        {
            "dateadded": "2026-04-25 22:34:21 UTC",
            "url": "http://182.121.86.93:41234/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:46:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831707/",
            "reporter": "geenensp"
        }
    ],
    "3831706": [
        {
            "dateadded": "2026-04-25 22:31:07 UTC",
            "url": "https://noir-6.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831706/",
            "reporter": "anonymous"
        }
    ],
    "3831705": [
        {
            "dateadded": "2026-04-25 22:25:14 UTC",
            "url": "http://103.181.158.75:39949/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831705/",
            "reporter": "geenensp"
        }
    ],
    "3831704": [
        {
            "dateadded": "2026-04-25 22:24:11 UTC",
            "url": "https://fast-star-2x.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831704/",
            "reporter": "anonymous"
        }
    ],
    "3831703": [
        {
            "dateadded": "2026-04-25 22:20:10 UTC",
            "url": "https://open-9.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831703/",
            "reporter": "anonymous"
        }
    ],
    "3831702": [
        {
            "dateadded": "2026-04-25 22:13:08 UTC",
            "url": "http://182.127.45.240:60011/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:01:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831702/",
            "reporter": "geenensp"
        }
    ],
    "3831701": [
        {
            "dateadded": "2026-04-25 22:13:07 UTC",
            "url": "https://zeit-berg-4n.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831701/",
            "reporter": "anonymous"
        }
    ],
    "3831700": [
        {
            "dateadded": "2026-04-25 22:12:11 UTC",
            "url": "http://59.42.89.44:56735/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831700/",
            "reporter": "geenensp"
        }
    ],
    "3831699": [
        {
            "dateadded": "2026-04-25 22:11:24 UTC",
            "url": "http://123.11.65.236:35628/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831699/",
            "reporter": "geenensp"
        }
    ],
    "3831698": [
        {
            "dateadded": "2026-04-25 22:10:11 UTC",
            "url": "https://kalt-5.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831698/",
            "reporter": "anonymous"
        }
    ],
    "3831697": [
        {
            "dateadded": "2026-04-25 22:04:22 UTC",
            "url": "http://219.157.133.48:42749/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831697/",
            "reporter": "geenensp"
        }
    ],
    "3831696": [
        {
            "dateadded": "2026-04-25 22:03:18 UTC",
            "url": "http://105.184.224.218:55579/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:00:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831696/",
            "reporter": "geenensp"
        }
    ],
    "3831695": [
        {
            "dateadded": "2026-04-25 22:00:14 UTC",
            "url": "https://soft-land-1.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 22:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831695/",
            "reporter": "anonymous"
        }
    ],
    "3831694": [
        {
            "dateadded": "2026-04-25 21:58:17 UTC",
            "url": "http://42.177.220.194:60093/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831694/",
            "reporter": "geenensp"
        }
    ],
    "3831693": [
        {
            "dateadded": "2026-04-25 21:57:07 UTC",
            "url": "http://182.126.95.184:42374/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:41:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831693/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831692": [
        {
            "dateadded": "2026-04-25 21:49:09 UTC",
            "url": "https://rouge-3.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831692/",
            "reporter": "anonymous"
        }
    ],
    "3831691": [
        {
            "dateadded": "2026-04-25 21:47:30 UTC",
            "url": "http://59.42.89.44:56735/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831691/",
            "reporter": "geenensp"
        }
    ],
    "3831690": [
        {
            "dateadded": "2026-04-25 21:45:12 UTC",
            "url": "http://222.141.46.37:49756/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831690/",
            "reporter": "geenensp"
        }
    ],
    "3831689": [
        {
            "dateadded": "2026-04-25 21:42:15 UTC",
            "url": "https://haus-1.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831689/",
            "reporter": "anonymous"
        }
    ],
    "3831688": [
        {
            "dateadded": "2026-04-25 21:39:19 UTC",
            "url": "http://156.229.165.225/alyssaanewarm4",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831688/",
            "reporter": "botnetkiller"
        }
    ],
    "3831687": [
        {
            "dateadded": "2026-04-25 21:38:25 UTC",
            "url": "http://156.229.165.225/alyssaanewx86",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831687/",
            "reporter": "botnetkiller"
        }
    ],
    "3831686": [
        {
            "dateadded": "2026-04-25 21:38:19 UTC",
            "url": "http://156.229.165.225/alyssaanewarm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831686/",
            "reporter": "botnetkiller"
        }
    ],
    "3831684": [
        {
            "dateadded": "2026-04-25 21:38:13 UTC",
            "url": "http://156.229.165.225/alyssaanewarm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831684/",
            "reporter": "botnetkiller"
        }
    ],
    "3831685": [
        {
            "dateadded": "2026-04-25 21:38:13 UTC",
            "url": "http://156.229.165.225/alyssaanewarm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831685/",
            "reporter": "botnetkiller"
        }
    ],
    "3831681": [
        {
            "dateadded": "2026-04-25 21:38:12 UTC",
            "url": "http://156.229.165.225/alyssaanewmips",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831681/",
            "reporter": "botnetkiller"
        }
    ],
    "3831682": [
        {
            "dateadded": "2026-04-25 21:38:12 UTC",
            "url": "http://156.229.165.225/alyssaanewx8664",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831682/",
            "reporter": "botnetkiller"
        }
    ],
    "3831683": [
        {
            "dateadded": "2026-04-25 21:38:12 UTC",
            "url": "http://156.229.165.225/alyssaanewmpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831683/",
            "reporter": "botnetkiller"
        }
    ],
    "3831680": [
        {
            "dateadded": "2026-04-25 21:33:21 UTC",
            "url": "http://105.184.224.218:55579/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:01:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831680/",
            "reporter": "geenensp"
        }
    ],
    "3831679": [
        {
            "dateadded": "2026-04-25 21:27:12 UTC",
            "url": "https://dark-wald-5v.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831679/",
            "reporter": "anonymous"
        }
    ],
    "3831678": [
        {
            "dateadded": "2026-04-25 21:27:07 UTC",
            "url": "http://182.124.173.162:58261/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:25:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831678/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831677": [
        {
            "dateadded": "2026-04-25 21:23:14 UTC",
            "url": "https://bleu-2.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831677/",
            "reporter": "anonymous"
        }
    ],
    "3831675": [
        {
            "dateadded": "2026-04-25 21:15:18 UTC",
            "url": "http://221.1.227.180:51572/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:51:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831675/",
            "reporter": "geenensp"
        }
    ],
    "3831676": [
        {
            "dateadded": "2026-04-25 21:15:18 UTC",
            "url": "http://222.141.46.37:49756/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:26:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831676/",
            "reporter": "geenensp"
        }
    ],
    "3831674": [
        {
            "dateadded": "2026-04-25 21:11:10 UTC",
            "url": "https://holz-berg-9.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831674/",
            "reporter": "anonymous"
        }
    ],
    "3831673": [
        {
            "dateadded": "2026-04-25 21:06:29 UTC",
            "url": "http://120.28.212.118:39727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:42:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831673/",
            "reporter": "geenensp"
        }
    ],
    "3831672": [
        {
            "dateadded": "2026-04-25 21:06:14 UTC",
            "url": "https://vert-4.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831672/",
            "reporter": "anonymous"
        }
    ],
    "3831671": [
        {
            "dateadded": "2026-04-25 21:06:07 UTC",
            "url": "http://37.28.179.42:58387/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 21:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831671/",
            "reporter": "geenensp"
        }
    ],
    "3831670": [
        {
            "dateadded": "2026-04-25 21:01:11 UTC",
            "url": "https://petit-star-6z.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 21:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831670/",
            "reporter": "anonymous"
        }
    ],
    "3831669": [
        {
            "dateadded": "2026-04-25 20:58:07 UTC",
            "url": "https://open-8.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831669/",
            "reporter": "anonymous"
        }
    ],
    "3831668": [
        {
            "dateadded": "2026-04-25 20:49:12 UTC",
            "url": "https://gold-land-3m.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831668/",
            "reporter": "anonymous"
        }
    ],
    "3831667": [
        {
            "dateadded": "2026-04-25 20:45:12 UTC",
            "url": "http://182.112.0.93:53945/i",
            "url_status": "offline",
            "last_online": "2026-04-25 20:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831667/",
            "reporter": "geenensp"
        }
    ],
    "3831666": [
        {
            "dateadded": "2026-04-25 20:44:22 UTC",
            "url": "http://213.67.213.82:58805/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831666/",
            "reporter": "geenensp"
        }
    ],
    "3831665": [
        {
            "dateadded": "2026-04-25 20:41:07 UTC",
            "url": "https://noir-1.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831665/",
            "reporter": "anonymous"
        }
    ],
    "3831664": [
        {
            "dateadded": "2026-04-25 20:38:08 UTC",
            "url": "https://fast-fire-5.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831664/",
            "reporter": "anonymous"
        }
    ],
    "3831663": [
        {
            "dateadded": "2026-04-25 20:27:19 UTC",
            "url": "http://162.248.101.153/n2/lterouter",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831663/",
            "reporter": "botnetkiller"
        }
    ],
    "3831662": [
        {
            "dateadded": "2026-04-25 20:27:07 UTC",
            "url": "https://zeit-2.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831662/",
            "reporter": "anonymous"
        }
    ],
    "3831660": [
        {
            "dateadded": "2026-04-25 20:26:17 UTC",
            "url": "http://162.248.101.153/n2/mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831660/",
            "reporter": "botnetkiller"
        }
    ],
    "3831661": [
        {
            "dateadded": "2026-04-25 20:26:17 UTC",
            "url": "http://162.248.101.153/n2/mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831661/",
            "reporter": "botnetkiller"
        }
    ],
    "3831659": [
        {
            "dateadded": "2026-04-25 20:21:16 UTC",
            "url": "https://blue-mond-9k.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831659/",
            "reporter": "anonymous"
        }
    ],
    "3831658": [
        {
            "dateadded": "2026-04-25 20:18:14 UTC",
            "url": "https://haus-5.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831658/",
            "reporter": "anonymous"
        }
    ],
    "3831657": [
        {
            "dateadded": "2026-04-25 20:15:14 UTC",
            "url": "https://dark-berg-2c.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831657/",
            "reporter": "anonymous"
        }
    ],
    "3831656": [
        {
            "dateadded": "2026-04-25 20:05:13 UTC",
            "url": "https://kalt-7.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 20:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831656/",
            "reporter": "anonymous"
        }
    ],
    "3831655": [
        {
            "dateadded": "2026-04-25 19:59:14 UTC",
            "url": "https://soft-wald-4.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831655/",
            "reporter": "anonymous"
        }
    ],
    "3831654": [
        {
            "dateadded": "2026-04-25 19:56:22 UTC",
            "url": "http://27.215.84.219:47157/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831654/",
            "reporter": "geenensp"
        }
    ],
    "3831652": [
        {
            "dateadded": "2026-04-25 19:54:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:59:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831652/",
            "reporter": "botnetkiller"
        }
    ],
    "3831653": [
        {
            "dateadded": "2026-04-25 19:54:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:06:50 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831653/",
            "reporter": "botnetkiller"
        }
    ],
    "3831651": [
        {
            "dateadded": "2026-04-25 19:54:09 UTC",
            "url": "https://rouge-6.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831651/",
            "reporter": "anonymous"
        }
    ],
    "3831641": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831641/",
            "reporter": "botnetkiller"
        }
    ],
    "3831642": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 10:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831642/",
            "reporter": "botnetkiller"
        }
    ],
    "3831643": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831643/",
            "reporter": "botnetkiller"
        }
    ],
    "3831644": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:12:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831644/",
            "reporter": "botnetkiller"
        }
    ],
    "3831645": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:46:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831645/",
            "reporter": "botnetkiller"
        }
    ],
    "3831646": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 05:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831646/",
            "reporter": "botnetkiller"
        }
    ],
    "3831647": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:23:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831647/",
            "reporter": "botnetkiller"
        }
    ],
    "3831648": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831648/",
            "reporter": "botnetkiller"
        }
    ],
    "3831649": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 11:53:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831649/",
            "reporter": "botnetkiller"
        }
    ],
    "3831650": [
        {
            "dateadded": "2026-04-25 19:53:18 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 05:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "m68k",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831650/",
            "reporter": "botnetkiller"
        }
    ],
    "3831640": [
        {
            "dateadded": "2026-04-25 19:52:20 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 05:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831640/",
            "reporter": "botnetkiller"
        }
    ],
    "3831639": [
        {
            "dateadded": "2026-04-25 19:52:19 UTC",
            "url": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-26 05:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831639/",
            "reporter": "botnetkiller"
        }
    ],
    "3831638": [
        {
            "dateadded": "2026-04-25 19:47:09 UTC",
            "url": "https://iron-land-1q.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831638/",
            "reporter": "anonymous"
        }
    ],
    "3831637": [
        {
            "dateadded": "2026-04-25 19:43:07 UTC",
            "url": "https://open-3.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831637/",
            "reporter": "anonymous"
        }
    ],
    "3831636": [
        {
            "dateadded": "2026-04-25 19:36:08 UTC",
            "url": "https://petit-zeit-8.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831636/",
            "reporter": "anonymous"
        }
    ],
    "3831635": [
        {
            "dateadded": "2026-04-25 19:34:11 UTC",
            "url": "https://noir-5x.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831635/",
            "reporter": "anonymous"
        }
    ],
    "3831634": [
        {
            "dateadded": "2026-04-25 19:32:07 UTC",
            "url": "http://175.167.31.127:54612/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831634/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831633": [
        {
            "dateadded": "2026-04-25 19:29:19 UTC",
            "url": "http://175.165.70.211:44943/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831633/",
            "reporter": "geenensp"
        }
    ],
    "3831632": [
        {
            "dateadded": "2026-04-25 19:29:18 UTC",
            "url": "http://182.112.254.225:45761/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831632/",
            "reporter": "geenensp"
        }
    ],
    "3831631": [
        {
            "dateadded": "2026-04-25 19:27:08 UTC",
            "url": "http://105.184.239.179:47135/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:59:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831631/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831630": [
        {
            "dateadded": "2026-04-25 19:25:08 UTC",
            "url": "https://holz-berg-2.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831630/",
            "reporter": "anonymous"
        }
    ],
    "3831629": [
        {
            "dateadded": "2026-04-25 19:22:11 UTC",
            "url": "http://42.228.35.148:57852/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831629/",
            "reporter": "geenensp"
        }
    ],
    "3831628": [
        {
            "dateadded": "2026-04-25 19:13:11 UTC",
            "url": "http://27.215.84.219:47157/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 14:48:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831628/",
            "reporter": "geenensp"
        }
    ],
    "3831627": [
        {
            "dateadded": "2026-04-25 19:11:08 UTC",
            "url": "https://vert-9.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831627/",
            "reporter": "anonymous"
        }
    ],
    "3831626": [
        {
            "dateadded": "2026-04-25 19:09:20 UTC",
            "url": "http://113.236.10.66:58514/i",
            "url_status": "offline",
            "last_online": "2026-04-25 19:09:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831626/",
            "reporter": "geenensp"
        }
    ],
    "3831625": [
        {
            "dateadded": "2026-04-25 19:07:07 UTC",
            "url": "http://112.246.10.205:49369/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:17:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831625/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831624": [
        {
            "dateadded": "2026-04-25 19:06:13 UTC",
            "url": "https://gold-star-4s.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831624/",
            "reporter": "anonymous"
        }
    ],
    "3831623": [
        {
            "dateadded": "2026-04-25 19:00:11 UTC",
            "url": "https://fast-1.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 19:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831623/",
            "reporter": "anonymous"
        }
    ],
    "3831622": [
        {
            "dateadded": "2026-04-25 18:54:15 UTC",
            "url": "http://42.228.35.148:57852/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:50:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831622/",
            "reporter": "geenensp"
        }
    ],
    "3831621": [
        {
            "dateadded": "2026-04-25 18:54:06 UTC",
            "url": "https://wald-baum-7.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831621/",
            "reporter": "anonymous"
        }
    ],
    "3831620": [
        {
            "dateadded": "2026-04-25 18:51:18 UTC",
            "url": "http://156.229.165.225/sysupdate.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831620/",
            "reporter": "botnetkiller"
        }
    ],
    "3831619": [
        {
            "dateadded": "2026-04-25 18:49:17 UTC",
            "url": "https://bleu-2k.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:49:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831619/",
            "reporter": "anonymous"
        }
    ],
    "3831618": [
        {
            "dateadded": "2026-04-25 18:43:14 UTC",
            "url": "http://115.55.226.192:57831/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:17:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831618/",
            "reporter": "geenensp"
        }
    ],
    "3831617": [
        {
            "dateadded": "2026-04-25 18:43:13 UTC",
            "url": "https://zeit-land-5.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831617/",
            "reporter": "anonymous"
        }
    ],
    "3831616": [
        {
            "dateadded": "2026-04-25 18:42:26 UTC",
            "url": "http://112.246.10.205:49369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:43:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831616/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831615": [
        {
            "dateadded": "2026-04-25 18:41:21 UTC",
            "url": "http://115.55.226.192:57831/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:04:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831615/",
            "reporter": "geenensp"
        }
    ],
    "3831614": [
        {
            "dateadded": "2026-04-25 18:38:09 UTC",
            "url": "https://haus-3.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831614/",
            "reporter": "anonymous"
        }
    ],
    "3831613": [
        {
            "dateadded": "2026-04-25 18:37:08 UTC",
            "url": "http://42.176.125.227:50287/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831613/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831612": [
        {
            "dateadded": "2026-04-25 18:33:22 UTC",
            "url": "http://182.121.9.195:44806/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:42:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831612/",
            "reporter": "geenensp"
        }
    ],
    "3831611": [
        {
            "dateadded": "2026-04-25 18:29:23 UTC",
            "url": "http://125.41.106.205:47020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831611/",
            "reporter": "geenensp"
        }
    ],
    "3831610": [
        {
            "dateadded": "2026-04-25 18:28:13 UTC",
            "url": "https://blue-fire-9w.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831610/",
            "reporter": "anonymous"
        }
    ],
    "3831609": [
        {
            "dateadded": "2026-04-25 18:22:10 UTC",
            "url": "https://iron-8.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831609/",
            "reporter": "anonymous"
        }
    ],
    "3831608": [
        {
            "dateadded": "2026-04-25 18:19:22 UTC",
            "url": "http://123.10.158.9:40513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831608/",
            "reporter": "geenensp"
        }
    ],
    "3831607": [
        {
            "dateadded": "2026-04-25 18:17:22 UTC",
            "url": "http://182.121.9.195:44806/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831607/",
            "reporter": "geenensp"
        }
    ],
    "3831606": [
        {
            "dateadded": "2026-04-25 18:14:08 UTC",
            "url": "http://61.53.119.47:48951/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831606/",
            "reporter": "geenensp"
        }
    ],
    "3831605": [
        {
            "dateadded": "2026-04-25 18:11:13 UTC",
            "url": "https://petit-mond-6.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831605/",
            "reporter": "anonymous"
        }
    ],
    "3831604": [
        {
            "dateadded": "2026-04-25 18:07:12 UTC",
            "url": "https://soft-4.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831604/",
            "reporter": "anonymous"
        }
    ],
    "3831603": [
        {
            "dateadded": "2026-04-25 18:02:08 UTC",
            "url": "http://125.47.89.3:51530/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:53:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831603/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831602": [
        {
            "dateadded": "2026-04-25 18:01:21 UTC",
            "url": "https://kalt-berg-1m.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 18:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831602/",
            "reporter": "anonymous"
        }
    ],
    "3831601": [
        {
            "dateadded": "2026-04-25 17:58:25 UTC",
            "url": "http://42.230.17.73:33077/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:19:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831601/",
            "reporter": "geenensp"
        }
    ],
    "3831600": [
        {
            "dateadded": "2026-04-25 17:53:16 UTC",
            "url": "https://rouge-7.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 17:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831600/",
            "reporter": "anonymous"
        }
    ],
    "3831599": [
        {
            "dateadded": "2026-04-25 17:45:12 UTC",
            "url": "https://dark-star-2v.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 17:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831599/",
            "reporter": "anonymous"
        }
    ],
    "3831598": [
        {
            "dateadded": "2026-04-25 17:43:19 UTC",
            "url": "http://112.237.17.123:49053/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831598/",
            "reporter": "geenensp"
        }
    ],
    "3831597": [
        {
            "dateadded": "2026-04-25 17:42:09 UTC",
            "url": "https://open-9.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 17:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831597/",
            "reporter": "anonymous"
        }
    ],
    "3831596": [
        {
            "dateadded": "2026-04-25 17:40:30 UTC",
            "url": "http://61.53.119.47:48951/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831596/",
            "reporter": "geenensp"
        }
    ],
    "3831595": [
        {
            "dateadded": "2026-04-25 17:40:29 UTC",
            "url": "http://112.237.17.123:49053/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:23:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831595/",
            "reporter": "geenensp"
        }
    ],
    "3831594": [
        {
            "dateadded": "2026-04-25 17:39:23 UTC",
            "url": "http://171.38.79.137:47753/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831594/",
            "reporter": "geenensp"
        }
    ],
    "3831593": [
        {
            "dateadded": "2026-04-25 17:37:24 UTC",
            "url": "http://42.235.93.178:49970/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831593/",
            "reporter": "geenensp"
        }
    ],
    "3831592": [
        {
            "dateadded": "2026-04-25 17:33:23 UTC",
            "url": "http://42.230.17.73:33077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:06:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831592/",
            "reporter": "geenensp"
        }
    ],
    "3831591": [
        {
            "dateadded": "2026-04-25 17:32:08 UTC",
            "url": "http://111.220.29.136:52021/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831591/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831590": [
        {
            "dateadded": "2026-04-25 17:30:17 UTC",
            "url": "https://holz-baum-3.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 17:30:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831590/",
            "reporter": "anonymous"
        }
    ],
    "3831589": [
        {
            "dateadded": "2026-04-25 17:27:23 UTC",
            "url": "http://60.23.239.218:39838/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831589/",
            "reporter": "geenensp"
        }
    ],
    "3831588": [
        {
            "dateadded": "2026-04-25 17:26:16 UTC",
            "url": "https://vert-5.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 17:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831588/",
            "reporter": "anonymous"
        }
    ],
    "3831587": [
        {
            "dateadded": "2026-04-25 17:14:20 UTC",
            "url": "http://27.217.184.93:40071/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831587/",
            "reporter": "geenensp"
        }
    ],
    "3831586": [
        {
            "dateadded": "2026-04-25 17:11:17 UTC",
            "url": "http://noir-1.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 17:11:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831586/",
            "reporter": "anonymous"
        }
    ],
    "3831585": [
        {
            "dateadded": "2026-04-25 17:11:15 UTC",
            "url": "http://42.235.44.177:45411/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831585/",
            "reporter": "geenensp"
        }
    ],
    "3831584": [
        {
            "dateadded": "2026-04-25 17:09:20 UTC",
            "url": "http://27.217.184.93:40071/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831584/",
            "reporter": "geenensp"
        }
    ],
    "3831583": [
        {
            "dateadded": "2026-04-25 17:07:06 UTC",
            "url": "http://111.220.29.136:52021/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831583/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831582": [
        {
            "dateadded": "2026-04-25 17:05:24 UTC",
            "url": "http://27.215.195.14:35186/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831582/",
            "reporter": "geenensp"
        }
    ],
    "3831581": [
        {
            "dateadded": "2026-04-25 17:02:24 UTC",
            "url": "http://182.126.116.146:37115/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:53:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831581/",
            "reporter": "geenensp"
        }
    ],
    "3831580": [
        {
            "dateadded": "2026-04-25 17:01:23 UTC",
            "url": "http://115.55.233.8:41837/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831580/",
            "reporter": "geenensp"
        }
    ],
    "3831579": [
        {
            "dateadded": "2026-04-25 16:43:10 UTC",
            "url": "http://117.217.23.140:41366/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831579/",
            "reporter": "geenensp"
        }
    ],
    "3831578": [
        {
            "dateadded": "2026-04-25 16:42:18 UTC",
            "url": "http://182.126.116.146:37115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831578/",
            "reporter": "geenensp"
        }
    ],
    "3831577": [
        {
            "dateadded": "2026-04-25 16:27:17 UTC",
            "url": "http://117.217.23.140:41366/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:48:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831577/",
            "reporter": "geenensp"
        }
    ],
    "3831576": [
        {
            "dateadded": "2026-04-25 16:22:07 UTC",
            "url": "http://42.226.67.85:59331/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831576/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831575": [
        {
            "dateadded": "2026-04-25 16:19:08 UTC",
            "url": "https://www.italiaregina.it/wp-content/plugins/oAjtOHvn.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "LummaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831575/",
            "reporter": "abuse_ch"
        }
    ],
    "3831574": [
        {
            "dateadded": "2026-04-25 16:16:09 UTC",
            "url": "https://bundle-sheet.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 16:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831574/",
            "reporter": "anonymous"
        }
    ],
    "3831573": [
        {
            "dateadded": "2026-04-25 16:12:15 UTC",
            "url": "http://27.215.195.14:35186/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831573/",
            "reporter": "geenensp"
        }
    ],
    "3831572": [
        {
            "dateadded": "2026-04-25 16:09:14 UTC",
            "url": "https://pl4sm-flow.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 16:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831572/",
            "reporter": "anonymous"
        }
    ],
    "3831571": [
        {
            "dateadded": "2026-04-25 16:03:41 UTC",
            "url": "http://116.209.163.189:57219/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831571/",
            "reporter": "geenensp"
        }
    ],
    "3831570": [
        {
            "dateadded": "2026-04-25 16:03:15 UTC",
            "url": "https://zencorear1.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 16:03:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831570/",
            "reporter": "anonymous"
        }
    ],
    "3831569": [
        {
            "dateadded": "2026-04-25 16:02:13 UTC",
            "url": "https://dcdivas.com/wp-includes/Text/Diff/Engine/Decred.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 06:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "ZigClipper"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831569/",
            "reporter": "abuse_ch"
        }
    ],
    "3831568": [
        {
            "dateadded": "2026-04-25 16:01:09 UTC",
            "url": "http://79.124.59.142/cl-ncl-following",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ZigClipper"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831568/",
            "reporter": "abuse_ch"
        }
    ],
    "3831567": [
        {
            "dateadded": "2026-04-25 15:58:12 UTC",
            "url": "https://hf89cj2.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831567/",
            "reporter": "anonymous"
        }
    ],
    "3831566": [
        {
            "dateadded": "2026-04-25 15:57:07 UTC",
            "url": "http://42.226.67.85:59331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:48:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831566/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831565": [
        {
            "dateadded": "2026-04-25 15:53:11 UTC",
            "url": "https://rx64iv.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:53:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831565/",
            "reporter": "anonymous"
        }
    ],
    "3831563": [
        {
            "dateadded": "2026-04-25 15:52:28 UTC",
            "url": "http://192.109.200.197/x86",
            "url_status": "offline",
            "last_online": "2026-04-25 17:07:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831563/",
            "reporter": "botnetkiller"
        }
    ],
    "3831564": [
        {
            "dateadded": "2026-04-25 15:52:28 UTC",
            "url": "http://192.109.200.197/armv7l",
            "url_status": "offline",
            "last_online": "2026-04-25 17:21:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831564/",
            "reporter": "botnetkiller"
        }
    ],
    "3831559": [
        {
            "dateadded": "2026-04-25 15:52:27 UTC",
            "url": "http://192.109.200.197/armv6l",
            "url_status": "offline",
            "last_online": "2026-04-25 16:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831559/",
            "reporter": "botnetkiller"
        }
    ],
    "3831560": [
        {
            "dateadded": "2026-04-25 15:52:27 UTC",
            "url": "http://192.109.200.197/armv5l",
            "url_status": "offline",
            "last_online": "2026-04-25 17:03:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831560/",
            "reporter": "botnetkiller"
        }
    ],
    "3831561": [
        {
            "dateadded": "2026-04-25 15:52:27 UTC",
            "url": "http://192.109.200.197/i686",
            "url_status": "offline",
            "last_online": "2026-04-25 15:52:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831561/",
            "reporter": "botnetkiller"
        }
    ],
    "3831562": [
        {
            "dateadded": "2026-04-25 15:52:27 UTC",
            "url": "http://192.109.200.197/ppc64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:52:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831562/",
            "reporter": "botnetkiller"
        }
    ],
    "3831558": [
        {
            "dateadded": "2026-04-25 15:47:06 UTC",
            "url": "http://221.1.227.180:51572/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:35:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831558/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831557": [
        {
            "dateadded": "2026-04-25 15:46:13 UTC",
            "url": "https://3fgrll.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831557/",
            "reporter": "anonymous"
        }
    ],
    "3831556": [
        {
            "dateadded": "2026-04-25 15:45:09 UTC",
            "url": "http://192.109.200.197/run.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831556/",
            "reporter": "botnetkiller"
        }
    ],
    "3831555": [
        {
            "dateadded": "2026-04-25 15:41:08 UTC",
            "url": "https://x1ov.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831555/",
            "reporter": "anonymous"
        }
    ],
    "3831554": [
        {
            "dateadded": "2026-04-25 15:40:16 UTC",
            "url": "http://182.127.81.12:53154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:31:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831554/",
            "reporter": "geenensp"
        }
    ],
    "3831553": [
        {
            "dateadded": "2026-04-25 15:33:49 UTC",
            "url": "https://qhsd8888.com/down.php/bae7aa2acb876b53690a9e627f8ffdef.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 15:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "shellcode",
                "SilverFox"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831553/",
            "reporter": "Ling"
        }
    ],
    "3831552": [
        {
            "dateadded": "2026-04-25 15:33:10 UTC",
            "url": "https://dustfix.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831552/",
            "reporter": "anonymous"
        }
    ],
    "3831551": [
        {
            "dateadded": "2026-04-25 15:26:13 UTC",
            "url": "https://glos-rep.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831551/",
            "reporter": "anonymous"
        }
    ],
    "3831550": [
        {
            "dateadded": "2026-04-25 15:20:14 UTC",
            "url": "https://n0rt-crest.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831550/",
            "reporter": "anonymous"
        }
    ],
    "3831549": [
        {
            "dateadded": "2026-04-25 15:16:15 UTC",
            "url": "https://ernbe-leaf.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831549/",
            "reporter": "anonymous"
        }
    ],
    "3831548": [
        {
            "dateadded": "2026-04-25 15:07:20 UTC",
            "url": "http://162.249.125.147/mips",
            "url_status": "online",
            "last_online": "2026-04-27 13:06:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831548/",
            "reporter": "botnetkiller"
        }
    ],
    "3831547": [
        {
            "dateadded": "2026-04-25 15:05:18 UTC",
            "url": "https://wfamakg.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 15:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831547/",
            "reporter": "anonymous"
        }
    ],
    "3831546": [
        {
            "dateadded": "2026-04-25 15:04:21 UTC",
            "url": "http://45.131.108.107/0x83911d24Fx.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831546/",
            "reporter": "abuse_ch"
        }
    ],
    "3831545": [
        {
            "dateadded": "2026-04-25 15:04:18 UTC",
            "url": "http://82.26.74.80:5001/bot.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 23:02:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831545/",
            "reporter": "abuse_ch"
        }
    ],
    "3831544": [
        {
            "dateadded": "2026-04-25 15:04:16 UTC",
            "url": "http://82.26.74.80:5001/amd64",
            "url_status": "offline",
            "last_online": "2026-04-26 23:21:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831544/",
            "reporter": "abuse_ch"
        }
    ],
    "3831543": [
        {
            "dateadded": "2026-04-25 15:04:13 UTC",
            "url": "http://82.26.74.80:5001/arm5",
            "url_status": "offline",
            "last_online": "2026-04-26 23:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831543/",
            "reporter": "abuse_ch"
        }
    ],
    "3831539": [
        {
            "dateadded": "2026-04-25 15:04:12 UTC",
            "url": "http://82.26.74.80:5001/mipsle",
            "url_status": "offline",
            "last_online": "2026-04-26 23:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831539/",
            "reporter": "abuse_ch"
        }
    ],
    "3831540": [
        {
            "dateadded": "2026-04-25 15:04:12 UTC",
            "url": "http://82.26.74.80:5001/mips",
            "url_status": "offline",
            "last_online": "2026-04-27 00:26:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831540/",
            "reporter": "abuse_ch"
        }
    ],
    "3831541": [
        {
            "dateadded": "2026-04-25 15:04:12 UTC",
            "url": "http://82.26.74.80:5001/arm64",
            "url_status": "offline",
            "last_online": "2026-04-27 00:31:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831541/",
            "reporter": "abuse_ch"
        }
    ],
    "3831542": [
        {
            "dateadded": "2026-04-25 15:04:12 UTC",
            "url": "http://82.26.74.80:5001/x86",
            "url_status": "offline",
            "last_online": "2026-04-27 01:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831542/",
            "reporter": "abuse_ch"
        }
    ],
    "3831537": [
        {
            "dateadded": "2026-04-25 15:04:11 UTC",
            "url": "http://82.26.74.80:5001/arm6",
            "url_status": "offline",
            "last_online": "2026-04-26 23:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831537/",
            "reporter": "abuse_ch"
        }
    ],
    "3831538": [
        {
            "dateadded": "2026-04-25 15:04:11 UTC",
            "url": "http://82.26.74.80:5001/arm",
            "url_status": "offline",
            "last_online": "2026-04-27 00:31:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831538/",
            "reporter": "abuse_ch"
        }
    ],
    "3831532": [
        {
            "dateadded": "2026-04-25 15:04:06 UTC",
            "url": "http://176.65.139.141/bins/jade.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831532/",
            "reporter": "abuse_ch"
        }
    ],
    "3831533": [
        {
            "dateadded": "2026-04-25 15:04:06 UTC",
            "url": "http://176.65.139.143:8081/debug",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831533/",
            "reporter": "abuse_ch"
        }
    ],
    "3831534": [
        {
            "dateadded": "2026-04-25 15:04:06 UTC",
            "url": "http://176.65.139.141/bins/jade.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831534/",
            "reporter": "abuse_ch"
        }
    ],
    "3831535": [
        {
            "dateadded": "2026-04-25 15:04:06 UTC",
            "url": "http://176.65.139.141/bins/jade.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831535/",
            "reporter": "abuse_ch"
        }
    ],
    "3831536": [
        {
            "dateadded": "2026-04-25 15:04:06 UTC",
            "url": "http://176.65.139.141/bins/jade.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831536/",
            "reporter": "abuse_ch"
        }
    ],
    "3831531": [
        {
            "dateadded": "2026-04-25 15:01:16 UTC",
            "url": "http://129.213.9.74:1338/mermiler.tar.gz",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "elf",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831531/",
            "reporter": "botnetkiller"
        }
    ],
    "3831530": [
        {
            "dateadded": "2026-04-25 15:00:14 UTC",
            "url": "https://enotpidarmot.pw/setup_signed.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 15:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ArechClient",
                "Arechclient2",
                "exe",
                "rat",
                "SectopRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831530/",
            "reporter": "abuse_ch"
        }
    ],
    "3831526": [
        {
            "dateadded": "2026-04-25 14:59:31 UTC",
            "url": "http://129.213.9.74:1338/bot.arm64",
            "url_status": "online",
            "last_online": "2026-04-27 13:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831526/",
            "reporter": "botnetkiller"
        }
    ],
    "3831527": [
        {
            "dateadded": "2026-04-25 14:59:31 UTC",
            "url": "http://129.213.9.74:1338/bot.i686",
            "url_status": "offline",
            "last_online": "2026-04-27 05:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831527/",
            "reporter": "botnetkiller"
        }
    ],
    "3831528": [
        {
            "dateadded": "2026-04-25 14:59:31 UTC",
            "url": "http://129.213.9.74:1338/bot.i586",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831528/",
            "reporter": "botnetkiller"
        }
    ],
    "3831529": [
        {
            "dateadded": "2026-04-25 14:59:31 UTC",
            "url": "http://129.213.9.74:1338/bot.armv7l",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831529/",
            "reporter": "botnetkiller"
        }
    ],
    "3831523": [
        {
            "dateadded": "2026-04-25 14:59:30 UTC",
            "url": "http://129.213.9.74:1338/bot.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831523/",
            "reporter": "botnetkiller"
        }
    ],
    "3831524": [
        {
            "dateadded": "2026-04-25 14:59:30 UTC",
            "url": "http://129.213.9.74:1338/bot.mips",
            "url_status": "online",
            "last_online": "2026-04-27 13:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831524/",
            "reporter": "botnetkiller"
        }
    ],
    "3831525": [
        {
            "dateadded": "2026-04-25 14:59:30 UTC",
            "url": "http://129.213.9.74:1338/bot.powerpc-440fp",
            "url_status": "offline",
            "last_online": "2026-04-27 07:45:57 UTC",
            "threat": "malware_download",
            "tags": [
                "DDoSAgent",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831525/",
            "reporter": "botnetkiller"
        }
    ],
    "3831522": [
        {
            "dateadded": "2026-04-25 14:59:28 UTC",
            "url": "http://129.213.9.74:1338/dropper.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831522/",
            "reporter": "botnetkiller"
        }
    ],
    "3831520": [
        {
            "dateadded": "2026-04-25 14:59:27 UTC",
            "url": "http://129.213.9.74:1338/bot.powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 13:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "DDoSAgent",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831520/",
            "reporter": "botnetkiller"
        }
    ],
    "3831521": [
        {
            "dateadded": "2026-04-25 14:59:27 UTC",
            "url": "http://129.213.9.74:1338/bot.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831521/",
            "reporter": "botnetkiller"
        }
    ],
    "3831516": [
        {
            "dateadded": "2026-04-25 14:59:26 UTC",
            "url": "http://129.213.9.74:1338/bot.armv6l",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831516/",
            "reporter": "botnetkiller"
        }
    ],
    "3831517": [
        {
            "dateadded": "2026-04-25 14:59:26 UTC",
            "url": "http://42.56.147.59:56819/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831517/",
            "reporter": "geenensp"
        }
    ],
    "3831518": [
        {
            "dateadded": "2026-04-25 14:59:26 UTC",
            "url": "http://129.213.9.74:1338/bot.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831518/",
            "reporter": "botnetkiller"
        }
    ],
    "3831519": [
        {
            "dateadded": "2026-04-25 14:59:26 UTC",
            "url": "http://129.213.9.74:1338/bot.i486",
            "url_status": "online",
            "last_online": "2026-04-27 13:53:37 UTC",
            "threat": "malware_download",
            "tags": [
                "DDoSAgent",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831519/",
            "reporter": "botnetkiller"
        }
    ],
    "3831515": [
        {
            "dateadded": "2026-04-25 14:59:24 UTC",
            "url": "http://129.213.9.74:1338/bot.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831515/",
            "reporter": "botnetkiller"
        }
    ],
    "3831514": [
        {
            "dateadded": "2026-04-25 14:59:21 UTC",
            "url": "http://129.213.9.74:1338/bot.arc_gnu_2017.09_prebuilt_uclibc_le_arc700_linux_install",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831514/",
            "reporter": "botnetkiller"
        }
    ],
    "3831510": [
        {
            "dateadded": "2026-04-25 14:59:07 UTC",
            "url": "http://129.213.9.74:1338/bot.armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 14:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831510/",
            "reporter": "botnetkiller"
        }
    ],
    "3831511": [
        {
            "dateadded": "2026-04-25 14:59:07 UTC",
            "url": "http://129.213.9.74:1338/bot.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 05:48:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831511/",
            "reporter": "botnetkiller"
        }
    ],
    "3831512": [
        {
            "dateadded": "2026-04-25 14:59:07 UTC",
            "url": "http://129.213.9.74:1338/bot.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "DDoSAgent",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831512/",
            "reporter": "botnetkiller"
        }
    ],
    "3831513": [
        {
            "dateadded": "2026-04-25 14:59:07 UTC",
            "url": "http://129.213.9.74:1338/bot.armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831513/",
            "reporter": "botnetkiller"
        }
    ],
    "3831509": [
        {
            "dateadded": "2026-04-25 14:59:06 UTC",
            "url": "http://129.213.9.74:1338/bot.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831509/",
            "reporter": "botnetkiller"
        }
    ],
    "3831508": [
        {
            "dateadded": "2026-04-25 14:58:12 UTC",
            "url": "https://vitalpur.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831508/",
            "reporter": "anonymous"
        }
    ],
    "3831507": [
        {
            "dateadded": "2026-04-25 14:55:13 UTC",
            "url": "http://61.163.129.6:52702/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:46:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831507/",
            "reporter": "geenensp"
        }
    ],
    "3831506": [
        {
            "dateadded": "2026-04-25 14:53:29 UTC",
            "url": "http://5.63.19.19/vc",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:29 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831506/",
            "reporter": "botnetkiller"
        }
    ],
    "3831505": [
        {
            "dateadded": "2026-04-25 14:53:27 UTC",
            "url": "http://5.63.19.19/kamd",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831505/",
            "reporter": "botnetkiller"
        }
    ],
    "3831504": [
        {
            "dateadded": "2026-04-25 14:53:24 UTC",
            "url": "http://5.63.19.19/vca",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:24 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831504/",
            "reporter": "botnetkiller"
        }
    ],
    "3831501": [
        {
            "dateadded": "2026-04-25 14:53:23 UTC",
            "url": "http://5.63.19.19/vca1",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:23 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831501/",
            "reporter": "botnetkiller"
        }
    ],
    "3831502": [
        {
            "dateadded": "2026-04-25 14:53:23 UTC",
            "url": "http://5.63.19.19/vc1",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831502/",
            "reporter": "botnetkiller"
        }
    ],
    "3831503": [
        {
            "dateadded": "2026-04-25 14:53:23 UTC",
            "url": "http://5.63.19.19/karm",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:23 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831503/",
            "reporter": "botnetkiller"
        }
    ],
    "3831500": [
        {
            "dateadded": "2026-04-25 14:53:12 UTC",
            "url": "https://ba5ic0-spark.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831500/",
            "reporter": "anonymous"
        }
    ],
    "3831499": [
        {
            "dateadded": "2026-04-25 14:47:15 UTC",
            "url": "https://theorypin.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831499/",
            "reporter": "anonymous"
        }
    ],
    "3831498": [
        {
            "dateadded": "2026-04-25 14:44:19 UTC",
            "url": "http://175.173.80.169:55944/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:13:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831498/",
            "reporter": "geenensp"
        }
    ],
    "3831497": [
        {
            "dateadded": "2026-04-25 14:43:14 UTC",
            "url": "https://80njj90.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831497/",
            "reporter": "anonymous"
        }
    ],
    "3831496": [
        {
            "dateadded": "2026-04-25 14:38:07 UTC",
            "url": "http://54.39.101.43:34482/auth-token/d",
            "url_status": "offline",
            "last_online": "2026-04-25 17:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831496/",
            "reporter": "adliwahid"
        }
    ],
    "3831495": [
        {
            "dateadded": "2026-04-25 14:37:48 UTC",
            "url": "http://165.22.247.105/iran.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831495/",
            "reporter": "adliwahid"
        }
    ],
    "3831493": [
        {
            "dateadded": "2026-04-25 14:37:47 UTC",
            "url": "http://165.22.247.105/iran.aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831493/",
            "reporter": "adliwahid"
        }
    ],
    "3831494": [
        {
            "dateadded": "2026-04-25 14:37:47 UTC",
            "url": "http://165.22.247.105/iran.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831494/",
            "reporter": "adliwahid"
        }
    ],
    "3831490": [
        {
            "dateadded": "2026-04-25 14:37:45 UTC",
            "url": "https://github.com/labieds/Splitwriter/raw/refs/heads/main/public/Splitwriter-v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831490/",
            "reporter": "c2hunter"
        }
    ],
    "3831491": [
        {
            "dateadded": "2026-04-25 14:37:45 UTC",
            "url": "https://github.com/Jamesnaismit/cv-screener/raw/refs/heads/main/web/hooks/cv-screener-3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831491/",
            "reporter": "c2hunter"
        }
    ],
    "3831492": [
        {
            "dateadded": "2026-04-25 14:37:45 UTC",
            "url": "https://raw.githubusercontent.com/sahius1/SocialVideoUtility/main/screenshots/Video-Social-Utility-v2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831492/",
            "reporter": "c2hunter"
        }
    ],
    "3831479": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/123affano1/claudetrack/raw/refs/heads/main/client/src/pages/Software_v1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831479/",
            "reporter": "c2hunter"
        }
    ],
    "3831480": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/DouniaJammali31/GrammarFixer/raw/refs/heads/main/images/GrammarFixer-2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831480/",
            "reporter": "c2hunter"
        }
    ],
    "3831481": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://raw.githubusercontent.com/CHAMARA1989/prismos-ai/main/docs/screenshots/prismos_ai_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831481/",
            "reporter": "c2hunter"
        }
    ],
    "3831482": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/Commutertrafficfarsi309/Qclaw-old/raw/refs/heads/main/Fasciolidae/Qclaw_old_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831482/",
            "reporter": "c2hunter"
        }
    ],
    "3831483": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/iamsujalarora/githubMeter/raw/refs/heads/main/src/styles/github_Meter_v2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831483/",
            "reporter": "c2hunter"
        }
    ],
    "3831484": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/arockiakoilpillai/temp-email-api/raw/refs/heads/master/images/temp-email-api-v1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831484/",
            "reporter": "c2hunter"
        }
    ],
    "3831485": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/Ggshcgdh/LocalTranslateApp/raw/refs/heads/main/kittly/Translate_App_Local_3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831485/",
            "reporter": "c2hunter"
        }
    ],
    "3831486": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/arockiakoilpillai/temp-email-api/raw/refs/heads/master/images/temp-email-api_v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831486/",
            "reporter": "c2hunter"
        }
    ],
    "3831487": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/Jamesnaismit/cv-screener/raw/refs/heads/main/api/postman/screener_cv_v2.8-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831487/",
            "reporter": "c2hunter"
        }
    ],
    "3831488": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/DouniaJammali31/GrammarFixer/raw/refs/heads/main/GrammarFixer/Resources/Fixer-Grammar-1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831488/",
            "reporter": "c2hunter"
        }
    ],
    "3831489": [
        {
            "dateadded": "2026-04-25 14:37:44 UTC",
            "url": "https://github.com/Reency/Blox-Fruits/raw/refs/heads/main/regardance/Fruits_Blox_v1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lua"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831489/",
            "reporter": "c2hunter"
        }
    ],
    "3831478": [
        {
            "dateadded": "2026-04-25 14:37:43 UTC",
            "url": "https://raw.githubusercontent.com/Lapk0m/n01d-overwatch/main/Shared/overwatch-n-d-2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 15:00:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831478/",
            "reporter": "c2hunter"
        }
    ],
    "3831476": [
        {
            "dateadded": "2026-04-25 14:37:42 UTC",
            "url": "https://github.com/NyTrozE/ant-design-wpf/raw/refs/heads/master/src/AntDesign.WPF/wpf-ant-design-v3.7-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831476/",
            "reporter": "c2hunter"
        }
    ],
    "3831477": [
        {
            "dateadded": "2026-04-25 14:37:42 UTC",
            "url": "https://raw.githubusercontent.com/mikey143-kun/agentchattr/main/session_templates/Software-3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831477/",
            "reporter": "c2hunter"
        }
    ],
    "3831472": [
        {
            "dateadded": "2026-04-25 14:37:41 UTC",
            "url": "https://github.com/ayubalishah/mac-recorder/raw/refs/heads/main/dist/MacRecorder-0.2.0.pkg",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831472/",
            "reporter": "c2hunter"
        }
    ],
    "3831473": [
        {
            "dateadded": "2026-04-25 14:37:41 UTC",
            "url": "https://raw.githubusercontent.com/Mwamwaaaa/opentypeless/main/src/hooks/Software-v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831473/",
            "reporter": "c2hunter"
        }
    ],
    "3831474": [
        {
            "dateadded": "2026-04-25 14:37:41 UTC",
            "url": "https://raw.githubusercontent.com/ayubalishah/mac-recorder/main/MacRecorder/Resources/Assets.xcassets/recorder-mac-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831474/",
            "reporter": "c2hunter"
        }
    ],
    "3831475": [
        {
            "dateadded": "2026-04-25 14:37:41 UTC",
            "url": "https://github.com/NightmanVR/ModernNav/raw/refs/heads/main/src/hooks/Modern_Nav_1.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831475/",
            "reporter": "c2hunter"
        }
    ],
    "3831466": [
        {
            "dateadded": "2026-04-25 14:37:40 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc",
            "url_status": "offline",
            "last_online": "2026-04-26 06:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831466/",
            "reporter": "adliwahid"
        }
    ],
    "3831467": [
        {
            "dateadded": "2026-04-25 14:37:40 UTC",
            "url": "https://github.com/NightmanVR/ModernNav/raw/refs/heads/main/public/fonts/Modern-Nav-v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831467/",
            "reporter": "c2hunter"
        }
    ],
    "3831468": [
        {
            "dateadded": "2026-04-25 14:37:40 UTC",
            "url": "https://github.com/Commutertrafficfarsi309/Qclaw-old",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831468/",
            "reporter": "c2hunter"
        }
    ],
    "3831469": [
        {
            "dateadded": "2026-04-25 14:37:40 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 06:42:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831469/",
            "reporter": "adliwahid"
        }
    ],
    "3831470": [
        {
            "dateadded": "2026-04-25 14:37:40 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 06:12:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831470/",
            "reporter": "adliwahid"
        }
    ],
    "3831471": [
        {
            "dateadded": "2026-04-25 14:37:40 UTC",
            "url": "https://raw.githubusercontent.com/labieds/Splitwriter/main/src/windows%20-%20old/boards/text-engine/_old/Software-v2.8-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831471/",
            "reporter": "c2hunter"
        }
    ],
    "3831460": [
        {
            "dateadded": "2026-04-25 14:37:39 UTC",
            "url": "http://54.39.101.43:34482/auth-token/k",
            "url_status": "offline",
            "last_online": "2026-04-25 17:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831460/",
            "reporter": "adliwahid"
        }
    ],
    "3831461": [
        {
            "dateadded": "2026-04-25 14:37:39 UTC",
            "url": "http://176.65.132.117/dlr.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 14:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831461/",
            "reporter": "c2hunter"
        }
    ],
    "3831462": [
        {
            "dateadded": "2026-04-25 14:37:39 UTC",
            "url": "https://raw.githubusercontent.com/twelve-today822/JuAI/main/assets/AI_Ju_riverwards.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:26:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831462/",
            "reporter": "c2hunter"
        }
    ],
    "3831463": [
        {
            "dateadded": "2026-04-25 14:37:39 UTC",
            "url": "http://54.39.101.43:34482/auth-token/g",
            "url_status": "offline",
            "last_online": "2026-04-25 18:30:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831463/",
            "reporter": "adliwahid"
        }
    ],
    "3831464": [
        {
            "dateadded": "2026-04-25 14:37:39 UTC",
            "url": "http://192.109.200.197/mips",
            "url_status": "offline",
            "last_online": "2026-04-25 17:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831464/",
            "reporter": "c2hunter"
        }
    ],
    "3831465": [
        {
            "dateadded": "2026-04-25 14:37:39 UTC",
            "url": "http://54.39.101.43:34482/auth-token/h",
            "url_status": "offline",
            "last_online": "2026-04-25 16:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831465/",
            "reporter": "adliwahid"
        }
    ],
    "3831459": [
        {
            "dateadded": "2026-04-25 14:37:38 UTC",
            "url": "http://103.77.246.198/ohsitsvegawellrip.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831459/",
            "reporter": "adliwahid"
        }
    ],
    "3831458": [
        {
            "dateadded": "2026-04-25 14:37:37 UTC",
            "url": "http://54.39.101.43:34482/auth-token/l",
            "url_status": "offline",
            "last_online": "2026-04-25 17:31:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831458/",
            "reporter": "adliwahid"
        }
    ],
    "3831456": [
        {
            "dateadded": "2026-04-25 14:37:33 UTC",
            "url": "http://151.243.109.141:8000/ntpd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831456/",
            "reporter": "adliwahid"
        }
    ],
    "3831457": [
        {
            "dateadded": "2026-04-25 14:37:33 UTC",
            "url": "http://150.241.94.117/cat.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831457/",
            "reporter": "geenensp"
        }
    ],
    "3831454": [
        {
            "dateadded": "2026-04-25 14:37:32 UTC",
            "url": "http://176.65.139.143:8081/cdn/content/bins.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831454/",
            "reporter": "adliwahid"
        }
    ],
    "3831455": [
        {
            "dateadded": "2026-04-25 14:37:32 UTC",
            "url": "http://77.239.112.39/bins/loader.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831455/",
            "reporter": "adliwahid"
        }
    ],
    "3831452": [
        {
            "dateadded": "2026-04-25 14:36:20 UTC",
            "url": "https://github.com/WildCraftsmanFilter/AI-Voice-Changer-Real-Time-Desktop/releases/download/new/AI-Voice-Changer.v5.2.4-x64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-6622"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831452/",
            "reporter": "c2hunter"
        }
    ],
    "3831450": [
        {
            "dateadded": "2026-04-25 14:36:19 UTC",
            "url": "https://raw.githubusercontent.com/Yashsoni443/ai-image-generator-web/master/functions/web_generator_image_ai_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831450/",
            "reporter": "c2hunter"
        }
    ],
    "3831451": [
        {
            "dateadded": "2026-04-25 14:36:19 UTC",
            "url": "https://github.com/Memet-Jo/trading/raw/refs/heads/main/sylphlike/trading-3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831451/",
            "reporter": "c2hunter"
        }
    ],
    "3831446": [
        {
            "dateadded": "2026-04-25 14:36:18 UTC",
            "url": "https://raw.githubusercontent.com/unaccustomed-godspeed86/appbun/main/src/lib/Software-2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831446/",
            "reporter": "c2hunter"
        }
    ],
    "3831447": [
        {
            "dateadded": "2026-04-25 14:36:18 UTC",
            "url": "https://github.com/Yashsoni443/ai-image-generator-web/raw/refs/heads/master/functions/ai-image-generator-web_v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831447/",
            "reporter": "c2hunter"
        }
    ],
    "3831448": [
        {
            "dateadded": "2026-04-25 14:36:18 UTC",
            "url": "https://github.com/Lacquerwarepernyimoth791/Crosshair-X-Custom-Crosshair-Overlay-for-Every-Game/raw/refs/heads/main/1.24.2/for_Game_Custom_Overlay_Every_Crosshair_3.2-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831448/",
            "reporter": "c2hunter"
        }
    ],
    "3831449": [
        {
            "dateadded": "2026-04-25 14:36:18 UTC",
            "url": "https://github.com/Yuhejdjdi2828264/EdikteFinder-Analyzer/raw/refs/heads/main/feminality/Analyzer-Edikte-Finder-3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831449/",
            "reporter": "c2hunter"
        }
    ],
    "3831441": [
        {
            "dateadded": "2026-04-25 14:36:17 UTC",
            "url": "https://raw.githubusercontent.com/Almondleaveswillowlorenzodressing280/opguia/main/opguia/pages/connection/Software-v1.2-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831441/",
            "reporter": "c2hunter"
        }
    ],
    "3831442": [
        {
            "dateadded": "2026-04-25 14:36:17 UTC",
            "url": "https://raw.githubusercontent.com/YousefMohamed54701/PyGenPass/main/intertangle/Gen-Py-Pass-v3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831442/",
            "reporter": "c2hunter"
        }
    ],
    "3831443": [
        {
            "dateadded": "2026-04-25 14:36:17 UTC",
            "url": "https://github.com/MrFrank-07/iPA-Edit/raw/refs/heads/main/modules/Edit_i_P_v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831443/",
            "reporter": "c2hunter"
        }
    ],
    "3831444": [
        {
            "dateadded": "2026-04-25 14:36:17 UTC",
            "url": "https://reagentcore.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831444/",
            "reporter": "anonymous"
        }
    ],
    "3831445": [
        {
            "dateadded": "2026-04-25 14:36:17 UTC",
            "url": "https://raw.githubusercontent.com/Bragii044/SecureKey-Vault/main/context/Secure_Vault_Key_v2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:06:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831445/",
            "reporter": "c2hunter"
        }
    ],
    "3831436": [
        {
            "dateadded": "2026-04-25 14:36:16 UTC",
            "url": "https://github.com/AJOBKA/teams-alive/raw/refs/heads/main/childe/teams-alive-1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831436/",
            "reporter": "c2hunter"
        }
    ],
    "3831437": [
        {
            "dateadded": "2026-04-25 14:36:16 UTC",
            "url": "http://185.107.74.215/Booking/",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831437/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3831438": [
        {
            "dateadded": "2026-04-25 14:36:16 UTC",
            "url": "https://github.com/holasisisi23/telegram-media-downloader/raw/refs/heads/main/unnoticed/media-telegram-downloader-unhatched.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831438/",
            "reporter": "c2hunter"
        }
    ],
    "3831439": [
        {
            "dateadded": "2026-04-25 14:36:16 UTC",
            "url": "https://github.com/astriefaw/animo-app/raw/refs/heads/master/gradle/wrapper/animo-app_v2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831439/",
            "reporter": "c2hunter"
        }
    ],
    "3831440": [
        {
            "dateadded": "2026-04-25 14:36:16 UTC",
            "url": "https://raw.githubusercontent.com/FlystudiosTech/haydee-ai-outfit-generator-gui/main/tests/ai_outfit_generator_haydee_gui_1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831440/",
            "reporter": "c2hunter"
        }
    ],
    "3831432": [
        {
            "dateadded": "2026-04-25 14:36:15 UTC",
            "url": "https://github.com/pitthawat7/openclaw-win/raw/refs/heads/main/src/win_openclaw_2.7-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831432/",
            "reporter": "c2hunter"
        }
    ],
    "3831433": [
        {
            "dateadded": "2026-04-25 14:36:15 UTC",
            "url": "https://raw.githubusercontent.com/Funeralvalue508/CrossDeviceTracker.Desktop/main/unheretical/Cross_Tracker_Desktop_Device_v1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831433/",
            "reporter": "c2hunter"
        }
    ],
    "3831434": [
        {
            "dateadded": "2026-04-25 14:36:15 UTC",
            "url": "https://github.com/astriefaw/animo-app/blob/master/gradle/wrapper/animo-app_v2.0.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831434/",
            "reporter": "c2hunter"
        }
    ],
    "3831435": [
        {
            "dateadded": "2026-04-25 14:36:15 UTC",
            "url": "https://github.com/ke029121/energized-time-tracker/raw/refs/heads/main/phlebopexy/energized-time-tracker-1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831435/",
            "reporter": "c2hunter"
        }
    ],
    "3831429": [
        {
            "dateadded": "2026-04-25 14:36:14 UTC",
            "url": "https://github.com/sparoecanthusfultoni104/exphora_db/raw/refs/heads/main/ui/src/components/settings/exphora-db-v3.4-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831429/",
            "reporter": "c2hunter"
        }
    ],
    "3831430": [
        {
            "dateadded": "2026-04-25 14:36:14 UTC",
            "url": "https://github.com/anandhuPeepi/kafkalet/raw/refs/heads/main/frontend/node_modules/tailwindcss/lib/cli/Software-cowardy.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831430/",
            "reporter": "c2hunter"
        }
    ],
    "3831431": [
        {
            "dateadded": "2026-04-25 14:36:14 UTC",
            "url": "https://github.com/Tempterimperforatehymen434/sonos-controller",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831431/",
            "reporter": "c2hunter"
        }
    ],
    "3831424": [
        {
            "dateadded": "2026-04-25 14:36:13 UTC",
            "url": "http://axodoyin.alwaysdata.net/dl/loader.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831424/",
            "reporter": "adliwahid"
        }
    ],
    "3831425": [
        {
            "dateadded": "2026-04-25 14:36:13 UTC",
            "url": "https://raw.githubusercontent.com/Hundred-praisworthiness384/DomainOS/main/scripts/OS-Domain-1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831425/",
            "reporter": "c2hunter"
        }
    ],
    "3831426": [
        {
            "dateadded": "2026-04-25 14:36:13 UTC",
            "url": "http://132.243.225.125/Booking/",
            "url_status": "offline",
            "last_online": "2026-04-25 14:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831426/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3831427": [
        {
            "dateadded": "2026-04-25 14:36:13 UTC",
            "url": "https://raw.githubusercontent.com/acting-correlationalanalysis567/Twin-Bridge-V1/main/frontend/src/Bridge_Twin_1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831427/",
            "reporter": "c2hunter"
        }
    ],
    "3831428": [
        {
            "dateadded": "2026-04-25 14:36:13 UTC",
            "url": "http://162.249.125.147/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mossadbotnet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831428/",
            "reporter": "malwarereport"
        }
    ],
    "3831421": [
        {
            "dateadded": "2026-04-25 14:36:12 UTC",
            "url": "http://54.39.101.43:34482/ssh_config_upd.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:38:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831421/",
            "reporter": "adliwahid"
        }
    ],
    "3831422": [
        {
            "dateadded": "2026-04-25 14:36:12 UTC",
            "url": "http://82.26.74.80:7231/bins.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831422/",
            "reporter": "adliwahid"
        }
    ],
    "3831423": [
        {
            "dateadded": "2026-04-25 14:36:12 UTC",
            "url": "http://62.171.142.33/luxzzxzzx/luxzz.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831423/",
            "reporter": "adliwahid"
        }
    ],
    "3831420": [
        {
            "dateadded": "2026-04-25 14:36:11 UTC",
            "url": "http://27.37.115.147:40622/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:09:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831420/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831419": [
        {
            "dateadded": "2026-04-25 14:36:10 UTC",
            "url": "http://176.65.132.117/dlr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 14:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831419/",
            "reporter": "c2hunter"
        }
    ],
    "3831418": [
        {
            "dateadded": "2026-04-25 14:36:07 UTC",
            "url": "https://deepnoxa.com/q",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831418/",
            "reporter": "Lenard"
        }
    ],
    "3831416": [
        {
            "dateadded": "2026-04-25 14:35:34 UTC",
            "url": "https://sonra.eutialyson.com/inst24.msi",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "MetaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831416/",
            "reporter": "anonymous"
        }
    ],
    "3831417": [
        {
            "dateadded": "2026-04-25 14:35:34 UTC",
            "url": "https://github.com/Kathan2504/auto-voice-over-tool/raw/refs/heads/main/src/windows/main/auto_tool_over_voice_fining.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831417/",
            "reporter": "c2hunter"
        }
    ],
    "3831406": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "https://github.com/loeyyyyy/AI-Voice-Changer-Real-Time-2026/raw/refs/heads/main/cpp/de/jurihock/voicesmith/plug/Time-Changer-Real-A-Voice-3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831406/",
            "reporter": "c2hunter"
        }
    ],
    "3831407": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "https://github.com/astriefaw/animo-app/raw/refs/heads/master/gradle/animo_app_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831407/",
            "reporter": "c2hunter"
        }
    ],
    "3831408": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "http://165.22.247.105/iran.i486",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831408/",
            "reporter": "adliwahid"
        }
    ],
    "3831409": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "https://github.com/poetic-macroglia442/openclaw-desktop-launcher/raw/refs/heads/main/StartOpenClawLauncher/Services/launcher_desktop_openclaw_v3.8-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831409/",
            "reporter": "c2hunter"
        }
    ],
    "3831410": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "https://github.com/Memet-Jo/trading/raw/refs/heads/main/sylphlike/Software_1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831410/",
            "reporter": "c2hunter"
        }
    ],
    "3831411": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "https://raw.githubusercontent.com/sb090/tauri-plugin-macos-fps/main/examples/fps-diag/src-tauri/capabilities/plugin_macos_fps_tauri_2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831411/",
            "reporter": "c2hunter"
        }
    ],
    "3831412": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "http://54.39.101.43:34482/auth-token/a",
            "url_status": "offline",
            "last_online": "2026-04-25 17:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831412/",
            "reporter": "adliwahid"
        }
    ],
    "3831413": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "http://165.22.247.105/iran.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831413/",
            "reporter": "adliwahid"
        }
    ],
    "3831414": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4",
            "url_status": "offline",
            "last_online": "2026-04-26 06:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831414/",
            "reporter": "adliwahid"
        }
    ],
    "3831415": [
        {
            "dateadded": "2026-04-25 14:35:33 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-26 05:06:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831415/",
            "reporter": "adliwahid"
        }
    ],
    "3831403": [
        {
            "dateadded": "2026-04-25 14:35:32 UTC",
            "url": "https://raw.githubusercontent.com/koteshwr-ra/linux-mac/main/image/common/overlay/etc/linux_mac_hacker.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831403/",
            "reporter": "c2hunter"
        }
    ],
    "3831404": [
        {
            "dateadded": "2026-04-25 14:35:32 UTC",
            "url": "https://raw.githubusercontent.com/Abdulmejid/DesktopLEDSync/main/providers/Desktop_LED_Sync_v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831404/",
            "reporter": "c2hunter"
        }
    ],
    "3831405": [
        {
            "dateadded": "2026-04-25 14:35:32 UTC",
            "url": "https://github.com/EliasXII/NullByte/raw/refs/heads/main/docs/assets/Byte_Null_v3.0-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831405/",
            "reporter": "c2hunter"
        }
    ],
    "3831391": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://165.22.247.105/iran.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831391/",
            "reporter": "adliwahid"
        }
    ],
    "3831392": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc",
            "url_status": "offline",
            "last_online": "2026-04-26 06:37:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831392/",
            "reporter": "adliwahid"
        }
    ],
    "3831393": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://165.22.247.105/iran.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831393/",
            "reporter": "adliwahid"
        }
    ],
    "3831394": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips",
            "url_status": "offline",
            "last_online": "2026-04-26 06:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831394/",
            "reporter": "adliwahid"
        }
    ],
    "3831395": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://54.39.101.43:34482/auth-token/b",
            "url_status": "offline",
            "last_online": "2026-04-25 18:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831395/",
            "reporter": "adliwahid"
        }
    ],
    "3831396": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k",
            "url_status": "offline",
            "last_online": "2026-04-26 05:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831396/",
            "reporter": "adliwahid"
        }
    ],
    "3831397": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://162.249.125.147/arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "mossadbotnet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831397/",
            "reporter": "malwarereport"
        }
    ],
    "3831398": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://165.22.247.105/iran.mipsrouter",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831398/",
            "reporter": "adliwahid"
        }
    ],
    "3831399": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686",
            "url_status": "offline",
            "last_online": "2026-04-26 06:34:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831399/",
            "reporter": "adliwahid"
        }
    ],
    "3831400": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://54.39.101.43:34482/auth-token/m",
            "url_status": "offline",
            "last_online": "2026-04-25 17:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831400/",
            "reporter": "adliwahid"
        }
    ],
    "3831401": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5",
            "url_status": "offline",
            "last_online": "2026-04-26 05:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831401/",
            "reporter": "adliwahid"
        }
    ],
    "3831402": [
        {
            "dateadded": "2026-04-25 14:35:30 UTC",
            "url": "http://162.249.125.147/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "mossadbotnet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831402/",
            "reporter": "malwarereport"
        }
    ],
    "3831378": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://165.22.247.105/iran.armv5l",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831378/",
            "reporter": "adliwahid"
        }
    ],
    "3831379": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://176.65.132.117/dlr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831379/",
            "reporter": "c2hunter"
        }
    ],
    "3831380": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://165.22.247.105/iran.sparc",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831380/",
            "reporter": "adliwahid"
        }
    ],
    "3831381": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://54.39.101.43:34482/auth-token/j",
            "url_status": "offline",
            "last_online": "2026-04-25 17:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831381/",
            "reporter": "adliwahid"
        }
    ],
    "3831382": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86",
            "url_status": "offline",
            "last_online": "2026-04-26 05:33:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831382/",
            "reporter": "adliwahid"
        }
    ],
    "3831383": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://165.22.247.105/iran.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831383/",
            "reporter": "adliwahid"
        }
    ],
    "3831384": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://165.22.247.105/iran.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831384/",
            "reporter": "adliwahid"
        }
    ],
    "3831385": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://165.22.247.105/iran.m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831385/",
            "reporter": "adliwahid"
        }
    ],
    "3831386": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486",
            "url_status": "offline",
            "last_online": "2026-04-26 05:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831386/",
            "reporter": "adliwahid"
        }
    ],
    "3831387": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://165.22.247.105/iran.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831387/",
            "reporter": "adliwahid"
        }
    ],
    "3831388": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm",
            "url_status": "offline",
            "last_online": "2026-04-26 05:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831388/",
            "reporter": "adliwahid"
        }
    ],
    "3831389": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6",
            "url_status": "offline",
            "last_online": "2026-04-26 05:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831389/",
            "reporter": "adliwahid"
        }
    ],
    "3831390": [
        {
            "dateadded": "2026-04-25 14:35:29 UTC",
            "url": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.ppc",
            "url_status": "offline",
            "last_online": "2026-04-26 06:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831390/",
            "reporter": "adliwahid"
        }
    ],
    "3831374": [
        {
            "dateadded": "2026-04-25 14:35:28 UTC",
            "url": "http://54.39.101.43:34482/auth-token/c",
            "url_status": "offline",
            "last_online": "2026-04-25 18:00:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831374/",
            "reporter": "adliwahid"
        }
    ],
    "3831375": [
        {
            "dateadded": "2026-04-25 14:35:28 UTC",
            "url": "http://54.39.101.43:34482/auth-token/f",
            "url_status": "offline",
            "last_online": "2026-04-25 17:48:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831375/",
            "reporter": "adliwahid"
        }
    ],
    "3831376": [
        {
            "dateadded": "2026-04-25 14:35:28 UTC",
            "url": "http://162.249.125.147/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "mossadbotnet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831376/",
            "reporter": "malwarereport"
        }
    ],
    "3831377": [
        {
            "dateadded": "2026-04-25 14:35:28 UTC",
            "url": "http://54.39.101.43:34482/auth-token/e",
            "url_status": "offline",
            "last_online": "2026-04-25 18:21:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831377/",
            "reporter": "adliwahid"
        }
    ],
    "3831373": [
        {
            "dateadded": "2026-04-25 14:35:27 UTC",
            "url": "http://176.65.132.117/dlr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831373/",
            "reporter": "c2hunter"
        }
    ],
    "3831372": [
        {
            "dateadded": "2026-04-25 14:35:20 UTC",
            "url": "http://162.249.125.147/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mossadbotnet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831372/",
            "reporter": "malwarereport"
        }
    ],
    "3831371": [
        {
            "dateadded": "2026-04-25 14:35:14 UTC",
            "url": "https://ledger.eu.com/Ledger-wallet.AppImage",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831371/",
            "reporter": "ninjacatcher"
        }
    ],
    "3831370": [
        {
            "dateadded": "2026-04-25 14:34:28 UTC",
            "url": "https://ledger.eu.com/ledger-live-desktop.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831370/",
            "reporter": "ninjacatcher"
        }
    ],
    "3831369": [
        {
            "dateadded": "2026-04-25 14:34:25 UTC",
            "url": "https://github.com/Scriptez1/RedXFreeSteamInstaller/releases/download/v2.4.4/RedX_Setup.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:43 UTC",
            "threat": "malware_download",
            "tags": [
                "BlankGrabber"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831369/",
            "reporter": "c2hunter"
        }
    ],
    "3831364": [
        {
            "dateadded": "2026-04-25 14:34:17 UTC",
            "url": "https://github.com/duroypogi/Gann-Master-3D/raw/refs/heads/main/perichondritis/Gann-D-Master-v3.0-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:01 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831364/",
            "reporter": "c2hunter"
        }
    ],
    "3831365": [
        {
            "dateadded": "2026-04-25 14:34:17 UTC",
            "url": "https://github.com/Reency/Blox-Fruits/raw/refs/heads/main/regardance/BloxFruits_1.0-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831365/",
            "reporter": "c2hunter"
        }
    ],
    "3831366": [
        {
            "dateadded": "2026-04-25 14:34:17 UTC",
            "url": "https://github.com/OJB2017/VectorFusion/raw/refs/heads/main/assets/VectorFusion_aplanospore.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831366/",
            "reporter": "c2hunter"
        }
    ],
    "3831367": [
        {
            "dateadded": "2026-04-25 14:34:17 UTC",
            "url": "https://github.com/anantbhardwaj828/cursor-free-vip/raw/refs/heads/main/electron/vip-free-cursor-v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831367/",
            "reporter": "c2hunter"
        }
    ],
    "3831368": [
        {
            "dateadded": "2026-04-25 14:34:17 UTC",
            "url": "https://raw.githubusercontent.com/anantbhardwaj828/cursor-free-vip/main/assets/cursor_free_vip_1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831368/",
            "reporter": "c2hunter"
        }
    ],
    "3831361": [
        {
            "dateadded": "2026-04-25 14:34:16 UTC",
            "url": "https://github.com/tphuc7639/Chop-Your-Tree-Script/raw/refs/heads/main/endermatic/ScriptTreeYourChop-1.8-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831361/",
            "reporter": "c2hunter"
        }
    ],
    "3831362": [
        {
            "dateadded": "2026-04-25 14:34:16 UTC",
            "url": "https://github.com/duroypogi/Gann-Master-3D/raw/refs/heads/main/perichondritis/Master_D_Gann_2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831362/",
            "reporter": "c2hunter"
        }
    ],
    "3831363": [
        {
            "dateadded": "2026-04-25 14:34:16 UTC",
            "url": "https://github.com/tphuc7639/Chop-Your-Tree-Script/raw/refs/heads/main/endermatic/Your_Script_Tree_Chop_3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831363/",
            "reporter": "c2hunter"
        }
    ],
    "3831357": [
        {
            "dateadded": "2026-04-25 14:34:15 UTC",
            "url": "https://ledger.eu.com/Ledger-live-wallet.dmg",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831357/",
            "reporter": "ninjacatcher"
        }
    ],
    "3831358": [
        {
            "dateadded": "2026-04-25 14:34:15 UTC",
            "url": "https://github.com/Puscasupaul01/Wallet-Hunter/raw/refs/heads/main/unchastised/Hunter_Wallet_cockshut.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831358/",
            "reporter": "c2hunter"
        }
    ],
    "3831359": [
        {
            "dateadded": "2026-04-25 14:34:15 UTC",
            "url": "https://raw.githubusercontent.com/OJB2017/VectorFusion/main/src/Vector_Fusion_v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831359/",
            "reporter": "c2hunter"
        }
    ],
    "3831360": [
        {
            "dateadded": "2026-04-25 14:34:15 UTC",
            "url": "https://cl.distritovagas.com/hte.hta",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831360/",
            "reporter": "anonymous"
        }
    ],
    "3831354": [
        {
            "dateadded": "2026-04-25 14:34:12 UTC",
            "url": "https://github.com/Puscasupaul01/Wallet-Hunter/blob/main/unchastised/Hunter-Wallet-v3.0.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831354/",
            "reporter": "c2hunter"
        }
    ],
    "3831355": [
        {
            "dateadded": "2026-04-25 14:34:12 UTC",
            "url": "https://github.com/errorm19/Roblox-Blox-Fruits-Script/blob/main/pelf/Roblox-Blox-Fruits-Script-v2.8.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831355/",
            "reporter": "c2hunter"
        }
    ],
    "3831352": [
        {
            "dateadded": "2026-04-25 14:34:08 UTC",
            "url": "http://165.22.247.105/iran.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith",
                "x86_64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831352/",
            "reporter": "c2hunter"
        }
    ],
    "3831353": [
        {
            "dateadded": "2026-04-25 14:34:08 UTC",
            "url": "http://192.109.200.197/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831353/",
            "reporter": "c2hunter"
        }
    ],
    "3831349": [
        {
            "dateadded": "2026-04-25 14:34:07 UTC",
            "url": "http://176.65.132.117/dlr.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831349/",
            "reporter": "c2hunter"
        }
    ],
    "3831350": [
        {
            "dateadded": "2026-04-25 14:34:07 UTC",
            "url": "http://176.65.132.117/dlr.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831350/",
            "reporter": "c2hunter"
        }
    ],
    "3831351": [
        {
            "dateadded": "2026-04-25 14:34:07 UTC",
            "url": "http://176.65.132.117/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "wraith-scan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831351/",
            "reporter": "c2hunter"
        }
    ],
    "3831347": [
        {
            "dateadded": "2026-04-25 14:32:21 UTC",
            "url": "http://107.175.114.96/n2/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 14:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831347/",
            "reporter": "botnetkiller"
        }
    ],
    "3831348": [
        {
            "dateadded": "2026-04-25 14:32:21 UTC",
            "url": "http://107.175.114.96/n2/mips",
            "url_status": "offline",
            "last_online": "2026-04-25 14:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831348/",
            "reporter": "botnetkiller"
        }
    ],
    "3831346": [
        {
            "dateadded": "2026-04-25 14:31:20 UTC",
            "url": "http://107.175.114.96/n2/lterouter",
            "url_status": "offline",
            "last_online": "2026-04-25 14:31:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831346/",
            "reporter": "botnetkiller"
        }
    ],
    "3831345": [
        {
            "dateadded": "2026-04-25 14:31:12 UTC",
            "url": "https://dealparc.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831345/",
            "reporter": "anonymous"
        }
    ],
    "3831344": [
        {
            "dateadded": "2026-04-25 14:30:16 UTC",
            "url": "http://61.163.129.6:52702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:29:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831344/",
            "reporter": "geenensp"
        }
    ],
    "3831343": [
        {
            "dateadded": "2026-04-25 14:27:15 UTC",
            "url": "https://l1ch-mesh.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831343/",
            "reporter": "anonymous"
        }
    ],
    "3831342": [
        {
            "dateadded": "2026-04-25 14:14:18 UTC",
            "url": "http://182.123.183.173:44836/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:20:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831342/",
            "reporter": "geenensp"
        }
    ],
    "3831341": [
        {
            "dateadded": "2026-04-25 14:13:17 UTC",
            "url": "http://61.54.234.2:39396/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:35:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831341/",
            "reporter": "geenensp"
        }
    ],
    "3831340": [
        {
            "dateadded": "2026-04-25 14:11:17 UTC",
            "url": "https://campa-fla.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:11:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831340/",
            "reporter": "anonymous"
        }
    ],
    "3831339": [
        {
            "dateadded": "2026-04-25 14:06:11 UTC",
            "url": "http://182.123.183.173:44836/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:18:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831339/",
            "reporter": "geenensp"
        }
    ],
    "3831338": [
        {
            "dateadded": "2026-04-25 14:06:10 UTC",
            "url": "https://rain-line.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831338/",
            "reporter": "anonymous"
        }
    ],
    "3831337": [
        {
            "dateadded": "2026-04-25 14:00:09 UTC",
            "url": "https://formtrai.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 14:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831337/",
            "reporter": "anonymous"
        }
    ],
    "3831336": [
        {
            "dateadded": "2026-04-25 13:57:17 UTC",
            "url": "http://115.55.233.8:41837/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:13:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831336/",
            "reporter": "geenensp"
        }
    ],
    "3831335": [
        {
            "dateadded": "2026-04-25 13:57:08 UTC",
            "url": "http://42.234.143.46:57984/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831335/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831334": [
        {
            "dateadded": "2026-04-25 13:55:22 UTC",
            "url": "http://27.213.140.201:60251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:09:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831334/",
            "reporter": "geenensp"
        }
    ],
    "3831333": [
        {
            "dateadded": "2026-04-25 13:55:11 UTC",
            "url": "https://m17e.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831333/",
            "reporter": "anonymous"
        }
    ],
    "3831332": [
        {
            "dateadded": "2026-04-25 13:53:14 UTC",
            "url": "http://222.137.79.84:34880/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:23:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831332/",
            "reporter": "geenensp"
        }
    ],
    "3831331": [
        {
            "dateadded": "2026-04-25 13:52:08 UTC",
            "url": "https://quorlineex.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831331/",
            "reporter": "anonymous"
        }
    ],
    "3831329": [
        {
            "dateadded": "2026-04-25 13:46:14 UTC",
            "url": "http://204.76.203.164/bins/sora.arm5",
            "url_status": "offline",
            "last_online": "2026-04-25 15:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831329/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831330": [
        {
            "dateadded": "2026-04-25 13:46:14 UTC",
            "url": "http://204.76.203.164/bins/sora.m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 15:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831330/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831327": [
        {
            "dateadded": "2026-04-25 13:45:20 UTC",
            "url": "http://204.76.203.164/bins/sora.sh4",
            "url_status": "offline",
            "last_online": "2026-04-25 14:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831327/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831328": [
        {
            "dateadded": "2026-04-25 13:45:20 UTC",
            "url": "http://204.76.203.164/bins/sora.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 15:29:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831328/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831323": [
        {
            "dateadded": "2026-04-25 13:45:17 UTC",
            "url": "http://204.76.203.164/bins/sora.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 14:44:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831323/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831324": [
        {
            "dateadded": "2026-04-25 13:45:17 UTC",
            "url": "http://204.76.203.164/bins/sora.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 14:49:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831324/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831325": [
        {
            "dateadded": "2026-04-25 13:45:17 UTC",
            "url": "http://204.76.203.164/bins/sora.spc",
            "url_status": "offline",
            "last_online": "2026-04-25 15:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831325/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831326": [
        {
            "dateadded": "2026-04-25 13:45:17 UTC",
            "url": "http://204.76.203.164/bins/sora.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 14:49:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831326/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831322": [
        {
            "dateadded": "2026-04-25 13:44:25 UTC",
            "url": "http://123.7.227.160:60172/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:57:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831322/",
            "reporter": "geenensp"
        }
    ],
    "3831319": [
        {
            "dateadded": "2026-04-25 13:44:24 UTC",
            "url": "http://204.76.203.164/bins/sora.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 14:41:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831319/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831320": [
        {
            "dateadded": "2026-04-25 13:44:24 UTC",
            "url": "http://204.76.203.164/bins/sora.ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 14:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831320/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831321": [
        {
            "dateadded": "2026-04-25 13:44:24 UTC",
            "url": "http://204.76.203.164/bins/sora.arm6",
            "url_status": "offline",
            "last_online": "2026-04-25 15:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831321/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3831318": [
        {
            "dateadded": "2026-04-25 13:42:13 UTC",
            "url": "http://123.7.227.160:60172/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831318/",
            "reporter": "geenensp"
        }
    ],
    "3831317": [
        {
            "dateadded": "2026-04-25 13:42:07 UTC",
            "url": "http://37.26.85.56:53461/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831317/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831316": [
        {
            "dateadded": "2026-04-25 13:41:22 UTC",
            "url": "http://115.55.175.139:50283/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831316/",
            "reporter": "geenensp"
        }
    ],
    "3831315": [
        {
            "dateadded": "2026-04-25 13:41:08 UTC",
            "url": "https://f4ct0ry-mark.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831315/",
            "reporter": "anonymous"
        }
    ],
    "3831314": [
        {
            "dateadded": "2026-04-25 13:37:08 UTC",
            "url": "https://pixe2-zone.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831314/",
            "reporter": "anonymous"
        }
    ],
    "3831313": [
        {
            "dateadded": "2026-04-25 13:34:22 UTC",
            "url": "http://27.37.102.151:37629/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831313/",
            "reporter": "geenensp"
        }
    ],
    "3831312": [
        {
            "dateadded": "2026-04-25 13:28:11 UTC",
            "url": "http://182.121.119.134:38587/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831312/",
            "reporter": "geenensp"
        }
    ],
    "3831310": [
        {
            "dateadded": "2026-04-25 13:27:06 UTC",
            "url": "http://42.228.41.142:43689/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:18:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831310/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831311": [
        {
            "dateadded": "2026-04-25 13:27:06 UTC",
            "url": "http://37.26.85.56:53461/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831311/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831309": [
        {
            "dateadded": "2026-04-25 13:26:09 UTC",
            "url": "https://tr4ck7-plate.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831309/",
            "reporter": "anonymous"
        }
    ],
    "3831308": [
        {
            "dateadded": "2026-04-25 13:23:23 UTC",
            "url": "http://219.155.200.228:43104/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831308/",
            "reporter": "geenensp"
        }
    ],
    "3831307": [
        {
            "dateadded": "2026-04-25 13:19:08 UTC",
            "url": "https://quorforgeet6.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831307/",
            "reporter": "anonymous"
        }
    ],
    "3831306": [
        {
            "dateadded": "2026-04-25 13:17:17 UTC",
            "url": "http://219.155.200.228:43104/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831306/",
            "reporter": "geenensp"
        }
    ],
    "3831305": [
        {
            "dateadded": "2026-04-25 13:12:09 UTC",
            "url": "https://velmesh7ix.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831305/",
            "reporter": "anonymous"
        }
    ],
    "3831304": [
        {
            "dateadded": "2026-04-25 13:08:08 UTC",
            "url": "https://publishbark.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831304/",
            "reporter": "anonymous"
        }
    ],
    "3831303": [
        {
            "dateadded": "2026-04-25 13:06:21 UTC",
            "url": "http://27.222.70.48:33361/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831303/",
            "reporter": "geenensp"
        }
    ],
    "3831302": [
        {
            "dateadded": "2026-04-25 13:05:08 UTC",
            "url": "https://4wjh4hoo.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 13:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831302/",
            "reporter": "anonymous"
        }
    ],
    "3831301": [
        {
            "dateadded": "2026-04-25 13:04:23 UTC",
            "url": "http://27.37.102.151:37629/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831301/",
            "reporter": "geenensp"
        }
    ],
    "3831300": [
        {
            "dateadded": "2026-04-25 13:03:18 UTC",
            "url": "http://182.112.217.179:35292/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:53:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831300/",
            "reporter": "geenensp"
        }
    ],
    "3831299": [
        {
            "dateadded": "2026-04-25 13:01:10 UTC",
            "url": "http://120.84.214.246:44153/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831299/",
            "reporter": "geenensp"
        }
    ],
    "3831298": [
        {
            "dateadded": "2026-04-25 12:57:12 UTC",
            "url": "http://222.137.79.84:34880/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831298/",
            "reporter": "geenensp"
        }
    ],
    "3831297": [
        {
            "dateadded": "2026-04-25 12:56:09 UTC",
            "url": "https://quormesh1os.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831297/",
            "reporter": "anonymous"
        }
    ],
    "3831296": [
        {
            "dateadded": "2026-04-25 12:52:11 UTC",
            "url": "https://sng2kb.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831296/",
            "reporter": "anonymous"
        }
    ],
    "3831295": [
        {
            "dateadded": "2026-04-25 12:49:10 UTC",
            "url": "http://59.60.85.181:52740/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831295/",
            "reporter": "adliwahid"
        }
    ],
    "3831294": [
        {
            "dateadded": "2026-04-25 12:49:09 UTC",
            "url": "https://3nzy-layer.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831294/",
            "reporter": "anonymous"
        }
    ],
    "3831284": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://182.126.120.210:46322/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831284/",
            "reporter": "adliwahid"
        }
    ],
    "3831285": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://221.15.12.80:33543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:00:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831285/",
            "reporter": "adliwahid"
        }
    ],
    "3831286": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://47.215.185.216:53633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831286/",
            "reporter": "adliwahid"
        }
    ],
    "3831287": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://124.6.165.86:37724/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831287/",
            "reporter": "adliwahid"
        }
    ],
    "3831288": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://104.32.65.48:39960/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831288/",
            "reporter": "adliwahid"
        }
    ],
    "3831289": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://115.49.242.181:54229/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:17:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831289/",
            "reporter": "adliwahid"
        }
    ],
    "3831290": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://27.222.45.245:38847/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:41:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831290/",
            "reporter": "adliwahid"
        }
    ],
    "3831291": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://39.81.251.7:45895/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831291/",
            "reporter": "adliwahid"
        }
    ],
    "3831292": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://39.81.251.7:45895/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:17:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831292/",
            "reporter": "adliwahid"
        }
    ],
    "3831293": [
        {
            "dateadded": "2026-04-25 12:48:11 UTC",
            "url": "http://180.245.43.153:59147/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831293/",
            "reporter": "adliwahid"
        }
    ],
    "3831279": [
        {
            "dateadded": "2026-04-25 12:48:10 UTC",
            "url": "http://175.165.109.102:54217/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:02:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831279/",
            "reporter": "adliwahid"
        }
    ],
    "3831280": [
        {
            "dateadded": "2026-04-25 12:48:10 UTC",
            "url": "http://39.74.110.57:36761/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831280/",
            "reporter": "adliwahid"
        }
    ],
    "3831281": [
        {
            "dateadded": "2026-04-25 12:48:10 UTC",
            "url": "http://42.224.48.151:59180/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:54:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831281/",
            "reporter": "adliwahid"
        }
    ],
    "3831282": [
        {
            "dateadded": "2026-04-25 12:48:10 UTC",
            "url": "http://36.69.93.84:55453/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 09:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831282/",
            "reporter": "adliwahid"
        }
    ],
    "3831283": [
        {
            "dateadded": "2026-04-25 12:48:10 UTC",
            "url": "http://115.57.254.123:57455/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:04:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831283/",
            "reporter": "adliwahid"
        }
    ],
    "3831278": [
        {
            "dateadded": "2026-04-25 12:48:09 UTC",
            "url": "http://185.30.145.245:33836/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831278/",
            "reporter": "adliwahid"
        }
    ],
    "3831277": [
        {
            "dateadded": "2026-04-25 12:47:27 UTC",
            "url": "http://121.23.132.93:9612/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:34:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831277/",
            "reporter": "adliwahid"
        }
    ],
    "3831276": [
        {
            "dateadded": "2026-04-25 12:47:12 UTC",
            "url": "http://218.16.164.144:36113/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831276/",
            "reporter": "adliwahid"
        }
    ],
    "3831267": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://110.37.53.25:37443/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831267/",
            "reporter": "adliwahid"
        }
    ],
    "3831268": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://42.56.202.67:60383/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:34:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831268/",
            "reporter": "adliwahid"
        }
    ],
    "3831269": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://112.198.178.17:48068/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831269/",
            "reporter": "adliwahid"
        }
    ],
    "3831270": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://222.127.214.87:39540/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831270/",
            "reporter": "adliwahid"
        }
    ],
    "3831271": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://124.6.165.86:37724/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831271/",
            "reporter": "adliwahid"
        }
    ],
    "3831272": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://123.10.140.90:50750/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:14:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831272/",
            "reporter": "adliwahid"
        }
    ],
    "3831273": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://117.247.255.229:43909/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831273/",
            "reporter": "adliwahid"
        }
    ],
    "3831274": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://219.156.103.96:33562/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:53:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831274/",
            "reporter": "adliwahid"
        }
    ],
    "3831275": [
        {
            "dateadded": "2026-04-25 12:47:11 UTC",
            "url": "http://182.117.24.129:57363/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:05:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831275/",
            "reporter": "adliwahid"
        }
    ],
    "3831261": [
        {
            "dateadded": "2026-04-25 12:47:10 UTC",
            "url": "http://115.55.234.103:37644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:38:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831261/",
            "reporter": "adliwahid"
        }
    ],
    "3831262": [
        {
            "dateadded": "2026-04-25 12:47:10 UTC",
            "url": "http://180.243.64.135:38200/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831262/",
            "reporter": "adliwahid"
        }
    ],
    "3831263": [
        {
            "dateadded": "2026-04-25 12:47:10 UTC",
            "url": "http://42.85.187.102:55571/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:01 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831263/",
            "reporter": "adliwahid"
        }
    ],
    "3831264": [
        {
            "dateadded": "2026-04-25 12:47:10 UTC",
            "url": "http://221.15.11.169:60904/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831264/",
            "reporter": "adliwahid"
        }
    ],
    "3831265": [
        {
            "dateadded": "2026-04-25 12:47:10 UTC",
            "url": "http://201.149.107.54:58302/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831265/",
            "reporter": "adliwahid"
        }
    ],
    "3831266": [
        {
            "dateadded": "2026-04-25 12:47:10 UTC",
            "url": "http://191.37.19.74:34549/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831266/",
            "reporter": "adliwahid"
        }
    ],
    "3831260": [
        {
            "dateadded": "2026-04-25 12:47:09 UTC",
            "url": "http://23.92.130.154:39913/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:12:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831260/",
            "reporter": "adliwahid"
        }
    ],
    "3831259": [
        {
            "dateadded": "2026-04-25 12:47:07 UTC",
            "url": "http://91.225.163.226:45102/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831259/",
            "reporter": "adliwahid"
        }
    ],
    "3831258": [
        {
            "dateadded": "2026-04-25 12:46:13 UTC",
            "url": "http://59.60.85.181:52740/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831258/",
            "reporter": "adliwahid"
        }
    ],
    "3831252": [
        {
            "dateadded": "2026-04-25 12:46:11 UTC",
            "url": "http://27.24.104.224:40553/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831252/",
            "reporter": "adliwahid"
        }
    ],
    "3831253": [
        {
            "dateadded": "2026-04-25 12:46:11 UTC",
            "url": "http://221.15.12.80:33543/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831253/",
            "reporter": "adliwahid"
        }
    ],
    "3831254": [
        {
            "dateadded": "2026-04-25 12:46:11 UTC",
            "url": "http://175.147.153.230:50437/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831254/",
            "reporter": "adliwahid"
        }
    ],
    "3831255": [
        {
            "dateadded": "2026-04-25 12:46:11 UTC",
            "url": "http://27.24.104.224:40553/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831255/",
            "reporter": "adliwahid"
        }
    ],
    "3831256": [
        {
            "dateadded": "2026-04-25 12:46:11 UTC",
            "url": "http://180.150.124.67:51450/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831256/",
            "reporter": "adliwahid"
        }
    ],
    "3831257": [
        {
            "dateadded": "2026-04-25 12:46:11 UTC",
            "url": "http://175.146.17.20:57547/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831257/",
            "reporter": "adliwahid"
        }
    ],
    "3831246": [
        {
            "dateadded": "2026-04-25 12:46:10 UTC",
            "url": "http://221.15.11.169:60904/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831246/",
            "reporter": "adliwahid"
        }
    ],
    "3831247": [
        {
            "dateadded": "2026-04-25 12:46:10 UTC",
            "url": "http://108.170.136.155:50493/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:01:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831247/",
            "reporter": "adliwahid"
        }
    ],
    "3831248": [
        {
            "dateadded": "2026-04-25 12:46:10 UTC",
            "url": "http://27.21.29.140:52069/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831248/",
            "reporter": "adliwahid"
        }
    ],
    "3831249": [
        {
            "dateadded": "2026-04-25 12:46:10 UTC",
            "url": "http://113.102.128.38:46412/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:53:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831249/",
            "reporter": "adliwahid"
        }
    ],
    "3831250": [
        {
            "dateadded": "2026-04-25 12:46:10 UTC",
            "url": "http://39.74.89.61:40934/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 12:46:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831250/",
            "reporter": "adliwahid"
        }
    ],
    "3831251": [
        {
            "dateadded": "2026-04-25 12:46:10 UTC",
            "url": "http://123.10.25.235:52554/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:42:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831251/",
            "reporter": "adliwahid"
        }
    ],
    "3831245": [
        {
            "dateadded": "2026-04-25 12:46:09 UTC",
            "url": "http://108.170.136.155:50493/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:11:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831245/",
            "reporter": "adliwahid"
        }
    ],
    "3831244": [
        {
            "dateadded": "2026-04-25 12:45:22 UTC",
            "url": "http://221.200.221.163:37254/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:41:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831244/",
            "reporter": "adliwahid"
        }
    ],
    "3831236": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://115.57.254.123:57455/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831236/",
            "reporter": "adliwahid"
        }
    ],
    "3831237": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://123.173.89.126:52537/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831237/",
            "reporter": "adliwahid"
        }
    ],
    "3831238": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://42.57.200.254:40712/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:40:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831238/",
            "reporter": "adliwahid"
        }
    ],
    "3831239": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://180.243.64.135:38200/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831239/",
            "reporter": "adliwahid"
        }
    ],
    "3831240": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://36.69.93.84:55453/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:59:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831240/",
            "reporter": "adliwahid"
        }
    ],
    "3831241": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://119.179.237.178:49783/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831241/",
            "reporter": "adliwahid"
        }
    ],
    "3831242": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://117.10.39.242:54463/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831242/",
            "reporter": "adliwahid"
        }
    ],
    "3831243": [
        {
            "dateadded": "2026-04-25 12:45:12 UTC",
            "url": "http://115.50.81.160:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:44:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831243/",
            "reporter": "adliwahid"
        }
    ],
    "3831229": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://115.57.213.254:45300/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:19:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831229/",
            "reporter": "adliwahid"
        }
    ],
    "3831230": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://123.129.153.224:35024/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831230/",
            "reporter": "adliwahid"
        }
    ],
    "3831231": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://182.117.49.55:51294/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:10:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831231/",
            "reporter": "adliwahid"
        }
    ],
    "3831232": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://103.164.128.58:46877/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:19:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831232/",
            "reporter": "adliwahid"
        }
    ],
    "3831233": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://112.242.107.30:54617/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831233/",
            "reporter": "adliwahid"
        }
    ],
    "3831234": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://42.57.200.254:40712/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:50:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831234/",
            "reporter": "adliwahid"
        }
    ],
    "3831235": [
        {
            "dateadded": "2026-04-25 12:45:11 UTC",
            "url": "http://200.115.249.127:34705/.i",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:51 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831235/",
            "reporter": "adliwahid"
        }
    ],
    "3831228": [
        {
            "dateadded": "2026-04-25 12:45:09 UTC",
            "url": "http://91.225.163.226:45102/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831228/",
            "reporter": "adliwahid"
        }
    ],
    "3831227": [
        {
            "dateadded": "2026-04-25 12:44:10 UTC",
            "url": "http://182.45.75.54:53107/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831227/",
            "reporter": "adliwahid"
        }
    ],
    "3831223": [
        {
            "dateadded": "2026-04-25 12:44:08 UTC",
            "url": "http://115.55.234.103:37644/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831223/",
            "reporter": "adliwahid"
        }
    ],
    "3831224": [
        {
            "dateadded": "2026-04-25 12:44:08 UTC",
            "url": "http://175.165.70.211:44943/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:22:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831224/",
            "reporter": "adliwahid"
        }
    ],
    "3831225": [
        {
            "dateadded": "2026-04-25 12:44:08 UTC",
            "url": "http://115.58.90.25:44627/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:13:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831225/",
            "reporter": "adliwahid"
        }
    ],
    "3831226": [
        {
            "dateadded": "2026-04-25 12:44:08 UTC",
            "url": "http://221.229.155.219:44573/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831226/",
            "reporter": "adliwahid"
        }
    ],
    "3831218": [
        {
            "dateadded": "2026-04-25 12:44:07 UTC",
            "url": "http://59.98.82.57:33238/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831218/",
            "reporter": "adliwahid"
        }
    ],
    "3831219": [
        {
            "dateadded": "2026-04-25 12:44:07 UTC",
            "url": "http://112.247.238.59:52497/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831219/",
            "reporter": "adliwahid"
        }
    ],
    "3831220": [
        {
            "dateadded": "2026-04-25 12:44:07 UTC",
            "url": "http://112.198.178.17:48068/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831220/",
            "reporter": "adliwahid"
        }
    ],
    "3831221": [
        {
            "dateadded": "2026-04-25 12:44:07 UTC",
            "url": "http://221.229.155.219:44573/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831221/",
            "reporter": "adliwahid"
        }
    ],
    "3831222": [
        {
            "dateadded": "2026-04-25 12:44:07 UTC",
            "url": "http://42.56.202.67:60383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:45:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831222/",
            "reporter": "adliwahid"
        }
    ],
    "3831216": [
        {
            "dateadded": "2026-04-25 12:44:06 UTC",
            "url": "http://178.75.200.17:3527/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831216/",
            "reporter": "adliwahid"
        }
    ],
    "3831217": [
        {
            "dateadded": "2026-04-25 12:44:06 UTC",
            "url": "http://193.187.101.209:46771/i",
            "url_status": "online",
            "last_online": "2026-04-27 15:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831217/",
            "reporter": "adliwahid"
        }
    ],
    "3831215": [
        {
            "dateadded": "2026-04-25 12:43:06 UTC",
            "url": "http://54.39.101.43:34482/auth-token/i",
            "url_status": "offline",
            "last_online": "2026-04-25 16:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831215/",
            "reporter": "adliwahid"
        }
    ],
    "3831214": [
        {
            "dateadded": "2026-04-25 12:39:07 UTC",
            "url": "https://6z3dyra.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831214/",
            "reporter": "anonymous"
        }
    ],
    "3831213": [
        {
            "dateadded": "2026-04-25 12:37:16 UTC",
            "url": "http://222.140.184.85:50276/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:24:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831213/",
            "reporter": "geenensp"
        }
    ],
    "3831212": [
        {
            "dateadded": "2026-04-25 12:37:06 UTC",
            "url": "http://27.215.177.203:54843/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831212/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831211": [
        {
            "dateadded": "2026-04-25 12:34:22 UTC",
            "url": "http://123.11.1.98:49817/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831211/",
            "reporter": "geenensp"
        }
    ],
    "3831210": [
        {
            "dateadded": "2026-04-25 12:34:21 UTC",
            "url": "http://182.112.217.179:35292/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831210/",
            "reporter": "geenensp"
        }
    ],
    "3831209": [
        {
            "dateadded": "2026-04-25 12:33:08 UTC",
            "url": "https://boostmanifest.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831209/",
            "reporter": "anonymous"
        }
    ],
    "3831208": [
        {
            "dateadded": "2026-04-25 12:30:27 UTC",
            "url": "http://123.11.1.98:49817/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831208/",
            "reporter": "geenensp"
        }
    ],
    "3831206": [
        {
            "dateadded": "2026-04-25 12:29:14 UTC",
            "url": "http://182.121.119.134:38587/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831206/",
            "reporter": "geenensp"
        }
    ],
    "3831207": [
        {
            "dateadded": "2026-04-25 12:29:14 UTC",
            "url": "http://222.140.184.85:50276/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 15:01:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831207/",
            "reporter": "geenensp"
        }
    ],
    "3831205": [
        {
            "dateadded": "2026-04-25 12:29:13 UTC",
            "url": "http://115.53.11.84:52331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:43:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831205/",
            "reporter": "geenensp"
        }
    ],
    "3831204": [
        {
            "dateadded": "2026-04-25 12:27:07 UTC",
            "url": "http://27.215.177.203:54843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831204/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831203": [
        {
            "dateadded": "2026-04-25 12:25:22 UTC",
            "url": "http://123.14.213.182:59660/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:08:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831203/",
            "reporter": "geenensp"
        }
    ],
    "3831202": [
        {
            "dateadded": "2026-04-25 12:24:22 UTC",
            "url": "http://182.118.185.163:55674/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:22:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831202/",
            "reporter": "geenensp"
        }
    ],
    "3831201": [
        {
            "dateadded": "2026-04-25 12:23:09 UTC",
            "url": "https://eamo.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831201/",
            "reporter": "anonymous"
        }
    ],
    "3831200": [
        {
            "dateadded": "2026-04-25 12:17:28 UTC",
            "url": "http://60.23.234.141:59340/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:38:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831200/",
            "reporter": "geenensp"
        }
    ],
    "3831199": [
        {
            "dateadded": "2026-04-25 12:17:22 UTC",
            "url": "http://182.113.4.51:33994/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:19:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831199/",
            "reporter": "geenensp"
        }
    ],
    "3831198": [
        {
            "dateadded": "2026-04-25 12:13:08 UTC",
            "url": "https://fl4rn2-phase.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831198/",
            "reporter": "anonymous"
        }
    ],
    "3831197": [
        {
            "dateadded": "2026-04-25 12:11:19 UTC",
            "url": "http://123.14.213.182:59660/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831197/",
            "reporter": "geenensp"
        }
    ],
    "3831196": [
        {
            "dateadded": "2026-04-25 12:07:11 UTC",
            "url": "https://bundleform.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831196/",
            "reporter": "anonymous"
        }
    ],
    "3831195": [
        {
            "dateadded": "2026-04-25 12:06:10 UTC",
            "url": "http://27.222.70.48:33361/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831195/",
            "reporter": "geenensp"
        }
    ],
    "3831194": [
        {
            "dateadded": "2026-04-25 12:02:19 UTC",
            "url": "http://125.43.82.187:36437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 12:02:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831194/",
            "reporter": "geenensp"
        }
    ],
    "3831193": [
        {
            "dateadded": "2026-04-25 12:02:14 UTC",
            "url": "https://colocip.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 12:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831193/",
            "reporter": "anonymous"
        }
    ],
    "3831192": [
        {
            "dateadded": "2026-04-25 12:01:21 UTC",
            "url": "http://42.5.5.254:37929/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831192/",
            "reporter": "geenensp"
        }
    ],
    "3831191": [
        {
            "dateadded": "2026-04-25 11:58:13 UTC",
            "url": "https://f0cu-grid.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831191/",
            "reporter": "anonymous"
        }
    ],
    "3831190": [
        {
            "dateadded": "2026-04-25 11:55:23 UTC",
            "url": "http://182.113.4.51:33994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:22:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831190/",
            "reporter": "geenensp"
        }
    ],
    "3831189": [
        {
            "dateadded": "2026-04-25 11:52:08 UTC",
            "url": "http://110.36.25.33:54885/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:03:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831189/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831188": [
        {
            "dateadded": "2026-04-25 11:51:32 UTC",
            "url": "http://61.53.123.148:55020/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:34:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831188/",
            "reporter": "geenensp"
        }
    ],
    "3831187": [
        {
            "dateadded": "2026-04-25 11:49:08 UTC",
            "url": "https://planrec.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831187/",
            "reporter": "anonymous"
        }
    ],
    "3831186": [
        {
            "dateadded": "2026-04-25 11:47:07 UTC",
            "url": "http://110.36.25.33:54885/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 09:05:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831186/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831185": [
        {
            "dateadded": "2026-04-25 11:45:09 UTC",
            "url": "https://workersolar.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831185/",
            "reporter": "anonymous"
        }
    ],
    "3831184": [
        {
            "dateadded": "2026-04-25 11:41:16 UTC",
            "url": "http://61.53.123.148:55020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:47:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831184/",
            "reporter": "geenensp"
        }
    ],
    "3831183": [
        {
            "dateadded": "2026-04-25 11:40:17 UTC",
            "url": "http://90.174.101.30:42526/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831183/",
            "reporter": "geenensp"
        }
    ],
    "3831182": [
        {
            "dateadded": "2026-04-25 11:37:21 UTC",
            "url": "http://113.94.31.79:52659/i",
            "url_status": "offline",
            "last_online": "2026-04-26 10:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831182/",
            "reporter": "geenensp"
        }
    ],
    "3831181": [
        {
            "dateadded": "2026-04-25 11:37:20 UTC",
            "url": "http://113.229.191.197:60641/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831181/",
            "reporter": "geenensp"
        }
    ],
    "3831180": [
        {
            "dateadded": "2026-04-25 11:34:09 UTC",
            "url": "https://kel-marken.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831180/",
            "reporter": "anonymous"
        }
    ],
    "3831179": [
        {
            "dateadded": "2026-04-25 11:30:25 UTC",
            "url": "http://123.14.219.120:53137/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:42:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831179/",
            "reporter": "geenensp"
        }
    ],
    "3831178": [
        {
            "dateadded": "2026-04-25 11:29:24 UTC",
            "url": "http://115.50.1.138:33054/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:24:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831178/",
            "reporter": "geenensp"
        }
    ],
    "3831177": [
        {
            "dateadded": "2026-04-25 11:28:12 UTC",
            "url": "https://kelcoreos9.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831177/",
            "reporter": "anonymous"
        }
    ],
    "3831176": [
        {
            "dateadded": "2026-04-25 11:27:24 UTC",
            "url": "http://115.53.11.84:52331/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831176/",
            "reporter": "geenensp"
        }
    ],
    "3831175": [
        {
            "dateadded": "2026-04-25 11:26:32 UTC",
            "url": "http://113.229.191.197:60641/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831175/",
            "reporter": "geenensp"
        }
    ],
    "3831174": [
        {
            "dateadded": "2026-04-25 11:24:14 UTC",
            "url": "https://mer-meshis.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831174/",
            "reporter": "anonymous"
        }
    ],
    "3831173": [
        {
            "dateadded": "2026-04-25 11:16:22 UTC",
            "url": "http://113.94.31.79:52659/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831173/",
            "reporter": "geenensp"
        }
    ],
    "3831172": [
        {
            "dateadded": "2026-04-25 11:14:13 UTC",
            "url": "https://del1v-graph.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831172/",
            "reporter": "anonymous"
        }
    ],
    "3831171": [
        {
            "dateadded": "2026-04-25 11:13:23 UTC",
            "url": "http://90.174.101.30:42526/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831171/",
            "reporter": "geenensp"
        }
    ],
    "3831170": [
        {
            "dateadded": "2026-04-25 11:11:11 UTC",
            "url": "https://summiceda.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831170/",
            "reporter": "anonymous"
        }
    ],
    "3831169": [
        {
            "dateadded": "2026-04-25 11:04:21 UTC",
            "url": "http://182.121.110.229:36974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:38:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831169/",
            "reporter": "geenensp"
        }
    ],
    "3831168": [
        {
            "dateadded": "2026-04-25 11:02:07 UTC",
            "url": "http://42.59.247.51:48269/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831168/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831167": [
        {
            "dateadded": "2026-04-25 11:01:12 UTC",
            "url": "https://validatorgri.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 11:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831167/",
            "reporter": "anonymous"
        }
    ],
    "3831166": [
        {
            "dateadded": "2026-04-25 10:58:19 UTC",
            "url": "http://36.70.111.157:33904/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831166/",
            "reporter": "geenensp"
        }
    ],
    "3831165": [
        {
            "dateadded": "2026-04-25 10:55:13 UTC",
            "url": "https://sermarkos.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831165/",
            "reporter": "anonymous"
        }
    ],
    "3831164": [
        {
            "dateadded": "2026-04-25 10:52:19 UTC",
            "url": "http://115.61.18.127:47051/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831164/",
            "reporter": "geenensp"
        }
    ],
    "3831163": [
        {
            "dateadded": "2026-04-25 10:51:22 UTC",
            "url": "http://219.155.202.1:44669/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831163/",
            "reporter": "geenensp"
        }
    ],
    "3831162": [
        {
            "dateadded": "2026-04-25 10:50:11 UTC",
            "url": "https://gpfour4.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831162/",
            "reporter": "anonymous"
        }
    ],
    "3831161": [
        {
            "dateadded": "2026-04-25 10:45:21 UTC",
            "url": "http://36.70.111.157:33904/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831161/",
            "reporter": "geenensp"
        }
    ],
    "3831160": [
        {
            "dateadded": "2026-04-25 10:45:11 UTC",
            "url": "https://sknrzs3z.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831160/",
            "reporter": "anonymous"
        }
    ],
    "3831159": [
        {
            "dateadded": "2026-04-25 10:44:17 UTC",
            "url": "http://42.226.79.203:53696/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:00:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831159/",
            "reporter": "geenensp"
        }
    ],
    "3831158": [
        {
            "dateadded": "2026-04-25 10:41:10 UTC",
            "url": "https://hyper-inv0ice.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831158/",
            "reporter": "anonymous"
        }
    ],
    "3831157": [
        {
            "dateadded": "2026-04-25 10:33:06 UTC",
            "url": "http://220.202.65.40:53613/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:52:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831157/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831156": [
        {
            "dateadded": "2026-04-25 10:32:07 UTC",
            "url": "http://61.52.34.102:36508/i",
            "url_status": "offline",
            "last_online": "2026-04-26 16:59:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831156/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831155": [
        {
            "dateadded": "2026-04-25 10:31:10 UTC",
            "url": "https://fjtx.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831155/",
            "reporter": "anonymous"
        }
    ],
    "3831154": [
        {
            "dateadded": "2026-04-25 10:30:23 UTC",
            "url": "http://125.42.124.253:60921/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831154/",
            "reporter": "geenensp"
        }
    ],
    "3831153": [
        {
            "dateadded": "2026-04-25 10:25:09 UTC",
            "url": "https://valehar.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831153/",
            "reporter": "anonymous"
        }
    ],
    "3831152": [
        {
            "dateadded": "2026-04-25 10:22:07 UTC",
            "url": "http://123.4.234.181:44418/i",
            "url_status": "offline",
            "last_online": "2026-04-25 15:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831152/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831151": [
        {
            "dateadded": "2026-04-25 10:17:10 UTC",
            "url": "https://rockconvoy.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831151/",
            "reporter": "anonymous"
        }
    ],
    "3831150": [
        {
            "dateadded": "2026-04-25 10:15:22 UTC",
            "url": "http://122.189.4.192:59572/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831150/",
            "reporter": "geenensp"
        }
    ],
    "3831148": [
        {
            "dateadded": "2026-04-25 10:12:10 UTC",
            "url": "http://125.42.124.253:60921/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831148/",
            "reporter": "geenensp"
        }
    ],
    "3831149": [
        {
            "dateadded": "2026-04-25 10:12:10 UTC",
            "url": "http://115.61.18.127:47051/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:54:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831149/",
            "reporter": "geenensp"
        }
    ],
    "3831147": [
        {
            "dateadded": "2026-04-25 10:12:09 UTC",
            "url": "http://220.202.65.40:53613/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831147/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831146": [
        {
            "dateadded": "2026-04-25 10:11:08 UTC",
            "url": "https://firmwa7-point.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831146/",
            "reporter": "anonymous"
        }
    ],
    "3831145": [
        {
            "dateadded": "2026-04-25 10:09:13 UTC",
            "url": "http://36.34.82.55:6173/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:13:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831145/",
            "reporter": "geenensp"
        }
    ],
    "3831144": [
        {
            "dateadded": "2026-04-25 10:05:08 UTC",
            "url": "https://bytehard.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 10:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831144/",
            "reporter": "anonymous"
        }
    ],
    "3831143": [
        {
            "dateadded": "2026-04-25 09:58:09 UTC",
            "url": "https://trigg-crest.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831143/",
            "reporter": "anonymous"
        }
    ],
    "3831142": [
        {
            "dateadded": "2026-04-25 09:53:08 UTC",
            "url": "https://mossphoto.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831142/",
            "reporter": "anonymous"
        }
    ],
    "3831141": [
        {
            "dateadded": "2026-04-25 09:52:09 UTC",
            "url": "http://123.4.234.181:44418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831141/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831140": [
        {
            "dateadded": "2026-04-25 09:50:21 UTC",
            "url": "http://196.190.105.170:35252/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831140/",
            "reporter": "geenensp"
        }
    ],
    "3831139": [
        {
            "dateadded": "2026-04-25 09:49:09 UTC",
            "url": "https://dpcr.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831139/",
            "reporter": "anonymous"
        }
    ],
    "3831138": [
        {
            "dateadded": "2026-04-25 09:46:19 UTC",
            "url": "http://219.155.195.93:42238/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831138/",
            "reporter": "geenensp"
        }
    ],
    "3831137": [
        {
            "dateadded": "2026-04-25 09:46:11 UTC",
            "url": "https://focusflame.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831137/",
            "reporter": "anonymous"
        }
    ],
    "3831136": [
        {
            "dateadded": "2026-04-25 09:45:24 UTC",
            "url": "http://222.136.35.240:36050/i",
            "url_status": "offline",
            "last_online": "2026-04-26 10:57:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831136/",
            "reporter": "geenensp"
        }
    ],
    "3831133": [
        {
            "dateadded": "2026-04-25 09:37:06 UTC",
            "url": "http://5.166.28.113:60224/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831133/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831134": [
        {
            "dateadded": "2026-04-25 09:37:06 UTC",
            "url": "http://219.155.193.168:32803/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:36:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831134/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831135": [
        {
            "dateadded": "2026-04-25 09:37:06 UTC",
            "url": "http://110.138.0.30:56104/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831135/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831132": [
        {
            "dateadded": "2026-04-25 09:32:16 UTC",
            "url": "http://5.63.19.19/vc2",
            "url_status": "offline",
            "last_online": "2026-04-25 14:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831132/",
            "reporter": "NDA0E"
        }
    ],
    "3831131": [
        {
            "dateadded": "2026-04-25 09:32:15 UTC",
            "url": "http://36.34.82.55:6173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:17:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831131/",
            "reporter": "geenensp"
        }
    ],
    "3831130": [
        {
            "dateadded": "2026-04-25 09:32:13 UTC",
            "url": "http://5.63.19.19/vca2",
            "url_status": "offline",
            "last_online": "2026-04-25 16:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831130/",
            "reporter": "NDA0E"
        }
    ],
    "3831129": [
        {
            "dateadded": "2026-04-25 09:30:18 UTC",
            "url": "http://222.134.174.15:59692/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 09:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831129/",
            "reporter": "geenensp"
        }
    ],
    "3831128": [
        {
            "dateadded": "2026-04-25 09:30:17 UTC",
            "url": "http://5.63.19.19/i.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 09:30:17 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831128/",
            "reporter": "NDA0E"
        }
    ],
    "3831127": [
        {
            "dateadded": "2026-04-25 09:29:07 UTC",
            "url": "https://conv3r5-glow.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831127/",
            "reporter": "anonymous"
        }
    ],
    "3831126": [
        {
            "dateadded": "2026-04-25 09:27:19 UTC",
            "url": "http://175.43.154.49:51489/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:18:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831126/",
            "reporter": "geenensp"
        }
    ],
    "3831125": [
        {
            "dateadded": "2026-04-25 09:25:13 UTC",
            "url": "http://112.248.127.74:36024/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831125/",
            "reporter": "geenensp"
        }
    ],
    "3831124": [
        {
            "dateadded": "2026-04-25 09:24:09 UTC",
            "url": "https://84gxvrtf.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831124/",
            "reporter": "anonymous"
        }
    ],
    "3831122": [
        {
            "dateadded": "2026-04-25 09:22:07 UTC",
            "url": "http://5.166.28.113:60224/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831122/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831123": [
        {
            "dateadded": "2026-04-25 09:22:07 UTC",
            "url": "http://219.155.193.168:32803/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:01:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831123/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831121": [
        {
            "dateadded": "2026-04-25 09:22:06 UTC",
            "url": "http://182.127.128.162:46639/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 09:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831121/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831120": [
        {
            "dateadded": "2026-04-25 09:18:07 UTC",
            "url": "https://systelaun.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831120/",
            "reporter": "anonymous"
        }
    ],
    "3831119": [
        {
            "dateadded": "2026-04-25 09:15:20 UTC",
            "url": "http://105.187.33.117:42869/i",
            "url_status": "offline",
            "last_online": "2026-04-25 10:58:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831119/",
            "reporter": "geenensp"
        }
    ],
    "3831118": [
        {
            "dateadded": "2026-04-25 09:13:42 UTC",
            "url": "http://112.248.127.74:36024/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831118/",
            "reporter": "geenensp"
        }
    ],
    "3831117": [
        {
            "dateadded": "2026-04-25 09:11:08 UTC",
            "url": "https://clust1-dock.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831117/",
            "reporter": "anonymous"
        }
    ],
    "3831116": [
        {
            "dateadded": "2026-04-25 09:10:24 UTC",
            "url": "http://121.21.104.230:48945/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831116/",
            "reporter": "geenensp"
        }
    ],
    "3831115": [
        {
            "dateadded": "2026-04-25 09:06:07 UTC",
            "url": "https://springledg.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 09:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831115/",
            "reporter": "anonymous"
        }
    ],
    "3831114": [
        {
            "dateadded": "2026-04-25 09:04:11 UTC",
            "url": "http://219.155.202.1:44669/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:31:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831114/",
            "reporter": "geenensp"
        }
    ],
    "3831113": [
        {
            "dateadded": "2026-04-25 09:04:09 UTC",
            "url": "http://42.232.234.127:37711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:01:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831113/",
            "reporter": "geenensp"
        }
    ],
    "3831112": [
        {
            "dateadded": "2026-04-25 09:03:20 UTC",
            "url": "http://114.227.183.124:56316/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:24:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831112/",
            "reporter": "geenensp"
        }
    ],
    "3831111": [
        {
            "dateadded": "2026-04-25 09:02:07 UTC",
            "url": "http://110.138.0.30:56104/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831111/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831110": [
        {
            "dateadded": "2026-04-25 09:01:20 UTC",
            "url": "http://120.28.200.193:39279/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:00:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831110/",
            "reporter": "geenensp"
        }
    ],
    "3831109": [
        {
            "dateadded": "2026-04-25 08:58:09 UTC",
            "url": "https://serven5um.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831109/",
            "reporter": "anonymous"
        }
    ],
    "3831108": [
        {
            "dateadded": "2026-04-25 08:57:20 UTC",
            "url": "http://114.227.183.124:56316/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831108/",
            "reporter": "geenensp"
        }
    ],
    "3831107": [
        {
            "dateadded": "2026-04-25 08:54:21 UTC",
            "url": "http://175.43.154.49:51489/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831107/",
            "reporter": "geenensp"
        }
    ],
    "3831106": [
        {
            "dateadded": "2026-04-25 08:53:21 UTC",
            "url": "http://219.157.63.81:45807/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831106/",
            "reporter": "geenensp"
        }
    ],
    "3831104": [
        {
            "dateadded": "2026-04-25 08:49:19 UTC",
            "url": "http://115.49.4.7:43447/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831104/",
            "reporter": "geenensp"
        }
    ],
    "3831105": [
        {
            "dateadded": "2026-04-25 08:49:19 UTC",
            "url": "http://123.5.115.191:52881/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:11:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831105/",
            "reporter": "geenensp"
        }
    ],
    "3831103": [
        {
            "dateadded": "2026-04-25 08:45:20 UTC",
            "url": "http://42.227.55.10:48752/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:18:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831103/",
            "reporter": "geenensp"
        }
    ],
    "3831102": [
        {
            "dateadded": "2026-04-25 08:43:08 UTC",
            "url": "https://vor-spireos.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831102/",
            "reporter": "anonymous"
        }
    ],
    "3831101": [
        {
            "dateadded": "2026-04-25 08:42:19 UTC",
            "url": "http://42.85.187.102:55571/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831101/",
            "reporter": "geenensp"
        }
    ],
    "3831100": [
        {
            "dateadded": "2026-04-25 08:41:14 UTC",
            "url": "http://61.52.46.144:60399/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831100/",
            "reporter": "geenensp"
        }
    ],
    "3831099": [
        {
            "dateadded": "2026-04-25 08:40:32 UTC",
            "url": "http://121.21.104.230:48945/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831099/",
            "reporter": "geenensp"
        }
    ],
    "3831098": [
        {
            "dateadded": "2026-04-25 08:40:23 UTC",
            "url": "http://120.28.200.193:39279/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831098/",
            "reporter": "geenensp"
        }
    ],
    "3831097": [
        {
            "dateadded": "2026-04-25 08:40:17 UTC",
            "url": "http://182.121.12.231:54760/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831097/",
            "reporter": "geenensp"
        }
    ],
    "3831096": [
        {
            "dateadded": "2026-04-25 08:38:14 UTC",
            "url": "http://42.227.35.6:56743/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:53:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831096/",
            "reporter": "geenensp"
        }
    ],
    "3831095": [
        {
            "dateadded": "2026-04-25 08:37:09 UTC",
            "url": "https://atom1-span.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831095/",
            "reporter": "anonymous"
        }
    ],
    "3831094": [
        {
            "dateadded": "2026-04-25 08:36:18 UTC",
            "url": "http://61.52.46.144:60399/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831094/",
            "reporter": "geenensp"
        }
    ],
    "3831093": [
        {
            "dateadded": "2026-04-25 08:31:05 UTC",
            "url": "https://emidb.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831093/",
            "reporter": "anonymous"
        }
    ],
    "3831092": [
        {
            "dateadded": "2026-04-25 08:27:07 UTC",
            "url": "http://123.134.57.165:36781/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831092/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831091": [
        {
            "dateadded": "2026-04-25 08:26:14 UTC",
            "url": "https://geo-1c3.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831091/",
            "reporter": "anonymous"
        }
    ],
    "3831090": [
        {
            "dateadded": "2026-04-25 08:22:20 UTC",
            "url": "http://115.49.4.7:43447/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831090/",
            "reporter": "geenensp"
        }
    ],
    "3831089": [
        {
            "dateadded": "2026-04-25 08:22:10 UTC",
            "url": "http://123.134.57.165:36781/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 08:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831089/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831088": [
        {
            "dateadded": "2026-04-25 08:22:08 UTC",
            "url": "http://182.127.128.162:46639/i",
            "url_status": "offline",
            "last_online": "2026-04-25 08:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831088/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831087": [
        {
            "dateadded": "2026-04-25 08:20:15 UTC",
            "url": "http://219.157.63.81:45807/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831087/",
            "reporter": "geenensp"
        }
    ],
    "3831086": [
        {
            "dateadded": "2026-04-25 08:20:08 UTC",
            "url": "https://veltide4a.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831086/",
            "reporter": "anonymous"
        }
    ],
    "3831085": [
        {
            "dateadded": "2026-04-25 08:18:19 UTC",
            "url": "http://42.227.35.6:56743/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:03:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831085/",
            "reporter": "geenensp"
        }
    ],
    "3831084": [
        {
            "dateadded": "2026-04-25 08:18:18 UTC",
            "url": "http://42.6.80.228:58866/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831084/",
            "reporter": "geenensp"
        }
    ],
    "3831082": [
        {
            "dateadded": "2026-04-25 08:17:17 UTC",
            "url": "http://125.44.25.197:47652/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831082/",
            "reporter": "geenensp"
        }
    ],
    "3831083": [
        {
            "dateadded": "2026-04-25 08:17:17 UTC",
            "url": "http://42.56.147.59:56819/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831083/",
            "reporter": "geenensp"
        }
    ],
    "3831081": [
        {
            "dateadded": "2026-04-25 08:11:21 UTC",
            "url": "http://61.52.105.63:46173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831081/",
            "reporter": "geenensp"
        }
    ],
    "3831080": [
        {
            "dateadded": "2026-04-25 08:11:06 UTC",
            "url": "https://thick8-signal.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831080/",
            "reporter": "anonymous"
        }
    ],
    "3831079": [
        {
            "dateadded": "2026-04-25 08:08:20 UTC",
            "url": "http://125.41.171.186:55820/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831079/",
            "reporter": "geenensp"
        }
    ],
    "3831078": [
        {
            "dateadded": "2026-04-25 08:06:08 UTC",
            "url": "https://tercheck.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831078/",
            "reporter": "anonymous"
        }
    ],
    "3831077": [
        {
            "dateadded": "2026-04-25 08:04:16 UTC",
            "url": "http://110.36.65.9:41070/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:25:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831077/",
            "reporter": "geenensp"
        }
    ],
    "3831076": [
        {
            "dateadded": "2026-04-25 08:00:15 UTC",
            "url": "https://inkraven.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 08:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831076/",
            "reporter": "anonymous"
        }
    ],
    "3831075": [
        {
            "dateadded": "2026-04-25 07:59:09 UTC",
            "url": "http://123.11.68.158:60898/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:01:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831075/",
            "reporter": "geenensp"
        }
    ],
    "3831074": [
        {
            "dateadded": "2026-04-25 07:57:07 UTC",
            "url": "http://27.37.115.249:43421/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:30:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831074/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831073": [
        {
            "dateadded": "2026-04-25 07:57:06 UTC",
            "url": "http://160.30.103.84:49403/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:48:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831073/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831071": [
        {
            "dateadded": "2026-04-25 07:55:25 UTC",
            "url": "http://140.237.36.79:60398/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:09:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831071/",
            "reporter": "geenensp"
        }
    ],
    "3831072": [
        {
            "dateadded": "2026-04-25 07:55:25 UTC",
            "url": "http://125.44.25.197:47652/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:55:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831072/",
            "reporter": "geenensp"
        }
    ],
    "3831070": [
        {
            "dateadded": "2026-04-25 07:55:12 UTC",
            "url": "https://ash-leaf.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831070/",
            "reporter": "anonymous"
        }
    ],
    "3831069": [
        {
            "dateadded": "2026-04-25 07:49:19 UTC",
            "url": "http://42.228.102.64:60145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 07:49:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831069/",
            "reporter": "geenensp"
        }
    ],
    "3831068": [
        {
            "dateadded": "2026-04-25 07:49:09 UTC",
            "url": "https://neo-cornput.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831068/",
            "reporter": "anonymous"
        }
    ],
    "3831067": [
        {
            "dateadded": "2026-04-25 07:44:08 UTC",
            "url": "https://bytefore.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831067/",
            "reporter": "anonymous"
        }
    ],
    "3831066": [
        {
            "dateadded": "2026-04-25 07:40:22 UTC",
            "url": "http://125.41.171.186:55820/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:56:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831066/",
            "reporter": "geenensp"
        }
    ],
    "3831065": [
        {
            "dateadded": "2026-04-25 07:38:08 UTC",
            "url": "https://rntfvps.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831065/",
            "reporter": "anonymous"
        }
    ],
    "3831064": [
        {
            "dateadded": "2026-04-25 07:37:07 UTC",
            "url": "http://160.30.103.84:49403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831064/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831063": [
        {
            "dateadded": "2026-04-25 07:34:09 UTC",
            "url": "https://atomicextract.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831063/",
            "reporter": "anonymous"
        }
    ],
    "3831062": [
        {
            "dateadded": "2026-04-25 07:32:12 UTC",
            "url": "http://180.245.43.20:44856/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831062/",
            "reporter": "geenensp"
        }
    ],
    "3831061": [
        {
            "dateadded": "2026-04-25 07:31:06 UTC",
            "url": "https://server-scar.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831061/",
            "reporter": "anonymous"
        }
    ],
    "3831059": [
        {
            "dateadded": "2026-04-25 07:27:07 UTC",
            "url": "http://42.224.172.154:47368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 07:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831059/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831060": [
        {
            "dateadded": "2026-04-25 07:27:07 UTC",
            "url": "http://42.224.172.154:47368/i",
            "url_status": "offline",
            "last_online": "2026-04-25 07:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831060/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831058": [
        {
            "dateadded": "2026-04-25 07:23:07 UTC",
            "url": "https://hdf358xa.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831058/",
            "reporter": "anonymous"
        }
    ],
    "3831057": [
        {
            "dateadded": "2026-04-25 07:22:07 UTC",
            "url": "http://115.51.20.70:59383/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831057/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831056": [
        {
            "dateadded": "2026-04-25 07:21:13 UTC",
            "url": "http://115.51.254.196:37368/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:50:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831056/",
            "reporter": "geenensp"
        }
    ],
    "3831055": [
        {
            "dateadded": "2026-04-25 07:20:17 UTC",
            "url": "http://27.207.189.110:58179/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831055/",
            "reporter": "geenensp"
        }
    ],
    "3831054": [
        {
            "dateadded": "2026-04-25 07:15:10 UTC",
            "url": "http://123.11.68.158:60898/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:11:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831054/",
            "reporter": "geenensp"
        }
    ],
    "3831053": [
        {
            "dateadded": "2026-04-25 07:12:11 UTC",
            "url": "https://amber-mon.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831053/",
            "reporter": "anonymous"
        }
    ],
    "3831052": [
        {
            "dateadded": "2026-04-25 07:11:17 UTC",
            "url": "http://196.189.96.59:35646/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:24:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831052/",
            "reporter": "geenensp"
        }
    ],
    "3831051": [
        {
            "dateadded": "2026-04-25 07:08:10 UTC",
            "url": "https://gentl-snow.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831051/",
            "reporter": "anonymous"
        }
    ],
    "3831050": [
        {
            "dateadded": "2026-04-25 07:02:08 UTC",
            "url": "http://115.51.20.70:59383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831050/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831049": [
        {
            "dateadded": "2026-04-25 07:01:15 UTC",
            "url": "https://25eap9f.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 07:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831049/",
            "reporter": "anonymous"
        }
    ],
    "3831048": [
        {
            "dateadded": "2026-04-25 06:58:10 UTC",
            "url": "http://180.245.43.20:44856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831048/",
            "reporter": "geenensp"
        }
    ],
    "3831047": [
        {
            "dateadded": "2026-04-25 06:57:19 UTC",
            "url": "http://115.51.254.196:37368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:35:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831047/",
            "reporter": "geenensp"
        }
    ],
    "3831046": [
        {
            "dateadded": "2026-04-25 06:56:07 UTC",
            "url": "https://argrs.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831046/",
            "reporter": "anonymous"
        }
    ],
    "3831045": [
        {
            "dateadded": "2026-04-25 06:51:07 UTC",
            "url": "https://vorlithen4.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831045/",
            "reporter": "anonymous"
        }
    ],
    "3831044": [
        {
            "dateadded": "2026-04-25 06:45:24 UTC",
            "url": "http://196.189.96.59:35646/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:02:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831044/",
            "reporter": "geenensp"
        }
    ],
    "3831043": [
        {
            "dateadded": "2026-04-25 06:45:12 UTC",
            "url": "https://sernexor8.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831043/",
            "reporter": "anonymous"
        }
    ],
    "3831042": [
        {
            "dateadded": "2026-04-25 06:42:08 UTC",
            "url": "http://125.45.48.249:35117/i",
            "url_status": "offline",
            "last_online": "2026-04-25 12:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831042/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831041": [
        {
            "dateadded": "2026-04-25 06:40:09 UTC",
            "url": "https://falforma.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831041/",
            "reporter": "anonymous"
        }
    ],
    "3831040": [
        {
            "dateadded": "2026-04-25 06:39:21 UTC",
            "url": "http://110.36.26.130:41764/i",
            "url_status": "offline",
            "last_online": "2026-04-25 06:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831040/",
            "reporter": "geenensp"
        }
    ],
    "3831039": [
        {
            "dateadded": "2026-04-25 06:37:21 UTC",
            "url": "http://221.15.6.29:39779/i",
            "url_status": "offline",
            "last_online": "2026-04-26 10:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831039/",
            "reporter": "geenensp"
        }
    ],
    "3831038": [
        {
            "dateadded": "2026-04-25 06:36:21 UTC",
            "url": "http://42.231.92.37:49020/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831038/",
            "reporter": "geenensp"
        }
    ],
    "3831037": [
        {
            "dateadded": "2026-04-25 06:32:07 UTC",
            "url": "http://110.36.15.18:49147/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831037/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831036": [
        {
            "dateadded": "2026-04-25 06:28:20 UTC",
            "url": "http://115.55.251.217:60898/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:07:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831036/",
            "reporter": "geenensp"
        }
    ],
    "3831035": [
        {
            "dateadded": "2026-04-25 06:26:11 UTC",
            "url": "https://forrn7-panel.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831035/",
            "reporter": "anonymous"
        }
    ],
    "3831034": [
        {
            "dateadded": "2026-04-25 06:22:21 UTC",
            "url": "http://42.231.92.37:49020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:12:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831034/",
            "reporter": "geenensp"
        }
    ],
    "3831033": [
        {
            "dateadded": "2026-04-25 06:22:07 UTC",
            "url": "http://110.36.15.18:49147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:19:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831033/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831032": [
        {
            "dateadded": "2026-04-25 06:20:14 UTC",
            "url": "https://jkdraj.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831032/",
            "reporter": "anonymous"
        }
    ],
    "3831031": [
        {
            "dateadded": "2026-04-25 06:16:31 UTC",
            "url": "http://115.49.65.184:35247/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831031/",
            "reporter": "geenensp"
        }
    ],
    "3831030": [
        {
            "dateadded": "2026-04-25 06:11:14 UTC",
            "url": "https://vellithal3.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831030/",
            "reporter": "anonymous"
        }
    ],
    "3831029": [
        {
            "dateadded": "2026-04-25 06:10:24 UTC",
            "url": "http://221.15.6.29:39779/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:05:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831029/",
            "reporter": "geenensp"
        }
    ],
    "3831028": [
        {
            "dateadded": "2026-04-25 06:08:22 UTC",
            "url": "http://110.36.26.130:41764/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:08:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831028/",
            "reporter": "geenensp"
        }
    ],
    "3831027": [
        {
            "dateadded": "2026-04-25 06:06:13 UTC",
            "url": "https://starwinter.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831027/",
            "reporter": "anonymous"
        }
    ],
    "3831026": [
        {
            "dateadded": "2026-04-25 06:02:12 UTC",
            "url": "https://dyn-tideis.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 06:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831026/",
            "reporter": "anonymous"
        }
    ],
    "3831025": [
        {
            "dateadded": "2026-04-25 06:02:07 UTC",
            "url": "http://182.127.115.109:59924/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:24:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831025/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831024": [
        {
            "dateadded": "2026-04-25 06:01:22 UTC",
            "url": "http://115.55.251.217:60898/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831024/",
            "reporter": "geenensp"
        }
    ],
    "3831023": [
        {
            "dateadded": "2026-04-25 05:57:07 UTC",
            "url": "http://125.45.65.121:37827/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831023/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831022": [
        {
            "dateadded": "2026-04-25 05:54:18 UTC",
            "url": "http://110.37.68.195:49238/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831022/",
            "reporter": "geenensp"
        }
    ],
    "3831021": [
        {
            "dateadded": "2026-04-25 05:53:14 UTC",
            "url": "https://ultra-f1rmvva.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831021/",
            "reporter": "anonymous"
        }
    ],
    "3831020": [
        {
            "dateadded": "2026-04-25 05:47:07 UTC",
            "url": "http://125.45.65.121:37827/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831020/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831019": [
        {
            "dateadded": "2026-04-25 05:43:14 UTC",
            "url": "https://sub-n3uron.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831019/",
            "reporter": "anonymous"
        }
    ],
    "3831017": [
        {
            "dateadded": "2026-04-25 05:37:08 UTC",
            "url": "http://42.231.93.100:60469/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:42:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831017/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831018": [
        {
            "dateadded": "2026-04-25 05:37:08 UTC",
            "url": "http://182.127.115.109:59924/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831018/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831016": [
        {
            "dateadded": "2026-04-25 05:36:14 UTC",
            "url": "https://kkdho.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831016/",
            "reporter": "anonymous"
        }
    ],
    "3831015": [
        {
            "dateadded": "2026-04-25 05:34:23 UTC",
            "url": "http://115.63.51.75:39797/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:20:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831015/",
            "reporter": "geenensp"
        }
    ],
    "3831014": [
        {
            "dateadded": "2026-04-25 05:33:13 UTC",
            "url": "https://vorcrestix.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831014/",
            "reporter": "anonymous"
        }
    ],
    "3831013": [
        {
            "dateadded": "2026-04-25 05:32:06 UTC",
            "url": "http://42.225.242.7:53385/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:00:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831013/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831012": [
        {
            "dateadded": "2026-04-25 05:22:13 UTC",
            "url": "https://72z5.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831012/",
            "reporter": "anonymous"
        }
    ],
    "3831011": [
        {
            "dateadded": "2026-04-25 05:22:08 UTC",
            "url": "http://115.49.65.241:38418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:03:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831011/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831010": [
        {
            "dateadded": "2026-04-25 05:18:24 UTC",
            "url": "http://123.7.154.59:56376/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831010/",
            "reporter": "geenensp"
        }
    ],
    "3831009": [
        {
            "dateadded": "2026-04-25 05:17:24 UTC",
            "url": "http://42.231.55.10:34700/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:41:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831009/",
            "reporter": "geenensp"
        }
    ],
    "3831008": [
        {
            "dateadded": "2026-04-25 05:13:14 UTC",
            "url": "https://audittiny.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831008/",
            "reporter": "anonymous"
        }
    ],
    "3831007": [
        {
            "dateadded": "2026-04-25 05:11:22 UTC",
            "url": "http://115.59.93.131:44560/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:08:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831007/",
            "reporter": "geenensp"
        }
    ],
    "3831006": [
        {
            "dateadded": "2026-04-25 05:10:19 UTC",
            "url": "http://124.94.164.103:51383/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831006/",
            "reporter": "geenensp"
        }
    ],
    "3831005": [
        {
            "dateadded": "2026-04-25 05:08:19 UTC",
            "url": "http://115.63.51.75:39797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:29:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831005/",
            "reporter": "geenensp"
        }
    ],
    "3831004": [
        {
            "dateadded": "2026-04-25 05:07:14 UTC",
            "url": "http://42.225.242.7:53385/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831004/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831003": [
        {
            "dateadded": "2026-04-25 05:07:09 UTC",
            "url": "http://182.116.9.183:39731/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831003/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3831002": [
        {
            "dateadded": "2026-04-25 05:04:12 UTC",
            "url": "https://ollowgl.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 05:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831002/",
            "reporter": "anonymous"
        }
    ],
    "3831001": [
        {
            "dateadded": "2026-04-25 04:59:13 UTC",
            "url": "https://motif4-vector.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831001/",
            "reporter": "anonymous"
        }
    ],
    "3831000": [
        {
            "dateadded": "2026-04-25 04:56:12 UTC",
            "url": "https://cultureengine.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3831000/",
            "reporter": "anonymous"
        }
    ],
    "3830999": [
        {
            "dateadded": "2026-04-25 04:51:12 UTC",
            "url": "http://42.231.55.10:34700/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830999/",
            "reporter": "geenensp"
        }
    ],
    "3830998": [
        {
            "dateadded": "2026-04-25 04:47:08 UTC",
            "url": "https://gf2rfd.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830998/",
            "reporter": "anonymous"
        }
    ],
    "3830997": [
        {
            "dateadded": "2026-04-25 04:42:11 UTC",
            "url": "https://passiv-reage.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830997/",
            "reporter": "anonymous"
        }
    ],
    "3830996": [
        {
            "dateadded": "2026-04-25 04:32:09 UTC",
            "url": "https://7fsk.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830996/",
            "reporter": "anonymous"
        }
    ],
    "3830995": [
        {
            "dateadded": "2026-04-25 04:28:23 UTC",
            "url": "http://42.224.73.206:51685/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830995/",
            "reporter": "geenensp"
        }
    ],
    "3830994": [
        {
            "dateadded": "2026-04-25 04:28:06 UTC",
            "url": "https://canopystor.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830994/",
            "reporter": "anonymous"
        }
    ],
    "3830992": [
        {
            "dateadded": "2026-04-25 04:22:08 UTC",
            "url": "http://182.127.153.219:59618/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830992/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830993": [
        {
            "dateadded": "2026-04-25 04:22:08 UTC",
            "url": "http://182.127.153.219:59618/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:57:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830993/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830991": [
        {
            "dateadded": "2026-04-25 04:19:08 UTC",
            "url": "http://182.112.221.106:49379/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830991/",
            "reporter": "geenensp"
        }
    ],
    "3830990": [
        {
            "dateadded": "2026-04-25 04:16:08 UTC",
            "url": "https://echoloa.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830990/",
            "reporter": "anonymous"
        }
    ],
    "3830989": [
        {
            "dateadded": "2026-04-25 04:14:12 UTC",
            "url": "http://221.15.8.191:51528/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:18:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830989/",
            "reporter": "geenensp"
        }
    ],
    "3830988": [
        {
            "dateadded": "2026-04-25 04:10:08 UTC",
            "url": "https://theormot.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830988/",
            "reporter": "anonymous"
        }
    ],
    "3830987": [
        {
            "dateadded": "2026-04-25 04:05:09 UTC",
            "url": "https://vorforge7al.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 04:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830987/",
            "reporter": "anonymous"
        }
    ],
    "3830986": [
        {
            "dateadded": "2026-04-25 04:04:19 UTC",
            "url": "http://42.224.73.206:51685/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830986/",
            "reporter": "geenensp"
        }
    ],
    "3830985": [
        {
            "dateadded": "2026-04-25 04:03:14 UTC",
            "url": "http://221.15.8.191:51528/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:48:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830985/",
            "reporter": "geenensp"
        }
    ],
    "3830984": [
        {
            "dateadded": "2026-04-25 04:00:22 UTC",
            "url": "http://42.57.25.159:45414/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830984/",
            "reporter": "geenensp"
        }
    ],
    "3830983": [
        {
            "dateadded": "2026-04-25 03:59:07 UTC",
            "url": "https://publish2-mount.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830983/",
            "reporter": "anonymous"
        }
    ],
    "3830982": [
        {
            "dateadded": "2026-04-25 03:58:18 UTC",
            "url": "http://125.41.9.170:40666/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830982/",
            "reporter": "geenensp"
        }
    ],
    "3830981": [
        {
            "dateadded": "2026-04-25 03:55:21 UTC",
            "url": "http://182.112.221.106:49379/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 04:59:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830981/",
            "reporter": "geenensp"
        }
    ],
    "3830980": [
        {
            "dateadded": "2026-04-25 03:52:08 UTC",
            "url": "https://proto-str34m.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830980/",
            "reporter": "anonymous"
        }
    ],
    "3830979": [
        {
            "dateadded": "2026-04-25 03:50:08 UTC",
            "url": "https://svvift5-trace.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830979/",
            "reporter": "anonymous"
        }
    ],
    "3830978": [
        {
            "dateadded": "2026-04-25 03:41:07 UTC",
            "url": "https://jz8ef5.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830978/",
            "reporter": "anonymous"
        }
    ],
    "3830977": [
        {
            "dateadded": "2026-04-25 03:38:20 UTC",
            "url": "http://202.107.92.90:36640/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830977/",
            "reporter": "geenensp"
        }
    ],
    "3830976": [
        {
            "dateadded": "2026-04-25 03:38:08 UTC",
            "url": "https://norspireos3.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830976/",
            "reporter": "anonymous"
        }
    ],
    "3830975": [
        {
            "dateadded": "2026-04-25 03:32:08 UTC",
            "url": "http://222.127.152.103:48977/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830975/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830974": [
        {
            "dateadded": "2026-04-25 03:32:07 UTC",
            "url": "http://42.231.93.100:60469/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:02:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830974/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830973": [
        {
            "dateadded": "2026-04-25 03:28:14 UTC",
            "url": "http://196.189.111.43:34495/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830973/",
            "reporter": "geenensp"
        }
    ],
    "3830972": [
        {
            "dateadded": "2026-04-25 03:27:08 UTC",
            "url": "https://tracesound.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830972/",
            "reporter": "anonymous"
        }
    ],
    "3830971": [
        {
            "dateadded": "2026-04-25 03:24:10 UTC",
            "url": "https://segmentash.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830971/",
            "reporter": "anonymous"
        }
    ],
    "3830970": [
        {
            "dateadded": "2026-04-25 03:13:21 UTC",
            "url": "http://208.84.100.209/g.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830970/",
            "reporter": "botnetkiller"
        }
    ],
    "3830969": [
        {
            "dateadded": "2026-04-25 03:13:06 UTC",
            "url": "https://growthcircui.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830969/",
            "reporter": "anonymous"
        }
    ],
    "3830968": [
        {
            "dateadded": "2026-04-25 03:11:09 UTC",
            "url": "http://115.49.79.131:51284/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830968/",
            "reporter": "geenensp"
        }
    ],
    "3830967": [
        {
            "dateadded": "2026-04-25 03:10:08 UTC",
            "url": "https://surv3y7-plate.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 03:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830967/",
            "reporter": "anonymous"
        }
    ],
    "3830966": [
        {
            "dateadded": "2026-04-25 03:07:23 UTC",
            "url": "http://115.48.160.63:40377/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830966/",
            "reporter": "geenensp"
        }
    ],
    "3830965": [
        {
            "dateadded": "2026-04-25 03:05:12 UTC",
            "url": "http://202.107.92.90:36640/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830965/",
            "reporter": "geenensp"
        }
    ],
    "3830964": [
        {
            "dateadded": "2026-04-25 03:02:08 UTC",
            "url": "http://42.228.41.142:43689/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:07:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830964/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830963": [
        {
            "dateadded": "2026-04-25 03:02:07 UTC",
            "url": "http://115.48.160.63:40377/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:12:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830963/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830962": [
        {
            "dateadded": "2026-04-25 02:59:06 UTC",
            "url": "https://bark-line.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830962/",
            "reporter": "anonymous"
        }
    ],
    "3830961": [
        {
            "dateadded": "2026-04-25 02:53:18 UTC",
            "url": "http://196.189.111.43:34495/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 04:54:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830961/",
            "reporter": "geenensp"
        }
    ],
    "3830960": [
        {
            "dateadded": "2026-04-25 02:52:10 UTC",
            "url": "https://basicret.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830960/",
            "reporter": "anonymous"
        }
    ],
    "3830959": [
        {
            "dateadded": "2026-04-25 02:52:09 UTC",
            "url": "http://115.49.79.131:51284/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:11:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830959/",
            "reporter": "geenensp"
        }
    ],
    "3830958": [
        {
            "dateadded": "2026-04-25 02:47:07 UTC",
            "url": "https://tri-fluxa.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830958/",
            "reporter": "anonymous"
        }
    ],
    "3830957": [
        {
            "dateadded": "2026-04-25 02:43:11 UTC",
            "url": "https://solafirmw.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830957/",
            "reporter": "anonymous"
        }
    ],
    "3830956": [
        {
            "dateadded": "2026-04-25 02:38:10 UTC",
            "url": "http://123.10.158.9:40513/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:20:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830956/",
            "reporter": "geenensp"
        }
    ],
    "3830955": [
        {
            "dateadded": "2026-04-25 02:36:19 UTC",
            "url": "http://42.57.54.92:51141/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830955/",
            "reporter": "geenensp"
        }
    ],
    "3830954": [
        {
            "dateadded": "2026-04-25 02:34:20 UTC",
            "url": "http://182.117.49.55:51294/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:53:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830954/",
            "reporter": "geenensp"
        }
    ],
    "3830953": [
        {
            "dateadded": "2026-04-25 02:33:12 UTC",
            "url": "https://dffer.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830953/",
            "reporter": "anonymous"
        }
    ],
    "3830952": [
        {
            "dateadded": "2026-04-25 02:32:06 UTC",
            "url": "http://125.40.0.110:40737/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:13:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830952/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830951": [
        {
            "dateadded": "2026-04-25 02:26:09 UTC",
            "url": "https://dsf2.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830951/",
            "reporter": "anonymous"
        }
    ],
    "3830950": [
        {
            "dateadded": "2026-04-25 02:24:33 UTC",
            "url": "http://175.167.96.21:44279/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830950/",
            "reporter": "geenensp"
        }
    ],
    "3830949": [
        {
            "dateadded": "2026-04-25 02:21:10 UTC",
            "url": "https://gold-2.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830949/",
            "reporter": "anonymous"
        }
    ],
    "3830948": [
        {
            "dateadded": "2026-04-25 02:17:18 UTC",
            "url": "http://42.228.102.64:60145/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830948/",
            "reporter": "geenensp"
        }
    ],
    "3830947": [
        {
            "dateadded": "2026-04-25 02:17:06 UTC",
            "url": "http://196.188.135.20:57842/i",
            "url_status": "offline",
            "last_online": "2026-04-25 02:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830947/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830946": [
        {
            "dateadded": "2026-04-25 02:09:19 UTC",
            "url": "http://42.226.79.203:53696/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830946/",
            "reporter": "geenensp"
        }
    ],
    "3830945": [
        {
            "dateadded": "2026-04-25 02:07:08 UTC",
            "url": "http://182.124.173.162:58261/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830945/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830944": [
        {
            "dateadded": "2026-04-25 02:06:12 UTC",
            "url": "https://fast-land-9c.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 02:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830944/",
            "reporter": "anonymous"
        }
    ],
    "3830943": [
        {
            "dateadded": "2026-04-25 02:02:07 UTC",
            "url": "http://125.47.236.30:39536/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:21:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830943/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830942": [
        {
            "dateadded": "2026-04-25 01:57:10 UTC",
            "url": "https://dark-6.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830942/",
            "reporter": "anonymous"
        }
    ],
    "3830941": [
        {
            "dateadded": "2026-04-25 01:55:16 UTC",
            "url": "http://175.167.96.21:44279/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:22:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830941/",
            "reporter": "geenensp"
        }
    ],
    "3830940": [
        {
            "dateadded": "2026-04-25 01:51:14 UTC",
            "url": "https://holz-baum-4.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830940/",
            "reporter": "anonymous"
        }
    ],
    "3830939": [
        {
            "dateadded": "2026-04-25 01:47:07 UTC",
            "url": "https://zeit-1.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830939/",
            "reporter": "anonymous"
        }
    ],
    "3830938": [
        {
            "dateadded": "2026-04-25 01:44:13 UTC",
            "url": "https://github.com/rupa9495/youtube-hide-low-views-videos/raw/refs/heads/main/chelide/videos-hide-youtube-views-low-v2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830938/",
            "reporter": "tcains1"
        }
    ],
    "3830936": [
        {
            "dateadded": "2026-04-25 01:44:12 UTC",
            "url": "https://raw.githubusercontent.com/rupa9495/n8n-mt5-fetch/refs/heads/main/telluriferous/fetch_n_mt_v3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830936/",
            "reporter": "tcains1"
        }
    ],
    "3830937": [
        {
            "dateadded": "2026-04-25 01:44:12 UTC",
            "url": "https://github.com/rupa9495/n8n-mt5-fetch/raw/refs/heads/main/telluriferous/fetch_n_mt_v3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830937/",
            "reporter": "tcains1"
        }
    ],
    "3830935": [
        {
            "dateadded": "2026-04-25 01:44:11 UTC",
            "url": "https://raw.githubusercontent.com/rupa9495/rupa9495.github.io/refs/heads/main/pterotheca/io-rupa-github-1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830935/",
            "reporter": "tcains1"
        }
    ],
    "3830934": [
        {
            "dateadded": "2026-04-25 01:44:08 UTC",
            "url": "https://github.com/rupa9495/rupa9495.github.io/raw/refs/heads/main/pterotheca/io-rupa-github-1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830934/",
            "reporter": "tcains1"
        }
    ],
    "3830933": [
        {
            "dateadded": "2026-04-25 01:44:07 UTC",
            "url": "https://raw.githubusercontent.com/rupa9495/youtube-hide-low-views-videos/refs/heads/main/chelide/videos-hide-youtube-views-low-v2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830933/",
            "reporter": "tcains1"
        }
    ],
    "3830932": [
        {
            "dateadded": "2026-04-25 01:41:12 UTC",
            "url": "https://blue-fire-8x.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830932/",
            "reporter": "anonymous"
        }
    ],
    "3830931": [
        {
            "dateadded": "2026-04-25 01:35:09 UTC",
            "url": "https://open-3.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830931/",
            "reporter": "anonymous"
        }
    ],
    "3830930": [
        {
            "dateadded": "2026-04-25 01:32:07 UTC",
            "url": "http://125.47.236.30:39536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:12:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830930/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830929": [
        {
            "dateadded": "2026-04-25 01:32:06 UTC",
            "url": "http://115.48.236.89:43826/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:23:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830929/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830928": [
        {
            "dateadded": "2026-04-25 01:30:20 UTC",
            "url": "http://123.12.192.63:44606/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830928/",
            "reporter": "geenensp"
        }
    ],
    "3830927": [
        {
            "dateadded": "2026-04-25 01:29:13 UTC",
            "url": "https://petit-berg-5p.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830927/",
            "reporter": "anonymous"
        }
    ],
    "3830926": [
        {
            "dateadded": "2026-04-25 01:27:07 UTC",
            "url": "http://123.7.155.75:53575/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830926/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830925": [
        {
            "dateadded": "2026-04-25 01:26:10 UTC",
            "url": "https://noir-7.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830925/",
            "reporter": "anonymous"
        }
    ],
    "3830924": [
        {
            "dateadded": "2026-04-25 01:21:17 UTC",
            "url": "http://115.55.175.139:50283/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830924/",
            "reporter": "geenensp"
        }
    ],
    "3830923": [
        {
            "dateadded": "2026-04-25 01:14:08 UTC",
            "url": "https://soft-land-4.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830923/",
            "reporter": "anonymous"
        }
    ],
    "3830922": [
        {
            "dateadded": "2026-04-25 01:06:07 UTC",
            "url": "https://rouge-6.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 01:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830922/",
            "reporter": "anonymous"
        }
    ],
    "3830921": [
        {
            "dateadded": "2026-04-25 00:58:10 UTC",
            "url": "https://iron-star-2n.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830921/",
            "reporter": "anonymous"
        }
    ],
    "3830920": [
        {
            "dateadded": "2026-04-25 00:57:09 UTC",
            "url": "http://123.7.155.75:53575/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:27:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830920/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830919": [
        {
            "dateadded": "2026-04-25 00:52:06 UTC",
            "url": "https://haus-1.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:52:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830919/",
            "reporter": "anonymous"
        }
    ],
    "3830918": [
        {
            "dateadded": "2026-04-25 00:51:16 UTC",
            "url": "http://42.239.228.183:52285/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830918/",
            "reporter": "geenensp"
        }
    ],
    "3830917": [
        {
            "dateadded": "2026-04-25 00:49:15 UTC",
            "url": "http://27.14.191.107:51471/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830917/",
            "reporter": "geenensp"
        }
    ],
    "3830916": [
        {
            "dateadded": "2026-04-25 00:47:15 UTC",
            "url": "http://27.202.212.173:36311/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830916/",
            "reporter": "geenensp"
        }
    ],
    "3830915": [
        {
            "dateadded": "2026-04-25 00:45:09 UTC",
            "url": "https://gold-mond-9z.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830915/",
            "reporter": "anonymous"
        }
    ],
    "3830914": [
        {
            "dateadded": "2026-04-25 00:39:09 UTC",
            "url": "https://bleu-4.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830914/",
            "reporter": "anonymous"
        }
    ],
    "3830913": [
        {
            "dateadded": "2026-04-25 00:37:07 UTC",
            "url": "http://222.141.188.178:39740/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830913/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830912": [
        {
            "dateadded": "2026-04-25 00:34:07 UTC",
            "url": "https://kalt-wald-8.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830912/",
            "reporter": "anonymous"
        }
    ],
    "3830911": [
        {
            "dateadded": "2026-04-25 00:32:18 UTC",
            "url": "http://61.137.131.139:50229/i",
            "url_status": "offline",
            "last_online": "2026-04-27 10:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830911/",
            "reporter": "geenensp"
        }
    ],
    "3830910": [
        {
            "dateadded": "2026-04-25 00:32:08 UTC",
            "url": "http://125.47.243.46:34642/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830910/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830909": [
        {
            "dateadded": "2026-04-25 00:32:07 UTC",
            "url": "http://125.47.243.46:34642/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:18:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830909/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830908": [
        {
            "dateadded": "2026-04-25 00:29:12 UTC",
            "url": "http://42.239.228.183:52285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:54:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830908/",
            "reporter": "geenensp"
        }
    ],
    "3830907": [
        {
            "dateadded": "2026-04-25 00:28:10 UTC",
            "url": "https://vert-2.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830907/",
            "reporter": "anonymous"
        }
    ],
    "3830906": [
        {
            "dateadded": "2026-04-25 00:26:20 UTC",
            "url": "http://27.202.212.173:36311/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830906/",
            "reporter": "geenensp"
        }
    ],
    "3830905": [
        {
            "dateadded": "2026-04-25 00:22:14 UTC",
            "url": "https://fast-zeit-5k.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830905/",
            "reporter": "anonymous"
        }
    ],
    "3830904": [
        {
            "dateadded": "2026-04-25 00:22:07 UTC",
            "url": "http://182.127.162.21:53945/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830904/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830903": [
        {
            "dateadded": "2026-04-25 00:20:28 UTC",
            "url": "http://27.14.191.107:51471/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830903/",
            "reporter": "geenensp"
        }
    ],
    "3830902": [
        {
            "dateadded": "2026-04-25 00:15:20 UTC",
            "url": "http://42.224.96.251:57346/i",
            "url_status": "offline",
            "last_online": "2026-04-25 15:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830902/",
            "reporter": "geenensp"
        }
    ],
    "3830901": [
        {
            "dateadded": "2026-04-25 00:14:23 UTC",
            "url": "http://222.219.74.28:58121/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830901/",
            "reporter": "geenensp"
        }
    ],
    "3830900": [
        {
            "dateadded": "2026-04-25 00:14:09 UTC",
            "url": "https://open-9.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830900/",
            "reporter": "anonymous"
        }
    ],
    "3830899": [
        {
            "dateadded": "2026-04-25 00:13:25 UTC",
            "url": "http://110.36.70.189:33797/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:13:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830899/",
            "reporter": "geenensp"
        }
    ],
    "3830898": [
        {
            "dateadded": "2026-04-25 00:12:21 UTC",
            "url": "http://221.15.247.88:53177/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:36:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830898/",
            "reporter": "geenensp"
        }
    ],
    "3830897": [
        {
            "dateadded": "2026-04-25 00:10:09 UTC",
            "url": "https://holz-berg-4b.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-25 00:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830897/",
            "reporter": "anonymous"
        }
    ],
    "3830896": [
        {
            "dateadded": "2026-04-25 00:04:24 UTC",
            "url": "http://61.137.131.139:50229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 11:09:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830896/",
            "reporter": "geenensp"
        }
    ],
    "3830895": [
        {
            "dateadded": "2026-04-25 00:02:08 UTC",
            "url": "http://222.141.188.178:39740/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830895/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830894": [
        {
            "dateadded": "2026-04-25 00:01:29 UTC",
            "url": "http://110.36.70.189:33797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:01:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830894/",
            "reporter": "geenensp"
        }
    ],
    "3830893": [
        {
            "dateadded": "2026-04-24 23:57:12 UTC",
            "url": "https://noir-6.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830893/",
            "reporter": "anonymous"
        }
    ],
    "3830892": [
        {
            "dateadded": "2026-04-24 23:52:12 UTC",
            "url": "https://petit-land-1.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830892/",
            "reporter": "anonymous"
        }
    ],
    "3830891": [
        {
            "dateadded": "2026-04-24 23:50:25 UTC",
            "url": "http://42.224.96.251:57346/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:42:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830891/",
            "reporter": "geenensp"
        }
    ],
    "3830890": [
        {
            "dateadded": "2026-04-24 23:49:24 UTC",
            "url": "http://202.107.30.48:55546/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830890/",
            "reporter": "geenensp"
        }
    ],
    "3830889": [
        {
            "dateadded": "2026-04-24 23:47:14 UTC",
            "url": "https://rouge-8.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830889/",
            "reporter": "anonymous"
        }
    ],
    "3830888": [
        {
            "dateadded": "2026-04-24 23:47:08 UTC",
            "url": "http://182.117.30.79:39015/i",
            "url_status": "offline",
            "last_online": "2026-04-25 06:03:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830888/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830887": [
        {
            "dateadded": "2026-04-24 23:47:07 UTC",
            "url": "http://115.48.236.89:43826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:38:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830887/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830886": [
        {
            "dateadded": "2026-04-24 23:46:11 UTC",
            "url": "http://221.15.247.88:53177/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:51:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830886/",
            "reporter": "geenensp"
        }
    ],
    "3830885": [
        {
            "dateadded": "2026-04-24 23:46:07 UTC",
            "url": "http://42.224.90.247:55407/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:24:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830885/",
            "reporter": "geenensp"
        }
    ],
    "3830884": [
        {
            "dateadded": "2026-04-24 23:43:20 UTC",
            "url": "http://123.12.65.25:37814/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830884/",
            "reporter": "geenensp"
        }
    ],
    "3830883": [
        {
            "dateadded": "2026-04-24 23:41:13 UTC",
            "url": "https://dark-star-3v.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830883/",
            "reporter": "anonymous"
        }
    ],
    "3830882": [
        {
            "dateadded": "2026-04-24 23:37:14 UTC",
            "url": "https://haus-2.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830882/",
            "reporter": "anonymous"
        }
    ],
    "3830881": [
        {
            "dateadded": "2026-04-24 23:34:21 UTC",
            "url": "http://27.37.101.83:48949/i",
            "url_status": "offline",
            "last_online": "2026-04-27 12:03:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830881/",
            "reporter": "geenensp"
        }
    ],
    "3830880": [
        {
            "dateadded": "2026-04-24 23:32:20 UTC",
            "url": "http://42.232.234.127:37711/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830880/",
            "reporter": "geenensp"
        }
    ],
    "3830879": [
        {
            "dateadded": "2026-04-24 23:32:07 UTC",
            "url": "http://115.53.242.110:36801/i",
            "url_status": "offline",
            "last_online": "2026-04-26 04:59:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830879/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830878": [
        {
            "dateadded": "2026-04-24 23:30:29 UTC",
            "url": "http://125.41.8.146:59616/i",
            "url_status": "offline",
            "last_online": "2026-04-25 12:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830878/",
            "reporter": "geenensp"
        }
    ],
    "3830877": [
        {
            "dateadded": "2026-04-24 23:30:24 UTC",
            "url": "https://soft-fire-6q.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:30:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830877/",
            "reporter": "anonymous"
        }
    ],
    "3830856": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/ipoprock/Bright-Future-Academy/raw/refs/heads/main/preallegation/Future-Academy-Bright-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830856/",
            "reporter": "tcains1"
        }
    ],
    "3830857": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/muradaldahmashi/SwiftUIHelpers/raw/refs/heads/main/Resources/Helpers-Swift-UI-v2.8-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830857/",
            "reporter": "tcains1"
        }
    ],
    "3830858": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/Alyasdz/STM32-OLED-I2C-HAL-Coding-Method/raw/refs/heads/main/Drivers/CMSIS/Device/ST/ST_HA_Coding_Method_OLE_v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830858/",
            "reporter": "tcains1"
        }
    ],
    "3830859": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/muradaldahmashi/compose-password/raw/refs/heads/main/app/src/main/java/com/murad8al/passwordlock/ui/password-compose-v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830859/",
            "reporter": "tcains1"
        }
    ],
    "3830860": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/ipoprock/particalfun/refs/heads/main/Build/Software-v3.8-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830860/",
            "reporter": "tcains1"
        }
    ],
    "3830861": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/kevlar782/kevlar782.github.io/raw/refs/heads/main/elocutionary/io-github-kevlar-eremology.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830861/",
            "reporter": "tcains1"
        }
    ],
    "3830862": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/ipoprock/claude-code-showcase/raw/refs/heads/main/.claude/skills/core-components/showcase-claude-code-3.2-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830862/",
            "reporter": "tcains1"
        }
    ],
    "3830863": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/FadelDia/DATA_ANALYST-BI_DEV-PORTFOLIO.github.io/raw/refs/heads/main/assets/io_B_github_PORTFOLI_ANALYS_DAT_DE_v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830863/",
            "reporter": "tcains1"
        }
    ],
    "3830864": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/mhmdoafv/SwiftEmoji/raw/refs/heads/main/Sources/SwiftEmojiIndex/DataSource/Swift-Emoji-1.9-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:11:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830864/",
            "reporter": "tcains1"
        }
    ],
    "3830865": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/muradaldahmashi/compose-password/refs/heads/main/app/src/main/java/com/murad8al/passwordlock/ui/password-compose-v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830865/",
            "reporter": "tcains1"
        }
    ],
    "3830866": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/ipoprock/portfolio/raw/refs/heads/main/assets/projects/Software_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830866/",
            "reporter": "tcains1"
        }
    ],
    "3830867": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/mhmdoafv/mhmdoafv.github.io/raw/refs/heads/main/cephalhematoma/github-io-mhmdoafv-1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830867/",
            "reporter": "tcains1"
        }
    ],
    "3830868": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/FadelDia/facebook-marketing-automation/refs/heads/main/baseheartedness/facebook_automation_marketing_1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830868/",
            "reporter": "tcains1"
        }
    ],
    "3830869": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/mhmdoafv/mhmdoafv.github.io/refs/heads/main/cephalhematoma/github-io-mhmdoafv-1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830869/",
            "reporter": "tcains1"
        }
    ],
    "3830870": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/ipoprock/Bright-Future-Academy/refs/heads/main/preallegation/Future-Academy-Bright-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830870/",
            "reporter": "tcains1"
        }
    ],
    "3830871": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/ipoprock/portfolio/refs/heads/main/assets/projects/Software_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830871/",
            "reporter": "tcains1"
        }
    ],
    "3830872": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/mhmdoafv/SwiftEmoji/refs/heads/main/Sources/SwiftEmojiIndex/DataSource/Swift-Emoji-1.9-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830872/",
            "reporter": "tcains1"
        }
    ],
    "3830873": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/raditpasy25/AWS-Serverless-ELT-Pipeline/refs/heads/main/infra/terraform/modules/lambda_event_source_mapping/Serverless_Pipeline_AW_EL_v3.5-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830873/",
            "reporter": "tcains1"
        }
    ],
    "3830874": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://raw.githubusercontent.com/muradaldahmashi/SwiftUIHelpers/refs/heads/main/Resources/Helpers-Swift-UI-v2.8-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830874/",
            "reporter": "tcains1"
        }
    ],
    "3830875": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/raditpasy25/AWS-Serverless-ELT-Pipeline/raw/refs/heads/main/infra/terraform/modules/lambda_event_source_mapping/Serverless_Pipeline_AW_EL_v3.5-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:17:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830875/",
            "reporter": "tcains1"
        }
    ],
    "3830876": [
        {
            "dateadded": "2026-04-24 23:30:22 UTC",
            "url": "https://github.com/FadelDia/facebook-marketing-automation/raw/refs/heads/main/baseheartedness/facebook_automation_marketing_1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830876/",
            "reporter": "tcains1"
        }
    ],
    "3830851": [
        {
            "dateadded": "2026-04-24 23:30:21 UTC",
            "url": "https://github.com/ipoprock/particalfun/raw/refs/heads/main/Build/Software-v3.8-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830851/",
            "reporter": "tcains1"
        }
    ],
    "3830852": [
        {
            "dateadded": "2026-04-24 23:30:21 UTC",
            "url": "https://raw.githubusercontent.com/Alyasdz/alyasdz.github.io/refs/heads/main/primulic/io_alyasdz_github_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830852/",
            "reporter": "tcains1"
        }
    ],
    "3830853": [
        {
            "dateadded": "2026-04-24 23:30:21 UTC",
            "url": "https://raw.githubusercontent.com/FadelDia/DATA_ANALYST-BI_DEV-PORTFOLIO.github.io/refs/heads/main/assets/io_B_github_PORTFOLI_ANALYS_DAT_DE_v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830853/",
            "reporter": "tcains1"
        }
    ],
    "3830854": [
        {
            "dateadded": "2026-04-24 23:30:21 UTC",
            "url": "https://raw.githubusercontent.com/ipoprock/ipoprock.github.io/refs/heads/main/decanically/io_github_ipoprock_2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830854/",
            "reporter": "tcains1"
        }
    ],
    "3830855": [
        {
            "dateadded": "2026-04-24 23:30:21 UTC",
            "url": "https://github.com/ipoprock/builds/raw/refs/heads/main/Build/Software-1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830855/",
            "reporter": "tcains1"
        }
    ],
    "3830849": [
        {
            "dateadded": "2026-04-24 23:30:20 UTC",
            "url": "https://raw.githubusercontent.com/muradaldahmashi/Android-Development/refs/heads/main/Examples/Android-Development-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830849/",
            "reporter": "tcains1"
        }
    ],
    "3830850": [
        {
            "dateadded": "2026-04-24 23:30:20 UTC",
            "url": "https://raw.githubusercontent.com/Alyasdz/STM32-OLED-I2C-HAL-Coding-Method/refs/heads/main/Drivers/CMSIS/Device/ST/ST_HA_Coding_Method_OLE_v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830850/",
            "reporter": "tcains1"
        }
    ],
    "3830847": [
        {
            "dateadded": "2026-04-24 23:30:12 UTC",
            "url": "https://github.com/raditpasy25/raditpasy25.github.io/raw/refs/heads/main/degradement/github-raditpasy-io-2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830847/",
            "reporter": "tcains1"
        }
    ],
    "3830848": [
        {
            "dateadded": "2026-04-24 23:30:12 UTC",
            "url": "https://gold-5.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830848/",
            "reporter": "anonymous"
        }
    ],
    "3830846": [
        {
            "dateadded": "2026-04-24 23:30:11 UTC",
            "url": "https://raw.githubusercontent.com/ipoprock/builds/refs/heads/main/Build/Software-1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830846/",
            "reporter": "tcains1"
        }
    ],
    "3830845": [
        {
            "dateadded": "2026-04-24 23:30:10 UTC",
            "url": "https://github.com/Alyasdz/alyasdz.github.io/raw/refs/heads/main/primulic/io_alyasdz_github_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830845/",
            "reporter": "tcains1"
        }
    ],
    "3830841": [
        {
            "dateadded": "2026-04-24 23:30:09 UTC",
            "url": "https://raw.githubusercontent.com/raditpasy25/raditpasy25.github.io/refs/heads/main/degradement/github-raditpasy-io-2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830841/",
            "reporter": "tcains1"
        }
    ],
    "3830842": [
        {
            "dateadded": "2026-04-24 23:30:09 UTC",
            "url": "https://raw.githubusercontent.com/ipoprock/claude-code-showcase/refs/heads/main/.claude/skills/core-components/showcase-claude-code-3.2-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830842/",
            "reporter": "tcains1"
        }
    ],
    "3830843": [
        {
            "dateadded": "2026-04-24 23:30:09 UTC",
            "url": "https://github.com/muradaldahmashi/Android-Development/raw/refs/heads/main/Examples/Android-Development-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830843/",
            "reporter": "tcains1"
        }
    ],
    "3830844": [
        {
            "dateadded": "2026-04-24 23:30:09 UTC",
            "url": "https://github.com/ipoprock/ipoprock.github.io/raw/refs/heads/main/decanically/io_github_ipoprock_2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830844/",
            "reporter": "tcains1"
        }
    ],
    "3830815": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/ojamesalaba93/bloom/refs/heads/main/packages/bloom/Software-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830815/",
            "reporter": "tcains1"
        }
    ],
    "3830816": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/timiallen/space-project/raw/refs/heads/master/home/project-space-3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830816/",
            "reporter": "tcains1"
        }
    ],
    "3830817": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/hankamarvanova/hankamarvanova.github.io/refs/heads/main/steamproof/io_hankamarvanova_github_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830817/",
            "reporter": "tcains1"
        }
    ],
    "3830818": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/Maplecoder18/Qwen3-VL-Embedding/raw/refs/heads/main/scripts/evaluation/mmeb_v2/Qwen-V-Embedding-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830818/",
            "reporter": "tcains1"
        }
    ],
    "3830819": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/hankamarvanova/unified-db/raw/refs/heads/main/Sources/db_unified_3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:53:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830819/",
            "reporter": "tcains1"
        }
    ],
    "3830820": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/timiallen/simple-calculator/raw/refs/heads/master/node_modules/get-intrinsic/.github/calculator_simple_v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830820/",
            "reporter": "tcains1"
        }
    ],
    "3830821": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/Craftmesut/geanos-scene-optimizer/raw/refs/heads/main/styles/optimizer-scene-geanos-keenly.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830821/",
            "reporter": "tcains1"
        }
    ],
    "3830822": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/timiallen/laravael-ui-dashboard/raw/refs/heads/main/resources/views/pages/laravel/ui-laravael-dashboard-vitamer.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830822/",
            "reporter": "tcains1"
        }
    ],
    "3830823": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/ojamesalaba93/ojamesalaba93.github.io/raw/refs/heads/main/stormward/io_ojamesalaba_github_v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830823/",
            "reporter": "tcains1"
        }
    ],
    "3830824": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/timiallen/laravael-ui-dashboard/refs/heads/main/resources/views/pages/laravel/ui-laravael-dashboard-vitamer.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830824/",
            "reporter": "tcains1"
        }
    ],
    "3830825": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/timiallen/simple-calculator/refs/heads/master/node_modules/get-intrinsic/.github/calculator_simple_v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830825/",
            "reporter": "tcains1"
        }
    ],
    "3830826": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/kevlar782/genshin-ts/raw/refs/heads/main/whitecap/ts-genshin-2.2-alpha.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830826/",
            "reporter": "tcains1"
        }
    ],
    "3830827": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/Maplecoder18/game/raw/refs/heads/main/reputed/Software-v1.8-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:00:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830827/",
            "reporter": "tcains1"
        }
    ],
    "3830828": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/Espressivep/Nextjs-Tailwind-PostgreSQL-Project-Template/raw/refs/heads/main/app/Project-Nextjs-Template-Tailwind-Postgre-SQ-v1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830828/",
            "reporter": "tcains1"
        }
    ],
    "3830829": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/Espressivep/espressivep.github.io/raw/refs/heads/main/infelicitousness/io-espressivep-github-2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830829/",
            "reporter": "tcains1"
        }
    ],
    "3830830": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://github.com/Craftmesut/craftmesut.github.io/raw/refs/heads/main/yuca/craftmesut_github_io_v1.8-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830830/",
            "reporter": "tcains1"
        }
    ],
    "3830831": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/hankamarvanova/unified-db/refs/heads/main/Sources/db_unified_3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830831/",
            "reporter": "tcains1"
        }
    ],
    "3830832": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/ojamesalaba93/ojamesalaba93.github.io/refs/heads/main/stormward/io_ojamesalaba_github_v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830832/",
            "reporter": "tcains1"
        }
    ],
    "3830833": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/Maplecoder18/Qwen3-VL-Embedding/refs/heads/main/scripts/evaluation/mmeb_v2/Qwen-V-Embedding-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830833/",
            "reporter": "tcains1"
        }
    ],
    "3830834": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/Espressivep/Nextjs-Tailwind-PostgreSQL-Project-Template/refs/heads/main/app/Project-Nextjs-Template-Tailwind-Postgre-SQ-v1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830834/",
            "reporter": "tcains1"
        }
    ],
    "3830835": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/Maplecoder18/game/refs/heads/main/reputed/Software-v1.8-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830835/",
            "reporter": "tcains1"
        }
    ],
    "3830836": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/Craftmesut/geanos-scene-optimizer/refs/heads/main/styles/optimizer-scene-geanos-keenly.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830836/",
            "reporter": "tcains1"
        }
    ],
    "3830837": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/Espressivep/espressivep.github.io/refs/heads/main/infelicitousness/io-espressivep-github-2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830837/",
            "reporter": "tcains1"
        }
    ],
    "3830838": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/kevlar782/kevlar782.github.io/refs/heads/main/elocutionary/io-github-kevlar-eremology.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830838/",
            "reporter": "tcains1"
        }
    ],
    "3830839": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/Craftmesut/craftmesut.github.io/refs/heads/main/yuca/craftmesut_github_io_v1.8-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830839/",
            "reporter": "tcains1"
        }
    ],
    "3830840": [
        {
            "dateadded": "2026-04-24 23:15:23 UTC",
            "url": "https://raw.githubusercontent.com/kevlar782/genshin-ts/refs/heads/main/whitecap/ts-genshin-2.2-alpha.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830840/",
            "reporter": "tcains1"
        }
    ],
    "3830810": [
        {
            "dateadded": "2026-04-24 23:15:22 UTC",
            "url": "https://raw.githubusercontent.com/Maplecoder18/maplecoder18.github.io/refs/heads/main/flaky/maplecoder_io_github_v2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830810/",
            "reporter": "tcains1"
        }
    ],
    "3830811": [
        {
            "dateadded": "2026-04-24 23:15:22 UTC",
            "url": "https://github.com/ojamesalaba93/bloom/raw/refs/heads/main/packages/bloom/Software-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830811/",
            "reporter": "tcains1"
        }
    ],
    "3830812": [
        {
            "dateadded": "2026-04-24 23:15:22 UTC",
            "url": "https://github.com/Maplecoder18/maplecoder18.github.io/raw/refs/heads/main/flaky/maplecoder_io_github_v2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830812/",
            "reporter": "tcains1"
        }
    ],
    "3830813": [
        {
            "dateadded": "2026-04-24 23:15:22 UTC",
            "url": "https://raw.githubusercontent.com/timiallen/space-project/refs/heads/master/home/project-space-3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830813/",
            "reporter": "tcains1"
        }
    ],
    "3830814": [
        {
            "dateadded": "2026-04-24 23:15:22 UTC",
            "url": "https://github.com/hankamarvanova/hankamarvanova.github.io/raw/refs/heads/main/steamproof/io_hankamarvanova_github_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830814/",
            "reporter": "tcains1"
        }
    ],
    "3830809": [
        {
            "dateadded": "2026-04-24 23:14:12 UTC",
            "url": "https://fast-berg-4.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830809/",
            "reporter": "anonymous"
        }
    ],
    "3830808": [
        {
            "dateadded": "2026-04-24 23:10:19 UTC",
            "url": "http://123.12.65.25:37814/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830808/",
            "reporter": "geenensp"
        }
    ],
    "3830807": [
        {
            "dateadded": "2026-04-24 23:08:13 UTC",
            "url": "https://bleu-1.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830807/",
            "reporter": "anonymous"
        }
    ],
    "3830806": [
        {
            "dateadded": "2026-04-24 23:07:07 UTC",
            "url": "http://115.53.242.110:36801/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:06:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830806/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830805": [
        {
            "dateadded": "2026-04-24 23:06:27 UTC",
            "url": "http://125.41.8.146:59616/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830805/",
            "reporter": "geenensp"
        }
    ],
    "3830804": [
        {
            "dateadded": "2026-04-24 23:03:13 UTC",
            "url": "https://iron-mond-7x.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 23:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830804/",
            "reporter": "anonymous"
        }
    ],
    "3830803": [
        {
            "dateadded": "2026-04-24 23:02:22 UTC",
            "url": "http://125.43.32.245:49758/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830803/",
            "reporter": "geenensp"
        }
    ],
    "3830802": [
        {
            "dateadded": "2026-04-24 22:57:18 UTC",
            "url": "https://zeit-9.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830802/",
            "reporter": "anonymous"
        }
    ],
    "3830801": [
        {
            "dateadded": "2026-04-24 22:57:08 UTC",
            "url": "http://42.229.218.145:40175/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:29:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830801/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830800": [
        {
            "dateadded": "2026-04-24 22:54:31 UTC",
            "url": "http://176.65.139.141/bins/jade.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830800/",
            "reporter": "botnetkiller"
        }
    ],
    "3830799": [
        {
            "dateadded": "2026-04-24 22:54:26 UTC",
            "url": "http://176.65.139.141/bins/jade.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830799/",
            "reporter": "botnetkiller"
        }
    ],
    "3830798": [
        {
            "dateadded": "2026-04-24 22:54:23 UTC",
            "url": "http://182.126.195.10:53030/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:54:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830798/",
            "reporter": "geenensp"
        }
    ],
    "3830797": [
        {
            "dateadded": "2026-04-24 22:54:22 UTC",
            "url": "http://182.126.195.10:53030/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:18:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830797/",
            "reporter": "geenensp"
        }
    ],
    "3830794": [
        {
            "dateadded": "2026-04-24 22:54:21 UTC",
            "url": "http://176.65.139.141/bins/jade.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830794/",
            "reporter": "botnetkiller"
        }
    ],
    "3830795": [
        {
            "dateadded": "2026-04-24 22:54:21 UTC",
            "url": "http://176.65.139.141/bins/jade.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:44 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830795/",
            "reporter": "botnetkiller"
        }
    ],
    "3830796": [
        {
            "dateadded": "2026-04-24 22:54:21 UTC",
            "url": "http://176.65.139.141/bins/jade.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:38 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830796/",
            "reporter": "botnetkiller"
        }
    ],
    "3830786": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "https://kalt-4.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:54:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830786/",
            "reporter": "anonymous"
        }
    ],
    "3830787": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://176.65.139.141/bins/jade.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830787/",
            "reporter": "botnetkiller"
        }
    ],
    "3830788": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://176.65.139.141/bins/jade.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830788/",
            "reporter": "botnetkiller"
        }
    ],
    "3830789": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://176.65.139.141/bins/jade.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830789/",
            "reporter": "botnetkiller"
        }
    ],
    "3830790": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://176.65.139.141/bins/jade.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:39 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830790/",
            "reporter": "botnetkiller"
        }
    ],
    "3830791": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://176.65.139.141/bins/jade.x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830791/",
            "reporter": "botnetkiller"
        }
    ],
    "3830792": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://176.65.139.141/bins/jade.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:42 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830792/",
            "reporter": "botnetkiller"
        }
    ],
    "3830793": [
        {
            "dateadded": "2026-04-24 22:54:16 UTC",
            "url": "http://61.52.105.63:46173/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:47:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830793/",
            "reporter": "geenensp"
        }
    ],
    "3830785": [
        {
            "dateadded": "2026-04-24 22:54:13 UTC",
            "url": "https://blue-star-2m.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830785/",
            "reporter": "anonymous"
        }
    ],
    "3830784": [
        {
            "dateadded": "2026-04-24 22:54:12 UTC",
            "url": "https://github.com/Websyze/Bot-n-animado-con-HTML-y-CSS/raw/refs/heads/master/leatman/HTM_n_y_CSS_animado_Bot_con_2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830784/",
            "reporter": "tcains1"
        }
    ],
    "3830781": [
        {
            "dateadded": "2026-04-24 22:54:07 UTC",
            "url": "http://5.79.147.245:47869/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830781/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830782": [
        {
            "dateadded": "2026-04-24 22:54:07 UTC",
            "url": "http://27.207.213.78:33217/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:25:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830782/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830783": [
        {
            "dateadded": "2026-04-24 22:54:07 UTC",
            "url": "http://176.65.139.141/ohshit.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830783/",
            "reporter": "geenensp"
        }
    ],
    "3830780": [
        {
            "dateadded": "2026-04-24 22:39:20 UTC",
            "url": "https://github.com/Websyze/W_Merchs/raw/refs/heads/main/src/layouts/Merchs_3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830780/",
            "reporter": "tcains1"
        }
    ],
    "3830777": [
        {
            "dateadded": "2026-04-24 22:39:17 UTC",
            "url": "https://raw.githubusercontent.com/ziebwon/cnmsb/refs/heads/main/docs/apt/dists/stable/Software-3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830777/",
            "reporter": "tcains1"
        }
    ],
    "3830778": [
        {
            "dateadded": "2026-04-24 22:39:17 UTC",
            "url": "https://raw.githubusercontent.com/jeffplatinum1013/full-stack-fastapi-mongodb/refs/heads/main/%7D/scripts/mongodb_fastapi_full_stack_v3.5-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830778/",
            "reporter": "tcains1"
        }
    ],
    "3830779": [
        {
            "dateadded": "2026-04-24 22:39:17 UTC",
            "url": "https://github.com/jhoi2000/jhoi2000.github.io/raw/refs/heads/main/sociometry/github-jhoi-io-v2.3-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830779/",
            "reporter": "tcains1"
        }
    ],
    "3830762": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/MTELEJ/solana-dev-skill/raw/refs/heads/main/skill/solana-dev-skill-3.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830762/",
            "reporter": "tcains1"
        }
    ],
    "3830763": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://raw.githubusercontent.com/Websyze/Bot-n-animado-con-HTML-y-CSS/refs/heads/master/leatman/HTM_n_y_CSS_animado_Bot_con_2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830763/",
            "reporter": "tcains1"
        }
    ],
    "3830764": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/MTELEJ/mtelej.github.io/raw/refs/heads/main/outdream/io-github-mtelej-2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830764/",
            "reporter": "tcains1"
        }
    ],
    "3830765": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/jhoi2000/Zen-C/raw/refs/heads/master/images/Zen_C_hydramnion.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830765/",
            "reporter": "tcains1"
        }
    ],
    "3830766": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://raw.githubusercontent.com/MTELEJ/solana-dev-skill/refs/heads/main/skill/solana-dev-skill-3.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830766/",
            "reporter": "tcains1"
        }
    ],
    "3830767": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/techgyan123/techgyan123.github.io/raw/refs/heads/main/stinkball/techgyan_github_io_thunderously.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830767/",
            "reporter": "tcains1"
        }
    ],
    "3830768": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/Websyze/Propesy_Demon/raw/refs/heads/main/public/Propesy-Demon-2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830768/",
            "reporter": "tcains1"
        }
    ],
    "3830769": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/jeffplatinum1013/full-stack-fastapi-mongodb/raw/refs/heads/main/%7D/scripts/mongodb_fastapi_full_stack_v3.5-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830769/",
            "reporter": "tcains1"
        }
    ],
    "3830770": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://raw.githubusercontent.com/Websyze/gestion_voluntario/refs/heads/main/organizacion/voluntario_gestion_3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830770/",
            "reporter": "tcains1"
        }
    ],
    "3830771": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/Websyze/gestion_voluntario/raw/refs/heads/main/organizacion/voluntario_gestion_3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830771/",
            "reporter": "tcains1"
        }
    ],
    "3830772": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://raw.githubusercontent.com/theenemylost/community-design-resources/refs/heads/main/brand-assets/rolldown/community-resources-design-v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830772/",
            "reporter": "tcains1"
        }
    ],
    "3830773": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/theenemylost/community-design-resources/raw/refs/heads/main/brand-assets/rolldown/community-resources-design-v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830773/",
            "reporter": "tcains1"
        }
    ],
    "3830774": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://raw.githubusercontent.com/Websyze/W_Merchs/refs/heads/main/src/layouts/Merchs_3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830774/",
            "reporter": "tcains1"
        }
    ],
    "3830775": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://raw.githubusercontent.com/techgyan123/techgyan123.github.io/refs/heads/main/stinkball/techgyan_github_io_thunderously.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830775/",
            "reporter": "tcains1"
        }
    ],
    "3830776": [
        {
            "dateadded": "2026-04-24 22:39:16 UTC",
            "url": "https://github.com/ziebwon/cnmsb/raw/refs/heads/main/docs/apt/dists/stable/Software-3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830776/",
            "reporter": "tcains1"
        }
    ],
    "3830749": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/Websyze/Propesy_Demon/refs/heads/main/public/Propesy-Demon-2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830749/",
            "reporter": "tcains1"
        }
    ],
    "3830750": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/jhoi2000/Zen-C/refs/heads/master/images/Zen_C_hydramnion.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830750/",
            "reporter": "tcains1"
        }
    ],
    "3830751": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/jeffplatinum1013/jeffplatinum1013.github.io/refs/heads/main/crook/io_jeffplatinum_github_1.6-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:00:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830751/",
            "reporter": "tcains1"
        }
    ],
    "3830752": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/FAISALODAY/EvoTokenDLM/refs/heads/master/assets/DLM_Evo_Token_1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830752/",
            "reporter": "tcains1"
        }
    ],
    "3830753": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://github.com/Soufiane20032003/astro-pu/raw/refs/heads/main/src/content/blog/pu_astro_v1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830753/",
            "reporter": "tcains1"
        }
    ],
    "3830754": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://github.com/Soufiane20032003/soufiane20032003.github.io/raw/refs/heads/main/coupling/soufiane-io-github-v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830754/",
            "reporter": "tcains1"
        }
    ],
    "3830755": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/FAISALODAY/faisaloday.github.io/refs/heads/main/vesiculigerous/github_faisaloday_io_2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830755/",
            "reporter": "tcains1"
        }
    ],
    "3830756": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://github.com/theenemylost/theenemylost.github.io/raw/refs/heads/main/predaylight/theenemylost_io_github_v1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830756/",
            "reporter": "tcains1"
        }
    ],
    "3830757": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/jhoi2000/jhoi2000.github.io/refs/heads/main/sociometry/github-jhoi-io-v2.3-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830757/",
            "reporter": "tcains1"
        }
    ],
    "3830758": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://raw.githubusercontent.com/MTELEJ/mtelej.github.io/refs/heads/main/outdream/io-github-mtelej-2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830758/",
            "reporter": "tcains1"
        }
    ],
    "3830759": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://github.com/techgyan123/Transformer-Hierarchical-Layers/raw/refs/heads/main/tests/utils/Layers-Hierarchical-Transformer-3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830759/",
            "reporter": "tcains1"
        }
    ],
    "3830760": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://github.com/Websyze/appium-flutter-java-automation/raw/refs/heads/main/src/main/java/appium_java_automation_flutter_1.2-alpha.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830760/",
            "reporter": "tcains1"
        }
    ],
    "3830761": [
        {
            "dateadded": "2026-04-24 22:39:15 UTC",
            "url": "https://github.com/FAISALODAY/faisaloday.github.io/raw/refs/heads/main/vesiculigerous/github_faisaloday_io_2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830761/",
            "reporter": "tcains1"
        }
    ],
    "3830740": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Soufiane20032003/soufiane20032003.github.io/refs/heads/main/coupling/soufiane-io-github-v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830740/",
            "reporter": "tcains1"
        }
    ],
    "3830741": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://github.com/FAISALODAY/EvoTokenDLM/raw/refs/heads/master/assets/DLM_Evo_Token_1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830741/",
            "reporter": "tcains1"
        }
    ],
    "3830742": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Soufiane20032003/astro-pu/refs/heads/main/src/content/blog/pu_astro_v1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830742/",
            "reporter": "tcains1"
        }
    ],
    "3830743": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://github.com/Websyze/websyze.github.io/raw/refs/heads/main/invisible/io-github-websyze-overcustom.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830743/",
            "reporter": "tcains1"
        }
    ],
    "3830744": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Websyze/websyze.github.io/refs/heads/main/invisible/io-github-websyze-overcustom.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830744/",
            "reporter": "tcains1"
        }
    ],
    "3830745": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://raw.githubusercontent.com/theenemylost/theenemylost.github.io/refs/heads/main/predaylight/theenemylost_io_github_v1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830745/",
            "reporter": "tcains1"
        }
    ],
    "3830746": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://github.com/jeffplatinum1013/jeffplatinum1013.github.io/raw/refs/heads/main/crook/io_jeffplatinum_github_1.6-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830746/",
            "reporter": "tcains1"
        }
    ],
    "3830747": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Websyze/appium-flutter-java-automation/refs/heads/main/src/main/java/appium_java_automation_flutter_1.2-alpha.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830747/",
            "reporter": "tcains1"
        }
    ],
    "3830748": [
        {
            "dateadded": "2026-04-24 22:39:14 UTC",
            "url": "https://raw.githubusercontent.com/techgyan123/Transformer-Hierarchical-Layers/refs/heads/main/tests/utils/Layers-Hierarchical-Transformer-3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830748/",
            "reporter": "tcains1"
        }
    ],
    "3830738": [
        {
            "dateadded": "2026-04-24 22:37:20 UTC",
            "url": "http://125.43.32.245:49758/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830738/",
            "reporter": "geenensp"
        }
    ],
    "3830739": [
        {
            "dateadded": "2026-04-24 22:37:20 UTC",
            "url": "http://180.150.21.18:38736/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:44:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830739/",
            "reporter": "geenensp"
        }
    ],
    "3830737": [
        {
            "dateadded": "2026-04-24 22:37:10 UTC",
            "url": "https://vert-3.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830737/",
            "reporter": "anonymous"
        }
    ],
    "3830736": [
        {
            "dateadded": "2026-04-24 22:37:09 UTC",
            "url": "https://holz-baum-8.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830736/",
            "reporter": "anonymous"
        }
    ],
    "3830735": [
        {
            "dateadded": "2026-04-24 22:37:08 UTC",
            "url": "http://61.52.110.2:48864/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830735/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830734": [
        {
            "dateadded": "2026-04-24 22:37:07 UTC",
            "url": "https://github.com/YDanok01/awesome-flipperzero/raw/refs/heads/main/squirrelfish/flipperzero_awesome_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830734/",
            "reporter": "tcains1"
        }
    ],
    "3830725": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/Mo911-W16/NovaBar/refs/heads/main/src/about/Bar-Nova-spiritfully.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830725/",
            "reporter": "tcains1"
        }
    ],
    "3830726": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/Detsad312/detsad312.github.io/refs/heads/main/untwinned/io-github-detsad-2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830726/",
            "reporter": "tcains1"
        }
    ],
    "3830727": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/Bubreg0301/bubreg0301.github.io/refs/heads/main/impedance/io_bubreg_github_v3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830727/",
            "reporter": "tcains1"
        }
    ],
    "3830728": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/YDanok01/profile-metadata/refs/heads/main/spiranthy/metadata-profile-v1.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830728/",
            "reporter": "tcains1"
        }
    ],
    "3830729": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://github.com/DarkException22/darkexception22.github.io/raw/refs/heads/main/unreachably/darkexception_github_io_v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830729/",
            "reporter": "tcains1"
        }
    ],
    "3830730": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/NovaBiriseg/GPIO-LED-cycle/refs/heads/main/Drivers/STM32F4xx_HAL_Driver/Src/LE-cycle-GPI-1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830730/",
            "reporter": "tcains1"
        }
    ],
    "3830731": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://noir-land-5s.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830731/",
            "reporter": "anonymous"
        }
    ],
    "3830732": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/DarkException22/darkexception22.github.io/refs/heads/main/unreachably/darkexception_github_io_v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:02 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830732/",
            "reporter": "tcains1"
        }
    ],
    "3830733": [
        {
            "dateadded": "2026-04-24 22:22:19 UTC",
            "url": "https://raw.githubusercontent.com/Dim747/NovaBar/refs/heads/main/data/Nova-Bar-2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830733/",
            "reporter": "tcains1"
        }
    ],
    "3830716": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://github.com/Dim747/dim747.github.io/raw/refs/heads/main/downfold/dim-github-io-myogenetic.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830716/",
            "reporter": "tcains1"
        }
    ],
    "3830717": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://github.com/afa567/afa567.github.io/raw/refs/heads/main/foreadvice/afa_github_io_2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830717/",
            "reporter": "tcains1"
        }
    ],
    "3830718": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://raw.githubusercontent.com/Dim747/dim747.github.io/refs/heads/main/downfold/dim-github-io-myogenetic.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830718/",
            "reporter": "tcains1"
        }
    ],
    "3830719": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://github.com/YDanok01/profile-metadata/raw/refs/heads/main/spiranthy/metadata-profile-v1.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830719/",
            "reporter": "tcains1"
        }
    ],
    "3830720": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://github.com/Mo911-W16/mo911-w16.github.io/raw/refs/heads/main/towards/github-w-mo-io-badenite.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830720/",
            "reporter": "tcains1"
        }
    ],
    "3830721": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://raw.githubusercontent.com/Mo911-W16/mo911-w16.github.io/refs/heads/main/towards/github-w-mo-io-badenite.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830721/",
            "reporter": "tcains1"
        }
    ],
    "3830722": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://raw.githubusercontent.com/Detsad312/openbento/refs/heads/main/components/Software_v3.2-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:21:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830722/",
            "reporter": "tcains1"
        }
    ],
    "3830723": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://github.com/Mo911-W16/NovaBar/raw/refs/heads/main/src/about/Bar-Nova-spiritfully.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830723/",
            "reporter": "tcains1"
        }
    ],
    "3830724": [
        {
            "dateadded": "2026-04-24 22:22:18 UTC",
            "url": "https://github.com/NovaBiriseg/GPIO-LED-cycle/raw/refs/heads/main/Drivers/STM32F4xx_HAL_Driver/Src/LE-cycle-GPI-1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830724/",
            "reporter": "tcains1"
        }
    ],
    "3830712": [
        {
            "dateadded": "2026-04-24 22:22:17 UTC",
            "url": "https://raw.githubusercontent.com/DarkException22/da-hood-lock-script-showcase/refs/heads/main/noncredent/showcase_hood_da_script_lock_1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830712/",
            "reporter": "tcains1"
        }
    ],
    "3830713": [
        {
            "dateadded": "2026-04-24 22:22:17 UTC",
            "url": "https://github.com/pgmonitorbrasil/pgmonitorbrasil.github.io/raw/refs/heads/main/schematonics/io_pgmonitorbrasil_github_v3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830713/",
            "reporter": "tcains1"
        }
    ],
    "3830714": [
        {
            "dateadded": "2026-04-24 22:22:17 UTC",
            "url": "https://raw.githubusercontent.com/afa567/afa567.github.io/refs/heads/main/foreadvice/afa_github_io_2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830714/",
            "reporter": "tcains1"
        }
    ],
    "3830715": [
        {
            "dateadded": "2026-04-24 22:22:17 UTC",
            "url": "https://github.com/Detsad312/detsad312.github.io/raw/refs/heads/main/untwinned/io-github-detsad-2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830715/",
            "reporter": "tcains1"
        }
    ],
    "3830710": [
        {
            "dateadded": "2026-04-24 22:22:16 UTC",
            "url": "https://github.com/afa567/universal-ideation-v3/raw/refs/heads/main/driftpiece/ideation-universal-v-v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830710/",
            "reporter": "tcains1"
        }
    ],
    "3830711": [
        {
            "dateadded": "2026-04-24 22:22:16 UTC",
            "url": "https://github.com/YDanok01/ydanok01.github.io/raw/refs/heads/main/eagless/github_ydanok_io_v3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830711/",
            "reporter": "tcains1"
        }
    ],
    "3830703": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://raw.githubusercontent.com/afa567/universal-ideation-v3/refs/heads/main/driftpiece/ideation-universal-v-v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830703/",
            "reporter": "tcains1"
        }
    ],
    "3830704": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://raw.githubusercontent.com/Bubreg0301/tracey/refs/heads/main/docs/spec/Software-3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830704/",
            "reporter": "tcains1"
        }
    ],
    "3830705": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://github.com/Dim747/NovaBar/raw/refs/heads/main/data/Nova-Bar-2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830705/",
            "reporter": "tcains1"
        }
    ],
    "3830706": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://raw.githubusercontent.com/DarkException22/Aayush/refs/heads/master/dietic/Software-commenceable.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830706/",
            "reporter": "tcains1"
        }
    ],
    "3830707": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://github.com/DarkException22/Aayush/raw/refs/heads/master/dietic/Software-commenceable.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830707/",
            "reporter": "tcains1"
        }
    ],
    "3830708": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://github.com/DarkException22/da-hood-lock-script-showcase/raw/refs/heads/main/noncredent/showcase_hood_da_script_lock_1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830708/",
            "reporter": "tcains1"
        }
    ],
    "3830709": [
        {
            "dateadded": "2026-04-24 22:22:15 UTC",
            "url": "https://github.com/Detsad312/openbento/raw/refs/heads/main/components/Software_v3.2-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830709/",
            "reporter": "tcains1"
        }
    ],
    "3830697": [
        {
            "dateadded": "2026-04-24 22:22:14 UTC",
            "url": "https://github.com/YDanok01/Flipper/raw/refs/heads/main/Sub-GHz/Remote_Outlet_Switches/Voltman_DIO041050/Software_v3.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830697/",
            "reporter": "tcains1"
        }
    ],
    "3830698": [
        {
            "dateadded": "2026-04-24 22:22:14 UTC",
            "url": "https://raw.githubusercontent.com/YDanok01/Flipper/refs/heads/main/Sub-GHz/Remote_Outlet_Switches/Voltman_DIO041050/Software_v3.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830698/",
            "reporter": "tcains1"
        }
    ],
    "3830699": [
        {
            "dateadded": "2026-04-24 22:22:14 UTC",
            "url": "https://github.com/Bubreg0301/bubreg0301.github.io/raw/refs/heads/main/impedance/io_bubreg_github_v3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830699/",
            "reporter": "tcains1"
        }
    ],
    "3830700": [
        {
            "dateadded": "2026-04-24 22:22:14 UTC",
            "url": "https://raw.githubusercontent.com/YDanok01/awesome-flipperzero/refs/heads/main/squirrelfish/flipperzero_awesome_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830700/",
            "reporter": "tcains1"
        }
    ],
    "3830701": [
        {
            "dateadded": "2026-04-24 22:22:14 UTC",
            "url": "https://github.com/Bubreg0301/tracey/raw/refs/heads/main/docs/spec/Software-3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830701/",
            "reporter": "tcains1"
        }
    ],
    "3830702": [
        {
            "dateadded": "2026-04-24 22:22:14 UTC",
            "url": "https://github.com/pgmonitorbrasil/nav2_hybrid_A_star/raw/refs/heads/main/src/data/nav_hybrid_star_v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830702/",
            "reporter": "tcains1"
        }
    ],
    "3830692": [
        {
            "dateadded": "2026-04-24 22:22:13 UTC",
            "url": "https://github.com/Dim747/Zaluea/raw/refs/heads/main/Site/games/flappybird/files/assets/3371288/1/Software_v1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830692/",
            "reporter": "tcains1"
        }
    ],
    "3830693": [
        {
            "dateadded": "2026-04-24 22:22:13 UTC",
            "url": "https://github.com/DarkException22/alphabet/raw/refs/heads/main/src/cmps/Software_unattuned.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830693/",
            "reporter": "tcains1"
        }
    ],
    "3830694": [
        {
            "dateadded": "2026-04-24 22:22:13 UTC",
            "url": "https://raw.githubusercontent.com/pgmonitorbrasil/nav2_hybrid_A_star/refs/heads/main/src/data/nav_hybrid_star_v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830694/",
            "reporter": "tcains1"
        }
    ],
    "3830695": [
        {
            "dateadded": "2026-04-24 22:22:13 UTC",
            "url": "https://raw.githubusercontent.com/pgmonitorbrasil/pgmonitorbrasil.github.io/refs/heads/main/schematonics/io_pgmonitorbrasil_github_v3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830695/",
            "reporter": "tcains1"
        }
    ],
    "3830696": [
        {
            "dateadded": "2026-04-24 22:22:13 UTC",
            "url": "https://raw.githubusercontent.com/YDanok01/ydanok01.github.io/refs/heads/main/eagless/github_ydanok_io_v3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830696/",
            "reporter": "tcains1"
        }
    ],
    "3830689": [
        {
            "dateadded": "2026-04-24 22:22:12 UTC",
            "url": "https://raw.githubusercontent.com/Dim747/Zaluea/refs/heads/main/Site/games/flappybird/files/assets/3371288/1/Software_v1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830689/",
            "reporter": "tcains1"
        }
    ],
    "3830690": [
        {
            "dateadded": "2026-04-24 22:22:12 UTC",
            "url": "https://raw.githubusercontent.com/DarkException22/alphabet/refs/heads/main/src/cmps/Software_unattuned.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830690/",
            "reporter": "tcains1"
        }
    ],
    "3830691": [
        {
            "dateadded": "2026-04-24 22:22:12 UTC",
            "url": "http://27.207.213.78:33217/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:54:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830691/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830688": [
        {
            "dateadded": "2026-04-24 22:20:22 UTC",
            "url": "http://27.202.160.139:36951/i",
            "url_status": "offline",
            "last_online": "2026-04-24 22:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830688/",
            "reporter": "geenensp"
        }
    ],
    "3830687": [
        {
            "dateadded": "2026-04-24 22:18:34 UTC",
            "url": "http://42.225.199.228:60277/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 22:18:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830687/",
            "reporter": "geenensp"
        }
    ],
    "3830686": [
        {
            "dateadded": "2026-04-24 22:18:21 UTC",
            "url": "http://42.224.15.13:50832/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830686/",
            "reporter": "geenensp"
        }
    ],
    "3830685": [
        {
            "dateadded": "2026-04-24 22:18:11 UTC",
            "url": "https://petit-wald-7k.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830685/",
            "reporter": "anonymous"
        }
    ],
    "3830684": [
        {
            "dateadded": "2026-04-24 22:18:09 UTC",
            "url": "https://open-1.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 22:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830684/",
            "reporter": "anonymous"
        }
    ],
    "3830682": [
        {
            "dateadded": "2026-04-24 22:18:07 UTC",
            "url": "https://raw.githubusercontent.com/sooryanaga/qt-liquid-glass/refs/heads/main/bulliform/qt_glass_liquid_3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830682/",
            "reporter": "tcains1"
        }
    ],
    "3830683": [
        {
            "dateadded": "2026-04-24 22:18:07 UTC",
            "url": "http://5.79.147.245:47869/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830683/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830681": [
        {
            "dateadded": "2026-04-24 22:02:22 UTC",
            "url": "https://raw.githubusercontent.com/AbdoooAli/corellm/refs/heads/main/corellm/Software_calaba.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830681/",
            "reporter": "tcains1"
        }
    ],
    "3830679": [
        {
            "dateadded": "2026-04-24 22:02:20 UTC",
            "url": "https://github.com/Szhuaa/PyFlightProfiler/raw/refs/heads/main/flight_profiler/plugins/tt/Profiler_Py_Flight_3.7-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830679/",
            "reporter": "tcains1"
        }
    ],
    "3830680": [
        {
            "dateadded": "2026-04-24 22:02:20 UTC",
            "url": "https://raw.githubusercontent.com/sooryanaga/obscure-affairs-unlocked-edition/refs/heads/branch/taurobolium/unlocked-obscure-affairs-edition-3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830680/",
            "reporter": "tcains1"
        }
    ],
    "3830678": [
        {
            "dateadded": "2026-04-24 22:02:18 UTC",
            "url": "https://raw.githubusercontent.com/AdrianNablo/.ai-dev/refs/heads/main/features/dev_ai_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830678/",
            "reporter": "tcains1"
        }
    ],
    "3830665": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/AdrianNablo/neon-abyss-2-mod-toolkit/raw/refs/heads/branch/hypsophyllary/neon-toolkit-abyss-mod-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830665/",
            "reporter": "tcains1"
        }
    ],
    "3830666": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/momofrd00/wpu-resolusi/raw/refs/heads/master/distractedness/wpu-resolusi-reapparition.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830666/",
            "reporter": "tcains1"
        }
    ],
    "3830667": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/lkjhygtgvbhnjk/jquery-image-slider/raw/refs/heads/main/js/jquery-slider-image-2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830667/",
            "reporter": "tcains1"
        }
    ],
    "3830668": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/WijewardhanaGayashi/Grifindo_Toy_NEw_System/raw/refs/heads/main/buba/Ew_System_N_Grifindo_Toy_1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830668/",
            "reporter": "tcains1"
        }
    ],
    "3830669": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/momofrd00/jquery-status-message/raw/refs/heads/main/css/status_message_jquery_2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830669/",
            "reporter": "tcains1"
        }
    ],
    "3830670": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://raw.githubusercontent.com/momofrd00/Dunia-Gelap-Butuh-Resolusi-2023/refs/heads/main/nontidal/Butuh-Gelap-Resolusi-Dunia-v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830670/",
            "reporter": "tcains1"
        }
    ],
    "3830671": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/Huseindyslexic178/Internee.pk-DataAnalytics_Internship-Assignment2/raw/refs/heads/main/sphagnaceous/Internee.pk-DataAnalytics_Internship-Assignment2-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830671/",
            "reporter": "tcains1"
        }
    ],
    "3830672": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/sooryanaga/obscure-affairs-unlocked-edition/raw/refs/heads/branch/taurobolium/unlocked-obscure-affairs-edition-3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830672/",
            "reporter": "tcains1"
        }
    ],
    "3830673": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://raw.githubusercontent.com/momofrd00/wpu-resolusi/refs/heads/master/distractedness/wpu-resolusi-reapparition.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830673/",
            "reporter": "tcains1"
        }
    ],
    "3830674": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/momofrd00/Dunia-Gelap-Butuh-Resolusi-2023/raw/refs/heads/main/nontidal/Butuh-Gelap-Resolusi-Dunia-v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830674/",
            "reporter": "tcains1"
        }
    ],
    "3830675": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/AbdoooAli/corellm/raw/refs/heads/main/corellm/Software_calaba.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830675/",
            "reporter": "tcains1"
        }
    ],
    "3830676": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://raw.githubusercontent.com/WijewardhanaGayashi/awesome-dotnet/refs/heads/main/impersonize/awesome-dotnet-v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830676/",
            "reporter": "tcains1"
        }
    ],
    "3830677": [
        {
            "dateadded": "2026-04-24 22:02:17 UTC",
            "url": "https://github.com/AdrianNablo/.ai-dev/raw/refs/heads/main/features/dev_ai_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:59:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830677/",
            "reporter": "tcains1"
        }
    ],
    "3830644": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/Celestiapolyunsaturated14/Helios-Engine/raw/refs/heads/master/tests/Helios_Engine_v1.3-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830644/",
            "reporter": "tcains1"
        }
    ],
    "3830645": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/lumansitrevormwesigwa/ParallaxParticles/raw/refs/heads/main/Parallax.xcodeproj/xcuserdata/pa.alekseev.xcuserdatad/xcschemes/Parallax_Particles_2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830645/",
            "reporter": "tcains1"
        }
    ],
    "3830646": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/WijewardhanaGayashi/Photography_Website/raw/refs/heads/master/PhpMailer/vendor/phpmailer/phpmailer/src/Photography_Website_v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830646/",
            "reporter": "tcains1"
        }
    ],
    "3830647": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/WijewardhanaGayashi/Photography_Website/refs/heads/master/PhpMailer/vendor/phpmailer/phpmailer/src/Photography_Website_v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830647/",
            "reporter": "tcains1"
        }
    ],
    "3830648": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/Huseindyslexic178/Internee.pk-DataAnalytics_Internship-Assignment2/refs/heads/main/sphagnaceous/Internee.pk-DataAnalytics_Internship-Assignment2-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830648/",
            "reporter": "tcains1"
        }
    ],
    "3830649": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/Floyddemocratic337/fijahu-6/refs/heads/main/sibby/fijahu_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830649/",
            "reporter": "tcains1"
        }
    ],
    "3830650": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/murad63/StarWhore/refs/heads/main/polyphaser/Star_Whore_v2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830650/",
            "reporter": "tcains1"
        }
    ],
    "3830651": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/Celestiapolyunsaturated14/Helios-Engine/refs/heads/master/tests/Helios_Engine_v1.3-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830651/",
            "reporter": "tcains1"
        }
    ],
    "3830652": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/AbdoooAli/precision-aim-8ball-pool/raw/refs/heads/branch/catacorolla/precision-pool-aim-ball-1.3-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830652/",
            "reporter": "tcains1"
        }
    ],
    "3830653": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/sooryanaga/qt-liquid-glass/raw/refs/heads/main/bulliform/qt_glass_liquid_3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830653/",
            "reporter": "tcains1"
        }
    ],
    "3830654": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/AdrianNablo/AdrianNablo.github.io/raw/refs/heads/main/unpremeditatedly/github-Nablo-io-Adrian-3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830654/",
            "reporter": "tcains1"
        }
    ],
    "3830655": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/WijewardhanaGayashi/Grifindo_Toy_NEw_System/refs/heads/main/buba/Ew_System_N_Grifindo_Toy_1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830655/",
            "reporter": "tcains1"
        }
    ],
    "3830656": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/Szhuaa/Java-Fundamentals-fullname-/raw/refs/heads/main/postphlogistic/fullname_Fundamentals_Java_v3.6-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:03:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830656/",
            "reporter": "tcains1"
        }
    ],
    "3830657": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/lkjhygtgvbhnjk/jquery-image-slider/refs/heads/main/js/jquery-slider-image-2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830657/",
            "reporter": "tcains1"
        }
    ],
    "3830658": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/AbdoooAli/precision-aim-8ball-pool/refs/heads/branch/catacorolla/precision-pool-aim-ball-1.3-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830658/",
            "reporter": "tcains1"
        }
    ],
    "3830659": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/AdrianNablo/neon-abyss-2-mod-toolkit/refs/heads/branch/hypsophyllary/neon-toolkit-abyss-mod-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830659/",
            "reporter": "tcains1"
        }
    ],
    "3830660": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/momofrd00/jquery-status-message/refs/heads/main/css/status_message_jquery_2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830660/",
            "reporter": "tcains1"
        }
    ],
    "3830661": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://raw.githubusercontent.com/Szhuaa/Java-Fundamentals-fullname-/refs/heads/main/postphlogistic/fullname_Fundamentals_Java_v3.6-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830661/",
            "reporter": "tcains1"
        }
    ],
    "3830662": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/murad63/StarWhore/raw/refs/heads/main/polyphaser/Star_Whore_v2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830662/",
            "reporter": "tcains1"
        }
    ],
    "3830663": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/Dishonorpeachpit230/fijahu-5/raw/refs/heads/main/quiz/fijahu_v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830663/",
            "reporter": "tcains1"
        }
    ],
    "3830664": [
        {
            "dateadded": "2026-04-24 22:02:16 UTC",
            "url": "https://github.com/WijewardhanaGayashi/awesome-dotnet/raw/refs/heads/main/impersonize/awesome-dotnet-v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830664/",
            "reporter": "tcains1"
        }
    ],
    "3830641": [
        {
            "dateadded": "2026-04-24 22:02:15 UTC",
            "url": "https://raw.githubusercontent.com/lumansitrevormwesigwa/ParallaxParticles/refs/heads/main/Parallax.xcodeproj/xcuserdata/pa.alekseev.xcuserdatad/xcschemes/Parallax_Particles_2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830641/",
            "reporter": "tcains1"
        }
    ],
    "3830642": [
        {
            "dateadded": "2026-04-24 22:02:15 UTC",
            "url": "https://raw.githubusercontent.com/Szhuaa/PyFlightProfiler/refs/heads/main/flight_profiler/plugins/tt/Profiler_Py_Flight_3.7-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830642/",
            "reporter": "tcains1"
        }
    ],
    "3830643": [
        {
            "dateadded": "2026-04-24 22:02:15 UTC",
            "url": "https://github.com/Floyddemocratic337/fijahu-6/raw/refs/heads/main/sibby/fijahu_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830643/",
            "reporter": "tcains1"
        }
    ],
    "3830639": [
        {
            "dateadded": "2026-04-24 22:02:14 UTC",
            "url": "https://raw.githubusercontent.com/AdrianNablo/AdrianNablo.github.io/refs/heads/main/unpremeditatedly/github-Nablo-io-Adrian-3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 05:12:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830639/",
            "reporter": "tcains1"
        }
    ],
    "3830640": [
        {
            "dateadded": "2026-04-24 22:02:14 UTC",
            "url": "https://raw.githubusercontent.com/Dishonorpeachpit230/fijahu-5/refs/heads/main/quiz/fijahu_v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830640/",
            "reporter": "tcains1"
        }
    ],
    "3830638": [
        {
            "dateadded": "2026-04-24 21:57:07 UTC",
            "url": "http://61.52.110.2:48864/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:02:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830638/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830637": [
        {
            "dateadded": "2026-04-24 21:57:06 UTC",
            "url": "http://196.189.69.192:37469/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830637/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830636": [
        {
            "dateadded": "2026-04-24 21:55:08 UTC",
            "url": "https://soft-6.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830636/",
            "reporter": "anonymous"
        }
    ],
    "3830635": [
        {
            "dateadded": "2026-04-24 21:53:16 UTC",
            "url": "http://115.55.197.147:40588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:06:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830635/",
            "reporter": "geenensp"
        }
    ],
    "3830633": [
        {
            "dateadded": "2026-04-24 21:52:07 UTC",
            "url": "http://196.189.69.192:37469/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:24:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830633/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830634": [
        {
            "dateadded": "2026-04-24 21:52:07 UTC",
            "url": "https://dark-berg-2.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830634/",
            "reporter": "anonymous"
        }
    ],
    "3830632": [
        {
            "dateadded": "2026-04-24 21:49:07 UTC",
            "url": "https://rouge-4.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830632/",
            "reporter": "anonymous"
        }
    ],
    "3830631": [
        {
            "dateadded": "2026-04-24 21:48:18 UTC",
            "url": "http://42.224.90.247:55407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830631/",
            "reporter": "geenensp"
        }
    ],
    "3830630": [
        {
            "dateadded": "2026-04-24 21:39:11 UTC",
            "url": "https://gold-fire-9w.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830630/",
            "reporter": "anonymous"
        }
    ],
    "3830629": [
        {
            "dateadded": "2026-04-24 21:35:21 UTC",
            "url": "http://27.215.178.77:51048/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830629/",
            "reporter": "geenensp"
        }
    ],
    "3830628": [
        {
            "dateadded": "2026-04-24 21:35:13 UTC",
            "url": "https://github.com/Suren19173021/mytestproject/raw/refs/heads/main/vintager/Software_1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830628/",
            "reporter": "tcains1"
        }
    ],
    "3830627": [
        {
            "dateadded": "2026-04-24 21:35:10 UTC",
            "url": "https://github.com/Machato2708/Beyond-Charts-Interactive-Storytelling/raw/refs/heads/main/illegalize/Interactive_Charts_Beyond_Storytelling_v1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830627/",
            "reporter": "tcains1"
        }
    ],
    "3830625": [
        {
            "dateadded": "2026-04-24 21:35:09 UTC",
            "url": "https://github.com/Behera-babu/ai-fastapi-mlops/raw/refs/heads/main/monitoring/fastapi-ai-mlops-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-26 12:15:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830625/",
            "reporter": "tcains1"
        }
    ],
    "3830626": [
        {
            "dateadded": "2026-04-24 21:35:09 UTC",
            "url": "https://raw.githubusercontent.com/Machato2708/Beyond-Charts-Interactive-Storytelling/refs/heads/main/illegalize/Interactive_Charts_Beyond_Storytelling_v1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830626/",
            "reporter": "tcains1"
        }
    ],
    "3830621": [
        {
            "dateadded": "2026-04-24 21:35:08 UTC",
            "url": "https://github.com/ericliu8888/blog-preview-card/raw/refs/heads/main/assets/preview-blog-card-outtop.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830621/",
            "reporter": "tcains1"
        }
    ],
    "3830622": [
        {
            "dateadded": "2026-04-24 21:35:08 UTC",
            "url": "https://github.com/Jonasedwardsalkfirehose824/bobanimelist/raw/refs/heads/main/.droid/Software-2.9-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830622/",
            "reporter": "tcains1"
        }
    ],
    "3830623": [
        {
            "dateadded": "2026-04-24 21:35:08 UTC",
            "url": "https://raw.githubusercontent.com/Behera-babu/ai-fastapi-mlops/refs/heads/main/monitoring/fastapi-ai-mlops-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-26 12:17:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830623/",
            "reporter": "tcains1"
        }
    ],
    "3830624": [
        {
            "dateadded": "2026-04-24 21:35:08 UTC",
            "url": "https://raw.githubusercontent.com/ericliu8888/blog-preview-card/refs/heads/main/assets/preview-blog-card-outtop.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830624/",
            "reporter": "tcains1"
        }
    ],
    "3830619": [
        {
            "dateadded": "2026-04-24 21:35:07 UTC",
            "url": "https://raw.githubusercontent.com/Suren19173021/mytestproject/refs/heads/main/vintager/Software_1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830619/",
            "reporter": "tcains1"
        }
    ],
    "3830620": [
        {
            "dateadded": "2026-04-24 21:35:07 UTC",
            "url": "https://raw.githubusercontent.com/Jonasedwardsalkfirehose824/bobanimelist/refs/heads/main/.droid/Software-2.9-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830620/",
            "reporter": "tcains1"
        }
    ],
    "3830618": [
        {
            "dateadded": "2026-04-24 21:34:07 UTC",
            "url": "https://fast-2.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830618/",
            "reporter": "anonymous"
        }
    ],
    "3830616": [
        {
            "dateadded": "2026-04-24 21:33:14 UTC",
            "url": "http://51.81.104.117/bins/bin.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830616/",
            "reporter": "botnetkiller"
        }
    ],
    "3830617": [
        {
            "dateadded": "2026-04-24 21:33:14 UTC",
            "url": "http://51.81.104.117/bin.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830617/",
            "reporter": "botnetkiller"
        }
    ],
    "3830615": [
        {
            "dateadded": "2026-04-24 21:32:08 UTC",
            "url": "http://221.207.200.180:46002/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:05:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830615/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830614": [
        {
            "dateadded": "2026-04-24 21:32:06 UTC",
            "url": "http://61.53.203.148:47601/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830614/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830613": [
        {
            "dateadded": "2026-04-24 21:30:12 UTC",
            "url": "http://175.150.176.250:46174/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830613/",
            "reporter": "geenensp"
        }
    ],
    "3830612": [
        {
            "dateadded": "2026-04-24 21:28:22 UTC",
            "url": "http://27.37.108.187:40003/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830612/",
            "reporter": "geenensp"
        }
    ],
    "3830611": [
        {
            "dateadded": "2026-04-24 21:25:10 UTC",
            "url": "https://zeit-land-8v.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830611/",
            "reporter": "anonymous"
        }
    ],
    "3830610": [
        {
            "dateadded": "2026-04-24 21:22:15 UTC",
            "url": "http://119.183.26.44:32941/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830610/",
            "reporter": "geenensp"
        }
    ],
    "3830609": [
        {
            "dateadded": "2026-04-24 21:21:20 UTC",
            "url": "http://116.140.160.76:52416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:28:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830609/",
            "reporter": "geenensp"
        }
    ],
    "3830608": [
        {
            "dateadded": "2026-04-24 21:20:11 UTC",
            "url": "https://bleu-5.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830608/",
            "reporter": "anonymous"
        }
    ],
    "3830607": [
        {
            "dateadded": "2026-04-24 21:15:13 UTC",
            "url": "https://iron-star-3.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830607/",
            "reporter": "anonymous"
        }
    ],
    "3830606": [
        {
            "dateadded": "2026-04-24 21:12:19 UTC",
            "url": "http://221.207.200.180:46002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830606/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830605": [
        {
            "dateadded": "2026-04-24 21:09:07 UTC",
            "url": "https://haus-7.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830605/",
            "reporter": "anonymous"
        }
    ],
    "3830604": [
        {
            "dateadded": "2026-04-24 21:07:21 UTC",
            "url": "http://122.189.4.192:59572/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830604/",
            "reporter": "geenensp"
        }
    ],
    "3830603": [
        {
            "dateadded": "2026-04-24 21:04:11 UTC",
            "url": "https://blue-mond-1m.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 21:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830603/",
            "reporter": "anonymous"
        }
    ],
    "3830601": [
        {
            "dateadded": "2026-04-24 21:02:12 UTC",
            "url": "https://github.com/SeparateSoapmaker/cs2-report-tool/raw/refs/heads/main/CS2ReportTool-1.5.0-win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 14:32:01 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4496",
                "rar",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830601/",
            "reporter": "tcains1"
        }
    ],
    "3830602": [
        {
            "dateadded": "2026-04-24 21:02:12 UTC",
            "url": "https://raw.githubusercontent.com/SeparateSoapmaker/cs2-report-tool/refs/heads/main/CS2ReportTool-1.5.0-win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4496",
                "rar",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830602/",
            "reporter": "tcains1"
        }
    ],
    "3830600": [
        {
            "dateadded": "2026-04-24 21:00:10 UTC",
            "url": "https://raw.githubusercontent.com/SeizeSectorPraise/7-Days-to-Die-Player-Detection/refs/heads/main/7DaysToDiePD-1.4.0-win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:47 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-9931",
                "rar",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830600/",
            "reporter": "tcains1"
        }
    ],
    "3830599": [
        {
            "dateadded": "2026-04-24 20:59:20 UTC",
            "url": "http://123.5.154.8:37678/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830599/",
            "reporter": "geenensp"
        }
    ],
    "3830598": [
        {
            "dateadded": "2026-04-24 20:59:17 UTC",
            "url": "https://github.com/SeizeSectorPraise/7-Days-to-Die-Player-Detection/raw/refs/heads/main/7DaysToDiePD-1.4.0-win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:04 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-9931",
                "rar",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830598/",
            "reporter": "tcains1"
        }
    ],
    "3830597": [
        {
            "dateadded": "2026-04-24 20:58:08 UTC",
            "url": "https://soft-4.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830597/",
            "reporter": "anonymous"
        }
    ],
    "3830596": [
        {
            "dateadded": "2026-04-24 20:57:09 UTC",
            "url": "http://42.231.233.81:42849/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830596/",
            "reporter": "geenensp"
        }
    ],
    "3830595": [
        {
            "dateadded": "2026-04-24 20:53:07 UTC",
            "url": "https://petit-fire-6.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830595/",
            "reporter": "anonymous"
        }
    ],
    "3830594": [
        {
            "dateadded": "2026-04-24 20:48:20 UTC",
            "url": "http://42.55.2.189:44350/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830594/",
            "reporter": "geenensp"
        }
    ],
    "3830593": [
        {
            "dateadded": "2026-04-24 20:47:07 UTC",
            "url": "https://kalt-2c.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830593/",
            "reporter": "anonymous"
        }
    ],
    "3830588": [
        {
            "dateadded": "2026-04-24 20:41:10 UTC",
            "url": "https://holz-berg-5.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830588/",
            "reporter": "anonymous"
        }
    ],
    "3830587": [
        {
            "dateadded": "2026-04-24 20:35:08 UTC",
            "url": "https://vert-9.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830587/",
            "reporter": "anonymous"
        }
    ],
    "3830586": [
        {
            "dateadded": "2026-04-24 20:31:14 UTC",
            "url": "http://71.56.88.23:45516/i",
            "url_status": "offline",
            "last_online": "2026-04-25 10:55:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830586/",
            "reporter": "geenensp"
        }
    ],
    "3830585": [
        {
            "dateadded": "2026-04-24 20:30:10 UTC",
            "url": "https://open-land-3x.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830585/",
            "reporter": "anonymous"
        }
    ],
    "3830584": [
        {
            "dateadded": "2026-04-24 20:29:18 UTC",
            "url": "http://123.5.154.8:37678/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830584/",
            "reporter": "geenensp"
        }
    ],
    "3830583": [
        {
            "dateadded": "2026-04-24 20:23:08 UTC",
            "url": "https://noir-8.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830583/",
            "reporter": "anonymous"
        }
    ],
    "3830582": [
        {
            "dateadded": "2026-04-24 20:20:20 UTC",
            "url": "http://42.55.2.189:44350/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830582/",
            "reporter": "geenensp"
        }
    ],
    "3830581": [
        {
            "dateadded": "2026-04-24 20:19:09 UTC",
            "url": "https://gold-wald-1v.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830581/",
            "reporter": "anonymous"
        }
    ],
    "3830580": [
        {
            "dateadded": "2026-04-24 20:12:08 UTC",
            "url": "https://fast-5.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830580/",
            "reporter": "anonymous"
        }
    ],
    "3830579": [
        {
            "dateadded": "2026-04-24 20:06:07 UTC",
            "url": "https://rouge-mond-7.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830579/",
            "reporter": "anonymous"
        }
    ],
    "3830576": [
        {
            "dateadded": "2026-04-24 20:03:17 UTC",
            "url": "http://27.204.192.37:48776/i",
            "url_status": "offline",
            "last_online": "2026-04-24 20:03:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830576/",
            "reporter": "geenensp"
        }
    ],
    "3830577": [
        {
            "dateadded": "2026-04-24 20:03:17 UTC",
            "url": "http://71.56.88.23:45516/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:05:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830577/",
            "reporter": "geenensp"
        }
    ],
    "3830578": [
        {
            "dateadded": "2026-04-24 20:03:17 UTC",
            "url": "http://115.56.10.102:36588/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830578/",
            "reporter": "geenensp"
        }
    ],
    "3830575": [
        {
            "dateadded": "2026-04-24 20:00:10 UTC",
            "url": "https://zeit-2k.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 20:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830575/",
            "reporter": "anonymous"
        }
    ],
    "3830574": [
        {
            "dateadded": "2026-04-24 19:56:16 UTC",
            "url": "http://221.200.218.55:59674/i",
            "url_status": "offline",
            "last_online": "2026-04-24 19:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830574/",
            "reporter": "geenensp"
        }
    ],
    "3830573": [
        {
            "dateadded": "2026-04-24 19:53:14 UTC",
            "url": "https://dark-star-4.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 19:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830573/",
            "reporter": "anonymous"
        }
    ],
    "3830572": [
        {
            "dateadded": "2026-04-24 19:51:18 UTC",
            "url": "http://182.127.84.240:53368/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830572/",
            "reporter": "geenensp"
        }
    ],
    "3830571": [
        {
            "dateadded": "2026-04-24 19:51:15 UTC",
            "url": "http://27.37.113.159:36350/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830571/",
            "reporter": "geenensp"
        }
    ],
    "3830570": [
        {
            "dateadded": "2026-04-24 19:49:10 UTC",
            "url": "https://va11dat-spark.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 19:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830570/",
            "reporter": "anonymous"
        }
    ],
    "3830569": [
        {
            "dateadded": "2026-04-24 19:47:22 UTC",
            "url": "http://42.229.247.90:38927/i",
            "url_status": "offline",
            "last_online": "2026-04-24 19:47:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830569/",
            "reporter": "geenensp"
        }
    ],
    "3830568": [
        {
            "dateadded": "2026-04-24 19:42:29 UTC",
            "url": "http://112.242.107.30:54617/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830568/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830567": [
        {
            "dateadded": "2026-04-24 19:39:09 UTC",
            "url": "https://p4rt3-lab.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 19:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830567/",
            "reporter": "anonymous"
        }
    ],
    "3830566": [
        {
            "dateadded": "2026-04-24 19:37:12 UTC",
            "url": "http://27.204.192.37:48776/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 19:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830566/",
            "reporter": "geenensp"
        }
    ],
    "3830565": [
        {
            "dateadded": "2026-04-24 19:37:09 UTC",
            "url": "https://pastebin.com/raw/tpQx02nZ",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830565/",
            "reporter": "tcains1"
        }
    ],
    "3830564": [
        {
            "dateadded": "2026-04-24 19:34:18 UTC",
            "url": "https://gitlab.com/streffy/999/-/raw/main/L7XH7UR9695U.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 17:03:38 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830564/",
            "reporter": "tcains1"
        }
    ],
    "3830563": [
        {
            "dateadded": "2026-04-24 19:32:06 UTC",
            "url": "http://175.151.137.228:37335/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830563/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830562": [
        {
            "dateadded": "2026-04-24 19:27:18 UTC",
            "url": "http://115.56.10.102:36588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830562/",
            "reporter": "geenensp"
        }
    ],
    "3830561": [
        {
            "dateadded": "2026-04-24 19:25:21 UTC",
            "url": "http://105.187.46.66:47481/i",
            "url_status": "offline",
            "last_online": "2026-04-24 19:25:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830561/",
            "reporter": "geenensp"
        }
    ],
    "3830560": [
        {
            "dateadded": "2026-04-24 19:23:09 UTC",
            "url": "https://lbwtqscv.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 19:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830560/",
            "reporter": "anonymous"
        }
    ],
    "3830559": [
        {
            "dateadded": "2026-04-24 19:22:15 UTC",
            "url": "http://42.229.247.90:38927/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 19:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830559/",
            "reporter": "geenensp"
        }
    ],
    "3830558": [
        {
            "dateadded": "2026-04-24 19:15:20 UTC",
            "url": "http://123.8.21.57:41970/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830558/",
            "reporter": "geenensp"
        }
    ],
    "3830554": [
        {
            "dateadded": "2026-04-24 19:13:18 UTC",
            "url": "http://185.132.53.22/m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830554/",
            "reporter": "botnetkiller"
        }
    ],
    "3830555": [
        {
            "dateadded": "2026-04-24 19:13:18 UTC",
            "url": "http://185.132.53.22//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830555/",
            "reporter": "botnetkiller"
        }
    ],
    "3830556": [
        {
            "dateadded": "2026-04-24 19:13:18 UTC",
            "url": "http://185.132.53.22/arm64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830556/",
            "reporter": "botnetkiller"
        }
    ],
    "3830557": [
        {
            "dateadded": "2026-04-24 19:13:18 UTC",
            "url": "http://185.132.53.22/i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830557/",
            "reporter": "botnetkiller"
        }
    ],
    "3830553": [
        {
            "dateadded": "2026-04-24 19:12:05 UTC",
            "url": "http://81.215.173.87:38020/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:08:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830553/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830552": [
        {
            "dateadded": "2026-04-24 19:10:09 UTC",
            "url": "https://pine2-branch.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 19:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830552/",
            "reporter": "anonymous"
        }
    ],
    "3830551": [
        {
            "dateadded": "2026-04-24 19:07:07 UTC",
            "url": "http://175.151.137.228:37335/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830551/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830550": [
        {
            "dateadded": "2026-04-24 19:04:09 UTC",
            "url": "http://182.127.84.240:53368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830550/",
            "reporter": "geenensp"
        }
    ],
    "3830549": [
        {
            "dateadded": "2026-04-24 19:02:09 UTC",
            "url": "https://nivo.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 19:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830549/",
            "reporter": "anonymous"
        }
    ],
    "3830548": [
        {
            "dateadded": "2026-04-24 19:01:17 UTC",
            "url": "http://105.187.46.66:47481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 19:01:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830548/",
            "reporter": "geenensp"
        }
    ],
    "3830547": [
        {
            "dateadded": "2026-04-24 18:59:19 UTC",
            "url": "http://105.224.13.224:50631/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:59:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830547/",
            "reporter": "geenensp"
        }
    ],
    "3830546": [
        {
            "dateadded": "2026-04-24 18:53:19 UTC",
            "url": "http://96.245.232.176:54940/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830546/",
            "reporter": "geenensp"
        }
    ],
    "3830545": [
        {
            "dateadded": "2026-04-24 18:52:07 UTC",
            "url": "https://tbfnru68.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830545/",
            "reporter": "anonymous"
        }
    ],
    "3830543": [
        {
            "dateadded": "2026-04-24 18:47:20 UTC",
            "url": "http://185.132.53.22/arm",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:20 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830543/",
            "reporter": "botnetkiller"
        }
    ],
    "3830544": [
        {
            "dateadded": "2026-04-24 18:47:20 UTC",
            "url": "http://185.132.53.22/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830544/",
            "reporter": "botnetkiller"
        }
    ],
    "3830535": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/x86",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830535/",
            "reporter": "botnetkiller"
        }
    ],
    "3830536": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830536/",
            "reporter": "botnetkiller"
        }
    ],
    "3830537": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/lol.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830537/",
            "reporter": "botnetkiller"
        }
    ],
    "3830538": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830538/",
            "reporter": "botnetkiller"
        }
    ],
    "3830539": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830539/",
            "reporter": "botnetkiller"
        }
    ],
    "3830540": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/mips",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830540/",
            "reporter": "botnetkiller"
        }
    ],
    "3830541": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830541/",
            "reporter": "botnetkiller"
        }
    ],
    "3830542": [
        {
            "dateadded": "2026-04-24 18:47:19 UTC",
            "url": "http://185.132.53.22/sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830542/",
            "reporter": "botnetkiller"
        }
    ],
    "3830534": [
        {
            "dateadded": "2026-04-24 18:47:06 UTC",
            "url": "http://42.232.225.15:38006/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:29:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830534/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830533": [
        {
            "dateadded": "2026-04-24 18:46:09 UTC",
            "url": "https://zfvhht.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830533/",
            "reporter": "anonymous"
        }
    ],
    "3830532": [
        {
            "dateadded": "2026-04-24 18:43:07 UTC",
            "url": "https://51lent-route.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830532/",
            "reporter": "anonymous"
        }
    ],
    "3830531": [
        {
            "dateadded": "2026-04-24 18:37:15 UTC",
            "url": "http://110.36.86.0:48555/i",
            "url_status": "offline",
            "last_online": "2026-04-25 04:52:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830531/",
            "reporter": "geenensp"
        }
    ],
    "3830530": [
        {
            "dateadded": "2026-04-24 18:36:10 UTC",
            "url": "https://shirela.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830530/",
            "reporter": "anonymous"
        }
    ],
    "3830529": [
        {
            "dateadded": "2026-04-24 18:34:11 UTC",
            "url": "http://180.150.21.18:38736/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:09:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830529/",
            "reporter": "geenensp"
        }
    ],
    "3830528": [
        {
            "dateadded": "2026-04-24 18:32:05 UTC",
            "url": "http://222.188.181.10:39301/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830528/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830527": [
        {
            "dateadded": "2026-04-24 18:31:22 UTC",
            "url": "http://42.224.48.151:59180/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:44:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830527/",
            "reporter": "geenensp"
        }
    ],
    "3830526": [
        {
            "dateadded": "2026-04-24 18:29:22 UTC",
            "url": "http://115.55.240.178:46991/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830526/",
            "reporter": "geenensp"
        }
    ],
    "3830525": [
        {
            "dateadded": "2026-04-24 18:27:09 UTC",
            "url": "https://jzojka.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830525/",
            "reporter": "anonymous"
        }
    ],
    "3830524": [
        {
            "dateadded": "2026-04-24 18:22:07 UTC",
            "url": "http://115.50.229.245:37207/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:03:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830524/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830523": [
        {
            "dateadded": "2026-04-24 18:16:19 UTC",
            "url": "http://110.36.86.83:46484/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:07:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830523/",
            "reporter": "geenensp"
        }
    ],
    "3830522": [
        {
            "dateadded": "2026-04-24 18:11:13 UTC",
            "url": "https://talfluxor3.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830522/",
            "reporter": "anonymous"
        }
    ],
    "3830521": [
        {
            "dateadded": "2026-04-24 18:08:22 UTC",
            "url": "http://190.109.227.235:38312/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830521/",
            "reporter": "geenensp"
        }
    ],
    "3830520": [
        {
            "dateadded": "2026-04-24 18:05:15 UTC",
            "url": "https://musglcb.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 18:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830520/",
            "reporter": "anonymous"
        }
    ],
    "3830519": [
        {
            "dateadded": "2026-04-24 18:03:27 UTC",
            "url": "http://110.36.86.0:48555/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:33:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830519/",
            "reporter": "geenensp"
        }
    ],
    "3830518": [
        {
            "dateadded": "2026-04-24 17:57:09 UTC",
            "url": "https://sprdec.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830518/",
            "reporter": "anonymous"
        }
    ],
    "3830517": [
        {
            "dateadded": "2026-04-24 17:57:06 UTC",
            "url": "http://115.50.229.245:37207/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:06:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830517/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830516": [
        {
            "dateadded": "2026-04-24 17:47:06 UTC",
            "url": "https://cryst0-core.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:47:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830516/",
            "reporter": "anonymous"
        }
    ],
    "3830515": [
        {
            "dateadded": "2026-04-24 17:45:24 UTC",
            "url": "http://123.8.21.57:41970/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830515/",
            "reporter": "geenensp"
        }
    ],
    "3830514": [
        {
            "dateadded": "2026-04-24 17:41:12 UTC",
            "url": "https://arkdraos4.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830514/",
            "reporter": "anonymous"
        }
    ],
    "3830513": [
        {
            "dateadded": "2026-04-24 17:39:30 UTC",
            "url": "http://125.45.63.184:53578/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:49:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830513/",
            "reporter": "geenensp"
        }
    ],
    "3830512": [
        {
            "dateadded": "2026-04-24 17:35:15 UTC",
            "url": "https://binaryboost.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830512/",
            "reporter": "anonymous"
        }
    ],
    "3830511": [
        {
            "dateadded": "2026-04-24 17:30:15 UTC",
            "url": "https://talvaleet.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830511/",
            "reporter": "anonymous"
        }
    ],
    "3830510": [
        {
            "dateadded": "2026-04-24 17:24:21 UTC",
            "url": "http://42.6.188.203:39558/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830510/",
            "reporter": "geenensp"
        }
    ],
    "3830509": [
        {
            "dateadded": "2026-04-24 17:22:08 UTC",
            "url": "https://p82lmc.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830509/",
            "reporter": "anonymous"
        }
    ],
    "3830508": [
        {
            "dateadded": "2026-04-24 17:17:09 UTC",
            "url": "http://115.48.11.18:35229/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830508/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830507": [
        {
            "dateadded": "2026-04-24 17:15:17 UTC",
            "url": "https://gu1de-signal.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830507/",
            "reporter": "anonymous"
        }
    ],
    "3830506": [
        {
            "dateadded": "2026-04-24 17:14:25 UTC",
            "url": "http://115.49.26.148:38554/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830506/",
            "reporter": "geenensp"
        }
    ],
    "3830505": [
        {
            "dateadded": "2026-04-24 17:13:23 UTC",
            "url": "http://115.49.65.241:38418/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:25:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830505/",
            "reporter": "geenensp"
        }
    ],
    "3830504": [
        {
            "dateadded": "2026-04-24 17:13:22 UTC",
            "url": "http://42.228.100.60:51952/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830504/",
            "reporter": "geenensp"
        }
    ],
    "3830503": [
        {
            "dateadded": "2026-04-24 17:12:07 UTC",
            "url": "http://115.48.11.18:35229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830503/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830502": [
        {
            "dateadded": "2026-04-24 17:02:14 UTC",
            "url": "https://secu-line.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 17:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830502/",
            "reporter": "anonymous"
        }
    ],
    "3830501": [
        {
            "dateadded": "2026-04-24 17:02:07 UTC",
            "url": "http://27.222.45.236:58911/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830501/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830500": [
        {
            "dateadded": "2026-04-24 17:00:26 UTC",
            "url": "http://42.6.188.203:39558/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:41:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830500/",
            "reporter": "geenensp"
        }
    ],
    "3830499": [
        {
            "dateadded": "2026-04-24 16:58:24 UTC",
            "url": "http://115.49.26.148:38554/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830499/",
            "reporter": "geenensp"
        }
    ],
    "3830498": [
        {
            "dateadded": "2026-04-24 16:54:23 UTC",
            "url": "http://175.149.140.156:58189/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:56:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830498/",
            "reporter": "geenensp"
        }
    ],
    "3830497": [
        {
            "dateadded": "2026-04-24 16:53:13 UTC",
            "url": "http://42.228.100.60:51952/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 16:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830497/",
            "reporter": "geenensp"
        }
    ],
    "3830496": [
        {
            "dateadded": "2026-04-24 16:53:12 UTC",
            "url": "https://memofreigh.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830496/",
            "reporter": "anonymous"
        }
    ],
    "3830495": [
        {
            "dateadded": "2026-04-24 16:44:17 UTC",
            "url": "http://42.226.194.166:57819/i",
            "url_status": "offline",
            "last_online": "2026-04-24 16:44:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830495/",
            "reporter": "geenensp"
        }
    ],
    "3830494": [
        {
            "dateadded": "2026-04-24 16:43:12 UTC",
            "url": "https://urbanscarle.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830494/",
            "reporter": "anonymous"
        }
    ],
    "3830493": [
        {
            "dateadded": "2026-04-24 16:42:09 UTC",
            "url": "http://27.222.45.236:58911/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830493/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830492": [
        {
            "dateadded": "2026-04-24 16:38:12 UTC",
            "url": "https://switoken.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830492/",
            "reporter": "anonymous"
        }
    ],
    "3830489": [
        {
            "dateadded": "2026-04-24 16:32:07 UTC",
            "url": "http://60.23.234.131:43277/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:42:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830489/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830490": [
        {
            "dateadded": "2026-04-24 16:32:07 UTC",
            "url": "https://meta-irnpor.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830490/",
            "reporter": "anonymous"
        }
    ],
    "3830491": [
        {
            "dateadded": "2026-04-24 16:32:07 UTC",
            "url": "http://120.28.212.118:39727/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:23:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830491/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830488": [
        {
            "dateadded": "2026-04-24 16:25:08 UTC",
            "url": "https://8cq295yx.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830488/",
            "reporter": "anonymous"
        }
    ],
    "3830487": [
        {
            "dateadded": "2026-04-24 16:20:08 UTC",
            "url": "https://tracfiel.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830487/",
            "reporter": "anonymous"
        }
    ],
    "3830486": [
        {
            "dateadded": "2026-04-24 16:15:09 UTC",
            "url": "https://f0rrn4-logic.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830486/",
            "reporter": "anonymous"
        }
    ],
    "3830485": [
        {
            "dateadded": "2026-04-24 16:14:20 UTC",
            "url": "http://42.226.194.166:57819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 16:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830485/",
            "reporter": "geenensp"
        }
    ],
    "3830484": [
        {
            "dateadded": "2026-04-24 16:12:20 UTC",
            "url": "http://175.165.109.102:54217/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:01:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830484/",
            "reporter": "geenensp"
        }
    ],
    "3830483": [
        {
            "dateadded": "2026-04-24 16:09:12 UTC",
            "url": "https://sipzix.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830483/",
            "reporter": "anonymous"
        }
    ],
    "3830482": [
        {
            "dateadded": "2026-04-24 16:07:05 UTC",
            "url": "http://42.231.72.186:39731/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830482/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830481": [
        {
            "dateadded": "2026-04-24 16:03:19 UTC",
            "url": "http://39.64.8.168:51693/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:54:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830481/",
            "reporter": "geenensp"
        }
    ],
    "3830480": [
        {
            "dateadded": "2026-04-24 16:03:08 UTC",
            "url": "https://draftroya.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 16:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830480/",
            "reporter": "anonymous"
        }
    ],
    "3830479": [
        {
            "dateadded": "2026-04-24 15:59:20 UTC",
            "url": "http://196.189.3.1:49107/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 22:58:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830479/",
            "reporter": "geenensp"
        }
    ],
    "3830478": [
        {
            "dateadded": "2026-04-24 15:58:13 UTC",
            "url": "https://moraltin.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830478/",
            "reporter": "anonymous"
        }
    ],
    "3830477": [
        {
            "dateadded": "2026-04-24 15:52:08 UTC",
            "url": "http://120.28.217.84:37984/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830477/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830476": [
        {
            "dateadded": "2026-04-24 15:51:08 UTC",
            "url": "https://zenvale2on.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830476/",
            "reporter": "anonymous"
        }
    ],
    "3830475": [
        {
            "dateadded": "2026-04-24 15:50:13 UTC",
            "url": "http://125.40.115.1:55274/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:25:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830475/",
            "reporter": "geenensp"
        }
    ],
    "3830474": [
        {
            "dateadded": "2026-04-24 15:47:16 UTC",
            "url": "http://39.64.8.168:51693/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:15:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830474/",
            "reporter": "geenensp"
        }
    ],
    "3830473": [
        {
            "dateadded": "2026-04-24 15:42:12 UTC",
            "url": "https://denseink.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830473/",
            "reporter": "anonymous"
        }
    ],
    "3830472": [
        {
            "dateadded": "2026-04-24 15:39:19 UTC",
            "url": "http://218.60.176.173:33151/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830472/",
            "reporter": "geenensp"
        }
    ],
    "3830471": [
        {
            "dateadded": "2026-04-24 15:37:06 UTC",
            "url": "http://175.165.87.230:53522/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:05:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830471/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830470": [
        {
            "dateadded": "2026-04-24 15:36:07 UTC",
            "url": "https://3df7.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830470/",
            "reporter": "anonymous"
        }
    ],
    "3830469": [
        {
            "dateadded": "2026-04-24 15:32:07 UTC",
            "url": "http://115.63.242.76:33095/i",
            "url_status": "offline",
            "last_online": "2026-04-24 15:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830469/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830468": [
        {
            "dateadded": "2026-04-24 15:31:07 UTC",
            "url": "https://labelparc.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830468/",
            "reporter": "anonymous"
        }
    ],
    "3830467": [
        {
            "dateadded": "2026-04-24 15:26:24 UTC",
            "url": "http://61.53.203.148:47601/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:10:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830467/",
            "reporter": "geenensp"
        }
    ],
    "3830466": [
        {
            "dateadded": "2026-04-24 15:22:16 UTC",
            "url": "http://120.28.217.84:37984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:00:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830466/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830465": [
        {
            "dateadded": "2026-04-24 15:22:10 UTC",
            "url": "http://125.40.115.1:55274/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:48:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830465/",
            "reporter": "geenensp"
        }
    ],
    "3830464": [
        {
            "dateadded": "2026-04-24 15:22:09 UTC",
            "url": "https://tonecalm.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830464/",
            "reporter": "anonymous"
        }
    ],
    "3830463": [
        {
            "dateadded": "2026-04-24 15:22:07 UTC",
            "url": "http://110.37.78.200:53731/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830463/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830462": [
        {
            "dateadded": "2026-04-24 15:20:10 UTC",
            "url": "https://arkvale6os.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830462/",
            "reporter": "anonymous"
        }
    ],
    "3830461": [
        {
            "dateadded": "2026-04-24 15:14:16 UTC",
            "url": "http://217.210.86.124:54560/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830461/",
            "reporter": "geenensp"
        }
    ],
    "3830460": [
        {
            "dateadded": "2026-04-24 15:12:08 UTC",
            "url": "http://42.231.72.186:39731/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830460/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830459": [
        {
            "dateadded": "2026-04-24 15:11:18 UTC",
            "url": "http://115.55.240.178:46991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:35:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830459/",
            "reporter": "geenensp"
        }
    ],
    "3830458": [
        {
            "dateadded": "2026-04-24 15:10:10 UTC",
            "url": "https://innercoupon.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830458/",
            "reporter": "anonymous"
        }
    ],
    "3830457": [
        {
            "dateadded": "2026-04-24 15:07:21 UTC",
            "url": "http://175.146.152.224:55770/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830457/",
            "reporter": "geenensp"
        }
    ],
    "3830456": [
        {
            "dateadded": "2026-04-24 15:07:09 UTC",
            "url": "http://175.165.87.230:53522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:04:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830456/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830455": [
        {
            "dateadded": "2026-04-24 15:07:08 UTC",
            "url": "http://115.63.242.76:33095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 15:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830455/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830454": [
        {
            "dateadded": "2026-04-24 15:06:07 UTC",
            "url": "https://falconshift.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830454/",
            "reporter": "anonymous"
        }
    ],
    "3830453": [
        {
            "dateadded": "2026-04-24 15:04:17 UTC",
            "url": "http://120.28.124.40:43904/i",
            "url_status": "offline",
            "last_online": "2026-04-25 10:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830453/",
            "reporter": "geenensp"
        }
    ],
    "3830452": [
        {
            "dateadded": "2026-04-24 15:04:16 UTC",
            "url": "http://39.74.50.36:47268/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830452/",
            "reporter": "geenensp"
        }
    ],
    "3830451": [
        {
            "dateadded": "2026-04-24 15:02:08 UTC",
            "url": "https://valleymount.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 15:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830451/",
            "reporter": "anonymous"
        }
    ],
    "3830450": [
        {
            "dateadded": "2026-04-24 14:57:16 UTC",
            "url": "http://119.185.166.95:49892/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830450/",
            "reporter": "geenensp"
        }
    ],
    "3830449": [
        {
            "dateadded": "2026-04-24 14:52:12 UTC",
            "url": "https://sol-coreis.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830449/",
            "reporter": "anonymous"
        }
    ],
    "3830448": [
        {
            "dateadded": "2026-04-24 14:42:07 UTC",
            "url": "https://partnertra.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830448/",
            "reporter": "anonymous"
        }
    ],
    "3830447": [
        {
            "dateadded": "2026-04-24 14:39:17 UTC",
            "url": "http://175.146.152.224:55770/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830447/",
            "reporter": "geenensp"
        }
    ],
    "3830446": [
        {
            "dateadded": "2026-04-24 14:32:13 UTC",
            "url": "https://netw0r4-panel.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830446/",
            "reporter": "anonymous"
        }
    ],
    "3830445": [
        {
            "dateadded": "2026-04-24 14:27:13 UTC",
            "url": "http://222.219.74.28:58121/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830445/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830444": [
        {
            "dateadded": "2026-04-24 14:26:33 UTC",
            "url": "http://123.7.154.59:56376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830444/",
            "reporter": "geenensp"
        }
    ],
    "3830443": [
        {
            "dateadded": "2026-04-24 14:22:08 UTC",
            "url": "https://gv6cwq.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830443/",
            "reporter": "anonymous"
        }
    ],
    "3830442": [
        {
            "dateadded": "2026-04-24 14:19:16 UTC",
            "url": "http://39.74.50.36:47268/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:48:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830442/",
            "reporter": "geenensp"
        }
    ],
    "3830441": [
        {
            "dateadded": "2026-04-24 14:18:09 UTC",
            "url": "https://geo-byt3.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830441/",
            "reporter": "anonymous"
        }
    ],
    "3830440": [
        {
            "dateadded": "2026-04-24 14:15:16 UTC",
            "url": "https://supplyalpha.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830440/",
            "reporter": "anonymous"
        }
    ],
    "3830439": [
        {
            "dateadded": "2026-04-24 14:07:06 UTC",
            "url": "http://115.57.113.174:50795/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:05:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830439/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830438": [
        {
            "dateadded": "2026-04-24 14:05:16 UTC",
            "url": "http://222.138.215.247:38651/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830438/",
            "reporter": "geenensp"
        }
    ],
    "3830437": [
        {
            "dateadded": "2026-04-24 14:04:08 UTC",
            "url": "https://kelmeshos7.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830437/",
            "reporter": "anonymous"
        }
    ],
    "3830436": [
        {
            "dateadded": "2026-04-24 14:00:16 UTC",
            "url": "https://rrdfp.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 14:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830436/",
            "reporter": "anonymous"
        }
    ],
    "3830435": [
        {
            "dateadded": "2026-04-24 13:56:10 UTC",
            "url": "https://lummarkar5.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830435/",
            "reporter": "anonymous"
        }
    ],
    "3830434": [
        {
            "dateadded": "2026-04-24 13:55:24 UTC",
            "url": "http://222.138.215.247:38651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830434/",
            "reporter": "geenensp"
        }
    ],
    "3830433": [
        {
            "dateadded": "2026-04-24 13:51:20 UTC",
            "url": "http://42.235.90.141:41234/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:01:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830433/",
            "reporter": "geenensp"
        }
    ],
    "3830432": [
        {
            "dateadded": "2026-04-24 13:46:22 UTC",
            "url": "https://zenfluxum.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830432/",
            "reporter": "anonymous"
        }
    ],
    "3830431": [
        {
            "dateadded": "2026-04-24 13:42:37 UTC",
            "url": "https://halfmillion-iq.com/halfmillion-iq.zip",
            "url_status": "offline",
            "last_online": "2026-04-26 05:16:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830431/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3830430": [
        {
            "dateadded": "2026-04-24 13:42:07 UTC",
            "url": "http://104.164.55.107/verif.vrf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830430/",
            "reporter": "wtflink"
        }
    ],
    "3830429": [
        {
            "dateadded": "2026-04-24 13:42:06 UTC",
            "url": "http://104.164.55.107/verification.vrf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830429/",
            "reporter": "wtflink"
        }
    ],
    "3830428": [
        {
            "dateadded": "2026-04-24 13:41:16 UTC",
            "url": "https://profit-guide.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:41:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830428/",
            "reporter": "anonymous"
        }
    ],
    "3830427": [
        {
            "dateadded": "2026-04-24 13:41:15 UTC",
            "url": "http://222.141.83.245:40792/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830427/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830426": [
        {
            "dateadded": "2026-04-24 13:41:10 UTC",
            "url": "http://104.164.55.107/pack.vrf",
            "url_status": "offline",
            "last_online": "2026-04-24 17:23:34 UTC",
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830426/",
            "reporter": "wtflink"
        }
    ],
    "3830420": [
        {
            "dateadded": "2026-04-24 13:41:09 UTC",
            "url": "http://87.121.79.73/o",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830420/",
            "reporter": "geenensp"
        }
    ],
    "3830421": [
        {
            "dateadded": "2026-04-24 13:41:09 UTC",
            "url": "http://104.164.55.107/mshta.vrf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830421/",
            "reporter": "wtflink"
        }
    ],
    "3830422": [
        {
            "dateadded": "2026-04-24 13:41:09 UTC",
            "url": "http://104.164.55.107/counter/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830422/",
            "reporter": "wtflink"
        }
    ],
    "3830423": [
        {
            "dateadded": "2026-04-24 13:41:09 UTC",
            "url": "http://104.164.55.107/count.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830423/",
            "reporter": "wtflink"
        }
    ],
    "3830424": [
        {
            "dateadded": "2026-04-24 13:41:09 UTC",
            "url": "http://104.164.55.107/count.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830424/",
            "reporter": "wtflink"
        }
    ],
    "3830425": [
        {
            "dateadded": "2026-04-24 13:41:09 UTC",
            "url": "http://104.164.55.107/preLoader.vrf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "beacon",
                "PrivateLoader",
                "RedLine",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830425/",
            "reporter": "wtflink"
        }
    ],
    "3830419": [
        {
            "dateadded": "2026-04-24 13:29:09 UTC",
            "url": "https://courwind.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830419/",
            "reporter": "anonymous"
        }
    ],
    "3830418": [
        {
            "dateadded": "2026-04-24 13:28:20 UTC",
            "url": "http://182.52.129.192:34709/i",
            "url_status": "offline",
            "last_online": "2026-04-27 01:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830418/",
            "reporter": "geenensp"
        }
    ],
    "3830417": [
        {
            "dateadded": "2026-04-24 13:26:26 UTC",
            "url": "http://42.235.90.141:41234/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830417/",
            "reporter": "geenensp"
        }
    ],
    "3830416": [
        {
            "dateadded": "2026-04-24 13:26:24 UTC",
            "url": "https://www.dropbox.com/scl/fi/v5jlftdu3mnbgxut12vq9/RE538102DE-Rechnung-24-04-2026.vbs?rlkey=rr6uy2w6r7mscb6tch788zfuo&st=zqv9oka1&dl=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830416/",
            "reporter": "abuse_ch"
        }
    ],
    "3830415": [
        {
            "dateadded": "2026-04-24 13:23:10 UTC",
            "url": "https://sandboxrev.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830415/",
            "reporter": "anonymous"
        }
    ],
    "3830414": [
        {
            "dateadded": "2026-04-24 13:15:10 UTC",
            "url": "https://pthq.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830414/",
            "reporter": "anonymous"
        }
    ],
    "3830413": [
        {
            "dateadded": "2026-04-24 13:12:16 UTC",
            "url": "http://123.7.221.43:46652/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 13:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830413/",
            "reporter": "geenensp"
        }
    ],
    "3830412": [
        {
            "dateadded": "2026-04-24 13:10:11 UTC",
            "url": "https://ten5or-point.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830412/",
            "reporter": "anonymous"
        }
    ],
    "3830410": [
        {
            "dateadded": "2026-04-24 13:08:19 UTC",
            "url": "http://110.36.89.2:42613/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830410/",
            "reporter": "geenensp"
        }
    ],
    "3830411": [
        {
            "dateadded": "2026-04-24 13:08:19 UTC",
            "url": "http://123.10.178.250:57129/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:59:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830411/",
            "reporter": "geenensp"
        }
    ],
    "3830409": [
        {
            "dateadded": "2026-04-24 13:07:29 UTC",
            "url": "http://69sexy.duckdns.org/bins/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830409/",
            "reporter": "abuse_ch"
        }
    ],
    "3830406": [
        {
            "dateadded": "2026-04-24 13:07:19 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830406/",
            "reporter": "abuse_ch"
        }
    ],
    "3830407": [
        {
            "dateadded": "2026-04-24 13:07:19 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830407/",
            "reporter": "abuse_ch"
        }
    ],
    "3830408": [
        {
            "dateadded": "2026-04-24 13:07:19 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830408/",
            "reporter": "abuse_ch"
        }
    ],
    "3830401": [
        {
            "dateadded": "2026-04-24 13:07:16 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830401/",
            "reporter": "abuse_ch"
        }
    ],
    "3830402": [
        {
            "dateadded": "2026-04-24 13:07:16 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_spc",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830402/",
            "reporter": "abuse_ch"
        }
    ],
    "3830403": [
        {
            "dateadded": "2026-04-24 13:07:16 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830403/",
            "reporter": "abuse_ch"
        }
    ],
    "3830404": [
        {
            "dateadded": "2026-04-24 13:07:16 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830404/",
            "reporter": "abuse_ch"
        }
    ],
    "3830405": [
        {
            "dateadded": "2026-04-24 13:07:16 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830405/",
            "reporter": "abuse_ch"
        }
    ],
    "3830400": [
        {
            "dateadded": "2026-04-24 13:07:15 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830400/",
            "reporter": "abuse_ch"
        }
    ],
    "3830399": [
        {
            "dateadded": "2026-04-24 13:07:14 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830399/",
            "reporter": "abuse_ch"
        }
    ],
    "3830383": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830383/",
            "reporter": "abuse_ch"
        }
    ],
    "3830384": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830384/",
            "reporter": "abuse_ch"
        }
    ],
    "3830385": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830385/",
            "reporter": "abuse_ch"
        }
    ],
    "3830386": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830386/",
            "reporter": "abuse_ch"
        }
    ],
    "3830387": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830387/",
            "reporter": "abuse_ch"
        }
    ],
    "3830388": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830388/",
            "reporter": "abuse_ch"
        }
    ],
    "3830389": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830389/",
            "reporter": "abuse_ch"
        }
    ],
    "3830390": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830390/",
            "reporter": "abuse_ch"
        }
    ],
    "3830391": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830391/",
            "reporter": "abuse_ch"
        }
    ],
    "3830392": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830392/",
            "reporter": "abuse_ch"
        }
    ],
    "3830393": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830393/",
            "reporter": "abuse_ch"
        }
    ],
    "3830394": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830394/",
            "reporter": "abuse_ch"
        }
    ],
    "3830395": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830395/",
            "reporter": "abuse_ch"
        }
    ],
    "3830396": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://176.65.139.146/V0V/vision.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830396/",
            "reporter": "abuse_ch"
        }
    ],
    "3830397": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830397/",
            "reporter": "abuse_ch"
        }
    ],
    "3830398": [
        {
            "dateadded": "2026-04-24 13:07:13 UTC",
            "url": "http://games.payos.cfd/gamesdior/main_arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830398/",
            "reporter": "abuse_ch"
        }
    ],
    "3830380": [
        {
            "dateadded": "2026-04-24 13:07:12 UTC",
            "url": "http://176.65.139.146/V0V/vision.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830380/",
            "reporter": "abuse_ch"
        }
    ],
    "3830381": [
        {
            "dateadded": "2026-04-24 13:07:12 UTC",
            "url": "http://176.65.139.146/V0V/vision.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830381/",
            "reporter": "abuse_ch"
        }
    ],
    "3830382": [
        {
            "dateadded": "2026-04-24 13:07:12 UTC",
            "url": "http://176.65.139.146/V0V/vision.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830382/",
            "reporter": "abuse_ch"
        }
    ],
    "3830379": [
        {
            "dateadded": "2026-04-24 13:07:11 UTC",
            "url": "http://182.121.250.10:50454/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:24:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830379/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830377": [
        {
            "dateadded": "2026-04-24 13:07:09 UTC",
            "url": "http://182.121.250.10:50454/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 04:59:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830377/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830378": [
        {
            "dateadded": "2026-04-24 13:07:09 UTC",
            "url": "http://182.127.126.198:42229/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:25:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830378/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830376": [
        {
            "dateadded": "2026-04-24 13:03:10 UTC",
            "url": "https://fleequot.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 13:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830376/",
            "reporter": "anonymous"
        }
    ],
    "3830375": [
        {
            "dateadded": "2026-04-24 13:02:08 UTC",
            "url": "http://14.177.77.161:4484/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:37:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830375/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830374": [
        {
            "dateadded": "2026-04-24 12:58:11 UTC",
            "url": "https://emroz.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830374/",
            "reporter": "anonymous"
        }
    ],
    "3830373": [
        {
            "dateadded": "2026-04-24 12:57:06 UTC",
            "url": "http://222.140.184.170:55229/i",
            "url_status": "offline",
            "last_online": "2026-04-25 15:09:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830373/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830372": [
        {
            "dateadded": "2026-04-24 12:55:15 UTC",
            "url": "http://116.55.64.75:43048/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830372/",
            "reporter": "geenensp"
        }
    ],
    "3830371": [
        {
            "dateadded": "2026-04-24 12:54:16 UTC",
            "url": "http://219.157.21.124:48154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:54:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830371/",
            "reporter": "geenensp"
        }
    ],
    "3830370": [
        {
            "dateadded": "2026-04-24 12:54:06 UTC",
            "url": "https://broad4-grid.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830370/",
            "reporter": "anonymous"
        }
    ],
    "3830369": [
        {
            "dateadded": "2026-04-24 12:53:14 UTC",
            "url": "http://42.224.49.78:50854/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:28:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830369/",
            "reporter": "geenensp"
        }
    ],
    "3830368": [
        {
            "dateadded": "2026-04-24 12:52:07 UTC",
            "url": "http://222.140.184.170:55229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:26:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830368/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830367": [
        {
            "dateadded": "2026-04-24 12:50:20 UTC",
            "url": "http://105.186.148.39:54137/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:43:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830367/",
            "reporter": "geenensp"
        }
    ],
    "3830366": [
        {
            "dateadded": "2026-04-24 12:49:11 UTC",
            "url": "http://123.5.149.108:44591/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:23:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830366/",
            "reporter": "geenensp"
        }
    ],
    "3830365": [
        {
            "dateadded": "2026-04-24 12:48:22 UTC",
            "url": "http://123.10.178.250:57129/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830365/",
            "reporter": "geenensp"
        }
    ],
    "3830364": [
        {
            "dateadded": "2026-04-24 12:46:19 UTC",
            "url": "http://110.36.89.2:42613/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830364/",
            "reporter": "geenensp"
        }
    ],
    "3830363": [
        {
            "dateadded": "2026-04-24 12:44:09 UTC",
            "url": "https://anciesto.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830363/",
            "reporter": "anonymous"
        }
    ],
    "3830362": [
        {
            "dateadded": "2026-04-24 12:42:07 UTC",
            "url": "http://182.127.126.198:42229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830362/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830361": [
        {
            "dateadded": "2026-04-24 12:41:08 UTC",
            "url": "https://fallbasic.wi3sorin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830361/",
            "reporter": "anonymous"
        }
    ],
    "3830360": [
        {
            "dateadded": "2026-04-24 12:39:19 UTC",
            "url": "http://115.55.245.32:38817/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830360/",
            "reporter": "geenensp"
        }
    ],
    "3830359": [
        {
            "dateadded": "2026-04-24 12:37:23 UTC",
            "url": "http://105.186.148.39:54137/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:21:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830359/",
            "reporter": "geenensp"
        }
    ],
    "3830358": [
        {
            "dateadded": "2026-04-24 12:37:12 UTC",
            "url": "http://14.177.77.161:4484/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:01:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830358/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830357": [
        {
            "dateadded": "2026-04-24 12:33:19 UTC",
            "url": "http://115.55.245.32:38817/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830357/",
            "reporter": "geenensp"
        }
    ],
    "3830356": [
        {
            "dateadded": "2026-04-24 12:33:10 UTC",
            "url": "https://pastusout.wi3sorin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830356/",
            "reporter": "anonymous"
        }
    ],
    "3830355": [
        {
            "dateadded": "2026-04-24 12:32:11 UTC",
            "url": "http://219.155.201.55:43104/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830355/",
            "reporter": "geenensp"
        }
    ],
    "3830354": [
        {
            "dateadded": "2026-04-24 12:31:19 UTC",
            "url": "http://219.155.201.55:43104/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:43:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830354/",
            "reporter": "geenensp"
        }
    ],
    "3830353": [
        {
            "dateadded": "2026-04-24 12:24:22 UTC",
            "url": "http://221.15.90.241:34423/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830353/",
            "reporter": "geenensp"
        }
    ],
    "3830352": [
        {
            "dateadded": "2026-04-24 12:23:25 UTC",
            "url": "http://42.224.49.78:50854/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830352/",
            "reporter": "geenensp"
        }
    ],
    "3830351": [
        {
            "dateadded": "2026-04-24 12:21:10 UTC",
            "url": "https://hkez.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830351/",
            "reporter": "anonymous"
        }
    ],
    "3830350": [
        {
            "dateadded": "2026-04-24 12:19:15 UTC",
            "url": "https://emailspro.store/MSI_151244.png",
            "url_status": "offline",
            "last_online": "2026-04-24 12:19:15 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830350/",
            "reporter": "abuse_ch"
        }
    ],
    "3830349": [
        {
            "dateadded": "2026-04-24 12:19:13 UTC",
            "url": "https://cdn.discordapp.com/attachments/1497131696754135064/1497132075638067280/Pedido.js?ex=69ec6866&is=69eb16e6&hm=4caa37e847a28f8fc40185f5563c3c8156ce47bfaa7a7ed7f5f1645b2b8dc180&",
            "url_status": "offline",
            "last_online": "2026-04-25 06:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "js",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830349/",
            "reporter": "abuse_ch"
        }
    ],
    "3830348": [
        {
            "dateadded": "2026-04-24 12:19:10 UTC",
            "url": "https://apostol.free.nf/img_095114.png",
            "url_status": "offline",
            "last_online": "2026-04-24 12:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830348/",
            "reporter": "abuse_ch"
        }
    ],
    "3830347": [
        {
            "dateadded": "2026-04-24 12:18:22 UTC",
            "url": "http://123.5.149.108:44591/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830347/",
            "reporter": "geenensp"
        }
    ],
    "3830346": [
        {
            "dateadded": "2026-04-24 12:17:08 UTC",
            "url": "https://33prnco.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830346/",
            "reporter": "anonymous"
        }
    ],
    "3830344": [
        {
            "dateadded": "2026-04-24 12:16:08 UTC",
            "url": "http://182.116.89.47:48213/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830344/",
            "reporter": "geenensp"
        }
    ],
    "3830345": [
        {
            "dateadded": "2026-04-24 12:16:08 UTC",
            "url": "http://175.149.205.126:36974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:40:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830345/",
            "reporter": "geenensp"
        }
    ],
    "3830343": [
        {
            "dateadded": "2026-04-24 12:15:20 UTC",
            "url": "http://42.227.246.97:40470/i",
            "url_status": "offline",
            "last_online": "2026-04-26 04:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830343/",
            "reporter": "geenensp"
        }
    ],
    "3830342": [
        {
            "dateadded": "2026-04-24 12:11:21 UTC",
            "url": "http://221.15.90.241:34423/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:53:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830342/",
            "reporter": "geenensp"
        }
    ],
    "3830341": [
        {
            "dateadded": "2026-04-24 12:06:09 UTC",
            "url": "https://c0ol6-field.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830341/",
            "reporter": "anonymous"
        }
    ],
    "3830340": [
        {
            "dateadded": "2026-04-24 12:02:14 UTC",
            "url": "https://nhmud1dx.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 12:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830340/",
            "reporter": "anonymous"
        }
    ],
    "3830339": [
        {
            "dateadded": "2026-04-24 12:01:22 UTC",
            "url": "http://110.36.80.173:47999/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:29:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830339/",
            "reporter": "geenensp"
        }
    ],
    "3830338": [
        {
            "dateadded": "2026-04-24 11:58:15 UTC",
            "url": "http://42.59.91.79:58181/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:04:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830338/",
            "reporter": "geenensp"
        }
    ],
    "3830337": [
        {
            "dateadded": "2026-04-24 11:57:17 UTC",
            "url": "http://42.227.246.97:40470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:12:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830337/",
            "reporter": "geenensp"
        }
    ],
    "3830336": [
        {
            "dateadded": "2026-04-24 11:55:19 UTC",
            "url": "http://110.37.52.120:34532/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830336/",
            "reporter": "geenensp"
        }
    ],
    "3830335": [
        {
            "dateadded": "2026-04-24 11:55:15 UTC",
            "url": "https://talnex4on.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830335/",
            "reporter": "anonymous"
        }
    ],
    "3830334": [
        {
            "dateadded": "2026-04-24 11:52:09 UTC",
            "url": "http://41.108.161.48:59094/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:49:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830334/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830333": [
        {
            "dateadded": "2026-04-24 11:52:08 UTC",
            "url": "http://115.50.191.151:55634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:52:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830333/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830332": [
        {
            "dateadded": "2026-04-24 11:50:16 UTC",
            "url": "https://ihsk.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830332/",
            "reporter": "anonymous"
        }
    ],
    "3830331": [
        {
            "dateadded": "2026-04-24 11:47:13 UTC",
            "url": "http://60.23.234.131:43277/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:11:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830331/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830330": [
        {
            "dateadded": "2026-04-24 11:47:09 UTC",
            "url": "http://41.108.161.48:59094/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830330/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830329": [
        {
            "dateadded": "2026-04-24 11:44:14 UTC",
            "url": "https://reed-pla.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830329/",
            "reporter": "anonymous"
        }
    ],
    "3830328": [
        {
            "dateadded": "2026-04-24 11:39:10 UTC",
            "url": "https://nzsrghd.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830328/",
            "reporter": "anonymous"
        }
    ],
    "3830327": [
        {
            "dateadded": "2026-04-24 11:35:17 UTC",
            "url": "http://61.53.122.240:54576/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830327/",
            "reporter": "geenensp"
        }
    ],
    "3830326": [
        {
            "dateadded": "2026-04-24 11:34:26 UTC",
            "url": "http://182.202.14.84:33403/i",
            "url_status": "offline",
            "last_online": "2026-04-26 01:44:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830326/",
            "reporter": "geenensp"
        }
    ],
    "3830325": [
        {
            "dateadded": "2026-04-24 11:34:24 UTC",
            "url": "http://193.163.187.213:55034/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830325/",
            "reporter": "geenensp"
        }
    ],
    "3830324": [
        {
            "dateadded": "2026-04-24 11:32:15 UTC",
            "url": "https://otter0-array.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830324/",
            "reporter": "anonymous"
        }
    ],
    "3830323": [
        {
            "dateadded": "2026-04-24 11:31:26 UTC",
            "url": "http://175.148.165.106:41977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830323/",
            "reporter": "geenensp"
        }
    ],
    "3830322": [
        {
            "dateadded": "2026-04-24 11:31:23 UTC",
            "url": "http://175.148.165.106:41977/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830322/",
            "reporter": "geenensp"
        }
    ],
    "3830321": [
        {
            "dateadded": "2026-04-24 11:28:13 UTC",
            "url": "https://vellith4en.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830321/",
            "reporter": "anonymous"
        }
    ],
    "3830320": [
        {
            "dateadded": "2026-04-24 11:22:08 UTC",
            "url": "https://shipdat.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830320/",
            "reporter": "anonymous"
        }
    ],
    "3830319": [
        {
            "dateadded": "2026-04-24 11:22:06 UTC",
            "url": "http://111.88.7.48:51338/i",
            "url_status": "offline",
            "last_online": "2026-04-25 06:14:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830319/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830318": [
        {
            "dateadded": "2026-04-24 11:21:21 UTC",
            "url": "http://115.57.113.174:50795/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:06:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830318/",
            "reporter": "geenensp"
        }
    ],
    "3830317": [
        {
            "dateadded": "2026-04-24 11:21:19 UTC",
            "url": "http://37.54.212.131:38644/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830317/",
            "reporter": "geenensp"
        }
    ],
    "3830316": [
        {
            "dateadded": "2026-04-24 11:20:13 UTC",
            "url": "http://182.116.119.220:37931/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830316/",
            "reporter": "geenensp"
        }
    ],
    "3830315": [
        {
            "dateadded": "2026-04-24 11:17:11 UTC",
            "url": "https://ungljmv.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830315/",
            "reporter": "anonymous"
        }
    ],
    "3830314": [
        {
            "dateadded": "2026-04-24 11:14:19 UTC",
            "url": "http://113.231.123.251:59775/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830314/",
            "reporter": "geenensp"
        }
    ],
    "3830313": [
        {
            "dateadded": "2026-04-24 11:13:12 UTC",
            "url": "https://ultra-g0ld.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830313/",
            "reporter": "anonymous"
        }
    ],
    "3830311": [
        {
            "dateadded": "2026-04-24 11:12:16 UTC",
            "url": "http://110.37.52.120:34532/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830311/",
            "reporter": "geenensp"
        }
    ],
    "3830312": [
        {
            "dateadded": "2026-04-24 11:12:16 UTC",
            "url": "http://42.59.91.79:58181/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830312/",
            "reporter": "geenensp"
        }
    ],
    "3830310": [
        {
            "dateadded": "2026-04-24 11:11:22 UTC",
            "url": "http://123.4.246.194:33175/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830310/",
            "reporter": "geenensp"
        }
    ],
    "3830309": [
        {
            "dateadded": "2026-04-24 11:07:18 UTC",
            "url": "http://193.163.187.213:55034/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830309/",
            "reporter": "geenensp"
        }
    ],
    "3830308": [
        {
            "dateadded": "2026-04-24 11:07:08 UTC",
            "url": "http://42.239.147.45:54546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830308/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830307": [
        {
            "dateadded": "2026-04-24 11:04:31 UTC",
            "url": "http://37.54.212.131:38644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830307/",
            "reporter": "geenensp"
        }
    ],
    "3830306": [
        {
            "dateadded": "2026-04-24 11:04:18 UTC",
            "url": "http://222.142.205.38:34260/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830306/",
            "reporter": "geenensp"
        }
    ],
    "3830305": [
        {
            "dateadded": "2026-04-24 11:04:13 UTC",
            "url": "https://hmhfs.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 11:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830305/",
            "reporter": "anonymous"
        }
    ],
    "3830304": [
        {
            "dateadded": "2026-04-24 11:02:08 UTC",
            "url": "http://123.12.192.63:44606/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830304/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830303": [
        {
            "dateadded": "2026-04-24 11:01:17 UTC",
            "url": "http://45.135.193.110/bins/sora.arm",
            "url_status": "offline",
            "last_online": "2026-04-24 11:01:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830303/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830301": [
        {
            "dateadded": "2026-04-24 11:00:24 UTC",
            "url": "http://45.135.193.110/bins/sora.spc",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830301/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830302": [
        {
            "dateadded": "2026-04-24 11:00:24 UTC",
            "url": "http://45.135.193.110/bins/sora.mips",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830302/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830294": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830294/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830295": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.x86",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830295/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830296": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830296/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830297": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830297/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830298": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830298/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830299": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830299/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830300": [
        {
            "dateadded": "2026-04-24 11:00:23 UTC",
            "url": "http://45.135.193.110/bins/sora.m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830300/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830293": [
        {
            "dateadded": "2026-04-24 10:59:24 UTC",
            "url": "http://45.135.193.110/bins/sora.ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 10:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830293/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3830292": [
        {
            "dateadded": "2026-04-24 10:57:07 UTC",
            "url": "http://111.88.7.48:51338/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:04:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830292/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830291": [
        {
            "dateadded": "2026-04-24 10:56:13 UTC",
            "url": "https://cascad5-cache.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830291/",
            "reporter": "anonymous"
        }
    ],
    "3830290": [
        {
            "dateadded": "2026-04-24 10:53:18 UTC",
            "url": "http://182.202.14.84:33403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:20:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830290/",
            "reporter": "geenensp"
        }
    ],
    "3830289": [
        {
            "dateadded": "2026-04-24 10:53:17 UTC",
            "url": "http://113.231.123.251:59775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:18:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830289/",
            "reporter": "geenensp"
        }
    ],
    "3830288": [
        {
            "dateadded": "2026-04-24 10:52:26 UTC",
            "url": "http://182.116.119.220:37931/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830288/",
            "reporter": "geenensp"
        }
    ],
    "3830287": [
        {
            "dateadded": "2026-04-24 10:51:23 UTC",
            "url": "http://182.121.214.189:44576/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830287/",
            "reporter": "geenensp"
        }
    ],
    "3830286": [
        {
            "dateadded": "2026-04-24 10:47:09 UTC",
            "url": "https://geo-1atti.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830286/",
            "reporter": "anonymous"
        }
    ],
    "3830285": [
        {
            "dateadded": "2026-04-24 10:43:06 UTC",
            "url": "https://meta-b4rk.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830285/",
            "reporter": "anonymous"
        }
    ],
    "3830284": [
        {
            "dateadded": "2026-04-24 10:40:23 UTC",
            "url": "http://27.202.160.139:36951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 16:59:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830284/",
            "reporter": "geenensp"
        }
    ],
    "3830283": [
        {
            "dateadded": "2026-04-24 10:38:18 UTC",
            "url": "http://123.4.246.194:33175/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 22:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830283/",
            "reporter": "geenensp"
        }
    ],
    "3830282": [
        {
            "dateadded": "2026-04-24 10:36:11 UTC",
            "url": "http://42.237.82.242:55263/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830282/",
            "reporter": "geenensp"
        }
    ],
    "3830281": [
        {
            "dateadded": "2026-04-24 10:35:14 UTC",
            "url": "http://59.180.184.143:54764/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:09:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830281/",
            "reporter": "geenensp"
        }
    ],
    "3830279": [
        {
            "dateadded": "2026-04-24 10:32:07 UTC",
            "url": "https://ajvo1s.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830279/",
            "reporter": "anonymous"
        }
    ],
    "3830280": [
        {
            "dateadded": "2026-04-24 10:32:07 UTC",
            "url": "http://36.89.252.178:52189/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:06:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830280/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830278": [
        {
            "dateadded": "2026-04-24 10:28:13 UTC",
            "url": "http://176.65.139.146/1.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:02:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830278/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830277": [
        {
            "dateadded": "2026-04-24 10:27:07 UTC",
            "url": "http://36.89.252.178:52189/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:48:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830277/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830275": [
        {
            "dateadded": "2026-04-24 10:27:06 UTC",
            "url": "http://176.65.139.146/V0V/vision.i486",
            "url_status": "offline",
            "last_online": "2026-04-24 11:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830275/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830276": [
        {
            "dateadded": "2026-04-24 10:27:06 UTC",
            "url": "http://176.65.139.146/V0V/vision.arc",
            "url_status": "offline",
            "last_online": "2026-04-24 10:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830276/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830274": [
        {
            "dateadded": "2026-04-24 10:26:11 UTC",
            "url": "https://jch52q.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830274/",
            "reporter": "anonymous"
        }
    ],
    "3830273": [
        {
            "dateadded": "2026-04-24 10:25:39 UTC",
            "url": "http://110.37.14.251:54770/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:21:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830273/",
            "reporter": "geenensp"
        }
    ],
    "3830272": [
        {
            "dateadded": "2026-04-24 10:23:19 UTC",
            "url": "http://61.52.72.102:51830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 10:58:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830272/",
            "reporter": "geenensp"
        }
    ],
    "3830271": [
        {
            "dateadded": "2026-04-24 10:21:12 UTC",
            "url": "https://docyl.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830271/",
            "reporter": "anonymous"
        }
    ],
    "3830270": [
        {
            "dateadded": "2026-04-24 10:13:08 UTC",
            "url": "https://pixobs.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830270/",
            "reporter": "anonymous"
        }
    ],
    "3830268": [
        {
            "dateadded": "2026-04-24 10:12:16 UTC",
            "url": "http://176.65.139.131/bins/x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830268/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830269": [
        {
            "dateadded": "2026-04-24 10:12:16 UTC",
            "url": "http://176.65.139.131/bins/arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830269/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830267": [
        {
            "dateadded": "2026-04-24 10:12:09 UTC",
            "url": "http://222.188.181.10:39301/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:24:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830267/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830265": [
        {
            "dateadded": "2026-04-24 10:11:19 UTC",
            "url": "http://176.65.139.131/bins/spc",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830265/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830266": [
        {
            "dateadded": "2026-04-24 10:11:19 UTC",
            "url": "http://176.65.139.131/bins/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830266/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830259": [
        {
            "dateadded": "2026-04-24 10:10:20 UTC",
            "url": "http://176.65.139.131/bins/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:25 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830259/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830260": [
        {
            "dateadded": "2026-04-24 10:10:20 UTC",
            "url": "http://176.65.139.131/bins/cat.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:02 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830260/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830261": [
        {
            "dateadded": "2026-04-24 10:10:20 UTC",
            "url": "http://176.65.139.131/bins/mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:30 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830261/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830262": [
        {
            "dateadded": "2026-04-24 10:10:20 UTC",
            "url": "http://176.65.139.131/bins/sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830262/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830263": [
        {
            "dateadded": "2026-04-24 10:10:20 UTC",
            "url": "http://176.65.139.131/bins/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:50 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830263/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830264": [
        {
            "dateadded": "2026-04-24 10:10:20 UTC",
            "url": "http://176.65.139.131/bins/m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:48 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830264/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830256": [
        {
            "dateadded": "2026-04-24 10:10:09 UTC",
            "url": "http://176.65.139.131/bins/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830256/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830257": [
        {
            "dateadded": "2026-04-24 10:10:09 UTC",
            "url": "http://176.65.139.131/bins/ppc",
            "url_status": "online",
            "last_online": "2026-04-27 14:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830257/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830258": [
        {
            "dateadded": "2026-04-24 10:10:09 UTC",
            "url": "http://176.65.139.131/bins/arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830258/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830255": [
        {
            "dateadded": "2026-04-24 10:09:11 UTC",
            "url": "https://d34l-node.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk",
            "url_status": "offline",
            "last_online": "2026-04-24 10:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830255/",
            "reporter": "anonymous"
        }
    ],
    "3830254": [
        {
            "dateadded": "2026-04-24 10:08:09 UTC",
            "url": "http://222.142.205.38:34260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:57:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830254/",
            "reporter": "geenensp"
        }
    ],
    "3830253": [
        {
            "dateadded": "2026-04-24 10:06:07 UTC",
            "url": "https://pastusout.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 10:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830253/",
            "reporter": "anonymous"
        }
    ],
    "3830252": [
        {
            "dateadded": "2026-04-24 10:04:53 UTC",
            "url": "http://110.37.14.251:54770/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830252/",
            "reporter": "geenensp"
        }
    ],
    "3830251": [
        {
            "dateadded": "2026-04-24 10:04:21 UTC",
            "url": "http://176.65.139.152/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-24 11:06:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830251/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830250": [
        {
            "dateadded": "2026-04-24 10:03:25 UTC",
            "url": "http://176.65.139.152/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 11:15:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830250/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830241": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-24 11:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830241/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830242": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 12:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830242/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830243": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 11:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830243/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830244": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 15:13:03 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830244/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830245": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 11:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830245/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830246": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 11:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830246/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830247": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 10:55:22 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830247/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830248": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 12:19:41 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830248/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830249": [
        {
            "dateadded": "2026-04-24 10:03:19 UTC",
            "url": "http://176.65.139.152/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-24 11:04:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830249/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830240": [
        {
            "dateadded": "2026-04-24 10:03:15 UTC",
            "url": "https://fallbasic.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 10:03:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830240/",
            "reporter": "anonymous"
        }
    ],
    "3830239": [
        {
            "dateadded": "2026-04-24 10:03:13 UTC",
            "url": "http://176.65.139.152/1.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-152",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830239/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830238": [
        {
            "dateadded": "2026-04-24 10:02:07 UTC",
            "url": "http://42.231.251.163:51249/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830238/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830237": [
        {
            "dateadded": "2026-04-24 09:59:07 UTC",
            "url": "https://ku193bt.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830237/",
            "reporter": "anonymous"
        }
    ],
    "3830236": [
        {
            "dateadded": "2026-04-24 09:58:09 UTC",
            "url": "http://176.65.139.115/SPARC",
            "url_status": "online",
            "last_online": "2026-04-27 13:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830236/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830235": [
        {
            "dateadded": "2026-04-24 09:57:26 UTC",
            "url": "http://176.65.139.115/ARMV7L",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830235/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830233": [
        {
            "dateadded": "2026-04-24 09:57:23 UTC",
            "url": "http://176.65.139.115/ARMV6L",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830233/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830234": [
        {
            "dateadded": "2026-04-24 09:57:23 UTC",
            "url": "http://176.65.139.115/ARMV4L",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830234/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830231": [
        {
            "dateadded": "2026-04-24 09:57:10 UTC",
            "url": "http://176.65.139.115/MIPSEL",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830231/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830232": [
        {
            "dateadded": "2026-04-24 09:57:10 UTC",
            "url": "http://176.65.139.115/X86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830232/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830228": [
        {
            "dateadded": "2026-04-24 09:56:19 UTC",
            "url": "http://176.65.139.115/I686",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830228/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830229": [
        {
            "dateadded": "2026-04-24 09:56:19 UTC",
            "url": "http://176.65.139.115/MIPS",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830229/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830230": [
        {
            "dateadded": "2026-04-24 09:56:19 UTC",
            "url": "http://176.65.139.115/I586",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830230/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830225": [
        {
            "dateadded": "2026-04-24 09:55:19 UTC",
            "url": "http://176.65.139.115/POWERPC",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830225/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830226": [
        {
            "dateadded": "2026-04-24 09:55:19 UTC",
            "url": "http://176.65.139.115/ARMV5L",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830226/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830227": [
        {
            "dateadded": "2026-04-24 09:55:19 UTC",
            "url": "http://176.65.139.115/M68K",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830227/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830223": [
        {
            "dateadded": "2026-04-24 09:55:18 UTC",
            "url": "http://176.65.139.115/SH4",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:27 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830223/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830224": [
        {
            "dateadded": "2026-04-24 09:55:18 UTC",
            "url": "http://176.65.139.115/Ciabins.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-115",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830224/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830222": [
        {
            "dateadded": "2026-04-24 09:50:11 UTC",
            "url": "https://talspireos.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830222/",
            "reporter": "anonymous"
        }
    ],
    "3830221": [
        {
            "dateadded": "2026-04-24 09:42:06 UTC",
            "url": "http://61.52.157.223:57475/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830221/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830220": [
        {
            "dateadded": "2026-04-24 09:39:22 UTC",
            "url": "http://42.227.237.248:45844/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:09:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830220/",
            "reporter": "geenensp"
        }
    ],
    "3830219": [
        {
            "dateadded": "2026-04-24 09:37:08 UTC",
            "url": "https://st80et3.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830219/",
            "reporter": "anonymous"
        }
    ],
    "3830218": [
        {
            "dateadded": "2026-04-24 09:35:12 UTC",
            "url": "https://www.dropbox.com/scl/fi/80pb46ul2nj1avw5hzabr/img_070420.png?rlkey=f48psv1go7b2s1nsytfjr9nld&st=z8hkxjy9&dl=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830218/",
            "reporter": "abuse_ch"
        }
    ],
    "3830217": [
        {
            "dateadded": "2026-04-24 09:34:10 UTC",
            "url": "https://loadermin.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830217/",
            "reporter": "anonymous"
        }
    ],
    "3830216": [
        {
            "dateadded": "2026-04-24 09:30:19 UTC",
            "url": "http://176.65.139.47/ohshit.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-47",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830216/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830215": [
        {
            "dateadded": "2026-04-24 09:30:09 UTC",
            "url": "https://tricoreos5.po7vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830215/",
            "reporter": "anonymous"
        }
    ],
    "3830214": [
        {
            "dateadded": "2026-04-24 09:27:17 UTC",
            "url": "http://176.65.139.50/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:26 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-50",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830214/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830213": [
        {
            "dateadded": "2026-04-24 09:27:16 UTC",
            "url": "http://176.65.139.141/jewn.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830213/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830212": [
        {
            "dateadded": "2026-04-24 09:27:07 UTC",
            "url": "http://95.9.35.137:47771/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:52:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830212/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830211": [
        {
            "dateadded": "2026-04-24 09:26:23 UTC",
            "url": "http://125.166.36.82:60231/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:19:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830211/",
            "reporter": "geenensp"
        }
    ],
    "3830210": [
        {
            "dateadded": "2026-04-24 09:24:09 UTC",
            "url": "https://ajvo1s.po7vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830210/",
            "reporter": "anonymous"
        }
    ],
    "3830209": [
        {
            "dateadded": "2026-04-24 09:22:06 UTC",
            "url": "http://95.9.35.137:47771/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:18:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830209/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830208": [
        {
            "dateadded": "2026-04-24 09:17:08 UTC",
            "url": "http://61.52.157.223:57475/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:00:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830208/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830207": [
        {
            "dateadded": "2026-04-24 09:15:23 UTC",
            "url": "http://42.227.237.248:45844/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:08:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830207/",
            "reporter": "geenensp"
        }
    ],
    "3830206": [
        {
            "dateadded": "2026-04-24 09:15:22 UTC",
            "url": "http://115.51.24.97:52088/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:01:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830206/",
            "reporter": "geenensp"
        }
    ],
    "3830205": [
        {
            "dateadded": "2026-04-24 09:15:12 UTC",
            "url": "https://dynforgeal.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830205/",
            "reporter": "anonymous"
        }
    ],
    "3830204": [
        {
            "dateadded": "2026-04-24 09:12:07 UTC",
            "url": "http://222.134.174.15:59692/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:27:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830204/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830203": [
        {
            "dateadded": "2026-04-24 09:10:09 UTC",
            "url": "https://lw92.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 09:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830203/",
            "reporter": "anonymous"
        }
    ],
    "3830202": [
        {
            "dateadded": "2026-04-24 09:05:19 UTC",
            "url": "http://117.217.33.124:43930/i",
            "url_status": "offline",
            "last_online": "2026-04-24 09:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830202/",
            "reporter": "geenensp"
        }
    ],
    "3830201": [
        {
            "dateadded": "2026-04-24 09:02:17 UTC",
            "url": "http://42.227.55.10:48752/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:54:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830201/",
            "reporter": "geenensp"
        }
    ],
    "3830199": [
        {
            "dateadded": "2026-04-24 09:02:08 UTC",
            "url": "http://196.190.1.39:52936/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:17:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830199/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830200": [
        {
            "dateadded": "2026-04-24 09:02:08 UTC",
            "url": "http://39.74.72.25:33741/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830200/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830198": [
        {
            "dateadded": "2026-04-24 08:59:07 UTC",
            "url": "https://rjhmik2i.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830198/",
            "reporter": "anonymous"
        }
    ],
    "3830197": [
        {
            "dateadded": "2026-04-24 08:57:07 UTC",
            "url": "http://222.142.244.164:39627/i",
            "url_status": "offline",
            "last_online": "2026-04-24 20:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830197/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830196": [
        {
            "dateadded": "2026-04-24 08:53:09 UTC",
            "url": "https://mossbra.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830196/",
            "reporter": "anonymous"
        }
    ],
    "3830195": [
        {
            "dateadded": "2026-04-24 08:52:06 UTC",
            "url": "http://196.190.1.39:52936/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830195/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830194": [
        {
            "dateadded": "2026-04-24 08:51:18 UTC",
            "url": "http://81.215.173.87:38020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 22:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830194/",
            "reporter": "geenensp"
        }
    ],
    "3830193": [
        {
            "dateadded": "2026-04-24 08:50:13 UTC",
            "url": "http://182.112.254.225:45761/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830193/",
            "reporter": "geenensp"
        }
    ],
    "3830192": [
        {
            "dateadded": "2026-04-24 08:48:12 UTC",
            "url": "http://123.12.245.177:37422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 08:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830192/",
            "reporter": "geenensp"
        }
    ],
    "3830191": [
        {
            "dateadded": "2026-04-24 08:47:15 UTC",
            "url": "http://105.184.42.22:47025/i",
            "url_status": "offline",
            "last_online": "2026-04-24 08:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830191/",
            "reporter": "geenensp"
        }
    ],
    "3830190": [
        {
            "dateadded": "2026-04-24 08:47:08 UTC",
            "url": "https://vinecarg.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830190/",
            "reporter": "anonymous"
        }
    ],
    "3830189": [
        {
            "dateadded": "2026-04-24 08:47:07 UTC",
            "url": "http://116.72.98.65:35286/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:05:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830189/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830188": [
        {
            "dateadded": "2026-04-24 08:42:15 UTC",
            "url": "http://105.184.42.22:47025/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 08:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830188/",
            "reporter": "geenensp"
        }
    ],
    "3830187": [
        {
            "dateadded": "2026-04-24 08:42:08 UTC",
            "url": "https://rs9y.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830187/",
            "reporter": "anonymous"
        }
    ],
    "3830186": [
        {
            "dateadded": "2026-04-24 08:40:15 UTC",
            "url": "http://117.217.33.124:43930/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 08:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830186/",
            "reporter": "geenensp"
        }
    ],
    "3830185": [
        {
            "dateadded": "2026-04-24 08:36:10 UTC",
            "url": "https://qc3zfzu.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830185/",
            "reporter": "anonymous"
        }
    ],
    "3830184": [
        {
            "dateadded": "2026-04-24 08:34:19 UTC",
            "url": "http://42.177.220.194:60093/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830184/",
            "reporter": "geenensp"
        }
    ],
    "3830183": [
        {
            "dateadded": "2026-04-24 08:32:44 UTC",
            "url": "http://112.238.24.131:58597/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830183/",
            "reporter": "geenensp"
        }
    ],
    "3830182": [
        {
            "dateadded": "2026-04-24 08:28:07 UTC",
            "url": "http://182.114.194.60:53868/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:28:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830182/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830181": [
        {
            "dateadded": "2026-04-24 08:27:08 UTC",
            "url": "http://222.142.244.164:39627/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830181/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830180": [
        {
            "dateadded": "2026-04-24 08:26:10 UTC",
            "url": "http://113.221.26.82:38224/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830180/",
            "reporter": "geenensp"
        }
    ],
    "3830179": [
        {
            "dateadded": "2026-04-24 08:24:07 UTC",
            "url": "https://p4rse-forge.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:24:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830179/",
            "reporter": "anonymous"
        }
    ],
    "3830178": [
        {
            "dateadded": "2026-04-24 08:22:20 UTC",
            "url": "http://116.72.98.65:35286/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:12:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830178/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830177": [
        {
            "dateadded": "2026-04-24 08:22:18 UTC",
            "url": "http://115.51.24.97:52088/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830177/",
            "reporter": "geenensp"
        }
    ],
    "3830176": [
        {
            "dateadded": "2026-04-24 08:18:07 UTC",
            "url": "https://processlis.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830176/",
            "reporter": "anonymous"
        }
    ],
    "3830175": [
        {
            "dateadded": "2026-04-24 08:12:09 UTC",
            "url": "https://cl52qlla.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830175/",
            "reporter": "anonymous"
        }
    ],
    "3830174": [
        {
            "dateadded": "2026-04-24 08:09:09 UTC",
            "url": "https://triggerdispatch.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830174/",
            "reporter": "anonymous"
        }
    ],
    "3830173": [
        {
            "dateadded": "2026-04-24 08:07:10 UTC",
            "url": "http://113.221.26.82:38224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:22:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830173/",
            "reporter": "geenensp"
        }
    ],
    "3830172": [
        {
            "dateadded": "2026-04-24 08:00:19 UTC",
            "url": "https://measu8-drive.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 08:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830172/",
            "reporter": "anonymous"
        }
    ],
    "3830171": [
        {
            "dateadded": "2026-04-24 07:55:16 UTC",
            "url": "http://105.224.13.224:50631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:10:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830171/",
            "reporter": "geenensp"
        }
    ],
    "3830170": [
        {
            "dateadded": "2026-04-24 07:53:08 UTC",
            "url": "https://clucrawl.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830170/",
            "reporter": "anonymous"
        }
    ],
    "3830169": [
        {
            "dateadded": "2026-04-24 07:51:07 UTC",
            "url": "http://103.206.205.54:60108/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:40:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830169/",
            "reporter": "geenensp"
        }
    ],
    "3830168": [
        {
            "dateadded": "2026-04-24 07:48:11 UTC",
            "url": "https://hublistener.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830168/",
            "reporter": "anonymous"
        }
    ],
    "3830167": [
        {
            "dateadded": "2026-04-24 07:47:15 UTC",
            "url": "http://112.248.102.197:53438/i",
            "url_status": "offline",
            "last_online": "2026-04-25 04:57:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830167/",
            "reporter": "geenensp"
        }
    ],
    "3830166": [
        {
            "dateadded": "2026-04-24 07:42:17 UTC",
            "url": "http://103.206.205.54:60108/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:25:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830166/",
            "reporter": "geenensp"
        }
    ],
    "3830165": [
        {
            "dateadded": "2026-04-24 07:42:10 UTC",
            "url": "https://lgjov.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830165/",
            "reporter": "anonymous"
        }
    ],
    "3830164": [
        {
            "dateadded": "2026-04-24 07:38:18 UTC",
            "url": "http://42.231.92.57:33007/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:55:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830164/",
            "reporter": "geenensp"
        }
    ],
    "3830163": [
        {
            "dateadded": "2026-04-24 07:37:18 UTC",
            "url": "http://42.231.92.57:33007/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830163/",
            "reporter": "geenensp"
        }
    ],
    "3830162": [
        {
            "dateadded": "2026-04-24 07:37:07 UTC",
            "url": "http://27.207.36.59:46902/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830162/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830161": [
        {
            "dateadded": "2026-04-24 07:36:18 UTC",
            "url": "http://45.131.108.107/bins.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 07:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "45-131-108-107",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830161/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830160": [
        {
            "dateadded": "2026-04-24 07:36:08 UTC",
            "url": "https://adapt1-line.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830160/",
            "reporter": "anonymous"
        }
    ],
    "3830159": [
        {
            "dateadded": "2026-04-24 07:33:38 UTC",
            "url": "http://112.248.102.197:53438/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 08:09:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830159/",
            "reporter": "geenensp"
        }
    ],
    "3830158": [
        {
            "dateadded": "2026-04-24 07:31:12 UTC",
            "url": "https://5pru4-mark.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830158/",
            "reporter": "anonymous"
        }
    ],
    "3830157": [
        {
            "dateadded": "2026-04-24 07:27:06 UTC",
            "url": "http://123.5.124.22:32938/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:29:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830157/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830156": [
        {
            "dateadded": "2026-04-24 07:25:09 UTC",
            "url": "https://jakej.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830156/",
            "reporter": "anonymous"
        }
    ],
    "3830155": [
        {
            "dateadded": "2026-04-24 07:20:20 UTC",
            "url": "http://110.36.2.23:49916/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 07:20:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830155/",
            "reporter": "geenensp"
        }
    ],
    "3830154": [
        {
            "dateadded": "2026-04-24 07:20:09 UTC",
            "url": "https://b4nd-signal.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830154/",
            "reporter": "anonymous"
        }
    ],
    "3830153": [
        {
            "dateadded": "2026-04-24 07:18:18 UTC",
            "url": "http://61.53.116.176:39967/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:49:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830153/",
            "reporter": "geenensp"
        }
    ],
    "3830152": [
        {
            "dateadded": "2026-04-24 07:16:20 UTC",
            "url": "http://105.225.26.202:39317/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 07:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830152/",
            "reporter": "geenensp"
        }
    ],
    "3830151": [
        {
            "dateadded": "2026-04-24 07:13:07 UTC",
            "url": "https://velcrestar5.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830151/",
            "reporter": "anonymous"
        }
    ],
    "3830150": [
        {
            "dateadded": "2026-04-24 07:08:07 UTC",
            "url": "https://sunauth.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830150/",
            "reporter": "anonymous"
        }
    ],
    "3830149": [
        {
            "dateadded": "2026-04-24 07:06:10 UTC",
            "url": "http://42.230.47.124:37365/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830149/",
            "reporter": "geenensp"
        }
    ],
    "3830148": [
        {
            "dateadded": "2026-04-24 07:02:09 UTC",
            "url": "https://ark-forgeon.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 07:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830148/",
            "reporter": "anonymous"
        }
    ],
    "3830147": [
        {
            "dateadded": "2026-04-24 06:56:09 UTC",
            "url": "https://azure-sharp.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830147/",
            "reporter": "anonymous"
        }
    ],
    "3830146": [
        {
            "dateadded": "2026-04-24 06:54:19 UTC",
            "url": "http://42.230.47.124:37365/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:53:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830146/",
            "reporter": "geenensp"
        }
    ],
    "3830145": [
        {
            "dateadded": "2026-04-24 06:53:08 UTC",
            "url": "https://c4st-layer.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830145/",
            "reporter": "anonymous"
        }
    ],
    "3830144": [
        {
            "dateadded": "2026-04-24 06:51:24 UTC",
            "url": "http://61.53.116.176:39967/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:08:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830144/",
            "reporter": "geenensp"
        }
    ],
    "3830143": [
        {
            "dateadded": "2026-04-24 06:49:37 UTC",
            "url": "http://103.249.199.4:35727/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:51:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830143/",
            "reporter": "geenensp"
        }
    ],
    "3830142": [
        {
            "dateadded": "2026-04-24 06:44:18 UTC",
            "url": "http://123.11.197.89:42176/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:49:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830142/",
            "reporter": "geenensp"
        }
    ],
    "3830141": [
        {
            "dateadded": "2026-04-24 06:44:07 UTC",
            "url": "https://alt-f1eet.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830141/",
            "reporter": "anonymous"
        }
    ],
    "3830140": [
        {
            "dateadded": "2026-04-24 06:43:06 UTC",
            "url": "https://91.92.243.181/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-243-181",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830140/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830139": [
        {
            "dateadded": "2026-04-24 06:41:25 UTC",
            "url": "http://196.189.3.1:49107/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:00:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830139/",
            "reporter": "geenensp"
        }
    ],
    "3830136": [
        {
            "dateadded": "2026-04-24 06:40:08 UTC",
            "url": "https://178.16.53.72/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 14:43:19 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-53-72",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830136/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830137": [
        {
            "dateadded": "2026-04-24 06:40:08 UTC",
            "url": "https://178.16.54.33/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-54-33",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830137/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830138": [
        {
            "dateadded": "2026-04-24 06:40:08 UTC",
            "url": "https://158.94.210.6/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:19 UTC",
            "threat": "malware_download",
            "tags": [
                "158-94-210-6",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830138/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830132": [
        {
            "dateadded": "2026-04-24 06:39:07 UTC",
            "url": "http://178.16.55.93/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:46 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-93",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830132/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830133": [
        {
            "dateadded": "2026-04-24 06:39:07 UTC",
            "url": "https://178.16.55.86/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 15:10:54 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-86",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830133/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830134": [
        {
            "dateadded": "2026-04-24 06:39:07 UTC",
            "url": "https://178.16.54.224/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:04 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-54-224",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830134/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830135": [
        {
            "dateadded": "2026-04-24 06:39:07 UTC",
            "url": "http://91.92.242.236/oPvjr94jfe/Plugins/vnc.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-242-236",
                "exe",
                "tinynuke",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830135/",
            "reporter": "BlinkzSec"
        }
    ],
    "3830131": [
        {
            "dateadded": "2026-04-24 06:38:10 UTC",
            "url": "https://balcg.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830131/",
            "reporter": "anonymous"
        }
    ],
    "3830130": [
        {
            "dateadded": "2026-04-24 06:32:09 UTC",
            "url": "https://p1a5-watch.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830130/",
            "reporter": "anonymous"
        }
    ],
    "3830129": [
        {
            "dateadded": "2026-04-24 06:27:07 UTC",
            "url": "http://182.127.81.12:53154/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830129/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830128": [
        {
            "dateadded": "2026-04-24 06:26:12 UTC",
            "url": "https://sku4jn.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830128/",
            "reporter": "anonymous"
        }
    ],
    "3830127": [
        {
            "dateadded": "2026-04-24 06:22:08 UTC",
            "url": "https://fast-7k.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830127/",
            "reporter": "anonymous"
        }
    ],
    "3830126": [
        {
            "dateadded": "2026-04-24 06:15:25 UTC",
            "url": "http://123.11.197.89:42176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830126/",
            "reporter": "geenensp"
        }
    ],
    "3830125": [
        {
            "dateadded": "2026-04-24 06:14:07 UTC",
            "url": "https://noir-land-3.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830125/",
            "reporter": "anonymous"
        }
    ],
    "3830124": [
        {
            "dateadded": "2026-04-24 06:07:16 UTC",
            "url": "http://182.113.192.42:40019/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830124/",
            "reporter": "geenensp"
        }
    ],
    "3830123": [
        {
            "dateadded": "2026-04-24 06:07:08 UTC",
            "url": "http://123.5.124.22:32938/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:53:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830123/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830122": [
        {
            "dateadded": "2026-04-24 06:05:14 UTC",
            "url": "https://soft-1.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 06:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830122/",
            "reporter": "anonymous"
        }
    ],
    "3830121": [
        {
            "dateadded": "2026-04-24 05:59:26 UTC",
            "url": "http://102.132.17.242:43920/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:33:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830121/",
            "reporter": "geenensp"
        }
    ],
    "3830120": [
        {
            "dateadded": "2026-04-24 05:59:21 UTC",
            "url": "http://182.113.192.42:40019/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830120/",
            "reporter": "geenensp"
        }
    ],
    "3830119": [
        {
            "dateadded": "2026-04-24 05:56:14 UTC",
            "url": "https://wald-baum-6w.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830119/",
            "reporter": "anonymous"
        }
    ],
    "3830118": [
        {
            "dateadded": "2026-04-24 05:54:22 UTC",
            "url": "http://123.7.42.7:33574/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:16:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830118/",
            "reporter": "geenensp"
        }
    ],
    "3830117": [
        {
            "dateadded": "2026-04-24 05:47:20 UTC",
            "url": "http://36.70.193.235:60920/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:11:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830117/",
            "reporter": "geenensp"
        }
    ],
    "3830116": [
        {
            "dateadded": "2026-04-24 05:46:13 UTC",
            "url": "https://rouge-4.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830116/",
            "reporter": "anonymous"
        }
    ],
    "3830115": [
        {
            "dateadded": "2026-04-24 05:42:22 UTC",
            "url": "http://115.55.117.52:36698/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 16:54:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830115/",
            "reporter": "geenensp"
        }
    ],
    "3830114": [
        {
            "dateadded": "2026-04-24 05:41:13 UTC",
            "url": "https://iron-zeit-8.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830114/",
            "reporter": "anonymous"
        }
    ],
    "3830113": [
        {
            "dateadded": "2026-04-24 05:36:08 UTC",
            "url": "https://berg-5x.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830113/",
            "reporter": "anonymous"
        }
    ],
    "3830112": [
        {
            "dateadded": "2026-04-24 05:34:12 UTC",
            "url": "https://petit-mond-1.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830112/",
            "reporter": "anonymous"
        }
    ],
    "3830111": [
        {
            "dateadded": "2026-04-24 05:31:14 UTC",
            "url": "http://123.7.42.7:33574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830111/",
            "reporter": "geenensp"
        }
    ],
    "3830110": [
        {
            "dateadded": "2026-04-24 05:27:08 UTC",
            "url": "http://119.183.26.44:32941/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:21:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830110/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830109": [
        {
            "dateadded": "2026-04-24 05:25:23 UTC",
            "url": "http://123.10.49.196:36115/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:46:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830109/",
            "reporter": "geenensp"
        }
    ],
    "3830108": [
        {
            "dateadded": "2026-04-24 05:24:09 UTC",
            "url": "https://kalt-9.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830108/",
            "reporter": "anonymous"
        }
    ],
    "3830107": [
        {
            "dateadded": "2026-04-24 05:23:22 UTC",
            "url": "http://112.229.184.11:40838/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830107/",
            "reporter": "geenensp"
        }
    ],
    "3830106": [
        {
            "dateadded": "2026-04-24 05:22:13 UTC",
            "url": "https://open-haus-4.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830106/",
            "reporter": "anonymous"
        }
    ],
    "3830105": [
        {
            "dateadded": "2026-04-24 05:14:20 UTC",
            "url": "http://36.70.193.235:60920/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830105/",
            "reporter": "geenensp"
        }
    ],
    "3830104": [
        {
            "dateadded": "2026-04-24 05:13:24 UTC",
            "url": "http://112.140.189.76:60327/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830104/",
            "reporter": "geenensp"
        }
    ],
    "3830103": [
        {
            "dateadded": "2026-04-24 05:10:11 UTC",
            "url": "https://bleu-7.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830103/",
            "reporter": "anonymous"
        }
    ],
    "3830102": [
        {
            "dateadded": "2026-04-24 05:04:13 UTC",
            "url": "https://wind-3p.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 05:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830102/",
            "reporter": "anonymous"
        }
    ],
    "3830101": [
        {
            "dateadded": "2026-04-24 05:02:08 UTC",
            "url": "http://132.243.164.24/new.php?type=mips",
            "url_status": "offline",
            "last_online": "2026-04-24 05:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "honeypot",
                "Xorddos"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830101/",
            "reporter": "c2hunter"
        }
    ],
    "3830100": [
        {
            "dateadded": "2026-04-24 05:01:12 UTC",
            "url": "https://use-claude.com/install.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830100/",
            "reporter": "ninjacatcher"
        }
    ],
    "3830099": [
        {
            "dateadded": "2026-04-24 04:59:36 UTC",
            "url": "http://112.229.184.11:40838/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830099/",
            "reporter": "geenensp"
        }
    ],
    "3830098": [
        {
            "dateadded": "2026-04-24 04:59:18 UTC",
            "url": "http://123.10.49.196:36115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 16:57:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830098/",
            "reporter": "geenensp"
        }
    ],
    "3830097": [
        {
            "dateadded": "2026-04-24 04:59:09 UTC",
            "url": "https://gold-2.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830097/",
            "reporter": "anonymous"
        }
    ],
    "3830095": [
        {
            "dateadded": "2026-04-24 04:56:16 UTC",
            "url": "http://218.29.31.51:35994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830095/",
            "reporter": "geenensp"
        }
    ],
    "3830096": [
        {
            "dateadded": "2026-04-24 04:56:16 UTC",
            "url": "http://218.29.31.51:35994/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830096/",
            "reporter": "geenensp"
        }
    ],
    "3830094": [
        {
            "dateadded": "2026-04-24 04:54:14 UTC",
            "url": "https://noir-land-5.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830094/",
            "reporter": "anonymous"
        }
    ],
    "3830093": [
        {
            "dateadded": "2026-04-24 04:48:12 UTC",
            "url": "https://fast-3v.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830093/",
            "reporter": "anonymous"
        }
    ],
    "3830092": [
        {
            "dateadded": "2026-04-24 04:45:14 UTC",
            "url": "http://223.151.248.151:37348/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830092/",
            "reporter": "geenensp"
        }
    ],
    "3830091": [
        {
            "dateadded": "2026-04-24 04:42:07 UTC",
            "url": "https://dark-star-6.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830091/",
            "reporter": "anonymous"
        }
    ],
    "3830090": [
        {
            "dateadded": "2026-04-24 04:38:13 UTC",
            "url": "http://219.156.21.247:42251/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:17:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830090/",
            "reporter": "geenensp"
        }
    ],
    "3830089": [
        {
            "dateadded": "2026-04-24 04:37:11 UTC",
            "url": "https://zeit-4k.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830089/",
            "reporter": "anonymous"
        }
    ],
    "3830088": [
        {
            "dateadded": "2026-04-24 04:33:15 UTC",
            "url": "http://223.151.248.151:37348/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:35:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830088/",
            "reporter": "geenensp"
        }
    ],
    "3830087": [
        {
            "dateadded": "2026-04-24 04:31:08 UTC",
            "url": "https://blue-holz-8.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830087/",
            "reporter": "anonymous"
        }
    ],
    "3830086": [
        {
            "dateadded": "2026-04-24 04:27:13 UTC",
            "url": "http://115.58.84.112:42771/i",
            "url_status": "offline",
            "last_online": "2026-04-25 21:05:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830086/",
            "reporter": "geenensp"
        }
    ],
    "3830085": [
        {
            "dateadded": "2026-04-24 04:25:11 UTC",
            "url": "https://haus-5.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830085/",
            "reporter": "anonymous"
        }
    ],
    "3830084": [
        {
            "dateadded": "2026-04-24 04:20:14 UTC",
            "url": "https://petit-berg-1.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830084/",
            "reporter": "anonymous"
        }
    ],
    "3830083": [
        {
            "dateadded": "2026-04-24 04:15:13 UTC",
            "url": "https://rouge-7v.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830083/",
            "reporter": "anonymous"
        }
    ],
    "3830082": [
        {
            "dateadded": "2026-04-24 04:12:11 UTC",
            "url": "https://soft-wald-2.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830082/",
            "reporter": "anonymous"
        }
    ],
    "3830081": [
        {
            "dateadded": "2026-04-24 04:12:08 UTC",
            "url": "http://119.119.180.142:48407/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830081/",
            "reporter": "geenensp"
        }
    ],
    "3830080": [
        {
            "dateadded": "2026-04-24 04:07:20 UTC",
            "url": "http://115.58.84.112:42771/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830080/",
            "reporter": "geenensp"
        }
    ],
    "3830079": [
        {
            "dateadded": "2026-04-24 04:02:09 UTC",
            "url": "https://vert-4.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 04:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830079/",
            "reporter": "anonymous"
        }
    ],
    "3830078": [
        {
            "dateadded": "2026-04-24 03:59:07 UTC",
            "url": "https://cold-9q.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830078/",
            "reporter": "anonymous"
        }
    ],
    "3830076": [
        {
            "dateadded": "2026-04-24 03:52:07 UTC",
            "url": "http://113.228.146.205:36211/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:47:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830076/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830077": [
        {
            "dateadded": "2026-04-24 03:52:07 UTC",
            "url": "http://61.52.212.153:52150/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:21:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830077/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830075": [
        {
            "dateadded": "2026-04-24 03:48:15 UTC",
            "url": "http://39.88.69.22:49017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:47:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830075/",
            "reporter": "geenensp"
        }
    ],
    "3830074": [
        {
            "dateadded": "2026-04-24 03:47:15 UTC",
            "url": "http://182.116.89.47:48213/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:22:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830074/",
            "reporter": "geenensp"
        }
    ],
    "3830073": [
        {
            "dateadded": "2026-04-24 03:46:12 UTC",
            "url": "https://land-1.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830073/",
            "reporter": "anonymous"
        }
    ],
    "3830072": [
        {
            "dateadded": "2026-04-24 03:43:14 UTC",
            "url": "http://119.119.180.142:48407/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830072/",
            "reporter": "geenensp"
        }
    ],
    "3830071": [
        {
            "dateadded": "2026-04-24 03:42:08 UTC",
            "url": "http://222.141.136.2:37250/i",
            "url_status": "offline",
            "last_online": "2026-04-24 03:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830071/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830070": [
        {
            "dateadded": "2026-04-24 03:42:07 UTC",
            "url": "http://113.236.70.159:41876/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830070/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830069": [
        {
            "dateadded": "2026-04-24 03:42:06 UTC",
            "url": "http://36.70.236.101:52901/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830069/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830068": [
        {
            "dateadded": "2026-04-24 03:36:12 UTC",
            "url": "https://dark-open-5.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830068/",
            "reporter": "anonymous"
        }
    ],
    "3830067": [
        {
            "dateadded": "2026-04-24 03:31:08 UTC",
            "url": "https://bleu-2x.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830067/",
            "reporter": "anonymous"
        }
    ],
    "3830066": [
        {
            "dateadded": "2026-04-24 03:28:13 UTC",
            "url": "http://123.8.128.247:60163/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:18:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830066/",
            "reporter": "geenensp"
        }
    ],
    "3830065": [
        {
            "dateadded": "2026-04-24 03:27:07 UTC",
            "url": "http://113.228.146.205:36211/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830065/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830064": [
        {
            "dateadded": "2026-04-24 03:22:06 UTC",
            "url": "http://27.215.178.77:51048/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:04:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830064/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830063": [
        {
            "dateadded": "2026-04-24 03:21:07 UTC",
            "url": "https://holz-baum-4.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830063/",
            "reporter": "anonymous"
        }
    ],
    "3830062": [
        {
            "dateadded": "2026-04-24 03:16:14 UTC",
            "url": "http://123.8.128.247:60163/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:53:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830062/",
            "reporter": "geenensp"
        }
    ],
    "3830061": [
        {
            "dateadded": "2026-04-24 03:15:13 UTC",
            "url": "http://27.37.24.153:52631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 11:40:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830061/",
            "reporter": "geenensp"
        }
    ],
    "3830060": [
        {
            "dateadded": "2026-04-24 03:14:07 UTC",
            "url": "https://fast-9.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830060/",
            "reporter": "anonymous"
        }
    ],
    "3830059": [
        {
            "dateadded": "2026-04-24 03:12:08 UTC",
            "url": "http://36.70.236.101:52901/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830059/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830058": [
        {
            "dateadded": "2026-04-24 03:10:09 UTC",
            "url": "https://noir-zeit-3s.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830058/",
            "reporter": "anonymous"
        }
    ],
    "3830057": [
        {
            "dateadded": "2026-04-24 03:06:09 UTC",
            "url": "https://haus-1.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 03:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830057/",
            "reporter": "anonymous"
        }
    ],
    "3830056": [
        {
            "dateadded": "2026-04-24 03:04:08 UTC",
            "url": "http://27.207.142.234:37815/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:27:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830056/",
            "reporter": "geenensp"
        }
    ],
    "3830055": [
        {
            "dateadded": "2026-04-24 02:55:10 UTC",
            "url": "https://kalt-mond-8.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830055/",
            "reporter": "anonymous"
        }
    ],
    "3830054": [
        {
            "dateadded": "2026-04-24 02:50:08 UTC",
            "url": "https://gold-4m.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830054/",
            "reporter": "anonymous"
        }
    ],
    "3830053": [
        {
            "dateadded": "2026-04-24 02:47:06 UTC",
            "url": "http://221.15.21.172:42425/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830053/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830052": [
        {
            "dateadded": "2026-04-24 02:45:11 UTC",
            "url": "https://petit-wind-5.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830052/",
            "reporter": "anonymous"
        }
    ],
    "3830051": [
        {
            "dateadded": "2026-04-24 02:38:06 UTC",
            "url": "https://vert-2.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830051/",
            "reporter": "anonymous"
        }
    ],
    "3830050": [
        {
            "dateadded": "2026-04-24 02:32:10 UTC",
            "url": "https://iron-9v.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830050/",
            "reporter": "anonymous"
        }
    ],
    "3830049": [
        {
            "dateadded": "2026-04-24 02:28:09 UTC",
            "url": "https://open-6.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830049/",
            "reporter": "anonymous"
        }
    ],
    "3830048": [
        {
            "dateadded": "2026-04-24 02:25:09 UTC",
            "url": "https://rouge-star-1.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830048/",
            "reporter": "anonymous"
        }
    ],
    "3830047": [
        {
            "dateadded": "2026-04-24 02:16:07 UTC",
            "url": "https://berg-4k.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830047/",
            "reporter": "anonymous"
        }
    ],
    "3830046": [
        {
            "dateadded": "2026-04-24 02:13:13 UTC",
            "url": "https://dark-land-3.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830046/",
            "reporter": "anonymous"
        }
    ],
    "3830045": [
        {
            "dateadded": "2026-04-24 02:12:06 UTC",
            "url": "http://221.15.21.172:42425/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 02:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830045/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830043": [
        {
            "dateadded": "2026-04-24 02:02:07 UTC",
            "url": "http://201.149.107.50:41735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830043/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830044": [
        {
            "dateadded": "2026-04-24 02:02:07 UTC",
            "url": "https://zeit-8.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 02:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830044/",
            "reporter": "anonymous"
        }
    ],
    "3830042": [
        {
            "dateadded": "2026-04-24 01:58:10 UTC",
            "url": "https://bleu-holz-5c.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830042/",
            "reporter": "anonymous"
        }
    ],
    "3830041": [
        {
            "dateadded": "2026-04-24 01:52:08 UTC",
            "url": "http://42.226.73.91:34482/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:03:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830041/",
            "reporter": "geenensp"
        }
    ],
    "3830040": [
        {
            "dateadded": "2026-04-24 01:51:07 UTC",
            "url": "https://fast-1.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830040/",
            "reporter": "anonymous"
        }
    ],
    "3830039": [
        {
            "dateadded": "2026-04-24 01:46:08 UTC",
            "url": "https://wald-petit-7.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830039/",
            "reporter": "anonymous"
        }
    ],
    "3830038": [
        {
            "dateadded": "2026-04-24 01:43:14 UTC",
            "url": "http://125.47.118.0:59413/i",
            "url_status": "offline",
            "last_online": "2026-04-24 01:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830038/",
            "reporter": "geenensp"
        }
    ],
    "3830037": [
        {
            "dateadded": "2026-04-24 01:41:07 UTC",
            "url": "http://58.65.215.0:36845/i",
            "url_status": "offline",
            "last_online": "2026-04-25 12:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830037/",
            "reporter": "geenensp"
        }
    ],
    "3830036": [
        {
            "dateadded": "2026-04-24 01:40:11 UTC",
            "url": "https://noir-3x.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830036/",
            "reporter": "anonymous"
        }
    ],
    "3830035": [
        {
            "dateadded": "2026-04-24 01:35:08 UTC",
            "url": "https://cold-fire-4.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830035/",
            "reporter": "anonymous"
        }
    ],
    "3830034": [
        {
            "dateadded": "2026-04-24 01:30:12 UTC",
            "url": "https://haus-9.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830034/",
            "reporter": "anonymous"
        }
    ],
    "3830033": [
        {
            "dateadded": "2026-04-24 01:24:15 UTC",
            "url": "http://182.113.41.20:51635/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830033/",
            "reporter": "geenensp"
        }
    ],
    "3830032": [
        {
            "dateadded": "2026-04-24 01:23:07 UTC",
            "url": "https://gold-mond-2m.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830032/",
            "reporter": "anonymous"
        }
    ],
    "3830031": [
        {
            "dateadded": "2026-04-24 01:20:09 UTC",
            "url": "https://wind-5.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830031/",
            "reporter": "anonymous"
        }
    ],
    "3830030": [
        {
            "dateadded": "2026-04-24 01:14:08 UTC",
            "url": "http://124.229.35.144:33006/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830030/",
            "reporter": "geenensp"
        }
    ],
    "3830029": [
        {
            "dateadded": "2026-04-24 01:14:07 UTC",
            "url": "http://222.142.249.197:52976/i",
            "url_status": "offline",
            "last_online": "2026-04-24 10:48:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830029/",
            "reporter": "geenensp"
        }
    ],
    "3830028": [
        {
            "dateadded": "2026-04-24 01:12:10 UTC",
            "url": "http://58.65.215.0:36845/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830028/",
            "reporter": "geenensp"
        }
    ],
    "3830027": [
        {
            "dateadded": "2026-04-24 01:12:07 UTC",
            "url": "https://open-petit-8.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830027/",
            "reporter": "anonymous"
        }
    ],
    "3830026": [
        {
            "dateadded": "2026-04-24 01:10:16 UTC",
            "url": "http://222.142.249.197:52976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830026/",
            "reporter": "geenensp"
        }
    ],
    "3830025": [
        {
            "dateadded": "2026-04-24 01:07:07 UTC",
            "url": "http://222.141.82.197:52798/i",
            "url_status": "offline",
            "last_online": "2026-04-24 01:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830025/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830024": [
        {
            "dateadded": "2026-04-24 01:05:12 UTC",
            "url": "http://222.137.144.91:48149/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830024/",
            "reporter": "geenensp"
        }
    ],
    "3830023": [
        {
            "dateadded": "2026-04-24 01:04:29 UTC",
            "url": "http://112.250.27.54:44991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830023/",
            "reporter": "geenensp"
        }
    ],
    "3830022": [
        {
            "dateadded": "2026-04-24 01:00:14 UTC",
            "url": "http://182.113.41.20:51635/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830022/",
            "reporter": "geenensp"
        }
    ],
    "3830021": [
        {
            "dateadded": "2026-04-24 01:00:12 UTC",
            "url": "https://baum-w1.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 01:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830021/",
            "reporter": "anonymous"
        }
    ],
    "3830020": [
        {
            "dateadded": "2026-04-24 00:57:09 UTC",
            "url": "https://kalt-berg-6.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830020/",
            "reporter": "anonymous"
        }
    ],
    "3830019": [
        {
            "dateadded": "2026-04-24 00:53:08 UTC",
            "url": "https://rouge-3.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830019/",
            "reporter": "anonymous"
        }
    ],
    "3830018": [
        {
            "dateadded": "2026-04-24 00:43:11 UTC",
            "url": "https://soft-4z.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830018/",
            "reporter": "anonymous"
        }
    ],
    "3830017": [
        {
            "dateadded": "2026-04-24 00:41:08 UTC",
            "url": "http://42.5.228.37:35532/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830017/",
            "reporter": "geenensp"
        }
    ],
    "3830016": [
        {
            "dateadded": "2026-04-24 00:40:15 UTC",
            "url": "http://125.40.0.110:40737/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:20:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830016/",
            "reporter": "geenensp"
        }
    ],
    "3830015": [
        {
            "dateadded": "2026-04-24 00:39:15 UTC",
            "url": "http://222.137.144.91:48149/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830015/",
            "reporter": "geenensp"
        }
    ],
    "3830014": [
        {
            "dateadded": "2026-04-24 00:38:07 UTC",
            "url": "https://vert-2.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830014/",
            "reporter": "anonymous"
        }
    ],
    "3830013": [
        {
            "dateadded": "2026-04-24 00:30:08 UTC",
            "url": "https://dark-star-9k.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830013/",
            "reporter": "anonymous"
        }
    ],
    "3830012": [
        {
            "dateadded": "2026-04-24 00:23:12 UTC",
            "url": "https://holz-5.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830012/",
            "reporter": "anonymous"
        }
    ],
    "3830011": [
        {
            "dateadded": "2026-04-24 00:22:06 UTC",
            "url": "http://182.127.7.92:43592/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830011/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830010": [
        {
            "dateadded": "2026-04-24 00:19:16 UTC",
            "url": "http://116.55.64.75:43048/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:35:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830010/",
            "reporter": "geenensp"
        }
    ],
    "3830009": [
        {
            "dateadded": "2026-04-24 00:19:13 UTC",
            "url": "http://115.61.116.226:43631/i",
            "url_status": "offline",
            "last_online": "2026-04-24 00:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830009/",
            "reporter": "geenensp"
        }
    ],
    "3830008": [
        {
            "dateadded": "2026-04-24 00:17:12 UTC",
            "url": "https://bleu-land-1v.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830008/",
            "reporter": "anonymous"
        }
    ],
    "3830007": [
        {
            "dateadded": "2026-04-24 00:17:08 UTC",
            "url": "http://182.127.7.92:43592/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 22:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830007/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3830006": [
        {
            "dateadded": "2026-04-24 00:12:08 UTC",
            "url": "https://noir-7.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830006/",
            "reporter": "anonymous"
        }
    ],
    "3830005": [
        {
            "dateadded": "2026-04-24 00:08:08 UTC",
            "url": "http://42.5.228.37:35532/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830005/",
            "reporter": "geenensp"
        }
    ],
    "3830004": [
        {
            "dateadded": "2026-04-24 00:05:08 UTC",
            "url": "https://fast-zeit-3.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830004/",
            "reporter": "anonymous"
        }
    ],
    "3830003": [
        {
            "dateadded": "2026-04-24 00:02:14 UTC",
            "url": "https://boo5-scope.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-24 00:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830003/",
            "reporter": "anonymous"
        }
    ],
    "3830002": [
        {
            "dateadded": "2026-04-24 00:01:06 UTC",
            "url": "http://196.189.68.239:48667/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830002/",
            "reporter": "geenensp"
        }
    ],
    "3830001": [
        {
            "dateadded": "2026-04-23 23:59:14 UTC",
            "url": "https://ancien0-path.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830001/",
            "reporter": "anonymous"
        }
    ],
    "3830000": [
        {
            "dateadded": "2026-04-23 23:59:12 UTC",
            "url": "http://182.112.185.235:56452/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:43:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3830000/",
            "reporter": "geenensp"
        }
    ],
    "3829999": [
        {
            "dateadded": "2026-04-23 23:50:15 UTC",
            "url": "https://sdsa.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829999/",
            "reporter": "anonymous"
        }
    ],
    "3829998": [
        {
            "dateadded": "2026-04-23 23:41:14 UTC",
            "url": "https://fore0-core.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829998/",
            "reporter": "anonymous"
        }
    ],
    "3829997": [
        {
            "dateadded": "2026-04-23 23:33:10 UTC",
            "url": "https://ev8l.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829997/",
            "reporter": "anonymous"
        }
    ],
    "3829996": [
        {
            "dateadded": "2026-04-23 23:32:21 UTC",
            "url": "http://101.108.252.244:52343/i",
            "url_status": "offline",
            "last_online": "2026-04-24 04:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829996/",
            "reporter": "geenensp"
        }
    ],
    "3829995": [
        {
            "dateadded": "2026-04-23 23:32:07 UTC",
            "url": "http://219.154.152.115:50098/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:45:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829995/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829994": [
        {
            "dateadded": "2026-04-23 23:30:21 UTC",
            "url": "http://5.42.30.175:54648/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829994/",
            "reporter": "geenensp"
        }
    ],
    "3829993": [
        {
            "dateadded": "2026-04-23 23:29:24 UTC",
            "url": "http://182.112.185.235:56452/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:27:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829993/",
            "reporter": "geenensp"
        }
    ],
    "3829992": [
        {
            "dateadded": "2026-04-23 23:27:23 UTC",
            "url": "http://115.62.178.153:52910/i",
            "url_status": "offline",
            "last_online": "2026-04-24 10:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829992/",
            "reporter": "geenensp"
        }
    ],
    "3829991": [
        {
            "dateadded": "2026-04-23 23:24:14 UTC",
            "url": "https://manifes-daw.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829991/",
            "reporter": "anonymous"
        }
    ],
    "3829990": [
        {
            "dateadded": "2026-04-23 23:22:08 UTC",
            "url": "http://219.154.152.115:50098/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829990/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829989": [
        {
            "dateadded": "2026-04-23 23:20:16 UTC",
            "url": "https://du5t-port.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829989/",
            "reporter": "anonymous"
        }
    ],
    "3829988": [
        {
            "dateadded": "2026-04-23 23:19:19 UTC",
            "url": "http://182.126.245.48:49192/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:45:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829988/",
            "reporter": "geenensp"
        }
    ],
    "3829987": [
        {
            "dateadded": "2026-04-23 23:17:24 UTC",
            "url": "http://182.126.245.48:49192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:14:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829987/",
            "reporter": "geenensp"
        }
    ],
    "3829986": [
        {
            "dateadded": "2026-04-23 23:11:12 UTC",
            "url": "https://ciphermolecu.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829986/",
            "reporter": "anonymous"
        }
    ],
    "3829985": [
        {
            "dateadded": "2026-04-23 23:08:20 UTC",
            "url": "http://182.121.226.141:59733/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829985/",
            "reporter": "geenensp"
        }
    ],
    "3829984": [
        {
            "dateadded": "2026-04-23 23:08:13 UTC",
            "url": "https://mercrestos.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 23:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829984/",
            "reporter": "anonymous"
        }
    ],
    "3829983": [
        {
            "dateadded": "2026-04-23 23:01:26 UTC",
            "url": "http://115.62.178.153:52910/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829983/",
            "reporter": "geenensp"
        }
    ],
    "3829982": [
        {
            "dateadded": "2026-04-23 23:00:21 UTC",
            "url": "http://5.42.30.175:54648/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829982/",
            "reporter": "geenensp"
        }
    ],
    "3829981": [
        {
            "dateadded": "2026-04-23 22:56:13 UTC",
            "url": "https://tri-draa.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829981/",
            "reporter": "anonymous"
        }
    ],
    "3829980": [
        {
            "dateadded": "2026-04-23 22:52:23 UTC",
            "url": "http://101.108.252.244:52343/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829980/",
            "reporter": "geenensp"
        }
    ],
    "3829979": [
        {
            "dateadded": "2026-04-23 22:52:22 UTC",
            "url": "http://110.36.86.83:46484/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:06:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829979/",
            "reporter": "geenensp"
        }
    ],
    "3829978": [
        {
            "dateadded": "2026-04-23 22:51:16 UTC",
            "url": "https://525x6rn.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829978/",
            "reporter": "anonymous"
        }
    ],
    "3829977": [
        {
            "dateadded": "2026-04-23 22:47:08 UTC",
            "url": "http://202.107.96.32:32873/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:25:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829977/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829976": [
        {
            "dateadded": "2026-04-23 22:45:12 UTC",
            "url": "https://supply-basi.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829976/",
            "reporter": "anonymous"
        }
    ],
    "3829975": [
        {
            "dateadded": "2026-04-23 22:40:13 UTC",
            "url": "https://xzkgjdst.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829975/",
            "reporter": "anonymous"
        }
    ],
    "3829974": [
        {
            "dateadded": "2026-04-23 22:35:09 UTC",
            "url": "https://valeanc.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829974/",
            "reporter": "anonymous"
        }
    ],
    "3829973": [
        {
            "dateadded": "2026-04-23 22:29:07 UTC",
            "url": "https://mixwoo.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829973/",
            "reporter": "anonymous"
        }
    ],
    "3829972": [
        {
            "dateadded": "2026-04-23 22:26:10 UTC",
            "url": "http://115.49.210.84:59864/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:54:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829972/",
            "reporter": "geenensp"
        }
    ],
    "3829971": [
        {
            "dateadded": "2026-04-23 22:24:09 UTC",
            "url": "https://oqjwoky.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829971/",
            "reporter": "anonymous"
        }
    ],
    "3829970": [
        {
            "dateadded": "2026-04-23 22:22:07 UTC",
            "url": "http://61.163.128.124:44016/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829970/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829969": [
        {
            "dateadded": "2026-04-23 22:16:10 UTC",
            "url": "http://115.55.247.146:58389/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 06:20:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829969/",
            "reporter": "geenensp"
        }
    ],
    "3829968": [
        {
            "dateadded": "2026-04-23 22:15:14 UTC",
            "url": "http://39.79.144.166:53224/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:44:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829968/",
            "reporter": "geenensp"
        }
    ],
    "3829967": [
        {
            "dateadded": "2026-04-23 22:14:22 UTC",
            "url": "https://auzhpjmyaqayopaqidmc.supabase.co/storage/v1/object/public/p/vc",
            "url_status": "offline",
            "last_online": "2026-04-25 23:47:31 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829967/",
            "reporter": "botnetkiller"
        }
    ],
    "3829966": [
        {
            "dateadded": "2026-04-23 22:13:06 UTC",
            "url": "https://autumnpul.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829966/",
            "reporter": "anonymous"
        }
    ],
    "3829965": [
        {
            "dateadded": "2026-04-23 22:10:20 UTC",
            "url": "https://auzhpjmyaqayopaqidmc.supabase.co/storage/v1/object/public/p/i.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829965/",
            "reporter": "botnetkiller"
        }
    ],
    "3829964": [
        {
            "dateadded": "2026-04-23 22:08:07 UTC",
            "url": "https://azqr2vav.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829964/",
            "reporter": "anonymous"
        }
    ],
    "3829963": [
        {
            "dateadded": "2026-04-23 22:07:13 UTC",
            "url": "http://123.10.152.125:47367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:49:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829963/",
            "reporter": "geenensp"
        }
    ],
    "3829962": [
        {
            "dateadded": "2026-04-23 22:06:17 UTC",
            "url": "http://91.147.100.200:44721/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:04:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829962/",
            "reporter": "geenensp"
        }
    ],
    "3829961": [
        {
            "dateadded": "2026-04-23 22:02:12 UTC",
            "url": "https://kelvaleum.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 22:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829961/",
            "reporter": "anonymous"
        }
    ],
    "3829960": [
        {
            "dateadded": "2026-04-23 22:02:08 UTC",
            "url": "http://61.163.128.124:44016/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:57:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829960/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829959": [
        {
            "dateadded": "2026-04-23 22:02:07 UTC",
            "url": "http://123.12.47.230:33112/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:18:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829959/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829958": [
        {
            "dateadded": "2026-04-23 22:00:20 UTC",
            "url": "http://42.233.104.247:50167/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:01:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829958/",
            "reporter": "geenensp"
        }
    ],
    "3829957": [
        {
            "dateadded": "2026-04-23 21:57:15 UTC",
            "url": "http://195.178.110.204/d",
            "url_status": "online",
            "last_online": "2026-04-27 14:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829957/",
            "reporter": "botnetkiller"
        }
    ],
    "3829956": [
        {
            "dateadded": "2026-04-23 21:57:08 UTC",
            "url": "https://zen-drais.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829956/",
            "reporter": "anonymous"
        }
    ],
    "3829955": [
        {
            "dateadded": "2026-04-23 21:56:33 UTC",
            "url": "http://175.107.233.182:40593/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829955/",
            "reporter": "botnetkiller"
        }
    ],
    "3829954": [
        {
            "dateadded": "2026-04-23 21:56:31 UTC",
            "url": "http://206.135.172.29:59275/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829954/",
            "reporter": "botnetkiller"
        }
    ],
    "3829953": [
        {
            "dateadded": "2026-04-23 21:56:25 UTC",
            "url": "http://221.229.155.219:44573/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-25 17:01:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829953/",
            "reporter": "botnetkiller"
        }
    ],
    "3829952": [
        {
            "dateadded": "2026-04-23 21:56:22 UTC",
            "url": "http://27.201.140.48:57513/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-27 05:12:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829952/",
            "reporter": "botnetkiller"
        }
    ],
    "3829951": [
        {
            "dateadded": "2026-04-23 21:56:21 UTC",
            "url": "http://103.203.46.134:45942/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829951/",
            "reporter": "botnetkiller"
        }
    ],
    "3829948": [
        {
            "dateadded": "2026-04-23 21:54:32 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829948/",
            "reporter": "botnetkiller"
        }
    ],
    "3829949": [
        {
            "dateadded": "2026-04-23 21:54:32 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829949/",
            "reporter": "botnetkiller"
        }
    ],
    "3829950": [
        {
            "dateadded": "2026-04-23 21:54:32 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829950/",
            "reporter": "botnetkiller"
        }
    ],
    "3829946": [
        {
            "dateadded": "2026-04-23 21:54:31 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829946/",
            "reporter": "botnetkiller"
        }
    ],
    "3829947": [
        {
            "dateadded": "2026-04-23 21:54:31 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829947/",
            "reporter": "botnetkiller"
        }
    ],
    "3829945": [
        {
            "dateadded": "2026-04-23 21:54:30 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829945/",
            "reporter": "botnetkiller"
        }
    ],
    "3829941": [
        {
            "dateadded": "2026-04-23 21:54:29 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829941/",
            "reporter": "botnetkiller"
        }
    ],
    "3829942": [
        {
            "dateadded": "2026-04-23 21:54:29 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829942/",
            "reporter": "botnetkiller"
        }
    ],
    "3829943": [
        {
            "dateadded": "2026-04-23 21:54:29 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829943/",
            "reporter": "botnetkiller"
        }
    ],
    "3829944": [
        {
            "dateadded": "2026-04-23 21:54:29 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829944/",
            "reporter": "botnetkiller"
        }
    ],
    "3829940": [
        {
            "dateadded": "2026-04-23 21:54:23 UTC",
            "url": "http://68.183.233.125/concakhbtandhuy.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829940/",
            "reporter": "botnetkiller"
        }
    ],
    "3829933": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 15:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829933/",
            "reporter": "botnetkiller"
        }
    ],
    "3829934": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 14:25:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829934/",
            "reporter": "botnetkiller"
        }
    ],
    "3829935": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.arm5",
            "url_status": "offline",
            "last_online": "2026-04-25 11:27:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829935/",
            "reporter": "botnetkiller"
        }
    ],
    "3829936": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 12:26:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829936/",
            "reporter": "botnetkiller"
        }
    ],
    "3829937": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 15:39:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829937/",
            "reporter": "botnetkiller"
        }
    ],
    "3829938": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.arm6",
            "url_status": "offline",
            "last_online": "2026-04-25 15:37:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829938/",
            "reporter": "botnetkiller"
        }
    ],
    "3829939": [
        {
            "dateadded": "2026-04-23 21:54:21 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:18:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829939/",
            "reporter": "botnetkiller"
        }
    ],
    "3829931": [
        {
            "dateadded": "2026-04-23 21:54:20 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 15:14:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829931/",
            "reporter": "botnetkiller"
        }
    ],
    "3829932": [
        {
            "dateadded": "2026-04-23 21:54:20 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 11:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829932/",
            "reporter": "botnetkiller"
        }
    ],
    "3829929": [
        {
            "dateadded": "2026-04-23 21:54:17 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.sh4",
            "url_status": "offline",
            "last_online": "2026-04-25 15:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829929/",
            "reporter": "botnetkiller"
        }
    ],
    "3829930": [
        {
            "dateadded": "2026-04-23 21:54:17 UTC",
            "url": "http://103.77.246.163/concakhbtandhuy.ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 14:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829930/",
            "reporter": "botnetkiller"
        }
    ],
    "3829928": [
        {
            "dateadded": "2026-04-23 21:52:17 UTC",
            "url": "http://222.137.146.77:60722/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:47:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829928/",
            "reporter": "geenensp"
        }
    ],
    "3829927": [
        {
            "dateadded": "2026-04-23 21:51:07 UTC",
            "url": "https://gxbpjafl.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829927/",
            "reporter": "anonymous"
        }
    ],
    "3829926": [
        {
            "dateadded": "2026-04-23 21:49:20 UTC",
            "url": "http://94.26.106.228/bins.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829926/",
            "reporter": "botnetkiller"
        }
    ],
    "3829925": [
        {
            "dateadded": "2026-04-23 21:49:19 UTC",
            "url": "http://103.149.29.68/toot",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829925/",
            "reporter": "botnetkiller"
        }
    ],
    "3829921": [
        {
            "dateadded": "2026-04-23 21:49:05 UTC",
            "url": "http://2.57.241.166/m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829921/",
            "reporter": "botnetkiller"
        }
    ],
    "3829922": [
        {
            "dateadded": "2026-04-23 21:49:05 UTC",
            "url": "http://2.57.241.166/i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829922/",
            "reporter": "botnetkiller"
        }
    ],
    "3829923": [
        {
            "dateadded": "2026-04-23 21:49:05 UTC",
            "url": "http://176.65.139.141/bins/busybox.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829923/",
            "reporter": "botnetkiller"
        }
    ],
    "3829924": [
        {
            "dateadded": "2026-04-23 21:49:05 UTC",
            "url": "http://2.57.241.166/arm64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829924/",
            "reporter": "botnetkiller"
        }
    ],
    "3829920": [
        {
            "dateadded": "2026-04-23 21:48:09 UTC",
            "url": "http://103.77.246.163/w.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829920/",
            "reporter": "botnetkiller"
        }
    ],
    "3829919": [
        {
            "dateadded": "2026-04-23 21:47:11 UTC",
            "url": "http://39.79.144.166:53224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829919/",
            "reporter": "geenensp"
        }
    ],
    "3829917": [
        {
            "dateadded": "2026-04-23 21:47:08 UTC",
            "url": "http://115.55.247.146:58389/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829917/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829918": [
        {
            "dateadded": "2026-04-23 21:47:08 UTC",
            "url": "http://69.178.6.212:59251/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:03:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829918/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829916": [
        {
            "dateadded": "2026-04-23 21:46:06 UTC",
            "url": "https://jz39wex.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829916/",
            "reporter": "anonymous"
        }
    ],
    "3829915": [
        {
            "dateadded": "2026-04-23 21:41:18 UTC",
            "url": "http://140.237.38.16:50794/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:03:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829915/",
            "reporter": "geenensp"
        }
    ],
    "3829914": [
        {
            "dateadded": "2026-04-23 21:40:14 UTC",
            "url": "https://6sfy.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829914/",
            "reporter": "anonymous"
        }
    ],
    "3829913": [
        {
            "dateadded": "2026-04-23 21:37:07 UTC",
            "url": "http://123.12.47.230:33112/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829913/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829912": [
        {
            "dateadded": "2026-04-23 21:35:11 UTC",
            "url": "https://sol-tideex.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829912/",
            "reporter": "anonymous"
        }
    ],
    "3829911": [
        {
            "dateadded": "2026-04-23 21:27:08 UTC",
            "url": "http://69.178.6.212:59251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:42:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829911/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829910": [
        {
            "dateadded": "2026-04-23 21:24:09 UTC",
            "url": "https://rail-trace.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829910/",
            "reporter": "anonymous"
        }
    ],
    "3829909": [
        {
            "dateadded": "2026-04-23 21:18:09 UTC",
            "url": "https://directspring.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829909/",
            "reporter": "anonymous"
        }
    ],
    "3829908": [
        {
            "dateadded": "2026-04-23 21:17:07 UTC",
            "url": "http://113.236.70.159:41876/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829908/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829907": [
        {
            "dateadded": "2026-04-23 21:17:06 UTC",
            "url": "http://125.41.230.52:51007/i",
            "url_status": "offline",
            "last_online": "2026-04-25 04:59:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829907/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829906": [
        {
            "dateadded": "2026-04-23 21:14:09 UTC",
            "url": "http://125.44.48.119:59280/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829906/",
            "reporter": "geenensp"
        }
    ],
    "3829905": [
        {
            "dateadded": "2026-04-23 21:14:08 UTC",
            "url": "https://pqj8j.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829905/",
            "reporter": "anonymous"
        }
    ],
    "3829904": [
        {
            "dateadded": "2026-04-23 21:08:07 UTC",
            "url": "https://bircmed.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829904/",
            "reporter": "anonymous"
        }
    ],
    "3829903": [
        {
            "dateadded": "2026-04-23 21:07:07 UTC",
            "url": "http://39.81.230.52:32911/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829903/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829902": [
        {
            "dateadded": "2026-04-23 21:03:18 UTC",
            "url": "http://45.171.177.193:32935/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829902/",
            "reporter": "geenensp"
        }
    ],
    "3829901": [
        {
            "dateadded": "2026-04-23 21:02:11 UTC",
            "url": "https://talspirea9.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 21:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829901/",
            "reporter": "anonymous"
        }
    ],
    "3829899": [
        {
            "dateadded": "2026-04-23 20:57:08 UTC",
            "url": "http://39.81.230.52:32911/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829899/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829900": [
        {
            "dateadded": "2026-04-23 20:57:08 UTC",
            "url": "https://yxex4i.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829900/",
            "reporter": "anonymous"
        }
    ],
    "3829898": [
        {
            "dateadded": "2026-04-23 20:51:18 UTC",
            "url": "http://125.44.48.119:59280/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 02:14:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829898/",
            "reporter": "geenensp"
        }
    ],
    "3829897": [
        {
            "dateadded": "2026-04-23 20:51:13 UTC",
            "url": "https://lmk4z.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829897/",
            "reporter": "anonymous"
        }
    ],
    "3829896": [
        {
            "dateadded": "2026-04-23 20:50:19 UTC",
            "url": "http://191.37.19.74:34549/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:06:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829896/",
            "reporter": "geenensp"
        }
    ],
    "3829895": [
        {
            "dateadded": "2026-04-23 20:49:19 UTC",
            "url": "http://123.132.166.255:59261/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829895/",
            "reporter": "geenensp"
        }
    ],
    "3829894": [
        {
            "dateadded": "2026-04-23 20:45:09 UTC",
            "url": "https://meta-rn0du.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829894/",
            "reporter": "anonymous"
        }
    ],
    "3829893": [
        {
            "dateadded": "2026-04-23 20:40:12 UTC",
            "url": "https://abl3zv.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829893/",
            "reporter": "anonymous"
        }
    ],
    "3829892": [
        {
            "dateadded": "2026-04-23 20:39:10 UTC",
            "url": "http://112.249.123.111:41367/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829892/",
            "reporter": "geenensp"
        }
    ],
    "3829891": [
        {
            "dateadded": "2026-04-23 20:37:14 UTC",
            "url": "http://115.49.24.39:36333/i",
            "url_status": "offline",
            "last_online": "2026-04-25 06:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829891/",
            "reporter": "geenensp"
        }
    ],
    "3829890": [
        {
            "dateadded": "2026-04-23 20:33:09 UTC",
            "url": "https://hyper-r3fin.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829890/",
            "reporter": "anonymous"
        }
    ],
    "3829889": [
        {
            "dateadded": "2026-04-23 20:31:18 UTC",
            "url": "http://222.138.102.33:54761/i",
            "url_status": "offline",
            "last_online": "2026-04-23 20:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829889/",
            "reporter": "geenensp"
        }
    ],
    "3829888": [
        {
            "dateadded": "2026-04-23 20:29:17 UTC",
            "url": "http://115.49.24.39:36333/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829888/",
            "reporter": "geenensp"
        }
    ],
    "3829887": [
        {
            "dateadded": "2026-04-23 20:27:33 UTC",
            "url": "https://xjnorrmf.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829887/",
            "reporter": "anonymous"
        }
    ],
    "3829886": [
        {
            "dateadded": "2026-04-23 20:26:11 UTC",
            "url": "http://42.231.255.119:34288/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:03:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829886/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829885": [
        {
            "dateadded": "2026-04-23 20:22:13 UTC",
            "url": "https://r4il2-point.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829885/",
            "reporter": "anonymous"
        }
    ],
    "3829884": [
        {
            "dateadded": "2026-04-23 20:22:11 UTC",
            "url": "http://125.41.230.52:51007/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:03:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829884/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829883": [
        {
            "dateadded": "2026-04-23 20:20:24 UTC",
            "url": "http://45.135.193.118/debug.dbg",
            "url_status": "offline",
            "last_online": "2026-04-24 10:52:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829883/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829882": [
        {
            "dateadded": "2026-04-23 20:19:14 UTC",
            "url": "http://45.135.193.118/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-23 20:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829882/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829876": [
        {
            "dateadded": "2026-04-23 20:18:22 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 05:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829876/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829877": [
        {
            "dateadded": "2026-04-23 20:18:22 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.mips",
            "url_status": "offline",
            "last_online": "2026-04-23 23:53:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829877/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829878": [
        {
            "dateadded": "2026-04-23 20:18:22 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 05:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829878/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829879": [
        {
            "dateadded": "2026-04-23 20:18:22 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 05:55:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829879/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829880": [
        {
            "dateadded": "2026-04-23 20:18:22 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 06:27:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829880/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829881": [
        {
            "dateadded": "2026-04-23 20:18:22 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 05:02:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829881/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829867": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.135.193.118/main_spc",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829867/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829868": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.135.193.118/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829868/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829869": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.spc",
            "url_status": "offline",
            "last_online": "2026-04-24 05:50:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829869/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829870": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.arc",
            "url_status": "offline",
            "last_online": "2026-04-24 04:58:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829870/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829871": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 05:10:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829871/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829872": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.arm",
            "url_status": "offline",
            "last_online": "2026-04-24 06:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829872/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829873": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 05:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829873/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829874": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.x86",
            "url_status": "offline",
            "last_online": "2026-04-24 05:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829874/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829875": [
        {
            "dateadded": "2026-04-23 20:18:21 UTC",
            "url": "http://45.131.108.107/LjEZs/uYtea.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 05:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829875/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829861": [
        {
            "dateadded": "2026-04-23 20:18:17 UTC",
            "url": "http://45.135.193.118/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829861/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829862": [
        {
            "dateadded": "2026-04-23 20:18:17 UTC",
            "url": "http://45.135.193.118/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829862/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829863": [
        {
            "dateadded": "2026-04-23 20:18:17 UTC",
            "url": "http://45.135.193.118/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829863/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829864": [
        {
            "dateadded": "2026-04-23 20:18:17 UTC",
            "url": "http://45.135.193.118/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829864/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829865": [
        {
            "dateadded": "2026-04-23 20:18:17 UTC",
            "url": "http://45.135.193.118/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829865/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829866": [
        {
            "dateadded": "2026-04-23 20:18:17 UTC",
            "url": "http://45.135.193.118/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829866/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829860": [
        {
            "dateadded": "2026-04-23 20:18:14 UTC",
            "url": "http://45.135.193.118/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-23 20:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829860/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829859": [
        {
            "dateadded": "2026-04-23 20:17:18 UTC",
            "url": "http://45.135.193.118/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 20:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829859/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829858": [
        {
            "dateadded": "2026-04-23 20:11:19 UTC",
            "url": "http://114.239.210.205:46801/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829858/",
            "reporter": "geenensp"
        }
    ],
    "3829857": [
        {
            "dateadded": "2026-04-23 20:10:11 UTC",
            "url": "https://tal-draon.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829857/",
            "reporter": "anonymous"
        }
    ],
    "3829856": [
        {
            "dateadded": "2026-04-23 20:09:11 UTC",
            "url": "http://219.156.21.247:42251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829856/",
            "reporter": "geenensp"
        }
    ],
    "3829855": [
        {
            "dateadded": "2026-04-23 20:05:09 UTC",
            "url": "https://partne0-sync.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 20:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829855/",
            "reporter": "anonymous"
        }
    ],
    "3829854": [
        {
            "dateadded": "2026-04-23 19:59:07 UTC",
            "url": "https://quormark6os.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829854/",
            "reporter": "anonymous"
        }
    ],
    "3829853": [
        {
            "dateadded": "2026-04-23 19:57:09 UTC",
            "url": "http://42.231.255.119:34288/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:59:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829853/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829852": [
        {
            "dateadded": "2026-04-23 19:57:08 UTC",
            "url": "http://113.94.31.24:52659/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:20:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829852/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829851": [
        {
            "dateadded": "2026-04-23 19:55:17 UTC",
            "url": "http://124.72.180.69:39905/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:02:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829851/",
            "reporter": "geenensp"
        }
    ],
    "3829850": [
        {
            "dateadded": "2026-04-23 19:55:16 UTC",
            "url": "http://123.11.77.237:47306/i",
            "url_status": "offline",
            "last_online": "2026-04-24 16:53:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829850/",
            "reporter": "geenensp"
        }
    ],
    "3829849": [
        {
            "dateadded": "2026-04-23 19:53:08 UTC",
            "url": "https://yt3oufng.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829849/",
            "reporter": "anonymous"
        }
    ],
    "3829848": [
        {
            "dateadded": "2026-04-23 19:52:07 UTC",
            "url": "http://125.43.146.39:46312/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:51:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829848/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829847": [
        {
            "dateadded": "2026-04-23 19:49:12 UTC",
            "url": "https://lunarorganize.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829847/",
            "reporter": "anonymous"
        }
    ],
    "3829846": [
        {
            "dateadded": "2026-04-23 19:43:09 UTC",
            "url": "https://vel-lineet.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829846/",
            "reporter": "anonymous"
        }
    ],
    "3829845": [
        {
            "dateadded": "2026-04-23 19:39:18 UTC",
            "url": "http://27.218.57.214:60999/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829845/",
            "reporter": "geenensp"
        }
    ],
    "3829844": [
        {
            "dateadded": "2026-04-23 19:38:08 UTC",
            "url": "https://primeree.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829844/",
            "reporter": "anonymous"
        }
    ],
    "3829843": [
        {
            "dateadded": "2026-04-23 19:37:16 UTC",
            "url": "http://200.115.102.16:47733/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:34:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829843/",
            "reporter": "geenensp"
        }
    ],
    "3829842": [
        {
            "dateadded": "2026-04-23 19:35:20 UTC",
            "url": "http://123.11.77.237:47306/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829842/",
            "reporter": "geenensp"
        }
    ],
    "3829841": [
        {
            "dateadded": "2026-04-23 19:33:16 UTC",
            "url": "http://2.57.241.166//arm5",
            "url_status": "offline",
            "last_online": "2026-04-23 23:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829841/",
            "reporter": "botnetkiller"
        }
    ],
    "3829840": [
        {
            "dateadded": "2026-04-23 19:32:08 UTC",
            "url": "http://125.43.146.39:46312/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:57:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829840/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829839": [
        {
            "dateadded": "2026-04-23 19:31:09 UTC",
            "url": "https://parcelpow.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829839/",
            "reporter": "anonymous"
        }
    ],
    "3829838": [
        {
            "dateadded": "2026-04-23 19:27:07 UTC",
            "url": "http://113.94.31.24:52659/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 10:48:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829838/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829837": [
        {
            "dateadded": "2026-04-23 19:26:06 UTC",
            "url": "https://pb3kwq.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:26:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829837/",
            "reporter": "anonymous"
        }
    ],
    "3829836": [
        {
            "dateadded": "2026-04-23 19:25:25 UTC",
            "url": "http://175.165.81.141:59756/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:05:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829836/",
            "reporter": "geenensp"
        }
    ],
    "3829835": [
        {
            "dateadded": "2026-04-23 19:24:07 UTC",
            "url": "http://123.14.255.207:35919/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829835/",
            "reporter": "geenensp"
        }
    ],
    "3829834": [
        {
            "dateadded": "2026-04-23 19:23:23 UTC",
            "url": "http://124.72.180.69:39905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829834/",
            "reporter": "geenensp"
        }
    ],
    "3829833": [
        {
            "dateadded": "2026-04-23 19:21:18 UTC",
            "url": "http://123.14.255.207:35919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 20:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829833/",
            "reporter": "geenensp"
        }
    ],
    "3829832": [
        {
            "dateadded": "2026-04-23 19:21:07 UTC",
            "url": "https://c0mpu7-phase.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829832/",
            "reporter": "anonymous"
        }
    ],
    "3829831": [
        {
            "dateadded": "2026-04-23 19:20:20 UTC",
            "url": "http://115.62.148.47:58213/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829831/",
            "reporter": "geenensp"
        }
    ],
    "3829826": [
        {
            "dateadded": "2026-04-23 19:17:13 UTC",
            "url": "http://2.57.241.166/arm5",
            "url_status": "offline",
            "last_online": "2026-04-23 22:47:56 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829826/",
            "reporter": "botnetkiller"
        }
    ],
    "3829827": [
        {
            "dateadded": "2026-04-23 19:17:13 UTC",
            "url": "http://2.57.241.166/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 00:18:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829827/",
            "reporter": "botnetkiller"
        }
    ],
    "3829828": [
        {
            "dateadded": "2026-04-23 19:17:13 UTC",
            "url": "http://2.57.241.166/arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 23:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829828/",
            "reporter": "botnetkiller"
        }
    ],
    "3829829": [
        {
            "dateadded": "2026-04-23 19:17:13 UTC",
            "url": "http://2.57.241.166/ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 23:24:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829829/",
            "reporter": "botnetkiller"
        }
    ],
    "3829830": [
        {
            "dateadded": "2026-04-23 19:17:13 UTC",
            "url": "http://2.57.241.166/mips",
            "url_status": "offline",
            "last_online": "2026-04-23 23:13:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829830/",
            "reporter": "botnetkiller"
        }
    ],
    "3829822": [
        {
            "dateadded": "2026-04-23 19:17:12 UTC",
            "url": "http://2.57.241.166/lol.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:55:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829822/",
            "reporter": "botnetkiller"
        }
    ],
    "3829823": [
        {
            "dateadded": "2026-04-23 19:17:12 UTC",
            "url": "http://2.57.241.166/x86",
            "url_status": "offline",
            "last_online": "2026-04-23 23:17:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829823/",
            "reporter": "botnetkiller"
        }
    ],
    "3829824": [
        {
            "dateadded": "2026-04-23 19:17:12 UTC",
            "url": "http://2.57.241.166/sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 23:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829824/",
            "reporter": "botnetkiller"
        }
    ],
    "3829825": [
        {
            "dateadded": "2026-04-23 19:17:12 UTC",
            "url": "http://2.57.241.166/arm",
            "url_status": "offline",
            "last_online": "2026-04-23 23:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829825/",
            "reporter": "botnetkiller"
        }
    ],
    "3829820": [
        {
            "dateadded": "2026-04-23 19:17:07 UTC",
            "url": "http://42.230.227.62:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:53:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829820/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829821": [
        {
            "dateadded": "2026-04-23 19:17:07 UTC",
            "url": "http://42.239.149.59:42663/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:13:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829821/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829819": [
        {
            "dateadded": "2026-04-23 19:15:17 UTC",
            "url": "http://112.246.21.226:58013/i",
            "url_status": "offline",
            "last_online": "2026-04-25 01:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829819/",
            "reporter": "geenensp"
        }
    ],
    "3829818": [
        {
            "dateadded": "2026-04-23 19:15:11 UTC",
            "url": "https://nugr.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829818/",
            "reporter": "anonymous"
        }
    ],
    "3829817": [
        {
            "dateadded": "2026-04-23 19:13:16 UTC",
            "url": "http://2.57.241.166/arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 00:19:49 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829817/",
            "reporter": "botnetkiller"
        }
    ],
    "3829816": [
        {
            "dateadded": "2026-04-23 19:12:06 UTC",
            "url": "http://82.114.178.6:49907/i",
            "url_status": "offline",
            "last_online": "2026-04-23 19:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829816/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829815": [
        {
            "dateadded": "2026-04-23 19:09:09 UTC",
            "url": "https://1sdw0.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829815/",
            "reporter": "anonymous"
        }
    ],
    "3829814": [
        {
            "dateadded": "2026-04-23 19:07:14 UTC",
            "url": "http://115.62.148.47:58213/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829814/",
            "reporter": "geenensp"
        }
    ],
    "3829813": [
        {
            "dateadded": "2026-04-23 19:04:09 UTC",
            "url": "https://airwayequity.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 19:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829813/",
            "reporter": "anonymous"
        }
    ],
    "3829812": [
        {
            "dateadded": "2026-04-23 19:02:07 UTC",
            "url": "http://42.239.149.59:42663/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:17:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829812/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829810": [
        {
            "dateadded": "2026-04-23 18:59:20 UTC",
            "url": "http://183.35.50.185:59827/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829810/",
            "reporter": "geenensp"
        }
    ],
    "3829811": [
        {
            "dateadded": "2026-04-23 18:59:20 UTC",
            "url": "http://175.151.128.38:34555/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829811/",
            "reporter": "geenensp"
        }
    ],
    "3829809": [
        {
            "dateadded": "2026-04-23 18:58:07 UTC",
            "url": "https://velnexor3.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829809/",
            "reporter": "anonymous"
        }
    ],
    "3829808": [
        {
            "dateadded": "2026-04-23 18:52:11 UTC",
            "url": "https://html.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829808/",
            "reporter": "anonymous"
        }
    ],
    "3829807": [
        {
            "dateadded": "2026-04-23 18:49:42 UTC",
            "url": "http://112.246.21.226:58013/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:06:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829807/",
            "reporter": "geenensp"
        }
    ],
    "3829806": [
        {
            "dateadded": "2026-04-23 18:48:18 UTC",
            "url": "http://183.35.50.185:59827/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829806/",
            "reporter": "geenensp"
        }
    ],
    "3829805": [
        {
            "dateadded": "2026-04-23 18:46:11 UTC",
            "url": "https://alt-r3bat.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829805/",
            "reporter": "anonymous"
        }
    ],
    "3829804": [
        {
            "dateadded": "2026-04-23 18:42:08 UTC",
            "url": "http://82.114.178.6:49907/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829804/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829803": [
        {
            "dateadded": "2026-04-23 18:42:07 UTC",
            "url": "https://bundldaw.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829803/",
            "reporter": "anonymous"
        }
    ],
    "3829802": [
        {
            "dateadded": "2026-04-23 18:33:08 UTC",
            "url": "https://mercore1et.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829802/",
            "reporter": "anonymous"
        }
    ],
    "3829801": [
        {
            "dateadded": "2026-04-23 18:25:09 UTC",
            "url": "https://shallo-layer.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829801/",
            "reporter": "anonymous"
        }
    ],
    "3829800": [
        {
            "dateadded": "2026-04-23 18:14:23 UTC",
            "url": "http://115.54.183.204:46031/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829800/",
            "reporter": "geenensp"
        }
    ],
    "3829799": [
        {
            "dateadded": "2026-04-23 18:13:13 UTC",
            "url": "https://solline1ix.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829799/",
            "reporter": "anonymous"
        }
    ],
    "3829798": [
        {
            "dateadded": "2026-04-23 18:07:13 UTC",
            "url": "https://serlinea8.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829798/",
            "reporter": "anonymous"
        }
    ],
    "3829797": [
        {
            "dateadded": "2026-04-23 18:07:07 UTC",
            "url": "http://154.249.112.213:46376/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829797/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829796": [
        {
            "dateadded": "2026-04-23 18:00:13 UTC",
            "url": "https://ca1rn-mount.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 18:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829796/",
            "reporter": "anonymous"
        }
    ],
    "3829795": [
        {
            "dateadded": "2026-04-23 17:54:13 UTC",
            "url": "https://epyc.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829795/",
            "reporter": "anonymous"
        }
    ],
    "3829794": [
        {
            "dateadded": "2026-04-23 17:50:09 UTC",
            "url": "https://flee-bridge.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829794/",
            "reporter": "anonymous"
        }
    ],
    "3829792": [
        {
            "dateadded": "2026-04-23 17:47:08 UTC",
            "url": "http://219.157.21.124:48154/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:02:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829792/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829793": [
        {
            "dateadded": "2026-04-23 17:47:08 UTC",
            "url": "http://154.249.112.213:46376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:58:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829793/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829791": [
        {
            "dateadded": "2026-04-23 17:44:22 UTC",
            "url": "http://125.47.60.192:52623/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829791/",
            "reporter": "geenensp"
        }
    ],
    "3829790": [
        {
            "dateadded": "2026-04-23 17:43:14 UTC",
            "url": "https://kionap.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829790/",
            "reporter": "anonymous"
        }
    ],
    "3829789": [
        {
            "dateadded": "2026-04-23 17:42:21 UTC",
            "url": "http://125.47.60.192:52623/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:48:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829789/",
            "reporter": "geenensp"
        }
    ],
    "3829788": [
        {
            "dateadded": "2026-04-23 17:33:24 UTC",
            "url": "http://110.182.253.77:51274/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829788/",
            "reporter": "geenensp"
        }
    ],
    "3829787": [
        {
            "dateadded": "2026-04-23 17:33:23 UTC",
            "url": "http://59.180.173.23:54764/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829787/",
            "reporter": "geenensp"
        }
    ],
    "3829786": [
        {
            "dateadded": "2026-04-23 17:33:14 UTC",
            "url": "https://30jp.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829786/",
            "reporter": "anonymous"
        }
    ],
    "3829785": [
        {
            "dateadded": "2026-04-23 17:31:13 UTC",
            "url": "https://w90084qc.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829785/",
            "reporter": "anonymous"
        }
    ],
    "3829784": [
        {
            "dateadded": "2026-04-23 17:22:12 UTC",
            "url": "https://roughcomp.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829784/",
            "reporter": "anonymous"
        }
    ],
    "3829783": [
        {
            "dateadded": "2026-04-23 17:12:13 UTC",
            "url": "https://timberexpose.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829783/",
            "reporter": "anonymous"
        }
    ],
    "3829781": [
        {
            "dateadded": "2026-04-23 17:09:20 UTC",
            "url": "http://60.211.80.163:43265/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829781/",
            "reporter": "geenensp"
        }
    ],
    "3829782": [
        {
            "dateadded": "2026-04-23 17:09:20 UTC",
            "url": "http://123.10.152.125:47367/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:31:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829782/",
            "reporter": "geenensp"
        }
    ],
    "3829780": [
        {
            "dateadded": "2026-04-23 17:06:22 UTC",
            "url": "http://60.212.120.177:52038/i",
            "url_status": "offline",
            "last_online": "2026-04-24 04:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829780/",
            "reporter": "geenensp"
        }
    ],
    "3829779": [
        {
            "dateadded": "2026-04-23 17:05:16 UTC",
            "url": "https://g1yph5-switch.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829779/",
            "reporter": "anonymous"
        }
    ],
    "3829778": [
        {
            "dateadded": "2026-04-23 17:03:10 UTC",
            "url": "http://206.72.197.50:8040/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=GENERAL&c=&c=GENERAL&c=&c=&c=&c=&c=",
            "url_status": "offline",
            "last_online": "2026-04-23 17:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "135e7b",
                "connectwise",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829778/",
            "reporter": "Bitsight"
        }
    ],
    "3829777": [
        {
            "dateadded": "2026-04-23 17:03:09 UTC",
            "url": "http://163.245.208.50/Psd8eZaW/Plugins/cred64.dll",
            "url_status": "offline",
            "last_online": "2026-04-23 17:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "135e7b",
                "Amadey",
                "cred64.dll",
                "dropped-by-amadey",
                "plugin"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829777/",
            "reporter": "Bitsight"
        }
    ],
    "3829776": [
        {
            "dateadded": "2026-04-23 17:02:15 UTC",
            "url": "https://xj15ti.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829776/",
            "reporter": "anonymous"
        }
    ],
    "3829774": [
        {
            "dateadded": "2026-04-23 17:02:11 UTC",
            "url": "http://163.245.208.50/Psd8eZaW/Plugins/cred.dll",
            "url_status": "offline",
            "last_online": "2026-04-23 17:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "135e7b",
                "Amadey",
                "cred.dll",
                "dropped-by-amadey",
                "plugin"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829774/",
            "reporter": "Bitsight"
        }
    ],
    "3829775": [
        {
            "dateadded": "2026-04-23 17:02:11 UTC",
            "url": "http://105.224.34.203:60409/i",
            "url_status": "offline",
            "last_online": "2026-04-24 00:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829775/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829773": [
        {
            "dateadded": "2026-04-23 17:00:28 UTC",
            "url": "http://60.211.80.163:43265/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:54:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829773/",
            "reporter": "geenensp"
        }
    ],
    "3829772": [
        {
            "dateadded": "2026-04-23 16:51:13 UTC",
            "url": "https://modelfabri.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829772/",
            "reporter": "anonymous"
        }
    ],
    "3829771": [
        {
            "dateadded": "2026-04-23 16:49:24 UTC",
            "url": "http://103.249.199.4:35727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829771/",
            "reporter": "geenensp"
        }
    ],
    "3829770": [
        {
            "dateadded": "2026-04-23 16:46:12 UTC",
            "url": "https://fujyh.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829770/",
            "reporter": "anonymous"
        }
    ],
    "3829769": [
        {
            "dateadded": "2026-04-23 16:44:21 UTC",
            "url": "http://218.63.30.182:44688/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:43:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829769/",
            "reporter": "geenensp"
        }
    ],
    "3829768": [
        {
            "dateadded": "2026-04-23 16:42:03 UTC",
            "url": "http://222.138.118.234:45513/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829768/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829767": [
        {
            "dateadded": "2026-04-23 16:38:07 UTC",
            "url": "https://shapeprivat.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829767/",
            "reporter": "anonymous"
        }
    ],
    "3829766": [
        {
            "dateadded": "2026-04-23 16:37:19 UTC",
            "url": "http://42.85.184.166:60241/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829766/",
            "reporter": "geenensp"
        }
    ],
    "3829765": [
        {
            "dateadded": "2026-04-23 16:36:17 UTC",
            "url": "http://60.212.120.177:52038/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829765/",
            "reporter": "geenensp"
        }
    ],
    "3829764": [
        {
            "dateadded": "2026-04-23 16:35:10 UTC",
            "url": "https://zenmarka.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829764/",
            "reporter": "anonymous"
        }
    ],
    "3829763": [
        {
            "dateadded": "2026-04-23 16:27:10 UTC",
            "url": "http://182.119.228.59:54132/i",
            "url_status": "offline",
            "last_online": "2026-04-24 10:49:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829763/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829762": [
        {
            "dateadded": "2026-04-23 16:24:11 UTC",
            "url": "https://ttgfvj.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829762/",
            "reporter": "anonymous"
        }
    ],
    "3829761": [
        {
            "dateadded": "2026-04-23 16:22:17 UTC",
            "url": "http://110.36.19.51:46892/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829761/",
            "reporter": "geenensp"
        }
    ],
    "3829755": [
        {
            "dateadded": "2026-04-23 16:21:09 UTC",
            "url": "https://o999.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829755/",
            "reporter": "anonymous"
        }
    ],
    "3829756": [
        {
            "dateadded": "2026-04-23 16:21:09 UTC",
            "url": "http://176.65.148.212/arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 06:04:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829756/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829757": [
        {
            "dateadded": "2026-04-23 16:21:09 UTC",
            "url": "http://176.65.148.212/x86",
            "url_status": "offline",
            "last_online": "2026-04-24 10:58:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829757/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829758": [
        {
            "dateadded": "2026-04-23 16:21:09 UTC",
            "url": "http://176.65.148.212/arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 04:51:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829758/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829759": [
        {
            "dateadded": "2026-04-23 16:21:09 UTC",
            "url": "http://176.65.148.212/arm4",
            "url_status": "offline",
            "last_online": "2026-04-24 11:02:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829759/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829760": [
        {
            "dateadded": "2026-04-23 16:21:09 UTC",
            "url": "http://176.65.148.212/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 11:14:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829760/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829753": [
        {
            "dateadded": "2026-04-23 16:20:14 UTC",
            "url": "http://176.65.148.212/mips",
            "url_status": "offline",
            "last_online": "2026-04-24 06:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829753/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829754": [
        {
            "dateadded": "2026-04-23 16:20:14 UTC",
            "url": "http://176.65.148.212/arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 06:08:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829754/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829752": [
        {
            "dateadded": "2026-04-23 16:19:19 UTC",
            "url": "http://176.65.148.212/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 11:04:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829752/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3829751": [
        {
            "dateadded": "2026-04-23 16:17:07 UTC",
            "url": "http://123.7.221.43:46652/i",
            "url_status": "offline",
            "last_online": "2026-04-24 10:50:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829751/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829750": [
        {
            "dateadded": "2026-04-23 16:12:19 UTC",
            "url": "http://125.46.199.43:49679/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829750/",
            "reporter": "geenensp"
        }
    ],
    "3829749": [
        {
            "dateadded": "2026-04-23 16:12:18 UTC",
            "url": "http://110.36.19.51:46892/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:59:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829749/",
            "reporter": "geenensp"
        }
    ],
    "3829748": [
        {
            "dateadded": "2026-04-23 16:12:09 UTC",
            "url": "https://c1inic-crest.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829748/",
            "reporter": "anonymous"
        }
    ],
    "3829747": [
        {
            "dateadded": "2026-04-23 16:12:08 UTC",
            "url": "http://182.119.228.59:54132/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:01:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829747/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829746": [
        {
            "dateadded": "2026-04-23 16:12:06 UTC",
            "url": "http://119.184.8.158:44824/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:22:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829746/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829745": [
        {
            "dateadded": "2026-04-23 16:06:20 UTC",
            "url": "http://42.85.184.166:60241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829745/",
            "reporter": "geenensp"
        }
    ],
    "3829744": [
        {
            "dateadded": "2026-04-23 16:05:10 UTC",
            "url": "https://fkcrc.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829744/",
            "reporter": "anonymous"
        }
    ],
    "3829743": [
        {
            "dateadded": "2026-04-23 16:01:07 UTC",
            "url": "https://gsfyi.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 16:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829743/",
            "reporter": "anonymous"
        }
    ],
    "3829742": [
        {
            "dateadded": "2026-04-23 16:00:19 UTC",
            "url": "http://222.140.197.218:46905/i",
            "url_status": "offline",
            "last_online": "2026-04-24 04:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829742/",
            "reporter": "geenensp"
        }
    ],
    "3829741": [
        {
            "dateadded": "2026-04-23 15:57:07 UTC",
            "url": "http://42.230.213.77:36206/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:45:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829741/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829740": [
        {
            "dateadded": "2026-04-23 15:57:06 UTC",
            "url": "http://115.49.211.251:53986/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829740/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829739": [
        {
            "dateadded": "2026-04-23 15:55:10 UTC",
            "url": "https://glmu.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829739/",
            "reporter": "anonymous"
        }
    ],
    "3829738": [
        {
            "dateadded": "2026-04-23 15:51:15 UTC",
            "url": "http://125.46.199.43:49679/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829738/",
            "reporter": "geenensp"
        }
    ],
    "3829737": [
        {
            "dateadded": "2026-04-23 15:47:07 UTC",
            "url": "http://123.4.165.231:51859/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:01:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829737/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829736": [
        {
            "dateadded": "2026-04-23 15:45:11 UTC",
            "url": "https://segpaylo.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829736/",
            "reporter": "anonymous"
        }
    ],
    "3829735": [
        {
            "dateadded": "2026-04-23 15:44:20 UTC",
            "url": "http://42.239.177.77:54725/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829735/",
            "reporter": "geenensp"
        }
    ],
    "3829734": [
        {
            "dateadded": "2026-04-23 15:42:09 UTC",
            "url": "http://108.57.49.212:43134/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:18:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829734/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829733": [
        {
            "dateadded": "2026-04-23 15:39:13 UTC",
            "url": "https://locallan.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829733/",
            "reporter": "anonymous"
        }
    ],
    "3829732": [
        {
            "dateadded": "2026-04-23 15:34:09 UTC",
            "url": "https://pric3-flow.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829732/",
            "reporter": "anonymous"
        }
    ],
    "3829731": [
        {
            "dateadded": "2026-04-23 15:32:08 UTC",
            "url": "http://119.184.8.158:44824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829731/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829730": [
        {
            "dateadded": "2026-04-23 15:31:21 UTC",
            "url": "http://182.125.60.152:37787/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:46:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829730/",
            "reporter": "geenensp"
        }
    ],
    "3829729": [
        {
            "dateadded": "2026-04-23 15:26:09 UTC",
            "url": "https://cryptocatal.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829729/",
            "reporter": "anonymous"
        }
    ],
    "3829728": [
        {
            "dateadded": "2026-04-23 15:22:08 UTC",
            "url": "http://42.230.213.77:36206/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:20:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829728/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829727": [
        {
            "dateadded": "2026-04-23 15:22:07 UTC",
            "url": "http://219.155.211.234:52155/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 15:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829727/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829726": [
        {
            "dateadded": "2026-04-23 15:21:08 UTC",
            "url": "https://compil0-spark.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829726/",
            "reporter": "anonymous"
        }
    ],
    "3829725": [
        {
            "dateadded": "2026-04-23 15:19:08 UTC",
            "url": "https://27ny0.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829725/",
            "reporter": "anonymous"
        }
    ],
    "3829724": [
        {
            "dateadded": "2026-04-23 15:17:07 UTC",
            "url": "http://42.239.255.22:47698/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:34:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829724/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829723": [
        {
            "dateadded": "2026-04-23 15:16:18 UTC",
            "url": "http://80.67.33.209:60925/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:21:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829723/",
            "reporter": "geenensp"
        }
    ],
    "3829722": [
        {
            "dateadded": "2026-04-23 15:12:07 UTC",
            "url": "http://88.84.56.63:53872/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:59:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829722/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829721": [
        {
            "dateadded": "2026-04-23 15:09:13 UTC",
            "url": "https://42qq.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 15:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829721/",
            "reporter": "anonymous"
        }
    ],
    "3829720": [
        {
            "dateadded": "2026-04-23 15:04:16 UTC",
            "url": "http://60.23.220.61:46488/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829720/",
            "reporter": "geenensp"
        }
    ],
    "3829719": [
        {
            "dateadded": "2026-04-23 15:03:14 UTC",
            "url": "http://60.23.220.61:46488/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829719/",
            "reporter": "geenensp"
        }
    ],
    "3829718": [
        {
            "dateadded": "2026-04-23 15:01:20 UTC",
            "url": "http://182.117.69.163:53660/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:01:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829718/",
            "reporter": "geenensp"
        }
    ],
    "3829717": [
        {
            "dateadded": "2026-04-23 14:59:07 UTC",
            "url": "https://nordraex.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829717/",
            "reporter": "anonymous"
        }
    ],
    "3829716": [
        {
            "dateadded": "2026-04-23 14:57:09 UTC",
            "url": "http://115.49.211.251:53986/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:18:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829716/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829715": [
        {
            "dateadded": "2026-04-23 14:56:26 UTC",
            "url": "http://182.117.69.163:53660/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829715/",
            "reporter": "geenensp"
        }
    ],
    "3829714": [
        {
            "dateadded": "2026-04-23 14:54:08 UTC",
            "url": "https://bark8-grid.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829714/",
            "reporter": "anonymous"
        }
    ],
    "3829713": [
        {
            "dateadded": "2026-04-23 14:52:07 UTC",
            "url": "http://123.4.165.231:51859/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829713/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829711": [
        {
            "dateadded": "2026-04-23 14:49:18 UTC",
            "url": "http://80.67.33.209:60925/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829711/",
            "reporter": "geenensp"
        }
    ],
    "3829712": [
        {
            "dateadded": "2026-04-23 14:49:18 UTC",
            "url": "http://125.44.51.95:48581/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829712/",
            "reporter": "geenensp"
        }
    ],
    "3829710": [
        {
            "dateadded": "2026-04-23 14:49:08 UTC",
            "url": "https://9sy22gk.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829710/",
            "reporter": "anonymous"
        }
    ],
    "3829709": [
        {
            "dateadded": "2026-04-23 14:46:12 UTC",
            "url": "http://175.149.205.126:36974/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829709/",
            "reporter": "geenensp"
        }
    ],
    "3829708": [
        {
            "dateadded": "2026-04-23 14:42:08 UTC",
            "url": "http://88.84.56.63:53872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:03:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829708/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829707": [
        {
            "dateadded": "2026-04-23 14:41:13 UTC",
            "url": "https://neo-r0ut.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829707/",
            "reporter": "anonymous"
        }
    ],
    "3829706": [
        {
            "dateadded": "2026-04-23 14:37:07 UTC",
            "url": "http://115.56.112.121:36849/i",
            "url_status": "offline",
            "last_online": "2026-04-24 10:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829706/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829705": [
        {
            "dateadded": "2026-04-23 14:34:07 UTC",
            "url": "https://civi4-forge.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829705/",
            "reporter": "anonymous"
        }
    ],
    "3829704": [
        {
            "dateadded": "2026-04-23 14:29:17 UTC",
            "url": "http://175.165.81.137:55900/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829704/",
            "reporter": "geenensp"
        }
    ],
    "3829702": [
        {
            "dateadded": "2026-04-23 14:29:07 UTC",
            "url": "http://216.245.184.171/teste.txt",
            "url_status": "offline",
            "last_online": "2026-04-23 14:29:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829702/",
            "reporter": "PeterGabaldon"
        }
    ],
    "3829703": [
        {
            "dateadded": "2026-04-23 14:29:07 UTC",
            "url": "http://216.245.184.171/um.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829703/",
            "reporter": "PeterGabaldon"
        }
    ],
    "3829701": [
        {
            "dateadded": "2026-04-23 14:29:06 UTC",
            "url": "http://115.48.148.194:37385/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829701/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829700": [
        {
            "dateadded": "2026-04-23 14:28:06 UTC",
            "url": "https://guardtimb.kymle6rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829700/",
            "reporter": "anonymous"
        }
    ],
    "3829699": [
        {
            "dateadded": "2026-04-23 14:27:11 UTC",
            "url": "http://125.44.51.95:48581/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:25:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829699/",
            "reporter": "geenensp"
        }
    ],
    "3829698": [
        {
            "dateadded": "2026-04-23 14:22:20 UTC",
            "url": "http://125.41.225.227:39543/i",
            "url_status": "offline",
            "last_online": "2026-04-24 04:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829698/",
            "reporter": "geenensp"
        }
    ],
    "3829697": [
        {
            "dateadded": "2026-04-23 14:22:09 UTC",
            "url": "http://115.56.112.121:36849/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 10:59:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829697/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829696": [
        {
            "dateadded": "2026-04-23 14:21:13 UTC",
            "url": "https://yeay.kymle6rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829696/",
            "reporter": "anonymous"
        }
    ],
    "3829695": [
        {
            "dateadded": "2026-04-23 14:19:32 UTC",
            "url": "http://182.126.119.46:43984/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:20:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829695/",
            "reporter": "geenensp"
        }
    ],
    "3829694": [
        {
            "dateadded": "2026-04-23 14:18:07 UTC",
            "url": "https://ravenworke.kymle6rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 14:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829694/",
            "reporter": "anonymous"
        }
    ],
    "3829693": [
        {
            "dateadded": "2026-04-23 13:59:19 UTC",
            "url": "http://175.165.81.137:55900/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:13:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829693/",
            "reporter": "geenensp"
        }
    ],
    "3829692": [
        {
            "dateadded": "2026-04-23 13:59:18 UTC",
            "url": "http://222.127.254.114:32853/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:31:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829692/",
            "reporter": "geenensp"
        }
    ],
    "3829691": [
        {
            "dateadded": "2026-04-23 13:59:17 UTC",
            "url": "http://104.32.65.48:39960/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829691/",
            "reporter": "geenensp"
        }
    ],
    "3829690": [
        {
            "dateadded": "2026-04-23 13:57:07 UTC",
            "url": "http://222.137.145.112:54496/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829690/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829689": [
        {
            "dateadded": "2026-04-23 13:55:14 UTC",
            "url": "http://182.126.119.46:43984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:06:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829689/",
            "reporter": "geenensp"
        }
    ],
    "3829688": [
        {
            "dateadded": "2026-04-23 13:51:09 UTC",
            "url": "http://115.59.59.122:32991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829688/",
            "reporter": "geenensp"
        }
    ],
    "3829687": [
        {
            "dateadded": "2026-04-23 13:48:14 UTC",
            "url": "http://219.155.211.234:52155/i",
            "url_status": "offline",
            "last_online": "2026-04-23 13:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829687/",
            "reporter": "geenensp"
        }
    ],
    "3829686": [
        {
            "dateadded": "2026-04-23 13:46:10 UTC",
            "url": "http://125.41.225.227:39543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:48:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829686/",
            "reporter": "geenensp"
        }
    ],
    "3829685": [
        {
            "dateadded": "2026-04-23 13:44:16 UTC",
            "url": "http://221.1.155.237:56893/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:01:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829685/",
            "reporter": "geenensp"
        }
    ],
    "3829684": [
        {
            "dateadded": "2026-04-23 13:35:09 UTC",
            "url": "https://bpja3y.to1varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 17:03:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829684/",
            "reporter": "anonymous"
        }
    ],
    "3829683": [
        {
            "dateadded": "2026-04-23 13:30:29 UTC",
            "url": "http://182.124.121.212:49247/i",
            "url_status": "offline",
            "last_online": "2026-04-23 13:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829683/",
            "reporter": "geenensp"
        }
    ],
    "3829682": [
        {
            "dateadded": "2026-04-23 13:27:08 UTC",
            "url": "https://vormark6um.to1varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 13:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829682/",
            "reporter": "anonymous"
        }
    ],
    "3829680": [
        {
            "dateadded": "2026-04-23 13:27:07 UTC",
            "url": "http://182.127.113.211:58825/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:28:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829680/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829681": [
        {
            "dateadded": "2026-04-23 13:27:07 UTC",
            "url": "http://220.202.66.241:42546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 13:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829681/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829679": [
        {
            "dateadded": "2026-04-23 13:26:07 UTC",
            "url": "http://119.117.104.247:51399/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829679/",
            "reporter": "geenensp"
        }
    ],
    "3829678": [
        {
            "dateadded": "2026-04-23 13:22:07 UTC",
            "url": "http://115.53.194.141:35263/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 22:56:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829678/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829677": [
        {
            "dateadded": "2026-04-23 13:18:23 UTC",
            "url": "http://221.1.155.237:56893/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:47:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829677/",
            "reporter": "geenensp"
        }
    ],
    "3829675": [
        {
            "dateadded": "2026-04-23 13:12:07 UTC",
            "url": "http://182.127.113.211:58825/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829675/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829676": [
        {
            "dateadded": "2026-04-23 13:12:07 UTC",
            "url": "http://221.15.6.202:41914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829676/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829674": [
        {
            "dateadded": "2026-04-23 13:12:06 UTC",
            "url": "http://217.211.117.55:34313/i",
            "url_status": "offline",
            "last_online": "2026-04-24 04:59:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829674/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829672": [
        {
            "dateadded": "2026-04-23 13:02:07 UTC",
            "url": "http://217.211.117.55:34313/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829672/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829673": [
        {
            "dateadded": "2026-04-23 13:02:07 UTC",
            "url": "http://182.116.113.98:38258/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829673/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829671": [
        {
            "dateadded": "2026-04-23 12:52:14 UTC",
            "url": "http://182.116.113.98:38258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829671/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829670": [
        {
            "dateadded": "2026-04-23 12:52:09 UTC",
            "url": "http://115.59.59.122:32991/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:45:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829670/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829669": [
        {
            "dateadded": "2026-04-23 12:49:09 UTC",
            "url": "https://delstrea.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829669/",
            "reporter": "anonymous"
        }
    ],
    "3829668": [
        {
            "dateadded": "2026-04-23 12:46:20 UTC",
            "url": "http://125.43.44.207:35002/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829668/",
            "reporter": "geenensp"
        }
    ],
    "3829667": [
        {
            "dateadded": "2026-04-23 12:41:07 UTC",
            "url": "https://supsensor.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829667/",
            "reporter": "anonymous"
        }
    ],
    "3829666": [
        {
            "dateadded": "2026-04-23 12:34:10 UTC",
            "url": "https://nbfirv.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829666/",
            "reporter": "anonymous"
        }
    ],
    "3829665": [
        {
            "dateadded": "2026-04-23 12:27:13 UTC",
            "url": "https://veltideen.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829665/",
            "reporter": "anonymous"
        }
    ],
    "3829664": [
        {
            "dateadded": "2026-04-23 12:19:07 UTC",
            "url": "https://5ap-mesh.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829664/",
            "reporter": "anonymous"
        }
    ],
    "3829663": [
        {
            "dateadded": "2026-04-23 12:13:22 UTC",
            "url": "http://115.55.117.52:36698/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:49:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829663/",
            "reporter": "geenensp"
        }
    ],
    "3829662": [
        {
            "dateadded": "2026-04-23 12:11:15 UTC",
            "url": "https://zyddq.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829662/",
            "reporter": "anonymous"
        }
    ],
    "3829661": [
        {
            "dateadded": "2026-04-23 12:05:18 UTC",
            "url": "https://bangwdpy.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829661/",
            "reporter": "anonymous"
        }
    ],
    "3829660": [
        {
            "dateadded": "2026-04-23 12:02:15 UTC",
            "url": "http://182.113.224.118:39904/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829660/",
            "reporter": "geenensp"
        }
    ],
    "3829659": [
        {
            "dateadded": "2026-04-23 11:57:18 UTC",
            "url": "https://refinecivil.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829659/",
            "reporter": "anonymous"
        }
    ],
    "3829658": [
        {
            "dateadded": "2026-04-23 11:52:24 UTC",
            "url": "http://125.43.44.207:35002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 06:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829658/",
            "reporter": "geenensp"
        }
    ],
    "3829657": [
        {
            "dateadded": "2026-04-23 11:50:18 UTC",
            "url": "https://reef-mark.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829657/",
            "reporter": "anonymous"
        }
    ],
    "3829656": [
        {
            "dateadded": "2026-04-23 11:42:09 UTC",
            "url": "http://125.126.208.140:55428/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:14:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829656/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829655": [
        {
            "dateadded": "2026-04-23 11:41:26 UTC",
            "url": "http://222.142.76.158:33589/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829655/",
            "reporter": "geenensp"
        }
    ],
    "3829654": [
        {
            "dateadded": "2026-04-23 11:41:15 UTC",
            "url": "https://dusttide.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:41:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829654/",
            "reporter": "anonymous"
        }
    ],
    "3829653": [
        {
            "dateadded": "2026-04-23 11:35:23 UTC",
            "url": "http://182.113.224.118:39904/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829653/",
            "reporter": "geenensp"
        }
    ],
    "3829652": [
        {
            "dateadded": "2026-04-23 11:33:11 UTC",
            "url": "https://61ok.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829652/",
            "reporter": "anonymous"
        }
    ],
    "3829651": [
        {
            "dateadded": "2026-04-23 11:26:10 UTC",
            "url": "https://faithf2-frame.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829651/",
            "reporter": "anonymous"
        }
    ],
    "3829650": [
        {
            "dateadded": "2026-04-23 11:19:36 UTC",
            "url": "http://221.10.192.9:55589/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:49:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829650/",
            "reporter": "geenensp"
        }
    ],
    "3829649": [
        {
            "dateadded": "2026-04-23 11:19:12 UTC",
            "url": "https://snowbrand.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829649/",
            "reporter": "anonymous"
        }
    ],
    "3829648": [
        {
            "dateadded": "2026-04-23 11:12:15 UTC",
            "url": "http://125.126.208.140:55428/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829648/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829647": [
        {
            "dateadded": "2026-04-23 11:12:13 UTC",
            "url": "https://tr4cke-chain.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829647/",
            "reporter": "anonymous"
        }
    ],
    "3829646": [
        {
            "dateadded": "2026-04-23 11:11:12 UTC",
            "url": "http://125.44.52.93:33971/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:17:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829646/",
            "reporter": "geenensp"
        }
    ],
    "3829645": [
        {
            "dateadded": "2026-04-23 11:03:14 UTC",
            "url": "https://hyper8-signal.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 11:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829645/",
            "reporter": "anonymous"
        }
    ],
    "3829644": [
        {
            "dateadded": "2026-04-23 11:02:06 UTC",
            "url": "http://110.36.24.172:41642/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829644/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829643": [
        {
            "dateadded": "2026-04-23 10:57:13 UTC",
            "url": "https://trans6-stream.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829643/",
            "reporter": "anonymous"
        }
    ],
    "3829642": [
        {
            "dateadded": "2026-04-23 10:57:06 UTC",
            "url": "http://115.48.149.180:43185/i",
            "url_status": "offline",
            "last_online": "2026-04-24 04:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829642/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829641": [
        {
            "dateadded": "2026-04-23 10:49:15 UTC",
            "url": "https://jcgopydo.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829641/",
            "reporter": "anonymous"
        }
    ],
    "3829640": [
        {
            "dateadded": "2026-04-23 10:47:06 UTC",
            "url": "http://176.65.139.143/ur0a.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829640/",
            "reporter": "adliwahid"
        }
    ],
    "3829639": [
        {
            "dateadded": "2026-04-23 10:46:27 UTC",
            "url": "http://125.44.52.93:33971/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:52:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829639/",
            "reporter": "geenensp"
        }
    ],
    "3829638": [
        {
            "dateadded": "2026-04-23 10:42:19 UTC",
            "url": "http://115.63.145.36:60973/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829638/",
            "reporter": "geenensp"
        }
    ],
    "3829637": [
        {
            "dateadded": "2026-04-23 10:42:12 UTC",
            "url": "https://wi1d-array.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829637/",
            "reporter": "anonymous"
        }
    ],
    "3829636": [
        {
            "dateadded": "2026-04-23 10:40:12 UTC",
            "url": "http://115.63.145.36:60973/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 22:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829636/",
            "reporter": "geenensp"
        }
    ],
    "3829635": [
        {
            "dateadded": "2026-04-23 10:34:07 UTC",
            "url": "https://xwql.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829635/",
            "reporter": "anonymous"
        }
    ],
    "3829634": [
        {
            "dateadded": "2026-04-23 10:33:23 UTC",
            "url": "http://110.37.21.178:57235/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829634/",
            "reporter": "geenensp"
        }
    ],
    "3829633": [
        {
            "dateadded": "2026-04-23 10:32:06 UTC",
            "url": "http://110.36.24.172:41642/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:20:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829633/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829632": [
        {
            "dateadded": "2026-04-23 10:30:22 UTC",
            "url": "http://42.228.241.60:45323/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:19:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829632/",
            "reporter": "geenensp"
        }
    ],
    "3829631": [
        {
            "dateadded": "2026-04-23 10:27:17 UTC",
            "url": "http://115.48.149.180:43185/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:06:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829631/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829630": [
        {
            "dateadded": "2026-04-23 10:26:11 UTC",
            "url": "https://ciphercas.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829630/",
            "reporter": "anonymous"
        }
    ],
    "3829629": [
        {
            "dateadded": "2026-04-23 10:19:10 UTC",
            "url": "https://capita-sla.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829629/",
            "reporter": "anonymous"
        }
    ],
    "3829628": [
        {
            "dateadded": "2026-04-23 10:11:06 UTC",
            "url": "https://mervale9al.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829628/",
            "reporter": "anonymous"
        }
    ],
    "3829627": [
        {
            "dateadded": "2026-04-23 10:09:12 UTC",
            "url": "http://110.37.21.178:57235/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829627/",
            "reporter": "geenensp"
        }
    ],
    "3829626": [
        {
            "dateadded": "2026-04-23 10:03:13 UTC",
            "url": "https://norlineum5.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 10:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829626/",
            "reporter": "anonymous"
        }
    ],
    "3829625": [
        {
            "dateadded": "2026-04-23 10:02:07 UTC",
            "url": "http://167.250.158.32:58812/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829625/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829624": [
        {
            "dateadded": "2026-04-23 09:57:07 UTC",
            "url": "http://221.15.19.7:57745/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:16:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829624/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829623": [
        {
            "dateadded": "2026-04-23 09:56:18 UTC",
            "url": "http://42.179.147.89:60389/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:04:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829623/",
            "reporter": "geenensp"
        }
    ],
    "3829622": [
        {
            "dateadded": "2026-04-23 09:56:06 UTC",
            "url": "https://geo-3mbe.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 09:56:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829622/",
            "reporter": "anonymous"
        }
    ],
    "3829621": [
        {
            "dateadded": "2026-04-23 09:49:10 UTC",
            "url": "https://80qqgwqb.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 09:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829621/",
            "reporter": "anonymous"
        }
    ],
    "3829620": [
        {
            "dateadded": "2026-04-23 09:46:13 UTC",
            "url": "http://125.43.32.102:47368/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:17:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829620/",
            "reporter": "geenensp"
        }
    ],
    "3829619": [
        {
            "dateadded": "2026-04-23 09:46:05 UTC",
            "url": "http://158.94.210.65:6275/dat.wsf",
            "url_status": "offline",
            "last_online": "2026-04-23 11:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "158-94-210-65-6275",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829619/",
            "reporter": "BlinkzSec"
        }
    ],
    "3829618": [
        {
            "dateadded": "2026-04-23 09:45:13 UTC",
            "url": "https://plugins-costs-nyc-boulevard.trycloudflare.com/dat.wsf",
            "url_status": "offline",
            "last_online": "2026-04-23 12:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "plugins-costs-nyc-boulevard-trycloudflare-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829618/",
            "reporter": "BlinkzSec"
        }
    ],
    "3829616": [
        {
            "dateadded": "2026-04-23 09:45:09 UTC",
            "url": "https://plugins-costs-nyc-boulevard.trycloudflare.com/dat.bat",
            "url_status": "offline",
            "last_online": "2026-04-23 10:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "plugins-costs-nyc-boulevard-trycloudflare-com",
                "ua-wget",
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829616/",
            "reporter": "BlinkzSec"
        }
    ],
    "3829617": [
        {
            "dateadded": "2026-04-23 09:45:09 UTC",
            "url": "https://plugins-costs-nyc-boulevard.trycloudflare.com/kru.zip",
            "url_status": "offline",
            "last_online": "2026-04-23 11:28:18 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "plugins-costs-nyc-boulevard-trycloudflare-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829617/",
            "reporter": "BlinkzSec"
        }
    ],
    "3829614": [
        {
            "dateadded": "2026-04-23 09:45:08 UTC",
            "url": "http://158.94.210.65:6275/dat.bat",
            "url_status": "offline",
            "last_online": "2026-04-23 11:46:23 UTC",
            "threat": "malware_download",
            "tags": [
                "158-94-210-65-6275",
                "opendir",
                "ua-wget",
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829614/",
            "reporter": "BlinkzSec"
        }
    ],
    "3829615": [
        {
            "dateadded": "2026-04-23 09:45:08 UTC",
            "url": "http://158.94.210.65:6275/kru.zip",
            "url_status": "offline",
            "last_online": "2026-04-23 11:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "158-94-210-65-6275",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829615/",
            "reporter": "BlinkzSec"
        }
    ],
    "3829613": [
        {
            "dateadded": "2026-04-23 09:44:38 UTC",
            "url": "http://183.151.116.186:45418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:29:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829613/",
            "reporter": "geenensp"
        }
    ],
    "3829612": [
        {
            "dateadded": "2026-04-23 09:42:10 UTC",
            "url": "https://sdk-focus.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 09:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829612/",
            "reporter": "anonymous"
        }
    ],
    "3829611": [
        {
            "dateadded": "2026-04-23 09:37:07 UTC",
            "url": "http://167.250.158.32:58812/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829611/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829610": [
        {
            "dateadded": "2026-04-23 09:34:30 UTC",
            "url": "http://111.127.233.2:60215/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:17:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829610/",
            "reporter": "geenensp"
        }
    ],
    "3829609": [
        {
            "dateadded": "2026-04-23 09:33:09 UTC",
            "url": "https://dynspirea2.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 09:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829609/",
            "reporter": "anonymous"
        }
    ],
    "3829608": [
        {
            "dateadded": "2026-04-23 09:32:08 UTC",
            "url": "http://221.15.19.7:57745/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:24:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829608/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829607": [
        {
            "dateadded": "2026-04-23 09:27:27 UTC",
            "url": "http://1.61.209.11:44161/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:24:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829607/",
            "reporter": "geenensp"
        }
    ],
    "3829606": [
        {
            "dateadded": "2026-04-23 09:27:19 UTC",
            "url": "http://42.231.92.253:36633/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829606/",
            "reporter": "geenensp"
        }
    ],
    "3829605": [
        {
            "dateadded": "2026-04-23 09:26:08 UTC",
            "url": "https://p0rt.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 09:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829605/",
            "reporter": "anonymous"
        }
    ],
    "3829604": [
        {
            "dateadded": "2026-04-23 09:21:28 UTC",
            "url": "http://125.43.32.102:47368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:02:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829604/",
            "reporter": "geenensp"
        }
    ],
    "3829603": [
        {
            "dateadded": "2026-04-23 09:21:23 UTC",
            "url": "http://123.7.226.192:39217/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829603/",
            "reporter": "geenensp"
        }
    ],
    "3829598": [
        {
            "dateadded": "2026-04-23 09:18:07 UTC",
            "url": "http://218.60.176.173:33151/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829598/",
            "reporter": "adliwahid"
        }
    ],
    "3829599": [
        {
            "dateadded": "2026-04-23 09:18:07 UTC",
            "url": "http://42.178.151.87:42843/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:13:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829599/",
            "reporter": "adliwahid"
        }
    ],
    "3829600": [
        {
            "dateadded": "2026-04-23 09:18:07 UTC",
            "url": "http://182.120.45.64:39371/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829600/",
            "reporter": "adliwahid"
        }
    ],
    "3829601": [
        {
            "dateadded": "2026-04-23 09:18:07 UTC",
            "url": "http://42.224.87.48:46568/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:23:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829601/",
            "reporter": "adliwahid"
        }
    ],
    "3829602": [
        {
            "dateadded": "2026-04-23 09:18:07 UTC",
            "url": "https://dsff5.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 09:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829602/",
            "reporter": "anonymous"
        }
    ],
    "3829597": [
        {
            "dateadded": "2026-04-23 09:17:27 UTC",
            "url": "http://182.240.198.180:33480/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829597/",
            "reporter": "adliwahid"
        }
    ],
    "3829596": [
        {
            "dateadded": "2026-04-23 09:17:24 UTC",
            "url": "http://182.240.198.180:33480/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:53:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829596/",
            "reporter": "adliwahid"
        }
    ],
    "3829594": [
        {
            "dateadded": "2026-04-23 09:17:16 UTC",
            "url": "http://175.148.159.221:35103/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:29:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829594/",
            "reporter": "adliwahid"
        }
    ],
    "3829595": [
        {
            "dateadded": "2026-04-23 09:17:16 UTC",
            "url": "http://175.148.159.221:35103/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:14:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829595/",
            "reporter": "adliwahid"
        }
    ],
    "3829593": [
        {
            "dateadded": "2026-04-23 09:17:12 UTC",
            "url": "http://111.220.69.16:47195/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829593/",
            "reporter": "adliwahid"
        }
    ],
    "3829575": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://218.59.82.22:41069/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:09:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829575/",
            "reporter": "adliwahid"
        }
    ],
    "3829576": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://112.98.97.178:34651/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829576/",
            "reporter": "adliwahid"
        }
    ],
    "3829577": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://124.235.249.74:59110/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 11:21:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829577/",
            "reporter": "adliwahid"
        }
    ],
    "3829578": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://221.14.38.41:39008/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:51:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829578/",
            "reporter": "adliwahid"
        }
    ],
    "3829579": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://213.67.213.82:58805/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829579/",
            "reporter": "adliwahid"
        }
    ],
    "3829580": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://112.226.178.108:36745/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829580/",
            "reporter": "adliwahid"
        }
    ],
    "3829581": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://222.138.87.130:56328/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:35:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829581/",
            "reporter": "adliwahid"
        }
    ],
    "3829582": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://182.121.181.97:57500/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:52:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829582/",
            "reporter": "adliwahid"
        }
    ],
    "3829583": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://112.237.157.96:47836/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:41:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829583/",
            "reporter": "adliwahid"
        }
    ],
    "3829584": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://27.219.44.149:55821/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829584/",
            "reporter": "adliwahid"
        }
    ],
    "3829585": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://139.213.32.135:52647/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829585/",
            "reporter": "adliwahid"
        }
    ],
    "3829586": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://42.178.151.87:42843/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829586/",
            "reporter": "adliwahid"
        }
    ],
    "3829587": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://220.192.254.101:41071/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829587/",
            "reporter": "adliwahid"
        }
    ],
    "3829588": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://27.21.29.140:52069/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829588/",
            "reporter": "adliwahid"
        }
    ],
    "3829589": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://42.224.87.48:46568/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:00:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829589/",
            "reporter": "adliwahid"
        }
    ],
    "3829590": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://115.52.16.69:55306/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:35:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829590/",
            "reporter": "adliwahid"
        }
    ],
    "3829591": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://116.139.97.192:48056/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:25:02 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829591/",
            "reporter": "adliwahid"
        }
    ],
    "3829592": [
        {
            "dateadded": "2026-04-23 09:17:11 UTC",
            "url": "http://219.156.101.69:52257/i",
            "url_status": "offline",
            "last_online": "2026-04-25 15:46:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829592/",
            "reporter": "adliwahid"
        }
    ],
    "3829572": [
        {
            "dateadded": "2026-04-23 09:17:10 UTC",
            "url": "http://113.235.221.127:13571/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829572/",
            "reporter": "adliwahid"
        }
    ],
    "3829573": [
        {
            "dateadded": "2026-04-23 09:17:10 UTC",
            "url": "http://125.41.107.93:46173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:20:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829573/",
            "reporter": "adliwahid"
        }
    ],
    "3829574": [
        {
            "dateadded": "2026-04-23 09:17:10 UTC",
            "url": "http://42.224.119.103:41883/i",
            "url_status": "offline",
            "last_online": "2026-04-23 09:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829574/",
            "reporter": "adliwahid"
        }
    ],
    "3829565": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://113.229.88.231:46035/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829565/",
            "reporter": "adliwahid"
        }
    ],
    "3829566": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://179.49.213.85:59688/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:43:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829566/",
            "reporter": "adliwahid"
        }
    ],
    "3829567": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://200.115.102.16:47733/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:28:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829567/",
            "reporter": "adliwahid"
        }
    ],
    "3829568": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://203.177.251.31:43863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 22:47:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829568/",
            "reporter": "adliwahid"
        }
    ],
    "3829569": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://175.150.176.250:46174/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829569/",
            "reporter": "adliwahid"
        }
    ],
    "3829570": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://124.95.36.232:59266/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:38:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829570/",
            "reporter": "adliwahid"
        }
    ],
    "3829571": [
        {
            "dateadded": "2026-04-23 09:16:08 UTC",
            "url": "http://112.84.219.118:37931/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829571/",
            "reporter": "adliwahid"
        }
    ],
    "3829561": [
        {
            "dateadded": "2026-04-23 09:16:07 UTC",
            "url": "http://217.210.86.124:54560/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829561/",
            "reporter": "adliwahid"
        }
    ],
    "3829562": [
        {
            "dateadded": "2026-04-23 09:16:07 UTC",
            "url": "http://218.29.9.138:52636/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:24:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829562/",
            "reporter": "adliwahid"
        }
    ],
    "3829563": [
        {
            "dateadded": "2026-04-23 09:16:07 UTC",
            "url": "http://27.207.142.234:37815/i",
            "url_status": "offline",
            "last_online": "2026-04-25 04:51:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829563/",
            "reporter": "adliwahid"
        }
    ],
    "3829564": [
        {
            "dateadded": "2026-04-23 09:16:07 UTC",
            "url": "http://116.138.88.171:45797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:35:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829564/",
            "reporter": "adliwahid"
        }
    ],
    "3829560": [
        {
            "dateadded": "2026-04-23 09:15:34 UTC",
            "url": "http://112.237.157.96:47836/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 10:52:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829560/",
            "reporter": "adliwahid"
        }
    ],
    "3829559": [
        {
            "dateadded": "2026-04-23 09:15:30 UTC",
            "url": "http://112.226.178.108:36745/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:39:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829559/",
            "reporter": "adliwahid"
        }
    ],
    "3829557": [
        {
            "dateadded": "2026-04-23 09:15:21 UTC",
            "url": "http://42.237.55.46:34153/i",
            "url_status": "offline",
            "last_online": "2026-04-25 04:55:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829557/",
            "reporter": "adliwahid"
        }
    ],
    "3829558": [
        {
            "dateadded": "2026-04-23 09:15:21 UTC",
            "url": "http://60.19.218.61:55702/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:56:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829558/",
            "reporter": "adliwahid"
        }
    ],
    "3829550": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://88.232.53.145:56344/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:53:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829550/",
            "reporter": "adliwahid"
        }
    ],
    "3829551": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://123.129.131.117:48090/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829551/",
            "reporter": "adliwahid"
        }
    ],
    "3829552": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://116.138.88.171:45797/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:50:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829552/",
            "reporter": "adliwahid"
        }
    ],
    "3829553": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://42.224.119.103:41883/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 09:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829553/",
            "reporter": "adliwahid"
        }
    ],
    "3829554": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://101.66.41.204:37027/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829554/",
            "reporter": "adliwahid"
        }
    ],
    "3829555": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://218.29.9.138:52636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 10:56:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829555/",
            "reporter": "adliwahid"
        }
    ],
    "3829556": [
        {
            "dateadded": "2026-04-23 09:15:11 UTC",
            "url": "http://221.14.38.41:39008/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:12:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829556/",
            "reporter": "adliwahid"
        }
    ],
    "3829540": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://115.50.88.174:37127/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:21:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829540/",
            "reporter": "adliwahid"
        }
    ],
    "3829541": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://178.238.27.138:57400/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829541/",
            "reporter": "adliwahid"
        }
    ],
    "3829542": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://110.36.80.166:46462/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829542/",
            "reporter": "adliwahid"
        }
    ],
    "3829543": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://110.36.80.166:46462/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829543/",
            "reporter": "adliwahid"
        }
    ],
    "3829544": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://203.177.251.31:43863/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:02:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829544/",
            "reporter": "adliwahid"
        }
    ],
    "3829545": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://221.15.143.42:59737/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:27:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829545/",
            "reporter": "adliwahid"
        }
    ],
    "3829546": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://115.50.88.174:37127/i",
            "url_status": "offline",
            "last_online": "2026-04-24 00:13:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829546/",
            "reporter": "adliwahid"
        }
    ],
    "3829547": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://106.59.96.63:40649/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829547/",
            "reporter": "adliwahid"
        }
    ],
    "3829548": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://39.88.69.22:49017/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829548/",
            "reporter": "adliwahid"
        }
    ],
    "3829549": [
        {
            "dateadded": "2026-04-23 09:15:10 UTC",
            "url": "http://221.15.6.202:41914/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:04:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829549/",
            "reporter": "adliwahid"
        }
    ],
    "3829539": [
        {
            "dateadded": "2026-04-23 09:14:28 UTC",
            "url": "http://106.59.96.63:40649/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829539/",
            "reporter": "adliwahid"
        }
    ],
    "3829534": [
        {
            "dateadded": "2026-04-23 09:14:10 UTC",
            "url": "http://125.41.107.93:46173/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:53:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829534/",
            "reporter": "adliwahid"
        }
    ],
    "3829535": [
        {
            "dateadded": "2026-04-23 09:14:10 UTC",
            "url": "http://221.15.143.42:59737/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:59:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829535/",
            "reporter": "adliwahid"
        }
    ],
    "3829536": [
        {
            "dateadded": "2026-04-23 09:14:10 UTC",
            "url": "http://182.121.181.97:57500/i",
            "url_status": "offline",
            "last_online": "2026-04-24 00:04:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829536/",
            "reporter": "adliwahid"
        }
    ],
    "3829537": [
        {
            "dateadded": "2026-04-23 09:14:10 UTC",
            "url": "http://123.232.228.159:46969/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:59:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829537/",
            "reporter": "adliwahid"
        }
    ],
    "3829538": [
        {
            "dateadded": "2026-04-23 09:14:10 UTC",
            "url": "http://119.163.209.129:57233/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:25:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829538/",
            "reporter": "adliwahid"
        }
    ],
    "3829525": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://115.53.192.148:50854/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:54:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829525/",
            "reporter": "adliwahid"
        }
    ],
    "3829526": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://171.38.149.164:49606/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829526/",
            "reporter": "adliwahid"
        }
    ],
    "3829527": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://182.120.45.64:39371/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829527/",
            "reporter": "adliwahid"
        }
    ],
    "3829528": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://39.74.89.61:40934/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:05:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829528/",
            "reporter": "adliwahid"
        }
    ],
    "3829529": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://113.235.221.127:13571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:03:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829529/",
            "reporter": "adliwahid"
        }
    ],
    "3829530": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://182.116.123.176:52380/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:44:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829530/",
            "reporter": "adliwahid"
        }
    ],
    "3829531": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://42.178.22.28:33448/i",
            "url_status": "offline",
            "last_online": "2026-04-23 09:14:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829531/",
            "reporter": "adliwahid"
        }
    ],
    "3829532": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://112.98.97.178:34651/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829532/",
            "reporter": "adliwahid"
        }
    ],
    "3829533": [
        {
            "dateadded": "2026-04-23 09:14:09 UTC",
            "url": "http://222.139.76.224:41478/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829533/",
            "reporter": "adliwahid"
        }
    ],
    "3829524": [
        {
            "dateadded": "2026-04-23 09:14:08 UTC",
            "url": "http://196.189.68.239:48667/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829524/",
            "reporter": "adliwahid"
        }
    ],
    "3829523": [
        {
            "dateadded": "2026-04-23 09:12:07 UTC",
            "url": "http://182.121.115.9:38587/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:26:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829523/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829522": [
        {
            "dateadded": "2026-04-23 09:12:06 UTC",
            "url": "http://61.179.64.34:58175/i",
            "url_status": "offline",
            "last_online": "2026-04-23 09:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829522/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829521": [
        {
            "dateadded": "2026-04-23 09:07:06 UTC",
            "url": "http://112.240.175.223:44416/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:59:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829521/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829519": [
        {
            "dateadded": "2026-04-23 09:05:21 UTC",
            "url": "http://123.188.53.69:50615/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829519/",
            "reporter": "geenensp"
        }
    ],
    "3829520": [
        {
            "dateadded": "2026-04-23 09:05:21 UTC",
            "url": "http://119.185.166.95:49892/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829520/",
            "reporter": "geenensp"
        }
    ],
    "3829518": [
        {
            "dateadded": "2026-04-23 09:05:18 UTC",
            "url": "http://218.72.35.225:39291/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:01:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829518/",
            "reporter": "geenensp"
        }
    ],
    "3829517": [
        {
            "dateadded": "2026-04-23 09:02:17 UTC",
            "url": "http://180.245.46.214:59412/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:16:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829517/",
            "reporter": "geenensp"
        }
    ],
    "3829516": [
        {
            "dateadded": "2026-04-23 08:55:15 UTC",
            "url": "http://105.186.181.193:44969/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:07:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829516/",
            "reporter": "geenensp"
        }
    ],
    "3829515": [
        {
            "dateadded": "2026-04-23 08:49:19 UTC",
            "url": "http://123.7.226.192:39217/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829515/",
            "reporter": "geenensp"
        }
    ],
    "3829514": [
        {
            "dateadded": "2026-04-23 08:48:21 UTC",
            "url": "http://42.179.147.89:60389/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:26:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829514/",
            "reporter": "geenensp"
        }
    ],
    "3829513": [
        {
            "dateadded": "2026-04-23 08:48:20 UTC",
            "url": "http://42.226.68.180:33416/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829513/",
            "reporter": "geenensp"
        }
    ],
    "3829512": [
        {
            "dateadded": "2026-04-23 08:42:07 UTC",
            "url": "http://61.179.64.34:58175/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 08:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829512/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829511": [
        {
            "dateadded": "2026-04-23 08:42:06 UTC",
            "url": "http://61.53.95.140:53758/i",
            "url_status": "offline",
            "last_online": "2026-04-24 09:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829511/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829510": [
        {
            "dateadded": "2026-04-23 08:37:29 UTC",
            "url": "http://112.240.175.223:44416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829510/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829509": [
        {
            "dateadded": "2026-04-23 08:37:07 UTC",
            "url": "http://151.41.153.146:36256/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829509/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829508": [
        {
            "dateadded": "2026-04-23 08:35:19 UTC",
            "url": "http://182.123.192.217:46665/i",
            "url_status": "offline",
            "last_online": "2026-04-23 08:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829508/",
            "reporter": "geenensp"
        }
    ],
    "3829507": [
        {
            "dateadded": "2026-04-23 08:34:19 UTC",
            "url": "http://222.137.146.77:60722/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829507/",
            "reporter": "geenensp"
        }
    ],
    "3829506": [
        {
            "dateadded": "2026-04-23 08:33:11 UTC",
            "url": "http://178.227.156.100:2578/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:16:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829506/",
            "reporter": "geenensp"
        }
    ],
    "3829505": [
        {
            "dateadded": "2026-04-23 08:32:18 UTC",
            "url": "http://182.123.192.217:46665/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 08:32:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829505/",
            "reporter": "geenensp"
        }
    ],
    "3829504": [
        {
            "dateadded": "2026-04-23 08:32:09 UTC",
            "url": "http://219.154.28.83:42585/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829504/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829503": [
        {
            "dateadded": "2026-04-23 08:25:19 UTC",
            "url": "http://182.126.84.132:33258/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829503/",
            "reporter": "geenensp"
        }
    ],
    "3829502": [
        {
            "dateadded": "2026-04-23 08:24:08 UTC",
            "url": "https://pds6zjwn.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 08:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829502/",
            "reporter": "anonymous"
        }
    ],
    "3829501": [
        {
            "dateadded": "2026-04-23 08:19:21 UTC",
            "url": "http://182.121.214.189:44576/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829501/",
            "reporter": "geenensp"
        }
    ],
    "3829500": [
        {
            "dateadded": "2026-04-23 08:17:06 UTC",
            "url": "http://103.164.128.58:46877/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:36:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829500/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829499": [
        {
            "dateadded": "2026-04-23 08:16:08 UTC",
            "url": "https://peak-lab.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 08:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829499/",
            "reporter": "anonymous"
        }
    ],
    "3829498": [
        {
            "dateadded": "2026-04-23 08:12:10 UTC",
            "url": "http://151.41.153.146:36256/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:49:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829498/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829497": [
        {
            "dateadded": "2026-04-23 08:10:14 UTC",
            "url": "https://majorbright.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 08:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829497/",
            "reporter": "anonymous"
        }
    ],
    "3829496": [
        {
            "dateadded": "2026-04-23 08:04:12 UTC",
            "url": "http://115.49.66.168:46002/i",
            "url_status": "offline",
            "last_online": "2026-04-23 08:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829496/",
            "reporter": "geenensp"
        }
    ],
    "3829495": [
        {
            "dateadded": "2026-04-23 08:03:26 UTC",
            "url": "http://182.173.199.8:58428/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:00:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829495/",
            "reporter": "geenensp"
        }
    ],
    "3829494": [
        {
            "dateadded": "2026-04-23 08:03:22 UTC",
            "url": "http://115.49.66.168:46002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 08:03:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829494/",
            "reporter": "geenensp"
        }
    ],
    "3829493": [
        {
            "dateadded": "2026-04-23 08:03:20 UTC",
            "url": "http://110.36.2.23:49916/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:33:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829493/",
            "reporter": "geenensp"
        }
    ],
    "3829492": [
        {
            "dateadded": "2026-04-23 08:03:09 UTC",
            "url": "https://voicebund.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 08:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829492/",
            "reporter": "anonymous"
        }
    ],
    "3829491": [
        {
            "dateadded": "2026-04-23 08:01:18 UTC",
            "url": "http://61.52.72.102:51830/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:44:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829491/",
            "reporter": "geenensp"
        }
    ],
    "3829489": [
        {
            "dateadded": "2026-04-23 07:57:07 UTC",
            "url": "http://182.112.0.25:39995/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:55:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829489/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829490": [
        {
            "dateadded": "2026-04-23 07:57:07 UTC",
            "url": "https://hyp3-plate.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829490/",
            "reporter": "anonymous"
        }
    ],
    "3829488": [
        {
            "dateadded": "2026-04-23 07:52:12 UTC",
            "url": "http://210.10.133.136:33777/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:05:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829488/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829486": [
        {
            "dateadded": "2026-04-23 07:52:07 UTC",
            "url": "http://182.112.0.25:39995/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:41:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829486/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829487": [
        {
            "dateadded": "2026-04-23 07:52:07 UTC",
            "url": "http://220.202.66.241:42546/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:52:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829487/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829485": [
        {
            "dateadded": "2026-04-23 07:50:10 UTC",
            "url": "https://arkdraa6.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829485/",
            "reporter": "anonymous"
        }
    ],
    "3829484": [
        {
            "dateadded": "2026-04-23 07:44:06 UTC",
            "url": "https://gdvdjt.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829484/",
            "reporter": "anonymous"
        }
    ],
    "3829483": [
        {
            "dateadded": "2026-04-23 07:43:10 UTC",
            "url": "https://gran-sync.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829483/",
            "reporter": "anonymous"
        }
    ],
    "3829482": [
        {
            "dateadded": "2026-04-23 07:36:09 UTC",
            "url": "http://42.230.44.35:58018/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:02:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829482/",
            "reporter": "geenensp"
        }
    ],
    "3829481": [
        {
            "dateadded": "2026-04-23 07:32:23 UTC",
            "url": "http://182.173.199.8:58428/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829481/",
            "reporter": "geenensp"
        }
    ],
    "3829480": [
        {
            "dateadded": "2026-04-23 07:32:05 UTC",
            "url": "http://61.53.95.140:53758/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:27:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829480/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829479": [
        {
            "dateadded": "2026-04-23 07:27:08 UTC",
            "url": "http://210.10.133.136:33777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:21:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829479/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829478": [
        {
            "dateadded": "2026-04-23 07:24:10 UTC",
            "url": "https://north9-line.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829478/",
            "reporter": "anonymous"
        }
    ],
    "3829477": [
        {
            "dateadded": "2026-04-23 07:23:08 UTC",
            "url": "http://116.139.183.5:48771/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829477/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829476": [
        {
            "dateadded": "2026-04-23 07:22:15 UTC",
            "url": "http://175.151.128.38:34555/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829476/",
            "reporter": "geenensp"
        }
    ],
    "3829475": [
        {
            "dateadded": "2026-04-23 07:22:14 UTC",
            "url": "http://42.224.96.212:50911/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 07:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829475/",
            "reporter": "geenensp"
        }
    ],
    "3829474": [
        {
            "dateadded": "2026-04-23 07:22:11 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_5408372e708a48629b728d0ea386361c.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829474/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829472": [
        {
            "dateadded": "2026-04-23 07:22:10 UTC",
            "url": "https://missusecapmrch.blogspot.com/ailimius.otd?m=1/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829472/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829473": [
        {
            "dateadded": "2026-04-23 07:22:10 UTC",
            "url": "https://himachaly17aplr.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829473/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829471": [
        {
            "dateadded": "2026-04-23 07:22:08 UTC",
            "url": "https://htlwub00k.blogspot.com/phukli.docx",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829471/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829467": [
        {
            "dateadded": "2026-04-23 07:22:07 UTC",
            "url": "https://missusecapmrch.blogspot.com/ailimius.otd?m=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829467/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829468": [
        {
            "dateadded": "2026-04-23 07:22:07 UTC",
            "url": "https://missusecapmrch.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829468/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829469": [
        {
            "dateadded": "2026-04-23 07:22:07 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_95941126f4e0499ba380d354c8f595e2.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829469/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829470": [
        {
            "dateadded": "2026-04-23 07:22:07 UTC",
            "url": "https://missusecapmrch.blogspot.com/atom.xml?m=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829470/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829465": [
        {
            "dateadded": "2026-04-23 07:22:06 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_e294b64717f9404887beb0ddc0ef324e.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829465/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829466": [
        {
            "dateadded": "2026-04-23 07:22:06 UTC",
            "url": "http://182.112.224.78:45371/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 07:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829466/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829454": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "http://missusecapmrch.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829454/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829455": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://himachaly17aplr.blogspot.com//////////////////////////////////////scooba.docx.pdf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829455/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829456": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://nadcapfeb25-26.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829456/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829457": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://paypal.auth-sharefile.com",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829457/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829458": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://missusecapmrch.blogspot.com/atom.xml?m=1/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829458/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829459": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "http://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_5408372e708a48629b728d0ea386361c.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829459/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829460": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://htlwub00k.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829460/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829461": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "http://missusecapmrch.blogspot.com/atom.xml?m=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829461/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829462": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://nadcapfeb25-26.blogspot.com/atom.xml?m=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829462/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829463": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://nadcapfeb25-26.blogspot.com/march.pdf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829463/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829464": [
        {
            "dateadded": "2026-04-23 07:22:05 UTC",
            "url": "https://missusecapmrch.blogspot.com/ailimius.otd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829464/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3829453": [
        {
            "dateadded": "2026-04-23 07:18:07 UTC",
            "url": "https://277lk6.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829453/",
            "reporter": "anonymous"
        }
    ],
    "3829452": [
        {
            "dateadded": "2026-04-23 07:11:08 UTC",
            "url": "https://notifieropti.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829452/",
            "reporter": "anonymous"
        }
    ],
    "3829451": [
        {
            "dateadded": "2026-04-23 07:10:18 UTC",
            "url": "http://42.230.44.35:58018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829451/",
            "reporter": "geenensp"
        }
    ],
    "3829450": [
        {
            "dateadded": "2026-04-23 07:05:11 UTC",
            "url": "https://4sset3-node.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 07:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829450/",
            "reporter": "anonymous"
        }
    ],
    "3829449": [
        {
            "dateadded": "2026-04-23 07:03:10 UTC",
            "url": "http://42.7.139.50:45332/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:24:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829449/",
            "reporter": "geenensp"
        }
    ],
    "3829448": [
        {
            "dateadded": "2026-04-23 07:01:18 UTC",
            "url": "http://42.235.171.125:53623/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829448/",
            "reporter": "geenensp"
        }
    ],
    "3829447": [
        {
            "dateadded": "2026-04-23 06:59:09 UTC",
            "url": "https://qu1ck-flow.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829447/",
            "reporter": "anonymous"
        }
    ],
    "3829446": [
        {
            "dateadded": "2026-04-23 06:58:09 UTC",
            "url": "http://115.55.173.8:39536/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:59:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829446/",
            "reporter": "geenensp"
        }
    ],
    "3829445": [
        {
            "dateadded": "2026-04-23 06:52:10 UTC",
            "url": "https://zkmoskj.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829445/",
            "reporter": "anonymous"
        }
    ],
    "3829444": [
        {
            "dateadded": "2026-04-23 06:50:12 UTC",
            "url": "http://182.127.177.18:44434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829444/",
            "reporter": "geenensp"
        }
    ],
    "3829443": [
        {
            "dateadded": "2026-04-23 06:47:07 UTC",
            "url": "http://222.141.82.197:52798/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:47:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829443/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829442": [
        {
            "dateadded": "2026-04-23 06:46:13 UTC",
            "url": "https://753s.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829442/",
            "reporter": "anonymous"
        }
    ],
    "3829441": [
        {
            "dateadded": "2026-04-23 06:38:08 UTC",
            "url": "https://v3lve4-core.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829441/",
            "reporter": "anonymous"
        }
    ],
    "3829440": [
        {
            "dateadded": "2026-04-23 06:33:20 UTC",
            "url": "http://115.55.173.8:39536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829440/",
            "reporter": "geenensp"
        }
    ],
    "3829439": [
        {
            "dateadded": "2026-04-23 06:31:13 UTC",
            "url": "https://gr0vvt1-port.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829439/",
            "reporter": "anonymous"
        }
    ],
    "3829438": [
        {
            "dateadded": "2026-04-23 06:29:21 UTC",
            "url": "http://42.7.139.50:45332/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:40:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829438/",
            "reporter": "geenensp"
        }
    ],
    "3829437": [
        {
            "dateadded": "2026-04-23 06:27:23 UTC",
            "url": "http://110.37.1.162:54280/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829437/",
            "reporter": "geenensp"
        }
    ],
    "3829436": [
        {
            "dateadded": "2026-04-23 06:26:26 UTC",
            "url": "http://112.248.187.207:34611/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829436/",
            "reporter": "geenensp"
        }
    ],
    "3829435": [
        {
            "dateadded": "2026-04-23 06:26:19 UTC",
            "url": "https://tal-valeor.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:26:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829435/",
            "reporter": "anonymous"
        }
    ],
    "3829434": [
        {
            "dateadded": "2026-04-23 06:22:11 UTC",
            "url": "http://36.88.136.194:46719/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829434/",
            "reporter": "geenensp"
        }
    ],
    "3829433": [
        {
            "dateadded": "2026-04-23 06:22:06 UTC",
            "url": "http://112.239.103.39:44119/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829433/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829432": [
        {
            "dateadded": "2026-04-23 06:21:28 UTC",
            "url": "http://125.43.249.122:39684/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829432/",
            "reporter": "geenensp"
        }
    ],
    "3829431": [
        {
            "dateadded": "2026-04-23 06:20:16 UTC",
            "url": "https://bui73.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829431/",
            "reporter": "anonymous"
        }
    ],
    "3829430": [
        {
            "dateadded": "2026-04-23 06:17:07 UTC",
            "url": "http://36.64.174.98:46505/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829430/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829429": [
        {
            "dateadded": "2026-04-23 06:13:22 UTC",
            "url": "http://115.56.145.130:35736/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829429/",
            "reporter": "geenensp"
        }
    ],
    "3829428": [
        {
            "dateadded": "2026-04-23 06:12:14 UTC",
            "url": "https://so1id-sheet.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829428/",
            "reporter": "anonymous"
        }
    ],
    "3829427": [
        {
            "dateadded": "2026-04-23 06:10:23 UTC",
            "url": "http://112.248.187.207:34611/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:05:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829427/",
            "reporter": "geenensp"
        }
    ],
    "3829426": [
        {
            "dateadded": "2026-04-23 06:06:13 UTC",
            "url": "https://storsens.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 06:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829426/",
            "reporter": "anonymous"
        }
    ],
    "3829425": [
        {
            "dateadded": "2026-04-23 06:04:17 UTC",
            "url": "http://112.249.123.111:41367/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829425/",
            "reporter": "geenensp"
        }
    ],
    "3829424": [
        {
            "dateadded": "2026-04-23 06:02:07 UTC",
            "url": "http://221.15.15.51:54089/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:23:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829424/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829423": [
        {
            "dateadded": "2026-04-23 05:59:14 UTC",
            "url": "https://ljzoiu.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829423/",
            "reporter": "anonymous"
        }
    ],
    "3829422": [
        {
            "dateadded": "2026-04-23 05:58:28 UTC",
            "url": "http://115.55.249.123:41837/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:53:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829422/",
            "reporter": "geenensp"
        }
    ],
    "3829421": [
        {
            "dateadded": "2026-04-23 05:57:26 UTC",
            "url": "http://125.45.64.36:42374/i",
            "url_status": "offline",
            "last_online": "2026-04-24 16:58:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829421/",
            "reporter": "geenensp"
        }
    ],
    "3829420": [
        {
            "dateadded": "2026-04-23 05:54:28 UTC",
            "url": "http://221.10.192.9:55589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:03:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829420/",
            "reporter": "geenensp"
        }
    ],
    "3829419": [
        {
            "dateadded": "2026-04-23 05:54:12 UTC",
            "url": "https://zencrest9um.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829419/",
            "reporter": "anonymous"
        }
    ],
    "3829418": [
        {
            "dateadded": "2026-04-23 05:50:15 UTC",
            "url": "https://ejm0c.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829418/",
            "reporter": "anonymous"
        }
    ],
    "3829417": [
        {
            "dateadded": "2026-04-23 05:48:29 UTC",
            "url": "http://182.127.103.28:48688/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:24:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829417/",
            "reporter": "geenensp"
        }
    ],
    "3829416": [
        {
            "dateadded": "2026-04-23 05:47:24 UTC",
            "url": "http://42.237.57.2:55005/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:47:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829416/",
            "reporter": "geenensp"
        }
    ],
    "3829415": [
        {
            "dateadded": "2026-04-23 05:47:08 UTC",
            "url": "http://95.9.35.137:41852/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829415/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829414": [
        {
            "dateadded": "2026-04-23 05:39:07 UTC",
            "url": "https://ambe1-point.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829414/",
            "reporter": "anonymous"
        }
    ],
    "3829413": [
        {
            "dateadded": "2026-04-23 05:34:13 UTC",
            "url": "https://port-dat.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829413/",
            "reporter": "anonymous"
        }
    ],
    "3829412": [
        {
            "dateadded": "2026-04-23 05:32:32 UTC",
            "url": "http://42.237.57.2:55005/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829412/",
            "reporter": "geenensp"
        }
    ],
    "3829410": [
        {
            "dateadded": "2026-04-23 05:28:12 UTC",
            "url": "https://raw.githubusercontent.com/salesplataniik-commits/updates/v1/1583.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829410/",
            "reporter": "abuse_ch"
        }
    ],
    "3829411": [
        {
            "dateadded": "2026-04-23 05:28:12 UTC",
            "url": "https://github.com/salesplataniik-commits/sales/raw/refs/heads/main/NRRWIHQIDTHWSZEL.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:55 UTC",
            "threat": "malware_download",
            "tags": [
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829411/",
            "reporter": "abuse_ch"
        }
    ],
    "3829409": [
        {
            "dateadded": "2026-04-23 05:27:28 UTC",
            "url": "http://125.45.64.36:42374/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 19:13:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829409/",
            "reporter": "geenensp"
        }
    ],
    "3829408": [
        {
            "dateadded": "2026-04-23 05:27:19 UTC",
            "url": "https://pulspost.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829408/",
            "reporter": "anonymous"
        }
    ],
    "3829405": [
        {
            "dateadded": "2026-04-23 05:25:18 UTC",
            "url": "http://103.109.100.133/w.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:18:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829405/",
            "reporter": "NoahB"
        }
    ],
    "3829406": [
        {
            "dateadded": "2026-04-23 05:25:18 UTC",
            "url": "http://103.109.100.133/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829406/",
            "reporter": "NoahB"
        }
    ],
    "3829407": [
        {
            "dateadded": "2026-04-23 05:25:18 UTC",
            "url": "http://103.109.100.133/c.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:41:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829407/",
            "reporter": "NoahB"
        }
    ],
    "3829387": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829387/",
            "reporter": "NoahB"
        }
    ],
    "3829388": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://45.156.87.91/update/x86",
            "url_status": "offline",
            "last_online": "2026-04-25 15:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829388/",
            "reporter": "NoahB"
        }
    ],
    "3829389": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 13:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829389/",
            "reporter": "NoahB"
        }
    ],
    "3829390": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://69.10.36.54/triangle",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ladvix"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829390/",
            "reporter": "NoahB"
        }
    ],
    "3829391": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 05:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829391/",
            "reporter": "NoahB"
        }
    ],
    "3829392": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829392/",
            "reporter": "NoahB"
        }
    ],
    "3829393": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829393/",
            "reporter": "NoahB"
        }
    ],
    "3829394": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829394/",
            "reporter": "NoahB"
        }
    ],
    "3829395": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/i586",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829395/",
            "reporter": "NoahB"
        }
    ],
    "3829396": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/arc",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829396/",
            "reporter": "NoahB"
        }
    ],
    "3829397": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829397/",
            "reporter": "NoahB"
        }
    ],
    "3829398": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829398/",
            "reporter": "NoahB"
        }
    ],
    "3829399": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://23.140.244.57/arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829399/",
            "reporter": "NoahB"
        }
    ],
    "3829400": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://62.60.226.203/gertgherthre.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "c2",
                "CoinMiner",
                "dropper",
                "github",
                "malware",
                "spyware"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829400/",
            "reporter": "lolicon"
        }
    ],
    "3829401": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://103.109.100.133/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829401/",
            "reporter": "NoahB"
        }
    ],
    "3829402": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://103.109.100.133/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829402/",
            "reporter": "NoahB"
        }
    ],
    "3829403": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://103.109.100.133/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829403/",
            "reporter": "NoahB"
        }
    ],
    "3829404": [
        {
            "dateadded": "2026-04-23 05:25:17 UTC",
            "url": "http://103.109.100.133/mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829404/",
            "reporter": "NoahB"
        }
    ],
    "3829384": [
        {
            "dateadded": "2026-04-23 05:25:16 UTC",
            "url": "http://45.156.87.91/update/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829384/",
            "reporter": "NoahB"
        }
    ],
    "3829385": [
        {
            "dateadded": "2026-04-23 05:25:16 UTC",
            "url": "http://45.156.87.91/update/dlr.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 14:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829385/",
            "reporter": "NoahB"
        }
    ],
    "3829386": [
        {
            "dateadded": "2026-04-23 05:25:16 UTC",
            "url": "http://45.156.87.91/update/svc.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:55:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829386/",
            "reporter": "NoahB"
        }
    ],
    "3829383": [
        {
            "dateadded": "2026-04-23 05:25:12 UTC",
            "url": "http://23.140.244.57/download.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829383/",
            "reporter": "NoahB"
        }
    ],
    "3829380": [
        {
            "dateadded": "2026-04-23 05:24:23 UTC",
            "url": "http://168.222.254.210:8079/52.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:25 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829380/",
            "reporter": "burger"
        }
    ],
    "3829381": [
        {
            "dateadded": "2026-04-23 05:24:23 UTC",
            "url": "http://168.222.254.210:8079/5252.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ChromElevator",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829381/",
            "reporter": "burger"
        }
    ],
    "3829382": [
        {
            "dateadded": "2026-04-23 05:24:23 UTC",
            "url": "https://desktop-version.com/app",
            "url_status": "offline",
            "last_online": "2026-04-23 05:24:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829382/",
            "reporter": "anonymous"
        }
    ],
    "3829378": [
        {
            "dateadded": "2026-04-23 05:24:22 UTC",
            "url": "http://45.156.87.91/armv5l",
            "url_status": "offline",
            "last_online": "2026-04-25 15:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829378/",
            "reporter": "NoahB"
        }
    ],
    "3829379": [
        {
            "dateadded": "2026-04-23 05:24:22 UTC",
            "url": "https://github.com/inqcode/skq12kjj3jj1/raw/refs/heads/main/svchost.zowner",
            "url_status": "offline",
            "last_online": "2026-04-24 06:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "github",
                "MassLogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829379/",
            "reporter": "burger"
        }
    ],
    "3829376": [
        {
            "dateadded": "2026-04-23 05:24:21 UTC",
            "url": "http://45.156.87.91/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-25 15:30:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829376/",
            "reporter": "NoahB"
        }
    ],
    "3829377": [
        {
            "dateadded": "2026-04-23 05:24:21 UTC",
            "url": "http://45.156.87.91/update/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-25 17:04:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829377/",
            "reporter": "NoahB"
        }
    ],
    "3829364": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/svc.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 14:26:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829364/",
            "reporter": "NoahB"
        }
    ],
    "3829365": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/update/svc.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 17:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829365/",
            "reporter": "NoahB"
        }
    ],
    "3829366": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/update/svc.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 16:57:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829366/",
            "reporter": "NoahB"
        }
    ],
    "3829367": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/update/armv5l",
            "url_status": "offline",
            "last_online": "2026-04-25 17:21:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829367/",
            "reporter": "NoahB"
        }
    ],
    "3829368": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/svc.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 17:13:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829368/",
            "reporter": "NoahB"
        }
    ],
    "3829369": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/update/dlr.arm64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:55:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829369/",
            "reporter": "NoahB"
        }
    ],
    "3829370": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/update/svc.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 14:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829370/",
            "reporter": "NoahB"
        }
    ],
    "3829371": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 14:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829371/",
            "reporter": "NoahB"
        }
    ],
    "3829372": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/dlr.arm64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:40:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829372/",
            "reporter": "NoahB"
        }
    ],
    "3829373": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/update/svc.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 15:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829373/",
            "reporter": "NoahB"
        }
    ],
    "3829374": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/svc.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 14:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829374/",
            "reporter": "NoahB"
        }
    ],
    "3829375": [
        {
            "dateadded": "2026-04-23 05:24:20 UTC",
            "url": "http://45.156.87.91/svc.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 17:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829375/",
            "reporter": "NoahB"
        }
    ],
    "3829350": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/update/svc.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 14:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829350/",
            "reporter": "NoahB"
        }
    ],
    "3829351": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/dlr.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 15:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829351/",
            "reporter": "NoahB"
        }
    ],
    "3829352": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/dlr.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 15:53:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829352/",
            "reporter": "NoahB"
        }
    ],
    "3829353": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/dlr.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 14:51:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829353/",
            "reporter": "NoahB"
        }
    ],
    "3829354": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/dlr.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 14:37:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829354/",
            "reporter": "NoahB"
        }
    ],
    "3829355": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/update/armv7l",
            "url_status": "offline",
            "last_online": "2026-04-25 14:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829355/",
            "reporter": "NoahB"
        }
    ],
    "3829356": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/x86",
            "url_status": "offline",
            "last_online": "2026-04-25 17:09:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829356/",
            "reporter": "NoahB"
        }
    ],
    "3829357": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/mips",
            "url_status": "offline",
            "last_online": "2026-04-25 17:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829357/",
            "reporter": "NoahB"
        }
    ],
    "3829358": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/update/svc.arm64",
            "url_status": "offline",
            "last_online": "2026-04-25 14:18:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829358/",
            "reporter": "NoahB"
        }
    ],
    "3829359": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/svc.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 14:46:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829359/",
            "reporter": "NoahB"
        }
    ],
    "3829360": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/armv7l",
            "url_status": "offline",
            "last_online": "2026-04-25 16:53:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829360/",
            "reporter": "NoahB"
        }
    ],
    "3829361": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/update/mips",
            "url_status": "offline",
            "last_online": "2026-04-25 15:31:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829361/",
            "reporter": "NoahB"
        }
    ],
    "3829362": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/update/dlr.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 16:58:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829362/",
            "reporter": "NoahB"
        }
    ],
    "3829363": [
        {
            "dateadded": "2026-04-23 05:24:19 UTC",
            "url": "http://45.156.87.91/svc.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 14:24:56 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829363/",
            "reporter": "NoahB"
        }
    ],
    "3829345": [
        {
            "dateadded": "2026-04-23 05:24:18 UTC",
            "url": "http://45.156.87.91/update/dlr.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 14:37:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829345/",
            "reporter": "NoahB"
        }
    ],
    "3829346": [
        {
            "dateadded": "2026-04-23 05:24:18 UTC",
            "url": "http://45.156.87.91/update/arm64",
            "url_status": "offline",
            "last_online": "2026-04-25 17:05:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829346/",
            "reporter": "NoahB"
        }
    ],
    "3829347": [
        {
            "dateadded": "2026-04-23 05:24:18 UTC",
            "url": "http://45.156.87.91/svc.arm64",
            "url_status": "offline",
            "last_online": "2026-04-25 15:47:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829347/",
            "reporter": "NoahB"
        }
    ],
    "3829348": [
        {
            "dateadded": "2026-04-23 05:24:18 UTC",
            "url": "http://144.172.98.94/wawan.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829348/",
            "reporter": "geenensp"
        }
    ],
    "3829349": [
        {
            "dateadded": "2026-04-23 05:24:18 UTC",
            "url": "http://45.156.87.91/arm64",
            "url_status": "offline",
            "last_online": "2026-04-25 16:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829349/",
            "reporter": "NoahB"
        }
    ],
    "3829342": [
        {
            "dateadded": "2026-04-23 05:24:17 UTC",
            "url": "http://45.156.87.91/update/dlr.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 17:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829342/",
            "reporter": "NoahB"
        }
    ],
    "3829343": [
        {
            "dateadded": "2026-04-23 05:24:17 UTC",
            "url": "http://45.156.87.91/update/dlr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 15:22:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829343/",
            "reporter": "NoahB"
        }
    ],
    "3829344": [
        {
            "dateadded": "2026-04-23 05:24:17 UTC",
            "url": "http://45.156.87.91/dlr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 17:18:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829344/",
            "reporter": "NoahB"
        }
    ],
    "3829341": [
        {
            "dateadded": "2026-04-23 05:24:10 UTC",
            "url": "http://45.156.87.91/update/d",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829341/",
            "reporter": "NoahB"
        }
    ],
    "3829340": [
        {
            "dateadded": "2026-04-23 05:24:08 UTC",
            "url": "http://45.156.87.91/d",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829340/",
            "reporter": "NoahB"
        }
    ],
    "3829339": [
        {
            "dateadded": "2026-04-23 05:22:12 UTC",
            "url": "http://182.127.36.185:32884/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829339/",
            "reporter": "geenensp"
        }
    ],
    "3829338": [
        {
            "dateadded": "2026-04-23 05:22:11 UTC",
            "url": "http://113.239.69.126:55329/i",
            "url_status": "offline",
            "last_online": "2026-04-27 03:55:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829338/",
            "reporter": "geenensp"
        }
    ],
    "3829337": [
        {
            "dateadded": "2026-04-23 05:22:07 UTC",
            "url": "http://115.53.194.141:35263/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829337/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829336": [
        {
            "dateadded": "2026-04-23 05:21:26 UTC",
            "url": "http://115.56.145.130:35736/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:48:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829336/",
            "reporter": "geenensp"
        }
    ],
    "3829334": [
        {
            "dateadded": "2026-04-23 05:21:24 UTC",
            "url": "http://176.65.139.35/iran.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829334/",
            "reporter": "abuse_ch"
        }
    ],
    "3829335": [
        {
            "dateadded": "2026-04-23 05:21:24 UTC",
            "url": "http://176.65.139.35/iran.aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829335/",
            "reporter": "abuse_ch"
        }
    ],
    "3829333": [
        {
            "dateadded": "2026-04-23 05:21:22 UTC",
            "url": "http://176.65.139.20/static/ciubuc_spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829333/",
            "reporter": "abuse_ch"
        }
    ],
    "3829332": [
        {
            "dateadded": "2026-04-23 05:21:17 UTC",
            "url": "http://222.137.95.17:59959/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829332/",
            "reporter": "geenensp"
        }
    ],
    "3829330": [
        {
            "dateadded": "2026-04-23 05:21:15 UTC",
            "url": "https://encod-logic.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829330/",
            "reporter": "anonymous"
        }
    ],
    "3829331": [
        {
            "dateadded": "2026-04-23 05:21:15 UTC",
            "url": "http://176.65.139.35/iran.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829331/",
            "reporter": "abuse_ch"
        }
    ],
    "3829329": [
        {
            "dateadded": "2026-04-23 05:20:34 UTC",
            "url": "http://182.127.103.28:48688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:00:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829329/",
            "reporter": "geenensp"
        }
    ],
    "3829328": [
        {
            "dateadded": "2026-04-23 05:18:18 UTC",
            "url": "http://221.15.5.58:47466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829328/",
            "reporter": "geenensp"
        }
    ],
    "3829327": [
        {
            "dateadded": "2026-04-23 05:16:15 UTC",
            "url": "http://42.239.252.75:40518/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829327/",
            "reporter": "geenensp"
        }
    ],
    "3829326": [
        {
            "dateadded": "2026-04-23 05:14:15 UTC",
            "url": "https://crawleramp.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829326/",
            "reporter": "anonymous"
        }
    ],
    "3829325": [
        {
            "dateadded": "2026-04-23 05:07:23 UTC",
            "url": "http://113.239.69.126:55329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829325/",
            "reporter": "geenensp"
        }
    ],
    "3829324": [
        {
            "dateadded": "2026-04-23 05:07:13 UTC",
            "url": "https://haus-5.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829324/",
            "reporter": "anonymous"
        }
    ],
    "3829323": [
        {
            "dateadded": "2026-04-23 05:02:14 UTC",
            "url": "https://vert-3m.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 05:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829323/",
            "reporter": "anonymous"
        }
    ],
    "3829322": [
        {
            "dateadded": "2026-04-23 05:01:22 UTC",
            "url": "http://105.187.45.36:51483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829322/",
            "reporter": "geenensp"
        }
    ],
    "3829321": [
        {
            "dateadded": "2026-04-23 05:00:15 UTC",
            "url": "http://202.107.30.48:55546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:56:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829321/",
            "reporter": "geenensp"
        }
    ],
    "3829320": [
        {
            "dateadded": "2026-04-23 04:59:27 UTC",
            "url": "http://109.236.46.199:44955/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829320/",
            "reporter": "geenensp"
        }
    ],
    "3829319": [
        {
            "dateadded": "2026-04-23 04:59:12 UTC",
            "url": "https://fast-9.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829319/",
            "reporter": "anonymous"
        }
    ],
    "3829318": [
        {
            "dateadded": "2026-04-23 04:56:23 UTC",
            "url": "http://222.137.95.17:59959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829318/",
            "reporter": "geenensp"
        }
    ],
    "3829317": [
        {
            "dateadded": "2026-04-23 04:52:25 UTC",
            "url": "http://182.127.36.185:32884/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:27:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829317/",
            "reporter": "geenensp"
        }
    ],
    "3829316": [
        {
            "dateadded": "2026-04-23 04:47:13 UTC",
            "url": "https://mond-1v.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829316/",
            "reporter": "anonymous"
        }
    ],
    "3829315": [
        {
            "dateadded": "2026-04-23 04:42:10 UTC",
            "url": "http://42.239.252.75:40518/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:09:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829315/",
            "reporter": "geenensp"
        }
    ],
    "3829314": [
        {
            "dateadded": "2026-04-23 04:42:08 UTC",
            "url": "http://182.127.162.21:53945/i",
            "url_status": "offline",
            "last_online": "2026-04-25 01:15:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829314/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829313": [
        {
            "dateadded": "2026-04-23 04:41:08 UTC",
            "url": "https://bleu-2.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-27 07:56:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829313/",
            "reporter": "anonymous"
        }
    ],
    "3829312": [
        {
            "dateadded": "2026-04-23 04:36:07 UTC",
            "url": "https://gold-4z.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829312/",
            "reporter": "anonymous"
        }
    ],
    "3829311": [
        {
            "dateadded": "2026-04-23 04:35:10 UTC",
            "url": "https://berg-8.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829311/",
            "reporter": "anonymous"
        }
    ],
    "3829310": [
        {
            "dateadded": "2026-04-23 04:34:19 UTC",
            "url": "http://61.54.41.190:36206/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829310/",
            "reporter": "geenensp"
        }
    ],
    "3829309": [
        {
            "dateadded": "2026-04-23 04:32:07 UTC",
            "url": "http://42.235.86.164:54855/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:27:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829309/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829308": [
        {
            "dateadded": "2026-04-23 04:31:17 UTC",
            "url": "http://123.5.148.221:56493/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829308/",
            "reporter": "geenensp"
        }
    ],
    "3829307": [
        {
            "dateadded": "2026-04-23 04:27:18 UTC",
            "url": "http://182.112.211.191:58281/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:59:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829307/",
            "reporter": "geenensp"
        }
    ],
    "3829306": [
        {
            "dateadded": "2026-04-23 04:27:07 UTC",
            "url": "http://42.235.86.164:54855/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:56:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829306/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829305": [
        {
            "dateadded": "2026-04-23 04:22:12 UTC",
            "url": "http://27.207.36.59:46902/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:09:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829305/",
            "reporter": "geenensp"
        }
    ],
    "3829304": [
        {
            "dateadded": "2026-04-23 04:21:06 UTC",
            "url": "https://petit-3k.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:21:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829304/",
            "reporter": "anonymous"
        }
    ],
    "3829303": [
        {
            "dateadded": "2026-04-23 04:15:09 UTC",
            "url": "https://blue-7.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829303/",
            "reporter": "anonymous"
        }
    ],
    "3829302": [
        {
            "dateadded": "2026-04-23 04:14:08 UTC",
            "url": "http://182.124.13.223:38421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:27:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829302/",
            "reporter": "geenensp"
        }
    ],
    "3829301": [
        {
            "dateadded": "2026-04-23 04:08:30 UTC",
            "url": "http://222.141.117.161:34932/i",
            "url_status": "offline",
            "last_online": "2026-04-23 04:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829301/",
            "reporter": "geenensp"
        }
    ],
    "3829300": [
        {
            "dateadded": "2026-04-23 04:08:12 UTC",
            "url": "https://wald-2x.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829300/",
            "reporter": "anonymous"
        }
    ],
    "3829299": [
        {
            "dateadded": "2026-04-23 04:03:08 UTC",
            "url": "https://noir-5.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 04:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829299/",
            "reporter": "anonymous"
        }
    ],
    "3829297": [
        {
            "dateadded": "2026-04-23 04:02:15 UTC",
            "url": "http://105.187.45.36:51483/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:57:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829297/",
            "reporter": "geenensp"
        }
    ],
    "3829298": [
        {
            "dateadded": "2026-04-23 04:02:15 UTC",
            "url": "http://182.112.211.191:58281/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829298/",
            "reporter": "geenensp"
        }
    ],
    "3829296": [
        {
            "dateadded": "2026-04-23 04:02:08 UTC",
            "url": "http://182.119.249.21:46922/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:55:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829296/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829295": [
        {
            "dateadded": "2026-04-23 04:02:07 UTC",
            "url": "http://115.52.82.94:38633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:02:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829295/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829294": [
        {
            "dateadded": "2026-04-23 03:55:09 UTC",
            "url": "https://wind-9q.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 03:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829294/",
            "reporter": "anonymous"
        }
    ],
    "3829292": [
        {
            "dateadded": "2026-04-23 03:50:07 UTC",
            "url": "http://kalt-6.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829292/",
            "reporter": "anonymous"
        }
    ],
    "3829293": [
        {
            "dateadded": "2026-04-23 03:50:07 UTC",
            "url": "https://kalt-6.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829293/",
            "reporter": "anonymous"
        }
    ],
    "3829291": [
        {
            "dateadded": "2026-04-23 03:49:15 UTC",
            "url": "http://115.50.227.124:53177/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:51:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829291/",
            "reporter": "geenensp"
        }
    ],
    "3829289": [
        {
            "dateadded": "2026-04-23 03:47:07 UTC",
            "url": "http://vert-4b.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829289/",
            "reporter": "anonymous"
        }
    ],
    "3829290": [
        {
            "dateadded": "2026-04-23 03:47:07 UTC",
            "url": "https://vert-4b.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829290/",
            "reporter": "anonymous"
        }
    ],
    "3829288": [
        {
            "dateadded": "2026-04-23 03:42:07 UTC",
            "url": "http://182.119.249.21:46922/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:04:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829288/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829287": [
        {
            "dateadded": "2026-04-23 03:33:23 UTC",
            "url": "http://182.126.84.132:33258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:24:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829287/",
            "reporter": "geenensp"
        }
    ],
    "3829286": [
        {
            "dateadded": "2026-04-23 03:28:08 UTC",
            "url": "http://rouge-3.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829286/",
            "reporter": "anonymous"
        }
    ],
    "3829285": [
        {
            "dateadded": "2026-04-23 03:28:07 UTC",
            "url": "https://rouge-3.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829285/",
            "reporter": "anonymous"
        }
    ],
    "3829284": [
        {
            "dateadded": "2026-04-23 03:27:23 UTC",
            "url": "http://101.109.207.172:41130/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:19:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829284/",
            "reporter": "geenensp"
        }
    ],
    "3829282": [
        {
            "dateadded": "2026-04-23 03:17:07 UTC",
            "url": "https://moon-5z.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829282/",
            "reporter": "anonymous"
        }
    ],
    "3829283": [
        {
            "dateadded": "2026-04-23 03:17:07 UTC",
            "url": "http://moon-5z.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829283/",
            "reporter": "anonymous"
        }
    ],
    "3829281": [
        {
            "dateadded": "2026-04-23 03:12:07 UTC",
            "url": "http://182.127.177.201:39967/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 04:51:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829281/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829280": [
        {
            "dateadded": "2026-04-23 03:10:12 UTC",
            "url": "https://land-9.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 03:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829280/",
            "reporter": "anonymous"
        }
    ],
    "3829279": [
        {
            "dateadded": "2026-04-23 03:04:16 UTC",
            "url": "http://101.109.207.172:41130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829279/",
            "reporter": "geenensp"
        }
    ],
    "3829278": [
        {
            "dateadded": "2026-04-23 03:04:13 UTC",
            "url": "https://bleu-1p.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 03:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829278/",
            "reporter": "anonymous"
        }
    ],
    "3829277": [
        {
            "dateadded": "2026-04-23 02:58:09 UTC",
            "url": "http://154.242.5.97:59491/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829277/",
            "reporter": "geenensp"
        }
    ],
    "3829276": [
        {
            "dateadded": "2026-04-23 02:58:07 UTC",
            "url": "https://fast-3.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829276/",
            "reporter": "anonymous"
        }
    ],
    "3829275": [
        {
            "dateadded": "2026-04-23 02:57:07 UTC",
            "url": "http://42.233.161.3:58696/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:45:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829275/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829274": [
        {
            "dateadded": "2026-04-23 02:52:10 UTC",
            "url": "https://zeit-6x.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829274/",
            "reporter": "anonymous"
        }
    ],
    "3829273": [
        {
            "dateadded": "2026-04-23 02:47:07 UTC",
            "url": "https://noir-2.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829273/",
            "reporter": "anonymous"
        }
    ],
    "3829272": [
        {
            "dateadded": "2026-04-23 02:41:08 UTC",
            "url": "https://iron-8v.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829272/",
            "reporter": "anonymous"
        }
    ],
    "3829271": [
        {
            "dateadded": "2026-04-23 02:36:09 UTC",
            "url": "https://berg-5.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829271/",
            "reporter": "anonymous"
        }
    ],
    "3829270": [
        {
            "dateadded": "2026-04-23 02:33:15 UTC",
            "url": "http://124.94.164.103:51383/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829270/",
            "reporter": "geenensp"
        }
    ],
    "3829269": [
        {
            "dateadded": "2026-04-23 02:29:09 UTC",
            "url": "https://petit-3z.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829269/",
            "reporter": "anonymous"
        }
    ],
    "3829268": [
        {
            "dateadded": "2026-04-23 02:27:17 UTC",
            "url": "http://42.237.82.242:55263/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829268/",
            "reporter": "geenensp"
        }
    ],
    "3829267": [
        {
            "dateadded": "2026-04-23 02:25:09 UTC",
            "url": "https://dark-7.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829267/",
            "reporter": "anonymous"
        }
    ],
    "3829266": [
        {
            "dateadded": "2026-04-23 02:23:12 UTC",
            "url": "http://59.96.136.196:51072/i",
            "url_status": "offline",
            "last_online": "2026-04-23 02:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829266/",
            "reporter": "geenensp"
        }
    ],
    "3829265": [
        {
            "dateadded": "2026-04-23 02:18:06 UTC",
            "url": "https://baum-1s.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829265/",
            "reporter": "anonymous"
        }
    ],
    "3829264": [
        {
            "dateadded": "2026-04-23 02:14:09 UTC",
            "url": "https://vert-9.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829264/",
            "reporter": "anonymous"
        }
    ],
    "3829263": [
        {
            "dateadded": "2026-04-23 02:09:23 UTC",
            "url": "http://219.157.153.227:37804/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829263/",
            "reporter": "geenensp"
        }
    ],
    "3829262": [
        {
            "dateadded": "2026-04-23 02:08:19 UTC",
            "url": "http://42.234.204.209:60063/i",
            "url_status": "offline",
            "last_online": "2026-04-23 02:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829262/",
            "reporter": "geenensp"
        }
    ],
    "3829261": [
        {
            "dateadded": "2026-04-23 02:08:07 UTC",
            "url": "https://soft-4c.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829261/",
            "reporter": "anonymous"
        }
    ],
    "3829260": [
        {
            "dateadded": "2026-04-23 02:07:06 UTC",
            "url": "http://36.70.96.54:55788/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:24:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829260/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829259": [
        {
            "dateadded": "2026-04-23 02:04:07 UTC",
            "url": "https://haus-4.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829259/",
            "reporter": "anonymous"
        }
    ],
    "3829258": [
        {
            "dateadded": "2026-04-23 02:02:07 UTC",
            "url": "http://125.25.188.237:52310/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829258/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829257": [
        {
            "dateadded": "2026-04-23 02:01:10 UTC",
            "url": "https://noir-x8.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 02:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829257/",
            "reporter": "anonymous"
        }
    ],
    "3829256": [
        {
            "dateadded": "2026-04-23 01:56:20 UTC",
            "url": "http://59.96.136.196:51072/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 01:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829256/",
            "reporter": "geenensp"
        }
    ],
    "3829255": [
        {
            "dateadded": "2026-04-23 01:53:16 UTC",
            "url": "http://105.224.33.112:49917/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:31:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829255/",
            "reporter": "geenensp"
        }
    ],
    "3829254": [
        {
            "dateadded": "2026-04-23 01:51:06 UTC",
            "url": "https://fast-1.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829254/",
            "reporter": "anonymous"
        }
    ],
    "3829253": [
        {
            "dateadded": "2026-04-23 01:47:07 UTC",
            "url": "http://36.70.96.54:55788/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829253/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829252": [
        {
            "dateadded": "2026-04-23 01:46:08 UTC",
            "url": "https://mond-q7.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829252/",
            "reporter": "anonymous"
        }
    ],
    "3829251": [
        {
            "dateadded": "2026-04-23 01:43:12 UTC",
            "url": "http://42.234.204.209:60063/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 01:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829251/",
            "reporter": "geenensp"
        }
    ],
    "3829250": [
        {
            "dateadded": "2026-04-23 01:40:14 UTC",
            "url": "https://bleu-5.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829250/",
            "reporter": "anonymous"
        }
    ],
    "3829249": [
        {
            "dateadded": "2026-04-23 01:37:06 UTC",
            "url": "http://42.54.64.176:45219/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:41:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829249/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829248": [
        {
            "dateadded": "2026-04-23 01:34:12 UTC",
            "url": "https://fire-2m.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829248/",
            "reporter": "anonymous"
        }
    ],
    "3829247": [
        {
            "dateadded": "2026-04-23 01:32:07 UTC",
            "url": "http://125.25.188.237:52310/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829247/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829246": [
        {
            "dateadded": "2026-04-23 01:31:12 UTC",
            "url": "http://182.121.230.60:34423/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:02:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829246/",
            "reporter": "geenensp"
        }
    ],
    "3829245": [
        {
            "dateadded": "2026-04-23 01:29:08 UTC",
            "url": "https://wald-9.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829245/",
            "reporter": "anonymous"
        }
    ],
    "3829244": [
        {
            "dateadded": "2026-04-23 01:26:13 UTC",
            "url": "http://222.137.26.101:57017/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829244/",
            "reporter": "geenensp"
        }
    ],
    "3829243": [
        {
            "dateadded": "2026-04-23 01:24:10 UTC",
            "url": "https://petit-y1.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829243/",
            "reporter": "anonymous"
        }
    ],
    "3829242": [
        {
            "dateadded": "2026-04-23 01:18:08 UTC",
            "url": "https://blue-6.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829242/",
            "reporter": "anonymous"
        }
    ],
    "3829241": [
        {
            "dateadded": "2026-04-23 01:17:07 UTC",
            "url": "http://42.54.64.176:45219/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:46:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829241/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829240": [
        {
            "dateadded": "2026-04-23 01:13:08 UTC",
            "url": "https://geld-x5.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829240/",
            "reporter": "anonymous"
        }
    ],
    "3829239": [
        {
            "dateadded": "2026-04-23 01:07:18 UTC",
            "url": "http://222.137.26.101:57017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:08:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829239/",
            "reporter": "geenensp"
        }
    ],
    "3829238": [
        {
            "dateadded": "2026-04-23 01:06:06 UTC",
            "url": "https://vert-3.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829238/",
            "reporter": "anonymous"
        }
    ],
    "3829237": [
        {
            "dateadded": "2026-04-23 01:01:07 UTC",
            "url": "https://star-8v.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 01:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829237/",
            "reporter": "anonymous"
        }
    ],
    "3829236": [
        {
            "dateadded": "2026-04-23 00:56:07 UTC",
            "url": "https://land-2.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829236/",
            "reporter": "anonymous"
        }
    ],
    "3829235": [
        {
            "dateadded": "2026-04-23 00:55:19 UTC",
            "url": "http://110.38.211.139:44685/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:42:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829235/",
            "reporter": "geenensp"
        }
    ],
    "3829234": [
        {
            "dateadded": "2026-04-23 00:50:10 UTC",
            "url": "https://noir-s6.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829234/",
            "reporter": "anonymous"
        }
    ],
    "3829233": [
        {
            "dateadded": "2026-04-23 00:44:07 UTC",
            "url": "https://open-4.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829233/",
            "reporter": "anonymous"
        }
    ],
    "3829232": [
        {
            "dateadded": "2026-04-23 00:41:18 UTC",
            "url": "http://153.0.69.242:60643/i",
            "url_status": "offline",
            "last_online": "2026-04-25 15:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829232/",
            "reporter": "geenensp"
        }
    ],
    "3829231": [
        {
            "dateadded": "2026-04-23 00:39:14 UTC",
            "url": "https://berg-9z.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829231/",
            "reporter": "anonymous"
        }
    ],
    "3829230": [
        {
            "dateadded": "2026-04-23 00:34:10 UTC",
            "url": "https://rouge-1.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829230/",
            "reporter": "anonymous"
        }
    ],
    "3829229": [
        {
            "dateadded": "2026-04-23 00:28:07 UTC",
            "url": "https://gold-5b.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829229/",
            "reporter": "anonymous"
        }
    ],
    "3829228": [
        {
            "dateadded": "2026-04-23 00:26:21 UTC",
            "url": "http://179.49.213.85:59688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:32:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829228/",
            "reporter": "geenensp"
        }
    ],
    "3829227": [
        {
            "dateadded": "2026-04-23 00:25:09 UTC",
            "url": "http://105.224.33.112:49917/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:06:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829227/",
            "reporter": "geenensp"
        }
    ],
    "3829226": [
        {
            "dateadded": "2026-04-23 00:23:06 UTC",
            "url": "https://zeit-w2.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:23:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829226/",
            "reporter": "anonymous"
        }
    ],
    "3829224": [
        {
            "dateadded": "2026-04-23 00:22:22 UTC",
            "url": "http://117.216.65.52:39939/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:22:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829224/",
            "reporter": "geenensp"
        }
    ],
    "3829225": [
        {
            "dateadded": "2026-04-23 00:22:22 UTC",
            "url": "http://175.149.182.189:60731/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829225/",
            "reporter": "geenensp"
        }
    ],
    "3829223": [
        {
            "dateadded": "2026-04-23 00:19:15 UTC",
            "url": "http://105.186.89.247:49161/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829223/",
            "reporter": "geenensp"
        }
    ],
    "3829222": [
        {
            "dateadded": "2026-04-23 00:17:08 UTC",
            "url": "https://vert-4m.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829222/",
            "reporter": "anonymous"
        }
    ],
    "3829221": [
        {
            "dateadded": "2026-04-23 00:12:12 UTC",
            "url": "https://dark-9.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829221/",
            "reporter": "anonymous"
        }
    ],
    "3829220": [
        {
            "dateadded": "2026-04-23 00:11:22 UTC",
            "url": "http://153.0.69.242:60643/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829220/",
            "reporter": "geenensp"
        }
    ],
    "3829219": [
        {
            "dateadded": "2026-04-23 00:07:07 UTC",
            "url": "http://115.58.86.82:43844/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:07:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829219/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829218": [
        {
            "dateadded": "2026-04-23 00:06:06 UTC",
            "url": "https://holz-v1.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829218/",
            "reporter": "anonymous"
        }
    ],
    "3829217": [
        {
            "dateadded": "2026-04-23 00:05:23 UTC",
            "url": "http://60.23.232.94:60123/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:59:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829217/",
            "reporter": "geenensp"
        }
    ],
    "3829216": [
        {
            "dateadded": "2026-04-23 00:02:07 UTC",
            "url": "http://103.249.199.3:53750/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829216/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829215": [
        {
            "dateadded": "2026-04-23 00:00:22 UTC",
            "url": "https://bleu-8k.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 00:00:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829215/",
            "reporter": "anonymous"
        }
    ],
    "3829214": [
        {
            "dateadded": "2026-04-22 23:58:25 UTC",
            "url": "http://110.38.211.139:44685/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829214/",
            "reporter": "geenensp"
        }
    ],
    "3829213": [
        {
            "dateadded": "2026-04-22 23:58:23 UTC",
            "url": "http://119.117.104.247:51399/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829213/",
            "reporter": "geenensp"
        }
    ],
    "3829212": [
        {
            "dateadded": "2026-04-22 23:56:12 UTC",
            "url": "https://wind-3.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829212/",
            "reporter": "anonymous"
        }
    ],
    "3829211": [
        {
            "dateadded": "2026-04-22 23:55:16 UTC",
            "url": "https://raw.githubusercontent.com/oualiide/ManageEngine-Desktop-Central-Crack/refs/heads/master/ectocondyloid/Central-Crack-Desktop-Manage-Engine-v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829211/",
            "reporter": "tcains1"
        }
    ],
    "3829208": [
        {
            "dateadded": "2026-04-22 23:55:15 UTC",
            "url": "https://github.com/Gamevoid2366/AuthCrack-v8/raw/refs/heads/main/characteristically/Auth-Crack-v-2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829208/",
            "reporter": "tcains1"
        }
    ],
    "3829209": [
        {
            "dateadded": "2026-04-22 23:55:15 UTC",
            "url": "https://github.com/oualiide/ManageEngine-Desktop-Central-Crack/raw/refs/heads/master/ectocondyloid/Central-Crack-Desktop-Manage-Engine-v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829209/",
            "reporter": "tcains1"
        }
    ],
    "3829210": [
        {
            "dateadded": "2026-04-22 23:55:15 UTC",
            "url": "https://github.com/Jcalumag19/cloudweb/raw/refs/heads/main/unshattered/Software_v3.4-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829210/",
            "reporter": "tcains1"
        }
    ],
    "3829202": [
        {
            "dateadded": "2026-04-22 23:55:14 UTC",
            "url": "https://github.com/Sanfin/jsoncrack.com/raw/refs/heads/main/public/assets/com-jsoncrack-3.3-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829202/",
            "reporter": "tcains1"
        }
    ],
    "3829203": [
        {
            "dateadded": "2026-04-22 23:55:14 UTC",
            "url": "https://raw.githubusercontent.com/Jcalumag19/cloudweb/refs/heads/main/unshattered/Software_v3.4-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829203/",
            "reporter": "tcains1"
        }
    ],
    "3829204": [
        {
            "dateadded": "2026-04-22 23:55:14 UTC",
            "url": "https://raw.githubusercontent.com/Sanfin/jsoncrack.com/refs/heads/main/public/assets/com-jsoncrack-3.3-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829204/",
            "reporter": "tcains1"
        }
    ],
    "3829205": [
        {
            "dateadded": "2026-04-22 23:55:14 UTC",
            "url": "https://raw.githubusercontent.com/Gamevoid2366/AuthCrack-v8/refs/heads/main/characteristically/Auth-Crack-v-2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829205/",
            "reporter": "tcains1"
        }
    ],
    "3829206": [
        {
            "dateadded": "2026-04-22 23:55:14 UTC",
            "url": "https://raw.githubusercontent.com/Jcalumag19/vercel/refs/heads/main/methylanthracene/Software_1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829206/",
            "reporter": "tcains1"
        }
    ],
    "3829207": [
        {
            "dateadded": "2026-04-22 23:55:14 UTC",
            "url": "https://raw.githubusercontent.com/Jcalumag19/todo/refs/heads/main/eyeberry/Software_v3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829207/",
            "reporter": "tcains1"
        }
    ],
    "3829201": [
        {
            "dateadded": "2026-04-22 23:55:12 UTC",
            "url": "https://github.com/Jcalumag19/vercel/raw/refs/heads/main/methylanthracene/Software_1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829201/",
            "reporter": "tcains1"
        }
    ],
    "3829199": [
        {
            "dateadded": "2026-04-22 23:55:11 UTC",
            "url": "https://github.com/Jcalumag19/Hash_crack/raw/refs/heads/main/node_modules/reveal.js/plugin/search/crack_Hash_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829199/",
            "reporter": "tcains1"
        }
    ],
    "3829200": [
        {
            "dateadded": "2026-04-22 23:55:11 UTC",
            "url": "https://github.com/Jcalumag19/todo/raw/refs/heads/main/eyeberry/Software_v3.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829200/",
            "reporter": "tcains1"
        }
    ],
    "3829198": [
        {
            "dateadded": "2026-04-22 23:55:09 UTC",
            "url": "https://github.com/Jcalumag19/web/raw/refs/heads/main/reticence/Software-uncivilish.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829198/",
            "reporter": "tcains1"
        }
    ],
    "3829196": [
        {
            "dateadded": "2026-04-22 23:55:08 UTC",
            "url": "https://raw.githubusercontent.com/Jcalumag19/Hash_crack/refs/heads/main/node_modules/reveal.js/plugin/search/crack_Hash_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829196/",
            "reporter": "tcains1"
        }
    ],
    "3829197": [
        {
            "dateadded": "2026-04-22 23:55:08 UTC",
            "url": "https://raw.githubusercontent.com/Jcalumag19/web/refs/heads/main/reticence/Software-uncivilish.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829197/",
            "reporter": "tcains1"
        }
    ],
    "3829195": [
        {
            "dateadded": "2026-04-22 23:53:20 UTC",
            "url": "http://117.216.65.52:39939/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:53:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829195/",
            "reporter": "geenensp"
        }
    ],
    "3829194": [
        {
            "dateadded": "2026-04-22 23:52:14 UTC",
            "url": "https://vert-4m.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829194/",
            "reporter": "anonymous"
        }
    ],
    "3829193": [
        {
            "dateadded": "2026-04-22 23:50:21 UTC",
            "url": "http://42.226.68.180:33416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:47:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829193/",
            "reporter": "geenensp"
        }
    ],
    "3829192": [
        {
            "dateadded": "2026-04-22 23:46:20 UTC",
            "url": "http://123.189.175.33:40944/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829192/",
            "reporter": "geenensp"
        }
    ],
    "3829191": [
        {
            "dateadded": "2026-04-22 23:46:14 UTC",
            "url": "https://dark-9.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829191/",
            "reporter": "anonymous"
        }
    ],
    "3829190": [
        {
            "dateadded": "2026-04-22 23:45:23 UTC",
            "url": "http://123.5.170.237:44613/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:23:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829190/",
            "reporter": "geenensp"
        }
    ],
    "3829189": [
        {
            "dateadded": "2026-04-22 23:44:20 UTC",
            "url": "http://60.23.232.94:60123/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829189/",
            "reporter": "geenensp"
        }
    ],
    "3829188": [
        {
            "dateadded": "2026-04-22 23:41:10 UTC",
            "url": "https://holz-v1.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829188/",
            "reporter": "anonymous"
        }
    ],
    "3829187": [
        {
            "dateadded": "2026-04-22 23:35:13 UTC",
            "url": "https://bleu-8k.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829187/",
            "reporter": "anonymous"
        }
    ],
    "3829186": [
        {
            "dateadded": "2026-04-22 23:32:07 UTC",
            "url": "http://103.249.199.3:53750/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:55:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829186/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829185": [
        {
            "dateadded": "2026-04-22 23:29:12 UTC",
            "url": "https://wind-3.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829185/",
            "reporter": "anonymous"
        }
    ],
    "3829184": [
        {
            "dateadded": "2026-04-22 23:28:19 UTC",
            "url": "http://123.5.170.237:44613/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829184/",
            "reporter": "geenensp"
        }
    ],
    "3829183": [
        {
            "dateadded": "2026-04-22 23:27:16 UTC",
            "url": "http://115.62.185.57:33520/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829183/",
            "reporter": "geenensp"
        }
    ],
    "3829182": [
        {
            "dateadded": "2026-04-22 23:24:16 UTC",
            "url": "https://kalt-m5.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829182/",
            "reporter": "anonymous"
        }
    ],
    "3829181": [
        {
            "dateadded": "2026-04-22 23:19:13 UTC",
            "url": "https://petit-7.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829181/",
            "reporter": "anonymous"
        }
    ],
    "3829180": [
        {
            "dateadded": "2026-04-22 23:17:20 UTC",
            "url": "http://112.239.103.39:44119/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:16:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829180/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829173": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://github.com/Shaktiigrover/AutoPassCrack/raw/refs/heads/main/autopasscrack/Auto_Pass_Crack_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829173/",
            "reporter": "tcains1"
        }
    ],
    "3829174": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://github.com/wuaricoco23/WhiteBoxAesCrack/raw/refs/heads/main/fonts/White-Crack-Box-Aes-v2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829174/",
            "reporter": "tcains1"
        }
    ],
    "3829175": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://raw.githubusercontent.com/Shaktiigrover/shakti-site/refs/heads/main/unseclusive/site_shakti_1.5-alpha.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829175/",
            "reporter": "tcains1"
        }
    ],
    "3829176": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://github.com/Shaktiigrover/shakti-site/raw/refs/heads/main/unseclusive/site_shakti_1.5-alpha.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829176/",
            "reporter": "tcains1"
        }
    ],
    "3829177": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://raw.githubusercontent.com/chotu120/BatCrack/refs/heads/master/internal/cracker/Crack_Bat_v2.8-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829177/",
            "reporter": "tcains1"
        }
    ],
    "3829178": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://github.com/chotu120/BatCrack/raw/refs/heads/master/internal/cracker/Crack_Bat_v2.8-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829178/",
            "reporter": "tcains1"
        }
    ],
    "3829179": [
        {
            "dateadded": "2026-04-22 23:14:14 UTC",
            "url": "https://github.com/wuaricoco23/valentine/raw/refs/heads/main/effortful/Software-2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829179/",
            "reporter": "tcains1"
        }
    ],
    "3829170": [
        {
            "dateadded": "2026-04-22 23:14:13 UTC",
            "url": "https://raw.githubusercontent.com/wuaricoco23/WhiteBoxAesCrack/refs/heads/main/fonts/White-Crack-Box-Aes-v2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829170/",
            "reporter": "tcains1"
        }
    ],
    "3829171": [
        {
            "dateadded": "2026-04-22 23:14:13 UTC",
            "url": "https://raw.githubusercontent.com/Shaktiigrover/AutoPassCrack/refs/heads/main/autopasscrack/Auto_Pass_Crack_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829171/",
            "reporter": "tcains1"
        }
    ],
    "3829172": [
        {
            "dateadded": "2026-04-22 23:14:13 UTC",
            "url": "https://raw.githubusercontent.com/wuaricoco23/valentine/refs/heads/main/effortful/Software-2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829172/",
            "reporter": "tcains1"
        }
    ],
    "3829169": [
        {
            "dateadded": "2026-04-22 23:13:13 UTC",
            "url": "https://fast-2x.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829169/",
            "reporter": "anonymous"
        }
    ],
    "3829168": [
        {
            "dateadded": "2026-04-22 23:12:07 UTC",
            "url": "http://119.178.91.117:40748/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829168/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829167": [
        {
            "dateadded": "2026-04-22 23:09:16 UTC",
            "url": "https://github.com/Recordtrablade/Wallpaper-Engine-Cracked-2026/releases/download/new/wallpaperengine-2.7.3-x64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:57 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4475",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829167/",
            "reporter": "tcains1"
        }
    ],
    "3829166": [
        {
            "dateadded": "2026-04-22 23:08:14 UTC",
            "url": "https://github.com/VioletWorkerSky/minecraft-vape-v4-download-cracked/releases/download/new/MinecraftVapeV4-x64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-9912",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829166/",
            "reporter": "tcains1"
        }
    ],
    "3829164": [
        {
            "dateadded": "2026-04-22 23:08:09 UTC",
            "url": "https://baum-z9.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829164/",
            "reporter": "anonymous"
        }
    ],
    "3829165": [
        {
            "dateadded": "2026-04-22 23:08:09 UTC",
            "url": "https://github.com/MediatorVault/ExpressVPN-Cracked-Version/releases/download/new/Setup_ExpressVPN_PRO-x64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:27 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-8814",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829165/",
            "reporter": "tcains1"
        }
    ],
    "3829163": [
        {
            "dateadded": "2026-04-22 23:07:08 UTC",
            "url": "http://182.121.230.60:34423/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 04:44:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829163/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829162": [
        {
            "dateadded": "2026-04-22 23:07:07 UTC",
            "url": "http://182.126.203.68:35628/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:10:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829162/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829161": [
        {
            "dateadded": "2026-04-22 23:06:14 UTC",
            "url": "https://github.com/skyroutecaptivate/crack-Adobe-InDesign-2026/releases/download/new/crack_InDesign_2026_Win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:31 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-6624",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829161/",
            "reporter": "tcains1"
        }
    ],
    "3829160": [
        {
            "dateadded": "2026-04-22 23:02:21 UTC",
            "url": "http://196.189.96.59:40472/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829160/",
            "reporter": "geenensp"
        }
    ],
    "3829159": [
        {
            "dateadded": "2026-04-22 23:02:12 UTC",
            "url": "https://noir-4.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 23:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829159/",
            "reporter": "anonymous"
        }
    ],
    "3829158": [
        {
            "dateadded": "2026-04-22 23:02:06 UTC",
            "url": "http://182.122.234.138:49765/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:02:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829158/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829157": [
        {
            "dateadded": "2026-04-22 22:57:15 UTC",
            "url": "https://cold-1q.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829157/",
            "reporter": "anonymous"
        }
    ],
    "3829156": [
        {
            "dateadded": "2026-04-22 22:51:11 UTC",
            "url": "https://haul-cache.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829156/",
            "reporter": "anonymous"
        }
    ],
    "3829155": [
        {
            "dateadded": "2026-04-22 22:47:22 UTC",
            "url": "http://119.178.91.117:40748/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829155/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829154": [
        {
            "dateadded": "2026-04-22 22:46:17 UTC",
            "url": "https://github.com/Auranyuentrance/crack-adobe-Illustrator-2026/releases/download/new/Illustrator2026_31.0_x64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:46 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-8874",
                "rar",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829154/",
            "reporter": "tcains1"
        }
    ],
    "3829153": [
        {
            "dateadded": "2026-04-22 22:46:12 UTC",
            "url": "https://pin30-sync.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829153/",
            "reporter": "anonymous"
        }
    ],
    "3829152": [
        {
            "dateadded": "2026-04-22 22:45:17 UTC",
            "url": "https://github.com/Skinflareckon10/crack-Adobe-Premiere-2026/releases/download/new/PremierePro2026_28.0_x64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-6654",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829152/",
            "reporter": "tcains1"
        }
    ],
    "3829149": [
        {
            "dateadded": "2026-04-22 22:45:16 UTC",
            "url": "https://github.com/Clad-chrism998/WasmCrack/raw/refs/heads/main/src/wasmcrack/struct_solver/Wasm_Crack_3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829149/",
            "reporter": "tcains1"
        }
    ],
    "3829150": [
        {
            "dateadded": "2026-04-22 22:45:16 UTC",
            "url": "https://raw.githubusercontent.com/Pammyhangdog747/claude-cracks-the-whip/refs/heads/main/lapidarist/the_cracks_whip_claude_3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829150/",
            "reporter": "tcains1"
        }
    ],
    "3829151": [
        {
            "dateadded": "2026-04-22 22:45:16 UTC",
            "url": "https://github.com/Pammyhangdog747/claude-cracks-the-whip/raw/refs/heads/main/lapidarist/the_cracks_whip_claude_3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829151/",
            "reporter": "tcains1"
        }
    ],
    "3829148": [
        {
            "dateadded": "2026-04-22 22:45:15 UTC",
            "url": "https://raw.githubusercontent.com/Clad-chrism998/WasmCrack/refs/heads/main/src/wasmcrack/struct_solver/Wasm_Crack_3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829148/",
            "reporter": "tcains1"
        }
    ],
    "3829147": [
        {
            "dateadded": "2026-04-22 22:41:12 UTC",
            "url": "https://scamanif.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829147/",
            "reporter": "anonymous"
        }
    ],
    "3829146": [
        {
            "dateadded": "2026-04-22 22:37:11 UTC",
            "url": "http://182.122.234.138:49765/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 22:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829146/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829145": [
        {
            "dateadded": "2026-04-22 22:37:06 UTC",
            "url": "http://182.126.203.68:35628/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:40:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829145/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829144": [
        {
            "dateadded": "2026-04-22 22:35:11 UTC",
            "url": "https://mxt0kl.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829144/",
            "reporter": "anonymous"
        }
    ],
    "3829143": [
        {
            "dateadded": "2026-04-22 22:32:07 UTC",
            "url": "http://105.224.12.254:38275/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:58:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829143/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829142": [
        {
            "dateadded": "2026-04-22 22:30:19 UTC",
            "url": "http://196.189.96.59:40472/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:04:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829142/",
            "reporter": "geenensp"
        }
    ],
    "3829141": [
        {
            "dateadded": "2026-04-22 22:29:09 UTC",
            "url": "https://p68x.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829141/",
            "reporter": "anonymous"
        }
    ],
    "3829140": [
        {
            "dateadded": "2026-04-22 22:25:12 UTC",
            "url": "https://value-quota.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:25:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829140/",
            "reporter": "anonymous"
        }
    ],
    "3829138": [
        {
            "dateadded": "2026-04-22 22:25:11 UTC",
            "url": "https://vaul2-sheet.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829138/",
            "reporter": "anonymous"
        }
    ],
    "3829139": [
        {
            "dateadded": "2026-04-22 22:25:11 UTC",
            "url": "https://raw.githubusercontent.com/DevJinma/CrackFtp/refs/heads/main/therence/Ftp-Crack-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829139/",
            "reporter": "tcains1"
        }
    ],
    "3829137": [
        {
            "dateadded": "2026-04-22 22:25:09 UTC",
            "url": "https://heicn.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829137/",
            "reporter": "anonymous"
        }
    ],
    "3829136": [
        {
            "dateadded": "2026-04-22 22:09:11 UTC",
            "url": "https://raw.githubusercontent.com/DavittGamer/GRANDALAND/refs/heads/main/bournless/Software-3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829136/",
            "reporter": "tcains1"
        }
    ],
    "3829131": [
        {
            "dateadded": "2026-04-22 22:09:10 UTC",
            "url": "https://github.com/DavittGamer/prueva/raw/refs/heads/master/Merycoidodon/Software-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:58:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829131/",
            "reporter": "tcains1"
        }
    ],
    "3829132": [
        {
            "dateadded": "2026-04-22 22:09:10 UTC",
            "url": "https://github.com/canbeMax/Hash_Buster/raw/refs/heads/drylikov/erythrosiderite/Hash_Buster_Hydrophinae.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829132/",
            "reporter": "tcains1"
        }
    ],
    "3829133": [
        {
            "dateadded": "2026-04-22 22:09:10 UTC",
            "url": "https://github.com/DavittGamer/GRANDALAND/raw/refs/heads/main/bournless/Software-3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829133/",
            "reporter": "tcains1"
        }
    ],
    "3829134": [
        {
            "dateadded": "2026-04-22 22:09:10 UTC",
            "url": "https://raw.githubusercontent.com/DavittGamer/prueva/refs/heads/master/Merycoidodon/Software-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829134/",
            "reporter": "tcains1"
        }
    ],
    "3829135": [
        {
            "dateadded": "2026-04-22 22:09:10 UTC",
            "url": "https://github.com/guvann/guvann1/raw/refs/heads/main/confirmatory/guvann-v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829135/",
            "reporter": "tcains1"
        }
    ],
    "3829119": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/canbeMax/CYJL/raw/refs/heads/main/assets/Software-3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829119/",
            "reporter": "tcains1"
        }
    ],
    "3829120": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://raw.githubusercontent.com/DavittGamer/DevCrack-Mobile-Interviews/refs/heads/main/credit/Mobile-Dev-Interviews-Crack-v3.2-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829120/",
            "reporter": "tcains1"
        }
    ],
    "3829121": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/Luffy1402/CrackFtp-la/raw/refs/heads/main/gimped/Ftp-la-Crack-unenslave.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829121/",
            "reporter": "tcains1"
        }
    ],
    "3829122": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://raw.githubusercontent.com/canbeMax/CYJL/refs/heads/main/assets/Software-3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829122/",
            "reporter": "tcains1"
        }
    ],
    "3829123": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://raw.githubusercontent.com/Luffy1402/CrackFtp-la/refs/heads/main/gimped/Ftp-la-Crack-unenslave.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829123/",
            "reporter": "tcains1"
        }
    ],
    "3829124": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://raw.githubusercontent.com/canbeMax/Online-Timer.github.io/refs/heads/main/Font/Online_Timer_io_github_swainship.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829124/",
            "reporter": "tcains1"
        }
    ],
    "3829125": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/guvann/cursor-reset/raw/refs/heads/main/Olympiadic/cursor_reset_1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829125/",
            "reporter": "tcains1"
        }
    ],
    "3829126": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/DavittGamer/social-bar/raw/refs/heads/gh-pages/fonts/social-bar-v3.8-alpha.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829126/",
            "reporter": "tcains1"
        }
    ],
    "3829127": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/DevJinma/CrackFtp/raw/refs/heads/main/therence/Ftp-Crack-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829127/",
            "reporter": "tcains1"
        }
    ],
    "3829128": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/canbeMax/Online-Timer.github.io/raw/refs/heads/main/Font/Online_Timer_io_github_swainship.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829128/",
            "reporter": "tcains1"
        }
    ],
    "3829129": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://github.com/DavittGamer/DevCrack-Mobile-Interviews/raw/refs/heads/main/credit/Mobile-Dev-Interviews-Crack-v3.2-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829129/",
            "reporter": "tcains1"
        }
    ],
    "3829130": [
        {
            "dateadded": "2026-04-22 22:09:09 UTC",
            "url": "https://raw.githubusercontent.com/DavittGamer/social-bar/refs/heads/gh-pages/fonts/social-bar-v3.8-alpha.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829130/",
            "reporter": "tcains1"
        }
    ],
    "3829116": [
        {
            "dateadded": "2026-04-22 22:09:08 UTC",
            "url": "https://raw.githubusercontent.com/guvann/cursor-reset/refs/heads/main/Olympiadic/cursor_reset_1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829116/",
            "reporter": "tcains1"
        }
    ],
    "3829117": [
        {
            "dateadded": "2026-04-22 22:09:08 UTC",
            "url": "https://raw.githubusercontent.com/guvann/guvann1/refs/heads/main/confirmatory/guvann-v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829117/",
            "reporter": "tcains1"
        }
    ],
    "3829118": [
        {
            "dateadded": "2026-04-22 22:09:08 UTC",
            "url": "https://raw.githubusercontent.com/canbeMax/Hash_Buster/refs/heads/drylikov/erythrosiderite/Hash_Buster_Hydrophinae.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829118/",
            "reporter": "tcains1"
        }
    ],
    "3829115": [
        {
            "dateadded": "2026-04-22 22:06:10 UTC",
            "url": "https://proto-5h4d.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829115/",
            "reporter": "anonymous"
        }
    ],
    "3829114": [
        {
            "dateadded": "2026-04-22 22:03:17 UTC",
            "url": "http://125.41.220.17:52150/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 04:50:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829114/",
            "reporter": "geenensp"
        }
    ],
    "3829113": [
        {
            "dateadded": "2026-04-22 22:02:12 UTC",
            "url": "http://119.113.187.91:47205/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:09:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829113/",
            "reporter": "geenensp"
        }
    ],
    "3829112": [
        {
            "dateadded": "2026-04-22 22:02:07 UTC",
            "url": "https://0dszydja.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 22:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829112/",
            "reporter": "anonymous"
        }
    ],
    "3829111": [
        {
            "dateadded": "2026-04-22 21:55:12 UTC",
            "url": "https://sub-sal3s.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829111/",
            "reporter": "anonymous"
        }
    ],
    "3829110": [
        {
            "dateadded": "2026-04-22 21:52:21 UTC",
            "url": "http://120.28.162.208:33775/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829110/",
            "reporter": "geenensp"
        }
    ],
    "3829109": [
        {
            "dateadded": "2026-04-22 21:51:10 UTC",
            "url": "https://norlineis.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829109/",
            "reporter": "anonymous"
        }
    ],
    "3829108": [
        {
            "dateadded": "2026-04-22 21:50:19 UTC",
            "url": "http://42.178.153.5:44369/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829108/",
            "reporter": "geenensp"
        }
    ],
    "3829107": [
        {
            "dateadded": "2026-04-22 21:48:11 UTC",
            "url": "http://119.119.176.206:36218/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:03:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829107/",
            "reporter": "geenensp"
        }
    ],
    "3829106": [
        {
            "dateadded": "2026-04-22 21:45:11 UTC",
            "url": "https://geo-pol4r.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829106/",
            "reporter": "anonymous"
        }
    ],
    "3829105": [
        {
            "dateadded": "2026-04-22 21:41:19 UTC",
            "url": "http://119.113.187.91:47205/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829105/",
            "reporter": "geenensp"
        }
    ],
    "3829104": [
        {
            "dateadded": "2026-04-22 21:39:08 UTC",
            "url": "https://build-bio.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829104/",
            "reporter": "anonymous"
        }
    ],
    "3829093": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h3flood.x86",
            "url_status": "offline",
            "last_online": "2026-04-23 11:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829093/",
            "reporter": "botnetkiller"
        }
    ],
    "3829094": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2stream.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:04:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829094/",
            "reporter": "botnetkiller"
        }
    ],
    "3829095": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2stream.x64",
            "url_status": "offline",
            "last_online": "2026-04-23 11:40:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829095/",
            "reporter": "botnetkiller"
        }
    ],
    "3829096": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h3flood.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829096/",
            "reporter": "botnetkiller"
        }
    ],
    "3829097": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2stream.s390x",
            "url_status": "offline",
            "last_online": "2026-04-23 11:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829097/",
            "reporter": "botnetkiller"
        }
    ],
    "3829098": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h3flood.mips",
            "url_status": "offline",
            "last_online": "2026-04-23 12:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829098/",
            "reporter": "botnetkiller"
        }
    ],
    "3829099": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2rapidreset.mips64",
            "url_status": "offline",
            "last_online": "2026-04-23 05:57:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829099/",
            "reporter": "botnetkiller"
        }
    ],
    "3829100": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2stream.mips",
            "url_status": "offline",
            "last_online": "2026-04-23 06:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829100/",
            "reporter": "botnetkiller"
        }
    ],
    "3829101": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h3flood.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829101/",
            "reporter": "botnetkiller"
        }
    ],
    "3829102": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2stream.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-23 11:52:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829102/",
            "reporter": "botnetkiller"
        }
    ],
    "3829103": [
        {
            "dateadded": "2026-04-22 21:38:31 UTC",
            "url": "http://176.65.139.11/h2rapidreset.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-23 06:13:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829103/",
            "reporter": "botnetkiller"
        }
    ],
    "3829088": [
        {
            "dateadded": "2026-04-22 21:38:30 UTC",
            "url": "http://176.65.139.11/h2rapidreset.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829088/",
            "reporter": "botnetkiller"
        }
    ],
    "3829089": [
        {
            "dateadded": "2026-04-22 21:38:30 UTC",
            "url": "http://176.65.139.11/h2rapidreset.x86",
            "url_status": "offline",
            "last_online": "2026-04-23 11:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829089/",
            "reporter": "botnetkiller"
        }
    ],
    "3829090": [
        {
            "dateadded": "2026-04-22 21:38:30 UTC",
            "url": "http://176.65.139.11/h2stream.x86",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829090/",
            "reporter": "botnetkiller"
        }
    ],
    "3829091": [
        {
            "dateadded": "2026-04-22 21:38:30 UTC",
            "url": "http://176.65.139.11/h2stream.arm",
            "url_status": "offline",
            "last_online": "2026-04-23 06:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829091/",
            "reporter": "botnetkiller"
        }
    ],
    "3829092": [
        {
            "dateadded": "2026-04-22 21:38:30 UTC",
            "url": "http://176.65.139.11/h2stream.ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 06:09:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829092/",
            "reporter": "botnetkiller"
        }
    ],
    "3829087": [
        {
            "dateadded": "2026-04-22 21:38:28 UTC",
            "url": "http://176.65.139.11/h3flood.s390x",
            "url_status": "offline",
            "last_online": "2026-04-23 06:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829087/",
            "reporter": "botnetkiller"
        }
    ],
    "3829086": [
        {
            "dateadded": "2026-04-22 21:38:25 UTC",
            "url": "http://176.65.139.11/h3flood.ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 06:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829086/",
            "reporter": "botnetkiller"
        }
    ],
    "3829085": [
        {
            "dateadded": "2026-04-22 21:38:20 UTC",
            "url": "http://119.119.176.206:36218/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829085/",
            "reporter": "geenensp"
        }
    ],
    "3829079": [
        {
            "dateadded": "2026-04-22 21:37:21 UTC",
            "url": "http://176.65.139.11/h2rapidreset.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-23 12:18:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829079/",
            "reporter": "botnetkiller"
        }
    ],
    "3829080": [
        {
            "dateadded": "2026-04-22 21:37:21 UTC",
            "url": "http://176.65.139.11/h3flood.x64",
            "url_status": "offline",
            "last_online": "2026-04-23 12:26:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829080/",
            "reporter": "botnetkiller"
        }
    ],
    "3829081": [
        {
            "dateadded": "2026-04-22 21:37:21 UTC",
            "url": "http://176.65.139.11/h3flood.arm",
            "url_status": "offline",
            "last_online": "2026-04-23 12:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829081/",
            "reporter": "botnetkiller"
        }
    ],
    "3829082": [
        {
            "dateadded": "2026-04-22 21:37:21 UTC",
            "url": "http://176.65.139.11/h3flood.mips64",
            "url_status": "offline",
            "last_online": "2026-04-23 12:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829082/",
            "reporter": "botnetkiller"
        }
    ],
    "3829083": [
        {
            "dateadded": "2026-04-22 21:37:21 UTC",
            "url": "http://176.65.139.11/h2rapidreset.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829083/",
            "reporter": "botnetkiller"
        }
    ],
    "3829084": [
        {
            "dateadded": "2026-04-22 21:37:21 UTC",
            "url": "http://176.65.139.11/h3flood.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-23 05:45:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829084/",
            "reporter": "botnetkiller"
        }
    ],
    "3829071": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2rapidreset.mips",
            "url_status": "offline",
            "last_online": "2026-04-23 06:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829071/",
            "reporter": "botnetkiller"
        }
    ],
    "3829072": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2rapidreset.s390x",
            "url_status": "offline",
            "last_online": "2026-04-23 11:43:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829072/",
            "reporter": "botnetkiller"
        }
    ],
    "3829073": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2rapidreset.arm",
            "url_status": "offline",
            "last_online": "2026-04-23 06:45:06 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829073/",
            "reporter": "botnetkiller"
        }
    ],
    "3829074": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2rapidreset.ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 12:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829074/",
            "reporter": "botnetkiller"
        }
    ],
    "3829075": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2stream.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-23 12:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829075/",
            "reporter": "botnetkiller"
        }
    ],
    "3829076": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2stream.mips64",
            "url_status": "offline",
            "last_online": "2026-04-23 11:42:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829076/",
            "reporter": "botnetkiller"
        }
    ],
    "3829077": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h2rapidreset.x64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829077/",
            "reporter": "botnetkiller"
        }
    ],
    "3829078": [
        {
            "dateadded": "2026-04-22 21:37:20 UTC",
            "url": "http://176.65.139.11/h3flood.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-23 11:46:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829078/",
            "reporter": "botnetkiller"
        }
    ],
    "3829070": [
        {
            "dateadded": "2026-04-22 21:37:19 UTC",
            "url": "http://176.65.139.11/h2stream.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829070/",
            "reporter": "botnetkiller"
        }
    ],
    "3829069": [
        {
            "dateadded": "2026-04-22 21:37:17 UTC",
            "url": "http://176.65.139.11/bot.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 18:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829069/",
            "reporter": "botnetkiller"
        }
    ],
    "3829068": [
        {
            "dateadded": "2026-04-22 21:36:18 UTC",
            "url": "http://176.65.139.11/bot.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 17:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829068/",
            "reporter": "botnetkiller"
        }
    ],
    "3829067": [
        {
            "dateadded": "2026-04-22 21:35:26 UTC",
            "url": "http://176.65.139.141/bins/nc",
            "url_status": "offline",
            "last_online": "2026-04-24 11:54:26 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "netcat",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829067/",
            "reporter": "botnetkiller"
        }
    ],
    "3829066": [
        {
            "dateadded": "2026-04-22 21:34:07 UTC",
            "url": "https://switc1-index.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829066/",
            "reporter": "anonymous"
        }
    ],
    "3829065": [
        {
            "dateadded": "2026-04-22 21:30:21 UTC",
            "url": "http://105.186.89.247:49161/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:55:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829065/",
            "reporter": "geenensp"
        }
    ],
    "3829064": [
        {
            "dateadded": "2026-04-22 21:29:12 UTC",
            "url": "http://180.245.46.214:59412/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 06:06:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829064/",
            "reporter": "geenensp"
        }
    ],
    "3829063": [
        {
            "dateadded": "2026-04-22 21:29:07 UTC",
            "url": "https://730e.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829063/",
            "reporter": "anonymous"
        }
    ],
    "3829062": [
        {
            "dateadded": "2026-04-22 21:28:18 UTC",
            "url": "http://42.178.153.5:44369/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829062/",
            "reporter": "geenensp"
        }
    ],
    "3829061": [
        {
            "dateadded": "2026-04-22 21:23:09 UTC",
            "url": "https://flee-line.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829061/",
            "reporter": "anonymous"
        }
    ],
    "3829059": [
        {
            "dateadded": "2026-04-22 21:18:08 UTC",
            "url": "https://hyper-5ystem.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829059/",
            "reporter": "anonymous"
        }
    ],
    "3829058": [
        {
            "dateadded": "2026-04-22 21:12:08 UTC",
            "url": "https://kpelhw.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829058/",
            "reporter": "anonymous"
        }
    ],
    "3829057": [
        {
            "dateadded": "2026-04-22 21:10:14 UTC",
            "url": "http://61.53.73.110:42070/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829057/",
            "reporter": "geenensp"
        }
    ],
    "3829056": [
        {
            "dateadded": "2026-04-22 21:09:13 UTC",
            "url": "http://42.231.92.253:36633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:11:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829056/",
            "reporter": "geenensp"
        }
    ],
    "3829055": [
        {
            "dateadded": "2026-04-22 21:06:11 UTC",
            "url": "https://m3rg-watch.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829055/",
            "reporter": "anonymous"
        }
    ],
    "3829054": [
        {
            "dateadded": "2026-04-22 21:01:06 UTC",
            "url": "https://arknex6or.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 21:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829054/",
            "reporter": "anonymous"
        }
    ],
    "3829053": [
        {
            "dateadded": "2026-04-22 20:55:09 UTC",
            "url": "https://summit1-stream.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829053/",
            "reporter": "anonymous"
        }
    ],
    "3829052": [
        {
            "dateadded": "2026-04-22 20:50:10 UTC",
            "url": "https://lumdraal1.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829052/",
            "reporter": "anonymous"
        }
    ],
    "3829051": [
        {
            "dateadded": "2026-04-22 20:44:09 UTC",
            "url": "https://2yxdgkw7.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829051/",
            "reporter": "anonymous"
        }
    ],
    "3829050": [
        {
            "dateadded": "2026-04-22 20:43:24 UTC",
            "url": "http://108.57.48.22:43134/i",
            "url_status": "offline",
            "last_online": "2026-04-22 20:43:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829050/",
            "reporter": "geenensp"
        }
    ],
    "3829049": [
        {
            "dateadded": "2026-04-22 20:42:23 UTC",
            "url": "http://108.57.48.22:43134/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 20:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829049/",
            "reporter": "geenensp"
        }
    ],
    "3829048": [
        {
            "dateadded": "2026-04-22 20:42:16 UTC",
            "url": "http://39.67.103.35:43823/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829048/",
            "reporter": "geenensp"
        }
    ],
    "3829047": [
        {
            "dateadded": "2026-04-22 20:39:08 UTC",
            "url": "https://link6-switch.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829047/",
            "reporter": "anonymous"
        }
    ],
    "3829046": [
        {
            "dateadded": "2026-04-22 20:33:09 UTC",
            "url": "https://defenvoya.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829046/",
            "reporter": "anonymous"
        }
    ],
    "3829045": [
        {
            "dateadded": "2026-04-22 20:30:11 UTC",
            "url": "https://offharves.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829045/",
            "reporter": "anonymous"
        }
    ],
    "3829044": [
        {
            "dateadded": "2026-04-22 20:26:08 UTC",
            "url": "https://hauinn.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829044/",
            "reporter": "anonymous"
        }
    ],
    "3829043": [
        {
            "dateadded": "2026-04-22 20:24:21 UTC",
            "url": "http://125.40.122.254:56242/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829043/",
            "reporter": "geenensp"
        }
    ],
    "3829042": [
        {
            "dateadded": "2026-04-22 20:23:15 UTC",
            "url": "http://61.53.73.110:42070/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 20:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829042/",
            "reporter": "geenensp"
        }
    ],
    "3829041": [
        {
            "dateadded": "2026-04-22 20:17:08 UTC",
            "url": "http://36.77.224.72:35646/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:04:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829041/",
            "reporter": "geenensp"
        }
    ],
    "3829040": [
        {
            "dateadded": "2026-04-22 20:16:07 UTC",
            "url": "https://fall-ridg.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829040/",
            "reporter": "anonymous"
        }
    ],
    "3829039": [
        {
            "dateadded": "2026-04-22 20:14:22 UTC",
            "url": "http://36.77.224.72:35646/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:46:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829039/",
            "reporter": "geenensp"
        }
    ],
    "3829038": [
        {
            "dateadded": "2026-04-22 20:14:21 UTC",
            "url": "http://39.67.103.35:43823/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829038/",
            "reporter": "geenensp"
        }
    ],
    "3829037": [
        {
            "dateadded": "2026-04-22 20:11:06 UTC",
            "url": "https://gr1d1-vector.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829037/",
            "reporter": "anonymous"
        }
    ],
    "3829036": [
        {
            "dateadded": "2026-04-22 20:05:09 UTC",
            "url": "https://5565wep5.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829036/",
            "reporter": "anonymous"
        }
    ],
    "3829035": [
        {
            "dateadded": "2026-04-22 20:00:09 UTC",
            "url": "https://ultra-c4ny0n.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 20:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829035/",
            "reporter": "anonymous"
        }
    ],
    "3829034": [
        {
            "dateadded": "2026-04-22 19:57:23 UTC",
            "url": "http://125.40.122.254:56242/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829034/",
            "reporter": "geenensp"
        }
    ],
    "3829033": [
        {
            "dateadded": "2026-04-22 19:54:07 UTC",
            "url": "https://portal-enc.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829033/",
            "reporter": "anonymous"
        }
    ],
    "3829032": [
        {
            "dateadded": "2026-04-22 19:48:07 UTC",
            "url": "https://arktidear7.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829032/",
            "reporter": "anonymous"
        }
    ],
    "3829031": [
        {
            "dateadded": "2026-04-22 19:46:18 UTC",
            "url": "http://42.239.226.200:33077/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:51:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829031/",
            "reporter": "geenensp"
        }
    ],
    "3829030": [
        {
            "dateadded": "2026-04-22 19:43:08 UTC",
            "url": "https://8rxhman.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829030/",
            "reporter": "anonymous"
        }
    ],
    "3829029": [
        {
            "dateadded": "2026-04-22 19:37:24 UTC",
            "url": "http://119.118.46.114:50208/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829029/",
            "reporter": "geenensp"
        }
    ],
    "3829028": [
        {
            "dateadded": "2026-04-22 19:37:08 UTC",
            "url": "https://flkqe.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829028/",
            "reporter": "anonymous"
        }
    ],
    "3829027": [
        {
            "dateadded": "2026-04-22 19:33:13 UTC",
            "url": "https://gr4nd-vault.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829027/",
            "reporter": "anonymous"
        }
    ],
    "3829026": [
        {
            "dateadded": "2026-04-22 19:29:23 UTC",
            "url": "http://60.23.237.150:40345/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:28:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829026/",
            "reporter": "geenensp"
        }
    ],
    "3829025": [
        {
            "dateadded": "2026-04-22 19:28:18 UTC",
            "url": "http://171.38.79.137:47753/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829025/",
            "reporter": "geenensp"
        }
    ],
    "3829013": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/m-p.s-l.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 05:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829013/",
            "reporter": "botnetkiller"
        }
    ],
    "3829014": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/x-3.2-.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 05:43:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829014/",
            "reporter": "botnetkiller"
        }
    ],
    "3829015": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/m-6.8-k.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 06:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829015/",
            "reporter": "botnetkiller"
        }
    ],
    "3829016": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/i-5.8-6.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 06:28:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "m68k",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829016/",
            "reporter": "botnetkiller"
        }
    ],
    "3829017": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/m-i.p-s.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 05:19:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829017/",
            "reporter": "botnetkiller"
        }
    ],
    "3829018": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/a-r.m-7.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 06:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829018/",
            "reporter": "botnetkiller"
        }
    ],
    "3829019": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/p-p.c-.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 06:01:29 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829019/",
            "reporter": "botnetkiller"
        }
    ],
    "3829020": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/a-r.m-4.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 06:18:45 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829020/",
            "reporter": "botnetkiller"
        }
    ],
    "3829021": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/Sakura.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:59:17 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829021/",
            "reporter": "botnetkiller"
        }
    ],
    "3829022": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/x-8.6-.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 05:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829022/",
            "reporter": "botnetkiller"
        }
    ],
    "3829023": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/a-r.m-5.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 05:58:32 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829023/",
            "reporter": "botnetkiller"
        }
    ],
    "3829024": [
        {
            "dateadded": "2026-04-22 19:27:11 UTC",
            "url": "http://195.238.123.165/a-r.m-6.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 06:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829024/",
            "reporter": "botnetkiller"
        }
    ],
    "3829012": [
        {
            "dateadded": "2026-04-22 19:27:10 UTC",
            "url": "https://warmlunar.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829012/",
            "reporter": "anonymous"
        }
    ],
    "3829011": [
        {
            "dateadded": "2026-04-22 19:26:13 UTC",
            "url": "http://195.238.123.165/s-h.4-.Sakura",
            "url_status": "offline",
            "last_online": "2026-04-23 05:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829011/",
            "reporter": "botnetkiller"
        }
    ],
    "3829010": [
        {
            "dateadded": "2026-04-22 19:25:23 UTC",
            "url": "http://60.209.76.246:54822/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:44:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829010/",
            "reporter": "geenensp"
        }
    ],
    "3829009": [
        {
            "dateadded": "2026-04-22 19:22:12 UTC",
            "url": "https://hubspruc.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829009/",
            "reporter": "anonymous"
        }
    ],
    "3829008": [
        {
            "dateadded": "2026-04-22 19:22:06 UTC",
            "url": "http://115.55.6.145:35868/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829008/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829007": [
        {
            "dateadded": "2026-04-22 19:17:06 UTC",
            "url": "http://115.53.201.217:51860/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:51:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829007/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3829006": [
        {
            "dateadded": "2026-04-22 19:15:14 UTC",
            "url": "https://faithfulvector.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829006/",
            "reporter": "anonymous"
        }
    ],
    "3829005": [
        {
            "dateadded": "2026-04-22 19:12:19 UTC",
            "url": "http://182.114.48.139:53777/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829005/",
            "reporter": "geenensp"
        }
    ],
    "3829004": [
        {
            "dateadded": "2026-04-22 19:11:07 UTC",
            "url": "https://eufkpp.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829004/",
            "reporter": "anonymous"
        }
    ],
    "3829003": [
        {
            "dateadded": "2026-04-22 19:07:14 UTC",
            "url": "http://123.10.36.229:49781/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829003/",
            "reporter": "geenensp"
        }
    ],
    "3829002": [
        {
            "dateadded": "2026-04-22 19:04:10 UTC",
            "url": "https://oxhlrfs.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 19:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829002/",
            "reporter": "anonymous"
        }
    ],
    "3829001": [
        {
            "dateadded": "2026-04-22 18:59:08 UTC",
            "url": "https://blzlet.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829001/",
            "reporter": "anonymous"
        }
    ],
    "3829000": [
        {
            "dateadded": "2026-04-22 18:57:07 UTC",
            "url": "http://115.55.6.145:35868/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:55:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3829000/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828999": [
        {
            "dateadded": "2026-04-22 18:53:16 UTC",
            "url": "http://115.61.117.70:43631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828999/",
            "reporter": "geenensp"
        }
    ],
    "3828997": [
        {
            "dateadded": "2026-04-22 18:53:08 UTC",
            "url": "https://visualpure.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828997/",
            "reporter": "anonymous"
        }
    ],
    "3828998": [
        {
            "dateadded": "2026-04-22 18:53:08 UTC",
            "url": "https://158.94.210.217/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 10:52:22 UTC",
            "threat": "malware_download",
            "tags": [
                "158-94-210-217",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828998/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828996": [
        {
            "dateadded": "2026-04-22 18:51:08 UTC",
            "url": "http://221.199.194.59:37879/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828996/",
            "reporter": "geenensp"
        }
    ],
    "3828995": [
        {
            "dateadded": "2026-04-22 18:49:18 UTC",
            "url": "http://42.58.213.35:38727/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828995/",
            "reporter": "geenensp"
        }
    ],
    "3828994": [
        {
            "dateadded": "2026-04-22 18:48:14 UTC",
            "url": "https://darktermi.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828994/",
            "reporter": "anonymous"
        }
    ],
    "3828992": [
        {
            "dateadded": "2026-04-22 18:46:16 UTC",
            "url": "http://175.107.16.92:33109/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828992/",
            "reporter": "geenensp"
        }
    ],
    "3828993": [
        {
            "dateadded": "2026-04-22 18:46:16 UTC",
            "url": "http://123.10.36.229:49781/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828993/",
            "reporter": "geenensp"
        }
    ],
    "3828991": [
        {
            "dateadded": "2026-04-22 18:43:10 UTC",
            "url": "https://c1ini-phase.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828991/",
            "reporter": "anonymous"
        }
    ],
    "3828990": [
        {
            "dateadded": "2026-04-22 18:37:08 UTC",
            "url": "https://yjbkbpa.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828990/",
            "reporter": "anonymous"
        }
    ],
    "3828981": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-25 18:19:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828981/",
            "reporter": "tolisec"
        }
    ],
    "3828982": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-25 18:20:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828982/",
            "reporter": "tolisec"
        }
    ],
    "3828983": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-25 17:40:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828983/",
            "reporter": "tolisec"
        }
    ],
    "3828984": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.s390x",
            "url_status": "offline",
            "last_online": "2026-04-25 17:45:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828984/",
            "reporter": "tolisec"
        }
    ],
    "3828985": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-25 17:57:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828985/",
            "reporter": "tolisec"
        }
    ],
    "3828986": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 18:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828986/",
            "reporter": "tolisec"
        }
    ],
    "3828987": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.mips64",
            "url_status": "offline",
            "last_online": "2026-04-25 18:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828987/",
            "reporter": "tolisec"
        }
    ],
    "3828988": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 17:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828988/",
            "reporter": "tolisec"
        }
    ],
    "3828989": [
        {
            "dateadded": "2026-04-22 18:32:20 UTC",
            "url": "http://176.65.139.11/bot.x64",
            "url_status": "offline",
            "last_online": "2026-04-25 18:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828989/",
            "reporter": "tolisec"
        }
    ],
    "3828980": [
        {
            "dateadded": "2026-04-22 18:32:09 UTC",
            "url": "https://gufnz2.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828980/",
            "reporter": "anonymous"
        }
    ],
    "3828979": [
        {
            "dateadded": "2026-04-22 18:30:08 UTC",
            "url": "https://158.94.208.60/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 10:54:27 UTC",
            "threat": "malware_download",
            "tags": [
                "158-94-208-60",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828979/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828978": [
        {
            "dateadded": "2026-04-22 18:28:06 UTC",
            "url": "http://176.65.139.42/bins/bot_s390x",
            "url_status": "offline",
            "last_online": "2026-04-22 22:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828978/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828977": [
        {
            "dateadded": "2026-04-22 18:27:09 UTC",
            "url": "http://176.65.139.42/bins/bot_mipsel",
            "url_status": "offline",
            "last_online": "2026-04-23 05:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828977/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828973": [
        {
            "dateadded": "2026-04-22 18:27:08 UTC",
            "url": "http://176.65.139.42/bins/rename_bots.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 04:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828973/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828974": [
        {
            "dateadded": "2026-04-22 18:27:08 UTC",
            "url": "http://176.65.139.42/bins/check_bots.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 04:46:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828974/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828975": [
        {
            "dateadded": "2026-04-22 18:27:08 UTC",
            "url": "http://176.65.139.42/bins/bot_mips64el",
            "url_status": "offline",
            "last_online": "2026-04-23 05:30:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828975/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828976": [
        {
            "dateadded": "2026-04-22 18:27:08 UTC",
            "url": "http://176.65.139.42/bins/bot_ppc64el",
            "url_status": "offline",
            "last_online": "2026-04-23 04:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828976/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828971": [
        {
            "dateadded": "2026-04-22 18:26:39 UTC",
            "url": "http://vanillamods.xyz/api/selfupdater",
            "url_status": "offline",
            "last_online": "2026-04-24 23:19:44 UTC",
            "threat": "malware_download",
            "tags": [
                "RapidStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828971/",
            "reporter": "burger"
        }
    ],
    "3828972": [
        {
            "dateadded": "2026-04-22 18:26:39 UTC",
            "url": "https://cargoisle.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828972/",
            "reporter": "anonymous"
        }
    ],
    "3828970": [
        {
            "dateadded": "2026-04-22 18:26:38 UTC",
            "url": "https://lkgkdsjd.com/s.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828970/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828969": [
        {
            "dateadded": "2026-04-22 18:26:37 UTC",
            "url": "http://vanillamods.xyz/api/dps",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "RapidStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828969/",
            "reporter": "burger"
        }
    ],
    "3828962": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://107.173.143.107/web/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828962/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828963": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://176.65.139.42/bins/bot_arm64",
            "url_status": "offline",
            "last_online": "2026-04-23 05:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828963/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828964": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://176.65.139.42/bins/bot_linux_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-22 23:05:07 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828964/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828965": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://vanillamods.xyz/api/ps",
            "url_status": "offline",
            "last_online": "2026-04-24 23:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "RapidStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828965/",
            "reporter": "burger"
        }
    ],
    "3828966": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://176.65.139.42/bins/bot_i386",
            "url_status": "offline",
            "last_online": "2026-04-23 05:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828966/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828967": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://176.65.139.42/bins/bot_armv7",
            "url_status": "offline",
            "last_online": "2026-04-22 23:50:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828967/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828968": [
        {
            "dateadded": "2026-04-22 18:26:35 UTC",
            "url": "http://176.65.139.42/bins/bot_mips",
            "url_status": "offline",
            "last_online": "2026-04-23 05:29:55 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828968/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828960": [
        {
            "dateadded": "2026-04-22 18:26:34 UTC",
            "url": "https://lkgkdsjd.com/jpn.7z",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "pw-pzp",
                "pwn-pzp"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828960/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828961": [
        {
            "dateadded": "2026-04-22 18:26:34 UTC",
            "url": "http://www.teslasuit.to/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828961/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828959": [
        {
            "dateadded": "2026-04-22 18:26:33 UTC",
            "url": "https://drive.google.com/file/d/1SVxKP_9KaxVI8z46PV5zkp3grc-i2ckQ/view?usp=sharing_eil&amp%3Bts=69e7c6ac&amp%3Bsh=u756Kmhy4TxtnE3m&amp%3Bca=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "Tofsee"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828959/",
            "reporter": "anonymous"
        }
    ],
    "3828956": [
        {
            "dateadded": "2026-04-22 18:26:32 UTC",
            "url": "http://www.teslasuit.to/newuu.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828956/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828957": [
        {
            "dateadded": "2026-04-22 18:26:32 UTC",
            "url": "https://teslasuit.to/newuu.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828957/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828958": [
        {
            "dateadded": "2026-04-22 18:26:32 UTC",
            "url": "https://www.teslasuit.to/newuu.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828958/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828955": [
        {
            "dateadded": "2026-04-22 18:26:31 UTC",
            "url": "http://teslasuit.to/newuu.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828955/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828954": [
        {
            "dateadded": "2026-04-22 18:22:08 UTC",
            "url": "http://42.235.54.204:40019/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:51:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828954/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828953": [
        {
            "dateadded": "2026-04-22 18:21:08 UTC",
            "url": "https://dn17wscb.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828953/",
            "reporter": "anonymous"
        }
    ],
    "3828952": [
        {
            "dateadded": "2026-04-22 18:20:24 UTC",
            "url": "http://42.58.213.35:38727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 22:57:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828952/",
            "reporter": "geenensp"
        }
    ],
    "3828951": [
        {
            "dateadded": "2026-04-22 18:19:22 UTC",
            "url": "http://221.199.194.59:37879/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828951/",
            "reporter": "geenensp"
        }
    ],
    "3828950": [
        {
            "dateadded": "2026-04-22 18:16:06 UTC",
            "url": "http://176.65.139.141/bins/jewn.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-141",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828950/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828949": [
        {
            "dateadded": "2026-04-22 18:15:10 UTC",
            "url": "https://fierce-frame.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828949/",
            "reporter": "anonymous"
        }
    ],
    "3828948": [
        {
            "dateadded": "2026-04-22 18:10:31 UTC",
            "url": "http://27.219.14.111:46003/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:22:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828948/",
            "reporter": "geenensp"
        }
    ],
    "3828947": [
        {
            "dateadded": "2026-04-22 18:10:15 UTC",
            "url": "https://pkqwqx.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828947/",
            "reporter": "anonymous"
        }
    ],
    "3828946": [
        {
            "dateadded": "2026-04-22 18:07:07 UTC",
            "url": "http://123.14.32.208:51903/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:57:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828946/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828945": [
        {
            "dateadded": "2026-04-22 18:04:12 UTC",
            "url": "https://lqfrhvos.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 18:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828945/",
            "reporter": "anonymous"
        }
    ],
    "3828944": [
        {
            "dateadded": "2026-04-22 17:58:14 UTC",
            "url": "https://t1ny-spool.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828944/",
            "reporter": "anonymous"
        }
    ],
    "3828943": [
        {
            "dateadded": "2026-04-22 17:57:08 UTC",
            "url": "http://221.15.7.209:39779/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:03:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828943/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828942": [
        {
            "dateadded": "2026-04-22 17:56:26 UTC",
            "url": "http://113.239.219.0:59794/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:43:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828942/",
            "reporter": "geenensp"
        }
    ],
    "3828941": [
        {
            "dateadded": "2026-04-22 17:54:19 UTC",
            "url": "http://61.53.87.167:49825/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828941/",
            "reporter": "geenensp"
        }
    ],
    "3828940": [
        {
            "dateadded": "2026-04-22 17:53:09 UTC",
            "url": "https://cach8-stack.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828940/",
            "reporter": "anonymous"
        }
    ],
    "3828939": [
        {
            "dateadded": "2026-04-22 17:52:23 UTC",
            "url": "http://60.23.234.116:47900/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828939/",
            "reporter": "geenensp"
        }
    ],
    "3828938": [
        {
            "dateadded": "2026-04-22 17:52:06 UTC",
            "url": "http://105.225.99.48:60715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:52:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828938/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828937": [
        {
            "dateadded": "2026-04-22 17:48:12 UTC",
            "url": "https://cliffcrims.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828937/",
            "reporter": "anonymous"
        }
    ],
    "3828931": [
        {
            "dateadded": "2026-04-22 17:46:24 UTC",
            "url": "http://176.65.139.146/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-23 18:09:06 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828931/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828932": [
        {
            "dateadded": "2026-04-22 17:46:24 UTC",
            "url": "http://176.65.139.146/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-23 17:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828932/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828933": [
        {
            "dateadded": "2026-04-22 17:46:24 UTC",
            "url": "http://176.65.139.146/mipsle",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:48 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828933/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828934": [
        {
            "dateadded": "2026-04-22 17:46:24 UTC",
            "url": "http://176.65.139.146/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-23 17:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828934/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828935": [
        {
            "dateadded": "2026-04-22 17:46:24 UTC",
            "url": "http://176.65.139.146/x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828935/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828936": [
        {
            "dateadded": "2026-04-22 17:46:24 UTC",
            "url": "http://176.65.139.146/mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828936/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828928": [
        {
            "dateadded": "2026-04-22 17:46:23 UTC",
            "url": "http://176.65.139.146/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 18:16:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828928/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828929": [
        {
            "dateadded": "2026-04-22 17:46:23 UTC",
            "url": "http://176.65.139.146/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 18:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828929/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828930": [
        {
            "dateadded": "2026-04-22 17:46:23 UTC",
            "url": "http://176.65.139.146/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-23 16:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828930/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828927": [
        {
            "dateadded": "2026-04-22 17:46:20 UTC",
            "url": "http://176.65.139.146/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-23 17:13:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828927/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828925": [
        {
            "dateadded": "2026-04-22 17:46:19 UTC",
            "url": "http://176.65.139.146/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 16:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828925/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828926": [
        {
            "dateadded": "2026-04-22 17:46:19 UTC",
            "url": "http://176.65.139.146/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-23 18:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828926/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828923": [
        {
            "dateadded": "2026-04-22 17:46:18 UTC",
            "url": "http://176.65.139.146/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-23 17:22:02 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828923/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828924": [
        {
            "dateadded": "2026-04-22 17:46:18 UTC",
            "url": "http://176.65.139.146/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 17:58:03 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828924/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828921": [
        {
            "dateadded": "2026-04-22 17:46:12 UTC",
            "url": "http://176.65.139.146/bot_x86.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "exe",
                "LummaStealer",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828921/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828922": [
        {
            "dateadded": "2026-04-22 17:46:12 UTC",
            "url": "http://176.65.139.146/bot.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-146",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828922/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828920": [
        {
            "dateadded": "2026-04-22 17:45:22 UTC",
            "url": "http://115.58.93.113:34932/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828920/",
            "reporter": "geenensp"
        }
    ],
    "3828919": [
        {
            "dateadded": "2026-04-22 17:45:17 UTC",
            "url": "http://119.118.46.114:50208/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828919/",
            "reporter": "geenensp"
        }
    ],
    "3828918": [
        {
            "dateadded": "2026-04-22 17:43:24 UTC",
            "url": "http://27.219.14.111:46003/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828918/",
            "reporter": "geenensp"
        }
    ],
    "3828917": [
        {
            "dateadded": "2026-04-22 17:41:13 UTC",
            "url": "https://a0uq.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828917/",
            "reporter": "anonymous"
        }
    ],
    "3828916": [
        {
            "dateadded": "2026-04-22 17:37:14 UTC",
            "url": "https://forg-scann.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828916/",
            "reporter": "anonymous"
        }
    ],
    "3828915": [
        {
            "dateadded": "2026-04-22 17:32:12 UTC",
            "url": "https://thorneur.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828915/",
            "reporter": "anonymous"
        }
    ],
    "3828914": [
        {
            "dateadded": "2026-04-22 17:25:16 UTC",
            "url": "https://vorlithum.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828914/",
            "reporter": "anonymous"
        }
    ],
    "3828913": [
        {
            "dateadded": "2026-04-22 17:23:21 UTC",
            "url": "http://61.53.87.167:49825/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828913/",
            "reporter": "geenensp"
        }
    ],
    "3828912": [
        {
            "dateadded": "2026-04-22 17:20:37 UTC",
            "url": "http://113.239.219.0:59794/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828912/",
            "reporter": "geenensp"
        }
    ],
    "3828911": [
        {
            "dateadded": "2026-04-22 17:19:16 UTC",
            "url": "https://cxti.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:19:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828911/",
            "reporter": "anonymous"
        }
    ],
    "3828910": [
        {
            "dateadded": "2026-04-22 17:14:22 UTC",
            "url": "http://125.47.86.187:53192/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828910/",
            "reporter": "geenensp"
        }
    ],
    "3828908": [
        {
            "dateadded": "2026-04-22 17:14:21 UTC",
            "url": "https://parcelmod.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828908/",
            "reporter": "anonymous"
        }
    ],
    "3828909": [
        {
            "dateadded": "2026-04-22 17:14:21 UTC",
            "url": "https://azureaud.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828909/",
            "reporter": "anonymous"
        }
    ],
    "3828906": [
        {
            "dateadded": "2026-04-22 17:14:20 UTC",
            "url": "http://176.65.139.143/x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-143",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828906/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828907": [
        {
            "dateadded": "2026-04-22 17:14:20 UTC",
            "url": "http://176.65.139.143/x86_32",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-143",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828907/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828903": [
        {
            "dateadded": "2026-04-22 17:14:18 UTC",
            "url": "http://madroxreborn.lol/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-22 17:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828903/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828904": [
        {
            "dateadded": "2026-04-22 17:14:18 UTC",
            "url": "http://madroxreborn.lol/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-22 17:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828904/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828905": [
        {
            "dateadded": "2026-04-22 17:14:18 UTC",
            "url": "https://iz7v.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 17:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828905/",
            "reporter": "anonymous"
        }
    ],
    "3828900": [
        {
            "dateadded": "2026-04-22 16:59:15 UTC",
            "url": "http://madroxreborn.lol/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828900/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828901": [
        {
            "dateadded": "2026-04-22 16:59:15 UTC",
            "url": "http://madroxreborn.lol/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828901/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828902": [
        {
            "dateadded": "2026-04-22 16:59:15 UTC",
            "url": "http://madroxreborn.lol/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828902/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828899": [
        {
            "dateadded": "2026-04-22 16:59:14 UTC",
            "url": "http://madroxreborn.lol/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828899/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828896": [
        {
            "dateadded": "2026-04-22 16:59:13 UTC",
            "url": "http://madroxreborn.lol/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828896/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828897": [
        {
            "dateadded": "2026-04-22 16:59:13 UTC",
            "url": "http://madroxreborn.lol/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828897/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828898": [
        {
            "dateadded": "2026-04-22 16:59:13 UTC",
            "url": "http://madroxreborn.lol/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828898/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828895": [
        {
            "dateadded": "2026-04-22 16:59:12 UTC",
            "url": "http://madroxreborn.lol/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828895/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828893": [
        {
            "dateadded": "2026-04-22 16:59:11 UTC",
            "url": "http://madroxreborn.lol/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828893/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828894": [
        {
            "dateadded": "2026-04-22 16:59:11 UTC",
            "url": "http://madroxreborn.lol/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-22 16:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "madroxreborn-lol",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828894/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828892": [
        {
            "dateadded": "2026-04-22 16:58:14 UTC",
            "url": "https://scann1-cast.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828892/",
            "reporter": "anonymous"
        }
    ],
    "3828891": [
        {
            "dateadded": "2026-04-22 16:57:21 UTC",
            "url": "http://176.65.139.104/bins/pspc",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828891/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828890": [
        {
            "dateadded": "2026-04-22 16:57:20 UTC",
            "url": "http://176.65.139.104/bins/parm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:05 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828890/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828889": [
        {
            "dateadded": "2026-04-22 16:57:15 UTC",
            "url": "http://176.65.139.104/bins/px86",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828889/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828880": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/psh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828880/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828881": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/pmips",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828881/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828882": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/parm",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828882/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828883": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/parm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:06 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828883/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828884": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/pm68k",
            "url_status": "online",
            "last_online": "2026-04-27 13:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828884/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828885": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/pppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828885/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828886": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/pmpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828886/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828887": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/parm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828887/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828888": [
        {
            "dateadded": "2026-04-22 16:57:12 UTC",
            "url": "http://176.65.139.104/bins/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-104",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828888/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828879": [
        {
            "dateadded": "2026-04-22 16:54:20 UTC",
            "url": "http://182.112.224.78:45371/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828879/",
            "reporter": "geenensp"
        }
    ],
    "3828877": [
        {
            "dateadded": "2026-04-22 16:53:22 UTC",
            "url": "http://176.65.139.76/bins/parm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:50 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828877/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828878": [
        {
            "dateadded": "2026-04-22 16:53:22 UTC",
            "url": "http://176.65.139.76/bins/pm68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:45 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828878/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828876": [
        {
            "dateadded": "2026-04-22 16:53:21 UTC",
            "url": "http://176.65.139.76/bins/px86",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:04 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828876/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828875": [
        {
            "dateadded": "2026-04-22 16:53:20 UTC",
            "url": "http://182.124.175.204:50581/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:57:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828875/",
            "reporter": "geenensp"
        }
    ],
    "3828872": [
        {
            "dateadded": "2026-04-22 16:53:19 UTC",
            "url": "http://176.65.139.76/bins/psh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:46 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828872/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828873": [
        {
            "dateadded": "2026-04-22 16:53:19 UTC",
            "url": "http://176.65.139.76/bins/pspc",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828873/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828874": [
        {
            "dateadded": "2026-04-22 16:53:19 UTC",
            "url": "http://176.65.139.76/bins/parm",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:27 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828874/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828871": [
        {
            "dateadded": "2026-04-22 16:53:11 UTC",
            "url": "https://glossink.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:53:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828871/",
            "reporter": "anonymous"
        }
    ],
    "3828867": [
        {
            "dateadded": "2026-04-22 16:52:26 UTC",
            "url": "http://176.65.139.76/bins/pmpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828867/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828868": [
        {
            "dateadded": "2026-04-22 16:52:26 UTC",
            "url": "http://176.65.139.76/bins/parm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:50 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828868/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828869": [
        {
            "dateadded": "2026-04-22 16:52:26 UTC",
            "url": "http://176.65.139.76/bins/pppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828869/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828870": [
        {
            "dateadded": "2026-04-22 16:52:26 UTC",
            "url": "http://176.65.139.76/bins/pmips",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-76",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828870/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828866": [
        {
            "dateadded": "2026-04-22 16:49:11 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/ohshit.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828866/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828865": [
        {
            "dateadded": "2026-04-22 16:48:28 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-22 23:01:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828865/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828864": [
        {
            "dateadded": "2026-04-22 16:48:22 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": "2026-04-22 23:21:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828864/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828863": [
        {
            "dateadded": "2026-04-22 16:48:15 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-22 23:19:45 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828863/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828853": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": "2026-04-22 23:03:28 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828853/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828854": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.i486",
            "url_status": "offline",
            "last_online": "2026-04-23 04:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828854/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828855": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 22:48:56 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828855/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828856": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 05:07:47 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828856/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828857": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 23:21:29 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828857/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828858": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": "2026-04-22 23:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828858/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828859": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": "2026-04-23 04:59:00 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828859/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828860": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": "2026-04-23 05:01:51 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828860/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828861": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": "2026-04-22 22:42:49 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828861/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828862": [
        {
            "dateadded": "2026-04-22 16:48:14 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-22 23:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828862/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828852": [
        {
            "dateadded": "2026-04-22 16:48:11 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 23:10:32 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828852/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828851": [
        {
            "dateadded": "2026-04-22 16:48:09 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-22 23:54:55 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828851/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828850": [
        {
            "dateadded": "2026-04-22 16:48:07 UTC",
            "url": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": "2026-04-23 04:53:41 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "jbrj92scltrbtv7mzejvmovw-duckdns-org",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828850/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828847": [
        {
            "dateadded": "2026-04-22 16:47:25 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 23:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828847/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828848": [
        {
            "dateadded": "2026-04-22 16:47:25 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": "2026-04-22 22:52:22 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828848/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828849": [
        {
            "dateadded": "2026-04-22 16:47:25 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 05:05:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828849/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828845": [
        {
            "dateadded": "2026-04-22 16:46:21 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.i486",
            "url_status": "offline",
            "last_online": "2026-04-23 04:44:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828845/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828846": [
        {
            "dateadded": "2026-04-22 16:46:21 UTC",
            "url": "http://176.65.139.69/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:41:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828846/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828844": [
        {
            "dateadded": "2026-04-22 16:46:20 UTC",
            "url": "http://176.65.139.69/ohshit.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828844/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828843": [
        {
            "dateadded": "2026-04-22 16:46:19 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 05:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828843/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828842": [
        {
            "dateadded": "2026-04-22 16:46:18 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 23:22:26 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828842/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828837": [
        {
            "dateadded": "2026-04-22 16:46:16 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-22 23:01:40 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828837/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828838": [
        {
            "dateadded": "2026-04-22 16:46:16 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": "2026-04-23 04:43:35 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828838/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828839": [
        {
            "dateadded": "2026-04-22 16:46:16 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 00:11:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828839/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828840": [
        {
            "dateadded": "2026-04-22 16:46:16 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": "2026-04-23 04:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828840/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828841": [
        {
            "dateadded": "2026-04-22 16:46:16 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": "2026-04-22 23:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828841/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828836": [
        {
            "dateadded": "2026-04-22 16:46:12 UTC",
            "url": "https://fkftn4.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828836/",
            "reporter": "anonymous"
        }
    ],
    "3828835": [
        {
            "dateadded": "2026-04-22 16:46:08 UTC",
            "url": "http://176.65.139.69/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 23:09:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-69",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828835/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828834": [
        {
            "dateadded": "2026-04-22 16:44:21 UTC",
            "url": "http://182.124.13.223:38421/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:19:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828834/",
            "reporter": "geenensp"
        }
    ],
    "3828833": [
        {
            "dateadded": "2026-04-22 16:42:13 UTC",
            "url": "https://cinemapassive.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828833/",
            "reporter": "anonymous"
        }
    ],
    "3828832": [
        {
            "dateadded": "2026-04-22 16:41:12 UTC",
            "url": "http://125.47.86.187:53192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:17:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828832/",
            "reporter": "geenensp"
        }
    ],
    "3828831": [
        {
            "dateadded": "2026-04-22 16:40:21 UTC",
            "url": "http://176.65.139.59/bins.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:20:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-59",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828831/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828830": [
        {
            "dateadded": "2026-04-22 16:39:19 UTC",
            "url": "http://176.65.139.131/arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 06:08:15 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828830/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828823": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/mipsle",
            "url_status": "offline",
            "last_online": "2026-04-23 05:53:34 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828823/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828824": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/x86",
            "url_status": "offline",
            "last_online": "2026-04-23 06:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828824/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828825": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/arm64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828825/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828826": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/arm",
            "url_status": "offline",
            "last_online": "2026-04-23 06:20:07 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828826/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828827": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/arm7",
            "url_status": "offline",
            "last_online": "2026-04-23 06:06:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828827/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828828": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/arm5",
            "url_status": "offline",
            "last_online": "2026-04-23 05:54:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828828/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828829": [
        {
            "dateadded": "2026-04-22 16:38:26 UTC",
            "url": "http://176.65.139.131/mips",
            "url_status": "offline",
            "last_online": "2026-04-23 06:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828829/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828822": [
        {
            "dateadded": "2026-04-22 16:38:18 UTC",
            "url": "http://176.65.139.131/hb8ipc.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-65-139-131",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828822/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828821": [
        {
            "dateadded": "2026-04-22 16:37:17 UTC",
            "url": "http://176.65.139.130/mirai.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-130",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828821/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828820": [
        {
            "dateadded": "2026-04-22 16:37:09 UTC",
            "url": "http://176.65.139.130/mirai.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:21 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-130",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828820/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828819": [
        {
            "dateadded": "2026-04-22 16:36:11 UTC",
            "url": "https://indexwho.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828819/",
            "reporter": "anonymous"
        }
    ],
    "3828806": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828806/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828807": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.mipsrouter",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828807/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828808": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:49 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828808/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828809": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828809/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828810": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/cat.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828810/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828811": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828811/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828812": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828812/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828813": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.armv7l",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828813/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828814": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.sparc",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828814/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828815": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828815/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828816": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.armv6l",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828816/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828817": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828817/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828818": [
        {
            "dateadded": "2026-04-22 16:31:12 UTC",
            "url": "http://176.65.139.35/iran.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828818/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828805": [
        {
            "dateadded": "2026-04-22 16:30:14 UTC",
            "url": "https://ter8k.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828805/",
            "reporter": "anonymous"
        }
    ],
    "3828804": [
        {
            "dateadded": "2026-04-22 16:27:08 UTC",
            "url": "http://110.37.86.252:37966/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828804/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828803": [
        {
            "dateadded": "2026-04-22 16:25:09 UTC",
            "url": "https://ship-obser.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828803/",
            "reporter": "anonymous"
        }
    ],
    "3828802": [
        {
            "dateadded": "2026-04-22 16:22:08 UTC",
            "url": "http://27.207.216.119:55802/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828802/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828801": [
        {
            "dateadded": "2026-04-22 16:20:11 UTC",
            "url": "https://mme4po.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828801/",
            "reporter": "anonymous"
        }
    ],
    "3828800": [
        {
            "dateadded": "2026-04-22 16:19:09 UTC",
            "url": "http://datasurge-bot.online/diicot.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:56:39 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828800/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828799": [
        {
            "dateadded": "2026-04-22 16:19:08 UTC",
            "url": "http://datasurge-bot.online/c.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828799/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828798": [
        {
            "dateadded": "2026-04-22 16:14:09 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_arm",
            "url_status": "offline",
            "last_online": "2026-04-22 22:47:18 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828798/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828797": [
        {
            "dateadded": "2026-04-22 16:14:07 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_aarch64",
            "url_status": "offline",
            "last_online": "2026-04-22 23:57:34 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828797/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828795": [
        {
            "dateadded": "2026-04-22 16:14:06 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_i486",
            "url_status": "offline",
            "last_online": "2026-04-22 23:32:25 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828795/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828796": [
        {
            "dateadded": "2026-04-22 16:14:06 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_i586",
            "url_status": "offline",
            "last_online": "2026-04-22 23:11:39 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828796/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828792": [
        {
            "dateadded": "2026-04-22 16:13:12 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_arm7",
            "url_status": "offline",
            "last_online": "2026-04-22 23:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828792/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828793": [
        {
            "dateadded": "2026-04-22 16:13:12 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_i686",
            "url_status": "offline",
            "last_online": "2026-04-22 23:28:22 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828793/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828794": [
        {
            "dateadded": "2026-04-22 16:13:12 UTC",
            "url": "https://9871mi.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828794/",
            "reporter": "anonymous"
        }
    ],
    "3828789": [
        {
            "dateadded": "2026-04-22 16:13:11 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_x86",
            "url_status": "offline",
            "last_online": "2026-04-22 23:36:23 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828789/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828790": [
        {
            "dateadded": "2026-04-22 16:13:11 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_mips64",
            "url_status": "offline",
            "last_online": "2026-04-22 22:44:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828790/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828791": [
        {
            "dateadded": "2026-04-22 16:13:11 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 23:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828791/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828785": [
        {
            "dateadded": "2026-04-22 16:13:10 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 00:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828785/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828786": [
        {
            "dateadded": "2026-04-22 16:13:10 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_m68k",
            "url_status": "offline",
            "last_online": "2026-04-22 23:27:35 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828786/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828787": [
        {
            "dateadded": "2026-04-22 16:13:10 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_arm5",
            "url_status": "offline",
            "last_online": "2026-04-22 23:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828787/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828788": [
        {
            "dateadded": "2026-04-22 16:13:10 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_mips",
            "url_status": "offline",
            "last_online": "2026-04-22 22:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828788/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828784": [
        {
            "dateadded": "2026-04-22 16:13:07 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 00:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828784/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828783": [
        {
            "dateadded": "2026-04-22 16:13:06 UTC",
            "url": "http://datasurge-bot.online/static/ciubuc_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 22:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "datasurge-bot-online",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828783/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828780": [
        {
            "dateadded": "2026-04-22 16:10:20 UTC",
            "url": "http://176.65.139.20/static/ciubuc_aarch64",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828780/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828781": [
        {
            "dateadded": "2026-04-22 16:10:20 UTC",
            "url": "http://176.65.139.20/static/ciubuc_sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:34 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828781/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828782": [
        {
            "dateadded": "2026-04-22 16:10:20 UTC",
            "url": "http://176.65.139.20/static/ciubuc_arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:16 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828782/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828778": [
        {
            "dateadded": "2026-04-22 16:10:19 UTC",
            "url": "http://176.65.139.20/static/ciubuc_m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:40 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828778/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828779": [
        {
            "dateadded": "2026-04-22 16:10:19 UTC",
            "url": "http://176.65.139.20/static/ciubuc_arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:40 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828779/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828777": [
        {
            "dateadded": "2026-04-22 16:10:18 UTC",
            "url": "http://176.65.139.20/diicot.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:50:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828777/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828771": [
        {
            "dateadded": "2026-04-22 16:10:14 UTC",
            "url": "http://176.65.139.20/static/ciubuc_arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828771/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828772": [
        {
            "dateadded": "2026-04-22 16:10:14 UTC",
            "url": "http://176.65.139.20/static/ciubuc_i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828772/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828773": [
        {
            "dateadded": "2026-04-22 16:10:14 UTC",
            "url": "http://176.65.139.20/static/ciubuc_i486",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:44 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828773/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828774": [
        {
            "dateadded": "2026-04-22 16:10:14 UTC",
            "url": "http://176.65.139.20/static/ciubuc_arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:54 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828774/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828775": [
        {
            "dateadded": "2026-04-22 16:10:14 UTC",
            "url": "http://176.65.139.20/static/ciubuc_mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828775/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828776": [
        {
            "dateadded": "2026-04-22 16:10:14 UTC",
            "url": "http://176.65.139.20/static/ciubuc_ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828776/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828770": [
        {
            "dateadded": "2026-04-22 16:10:13 UTC",
            "url": "http://176.65.139.20/static/ciubuc_mips64",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828770/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828769": [
        {
            "dateadded": "2026-04-22 16:10:12 UTC",
            "url": "http://176.65.139.20/static/ciubuc_x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:26 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828769/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828768": [
        {
            "dateadded": "2026-04-22 16:10:11 UTC",
            "url": "http://176.65.139.20/static/ciubuc_mips",
            "url_status": "online",
            "last_online": "2026-04-27 13:06:43 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828768/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828766": [
        {
            "dateadded": "2026-04-22 16:10:10 UTC",
            "url": "http://176.65.139.20/c.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828766/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828767": [
        {
            "dateadded": "2026-04-22 16:10:10 UTC",
            "url": "http://176.65.139.20/static/ciubuc_i586",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828767/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828765": [
        {
            "dateadded": "2026-04-22 16:09:07 UTC",
            "url": "https://f0rm-mount.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828765/",
            "reporter": "anonymous"
        }
    ],
    "3828764": [
        {
            "dateadded": "2026-04-22 16:06:08 UTC",
            "url": "http://115.56.129.141:48483/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:43:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828764/",
            "reporter": "geenensp"
        }
    ],
    "3828763": [
        {
            "dateadded": "2026-04-22 16:03:06 UTC",
            "url": "http://kernalstress.st/arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 05:16:25 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828763/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828762": [
        {
            "dateadded": "2026-04-22 16:02:11 UTC",
            "url": "http://kernalstress.st/arm",
            "url_status": "offline",
            "last_online": "2026-04-27 05:17:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828762/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828760": [
        {
            "dateadded": "2026-04-22 16:02:08 UTC",
            "url": "https://quarryhaul.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 16:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828760/",
            "reporter": "anonymous"
        }
    ],
    "3828761": [
        {
            "dateadded": "2026-04-22 16:02:08 UTC",
            "url": "http://kernalstress.st/arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 11:26:24 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828761/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828756": [
        {
            "dateadded": "2026-04-22 16:02:07 UTC",
            "url": "http://kernalstress.st/mips",
            "url_status": "offline",
            "last_online": "2026-04-27 11:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828756/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828757": [
        {
            "dateadded": "2026-04-22 16:02:07 UTC",
            "url": "http://kernalstress.st/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828757/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828758": [
        {
            "dateadded": "2026-04-22 16:02:07 UTC",
            "url": "http://kernalstress.st/arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 09:10:37 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828758/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828759": [
        {
            "dateadded": "2026-04-22 16:02:07 UTC",
            "url": "http://kernalstress.st/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-27 05:41:58 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "kernalstress-st",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828759/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828750": [
        {
            "dateadded": "2026-04-22 15:59:21 UTC",
            "url": "http://176.65.139.94/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828750/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828751": [
        {
            "dateadded": "2026-04-22 15:59:21 UTC",
            "url": "http://176.65.139.94/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828751/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828752": [
        {
            "dateadded": "2026-04-22 15:59:21 UTC",
            "url": "http://176.65.139.94/arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828752/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828753": [
        {
            "dateadded": "2026-04-22 15:59:21 UTC",
            "url": "http://176.65.139.94/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828753/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828754": [
        {
            "dateadded": "2026-04-22 15:59:21 UTC",
            "url": "http://176.65.139.94/mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828754/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828755": [
        {
            "dateadded": "2026-04-22 15:59:21 UTC",
            "url": "http://176.65.139.94/arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828755/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828749": [
        {
            "dateadded": "2026-04-22 15:59:20 UTC",
            "url": "http://176.65.139.94/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-94",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828749/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828748": [
        {
            "dateadded": "2026-04-22 15:59:08 UTC",
            "url": "https://717mupv.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828748/",
            "reporter": "anonymous"
        }
    ],
    "3828747": [
        {
            "dateadded": "2026-04-22 15:55:08 UTC",
            "url": "https://n0de6-node.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828747/",
            "reporter": "anonymous"
        }
    ],
    "3828746": [
        {
            "dateadded": "2026-04-22 15:50:21 UTC",
            "url": "http://113.229.88.231:46035/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828746/",
            "reporter": "geenensp"
        }
    ],
    "3828745": [
        {
            "dateadded": "2026-04-22 15:48:21 UTC",
            "url": "http://217.64.135.181:37899/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828745/",
            "reporter": "geenensp"
        }
    ],
    "3828744": [
        {
            "dateadded": "2026-04-22 15:46:15 UTC",
            "url": "http://60.211.56.208:58851/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828744/",
            "reporter": "geenensp"
        }
    ],
    "3828743": [
        {
            "dateadded": "2026-04-22 15:46:07 UTC",
            "url": "https://polatren.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828743/",
            "reporter": "anonymous"
        }
    ],
    "3828742": [
        {
            "dateadded": "2026-04-22 15:42:06 UTC",
            "url": "http://116.140.160.76:52416/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828742/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828741": [
        {
            "dateadded": "2026-04-22 15:39:19 UTC",
            "url": "http://182.112.234.30:46486/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:11:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828741/",
            "reporter": "geenensp"
        }
    ],
    "3828740": [
        {
            "dateadded": "2026-04-22 15:39:10 UTC",
            "url": "https://sernex1al.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828740/",
            "reporter": "anonymous"
        }
    ],
    "3828739": [
        {
            "dateadded": "2026-04-22 15:34:15 UTC",
            "url": "http://110.37.78.200:53731/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:48:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828739/",
            "reporter": "geenensp"
        }
    ],
    "3828738": [
        {
            "dateadded": "2026-04-22 15:34:09 UTC",
            "url": "https://coremount.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828738/",
            "reporter": "anonymous"
        }
    ],
    "3828737": [
        {
            "dateadded": "2026-04-22 15:29:08 UTC",
            "url": "https://co1o-grid.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828737/",
            "reporter": "anonymous"
        }
    ],
    "3828736": [
        {
            "dateadded": "2026-04-22 15:25:20 UTC",
            "url": "http://112.247.155.211:43595/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:09:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828736/",
            "reporter": "geenensp"
        }
    ],
    "3828735": [
        {
            "dateadded": "2026-04-22 15:24:09 UTC",
            "url": "https://solforge2ar.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828735/",
            "reporter": "anonymous"
        }
    ],
    "3828734": [
        {
            "dateadded": "2026-04-22 15:23:18 UTC",
            "url": "http://60.211.56.208:58851/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828734/",
            "reporter": "geenensp"
        }
    ],
    "3828733": [
        {
            "dateadded": "2026-04-22 15:22:06 UTC",
            "url": "http://123.13.85.134:35382/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828733/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828732": [
        {
            "dateadded": "2026-04-22 15:18:07 UTC",
            "url": "https://agentdel.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828732/",
            "reporter": "anonymous"
        }
    ],
    "3828731": [
        {
            "dateadded": "2026-04-22 15:11:07 UTC",
            "url": "https://primeambe.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828731/",
            "reporter": "anonymous"
        }
    ],
    "3828730": [
        {
            "dateadded": "2026-04-22 15:07:11 UTC",
            "url": "https://revlogi.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828730/",
            "reporter": "anonymous"
        }
    ],
    "3828729": [
        {
            "dateadded": "2026-04-22 15:02:28 UTC",
            "url": "http://112.247.155.211:43595/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828729/",
            "reporter": "geenensp"
        }
    ],
    "3828728": [
        {
            "dateadded": "2026-04-22 15:01:11 UTC",
            "url": "https://meta-1ce.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 15:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828728/",
            "reporter": "anonymous"
        }
    ],
    "3828727": [
        {
            "dateadded": "2026-04-22 14:58:18 UTC",
            "url": "http://115.53.201.217:51860/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:18:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828727/",
            "reporter": "geenensp"
        }
    ],
    "3828726": [
        {
            "dateadded": "2026-04-22 14:55:18 UTC",
            "url": "http://115.54.183.204:46031/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828726/",
            "reporter": "geenensp"
        }
    ],
    "3828725": [
        {
            "dateadded": "2026-04-22 14:55:10 UTC",
            "url": "https://rnoun3-mesh.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828725/",
            "reporter": "anonymous"
        }
    ],
    "3828724": [
        {
            "dateadded": "2026-04-22 14:50:10 UTC",
            "url": "https://4t0mi-core.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828724/",
            "reporter": "anonymous"
        }
    ],
    "3828723": [
        {
            "dateadded": "2026-04-22 14:49:18 UTC",
            "url": "http://120.28.162.208:33775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 18:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828723/",
            "reporter": "geenensp"
        }
    ],
    "3828722": [
        {
            "dateadded": "2026-04-22 14:45:16 UTC",
            "url": "https://trusbyt.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:45:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828722/",
            "reporter": "anonymous"
        }
    ],
    "3828721": [
        {
            "dateadded": "2026-04-22 14:39:20 UTC",
            "url": "http://123.183.196.87:57863/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:15:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828721/",
            "reporter": "geenensp"
        }
    ],
    "3828720": [
        {
            "dateadded": "2026-04-22 14:39:08 UTC",
            "url": "https://dynlith7os.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828720/",
            "reporter": "anonymous"
        }
    ],
    "3828719": [
        {
            "dateadded": "2026-04-22 14:37:07 UTC",
            "url": "http://105.224.12.254:38275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:04:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828719/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828718": [
        {
            "dateadded": "2026-04-22 14:35:17 UTC",
            "url": "http://116.138.223.143:40539/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828718/",
            "reporter": "geenensp"
        }
    ],
    "3828717": [
        {
            "dateadded": "2026-04-22 14:33:08 UTC",
            "url": "https://9rg153d.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828717/",
            "reporter": "anonymous"
        }
    ],
    "3828716": [
        {
            "dateadded": "2026-04-22 14:28:09 UTC",
            "url": "https://fre1ght-mark.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828716/",
            "reporter": "anonymous"
        }
    ],
    "3828715": [
        {
            "dateadded": "2026-04-22 14:22:07 UTC",
            "url": "https://sapdecode.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828715/",
            "reporter": "anonymous"
        }
    ],
    "3828714": [
        {
            "dateadded": "2026-04-22 14:19:14 UTC",
            "url": "http://115.58.135.129:54089/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828714/",
            "reporter": "geenensp"
        }
    ],
    "3828713": [
        {
            "dateadded": "2026-04-22 14:17:13 UTC",
            "url": "https://ifzyk85.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828713/",
            "reporter": "anonymous"
        }
    ],
    "3828712": [
        {
            "dateadded": "2026-04-22 14:12:10 UTC",
            "url": "http://72.29.46.195:43547/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828712/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828711": [
        {
            "dateadded": "2026-04-22 14:11:09 UTC",
            "url": "https://tensorextrac.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828711/",
            "reporter": "anonymous"
        }
    ],
    "3828710": [
        {
            "dateadded": "2026-04-22 14:08:10 UTC",
            "url": "http://182.119.5.213:46179/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:50:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828710/",
            "reporter": "geenensp"
        }
    ],
    "3828709": [
        {
            "dateadded": "2026-04-22 14:07:22 UTC",
            "url": "http://123.183.196.87:57863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:26:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828709/",
            "reporter": "geenensp"
        }
    ],
    "3828708": [
        {
            "dateadded": "2026-04-22 14:07:09 UTC",
            "url": "https://tzlajh.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828708/",
            "reporter": "anonymous"
        }
    ],
    "3828707": [
        {
            "dateadded": "2026-04-22 14:07:08 UTC",
            "url": "http://123.14.32.208:51903/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:20:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828707/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828706": [
        {
            "dateadded": "2026-04-22 14:05:21 UTC",
            "url": "http://140.237.36.79:60398/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828706/",
            "reporter": "geenensp"
        }
    ],
    "3828705": [
        {
            "dateadded": "2026-04-22 14:05:13 UTC",
            "url": "http://116.138.223.143:40539/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828705/",
            "reporter": "geenensp"
        }
    ],
    "3828704": [
        {
            "dateadded": "2026-04-22 14:04:16 UTC",
            "url": "http://182.119.5.213:46179/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:18:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828704/",
            "reporter": "geenensp"
        }
    ],
    "3828703": [
        {
            "dateadded": "2026-04-22 14:01:15 UTC",
            "url": "http://110.37.26.106:35272/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 15:03:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828703/",
            "reporter": "geenensp"
        }
    ],
    "3828702": [
        {
            "dateadded": "2026-04-22 14:01:09 UTC",
            "url": "https://brookprime.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 14:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828702/",
            "reporter": "anonymous"
        }
    ],
    "3828701": [
        {
            "dateadded": "2026-04-22 13:54:08 UTC",
            "url": "https://minor-mon.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828701/",
            "reporter": "anonymous"
        }
    ],
    "3828700": [
        {
            "dateadded": "2026-04-22 13:50:18 UTC",
            "url": "http://115.58.135.129:54089/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828700/",
            "reporter": "geenensp"
        }
    ],
    "3828699": [
        {
            "dateadded": "2026-04-22 13:50:13 UTC",
            "url": "https://zxvy.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828699/",
            "reporter": "anonymous"
        }
    ],
    "3828698": [
        {
            "dateadded": "2026-04-22 13:47:14 UTC",
            "url": "http://27.11.248.133:40811/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828698/",
            "reporter": "geenensp"
        }
    ],
    "3828697": [
        {
            "dateadded": "2026-04-22 13:44:09 UTC",
            "url": "https://split-pulse.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828697/",
            "reporter": "anonymous"
        }
    ],
    "3828696": [
        {
            "dateadded": "2026-04-22 13:38:09 UTC",
            "url": "https://xg6xtld1.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828696/",
            "reporter": "anonymous"
        }
    ],
    "3828695": [
        {
            "dateadded": "2026-04-22 13:33:10 UTC",
            "url": "https://dmnoyvf.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828695/",
            "reporter": "anonymous"
        }
    ],
    "3828694": [
        {
            "dateadded": "2026-04-22 13:32:19 UTC",
            "url": "http://182.117.79.201:56200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828694/",
            "reporter": "geenensp"
        }
    ],
    "3828693": [
        {
            "dateadded": "2026-04-22 13:27:18 UTC",
            "url": "http://171.37.151.8:41472/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:16:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828693/",
            "reporter": "geenensp"
        }
    ],
    "3828692": [
        {
            "dateadded": "2026-04-22 13:27:07 UTC",
            "url": "https://activeserver.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828692/",
            "reporter": "anonymous"
        }
    ],
    "3828691": [
        {
            "dateadded": "2026-04-22 13:22:09 UTC",
            "url": "https://1ayo-port.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828691/",
            "reporter": "anonymous"
        }
    ],
    "3828690": [
        {
            "dateadded": "2026-04-22 13:16:09 UTC",
            "url": "https://tri-markis.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828690/",
            "reporter": "anonymous"
        }
    ],
    "3828689": [
        {
            "dateadded": "2026-04-22 13:12:20 UTC",
            "url": "http://124.94.171.177:55366/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828689/",
            "reporter": "geenensp"
        }
    ],
    "3828688": [
        {
            "dateadded": "2026-04-22 13:11:07 UTC",
            "url": "https://gfpb.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828688/",
            "reporter": "anonymous"
        }
    ],
    "3828687": [
        {
            "dateadded": "2026-04-22 13:05:10 UTC",
            "url": "https://snowsketc.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828687/",
            "reporter": "anonymous"
        }
    ],
    "3828686": [
        {
            "dateadded": "2026-04-22 13:00:08 UTC",
            "url": "https://sort5-logic.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 13:00:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828686/",
            "reporter": "anonymous"
        }
    ],
    "3828685": [
        {
            "dateadded": "2026-04-22 12:59:09 UTC",
            "url": "http://125.41.5.28:43185/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828685/",
            "reporter": "geenensp"
        }
    ],
    "3828684": [
        {
            "dateadded": "2026-04-22 12:56:19 UTC",
            "url": "http://125.41.5.28:43185/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:56:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828684/",
            "reporter": "geenensp"
        }
    ],
    "3828683": [
        {
            "dateadded": "2026-04-22 12:55:12 UTC",
            "url": "http://222.141.24.255:43912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828683/",
            "reporter": "geenensp"
        }
    ],
    "3828682": [
        {
            "dateadded": "2026-04-22 12:54:11 UTC",
            "url": "https://warmprairie.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828682/",
            "reporter": "anonymous"
        }
    ],
    "3828681": [
        {
            "dateadded": "2026-04-22 12:52:18 UTC",
            "url": "http://124.94.171.177:55366/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828681/",
            "reporter": "geenensp"
        }
    ],
    "3828680": [
        {
            "dateadded": "2026-04-22 12:48:12 UTC",
            "url": "https://sc4nn-point.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828680/",
            "reporter": "anonymous"
        }
    ],
    "3828679": [
        {
            "dateadded": "2026-04-22 12:47:19 UTC",
            "url": "http://36.70.76.126:52201/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828679/",
            "reporter": "geenensp"
        }
    ],
    "3828678": [
        {
            "dateadded": "2026-04-22 12:44:17 UTC",
            "url": "http://175.107.16.92:33109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:52:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828678/",
            "reporter": "geenensp"
        }
    ],
    "3828677": [
        {
            "dateadded": "2026-04-22 12:43:12 UTC",
            "url": "https://quotaraven.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828677/",
            "reporter": "anonymous"
        }
    ],
    "3828676": [
        {
            "dateadded": "2026-04-22 12:42:17 UTC",
            "url": "http://203.101.181.9:46434/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828676/",
            "reporter": "geenensp"
        }
    ],
    "3828675": [
        {
            "dateadded": "2026-04-22 12:40:35 UTC",
            "url": "http://160.177.21.10:50082/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:40:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828675/",
            "reporter": "geenensp"
        }
    ],
    "3828674": [
        {
            "dateadded": "2026-04-22 12:38:07 UTC",
            "url": "https://ays2jm.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828674/",
            "reporter": "anonymous"
        }
    ],
    "3828673": [
        {
            "dateadded": "2026-04-22 12:32:11 UTC",
            "url": "https://3jms0.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828673/",
            "reporter": "anonymous"
        }
    ],
    "3828672": [
        {
            "dateadded": "2026-04-22 12:27:15 UTC",
            "url": "https://inde-fer.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828672/",
            "reporter": "anonymous"
        }
    ],
    "3828671": [
        {
            "dateadded": "2026-04-22 12:23:22 UTC",
            "url": "http://115.55.49.4:53522/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:02:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828671/",
            "reporter": "geenensp"
        }
    ],
    "3828670": [
        {
            "dateadded": "2026-04-22 12:22:19 UTC",
            "url": "http://46.99.251.161:3093/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828670/",
            "reporter": "geenensp"
        }
    ],
    "3828669": [
        {
            "dateadded": "2026-04-22 12:21:14 UTC",
            "url": "https://corhard.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828669/",
            "reporter": "anonymous"
        }
    ],
    "3828668": [
        {
            "dateadded": "2026-04-22 12:20:16 UTC",
            "url": "http://111.220.58.125:39444/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828668/",
            "reporter": "geenensp"
        }
    ],
    "3828667": [
        {
            "dateadded": "2026-04-22 12:16:18 UTC",
            "url": "http://123.129.131.83:54709/i",
            "url_status": "offline",
            "last_online": "2026-04-23 04:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828667/",
            "reporter": "geenensp"
        }
    ],
    "3828666": [
        {
            "dateadded": "2026-04-22 12:16:08 UTC",
            "url": "https://zencrest8et.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828666/",
            "reporter": "anonymous"
        }
    ],
    "3828665": [
        {
            "dateadded": "2026-04-22 12:12:20 UTC",
            "url": "http://124.235.249.74:59110/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828665/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828664": [
        {
            "dateadded": "2026-04-22 12:11:20 UTC",
            "url": "http://203.101.181.9:46434/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828664/",
            "reporter": "geenensp"
        }
    ],
    "3828663": [
        {
            "dateadded": "2026-04-22 12:10:10 UTC",
            "url": "https://skuj.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828663/",
            "reporter": "anonymous"
        }
    ],
    "3828662": [
        {
            "dateadded": "2026-04-22 12:04:10 UTC",
            "url": "https://wpckch.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828662/",
            "reporter": "anonymous"
        }
    ],
    "3828661": [
        {
            "dateadded": "2026-04-22 12:02:07 UTC",
            "url": "http://42.87.229.177:41488/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828661/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828660": [
        {
            "dateadded": "2026-04-22 12:00:17 UTC",
            "url": "http://61.52.60.224:56777/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:54:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828660/",
            "reporter": "geenensp"
        }
    ],
    "3828659": [
        {
            "dateadded": "2026-04-22 12:00:12 UTC",
            "url": "https://loc46-cache.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 12:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828659/",
            "reporter": "anonymous"
        }
    ],
    "3828658": [
        {
            "dateadded": "2026-04-22 11:59:13 UTC",
            "url": "http://182.120.99.246:51379/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:48:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828658/",
            "reporter": "geenensp"
        }
    ],
    "3828657": [
        {
            "dateadded": "2026-04-22 11:57:19 UTC",
            "url": "http://39.73.164.149:34367/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:52:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828657/",
            "reporter": "geenensp"
        }
    ],
    "3828656": [
        {
            "dateadded": "2026-04-22 11:54:13 UTC",
            "url": "https://ke3srk.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828656/",
            "reporter": "anonymous"
        }
    ],
    "3828655": [
        {
            "dateadded": "2026-04-22 11:53:21 UTC",
            "url": "http://39.73.164.149:34367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828655/",
            "reporter": "geenensp"
        }
    ],
    "3828654": [
        {
            "dateadded": "2026-04-22 11:49:10 UTC",
            "url": "https://neo-s1at.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828654/",
            "reporter": "anonymous"
        }
    ],
    "3828653": [
        {
            "dateadded": "2026-04-22 11:43:07 UTC",
            "url": "https://6tn0i.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828653/",
            "reporter": "anonymous"
        }
    ],
    "3828652": [
        {
            "dateadded": "2026-04-22 11:38:09 UTC",
            "url": "https://github.com/mudtidai1/adrmpt/releases/download/Chi%CC%81nhphu%CC%8955/Chinhph.55.apk",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "apk ",
                "vietnam"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828652/",
            "reporter": "anhchangmutrang"
        }
    ],
    "3828651": [
        {
            "dateadded": "2026-04-22 11:36:08 UTC",
            "url": "https://velvepastu.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828651/",
            "reporter": "anonymous"
        }
    ],
    "3828650": [
        {
            "dateadded": "2026-04-22 11:32:11 UTC",
            "url": "https://majorrapid.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828650/",
            "reporter": "anonymous"
        }
    ],
    "3828649": [
        {
            "dateadded": "2026-04-22 11:26:22 UTC",
            "url": "http://115.55.49.4:53522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828649/",
            "reporter": "geenensp"
        }
    ],
    "3828648": [
        {
            "dateadded": "2026-04-22 11:26:11 UTC",
            "url": "https://echocanopy.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828648/",
            "reporter": "anonymous"
        }
    ],
    "3828647": [
        {
            "dateadded": "2026-04-22 11:24:28 UTC",
            "url": "http://110.37.52.120:48341/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:24:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828647/",
            "reporter": "geenensp"
        }
    ],
    "3828646": [
        {
            "dateadded": "2026-04-22 11:21:28 UTC",
            "url": "http://110.37.52.120:48341/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:21:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828646/",
            "reporter": "geenensp"
        }
    ],
    "3828645": [
        {
            "dateadded": "2026-04-22 11:20:09 UTC",
            "url": "https://pyj8st.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828645/",
            "reporter": "anonymous"
        }
    ],
    "3828644": [
        {
            "dateadded": "2026-04-22 11:17:23 UTC",
            "url": "http://27.215.80.206:50826/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828644/",
            "reporter": "geenensp"
        }
    ],
    "3828643": [
        {
            "dateadded": "2026-04-22 11:14:15 UTC",
            "url": "http://27.207.216.119:55802/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828643/",
            "reporter": "geenensp"
        }
    ],
    "3828642": [
        {
            "dateadded": "2026-04-22 11:14:12 UTC",
            "url": "https://dynlineal8.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828642/",
            "reporter": "anonymous"
        }
    ],
    "3828640": [
        {
            "dateadded": "2026-04-22 11:13:08 UTC",
            "url": "http://192.3.176.245/chilinaskr.xtp",
            "url_status": "offline",
            "last_online": "2026-04-22 11:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828640/",
            "reporter": "abuse_ch"
        }
    ],
    "3828641": [
        {
            "dateadded": "2026-04-22 11:13:08 UTC",
            "url": "http://192.3.176.245/JpHvuDVLAxTn92.bin",
            "url_status": "offline",
            "last_online": "2026-04-22 11:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828641/",
            "reporter": "abuse_ch"
        }
    ],
    "3828639": [
        {
            "dateadded": "2026-04-22 11:09:14 UTC",
            "url": "https://6xsj.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828639/",
            "reporter": "anonymous"
        }
    ],
    "3828638": [
        {
            "dateadded": "2026-04-22 11:07:08 UTC",
            "url": "http://42.87.229.177:41488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:03:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828638/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828637": [
        {
            "dateadded": "2026-04-22 11:04:13 UTC",
            "url": "https://rl3xewp1.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 11:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828637/",
            "reporter": "anonymous"
        }
    ],
    "3828636": [
        {
            "dateadded": "2026-04-22 11:02:08 UTC",
            "url": "http://182.121.229.22:34588/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:23:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828636/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828635": [
        {
            "dateadded": "2026-04-22 10:58:07 UTC",
            "url": "https://haul-sheet.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828635/",
            "reporter": "anonymous"
        }
    ],
    "3828634": [
        {
            "dateadded": "2026-04-22 10:57:29 UTC",
            "url": "http://125.113.148.179:39635/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828634/",
            "reporter": "geenensp"
        }
    ],
    "3828633": [
        {
            "dateadded": "2026-04-22 10:56:21 UTC",
            "url": "http://42.227.176.118:47589/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828633/",
            "reporter": "geenensp"
        }
    ],
    "3828632": [
        {
            "dateadded": "2026-04-22 10:55:16 UTC",
            "url": "https://hillrain.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828632/",
            "reporter": "anonymous"
        }
    ],
    "3828631": [
        {
            "dateadded": "2026-04-22 10:52:22 UTC",
            "url": "http://27.215.80.206:50826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:11:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828631/",
            "reporter": "geenensp"
        }
    ],
    "3828630": [
        {
            "dateadded": "2026-04-22 10:51:14 UTC",
            "url": "https://genom-node.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828630/",
            "reporter": "anonymous"
        }
    ],
    "3828629": [
        {
            "dateadded": "2026-04-22 10:47:07 UTC",
            "url": "http://72.255.30.244:45296/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828629/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828628": [
        {
            "dateadded": "2026-04-22 10:43:13 UTC",
            "url": "https://lopamp4.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828628/",
            "reporter": "anonymous"
        }
    ],
    "3828627": [
        {
            "dateadded": "2026-04-22 10:37:14 UTC",
            "url": "http://123.129.131.83:54709/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828627/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828624": [
        {
            "dateadded": "2026-04-22 10:37:08 UTC",
            "url": "http://182.121.229.22:34588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:31:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828624/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828625": [
        {
            "dateadded": "2026-04-22 10:37:08 UTC",
            "url": "http://183.188.116.140:48861/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828625/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828626": [
        {
            "dateadded": "2026-04-22 10:37:08 UTC",
            "url": "http://183.188.116.140:48861/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:02:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828626/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828623": [
        {
            "dateadded": "2026-04-22 10:34:11 UTC",
            "url": "https://tarra4.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828623/",
            "reporter": "anonymous"
        }
    ],
    "3828622": [
        {
            "dateadded": "2026-04-22 10:28:17 UTC",
            "url": "http://42.230.45.27:50023/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:03:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828622/",
            "reporter": "geenensp"
        }
    ],
    "3828621": [
        {
            "dateadded": "2026-04-22 10:28:08 UTC",
            "url": "https://main-point6.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828621/",
            "reporter": "anonymous"
        }
    ],
    "3828620": [
        {
            "dateadded": "2026-04-22 10:22:10 UTC",
            "url": "https://quickmove5.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828620/",
            "reporter": "anonymous"
        }
    ],
    "3828619": [
        {
            "dateadded": "2026-04-22 10:22:07 UTC",
            "url": "http://72.255.30.244:45296/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828619/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828618": [
        {
            "dateadded": "2026-04-22 10:21:12 UTC",
            "url": "http://182.126.246.196:39727/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:57:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828618/",
            "reporter": "geenensp"
        }
    ],
    "3828617": [
        {
            "dateadded": "2026-04-22 10:19:20 UTC",
            "url": "http://105.187.36.47:51751/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:58:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828617/",
            "reporter": "geenensp"
        }
    ],
    "3828616": [
        {
            "dateadded": "2026-04-22 10:17:10 UTC",
            "url": "https://empty-space4.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828616/",
            "reporter": "anonymous"
        }
    ],
    "3828614": [
        {
            "dateadded": "2026-04-22 10:12:20 UTC",
            "url": "http://110.38.199.36:40012/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:42:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828614/",
            "reporter": "geenensp"
        }
    ],
    "3828615": [
        {
            "dateadded": "2026-04-22 10:12:20 UTC",
            "url": "http://115.50.229.245:36416/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:24:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828615/",
            "reporter": "geenensp"
        }
    ],
    "3828613": [
        {
            "dateadded": "2026-04-22 10:11:15 UTC",
            "url": "http://115.50.229.245:36416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828613/",
            "reporter": "geenensp"
        }
    ],
    "3828612": [
        {
            "dateadded": "2026-04-22 10:11:11 UTC",
            "url": "https://fullbox3.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828612/",
            "reporter": "anonymous"
        }
    ],
    "3828611": [
        {
            "dateadded": "2026-04-22 10:10:20 UTC",
            "url": "http://39.74.33.31:34402/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828611/",
            "reporter": "geenensp"
        }
    ],
    "3828610": [
        {
            "dateadded": "2026-04-22 10:06:12 UTC",
            "url": "http://42.230.45.27:50023/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:11:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828610/",
            "reporter": "geenensp"
        }
    ],
    "3828609": [
        {
            "dateadded": "2026-04-22 10:05:10 UTC",
            "url": "https://lightp-ack2.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828609/",
            "reporter": "anonymous"
        }
    ],
    "3828608": [
        {
            "dateadded": "2026-04-22 10:02:18 UTC",
            "url": "http://42.227.176.118:47589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828608/",
            "reporter": "geenensp"
        }
    ],
    "3828607": [
        {
            "dateadded": "2026-04-22 10:00:17 UTC",
            "url": "https://heavy-load1.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 10:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828607/",
            "reporter": "anonymous"
        }
    ],
    "3828606": [
        {
            "dateadded": "2026-04-22 09:56:08 UTC",
            "url": "http://115.55.234.46:44742/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828606/",
            "reporter": "geenensp"
        }
    ],
    "3828605": [
        {
            "dateadded": "2026-04-22 09:54:18 UTC",
            "url": "http://60.211.45.136:59876/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 09:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828605/",
            "reporter": "geenensp"
        }
    ],
    "3828604": [
        {
            "dateadded": "2026-04-22 09:54:12 UTC",
            "url": "https://lightmoon6.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828604/",
            "reporter": "anonymous"
        }
    ],
    "3828598": [
        {
            "dateadded": "2026-04-22 09:50:08 UTC",
            "url": "http://208.84.100.209/t",
            "url_status": "online",
            "last_online": "2026-04-27 14:22:31 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828598/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828599": [
        {
            "dateadded": "2026-04-22 09:50:08 UTC",
            "url": "http://208.84.100.209/tp",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:42 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828599/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828600": [
        {
            "dateadded": "2026-04-22 09:50:08 UTC",
            "url": "http://208.84.100.209/w.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:41 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828600/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828601": [
        {
            "dateadded": "2026-04-22 09:50:08 UTC",
            "url": "http://208.84.100.209/ssh.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:45 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828601/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828602": [
        {
            "dateadded": "2026-04-22 09:50:08 UTC",
            "url": "http://208.84.100.209/tftp.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828602/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828603": [
        {
            "dateadded": "2026-04-22 09:50:08 UTC",
            "url": "http://208.84.100.209/p.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:33 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828603/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828597": [
        {
            "dateadded": "2026-04-22 09:50:07 UTC",
            "url": "http://208.84.100.209/sep",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828597/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828596": [
        {
            "dateadded": "2026-04-22 09:49:13 UTC",
            "url": "http://61.52.60.224:56777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828596/",
            "reporter": "geenensp"
        }
    ],
    "3828595": [
        {
            "dateadded": "2026-04-22 09:49:11 UTC",
            "url": "https://warm-fi-re5.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828595/",
            "reporter": "anonymous"
        }
    ],
    "3828594": [
        {
            "dateadded": "2026-04-22 09:48:24 UTC",
            "url": "http://123.12.172.238:49871/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828594/",
            "reporter": "geenensp"
        }
    ],
    "3828593": [
        {
            "dateadded": "2026-04-22 09:46:24 UTC",
            "url": "http://182.126.246.196:39727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828593/",
            "reporter": "geenensp"
        }
    ],
    "3828589": [
        {
            "dateadded": "2026-04-22 09:45:23 UTC",
            "url": "http://208.84.100.209/bins/mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828589/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828590": [
        {
            "dateadded": "2026-04-22 09:45:23 UTC",
            "url": "http://208.84.100.209/dvr.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:52 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828590/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828591": [
        {
            "dateadded": "2026-04-22 09:45:23 UTC",
            "url": "http://208.84.100.209/curl.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:43 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828591/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828592": [
        {
            "dateadded": "2026-04-22 09:45:23 UTC",
            "url": "http://208.84.100.209/d.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:24 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828592/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828588": [
        {
            "dateadded": "2026-04-22 09:45:22 UTC",
            "url": "http://208.84.100.209/c.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:37 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828588/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828587": [
        {
            "dateadded": "2026-04-22 09:45:21 UTC",
            "url": "http://208.84.100.209/ftpget.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828587/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828583": [
        {
            "dateadded": "2026-04-22 09:45:07 UTC",
            "url": "http://208.84.100.209/dvr",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828583/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828584": [
        {
            "dateadded": "2026-04-22 09:45:07 UTC",
            "url": "http://208.84.100.209/g",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828584/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828585": [
        {
            "dateadded": "2026-04-22 09:45:07 UTC",
            "url": "http://208.84.100.209/c",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:40 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828585/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828586": [
        {
            "dateadded": "2026-04-22 09:45:07 UTC",
            "url": "http://208.84.100.209/cn",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828586/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828582": [
        {
            "dateadded": "2026-04-22 09:44:07 UTC",
            "url": "http://119.117.177.135:50524/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828582/",
            "reporter": "geenensp"
        }
    ],
    "3828580": [
        {
            "dateadded": "2026-04-22 09:43:18 UTC",
            "url": "http://208.84.100.209/bins/w.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828580/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828581": [
        {
            "dateadded": "2026-04-22 09:43:18 UTC",
            "url": "http://110.38.199.36:40012/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:00:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828581/",
            "reporter": "geenensp"
        }
    ],
    "3828579": [
        {
            "dateadded": "2026-04-22 09:43:10 UTC",
            "url": "https://cold-snow4.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828579/",
            "reporter": "anonymous"
        }
    ],
    "3828575": [
        {
            "dateadded": "2026-04-22 09:42:23 UTC",
            "url": "http://208.84.100.209/bins/sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:58 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828575/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828576": [
        {
            "dateadded": "2026-04-22 09:42:23 UTC",
            "url": "http://208.84.100.209/bins/m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828576/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828577": [
        {
            "dateadded": "2026-04-22 09:42:23 UTC",
            "url": "http://208.84.100.209/bins/i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:49 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828577/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828578": [
        {
            "dateadded": "2026-04-22 09:42:23 UTC",
            "url": "http://208.84.100.209/bins/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828578/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828574": [
        {
            "dateadded": "2026-04-22 09:42:18 UTC",
            "url": "http://208.84.100.209/bins/c.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:42 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828574/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828569": [
        {
            "dateadded": "2026-04-22 09:42:17 UTC",
            "url": "http://208.84.100.209/bins/wget.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828569/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828570": [
        {
            "dateadded": "2026-04-22 09:42:17 UTC",
            "url": "http://208.84.100.209/bins/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828570/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828571": [
        {
            "dateadded": "2026-04-22 09:42:17 UTC",
            "url": "http://208.84.100.209/bins/ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828571/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828572": [
        {
            "dateadded": "2026-04-22 09:42:17 UTC",
            "url": "http://208.84.100.209/bins/x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:29 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828572/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828573": [
        {
            "dateadded": "2026-04-22 09:42:17 UTC",
            "url": "http://208.84.100.209/bins/mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828573/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828566": [
        {
            "dateadded": "2026-04-22 09:41:07 UTC",
            "url": "http://208.84.100.209/bins/arm",
            "url_status": "online",
            "last_online": "2026-04-27 14:22:38 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828566/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828567": [
        {
            "dateadded": "2026-04-22 09:41:07 UTC",
            "url": "http://208.84.100.209/bins/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:33 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828567/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828568": [
        {
            "dateadded": "2026-04-22 09:41:07 UTC",
            "url": "http://208.84.100.209/bins/amd64",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828568/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828565": [
        {
            "dateadded": "2026-04-22 09:41:05 UTC",
            "url": "http://208.84.100.209/bee",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:52 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828565/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828564": [
        {
            "dateadded": "2026-04-22 09:40:15 UTC",
            "url": "http://208.84.100.209/amd64",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:55 UTC",
            "threat": "malware_download",
            "tags": [
                "208-84-100-209",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828564/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828563": [
        {
            "dateadded": "2026-04-22 09:39:12 UTC",
            "url": "https://clearsky3.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828563/",
            "reporter": "anonymous"
        }
    ],
    "3828562": [
        {
            "dateadded": "2026-04-22 09:38:12 UTC",
            "url": "http://115.57.205.52:48665/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828562/",
            "reporter": "geenensp"
        }
    ],
    "3828561": [
        {
            "dateadded": "2026-04-22 09:32:11 UTC",
            "url": "https://rainy-ni-ght2.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828561/",
            "reporter": "anonymous"
        }
    ],
    "3828560": [
        {
            "dateadded": "2026-04-22 09:27:09 UTC",
            "url": "https://sunny-day1.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828560/",
            "reporter": "anonymous"
        }
    ],
    "3828559": [
        {
            "dateadded": "2026-04-22 09:19:26 UTC",
            "url": "http://123.12.172.238:49871/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:10:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828559/",
            "reporter": "geenensp"
        }
    ],
    "3828558": [
        {
            "dateadded": "2026-04-22 09:19:07 UTC",
            "url": "https://best-look6.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828558/",
            "reporter": "anonymous"
        }
    ],
    "3828557": [
        {
            "dateadded": "2026-04-22 09:14:06 UTC",
            "url": "https://new-style5.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828557/",
            "reporter": "anonymous"
        }
    ],
    "3828556": [
        {
            "dateadded": "2026-04-22 09:10:21 UTC",
            "url": "http://182.113.41.59:54008/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:24:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828556/",
            "reporter": "geenensp"
        }
    ],
    "3828555": [
        {
            "dateadded": "2026-04-22 09:07:12 UTC",
            "url": "http://115.57.205.52:48665/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828555/",
            "reporter": "geenensp"
        }
    ],
    "3828554": [
        {
            "dateadded": "2026-04-22 09:07:09 UTC",
            "url": "https://warm-co-at4.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828554/",
            "reporter": "anonymous"
        }
    ],
    "3828553": [
        {
            "dateadded": "2026-04-22 09:03:20 UTC",
            "url": "http://115.56.159.73:48034/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828553/",
            "reporter": "geenensp"
        }
    ],
    "3828552": [
        {
            "dateadded": "2026-04-22 09:03:13 UTC",
            "url": "https://long-belt3.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 09:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828552/",
            "reporter": "anonymous"
        }
    ],
    "3828551": [
        {
            "dateadded": "2026-04-22 09:02:12 UTC",
            "url": "http://42.231.93.254:45476/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:56:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828551/",
            "reporter": "geenensp"
        }
    ],
    "3828548": [
        {
            "dateadded": "2026-04-22 09:00:13 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-23 10:47:49 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828548/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828549": [
        {
            "dateadded": "2026-04-22 09:00:13 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.arm5",
            "url_status": "offline",
            "last_online": "2026-04-23 05:44:18 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828549/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828550": [
        {
            "dateadded": "2026-04-22 09:00:13 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-23 06:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828550/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828536": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.mips",
            "url_status": "offline",
            "last_online": "2026-04-23 05:48:34 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828536/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828537": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.x86",
            "url_status": "offline",
            "last_online": "2026-04-23 10:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828537/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828538": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-23 06:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828538/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828539": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.arm",
            "url_status": "offline",
            "last_online": "2026-04-23 06:26:47 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828539/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828540": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.arm6",
            "url_status": "offline",
            "last_online": "2026-04-23 11:07:50 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828540/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828541": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 06:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828541/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828542": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/debug",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:31 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828542/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828543": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.spc",
            "url_status": "offline",
            "last_online": "2026-04-23 05:52:27 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828543/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828544": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.i686",
            "url_status": "offline",
            "last_online": "2026-04-23 11:05:55 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828544/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828545": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 06:50:44 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828545/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828546": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 05:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828546/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828547": [
        {
            "dateadded": "2026-04-22 09:00:12 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.arc",
            "url_status": "offline",
            "last_online": "2026-04-23 05:17:40 UTC",
            "threat": "malware_download",
            "tags": [
                "144-91-86-92",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828547/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828535": [
        {
            "dateadded": "2026-04-22 08:57:25 UTC",
            "url": "http://125.41.220.17:52150/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:58:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828535/",
            "reporter": "geenensp"
        }
    ],
    "3828534": [
        {
            "dateadded": "2026-04-22 08:57:13 UTC",
            "url": "https://white-shirt2.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828534/",
            "reporter": "anonymous"
        }
    ],
    "3828533": [
        {
            "dateadded": "2026-04-22 08:54:16 UTC",
            "url": "http://125.113.148.179:39635/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828533/",
            "reporter": "geenensp"
        }
    ],
    "3828532": [
        {
            "dateadded": "2026-04-22 08:54:10 UTC",
            "url": "http://38.76.199.154:8888/pro_stager.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "38-76-199-154-8888",
                "base64-loader",
                "meterpreter",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828532/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828529": [
        {
            "dateadded": "2026-04-22 08:54:09 UTC",
            "url": "http://38.76.199.154:8888/pro_payload.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "38-76-199-154-8888",
                "meterpreter",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828529/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828530": [
        {
            "dateadded": "2026-04-22 08:54:09 UTC",
            "url": "http://38.76.199.154:8888/payload_exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:29 UTC",
            "threat": "malware_download",
            "tags": [
                "38-76-199-154-8888",
                "meterpreter",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828530/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828531": [
        {
            "dateadded": "2026-04-22 08:54:09 UTC",
            "url": "http://38.76.199.154:8888/payload.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "38-76-199-154-8888",
                "meterpreter",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828531/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828528": [
        {
            "dateadded": "2026-04-22 08:54:08 UTC",
            "url": "http://38.76.199.154:8888/payload.elf",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:20 UTC",
            "threat": "malware_download",
            "tags": [
                "38-76-199-154-8888",
                "ConnectBack",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828528/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828527": [
        {
            "dateadded": "2026-04-22 08:51:14 UTC",
            "url": "https://black-hat1.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828527/",
            "reporter": "anonymous"
        }
    ],
    "3828526": [
        {
            "dateadded": "2026-04-22 08:50:21 UTC",
            "url": "http://45.135.194.4:8080/c2agent",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828526/",
            "reporter": "adliwahid"
        }
    ],
    "3828523": [
        {
            "dateadded": "2026-04-22 08:50:13 UTC",
            "url": "http://54.36.117.71/bot_mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828523/",
            "reporter": "adliwahid"
        }
    ],
    "3828524": [
        {
            "dateadded": "2026-04-22 08:50:13 UTC",
            "url": "http://54.36.117.71/linux_bot.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828524/",
            "reporter": "adliwahid"
        }
    ],
    "3828525": [
        {
            "dateadded": "2026-04-22 08:50:13 UTC",
            "url": "http://54.36.117.71/toxnet.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828525/",
            "reporter": "adliwahid"
        }
    ],
    "3828522": [
        {
            "dateadded": "2026-04-22 08:50:11 UTC",
            "url": "http://54.36.117.71/kaf.86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828522/",
            "reporter": "adliwahid"
        }
    ],
    "3828519": [
        {
            "dateadded": "2026-04-22 08:50:10 UTC",
            "url": "http://54.36.117.71/bot_linux_x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828519/",
            "reporter": "adliwahid"
        }
    ],
    "3828520": [
        {
            "dateadded": "2026-04-22 08:50:10 UTC",
            "url": "http://54.36.117.71/kaf.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828520/",
            "reporter": "adliwahid"
        }
    ],
    "3828521": [
        {
            "dateadded": "2026-04-22 08:50:10 UTC",
            "url": "http://54.36.117.71/kaf.64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828521/",
            "reporter": "adliwahid"
        }
    ],
    "3828517": [
        {
            "dateadded": "2026-04-22 08:50:08 UTC",
            "url": "http://144.91.86.92/luxzzxzzx/luxzz.arm7",
            "url_status": "offline",
            "last_online": "2026-04-23 10:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828517/",
            "reporter": "adliwahid"
        }
    ],
    "3828518": [
        {
            "dateadded": "2026-04-22 08:50:08 UTC",
            "url": "http://208.84.100.209/wget.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828518/",
            "reporter": "adliwahid"
        }
    ],
    "3828516": [
        {
            "dateadded": "2026-04-22 08:50:07 UTC",
            "url": "http://77.68.99.77/Vision.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828516/",
            "reporter": "adliwahid"
        }
    ],
    "3828515": [
        {
            "dateadded": "2026-04-22 08:50:06 UTC",
            "url": "http://2.26.84.151:8080/bot.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828515/",
            "reporter": "adliwahid"
        }
    ],
    "3828514": [
        {
            "dateadded": "2026-04-22 08:46:09 UTC",
            "url": "https://purewater6.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828514/",
            "reporter": "anonymous"
        }
    ],
    "3828513": [
        {
            "dateadded": "2026-04-22 08:42:26 UTC",
            "url": "http://42.6.65.240:60301/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:18:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828513/",
            "reporter": "geenensp"
        }
    ],
    "3828512": [
        {
            "dateadded": "2026-04-22 08:42:13 UTC",
            "url": "https://cool-mi-lk5.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828512/",
            "reporter": "anonymous"
        }
    ],
    "3828510": [
        {
            "dateadded": "2026-04-22 08:42:08 UTC",
            "url": "http://144.31.236.60/2.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "ClickFix",
                "MarkGramStealer",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828510/",
            "reporter": "abuse_ch"
        }
    ],
    "3828511": [
        {
            "dateadded": "2026-04-22 08:42:08 UTC",
            "url": "http://144.31.236.60/1.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "ClickFix",
                "MarkGramStealer",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828511/",
            "reporter": "abuse_ch"
        }
    ],
    "3828509": [
        {
            "dateadded": "2026-04-22 08:39:08 UTC",
            "url": "https://fresh-tea4.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828509/",
            "reporter": "anonymous"
        }
    ],
    "3828508": [
        {
            "dateadded": "2026-04-22 08:38:08 UTC",
            "url": "http://144.31.236.60/dl/putty.msi",
            "url_status": "offline",
            "last_online": "2026-04-22 08:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "msi",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828508/",
            "reporter": "abuse_ch"
        }
    ],
    "3828507": [
        {
            "dateadded": "2026-04-22 08:38:06 UTC",
            "url": "http://144.31.236.60/dl/small.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "bat",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828507/",
            "reporter": "abuse_ch"
        }
    ],
    "3828506": [
        {
            "dateadded": "2026-04-22 08:37:23 UTC",
            "url": "http://118.107.44.190:8080/2.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:36 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-190-8080",
                "opendir",
                "RustDesk",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828506/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828504": [
        {
            "dateadded": "2026-04-22 08:37:19 UTC",
            "url": "http://118.107.44.190:8080/Isass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:20 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-190-8080",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828504/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828505": [
        {
            "dateadded": "2026-04-22 08:37:19 UTC",
            "url": "http://196.189.111.43:56567/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828505/",
            "reporter": "geenensp"
        }
    ],
    "3828503": [
        {
            "dateadded": "2026-04-22 08:37:14 UTC",
            "url": "http://118.107.44.190:8080/1.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-190-8080",
                "opendir",
                "RustDesk",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828503/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828500": [
        {
            "dateadded": "2026-04-22 08:36:17 UTC",
            "url": "http://118.107.44.213:8080/Isass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-213-8080",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828500/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828501": [
        {
            "dateadded": "2026-04-22 08:36:17 UTC",
            "url": "http://118.107.44.213:8080/1.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-213-8080",
                "opendir",
                "RustDesk",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828501/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828502": [
        {
            "dateadded": "2026-04-22 08:36:17 UTC",
            "url": "http://118.107.44.213:8080/2.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-213-8080",
                "opendir",
                "RustDesk",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828502/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828499": [
        {
            "dateadded": "2026-04-22 08:35:22 UTC",
            "url": "http://222.127.68.197:38431/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 21:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828499/",
            "reporter": "geenensp"
        }
    ],
    "3828498": [
        {
            "dateadded": "2026-04-22 08:34:23 UTC",
            "url": "http://118.107.44.253:8080/1.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:49 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-253-8080",
                "opendir",
                "RustDesk",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828498/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828497": [
        {
            "dateadded": "2026-04-22 08:34:18 UTC",
            "url": "http://118.107.44.253:8080/Isass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-253-8080",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828497/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828496": [
        {
            "dateadded": "2026-04-22 08:34:15 UTC",
            "url": "http://118.107.44.253:8080/2.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:19 UTC",
            "threat": "malware_download",
            "tags": [
                "118-107-44-253-8080",
                "opendir",
                "RustDesk",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828496/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828495": [
        {
            "dateadded": "2026-04-22 08:34:07 UTC",
            "url": "http://144.31.236.60/dl/install.msi",
            "url_status": "offline",
            "last_online": "2026-04-22 08:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "MaskGramStealer",
                "msi",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828495/",
            "reporter": "abuse_ch"
        }
    ],
    "3828494": [
        {
            "dateadded": "2026-04-22 08:32:08 UTC",
            "url": "http://119.117.177.135:50524/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:41:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828494/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828493": [
        {
            "dateadded": "2026-04-22 08:30:14 UTC",
            "url": "https://hot-soup3.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828493/",
            "reporter": "anonymous"
        }
    ],
    "3828492": [
        {
            "dateadded": "2026-04-22 08:24:18 UTC",
            "url": "http://42.225.199.152:60277/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828492/",
            "reporter": "geenensp"
        }
    ],
    "3828491": [
        {
            "dateadded": "2026-04-22 08:24:15 UTC",
            "url": "https://sweet-bun2.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828491/",
            "reporter": "anonymous"
        }
    ],
    "3828490": [
        {
            "dateadded": "2026-04-22 08:22:14 UTC",
            "url": "http://85.140.44.96:44369/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828490/",
            "reporter": "adliwahid"
        }
    ],
    "3828489": [
        {
            "dateadded": "2026-04-22 08:22:09 UTC",
            "url": "http://182.124.175.204:50581/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:18:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828489/",
            "reporter": "adliwahid"
        }
    ],
    "3828487": [
        {
            "dateadded": "2026-04-22 08:22:08 UTC",
            "url": "http://219.157.22.107:44241/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:16:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828487/",
            "reporter": "adliwahid"
        }
    ],
    "3828488": [
        {
            "dateadded": "2026-04-22 08:22:08 UTC",
            "url": "http://42.228.216.214:41123/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828488/",
            "reporter": "adliwahid"
        }
    ],
    "3828486": [
        {
            "dateadded": "2026-04-22 08:22:07 UTC",
            "url": "http://85.12.204.206:45975/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828486/",
            "reporter": "adliwahid"
        }
    ],
    "3828485": [
        {
            "dateadded": "2026-04-22 08:21:15 UTC",
            "url": "http://58.253.129.91:8518/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828485/",
            "reporter": "adliwahid"
        }
    ],
    "3828484": [
        {
            "dateadded": "2026-04-22 08:21:11 UTC",
            "url": "http://58.253.129.91:8518/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828484/",
            "reporter": "adliwahid"
        }
    ],
    "3828467": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://39.79.136.154:58951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828467/",
            "reporter": "adliwahid"
        }
    ],
    "3828468": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://42.177.200.236:41439/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:13:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828468/",
            "reporter": "adliwahid"
        }
    ],
    "3828469": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://58.47.120.129:34202/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828469/",
            "reporter": "adliwahid"
        }
    ],
    "3828470": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://110.37.44.158:56889/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:19:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828470/",
            "reporter": "adliwahid"
        }
    ],
    "3828471": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://182.127.6.252:43592/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828471/",
            "reporter": "adliwahid"
        }
    ],
    "3828472": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://123.5.152.174:51080/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828472/",
            "reporter": "adliwahid"
        }
    ],
    "3828473": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://222.246.110.97:47547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:13:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828473/",
            "reporter": "adliwahid"
        }
    ],
    "3828474": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://123.191.47.203:49872/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828474/",
            "reporter": "adliwahid"
        }
    ],
    "3828475": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://42.239.110.98:54725/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:54:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828475/",
            "reporter": "adliwahid"
        }
    ],
    "3828476": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://42.52.26.29:33208/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828476/",
            "reporter": "adliwahid"
        }
    ],
    "3828477": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://222.138.149.73:55985/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:10:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828477/",
            "reporter": "adliwahid"
        }
    ],
    "3828478": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://42.231.38.235:56452/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:20:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828478/",
            "reporter": "adliwahid"
        }
    ],
    "3828479": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://222.138.149.73:55985/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:31:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828479/",
            "reporter": "adliwahid"
        }
    ],
    "3828480": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://175.167.108.139:46557/i",
            "url_status": "offline",
            "last_online": "2026-04-27 06:06:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828480/",
            "reporter": "adliwahid"
        }
    ],
    "3828481": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://219.157.215.220:56289/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:21:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828481/",
            "reporter": "adliwahid"
        }
    ],
    "3828482": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://175.167.108.139:46557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:19:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828482/",
            "reporter": "adliwahid"
        }
    ],
    "3828483": [
        {
            "dateadded": "2026-04-22 08:21:10 UTC",
            "url": "http://115.50.109.82:42557/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828483/",
            "reporter": "adliwahid"
        }
    ],
    "3828465": [
        {
            "dateadded": "2026-04-22 08:21:09 UTC",
            "url": "http://91.147.100.200:44721/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:41:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828465/",
            "reporter": "adliwahid"
        }
    ],
    "3828466": [
        {
            "dateadded": "2026-04-22 08:21:09 UTC",
            "url": "http://115.55.158.4:53358/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:48:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828466/",
            "reporter": "adliwahid"
        }
    ],
    "3828464": [
        {
            "dateadded": "2026-04-22 08:21:08 UTC",
            "url": "http://178.238.27.138:57400/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828464/",
            "reporter": "adliwahid"
        }
    ],
    "3828463": [
        {
            "dateadded": "2026-04-22 08:20:14 UTC",
            "url": "http://120.37.212.103:56557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:22:56 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828463/",
            "reporter": "adliwahid"
        }
    ],
    "3828462": [
        {
            "dateadded": "2026-04-22 08:20:13 UTC",
            "url": "http://123.191.47.203:49872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:36:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828462/",
            "reporter": "adliwahid"
        }
    ],
    "3828452": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://120.28.180.87:34162/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828452/",
            "reporter": "adliwahid"
        }
    ],
    "3828453": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://42.52.26.29:33208/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828453/",
            "reporter": "adliwahid"
        }
    ],
    "3828454": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://58.47.120.129:34202/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828454/",
            "reporter": "adliwahid"
        }
    ],
    "3828455": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://45.177.32.104:45637/i",
            "url_status": "offline",
            "last_online": "2026-04-24 00:07:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828455/",
            "reporter": "adliwahid"
        }
    ],
    "3828456": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://117.245.139.161:54495/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:31:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828456/",
            "reporter": "adliwahid"
        }
    ],
    "3828457": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://47.215.185.216:53633/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:11:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828457/",
            "reporter": "adliwahid"
        }
    ],
    "3828458": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://115.54.172.6:42341/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:20:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828458/",
            "reporter": "adliwahid"
        }
    ],
    "3828459": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://120.37.212.103:56557/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828459/",
            "reporter": "adliwahid"
        }
    ],
    "3828460": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://111.249.250.99:57693/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:20:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828460/",
            "reporter": "adliwahid"
        }
    ],
    "3828461": [
        {
            "dateadded": "2026-04-22 08:20:12 UTC",
            "url": "http://111.249.250.99:57693/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:20:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828461/",
            "reporter": "adliwahid"
        }
    ],
    "3828448": [
        {
            "dateadded": "2026-04-22 08:20:11 UTC",
            "url": "http://42.235.102.253:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:47:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828448/",
            "reporter": "adliwahid"
        }
    ],
    "3828449": [
        {
            "dateadded": "2026-04-22 08:20:11 UTC",
            "url": "http://219.155.220.130:58982/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:56:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828449/",
            "reporter": "adliwahid"
        }
    ],
    "3828450": [
        {
            "dateadded": "2026-04-22 08:20:11 UTC",
            "url": "http://123.8.87.137:39740/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:16:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828450/",
            "reporter": "adliwahid"
        }
    ],
    "3828451": [
        {
            "dateadded": "2026-04-22 08:20:11 UTC",
            "url": "http://61.176.197.182:41054/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:49:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828451/",
            "reporter": "adliwahid"
        }
    ],
    "3828446": [
        {
            "dateadded": "2026-04-22 08:19:15 UTC",
            "url": "http://27.37.127.166:52992/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:25:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828446/",
            "reporter": "adliwahid"
        }
    ],
    "3828447": [
        {
            "dateadded": "2026-04-22 08:19:15 UTC",
            "url": "http://182.116.119.193:40194/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828447/",
            "reporter": "adliwahid"
        }
    ],
    "3828442": [
        {
            "dateadded": "2026-04-22 08:19:10 UTC",
            "url": "http://58.35.126.149:57425/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828442/",
            "reporter": "adliwahid"
        }
    ],
    "3828443": [
        {
            "dateadded": "2026-04-22 08:19:10 UTC",
            "url": "http://182.116.119.193:40194/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:01:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828443/",
            "reporter": "adliwahid"
        }
    ],
    "3828444": [
        {
            "dateadded": "2026-04-22 08:19:10 UTC",
            "url": "http://222.246.110.97:47547/i",
            "url_status": "offline",
            "last_online": "2026-04-22 20:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828444/",
            "reporter": "adliwahid"
        }
    ],
    "3828445": [
        {
            "dateadded": "2026-04-22 08:19:10 UTC",
            "url": "http://105.187.36.47:51751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:55:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828445/",
            "reporter": "adliwahid"
        }
    ],
    "3828433": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://182.112.223.124:58281/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828433/",
            "reporter": "adliwahid"
        }
    ],
    "3828434": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://27.216.120.230:43757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 15:57:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828434/",
            "reporter": "adliwahid"
        }
    ],
    "3828435": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://42.230.25.185:59989/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:00:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828435/",
            "reporter": "adliwahid"
        }
    ],
    "3828436": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://221.15.5.58:47466/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:20:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828436/",
            "reporter": "adliwahid"
        }
    ],
    "3828437": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://113.58.211.33:33623/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:44:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828437/",
            "reporter": "adliwahid"
        }
    ],
    "3828438": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://103.206.205.54:34463/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828438/",
            "reporter": "adliwahid"
        }
    ],
    "3828439": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://171.37.151.8:41472/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:12:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828439/",
            "reporter": "adliwahid"
        }
    ],
    "3828440": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://42.230.25.185:59989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:32:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828440/",
            "reporter": "adliwahid"
        }
    ],
    "3828441": [
        {
            "dateadded": "2026-04-22 08:19:09 UTC",
            "url": "http://222.140.180.110:56570/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828441/",
            "reporter": "adliwahid"
        }
    ],
    "3828432": [
        {
            "dateadded": "2026-04-22 08:19:06 UTC",
            "url": "http://193.163.187.71:52330/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828432/",
            "reporter": "adliwahid"
        }
    ],
    "3828431": [
        {
            "dateadded": "2026-04-22 08:18:13 UTC",
            "url": "https://tasty-pie1.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828431/",
            "reporter": "anonymous"
        }
    ],
    "3828427": [
        {
            "dateadded": "2026-04-22 08:18:11 UTC",
            "url": "http://123.4.233.121:44418/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:27:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828427/",
            "reporter": "adliwahid"
        }
    ],
    "3828428": [
        {
            "dateadded": "2026-04-22 08:18:11 UTC",
            "url": "http://115.55.158.4:53358/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828428/",
            "reporter": "adliwahid"
        }
    ],
    "3828429": [
        {
            "dateadded": "2026-04-22 08:18:11 UTC",
            "url": "http://115.53.192.148:50854/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828429/",
            "reporter": "adliwahid"
        }
    ],
    "3828430": [
        {
            "dateadded": "2026-04-22 08:18:11 UTC",
            "url": "http://218.59.82.22:41069/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828430/",
            "reporter": "adliwahid"
        }
    ],
    "3828416": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://221.227.255.138:42303/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:47:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828416/",
            "reporter": "adliwahid"
        }
    ],
    "3828417": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://36.88.136.194:46719/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828417/",
            "reporter": "adliwahid"
        }
    ],
    "3828418": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://123.5.152.174:51080/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:04:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828418/",
            "reporter": "adliwahid"
        }
    ],
    "3828419": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://42.235.102.253:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:50:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828419/",
            "reporter": "adliwahid"
        }
    ],
    "3828420": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://39.79.136.154:58951/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828420/",
            "reporter": "adliwahid"
        }
    ],
    "3828421": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://45.177.32.104:45637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:33:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828421/",
            "reporter": "adliwahid"
        }
    ],
    "3828422": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://221.15.2.96:52763/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828422/",
            "reporter": "adliwahid"
        }
    ],
    "3828423": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://42.231.210.132:33261/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:54:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828423/",
            "reporter": "adliwahid"
        }
    ],
    "3828424": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://42.231.210.132:33261/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828424/",
            "reporter": "adliwahid"
        }
    ],
    "3828425": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://117.254.120.77:49757/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828425/",
            "reporter": "adliwahid"
        }
    ],
    "3828426": [
        {
            "dateadded": "2026-04-22 08:18:10 UTC",
            "url": "http://42.239.226.200:33077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828426/",
            "reporter": "adliwahid"
        }
    ],
    "3828415": [
        {
            "dateadded": "2026-04-22 08:18:09 UTC",
            "url": "http://109.236.46.199:44955/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:27:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828415/",
            "reporter": "adliwahid"
        }
    ],
    "3828414": [
        {
            "dateadded": "2026-04-22 08:18:08 UTC",
            "url": "http://85.12.204.206:45975/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828414/",
            "reporter": "adliwahid"
        }
    ],
    "3828404": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://61.176.197.182:41054/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828404/",
            "reporter": "adliwahid"
        }
    ],
    "3828405": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://61.53.72.30:42608/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:07:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828405/",
            "reporter": "adliwahid"
        }
    ],
    "3828406": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://42.239.110.98:54725/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:09:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828406/",
            "reporter": "adliwahid"
        }
    ],
    "3828407": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://61.53.72.30:42608/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828407/",
            "reporter": "adliwahid"
        }
    ],
    "3828408": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://115.55.241.116:52193/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:17:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828408/",
            "reporter": "adliwahid"
        }
    ],
    "3828409": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://182.125.60.152:37787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828409/",
            "reporter": "adliwahid"
        }
    ],
    "3828410": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://36.70.76.126:52201/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:29:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828410/",
            "reporter": "adliwahid"
        }
    ],
    "3828411": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://42.230.129.254:33951/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828411/",
            "reporter": "adliwahid"
        }
    ],
    "3828412": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://221.227.255.138:42303/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828412/",
            "reporter": "adliwahid"
        }
    ],
    "3828413": [
        {
            "dateadded": "2026-04-22 08:17:12 UTC",
            "url": "http://115.56.159.73:48034/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:17:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828413/",
            "reporter": "adliwahid"
        }
    ],
    "3828394": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://115.61.117.70:43631/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828394/",
            "reporter": "adliwahid"
        }
    ],
    "3828395": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://27.215.210.81:52053/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 02:39:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828395/",
            "reporter": "adliwahid"
        }
    ],
    "3828396": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://125.40.83.225:42752/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:20:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828396/",
            "reporter": "adliwahid"
        }
    ],
    "3828397": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://219.155.220.130:58982/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:16:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828397/",
            "reporter": "adliwahid"
        }
    ],
    "3828398": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://219.157.22.107:44241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:17:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828398/",
            "reporter": "adliwahid"
        }
    ],
    "3828399": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://175.154.118.223:55863/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828399/",
            "reporter": "adliwahid"
        }
    ],
    "3828400": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://42.230.46.218:42756/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828400/",
            "reporter": "adliwahid"
        }
    ],
    "3828401": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://113.58.211.33:33623/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:42:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828401/",
            "reporter": "adliwahid"
        }
    ],
    "3828402": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://182.127.6.252:43592/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828402/",
            "reporter": "adliwahid"
        }
    ],
    "3828403": [
        {
            "dateadded": "2026-04-22 08:17:11 UTC",
            "url": "http://42.230.129.254:33951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828403/",
            "reporter": "adliwahid"
        }
    ],
    "3828393": [
        {
            "dateadded": "2026-04-22 08:17:10 UTC",
            "url": "http://193.163.187.71:52330/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828393/",
            "reporter": "adliwahid"
        }
    ],
    "3828392": [
        {
            "dateadded": "2026-04-22 08:15:13 UTC",
            "url": "https://easy-task6.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828392/",
            "reporter": "anonymous"
        }
    ],
    "3828391": [
        {
            "dateadded": "2026-04-22 08:12:21 UTC",
            "url": "http://182.123.180.160:44836/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828391/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828390": [
        {
            "dateadded": "2026-04-22 08:12:12 UTC",
            "url": "https://just-ta-lk5.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828390/",
            "reporter": "anonymous"
        }
    ],
    "3828389": [
        {
            "dateadded": "2026-04-22 08:09:20 UTC",
            "url": "http://42.227.7.222:42489/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:06:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828389/",
            "reporter": "geenensp"
        }
    ],
    "3828388": [
        {
            "dateadded": "2026-04-22 08:05:14 UTC",
            "url": "http://222.137.95.76:58388/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828388/",
            "reporter": "geenensp"
        }
    ],
    "3828387": [
        {
            "dateadded": "2026-04-22 08:02:10 UTC",
            "url": "https://nice-shot4.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 08:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828387/",
            "reporter": "anonymous"
        }
    ],
    "3828386": [
        {
            "dateadded": "2026-04-22 08:02:09 UTC",
            "url": "http://221.15.2.96:52763/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828386/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828384": [
        {
            "dateadded": "2026-04-22 08:02:07 UTC",
            "url": "http://46.151.182.40/r/oueia.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:52 UTC",
            "threat": "malware_download",
            "tags": [
                "46-151-182-40",
                "base64-loader",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828384/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828385": [
        {
            "dateadded": "2026-04-22 08:02:07 UTC",
            "url": "http://42.227.204.113:37317/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:23:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828385/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828383": [
        {
            "dateadded": "2026-04-22 07:59:39 UTC",
            "url": "http://42.225.199.152:60277/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828383/",
            "reporter": "geenensp"
        }
    ],
    "3828382": [
        {
            "dateadded": "2026-04-22 07:58:07 UTC",
            "url": "http://46.151.182.40/win32.vbs",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "46-151-182-40",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828382/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828381": [
        {
            "dateadded": "2026-04-22 07:57:11 UTC",
            "url": "https://realfact3.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-23 12:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828381/",
            "reporter": "anonymous"
        }
    ],
    "3828380": [
        {
            "dateadded": "2026-04-22 07:57:09 UTC",
            "url": "http://46.151.182.40/config.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:44 UTC",
            "threat": "malware_download",
            "tags": [
                "46-151-182-40",
                "opendir",
                "rev-base64-loader",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828380/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828379": [
        {
            "dateadded": "2026-04-22 07:57:07 UTC",
            "url": "http://182.123.180.160:44836/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828379/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828378": [
        {
            "dateadded": "2026-04-22 07:57:06 UTC",
            "url": "http://46.151.182.40/win64.vbs",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "46-151-182-40",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828378/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828377": [
        {
            "dateadded": "2026-04-22 07:54:23 UTC",
            "url": "http://115.63.42.14:41959/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:54:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828377/",
            "reporter": "geenensp"
        }
    ],
    "3828376": [
        {
            "dateadded": "2026-04-22 07:53:17 UTC",
            "url": "http://117.26.110.50:38787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:01:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828376/",
            "reporter": "geenensp"
        }
    ],
    "3828375": [
        {
            "dateadded": "2026-04-22 07:50:15 UTC",
            "url": "https://best-ti-me2.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828375/",
            "reporter": "anonymous"
        }
    ],
    "3828374": [
        {
            "dateadded": "2026-04-22 07:46:20 UTC",
            "url": "http://123.189.134.198:40571/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828374/",
            "reporter": "geenensp"
        }
    ],
    "3828372": [
        {
            "dateadded": "2026-04-22 07:45:24 UTC",
            "url": "http://196.189.111.43:56567/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828372/",
            "reporter": "geenensp"
        }
    ],
    "3828373": [
        {
            "dateadded": "2026-04-22 07:45:24 UTC",
            "url": "http://222.138.215.123:38651/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828373/",
            "reporter": "geenensp"
        }
    ],
    "3828371": [
        {
            "dateadded": "2026-04-22 07:45:12 UTC",
            "url": "https://good-news1.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828371/",
            "reporter": "anonymous"
        }
    ],
    "3828369": [
        {
            "dateadded": "2026-04-22 07:44:05 UTC",
            "url": "http://46.151.182.76/Nazoboje",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "46-151-182-76",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828369/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828370": [
        {
            "dateadded": "2026-04-22 07:44:05 UTC",
            "url": "http://46.151.182.76/Cayuhi",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:45 UTC",
            "threat": "malware_download",
            "tags": [
                "46-151-182-76",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828370/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828368": [
        {
            "dateadded": "2026-04-22 07:43:23 UTC",
            "url": "http://222.137.95.76:58388/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828368/",
            "reporter": "geenensp"
        }
    ],
    "3828367": [
        {
            "dateadded": "2026-04-22 07:41:12 UTC",
            "url": "https://sideview6.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828367/",
            "reporter": "anonymous"
        }
    ],
    "3828366": [
        {
            "dateadded": "2026-04-22 07:41:06 UTC",
            "url": "http://64.89.160.11/gPasskey",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828366/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828365": [
        {
            "dateadded": "2026-04-22 07:37:08 UTC",
            "url": "http://42.227.204.113:37317/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:10:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828365/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828364": [
        {
            "dateadded": "2026-04-22 07:37:07 UTC",
            "url": "http://59.60.77.123:52740/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828364/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828363": [
        {
            "dateadded": "2026-04-22 07:34:16 UTC",
            "url": "https://backy-ard5.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828363/",
            "reporter": "anonymous"
        }
    ],
    "3828357": [
        {
            "dateadded": "2026-04-22 07:33:12 UTC",
            "url": "http://64.89.160.11/Dopafab",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828357/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828358": [
        {
            "dateadded": "2026-04-22 07:33:12 UTC",
            "url": "http://64.89.160.11/Sobese",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828358/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828359": [
        {
            "dateadded": "2026-04-22 07:33:12 UTC",
            "url": "http://64.89.160.11/Biyubare",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828359/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828360": [
        {
            "dateadded": "2026-04-22 07:33:12 UTC",
            "url": "http://64.89.160.11/Lamimimi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828360/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828361": [
        {
            "dateadded": "2026-04-22 07:33:12 UTC",
            "url": "http://64.89.160.11/Verole",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828361/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828362": [
        {
            "dateadded": "2026-04-22 07:33:12 UTC",
            "url": "http://64.89.160.11/Gonelijek",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828362/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828356": [
        {
            "dateadded": "2026-04-22 07:33:06 UTC",
            "url": "http://64.89.160.11/GGLDataExport",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:53 UTC",
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828356/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828353": [
        {
            "dateadded": "2026-04-22 07:32:06 UTC",
            "url": "http://64.89.160.11/GooglePasskeyGOOD",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828353/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828354": [
        {
            "dateadded": "2026-04-22 07:32:06 UTC",
            "url": "http://64.89.160.11/APPLEexport",
            "url_status": "online",
            "last_online": "2026-04-27 14:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828354/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828355": [
        {
            "dateadded": "2026-04-22 07:32:06 UTC",
            "url": "http://64.89.160.11/googleDataExport",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828355/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828352": [
        {
            "dateadded": "2026-04-22 07:31:07 UTC",
            "url": "http://64.89.160.11/APLexport",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "64-89-160-11",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828352/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828351": [
        {
            "dateadded": "2026-04-22 07:30:15 UTC",
            "url": "https://full-room4.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828351/",
            "reporter": "anonymous"
        }
    ],
    "3828350": [
        {
            "dateadded": "2026-04-22 07:24:29 UTC",
            "url": "http://182.117.79.201:56200/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:45:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828350/",
            "reporter": "geenensp"
        }
    ],
    "3828349": [
        {
            "dateadded": "2026-04-22 07:23:16 UTC",
            "url": "https://nextdoor3.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828349/",
            "reporter": "anonymous"
        }
    ],
    "3828348": [
        {
            "dateadded": "2026-04-22 07:19:13 UTC",
            "url": "https://acbcr.ro/wp-content/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828348/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3828347": [
        {
            "dateadded": "2026-04-22 07:18:17 UTC",
            "url": "https://vasijl-cloud.b-cdn.net/Peton.zip",
            "url_status": "offline",
            "last_online": "2026-04-22 07:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828347/",
            "reporter": "tanner"
        }
    ],
    "3828346": [
        {
            "dateadded": "2026-04-22 07:18:13 UTC",
            "url": "http://indexsearchfindresult.com/ae228216-ad43-473f-94dd-b2c8616a2123/ck-dce6bcbb1a728ea8d871de6d169a2057.cloudflare",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "GuLoader",
                "rundll32",
                "unc-path"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828346/",
            "reporter": "anonymous"
        }
    ],
    "3828345": [
        {
            "dateadded": "2026-04-22 07:18:06 UTC",
            "url": "http://indexsearchfindresult.com/check.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2",
                "ClickFix"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828345/",
            "reporter": "Nyra"
        }
    ],
    "3828344": [
        {
            "dateadded": "2026-04-22 07:17:09 UTC",
            "url": "https://city-wa-lk2.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828344/",
            "reporter": "anonymous"
        }
    ],
    "3828343": [
        {
            "dateadded": "2026-04-22 07:16:10 UTC",
            "url": "http://222.138.215.123:38651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:49:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828343/",
            "reporter": "geenensp"
        }
    ],
    "3828342": [
        {
            "dateadded": "2026-04-22 07:12:09 UTC",
            "url": "http://59.60.77.123:52740/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:27:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828342/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828341": [
        {
            "dateadded": "2026-04-22 07:12:08 UTC",
            "url": "https://top-floor1.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828341/",
            "reporter": "anonymous"
        }
    ],
    "3828340": [
        {
            "dateadded": "2026-04-22 07:11:14 UTC",
            "url": "http://144.48.123.149:58125/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828340/",
            "reporter": "geenensp"
        }
    ],
    "3828338": [
        {
            "dateadded": "2026-04-22 07:11:11 UTC",
            "url": "http://83.142.209.13:8080/USOShared.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 12:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "83-142-209-13-8080",
                "MeshAgent",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828338/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828339": [
        {
            "dateadded": "2026-04-22 07:11:11 UTC",
            "url": "http://83.142.209.13:8080/sliver-client_linux-amd64",
            "url_status": "offline",
            "last_online": "2026-04-22 11:06:59 UTC",
            "threat": "malware_download",
            "tags": [
                "83-142-209-13-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828339/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828337": [
        {
            "dateadded": "2026-04-22 07:06:17 UTC",
            "url": "http://110.37.122.34:50922/i",
            "url_status": "offline",
            "last_online": "2026-04-22 09:00:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828337/",
            "reporter": "geenensp"
        }
    ],
    "3828336": [
        {
            "dateadded": "2026-04-22 07:06:06 UTC",
            "url": "https://silverrain6.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828336/",
            "reporter": "anonymous"
        }
    ],
    "3828334": [
        {
            "dateadded": "2026-04-22 07:02:23 UTC",
            "url": "http://113.238.100.240:36487/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828334/",
            "reporter": "geenensp"
        }
    ],
    "3828335": [
        {
            "dateadded": "2026-04-22 07:02:23 UTC",
            "url": "http://42.233.161.3:58696/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:20:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828335/",
            "reporter": "geenensp"
        }
    ],
    "3828333": [
        {
            "dateadded": "2026-04-22 07:01:10 UTC",
            "url": "https://whitecl-oud5.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 07:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828333/",
            "reporter": "anonymous"
        }
    ],
    "3828332": [
        {
            "dateadded": "2026-04-22 06:58:25 UTC",
            "url": "http://114.239.210.205:46801/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828332/",
            "reporter": "geenensp"
        }
    ],
    "3828331": [
        {
            "dateadded": "2026-04-22 06:57:23 UTC",
            "url": "http://115.63.42.14:41959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 10:59:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828331/",
            "reporter": "geenensp"
        }
    ],
    "3828330": [
        {
            "dateadded": "2026-04-22 06:57:13 UTC",
            "url": "https://gold-fish4.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828330/",
            "reporter": "anonymous"
        }
    ],
    "3828329": [
        {
            "dateadded": "2026-04-22 06:54:08 UTC",
            "url": "https://deep-ocean3.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828329/",
            "reporter": "anonymous"
        }
    ],
    "3828328": [
        {
            "dateadded": "2026-04-22 06:53:38 UTC",
            "url": "http://112.247.238.59:52497/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828328/",
            "reporter": "geenensp"
        }
    ],
    "3828327": [
        {
            "dateadded": "2026-04-22 06:46:07 UTC",
            "url": "https://206.245.165.5/XClient...exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:52 UTC",
            "threat": "malware_download",
            "tags": [
                "206-245-165-5",
                "AsyncRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828327/",
            "reporter": "BlinkzSec"
        }
    ],
    "3828326": [
        {
            "dateadded": "2026-04-22 06:45:08 UTC",
            "url": "http://120.157.23.2:51662/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828326/",
            "reporter": "geenensp"
        }
    ],
    "3828325": [
        {
            "dateadded": "2026-04-22 06:44:08 UTC",
            "url": "https://darknight2.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828325/",
            "reporter": "anonymous"
        }
    ],
    "3828324": [
        {
            "dateadded": "2026-04-22 06:39:13 UTC",
            "url": "https://bright-sky1.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828324/",
            "reporter": "anonymous"
        }
    ],
    "3828323": [
        {
            "dateadded": "2026-04-22 06:37:06 UTC",
            "url": "http://115.48.11.132:50337/i",
            "url_status": "offline",
            "last_online": "2026-04-22 06:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828323/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828322": [
        {
            "dateadded": "2026-04-22 06:33:09 UTC",
            "url": "https://coolstone6.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828322/",
            "reporter": "anonymous"
        }
    ],
    "3828321": [
        {
            "dateadded": "2026-04-22 06:32:07 UTC",
            "url": "http://175.174.105.183:38376/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:40:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828321/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828320": [
        {
            "dateadded": "2026-04-22 06:30:09 UTC",
            "url": "http://27.201.140.48:57513/i",
            "url_status": "offline",
            "last_online": "2026-04-27 09:42:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828320/",
            "reporter": "geenensp"
        }
    ],
    "3828319": [
        {
            "dateadded": "2026-04-22 06:28:12 UTC",
            "url": "https://warmbr-ead5.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828319/",
            "reporter": "anonymous"
        }
    ],
    "3828318": [
        {
            "dateadded": "2026-04-22 06:26:18 UTC",
            "url": "http://115.55.234.46:44742/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:58:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828318/",
            "reporter": "geenensp"
        }
    ],
    "3828317": [
        {
            "dateadded": "2026-04-22 06:23:12 UTC",
            "url": "https://hot-tea4.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828317/",
            "reporter": "anonymous"
        }
    ],
    "3828316": [
        {
            "dateadded": "2026-04-22 06:22:09 UTC",
            "url": "http://115.48.11.132:50337/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 06:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828316/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828315": [
        {
            "dateadded": "2026-04-22 06:16:12 UTC",
            "url": "https://freshmilk3.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828315/",
            "reporter": "anonymous"
        }
    ],
    "3828314": [
        {
            "dateadded": "2026-04-22 06:12:08 UTC",
            "url": "https://sweet-pear2.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828314/",
            "reporter": "anonymous"
        }
    ],
    "3828313": [
        {
            "dateadded": "2026-04-22 06:09:09 UTC",
            "url": "http://58.65.215.0:55567/i",
            "url_status": "offline",
            "last_online": "2026-04-22 06:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828313/",
            "reporter": "geenensp"
        }
    ],
    "3828312": [
        {
            "dateadded": "2026-04-22 06:08:10 UTC",
            "url": "https://tastyapple1.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828312/",
            "reporter": "anonymous"
        }
    ],
    "3828311": [
        {
            "dateadded": "2026-04-22 06:07:08 UTC",
            "url": "http://175.174.105.183:38376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:03:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828311/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828310": [
        {
            "dateadded": "2026-04-22 06:01:14 UTC",
            "url": "https://new-page6.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 06:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828310/",
            "reporter": "anonymous"
        }
    ],
    "3828309": [
        {
            "dateadded": "2026-04-22 05:57:08 UTC",
            "url": "http://123.12.221.23:44606/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828309/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828308": [
        {
            "dateadded": "2026-04-22 05:56:10 UTC",
            "url": "http://88.232.53.145:56344/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:33:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828308/",
            "reporter": "geenensp"
        }
    ],
    "3828307": [
        {
            "dateadded": "2026-04-22 05:55:09 UTC",
            "url": "https://bigwall5.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828307/",
            "reporter": "anonymous"
        }
    ],
    "3828306": [
        {
            "dateadded": "2026-04-22 05:49:15 UTC",
            "url": "https://coldwa-ter4.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828306/",
            "reporter": "anonymous"
        }
    ],
    "3828305": [
        {
            "dateadded": "2026-04-22 05:48:26 UTC",
            "url": "http://196.190.1.39:40493/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:48:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828305/",
            "reporter": "geenensp"
        }
    ],
    "3828304": [
        {
            "dateadded": "2026-04-22 05:44:21 UTC",
            "url": "http://39.78.95.168:37586/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:40:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828304/",
            "reporter": "geenensp"
        }
    ],
    "3828303": [
        {
            "dateadded": "2026-04-22 05:44:12 UTC",
            "url": "https://red-mark3.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828303/",
            "reporter": "anonymous"
        }
    ],
    "3828302": [
        {
            "dateadded": "2026-04-22 05:38:10 UTC",
            "url": "https://softwind2.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828302/",
            "reporter": "anonymous"
        }
    ],
    "3828301": [
        {
            "dateadded": "2026-04-22 05:33:15 UTC",
            "url": "http://27.201.140.48:57513/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828301/",
            "reporter": "geenensp"
        }
    ],
    "3828300": [
        {
            "dateadded": "2026-04-22 05:33:10 UTC",
            "url": "https://open-book1.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828300/",
            "reporter": "anonymous"
        }
    ],
    "3828299": [
        {
            "dateadded": "2026-04-22 05:29:22 UTC",
            "url": "http://119.115.148.145:34631/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828299/",
            "reporter": "geenensp"
        }
    ],
    "3828298": [
        {
            "dateadded": "2026-04-22 05:27:14 UTC",
            "url": "https://hight-ree6.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828298/",
            "reporter": "anonymous"
        }
    ],
    "3828297": [
        {
            "dateadded": "2026-04-22 05:21:15 UTC",
            "url": "https://clearview5.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828297/",
            "reporter": "anonymous"
        }
    ],
    "3828296": [
        {
            "dateadded": "2026-04-22 05:18:26 UTC",
            "url": "http://39.78.95.168:37586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:59:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828296/",
            "reporter": "geenensp"
        }
    ],
    "3828295": [
        {
            "dateadded": "2026-04-22 05:17:17 UTC",
            "url": "http://125.163.91.246:60240/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:28:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828295/",
            "reporter": "geenensp"
        }
    ],
    "3828294": [
        {
            "dateadded": "2026-04-22 05:16:09 UTC",
            "url": "https://small-lamp4.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828294/",
            "reporter": "anonymous"
        }
    ],
    "3828293": [
        {
            "dateadded": "2026-04-22 05:11:06 UTC",
            "url": "http://178.16.54.109/wallet.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 05:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828293/",
            "reporter": "Bitsight"
        }
    ],
    "3828292": [
        {
            "dateadded": "2026-04-22 05:10:14 UTC",
            "url": "https://fastrun3.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828292/",
            "reporter": "anonymous"
        }
    ],
    "3828291": [
        {
            "dateadded": "2026-04-22 05:05:14 UTC",
            "url": "https://gre-enleaf2.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 05:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828291/",
            "reporter": "anonymous"
        }
    ],
    "3828290": [
        {
            "dateadded": "2026-04-22 05:02:08 UTC",
            "url": "http://105.225.136.230:45469/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828290/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828289": [
        {
            "dateadded": "2026-04-22 05:00:24 UTC",
            "url": "http://42.230.46.218:42756/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:37:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828289/",
            "reporter": "geenensp"
        }
    ],
    "3828288": [
        {
            "dateadded": "2026-04-22 04:59:13 UTC",
            "url": "https://blue-box1.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828288/",
            "reporter": "anonymous"
        }
    ],
    "3828287": [
        {
            "dateadded": "2026-04-22 04:56:13 UTC",
            "url": "https://main-po-int6.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828287/",
            "reporter": "anonymous"
        }
    ],
    "3828286": [
        {
            "dateadded": "2026-04-22 04:53:13 UTC",
            "url": "https://quickmo-ve5.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828286/",
            "reporter": "anonymous"
        }
    ],
    "3828285": [
        {
            "dateadded": "2026-04-22 04:52:09 UTC",
            "url": "http://105.225.99.48:60715/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828285/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828284": [
        {
            "dateadded": "2026-04-22 04:43:14 UTC",
            "url": "https://empty-s-pac4.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828284/",
            "reporter": "anonymous"
        }
    ],
    "3828283": [
        {
            "dateadded": "2026-04-22 04:38:13 UTC",
            "url": "https://github.com/Daimyoclorespect/roblox-bubblegum-simulator-script/releases/download/new/RobloxBGS-1.2.0-win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-5585",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828283/",
            "reporter": "tcains1"
        }
    ],
    "3828282": [
        {
            "dateadded": "2026-04-22 04:38:11 UTC",
            "url": "https://github.com/StudentReflect/roblox-da-hood-script/releases/download/new/RobloxDaHood-1.5.3-win64.rar",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:58 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4477",
                "rar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828282/",
            "reporter": "tcains1"
        }
    ],
    "3828281": [
        {
            "dateadded": "2026-04-22 04:38:10 UTC",
            "url": "https://full-b-ox3.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828281/",
            "reporter": "anonymous"
        }
    ],
    "3828280": [
        {
            "dateadded": "2026-04-22 04:37:19 UTC",
            "url": "http://42.230.197.215:56830/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:56:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828280/",
            "reporter": "geenensp"
        }
    ],
    "3828279": [
        {
            "dateadded": "2026-04-22 04:32:08 UTC",
            "url": "https://lightp-ack2.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828279/",
            "reporter": "anonymous"
        }
    ],
    "3828278": [
        {
            "dateadded": "2026-04-22 04:26:23 UTC",
            "url": "http://61.53.151.206:60681/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828278/",
            "reporter": "geenensp"
        }
    ],
    "3828277": [
        {
            "dateadded": "2026-04-22 04:26:10 UTC",
            "url": "https://heavy-lo-ad1.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828277/",
            "reporter": "anonymous"
        }
    ],
    "3828276": [
        {
            "dateadded": "2026-04-22 04:23:17 UTC",
            "url": "http://124.135.177.57:54617/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:40:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828276/",
            "reporter": "geenensp"
        }
    ],
    "3828275": [
        {
            "dateadded": "2026-04-22 04:22:10 UTC",
            "url": "https://light-mo-on6.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828275/",
            "reporter": "anonymous"
        }
    ],
    "3828274": [
        {
            "dateadded": "2026-04-22 04:20:15 UTC",
            "url": "http://182.124.174.189:48481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828274/",
            "reporter": "geenensp"
        }
    ],
    "3828273": [
        {
            "dateadded": "2026-04-22 04:17:18 UTC",
            "url": "http://42.230.197.215:56830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828273/",
            "reporter": "geenensp"
        }
    ],
    "3828272": [
        {
            "dateadded": "2026-04-22 04:15:08 UTC",
            "url": "https://warmf-ire5.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828272/",
            "reporter": "anonymous"
        }
    ],
    "3828271": [
        {
            "dateadded": "2026-04-22 04:12:07 UTC",
            "url": "http://76.49.31.147:52348/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:42:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828271/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828270": [
        {
            "dateadded": "2026-04-22 04:12:06 UTC",
            "url": "http://61.53.140.222:44434/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828270/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828269": [
        {
            "dateadded": "2026-04-22 04:09:13 UTC",
            "url": "https://cold-sn-ow4.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828269/",
            "reporter": "anonymous"
        }
    ],
    "3828268": [
        {
            "dateadded": "2026-04-22 04:04:08 UTC",
            "url": "https://clear-sky3.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 04:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828268/",
            "reporter": "anonymous"
        }
    ],
    "3828267": [
        {
            "dateadded": "2026-04-22 04:02:05 UTC",
            "url": "http://185.97.113.40:34032/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:27:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828267/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828266": [
        {
            "dateadded": "2026-04-22 03:58:06 UTC",
            "url": "https://rainy-ni-ght2.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:58:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828266/",
            "reporter": "anonymous"
        }
    ],
    "3828265": [
        {
            "dateadded": "2026-04-22 03:55:13 UTC",
            "url": "https://sunny-d-ay1.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828265/",
            "reporter": "anonymous"
        }
    ],
    "3828264": [
        {
            "dateadded": "2026-04-22 03:54:19 UTC",
            "url": "http://183.214.149.164:49911/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:02:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828264/",
            "reporter": "geenensp"
        }
    ],
    "3828263": [
        {
            "dateadded": "2026-04-22 03:50:22 UTC",
            "url": "http://124.135.177.57:54617/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:49:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828263/",
            "reporter": "geenensp"
        }
    ],
    "3828262": [
        {
            "dateadded": "2026-04-22 03:50:21 UTC",
            "url": "http://61.163.158.31:59140/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:09:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828262/",
            "reporter": "geenensp"
        }
    ],
    "3828260": [
        {
            "dateadded": "2026-04-22 03:49:10 UTC",
            "url": "http://42.238.162.76:57129/i",
            "url_status": "offline",
            "last_online": "2026-04-23 03:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828260/",
            "reporter": "geenensp"
        }
    ],
    "3828261": [
        {
            "dateadded": "2026-04-22 03:49:10 UTC",
            "url": "http://182.120.128.113:52717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:48:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828261/",
            "reporter": "geenensp"
        }
    ],
    "3828259": [
        {
            "dateadded": "2026-04-22 03:46:12 UTC",
            "url": "https://best-lo-ok6.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828259/",
            "reporter": "anonymous"
        }
    ],
    "3828258": [
        {
            "dateadded": "2026-04-22 03:44:21 UTC",
            "url": "http://72.255.19.83:33324/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828258/",
            "reporter": "botnetkiller"
        }
    ],
    "3828256": [
        {
            "dateadded": "2026-04-22 03:44:04 UTC",
            "url": "http://208.84.100.209/giga.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828256/",
            "reporter": "botnetkiller"
        }
    ],
    "3828257": [
        {
            "dateadded": "2026-04-22 03:44:04 UTC",
            "url": "http://208.84.100.209/arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828257/",
            "reporter": "botnetkiller"
        }
    ],
    "3828255": [
        {
            "dateadded": "2026-04-22 03:43:22 UTC",
            "url": "http://72.255.33.219:60660/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828255/",
            "reporter": "botnetkiller"
        }
    ],
    "3828254": [
        {
            "dateadded": "2026-04-22 03:43:20 UTC",
            "url": "http://206.135.170.3:33308/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828254/",
            "reporter": "botnetkiller"
        }
    ],
    "3828252": [
        {
            "dateadded": "2026-04-22 03:43:05 UTC",
            "url": "http://94.26.106.134/lll",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828252/",
            "reporter": "botnetkiller"
        }
    ],
    "3828253": [
        {
            "dateadded": "2026-04-22 03:43:05 UTC",
            "url": "http://94.26.106.134///arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828253/",
            "reporter": "botnetkiller"
        }
    ],
    "3828251": [
        {
            "dateadded": "2026-04-22 03:40:08 UTC",
            "url": "https://newst-yle5.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828251/",
            "reporter": "anonymous"
        }
    ],
    "3828250": [
        {
            "dateadded": "2026-04-22 03:38:18 UTC",
            "url": "http://182.120.99.246:51379/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828250/",
            "reporter": "geenensp"
        }
    ],
    "3828249": [
        {
            "dateadded": "2026-04-22 03:38:06 UTC",
            "url": "http://62.60.226.159/bot_x64.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 23:29:17 UTC",
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey",
                "Smoke Loader",
                "Stealc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828249/",
            "reporter": "c2hunter"
        }
    ],
    "3828248": [
        {
            "dateadded": "2026-04-22 03:37:07 UTC",
            "url": "http://185.97.113.40:34032/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:21:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828248/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828247": [
        {
            "dateadded": "2026-04-22 03:36:06 UTC",
            "url": "http://178.16.54.109/8.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828247/",
            "reporter": "Bitsight"
        }
    ],
    "3828245": [
        {
            "dateadded": "2026-04-22 03:34:18 UTC",
            "url": "http://208.84.100.209/massload",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828245/",
            "reporter": "botnetkiller"
        }
    ],
    "3828246": [
        {
            "dateadded": "2026-04-22 03:34:18 UTC",
            "url": "http://123.129.130.73:44083/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:55:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828246/",
            "reporter": "geenensp"
        }
    ],
    "3828244": [
        {
            "dateadded": "2026-04-22 03:34:08 UTC",
            "url": "https://warm-co-at4.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828244/",
            "reporter": "anonymous"
        }
    ],
    "3828243": [
        {
            "dateadded": "2026-04-22 03:32:06 UTC",
            "url": "http://76.49.31.147:52348/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:05:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828243/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828242": [
        {
            "dateadded": "2026-04-22 03:29:13 UTC",
            "url": "https://long-be-lt3.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828242/",
            "reporter": "anonymous"
        }
    ],
    "3828241": [
        {
            "dateadded": "2026-04-22 03:24:11 UTC",
            "url": "https://white-shir-t2.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828241/",
            "reporter": "anonymous"
        }
    ],
    "3828240": [
        {
            "dateadded": "2026-04-22 03:22:07 UTC",
            "url": "http://115.63.12.229:50276/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:01:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828240/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828238": [
        {
            "dateadded": "2026-04-22 03:21:20 UTC",
            "url": "http://115.52.29.228:40767/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828238/",
            "reporter": "geenensp"
        }
    ],
    "3828239": [
        {
            "dateadded": "2026-04-22 03:21:20 UTC",
            "url": "http://42.238.162.76:57129/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:00:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828239/",
            "reporter": "geenensp"
        }
    ],
    "3828235": [
        {
            "dateadded": "2026-04-22 03:20:21 UTC",
            "url": "http://188.58.197.152:39514/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 03:20:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828235/",
            "reporter": "geenensp"
        }
    ],
    "3828236": [
        {
            "dateadded": "2026-04-22 03:20:21 UTC",
            "url": "http://112.248.104.46:36157/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828236/",
            "reporter": "geenensp"
        }
    ],
    "3828237": [
        {
            "dateadded": "2026-04-22 03:20:21 UTC",
            "url": "http://113.239.217.13:40757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:47:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828237/",
            "reporter": "geenensp"
        }
    ],
    "3828234": [
        {
            "dateadded": "2026-04-22 03:19:17 UTC",
            "url": "http://113.231.226.20:52483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828234/",
            "reporter": "geenensp"
        }
    ],
    "3828233": [
        {
            "dateadded": "2026-04-22 03:18:10 UTC",
            "url": "http://42.55.69.26:58120/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828233/",
            "reporter": "geenensp"
        }
    ],
    "3828232": [
        {
            "dateadded": "2026-04-22 03:18:08 UTC",
            "url": "https://black-h-at1.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828232/",
            "reporter": "anonymous"
        }
    ],
    "3828231": [
        {
            "dateadded": "2026-04-22 03:17:07 UTC",
            "url": "http://58.23.80.137:48453/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:19:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828231/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828230": [
        {
            "dateadded": "2026-04-22 03:13:07 UTC",
            "url": "https://purewa-ter6.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828230/",
            "reporter": "anonymous"
        }
    ],
    "3828228": [
        {
            "dateadded": "2026-04-22 03:10:07 UTC",
            "url": "https://raw.githubusercontent.com/deermoment/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:48 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828228/",
            "reporter": "tcains1"
        }
    ],
    "3828229": [
        {
            "dateadded": "2026-04-22 03:10:07 UTC",
            "url": "https://github.com/deermoment/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828229/",
            "reporter": "tcains1"
        }
    ],
    "3828227": [
        {
            "dateadded": "2026-04-22 03:07:09 UTC",
            "url": "https://coolmi-lk5.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828227/",
            "reporter": "anonymous"
        }
    ],
    "3828226": [
        {
            "dateadded": "2026-04-22 03:02:08 UTC",
            "url": "https://fresh-tea4.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 03:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828226/",
            "reporter": "anonymous"
        }
    ],
    "3828225": [
        {
            "dateadded": "2026-04-22 03:02:06 UTC",
            "url": "http://115.58.91.44:53403/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:40:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828225/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828224": [
        {
            "dateadded": "2026-04-22 03:01:14 UTC",
            "url": "https://gitlab.com/v1ffeyn/roxxy/-/raw/main/API.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 23:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828224/",
            "reporter": "tcains1"
        }
    ],
    "3828223": [
        {
            "dateadded": "2026-04-22 03:00:07 UTC",
            "url": "https://xs.bhaaratkeeshakti.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "ua-empty"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828223/",
            "reporter": "tcains1"
        }
    ],
    "3828222": [
        {
            "dateadded": "2026-04-22 02:58:15 UTC",
            "url": "http://112.248.104.46:36157/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:15:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828222/",
            "reporter": "geenensp"
        }
    ],
    "3828221": [
        {
            "dateadded": "2026-04-22 02:55:22 UTC",
            "url": "http://115.52.29.228:40767/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:19:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828221/",
            "reporter": "geenensp"
        }
    ],
    "3828220": [
        {
            "dateadded": "2026-04-22 02:55:11 UTC",
            "url": "https://hot-s-oup3.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828220/",
            "reporter": "anonymous"
        }
    ],
    "3828219": [
        {
            "dateadded": "2026-04-22 02:53:17 UTC",
            "url": "http://115.52.82.94:38633/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:38:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828219/",
            "reporter": "geenensp"
        }
    ],
    "3828218": [
        {
            "dateadded": "2026-04-22 02:50:10 UTC",
            "url": "https://sweet-bun2.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828218/",
            "reporter": "anonymous"
        }
    ],
    "3828217": [
        {
            "dateadded": "2026-04-22 02:50:08 UTC",
            "url": "http://42.55.69.26:58120/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828217/",
            "reporter": "geenensp"
        }
    ],
    "3828216": [
        {
            "dateadded": "2026-04-22 02:45:14 UTC",
            "url": "https://tasty-pi-e1.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828216/",
            "reporter": "anonymous"
        }
    ],
    "3828215": [
        {
            "dateadded": "2026-04-22 02:45:11 UTC",
            "url": "http://61.53.140.222:44434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828215/",
            "reporter": "geenensp"
        }
    ],
    "3828211": [
        {
            "dateadded": "2026-04-22 02:39:17 UTC",
            "url": "http://176.65.132.117/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-25 12:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828211/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828212": [
        {
            "dateadded": "2026-04-22 02:39:17 UTC",
            "url": "http://176.65.132.117/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-25 14:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828212/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828213": [
        {
            "dateadded": "2026-04-22 02:39:17 UTC",
            "url": "http://176.65.132.117/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 12:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828213/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828214": [
        {
            "dateadded": "2026-04-22 02:39:17 UTC",
            "url": "http://176.65.132.117/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-25 12:22:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828214/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828210": [
        {
            "dateadded": "2026-04-22 02:39:11 UTC",
            "url": "https://easy-ta-sk6.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828210/",
            "reporter": "anonymous"
        }
    ],
    "3828203": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 12:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828203/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828204": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-25 12:07:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828204/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828205": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 11:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828205/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828206": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-25 12:26:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828206/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828207": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/debug.dbg",
            "url_status": "offline",
            "last_online": "2026-04-25 11:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828207/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828208": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 10:53:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828208/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828209": [
        {
            "dateadded": "2026-04-22 02:38:20 UTC",
            "url": "http://176.65.132.117/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-25 12:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828209/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3828202": [
        {
            "dateadded": "2026-04-22 02:33:09 UTC",
            "url": "https://justta-lk5.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828202/",
            "reporter": "anonymous"
        }
    ],
    "3828201": [
        {
            "dateadded": "2026-04-22 02:32:07 UTC",
            "url": "http://115.58.91.44:53403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828201/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828200": [
        {
            "dateadded": "2026-04-22 02:28:14 UTC",
            "url": "https://nice-sh-ot4.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828200/",
            "reporter": "anonymous"
        }
    ],
    "3828199": [
        {
            "dateadded": "2026-04-22 02:27:17 UTC",
            "url": "http://115.56.129.141:48483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828199/",
            "reporter": "geenensp"
        }
    ],
    "3828198": [
        {
            "dateadded": "2026-04-22 02:26:22 UTC",
            "url": "http://42.226.78.146:55467/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828198/",
            "reporter": "geenensp"
        }
    ],
    "3828197": [
        {
            "dateadded": "2026-04-22 02:22:08 UTC",
            "url": "https://real-fact3.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828197/",
            "reporter": "anonymous"
        }
    ],
    "3828196": [
        {
            "dateadded": "2026-04-22 02:19:17 UTC",
            "url": "http://39.65.75.24:40031/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828196/",
            "reporter": "geenensp"
        }
    ],
    "3828195": [
        {
            "dateadded": "2026-04-22 02:17:13 UTC",
            "url": "http://182.119.253.124:40247/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 06:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828195/",
            "reporter": "geenensp"
        }
    ],
    "3828194": [
        {
            "dateadded": "2026-04-22 02:17:09 UTC",
            "url": "https://best-ti-me2.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828194/",
            "reporter": "anonymous"
        }
    ],
    "3828193": [
        {
            "dateadded": "2026-04-22 02:15:15 UTC",
            "url": "http://222.142.254.205:42246/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828193/",
            "reporter": "geenensp"
        }
    ],
    "3828192": [
        {
            "dateadded": "2026-04-22 02:12:13 UTC",
            "url": "https://good-n-ews1.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828192/",
            "reporter": "anonymous"
        }
    ],
    "3828190": [
        {
            "dateadded": "2026-04-22 02:10:22 UTC",
            "url": "http://123.12.30.133:33112/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:50:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828190/",
            "reporter": "geenensp"
        }
    ],
    "3828191": [
        {
            "dateadded": "2026-04-22 02:10:22 UTC",
            "url": "http://222.142.254.205:42246/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:43:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828191/",
            "reporter": "geenensp"
        }
    ],
    "3828189": [
        {
            "dateadded": "2026-04-22 02:07:09 UTC",
            "url": "http://42.53.250.216:49060/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:22:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828189/",
            "reporter": "geenensp"
        }
    ],
    "3828188": [
        {
            "dateadded": "2026-04-22 02:07:07 UTC",
            "url": "https://side-vi-ew6.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828188/",
            "reporter": "anonymous"
        }
    ],
    "3828187": [
        {
            "dateadded": "2026-04-22 02:00:09 UTC",
            "url": "https://backy-ard5.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 02:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828187/",
            "reporter": "anonymous"
        }
    ],
    "3828186": [
        {
            "dateadded": "2026-04-22 01:57:19 UTC",
            "url": "http://221.15.7.209:39779/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:28:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828186/",
            "reporter": "geenensp"
        }
    ],
    "3828185": [
        {
            "dateadded": "2026-04-22 01:57:18 UTC",
            "url": "http://39.65.75.24:40031/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828185/",
            "reporter": "geenensp"
        }
    ],
    "3828184": [
        {
            "dateadded": "2026-04-22 01:54:09 UTC",
            "url": "https://fullr-oom4.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828184/",
            "reporter": "anonymous"
        }
    ],
    "3828183": [
        {
            "dateadded": "2026-04-22 01:50:11 UTC",
            "url": "https://next-door3.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828183/",
            "reporter": "anonymous"
        }
    ],
    "3828182": [
        {
            "dateadded": "2026-04-22 01:49:15 UTC",
            "url": "http://36.80.140.44:52678/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828182/",
            "reporter": "geenensp"
        }
    ],
    "3828181": [
        {
            "dateadded": "2026-04-22 01:45:08 UTC",
            "url": "https://city-wa-lk2.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828181/",
            "reporter": "anonymous"
        }
    ],
    "3828180": [
        {
            "dateadded": "2026-04-22 01:41:21 UTC",
            "url": "http://123.12.30.133:33112/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:10:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828180/",
            "reporter": "geenensp"
        }
    ],
    "3828179": [
        {
            "dateadded": "2026-04-22 01:40:23 UTC",
            "url": "http://42.53.250.216:49060/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:03:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828179/",
            "reporter": "geenensp"
        }
    ],
    "3828178": [
        {
            "dateadded": "2026-04-22 01:39:09 UTC",
            "url": "https://top-f-loor1.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828178/",
            "reporter": "anonymous"
        }
    ],
    "3828177": [
        {
            "dateadded": "2026-04-22 01:33:09 UTC",
            "url": "https://silver-ra-in6.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828177/",
            "reporter": "anonymous"
        }
    ],
    "3828176": [
        {
            "dateadded": "2026-04-22 01:32:12 UTC",
            "url": "http://125.44.61.124:44034/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 06:06:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828176/",
            "reporter": "geenensp"
        }
    ],
    "3828175": [
        {
            "dateadded": "2026-04-22 01:28:07 UTC",
            "url": "https://whitecl-oud5.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828175/",
            "reporter": "anonymous"
        }
    ],
    "3828174": [
        {
            "dateadded": "2026-04-22 01:22:19 UTC",
            "url": "http://60.209.76.246:54822/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:26:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828174/",
            "reporter": "geenensp"
        }
    ],
    "3828173": [
        {
            "dateadded": "2026-04-22 01:21:09 UTC",
            "url": "https://goldfi-sh4.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828173/",
            "reporter": "anonymous"
        }
    ],
    "3828172": [
        {
            "dateadded": "2026-04-22 01:19:18 UTC",
            "url": "http://36.80.140.44:52678/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828172/",
            "reporter": "geenensp"
        }
    ],
    "3828171": [
        {
            "dateadded": "2026-04-22 01:17:19 UTC",
            "url": "http://180.241.223.215:51496/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:06:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828171/",
            "reporter": "geenensp"
        }
    ],
    "3828169": [
        {
            "dateadded": "2026-04-22 01:17:17 UTC",
            "url": "http://176.65.139.141/bins/jew.sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 12:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828169/",
            "reporter": "botnetkiller"
        }
    ],
    "3828170": [
        {
            "dateadded": "2026-04-22 01:17:17 UTC",
            "url": "http://182.112.252.212:45761/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:23:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828170/",
            "reporter": "geenensp"
        }
    ],
    "3828166": [
        {
            "dateadded": "2026-04-22 01:17:09 UTC",
            "url": "http://176.65.139.141/bins/jew.ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 11:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828166/",
            "reporter": "botnetkiller"
        }
    ],
    "3828167": [
        {
            "dateadded": "2026-04-22 01:17:09 UTC",
            "url": "http://176.65.139.141/bins/jew.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 11:42:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828167/",
            "reporter": "botnetkiller"
        }
    ],
    "3828168": [
        {
            "dateadded": "2026-04-22 01:17:09 UTC",
            "url": "http://176.65.139.141/bins/jew.mips",
            "url_status": "offline",
            "last_online": "2026-04-24 11:46:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828168/",
            "reporter": "botnetkiller"
        }
    ],
    "3828165": [
        {
            "dateadded": "2026-04-22 01:17:08 UTC",
            "url": "https://deep-ocean3.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828165/",
            "reporter": "anonymous"
        }
    ],
    "3828163": [
        {
            "dateadded": "2026-04-22 01:16:16 UTC",
            "url": "http://176.65.139.141/bins/jew.m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 11:31:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828163/",
            "reporter": "botnetkiller"
        }
    ],
    "3828164": [
        {
            "dateadded": "2026-04-22 01:16:16 UTC",
            "url": "http://176.65.139.141/bins/jew.arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 11:07:17 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828164/",
            "reporter": "botnetkiller"
        }
    ],
    "3828159": [
        {
            "dateadded": "2026-04-22 01:15:25 UTC",
            "url": "http://176.65.139.141/bins/jew.arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 11:13:34 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828159/",
            "reporter": "botnetkiller"
        }
    ],
    "3828160": [
        {
            "dateadded": "2026-04-22 01:15:25 UTC",
            "url": "http://176.65.139.141/bins/jew.arm",
            "url_status": "offline",
            "last_online": "2026-04-24 11:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828160/",
            "reporter": "botnetkiller"
        }
    ],
    "3828161": [
        {
            "dateadded": "2026-04-22 01:15:25 UTC",
            "url": "http://176.65.139.141/bins/jew.arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 12:13:04 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828161/",
            "reporter": "botnetkiller"
        }
    ],
    "3828162": [
        {
            "dateadded": "2026-04-22 01:15:25 UTC",
            "url": "http://176.65.139.141/bins/jew.spc",
            "url_status": "offline",
            "last_online": "2026-04-24 11:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828162/",
            "reporter": "botnetkiller"
        }
    ],
    "3828158": [
        {
            "dateadded": "2026-04-22 01:14:19 UTC",
            "url": "http://5.134.246.21:57804/Mozi.7",
            "url_status": "offline",
            "last_online": "2026-04-22 01:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828158/",
            "reporter": "botnetkiller"
        }
    ],
    "3828157": [
        {
            "dateadded": "2026-04-22 01:13:20 UTC",
            "url": "http://196.189.197.131:53404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828157/",
            "reporter": "geenensp"
        }
    ],
    "3828156": [
        {
            "dateadded": "2026-04-22 01:12:07 UTC",
            "url": "http://113.221.27.21:38224/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:45:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828156/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828155": [
        {
            "dateadded": "2026-04-22 01:11:08 UTC",
            "url": "https://dark-ni-ght2.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828155/",
            "reporter": "anonymous"
        }
    ],
    "3828154": [
        {
            "dateadded": "2026-04-22 01:07:08 UTC",
            "url": "https://bright-sk-y1.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828154/",
            "reporter": "anonymous"
        }
    ],
    "3828153": [
        {
            "dateadded": "2026-04-22 01:04:06 UTC",
            "url": "https://old-ca-se6.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 01:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828153/",
            "reporter": "anonymous"
        }
    ],
    "3828152": [
        {
            "dateadded": "2026-04-22 01:02:17 UTC",
            "url": "http://182.243.8.193:40721/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828152/",
            "reporter": "geenensp"
        }
    ],
    "3828151": [
        {
            "dateadded": "2026-04-22 00:55:15 UTC",
            "url": "http://190.109.227.86:59638/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828151/",
            "reporter": "geenensp"
        }
    ],
    "3828150": [
        {
            "dateadded": "2026-04-22 00:54:09 UTC",
            "url": "https://cool-stone5.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828150/",
            "reporter": "anonymous"
        }
    ],
    "3828149": [
        {
            "dateadded": "2026-04-22 00:49:13 UTC",
            "url": "https://warm-m-ilk4.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828149/",
            "reporter": "anonymous"
        }
    ],
    "3828148": [
        {
            "dateadded": "2026-04-22 00:43:09 UTC",
            "url": "https://hottea3.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828148/",
            "reporter": "anonymous"
        }
    ],
    "3828147": [
        {
            "dateadded": "2026-04-22 00:39:10 UTC",
            "url": "https://sweet-bun2.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828147/",
            "reporter": "anonymous"
        }
    ],
    "3828146": [
        {
            "dateadded": "2026-04-22 00:36:09 UTC",
            "url": "https://fresh-app-l1.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828146/",
            "reporter": "anonymous"
        }
    ],
    "3828145": [
        {
            "dateadded": "2026-04-22 00:28:08 UTC",
            "url": "https://redbook6.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828145/",
            "reporter": "anonymous"
        }
    ],
    "3828144": [
        {
            "dateadded": "2026-04-22 00:23:18 UTC",
            "url": "http://182.112.252.212:45761/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:08:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828144/",
            "reporter": "geenensp"
        }
    ],
    "3828143": [
        {
            "dateadded": "2026-04-22 00:21:21 UTC",
            "url": "http://45.201.157.212:55247/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:04:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828143/",
            "reporter": "geenensp"
        }
    ],
    "3828142": [
        {
            "dateadded": "2026-04-22 00:21:09 UTC",
            "url": "https://coldwa-ter5.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828142/",
            "reporter": "anonymous"
        }
    ],
    "3828141": [
        {
            "dateadded": "2026-04-22 00:16:08 UTC",
            "url": "https://new-vi-ew4.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828141/",
            "reporter": "anonymous"
        }
    ],
    "3828140": [
        {
            "dateadded": "2026-04-22 00:11:19 UTC",
            "url": "http://115.56.183.253:34642/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828140/",
            "reporter": "geenensp"
        }
    ],
    "3828139": [
        {
            "dateadded": "2026-04-22 00:10:13 UTC",
            "url": "https://bigwall3.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828139/",
            "reporter": "anonymous"
        }
    ],
    "3828138": [
        {
            "dateadded": "2026-04-22 00:09:11 UTC",
            "url": "http://36.70.100.39:47840/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:01:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828138/",
            "reporter": "geenensp"
        }
    ],
    "3828137": [
        {
            "dateadded": "2026-04-22 00:05:14 UTC",
            "url": "https://soft-cha-ir2.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828137/",
            "reporter": "anonymous"
        }
    ],
    "3828136": [
        {
            "dateadded": "2026-04-22 00:01:34 UTC",
            "url": "http://182.243.8.193:40721/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828136/",
            "reporter": "geenensp"
        }
    ],
    "3828135": [
        {
            "dateadded": "2026-04-22 00:00:16 UTC",
            "url": "https://open-wind1.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-22 00:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828135/",
            "reporter": "anonymous"
        }
    ],
    "3828134": [
        {
            "dateadded": "2026-04-21 23:58:12 UTC",
            "url": "https://cle-arbox6.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828134/",
            "reporter": "anonymous"
        }
    ],
    "3828132": [
        {
            "dateadded": "2026-04-21 23:50:10 UTC",
            "url": "https://faststep5.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828132/",
            "reporter": "anonymous"
        }
    ],
    "3828131": [
        {
            "dateadded": "2026-04-21 23:47:10 UTC",
            "url": "https://white-pa-per4.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828131/",
            "reporter": "anonymous"
        }
    ],
    "3828130": [
        {
            "dateadded": "2026-04-21 23:45:24 UTC",
            "url": "http://115.56.183.253:34642/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:04:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828130/",
            "reporter": "geenensp"
        }
    ],
    "3828129": [
        {
            "dateadded": "2026-04-21 23:37:14 UTC",
            "url": "https://smalllamp3.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828129/",
            "reporter": "anonymous"
        }
    ],
    "3828127": [
        {
            "dateadded": "2026-04-21 23:33:09 UTC",
            "url": "http://42.239.246.108:44380/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828127/",
            "reporter": "geenensp"
        }
    ],
    "3828128": [
        {
            "dateadded": "2026-04-21 23:33:09 UTC",
            "url": "http://36.70.100.39:47840/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:02:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828128/",
            "reporter": "geenensp"
        }
    ],
    "3828126": [
        {
            "dateadded": "2026-04-21 23:32:28 UTC",
            "url": "http://117.242.152.81:48654/Mozi.m",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828126/",
            "reporter": "botnetkiller"
        }
    ],
    "3828125": [
        {
            "dateadded": "2026-04-21 23:32:15 UTC",
            "url": "https://glassb-otl2.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828125/",
            "reporter": "anonymous"
        }
    ],
    "3828124": [
        {
            "dateadded": "2026-04-21 23:32:06 UTC",
            "url": "http://39.77.12.200:34922/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828124/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828123": [
        {
            "dateadded": "2026-04-21 23:29:22 UTC",
            "url": "https://204.76.203.196.ptr.pfcloud.network/sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:50:32 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "redtail",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828123/",
            "reporter": "botnetkiller"
        }
    ],
    "3828122": [
        {
            "dateadded": "2026-04-21 23:27:12 UTC",
            "url": "https://home-tray1.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828122/",
            "reporter": "anonymous"
        }
    ],
    "3828121": [
        {
            "dateadded": "2026-04-21 23:22:14 UTC",
            "url": "https://ew6.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828121/",
            "reporter": "anonymous"
        }
    ],
    "3828120": [
        {
            "dateadded": "2026-04-21 23:19:12 UTC",
            "url": "https://dfsgg.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828120/",
            "reporter": "anonymous"
        }
    ],
    "3828119": [
        {
            "dateadded": "2026-04-21 23:17:07 UTC",
            "url": "http://125.40.114.29:55274/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:48:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828119/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828118": [
        {
            "dateadded": "2026-04-21 23:09:13 UTC",
            "url": "https://0tt37-graph.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828118/",
            "reporter": "anonymous"
        }
    ],
    "3828117": [
        {
            "dateadded": "2026-04-21 23:04:12 UTC",
            "url": "https://alt-1llu.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 23:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828117/",
            "reporter": "anonymous"
        }
    ],
    "3828116": [
        {
            "dateadded": "2026-04-21 22:58:13 UTC",
            "url": "https://tri-draa.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828116/",
            "reporter": "anonymous"
        }
    ],
    "3828115": [
        {
            "dateadded": "2026-04-21 22:57:22 UTC",
            "url": "http://61.52.156.204:41334/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:57:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828115/",
            "reporter": "geenensp"
        }
    ],
    "3828114": [
        {
            "dateadded": "2026-04-21 22:53:22 UTC",
            "url": "http://115.49.198.139:47367/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828114/",
            "reporter": "geenensp"
        }
    ],
    "3828113": [
        {
            "dateadded": "2026-04-21 22:53:14 UTC",
            "url": "https://handlerequi.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828113/",
            "reporter": "anonymous"
        }
    ],
    "3828112": [
        {
            "dateadded": "2026-04-21 22:49:22 UTC",
            "url": "http://42.85.185.152:37671/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828112/",
            "reporter": "geenensp"
        }
    ],
    "3828111": [
        {
            "dateadded": "2026-04-21 22:48:13 UTC",
            "url": "https://7afu.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828111/",
            "reporter": "anonymous"
        }
    ],
    "3828110": [
        {
            "dateadded": "2026-04-21 22:47:26 UTC",
            "url": "http://42.85.185.152:37671/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828110/",
            "reporter": "geenensp"
        }
    ],
    "3828109": [
        {
            "dateadded": "2026-04-21 22:47:09 UTC",
            "url": "http://125.40.114.29:55274/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:43:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828109/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828108": [
        {
            "dateadded": "2026-04-21 22:44:23 UTC",
            "url": "http://42.239.246.108:44380/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:44:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828108/",
            "reporter": "geenensp"
        }
    ],
    "3828107": [
        {
            "dateadded": "2026-04-21 22:43:07 UTC",
            "url": "https://4mber2-flow.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828107/",
            "reporter": "anonymous"
        }
    ],
    "3828106": [
        {
            "dateadded": "2026-04-21 22:39:13 UTC",
            "url": "http://110.36.15.18:49440/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828106/",
            "reporter": "geenensp"
        }
    ],
    "3828105": [
        {
            "dateadded": "2026-04-21 22:37:07 UTC",
            "url": "http://39.77.12.200:34922/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:32:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828105/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828104": [
        {
            "dateadded": "2026-04-21 22:36:11 UTC",
            "url": "https://wwyik.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828104/",
            "reporter": "anonymous"
        }
    ],
    "3828103": [
        {
            "dateadded": "2026-04-21 22:32:18 UTC",
            "url": "http://115.49.198.139:47367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 19:37:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828103/",
            "reporter": "geenensp"
        }
    ],
    "3828102": [
        {
            "dateadded": "2026-04-21 22:32:08 UTC",
            "url": "http://123.14.156.128:40022/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828102/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828100": [
        {
            "dateadded": "2026-04-21 22:30:25 UTC",
            "url": "http://208.84.100.209/x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828100/",
            "reporter": "botnetkiller"
        }
    ],
    "3828101": [
        {
            "dateadded": "2026-04-21 22:30:25 UTC",
            "url": "http://208.84.100.209/sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828101/",
            "reporter": "botnetkiller"
        }
    ],
    "3828092": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828092/",
            "reporter": "botnetkiller"
        }
    ],
    "3828093": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828093/",
            "reporter": "botnetkiller"
        }
    ],
    "3828094": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828094/",
            "reporter": "botnetkiller"
        }
    ],
    "3828095": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828095/",
            "reporter": "botnetkiller"
        }
    ],
    "3828096": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828096/",
            "reporter": "botnetkiller"
        }
    ],
    "3828097": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828097/",
            "reporter": "botnetkiller"
        }
    ],
    "3828098": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828098/",
            "reporter": "botnetkiller"
        }
    ],
    "3828099": [
        {
            "dateadded": "2026-04-21 22:30:20 UTC",
            "url": "http://208.84.100.209/ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828099/",
            "reporter": "botnetkiller"
        }
    ],
    "3828091": [
        {
            "dateadded": "2026-04-21 22:30:09 UTC",
            "url": "https://openshi.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828091/",
            "reporter": "anonymous"
        }
    ],
    "3828090": [
        {
            "dateadded": "2026-04-21 22:25:09 UTC",
            "url": "https://rzeusijc.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828090/",
            "reporter": "anonymous"
        }
    ],
    "3828089": [
        {
            "dateadded": "2026-04-21 22:19:08 UTC",
            "url": "https://383aosc.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828089/",
            "reporter": "anonymous"
        }
    ],
    "3828088": [
        {
            "dateadded": "2026-04-21 22:15:11 UTC",
            "url": "https://ymqzqwf.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828088/",
            "reporter": "anonymous"
        }
    ],
    "3828086": [
        {
            "dateadded": "2026-04-21 22:13:10 UTC",
            "url": "http://110.36.15.18:49440/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:59:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828086/",
            "reporter": "geenensp"
        }
    ],
    "3828087": [
        {
            "dateadded": "2026-04-21 22:13:10 UTC",
            "url": "http://110.138.4.108:55673/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828087/",
            "reporter": "geenensp"
        }
    ],
    "3828085": [
        {
            "dateadded": "2026-04-21 22:10:15 UTC",
            "url": "http://113.231.226.20:52483/i",
            "url_status": "offline",
            "last_online": "2026-04-26 19:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828085/",
            "reporter": "geenensp"
        }
    ],
    "3828084": [
        {
            "dateadded": "2026-04-21 22:08:07 UTC",
            "url": "https://luna-nod.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828084/",
            "reporter": "anonymous"
        }
    ],
    "3828083": [
        {
            "dateadded": "2026-04-21 22:07:11 UTC",
            "url": "http://117.223.143.121:42796/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828083/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828082": [
        {
            "dateadded": "2026-04-21 22:07:08 UTC",
            "url": "http://114.228.241.141:38844/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828082/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828081": [
        {
            "dateadded": "2026-04-21 22:07:06 UTC",
            "url": "http://123.14.156.128:40022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828081/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828080": [
        {
            "dateadded": "2026-04-21 22:04:10 UTC",
            "url": "https://t1ny-branch.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 22:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828080/",
            "reporter": "anonymous"
        }
    ],
    "3828079": [
        {
            "dateadded": "2026-04-21 21:57:06 UTC",
            "url": "https://qjdc65n.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828079/",
            "reporter": "anonymous"
        }
    ],
    "3828078": [
        {
            "dateadded": "2026-04-21 21:55:09 UTC",
            "url": "http://110.37.118.66:49180/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828078/",
            "reporter": "geenensp"
        }
    ],
    "3828077": [
        {
            "dateadded": "2026-04-21 21:53:16 UTC",
            "url": "http://176.121.199.3:31642/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:43:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828077/",
            "reporter": "geenensp"
        }
    ],
    "3828076": [
        {
            "dateadded": "2026-04-21 21:52:09 UTC",
            "url": "https://fabr2-path.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828076/",
            "reporter": "anonymous"
        }
    ],
    "3828075": [
        {
            "dateadded": "2026-04-21 21:48:18 UTC",
            "url": "http://110.138.4.108:55673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:29:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828075/",
            "reporter": "geenensp"
        }
    ],
    "3828074": [
        {
            "dateadded": "2026-04-21 21:46:15 UTC",
            "url": "http://123.10.238.130:56243/i",
            "url_status": "offline",
            "last_online": "2026-04-21 21:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828074/",
            "reporter": "geenensp"
        }
    ],
    "3828073": [
        {
            "dateadded": "2026-04-21 21:46:06 UTC",
            "url": "https://arkmark8um.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828073/",
            "reporter": "anonymous"
        }
    ],
    "3828062": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h3flood.x64",
            "url_status": "offline",
            "last_online": "2026-04-22 11:47:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828062/",
            "reporter": "botnetkiller"
        }
    ],
    "3828063": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h2rapidreset.s390x",
            "url_status": "offline",
            "last_online": "2026-04-22 08:16:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828063/",
            "reporter": "botnetkiller"
        }
    ],
    "3828064": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h2rapidreset.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-22 08:09:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828064/",
            "reporter": "botnetkiller"
        }
    ],
    "3828065": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h3flood.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-22 09:02:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828065/",
            "reporter": "botnetkiller"
        }
    ],
    "3828066": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h2stream.s390x",
            "url_status": "offline",
            "last_online": "2026-04-22 07:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828066/",
            "reporter": "botnetkiller"
        }
    ],
    "3828067": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h2stream.arm",
            "url_status": "offline",
            "last_online": "2026-04-22 08:05:42 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828067/",
            "reporter": "botnetkiller"
        }
    ],
    "3828068": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h3flood.s390x",
            "url_status": "offline",
            "last_online": "2026-04-22 08:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828068/",
            "reporter": "botnetkiller"
        }
    ],
    "3828069": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h2rapidreset.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-22 08:29:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828069/",
            "reporter": "botnetkiller"
        }
    ],
    "3828070": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h3flood.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 07:53:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828070/",
            "reporter": "botnetkiller"
        }
    ],
    "3828071": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h3flood.arm",
            "url_status": "offline",
            "last_online": "2026-04-22 08:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828071/",
            "reporter": "botnetkiller"
        }
    ],
    "3828072": [
        {
            "dateadded": "2026-04-21 21:45:38 UTC",
            "url": "http://176.65.139.8/h3flood.mips",
            "url_status": "offline",
            "last_online": "2026-04-22 07:47:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828072/",
            "reporter": "botnetkiller"
        }
    ],
    "3828057": [
        {
            "dateadded": "2026-04-21 21:45:37 UTC",
            "url": "http://176.65.139.8/h2stream.mips",
            "url_status": "offline",
            "last_online": "2026-04-22 09:04:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828057/",
            "reporter": "botnetkiller"
        }
    ],
    "3828058": [
        {
            "dateadded": "2026-04-21 21:45:37 UTC",
            "url": "http://176.65.139.8/h2stream.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-22 09:04:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828058/",
            "reporter": "botnetkiller"
        }
    ],
    "3828059": [
        {
            "dateadded": "2026-04-21 21:45:37 UTC",
            "url": "http://176.65.139.8/h2rapidreset.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 08:20:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828059/",
            "reporter": "botnetkiller"
        }
    ],
    "3828060": [
        {
            "dateadded": "2026-04-21 21:45:37 UTC",
            "url": "http://176.65.139.8/h2rapidreset.x64",
            "url_status": "offline",
            "last_online": "2026-04-22 07:23:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828060/",
            "reporter": "botnetkiller"
        }
    ],
    "3828061": [
        {
            "dateadded": "2026-04-21 21:45:37 UTC",
            "url": "http://176.65.139.8/h3flood.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-22 08:44:38 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828061/",
            "reporter": "botnetkiller"
        }
    ],
    "3828055": [
        {
            "dateadded": "2026-04-21 21:45:35 UTC",
            "url": "http://176.65.139.8/h2stream.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-22 08:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828055/",
            "reporter": "botnetkiller"
        }
    ],
    "3828056": [
        {
            "dateadded": "2026-04-21 21:45:35 UTC",
            "url": "http://176.65.139.8/h3flood.mips64",
            "url_status": "offline",
            "last_online": "2026-04-22 07:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828056/",
            "reporter": "botnetkiller"
        }
    ],
    "3828054": [
        {
            "dateadded": "2026-04-21 21:45:17 UTC",
            "url": "http://176.65.139.8/h2rapidreset.ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 07:41:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828054/",
            "reporter": "botnetkiller"
        }
    ],
    "3828045": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2stream.mips64",
            "url_status": "offline",
            "last_online": "2026-04-22 12:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828045/",
            "reporter": "botnetkiller"
        }
    ],
    "3828046": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2stream.ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 07:46:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828046/",
            "reporter": "botnetkiller"
        }
    ],
    "3828047": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2rapidreset.mips",
            "url_status": "offline",
            "last_online": "2026-04-22 08:16:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828047/",
            "reporter": "botnetkiller"
        }
    ],
    "3828048": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2rapidreset.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-22 07:55:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828048/",
            "reporter": "botnetkiller"
        }
    ],
    "3828049": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2stream.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-22 07:51:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828049/",
            "reporter": "botnetkiller"
        }
    ],
    "3828050": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2rapidreset.arm",
            "url_status": "offline",
            "last_online": "2026-04-22 12:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828050/",
            "reporter": "botnetkiller"
        }
    ],
    "3828051": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h2rapidreset.mips64",
            "url_status": "offline",
            "last_online": "2026-04-22 07:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828051/",
            "reporter": "botnetkiller"
        }
    ],
    "3828052": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h3flood.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-22 11:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828052/",
            "reporter": "botnetkiller"
        }
    ],
    "3828053": [
        {
            "dateadded": "2026-04-21 21:44:31 UTC",
            "url": "http://176.65.139.8/h3flood.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-22 08:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828053/",
            "reporter": "botnetkiller"
        }
    ],
    "3828042": [
        {
            "dateadded": "2026-04-21 21:44:30 UTC",
            "url": "http://176.65.139.8/h2rapidreset.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-22 11:49:02 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828042/",
            "reporter": "botnetkiller"
        }
    ],
    "3828043": [
        {
            "dateadded": "2026-04-21 21:44:30 UTC",
            "url": "http://176.65.139.8/h2stream.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-22 08:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828043/",
            "reporter": "botnetkiller"
        }
    ],
    "3828044": [
        {
            "dateadded": "2026-04-21 21:44:30 UTC",
            "url": "http://176.65.139.8/h2stream.x64",
            "url_status": "offline",
            "last_online": "2026-04-22 08:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828044/",
            "reporter": "botnetkiller"
        }
    ],
    "3828038": [
        {
            "dateadded": "2026-04-21 21:44:26 UTC",
            "url": "http://176.65.139.8/bot.s390x",
            "url_status": "offline",
            "last_online": "2026-04-22 08:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828038/",
            "reporter": "botnetkiller"
        }
    ],
    "3828039": [
        {
            "dateadded": "2026-04-21 21:44:26 UTC",
            "url": "http://176.65.139.8/h3flood.ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 08:44:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828039/",
            "reporter": "botnetkiller"
        }
    ],
    "3828040": [
        {
            "dateadded": "2026-04-21 21:44:26 UTC",
            "url": "http://176.65.139.8/h2stream.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 08:34:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828040/",
            "reporter": "botnetkiller"
        }
    ],
    "3828041": [
        {
            "dateadded": "2026-04-21 21:44:26 UTC",
            "url": "http://176.65.139.8/bot.arm",
            "url_status": "offline",
            "last_online": "2026-04-22 07:49:26 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828041/",
            "reporter": "botnetkiller"
        }
    ],
    "3828037": [
        {
            "dateadded": "2026-04-21 21:44:25 UTC",
            "url": "http://176.65.139.8/bot.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-22 07:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828037/",
            "reporter": "botnetkiller"
        }
    ],
    "3828036": [
        {
            "dateadded": "2026-04-21 21:44:24 UTC",
            "url": "http://176.65.139.8/bot.riscv64",
            "url_status": "offline",
            "last_online": "2026-04-22 11:41:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828036/",
            "reporter": "botnetkiller"
        }
    ],
    "3828035": [
        {
            "dateadded": "2026-04-21 21:43:20 UTC",
            "url": "http://176.65.139.8/bot.mips64",
            "url_status": "offline",
            "last_online": "2026-04-22 08:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828035/",
            "reporter": "botnetkiller"
        }
    ],
    "3828028": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/wget.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:43:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828028/",
            "reporter": "botnetkiller"
        }
    ],
    "3828029": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/bot.mips64el",
            "url_status": "offline",
            "last_online": "2026-04-22 07:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828029/",
            "reporter": "botnetkiller"
        }
    ],
    "3828030": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/bot.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 08:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828030/",
            "reporter": "botnetkiller"
        }
    ],
    "3828031": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/bot.x64",
            "url_status": "offline",
            "last_online": "2026-04-22 08:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828031/",
            "reporter": "botnetkiller"
        }
    ],
    "3828032": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/bot.ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 07:52:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828032/",
            "reporter": "botnetkiller"
        }
    ],
    "3828033": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/bot.mips",
            "url_status": "offline",
            "last_online": "2026-04-22 08:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828033/",
            "reporter": "botnetkiller"
        }
    ],
    "3828034": [
        {
            "dateadded": "2026-04-21 21:43:12 UTC",
            "url": "http://176.65.139.8/bot.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-22 07:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828034/",
            "reporter": "botnetkiller"
        }
    ],
    "3828027": [
        {
            "dateadded": "2026-04-21 21:41:07 UTC",
            "url": "https://lumcrest0is.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828027/",
            "reporter": "anonymous"
        }
    ],
    "3828026": [
        {
            "dateadded": "2026-04-21 21:36:09 UTC",
            "url": "https://closedsun.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828026/",
            "reporter": "anonymous"
        }
    ],
    "3828025": [
        {
            "dateadded": "2026-04-21 21:32:06 UTC",
            "url": "http://123.129.134.47:49044/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828025/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3828020": [
        {
            "dateadded": "2026-04-21 21:30:15 UTC",
            "url": "http://176.65.139.143/ARMV5L",
            "url_status": "offline",
            "last_online": "2026-04-25 06:26:03 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "geofenced",
                "opendir",
                "ua-wget",
                "USA"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828020/",
            "reporter": "botnetkiller"
        }
    ],
    "3828021": [
        {
            "dateadded": "2026-04-21 21:30:15 UTC",
            "url": "http://176.65.139.143/ARMV6L",
            "url_status": "offline",
            "last_online": "2026-04-25 06:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828021/",
            "reporter": "botnetkiller"
        }
    ],
    "3828022": [
        {
            "dateadded": "2026-04-21 21:30:15 UTC",
            "url": "http://176.65.139.143/I686",
            "url_status": "offline",
            "last_online": "2026-04-25 05:09:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828022/",
            "reporter": "botnetkiller"
        }
    ],
    "3828023": [
        {
            "dateadded": "2026-04-21 21:30:15 UTC",
            "url": "http://176.65.139.143/X86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 05:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828023/",
            "reporter": "botnetkiller"
        }
    ],
    "3828024": [
        {
            "dateadded": "2026-04-21 21:30:15 UTC",
            "url": "http://176.65.139.143/ARMV4L",
            "url_status": "offline",
            "last_online": "2026-04-25 06:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828024/",
            "reporter": "botnetkiller"
        }
    ],
    "3828019": [
        {
            "dateadded": "2026-04-21 21:30:11 UTC",
            "url": "https://zty3nf.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828019/",
            "reporter": "anonymous"
        }
    ],
    "3828016": [
        {
            "dateadded": "2026-04-21 21:29:12 UTC",
            "url": "http://176.65.139.143/SPARC",
            "url_status": "offline",
            "last_online": "2026-04-25 06:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828016/",
            "reporter": "botnetkiller"
        }
    ],
    "3828017": [
        {
            "dateadded": "2026-04-21 21:29:12 UTC",
            "url": "http://176.65.139.143/SH4",
            "url_status": "offline",
            "last_online": "2026-04-25 05:16:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828017/",
            "reporter": "botnetkiller"
        }
    ],
    "3828018": [
        {
            "dateadded": "2026-04-21 21:29:12 UTC",
            "url": "http://176.65.139.143/MIPSEL",
            "url_status": "offline",
            "last_online": "2026-04-25 05:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828018/",
            "reporter": "botnetkiller"
        }
    ],
    "3828012": [
        {
            "dateadded": "2026-04-21 21:29:11 UTC",
            "url": "http://176.65.139.143/I586",
            "url_status": "offline",
            "last_online": "2026-04-25 06:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828012/",
            "reporter": "botnetkiller"
        }
    ],
    "3828013": [
        {
            "dateadded": "2026-04-21 21:29:11 UTC",
            "url": "http://176.65.139.143/MIPS",
            "url_status": "offline",
            "last_online": "2026-04-25 06:00:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828013/",
            "reporter": "botnetkiller"
        }
    ],
    "3828014": [
        {
            "dateadded": "2026-04-21 21:29:11 UTC",
            "url": "http://176.65.139.143/POWERPC",
            "url_status": "offline",
            "last_online": "2026-04-25 05:55:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828014/",
            "reporter": "botnetkiller"
        }
    ],
    "3828015": [
        {
            "dateadded": "2026-04-21 21:29:11 UTC",
            "url": "http://176.65.139.143/M68K",
            "url_status": "offline",
            "last_online": "2026-04-25 05:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828015/",
            "reporter": "botnetkiller"
        }
    ],
    "3828010": [
        {
            "dateadded": "2026-04-21 21:28:16 UTC",
            "url": "http://176.65.139.143/ARMV7L",
            "url_status": "offline",
            "last_online": "2026-04-25 05:02:26 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828010/",
            "reporter": "botnetkiller"
        }
    ],
    "3828011": [
        {
            "dateadded": "2026-04-21 21:28:16 UTC",
            "url": "http://176.65.139.143/Ciabins.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828011/",
            "reporter": "botnetkiller"
        }
    ],
    "3828009": [
        {
            "dateadded": "2026-04-21 21:26:19 UTC",
            "url": "https://204.76.203.196/clean",
            "url_status": "offline",
            "last_online": "2026-04-24 11:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828009/",
            "reporter": "NDA0E"
        }
    ],
    "3828007": [
        {
            "dateadded": "2026-04-21 21:25:19 UTC",
            "url": "https://204.76.203.196/i686",
            "url_status": "offline",
            "last_online": "2026-04-24 11:10:48 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828007/",
            "reporter": "NDA0E"
        }
    ],
    "3828008": [
        {
            "dateadded": "2026-04-21 21:25:19 UTC",
            "url": "https://204.76.203.196/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 11:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828008/",
            "reporter": "NDA0E"
        }
    ],
    "3828005": [
        {
            "dateadded": "2026-04-21 21:25:10 UTC",
            "url": "https://204.76.203.196/arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 11:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828005/",
            "reporter": "NDA0E"
        }
    ],
    "3828006": [
        {
            "dateadded": "2026-04-21 21:25:10 UTC",
            "url": "https://z7wb.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828006/",
            "reporter": "anonymous"
        }
    ],
    "3828004": [
        {
            "dateadded": "2026-04-21 21:25:09 UTC",
            "url": "https://204.76.203.196/aarch64",
            "url_status": "offline",
            "last_online": "2026-04-24 11:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828004/",
            "reporter": "NDA0E"
        }
    ],
    "3828003": [
        {
            "dateadded": "2026-04-21 21:21:12 UTC",
            "url": "https://204.76.203.196/sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "redtail",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828003/",
            "reporter": "NDA0E"
        }
    ],
    "3828002": [
        {
            "dateadded": "2026-04-21 21:19:07 UTC",
            "url": "https://d4rk-panel.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828002/",
            "reporter": "anonymous"
        }
    ],
    "3828001": [
        {
            "dateadded": "2026-04-21 21:14:11 UTC",
            "url": "https://tofk4.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828001/",
            "reporter": "anonymous"
        }
    ],
    "3828000": [
        {
            "dateadded": "2026-04-21 21:08:07 UTC",
            "url": "http://123.9.89.14:34217/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:53:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3828000/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827998": [
        {
            "dateadded": "2026-04-21 21:07:09 UTC",
            "url": "http://113.94.31.121:52659/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:27:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827998/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827999": [
        {
            "dateadded": "2026-04-21 21:07:09 UTC",
            "url": "https://grow9-craft.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827999/",
            "reporter": "anonymous"
        }
    ],
    "3827996": [
        {
            "dateadded": "2026-04-21 21:06:17 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 10:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827996/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827997": [
        {
            "dateadded": "2026-04-21 21:06:17 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 05:04:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827997/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827995": [
        {
            "dateadded": "2026-04-21 21:05:19 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 05:50:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827995/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827987": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 10:59:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827987/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827988": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 05:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827988/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827989": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.arc",
            "url_status": "offline",
            "last_online": "2026-04-24 10:49:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827989/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827990": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.spc",
            "url_status": "offline",
            "last_online": "2026-04-24 05:57:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827990/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827991": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.mips",
            "url_status": "offline",
            "last_online": "2026-04-24 10:56:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827991/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827992": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 07:25:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827992/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827993": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.arm",
            "url_status": "offline",
            "last_online": "2026-04-24 08:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827993/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827994": [
        {
            "dateadded": "2026-04-21 21:04:22 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 10:54:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827994/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827984": [
        {
            "dateadded": "2026-04-21 21:04:21 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.i686",
            "url_status": "offline",
            "last_online": "2026-04-24 07:45:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827984/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827985": [
        {
            "dateadded": "2026-04-21 21:04:21 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 05:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827985/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827986": [
        {
            "dateadded": "2026-04-21 21:04:21 UTC",
            "url": "http://176.65.148.49/hiddenbin/Space.x86",
            "url_status": "offline",
            "last_online": "2026-04-24 11:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827986/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3827983": [
        {
            "dateadded": "2026-04-21 21:03:09 UTC",
            "url": "https://splitorche.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 21:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827983/",
            "reporter": "anonymous"
        }
    ],
    "3827982": [
        {
            "dateadded": "2026-04-21 21:02:19 UTC",
            "url": "http://59.98.69.33:56800/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:52:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827982/",
            "reporter": "geenensp"
        }
    ],
    "3827981": [
        {
            "dateadded": "2026-04-21 21:02:07 UTC",
            "url": "http://123.129.134.47:49044/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827981/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827980": [
        {
            "dateadded": "2026-04-21 21:01:16 UTC",
            "url": "http://83.68.250.0:34226/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827980/",
            "reporter": "geenensp"
        }
    ],
    "3827979": [
        {
            "dateadded": "2026-04-21 20:59:18 UTC",
            "url": "http://81.230.148.181:40652/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:17:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827979/",
            "reporter": "geenensp"
        }
    ],
    "3827978": [
        {
            "dateadded": "2026-04-21 20:57:09 UTC",
            "url": "https://neo-c4rri.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827978/",
            "reporter": "anonymous"
        }
    ],
    "3827977": [
        {
            "dateadded": "2026-04-21 20:52:24 UTC",
            "url": "http://123.189.134.198:40571/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827977/",
            "reporter": "geenensp"
        }
    ],
    "3827976": [
        {
            "dateadded": "2026-04-21 20:51:09 UTC",
            "url": "https://4mbe-wave.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827976/",
            "reporter": "anonymous"
        }
    ],
    "3827975": [
        {
            "dateadded": "2026-04-21 20:50:11 UTC",
            "url": "http://222.127.196.117:59183/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:40:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827975/",
            "reporter": "geenensp"
        }
    ],
    "3827974": [
        {
            "dateadded": "2026-04-21 20:45:10 UTC",
            "url": "https://m46v.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827974/",
            "reporter": "anonymous"
        }
    ],
    "3827973": [
        {
            "dateadded": "2026-04-21 20:41:08 UTC",
            "url": "https://6347.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827973/",
            "reporter": "anonymous"
        }
    ],
    "3827972": [
        {
            "dateadded": "2026-04-21 20:37:08 UTC",
            "url": "http://123.9.89.14:34217/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:15:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827972/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827971": [
        {
            "dateadded": "2026-04-21 20:37:07 UTC",
            "url": "http://123.11.11.206:35702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:03:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827971/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827970": [
        {
            "dateadded": "2026-04-21 20:35:11 UTC",
            "url": "https://1aqmr.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827970/",
            "reporter": "anonymous"
        }
    ],
    "3827969": [
        {
            "dateadded": "2026-04-21 20:29:08 UTC",
            "url": "https://decode-fac.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827969/",
            "reporter": "anonymous"
        }
    ],
    "3827968": [
        {
            "dateadded": "2026-04-21 20:24:16 UTC",
            "url": "http://83.68.250.0:34226/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827968/",
            "reporter": "geenensp"
        }
    ],
    "3827967": [
        {
            "dateadded": "2026-04-21 20:24:11 UTC",
            "url": "https://delihyp.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827967/",
            "reporter": "anonymous"
        }
    ],
    "3827966": [
        {
            "dateadded": "2026-04-21 20:22:17 UTC",
            "url": "http://42.231.89.103:42514/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:49:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827966/",
            "reporter": "geenensp"
        }
    ],
    "3827965": [
        {
            "dateadded": "2026-04-21 20:19:12 UTC",
            "url": "http://59.42.88.166:56735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827965/",
            "reporter": "geenensp"
        }
    ],
    "3827964": [
        {
            "dateadded": "2026-04-21 20:18:10 UTC",
            "url": "https://dawn-route.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827964/",
            "reporter": "anonymous"
        }
    ],
    "3827963": [
        {
            "dateadded": "2026-04-21 20:13:08 UTC",
            "url": "https://rural-drive.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827963/",
            "reporter": "anonymous"
        }
    ],
    "3827962": [
        {
            "dateadded": "2026-04-21 20:12:17 UTC",
            "url": "http://208.84.100.209/mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827962/",
            "reporter": "botnetkiller"
        }
    ],
    "3827961": [
        {
            "dateadded": "2026-04-21 20:11:10 UTC",
            "url": "http://42.232.226.192:44834/i",
            "url_status": "offline",
            "last_online": "2026-04-21 20:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827961/",
            "reporter": "geenensp"
        }
    ],
    "3827960": [
        {
            "dateadded": "2026-04-21 20:10:20 UTC",
            "url": "http://42.232.226.192:44834/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 20:10:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827960/",
            "reporter": "geenensp"
        }
    ],
    "3827958": [
        {
            "dateadded": "2026-04-21 20:07:08 UTC",
            "url": "http://39.82.87.38:41895/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:56:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827958/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827959": [
        {
            "dateadded": "2026-04-21 20:07:08 UTC",
            "url": "https://xeeeto.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827959/",
            "reporter": "anonymous"
        }
    ],
    "3827957": [
        {
            "dateadded": "2026-04-21 20:05:20 UTC",
            "url": "http://222.127.196.117:59183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:23:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827957/",
            "reporter": "geenensp"
        }
    ],
    "3827956": [
        {
            "dateadded": "2026-04-21 20:01:10 UTC",
            "url": "https://0n6rt.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 20:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827956/",
            "reporter": "anonymous"
        }
    ],
    "3827955": [
        {
            "dateadded": "2026-04-21 19:57:08 UTC",
            "url": "http://39.82.87.38:41895/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:21:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827955/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827954": [
        {
            "dateadded": "2026-04-21 19:56:11 UTC",
            "url": "https://5he1l-sheet.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827954/",
            "reporter": "anonymous"
        }
    ],
    "3827953": [
        {
            "dateadded": "2026-04-21 19:55:19 UTC",
            "url": "http://42.228.216.214:41123/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:13:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827953/",
            "reporter": "geenensp"
        }
    ],
    "3827952": [
        {
            "dateadded": "2026-04-21 19:54:10 UTC",
            "url": "http://42.234.206.56:43941/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:33:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827952/",
            "reporter": "geenensp"
        }
    ],
    "3827951": [
        {
            "dateadded": "2026-04-21 19:50:09 UTC",
            "url": "https://dyncoreis3.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827951/",
            "reporter": "anonymous"
        }
    ],
    "3827950": [
        {
            "dateadded": "2026-04-21 19:48:16 UTC",
            "url": "http://42.231.89.103:42514/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 22:44:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827950/",
            "reporter": "geenensp"
        }
    ],
    "3827949": [
        {
            "dateadded": "2026-04-21 19:47:10 UTC",
            "url": "https://narcore.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827949/",
            "reporter": "anonymous"
        }
    ],
    "3827948": [
        {
            "dateadded": "2026-04-21 19:44:16 UTC",
            "url": "https://655f.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:44:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827948/",
            "reporter": "anonymous"
        }
    ],
    "3827947": [
        {
            "dateadded": "2026-04-21 19:33:13 UTC",
            "url": "https://p9hda.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827947/",
            "reporter": "anonymous"
        }
    ],
    "3827946": [
        {
            "dateadded": "2026-04-21 19:31:13 UTC",
            "url": "http://42.177.23.23:59988/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827946/",
            "reporter": "geenensp"
        }
    ],
    "3827945": [
        {
            "dateadded": "2026-04-21 19:29:09 UTC",
            "url": "https://hblrl.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827945/",
            "reporter": "anonymous"
        }
    ],
    "3827944": [
        {
            "dateadded": "2026-04-21 19:27:19 UTC",
            "url": "http://222.141.140.213:38141/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:48:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827944/",
            "reporter": "geenensp"
        }
    ],
    "3827943": [
        {
            "dateadded": "2026-04-21 19:25:18 UTC",
            "url": "http://222.138.87.130:56328/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:46:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827943/",
            "reporter": "geenensp"
        }
    ],
    "3827942": [
        {
            "dateadded": "2026-04-21 19:23:11 UTC",
            "url": "https://channe1-hold.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827942/",
            "reporter": "anonymous"
        }
    ],
    "3827941": [
        {
            "dateadded": "2026-04-21 19:19:07 UTC",
            "url": "https://notiflame.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827941/",
            "reporter": "anonymous"
        }
    ],
    "3827940": [
        {
            "dateadded": "2026-04-21 19:17:28 UTC",
            "url": "http://42.56.2.62:46373/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827940/",
            "reporter": "geenensp"
        }
    ],
    "3827939": [
        {
            "dateadded": "2026-04-21 19:16:10 UTC",
            "url": "https://winttra.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827939/",
            "reporter": "anonymous"
        }
    ],
    "3827938": [
        {
            "dateadded": "2026-04-21 19:06:15 UTC",
            "url": "https://alt-c4pita.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:06:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827938/",
            "reporter": "anonymous"
        }
    ],
    "3827937": [
        {
            "dateadded": "2026-04-21 19:02:06 UTC",
            "url": "http://115.63.13.9:40062/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827937/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827936": [
        {
            "dateadded": "2026-04-21 19:01:13 UTC",
            "url": "http://221.14.172.96:56776/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:44:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827936/",
            "reporter": "geenensp"
        }
    ],
    "3827934": [
        {
            "dateadded": "2026-04-21 19:01:10 UTC",
            "url": "http://62.60.226.200/public_files/ndZKSNL.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827934/",
            "reporter": "abuse_ch"
        }
    ],
    "3827935": [
        {
            "dateadded": "2026-04-21 19:01:10 UTC",
            "url": "http://62.60.226.200/public_files/wb9HW4Y.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:53 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827935/",
            "reporter": "abuse_ch"
        }
    ],
    "3827933": [
        {
            "dateadded": "2026-04-21 19:01:09 UTC",
            "url": "http://62.60.226.200/public_files/ZXgR0l8.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827933/",
            "reporter": "abuse_ch"
        }
    ],
    "3827932": [
        {
            "dateadded": "2026-04-21 19:01:07 UTC",
            "url": "https://guidelocal.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 19:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827932/",
            "reporter": "anonymous"
        }
    ],
    "3827931": [
        {
            "dateadded": "2026-04-21 18:57:20 UTC",
            "url": "http://196.190.224.62:52644/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827931/",
            "reporter": "geenensp"
        }
    ],
    "3827930": [
        {
            "dateadded": "2026-04-21 18:55:07 UTC",
            "url": "https://v3lvet-core.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:55:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827930/",
            "reporter": "anonymous"
        }
    ],
    "3827929": [
        {
            "dateadded": "2026-04-21 18:52:08 UTC",
            "url": "https://split-mesh.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827929/",
            "reporter": "anonymous"
        }
    ],
    "3827928": [
        {
            "dateadded": "2026-04-21 18:48:08 UTC",
            "url": "https://nr76.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827928/",
            "reporter": "anonymous"
        }
    ],
    "3827927": [
        {
            "dateadded": "2026-04-21 18:45:18 UTC",
            "url": "http://42.56.2.62:46373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827927/",
            "reporter": "geenensp"
        }
    ],
    "3827926": [
        {
            "dateadded": "2026-04-21 18:41:09 UTC",
            "url": "http://31.148.198.246:50475/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827926/",
            "reporter": "geenensp"
        }
    ],
    "3827925": [
        {
            "dateadded": "2026-04-21 18:39:09 UTC",
            "url": "https://ujv18y.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827925/",
            "reporter": "anonymous"
        }
    ],
    "3827924": [
        {
            "dateadded": "2026-04-21 18:32:13 UTC",
            "url": "https://sol-spireix.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827924/",
            "reporter": "anonymous"
        }
    ],
    "3827923": [
        {
            "dateadded": "2026-04-21 18:29:19 UTC",
            "url": "http://221.14.172.96:56776/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827923/",
            "reporter": "geenensp"
        }
    ],
    "3827922": [
        {
            "dateadded": "2026-04-21 18:28:09 UTC",
            "url": "https://profitconvo.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827922/",
            "reporter": "anonymous"
        }
    ],
    "3827921": [
        {
            "dateadded": "2026-04-21 18:27:07 UTC",
            "url": "http://115.55.247.249:49641/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:09:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827921/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827920": [
        {
            "dateadded": "2026-04-21 18:25:18 UTC",
            "url": "http://196.190.224.62:52644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:25:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827920/",
            "reporter": "geenensp"
        }
    ],
    "3827919": [
        {
            "dateadded": "2026-04-21 18:22:09 UTC",
            "url": "https://pack3-frame.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827919/",
            "reporter": "anonymous"
        }
    ],
    "3827918": [
        {
            "dateadded": "2026-04-21 18:16:11 UTC",
            "url": "https://xvy42z.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827918/",
            "reporter": "anonymous"
        }
    ],
    "3827917": [
        {
            "dateadded": "2026-04-21 18:11:13 UTC",
            "url": "https://talline5ix.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827917/",
            "reporter": "anonymous"
        }
    ],
    "3827916": [
        {
            "dateadded": "2026-04-21 18:05:15 UTC",
            "url": "https://geo-illurn.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827916/",
            "reporter": "anonymous"
        }
    ],
    "3827915": [
        {
            "dateadded": "2026-04-21 18:02:12 UTC",
            "url": "https://wagcrate.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 18:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827915/",
            "reporter": "anonymous"
        }
    ],
    "3827914": [
        {
            "dateadded": "2026-04-21 17:59:21 UTC",
            "url": "http://42.224.85.221:51076/i",
            "url_status": "offline",
            "last_online": "2026-04-22 00:08:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827914/",
            "reporter": "geenensp"
        }
    ],
    "3827913": [
        {
            "dateadded": "2026-04-21 17:59:12 UTC",
            "url": "https://silverspecimen.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827913/",
            "reporter": "anonymous"
        }
    ],
    "3827912": [
        {
            "dateadded": "2026-04-21 17:57:08 UTC",
            "url": "http://123.148.223.0:51569/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827912/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827911": [
        {
            "dateadded": "2026-04-21 17:56:12 UTC",
            "url": "http://115.54.177.80:55819/i",
            "url_status": "offline",
            "last_online": "2026-04-22 04:58:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827911/",
            "reporter": "geenensp"
        }
    ],
    "3827910": [
        {
            "dateadded": "2026-04-21 17:49:17 UTC",
            "url": "http://196.189.197.131:53404/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:04:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827910/",
            "reporter": "geenensp"
        }
    ],
    "3827909": [
        {
            "dateadded": "2026-04-21 17:48:11 UTC",
            "url": "https://quorvale0os.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827909/",
            "reporter": "anonymous"
        }
    ],
    "3827908": [
        {
            "dateadded": "2026-04-21 17:47:07 UTC",
            "url": "http://42.227.207.154:50721/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827908/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827907": [
        {
            "dateadded": "2026-04-21 17:45:11 UTC",
            "url": "https://sh4d-logic.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827907/",
            "reporter": "anonymous"
        }
    ],
    "3827906": [
        {
            "dateadded": "2026-04-21 17:42:09 UTC",
            "url": "https://ultra-5ort.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827906/",
            "reporter": "anonymous"
        }
    ],
    "3827905": [
        {
            "dateadded": "2026-04-21 17:35:21 UTC",
            "url": "http://162.255.251.91:40543/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:29:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827905/",
            "reporter": "geenensp"
        }
    ],
    "3827904": [
        {
            "dateadded": "2026-04-21 17:35:20 UTC",
            "url": "http://115.54.177.80:55819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:32:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827904/",
            "reporter": "geenensp"
        }
    ],
    "3827903": [
        {
            "dateadded": "2026-04-21 17:32:14 UTC",
            "url": "https://colorcast.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827903/",
            "reporter": "anonymous"
        }
    ],
    "3827902": [
        {
            "dateadded": "2026-04-21 17:32:10 UTC",
            "url": "http://123.148.223.0:51569/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827902/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827901": [
        {
            "dateadded": "2026-04-21 17:29:22 UTC",
            "url": "http://115.54.158.203:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827901/",
            "reporter": "geenensp"
        }
    ],
    "3827900": [
        {
            "dateadded": "2026-04-21 17:26:16 UTC",
            "url": "https://ggtqa.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827900/",
            "reporter": "anonymous"
        }
    ],
    "3827899": [
        {
            "dateadded": "2026-04-21 17:24:18 UTC",
            "url": "http://78.140.248.242:4022/.i",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "hajime",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827899/",
            "reporter": "NDA0E"
        }
    ],
    "3827898": [
        {
            "dateadded": "2026-04-21 17:21:20 UTC",
            "url": "https://0jw813sl.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:21:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827898/",
            "reporter": "anonymous"
        }
    ],
    "3827897": [
        {
            "dateadded": "2026-04-21 17:17:07 UTC",
            "url": "http://42.227.207.154:50721/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827897/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827896": [
        {
            "dateadded": "2026-04-21 17:16:10 UTC",
            "url": "https://oifwmo.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827896/",
            "reporter": "anonymous"
        }
    ],
    "3827895": [
        {
            "dateadded": "2026-04-21 17:12:24 UTC",
            "url": "https://sub-p4tt.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:12:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827895/",
            "reporter": "anonymous"
        }
    ],
    "3827894": [
        {
            "dateadded": "2026-04-21 17:07:24 UTC",
            "url": "http://162.255.251.91:40543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:18:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827894/",
            "reporter": "geenensp"
        }
    ],
    "3827893": [
        {
            "dateadded": "2026-04-21 17:05:17 UTC",
            "url": "https://retanetwo.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 17:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827893/",
            "reporter": "anonymous"
        }
    ],
    "3827892": [
        {
            "dateadded": "2026-04-21 16:59:12 UTC",
            "url": "https://dyntide0al.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827892/",
            "reporter": "anonymous"
        }
    ],
    "3827891": [
        {
            "dateadded": "2026-04-21 16:54:24 UTC",
            "url": "http://42.232.51.242:34880/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827891/",
            "reporter": "geenensp"
        }
    ],
    "3827890": [
        {
            "dateadded": "2026-04-21 16:53:17 UTC",
            "url": "http://42.232.51.242:34880/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827890/",
            "reporter": "geenensp"
        }
    ],
    "3827889": [
        {
            "dateadded": "2026-04-21 16:53:16 UTC",
            "url": "https://tal-lithet.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827889/",
            "reporter": "anonymous"
        }
    ],
    "3827888": [
        {
            "dateadded": "2026-04-21 16:48:15 UTC",
            "url": "https://pr1rne-plate.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:48:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827888/",
            "reporter": "anonymous"
        }
    ],
    "3827887": [
        {
            "dateadded": "2026-04-21 16:47:21 UTC",
            "url": "http://61.53.75.236:42069/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:16:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827887/",
            "reporter": "geenensp"
        }
    ],
    "3827886": [
        {
            "dateadded": "2026-04-21 16:44:19 UTC",
            "url": "http://123.10.240.29:53152/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:50:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827886/",
            "reporter": "geenensp"
        }
    ],
    "3827885": [
        {
            "dateadded": "2026-04-21 16:42:14 UTC",
            "url": "https://kelven9et.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827885/",
            "reporter": "anonymous"
        }
    ],
    "3827884": [
        {
            "dateadded": "2026-04-21 16:38:12 UTC",
            "url": "https://kelmarkis.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827884/",
            "reporter": "anonymous"
        }
    ],
    "3827883": [
        {
            "dateadded": "2026-04-21 16:37:07 UTC",
            "url": "http://110.37.111.110:34451/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827883/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827882": [
        {
            "dateadded": "2026-04-21 16:31:14 UTC",
            "url": "http://61.216.49.131:38369/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:50:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827882/",
            "reporter": "geenensp"
        }
    ],
    "3827881": [
        {
            "dateadded": "2026-04-21 16:31:13 UTC",
            "url": "https://cool5-chain.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827881/",
            "reporter": "anonymous"
        }
    ],
    "3827880": [
        {
            "dateadded": "2026-04-21 16:31:11 UTC",
            "url": "http://42.224.97.127:55464/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827880/",
            "reporter": "geenensp"
        }
    ],
    "3827879": [
        {
            "dateadded": "2026-04-21 16:28:13 UTC",
            "url": "http://175.169.104.199:40537/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:42:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827879/",
            "reporter": "geenensp"
        }
    ],
    "3827878": [
        {
            "dateadded": "2026-04-21 16:26:09 UTC",
            "url": "https://crat-mark.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827878/",
            "reporter": "anonymous"
        }
    ],
    "3827877": [
        {
            "dateadded": "2026-04-21 16:20:11 UTC",
            "url": "https://vel-markal.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827877/",
            "reporter": "anonymous"
        }
    ],
    "3827876": [
        {
            "dateadded": "2026-04-21 16:15:11 UTC",
            "url": "https://extendvia.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827876/",
            "reporter": "anonymous"
        }
    ],
    "3827875": [
        {
            "dateadded": "2026-04-21 16:13:09 UTC",
            "url": "https://erzurumyoresel.com/erzurumyoresel.zip",
            "url_status": "offline",
            "last_online": "2026-04-24 05:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827875/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3827874": [
        {
            "dateadded": "2026-04-21 16:10:10 UTC",
            "url": "https://974xwaj.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827874/",
            "reporter": "anonymous"
        }
    ],
    "3827873": [
        {
            "dateadded": "2026-04-21 16:04:07 UTC",
            "url": "https://qjhle.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 16:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827873/",
            "reporter": "anonymous"
        }
    ],
    "3827872": [
        {
            "dateadded": "2026-04-21 16:03:22 UTC",
            "url": "http://61.216.49.131:38369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 00:08:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827872/",
            "reporter": "geenensp"
        }
    ],
    "3827871": [
        {
            "dateadded": "2026-04-21 16:01:17 UTC",
            "url": "http://61.53.75.236:42069/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827871/",
            "reporter": "geenensp"
        }
    ],
    "3827870": [
        {
            "dateadded": "2026-04-21 15:58:08 UTC",
            "url": "https://tqeibj.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827870/",
            "reporter": "anonymous"
        }
    ],
    "3827869": [
        {
            "dateadded": "2026-04-21 15:55:19 UTC",
            "url": "http://42.230.46.75:56619/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:07:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827869/",
            "reporter": "geenensp"
        }
    ],
    "3827868": [
        {
            "dateadded": "2026-04-21 15:52:09 UTC",
            "url": "https://work-gran.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827868/",
            "reporter": "anonymous"
        }
    ],
    "3827867": [
        {
            "dateadded": "2026-04-21 15:49:19 UTC",
            "url": "http://123.12.177.139:49503/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827867/",
            "reporter": "geenensp"
        }
    ],
    "3827866": [
        {
            "dateadded": "2026-04-21 15:48:19 UTC",
            "url": "http://123.10.240.29:53152/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:31:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827866/",
            "reporter": "geenensp"
        }
    ],
    "3827865": [
        {
            "dateadded": "2026-04-21 15:47:15 UTC",
            "url": "https://1ich-track.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827865/",
            "reporter": "anonymous"
        }
    ],
    "3827864": [
        {
            "dateadded": "2026-04-21 15:44:45 UTC",
            "url": "http://110.37.118.66:49180/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827864/",
            "reporter": "geenensp"
        }
    ],
    "3827863": [
        {
            "dateadded": "2026-04-21 15:42:07 UTC",
            "url": "https://granitcuriou.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827863/",
            "reporter": "anonymous"
        }
    ],
    "3827862": [
        {
            "dateadded": "2026-04-21 15:38:09 UTC",
            "url": "http://178.16.54.109/grab.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:59 UTC",
            "threat": "malware_download",
            "tags": [
                "DeepLoad",
                "dropped-by-Phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827862/",
            "reporter": "Bitsight"
        }
    ],
    "3827861": [
        {
            "dateadded": "2026-04-21 15:37:10 UTC",
            "url": "http://178.16.54.109/grabb.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 05:18:38 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827861/",
            "reporter": "Bitsight"
        }
    ],
    "3827860": [
        {
            "dateadded": "2026-04-21 15:36:10 UTC",
            "url": "https://rebate-spe.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827860/",
            "reporter": "anonymous"
        }
    ],
    "3827859": [
        {
            "dateadded": "2026-04-21 15:32:07 UTC",
            "url": "http://110.37.111.110:34451/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 15:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827859/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827858": [
        {
            "dateadded": "2026-04-21 15:31:19 UTC",
            "url": "http://42.230.46.75:56619/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827858/",
            "reporter": "geenensp"
        }
    ],
    "3827857": [
        {
            "dateadded": "2026-04-21 15:31:09 UTC",
            "url": "https://fgeyw.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827857/",
            "reporter": "anonymous"
        }
    ],
    "3827856": [
        {
            "dateadded": "2026-04-21 15:27:07 UTC",
            "url": "http://125.41.8.150:34420/i",
            "url_status": "offline",
            "last_online": "2026-04-22 00:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827856/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827855": [
        {
            "dateadded": "2026-04-21 15:25:20 UTC",
            "url": "http://115.57.213.221:46307/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:13:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827855/",
            "reporter": "geenensp"
        }
    ],
    "3827854": [
        {
            "dateadded": "2026-04-21 15:24:18 UTC",
            "url": "http://123.12.177.139:49503/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827854/",
            "reporter": "geenensp"
        }
    ],
    "3827853": [
        {
            "dateadded": "2026-04-21 15:24:10 UTC",
            "url": "https://0udhnpx.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827853/",
            "reporter": "anonymous"
        }
    ],
    "3827852": [
        {
            "dateadded": "2026-04-21 15:23:26 UTC",
            "url": "http://175.147.72.197:58514/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:00:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827852/",
            "reporter": "geenensp"
        }
    ],
    "3827851": [
        {
            "dateadded": "2026-04-21 15:20:09 UTC",
            "url": "http://182.116.228.238:49290/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:14:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827851/",
            "reporter": "geenensp"
        }
    ],
    "3827850": [
        {
            "dateadded": "2026-04-21 15:19:10 UTC",
            "url": "https://uxld.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827850/",
            "reporter": "anonymous"
        }
    ],
    "3827849": [
        {
            "dateadded": "2026-04-21 15:16:20 UTC",
            "url": "http://105.184.92.18:58913/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827849/",
            "reporter": "geenensp"
        }
    ],
    "3827848": [
        {
            "dateadded": "2026-04-21 15:14:10 UTC",
            "url": "https://fier-cany.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827848/",
            "reporter": "anonymous"
        }
    ],
    "3827847": [
        {
            "dateadded": "2026-04-21 15:12:09 UTC",
            "url": "http://42.56.122.172:59648/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:58:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827847/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827846": [
        {
            "dateadded": "2026-04-21 15:12:07 UTC",
            "url": "http://125.41.8.150:34420/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:59:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827846/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827845": [
        {
            "dateadded": "2026-04-21 15:08:09 UTC",
            "url": "https://pyjq05.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827845/",
            "reporter": "anonymous"
        }
    ],
    "3827844": [
        {
            "dateadded": "2026-04-21 15:05:21 UTC",
            "url": "http://110.36.80.173:39637/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827844/",
            "reporter": "geenensp"
        }
    ],
    "3827843": [
        {
            "dateadded": "2026-04-21 15:03:13 UTC",
            "url": "https://777am.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 15:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827843/",
            "reporter": "anonymous"
        }
    ],
    "3827842": [
        {
            "dateadded": "2026-04-21 15:00:22 UTC",
            "url": "http://182.116.228.238:49290/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:56:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827842/",
            "reporter": "geenensp"
        }
    ],
    "3827841": [
        {
            "dateadded": "2026-04-21 14:58:07 UTC",
            "url": "https://moderntransit.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827841/",
            "reporter": "anonymous"
        }
    ],
    "3827840": [
        {
            "dateadded": "2026-04-21 14:51:10 UTC",
            "url": "https://1yqev.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827840/",
            "reporter": "anonymous"
        }
    ],
    "3827839": [
        {
            "dateadded": "2026-04-21 14:46:11 UTC",
            "url": "https://w2poohjf.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827839/",
            "reporter": "anonymous"
        }
    ],
    "3827838": [
        {
            "dateadded": "2026-04-21 14:45:19 UTC",
            "url": "http://105.184.92.18:58913/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827838/",
            "reporter": "geenensp"
        }
    ],
    "3827837": [
        {
            "dateadded": "2026-04-21 14:43:11 UTC",
            "url": "http://39.79.138.147:36311/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:18:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827837/",
            "reporter": "geenensp"
        }
    ],
    "3827836": [
        {
            "dateadded": "2026-04-21 14:41:07 UTC",
            "url": "https://zmxbt7t.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827836/",
            "reporter": "anonymous"
        }
    ],
    "3827835": [
        {
            "dateadded": "2026-04-21 14:35:17 UTC",
            "url": "https://stabiliz-watch.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827835/",
            "reporter": "anonymous"
        }
    ],
    "3827834": [
        {
            "dateadded": "2026-04-21 14:30:08 UTC",
            "url": "https://node-ult.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827834/",
            "reporter": "anonymous"
        }
    ],
    "3827833": [
        {
            "dateadded": "2026-04-21 14:26:10 UTC",
            "url": "https://eqov17u.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827833/",
            "reporter": "anonymous"
        }
    ],
    "3827832": [
        {
            "dateadded": "2026-04-21 14:25:21 UTC",
            "url": "http://113.225.44.209:46688/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827832/",
            "reporter": "geenensp"
        }
    ],
    "3827831": [
        {
            "dateadded": "2026-04-21 14:22:09 UTC",
            "url": "https://lumvenex2.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827831/",
            "reporter": "anonymous"
        }
    ],
    "3827830": [
        {
            "dateadded": "2026-04-21 14:21:22 UTC",
            "url": "http://125.163.91.246:60240/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:52:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827830/",
            "reporter": "geenensp"
        }
    ],
    "3827829": [
        {
            "dateadded": "2026-04-21 14:16:13 UTC",
            "url": "http://123.11.12.27:57114/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:00:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827829/",
            "reporter": "geenensp"
        }
    ],
    "3827828": [
        {
            "dateadded": "2026-04-21 14:13:14 UTC",
            "url": "http://171.37.81.174:53095/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827828/",
            "reporter": "geenensp"
        }
    ],
    "3827827": [
        {
            "dateadded": "2026-04-21 14:12:07 UTC",
            "url": "http://201.149.107.50:58594/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 14:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827827/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827826": [
        {
            "dateadded": "2026-04-21 14:10:10 UTC",
            "url": "https://vorfluxor1.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827826/",
            "reporter": "anonymous"
        }
    ],
    "3827825": [
        {
            "dateadded": "2026-04-21 14:05:10 UTC",
            "url": "https://st3r-dock.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 14:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827825/",
            "reporter": "anonymous"
        }
    ],
    "3827824": [
        {
            "dateadded": "2026-04-21 14:02:14 UTC",
            "url": "https://ob1phqqu.degassing-mould.digital/?ublib=nkOrZQkryPJMIdhV",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827824/",
            "reporter": "anonymous"
        }
    ],
    "3827823": [
        {
            "dateadded": "2026-04-21 13:59:17 UTC",
            "url": "https://talmeshis7.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:59:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827823/",
            "reporter": "anonymous"
        }
    ],
    "3827822": [
        {
            "dateadded": "2026-04-21 13:58:12 UTC",
            "url": "http://113.225.44.209:46688/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827822/",
            "reporter": "geenensp"
        }
    ],
    "3827821": [
        {
            "dateadded": "2026-04-21 13:55:17 UTC",
            "url": "https://63teisp.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:55:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827821/",
            "reporter": "anonymous"
        }
    ],
    "3827820": [
        {
            "dateadded": "2026-04-21 13:52:11 UTC",
            "url": "https://hyperpul.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827820/",
            "reporter": "anonymous"
        }
    ],
    "3827819": [
        {
            "dateadded": "2026-04-21 13:48:19 UTC",
            "url": "http://182.121.177.34:57500/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:44:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827819/",
            "reporter": "geenensp"
        }
    ],
    "3827818": [
        {
            "dateadded": "2026-04-21 13:45:16 UTC",
            "url": "http://182.121.177.34:57500/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827818/",
            "reporter": "geenensp"
        }
    ],
    "3827817": [
        {
            "dateadded": "2026-04-21 13:43:08 UTC",
            "url": "https://norspireum6.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827817/",
            "reporter": "anonymous"
        }
    ],
    "3827816": [
        {
            "dateadded": "2026-04-21 13:40:20 UTC",
            "url": "http://123.14.123.238:54132/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827816/",
            "reporter": "geenensp"
        }
    ],
    "3827815": [
        {
            "dateadded": "2026-04-21 13:37:08 UTC",
            "url": "https://repa1-zone.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827815/",
            "reporter": "anonymous"
        }
    ],
    "3827814": [
        {
            "dateadded": "2026-04-21 13:36:08 UTC",
            "url": "http://115.51.16.83:59383/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827814/",
            "reporter": "geenensp"
        }
    ],
    "3827813": [
        {
            "dateadded": "2026-04-21 13:31:09 UTC",
            "url": "https://eihf.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827813/",
            "reporter": "anonymous"
        }
    ],
    "3827812": [
        {
            "dateadded": "2026-04-21 13:30:23 UTC",
            "url": "http://171.37.81.174:53095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:41:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827812/",
            "reporter": "geenensp"
        }
    ],
    "3827811": [
        {
            "dateadded": "2026-04-21 13:29:20 UTC",
            "url": "http://123.12.221.23:44606/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827811/",
            "reporter": "geenensp"
        }
    ],
    "3827810": [
        {
            "dateadded": "2026-04-21 13:29:19 UTC",
            "url": "http://61.52.75.204:58633/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:33:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827810/",
            "reporter": "geenensp"
        }
    ],
    "3827809": [
        {
            "dateadded": "2026-04-21 13:26:07 UTC",
            "url": "https://qilzefl.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827809/",
            "reporter": "anonymous"
        }
    ],
    "3827808": [
        {
            "dateadded": "2026-04-21 13:24:22 UTC",
            "url": "http://115.51.16.83:59383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827808/",
            "reporter": "geenensp"
        }
    ],
    "3827807": [
        {
            "dateadded": "2026-04-21 13:22:10 UTC",
            "url": "https://querprair.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827807/",
            "reporter": "anonymous"
        }
    ],
    "3827806": [
        {
            "dateadded": "2026-04-21 13:21:10 UTC",
            "url": "http://125.44.205.74:38506/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827806/",
            "reporter": "geenensp"
        }
    ],
    "3827805": [
        {
            "dateadded": "2026-04-21 13:16:20 UTC",
            "url": "http://182.121.115.92:55312/i",
            "url_status": "offline",
            "last_online": "2026-04-21 13:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827805/",
            "reporter": "geenensp"
        }
    ],
    "3827804": [
        {
            "dateadded": "2026-04-21 13:15:14 UTC",
            "url": "https://sup64h.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827804/",
            "reporter": "anonymous"
        }
    ],
    "3827803": [
        {
            "dateadded": "2026-04-21 13:12:07 UTC",
            "url": "http://42.226.78.146:55467/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827803/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827801": [
        {
            "dateadded": "2026-04-21 13:11:23 UTC",
            "url": "http://42.231.66.222:36849/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:55:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827801/",
            "reporter": "geenensp"
        }
    ],
    "3827802": [
        {
            "dateadded": "2026-04-21 13:11:23 UTC",
            "url": "http://123.11.11.206:35702/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:28:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827802/",
            "reporter": "geenensp"
        }
    ],
    "3827800": [
        {
            "dateadded": "2026-04-21 13:11:09 UTC",
            "url": "https://qkxqry9b.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827800/",
            "reporter": "anonymous"
        }
    ],
    "3827799": [
        {
            "dateadded": "2026-04-21 13:09:07 UTC",
            "url": "https://validatorgus.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 13:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827799/",
            "reporter": "anonymous"
        }
    ],
    "3827798": [
        {
            "dateadded": "2026-04-21 13:08:32 UTC",
            "url": "http://120.84.215.157:37392/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827798/",
            "reporter": "geenensp"
        }
    ],
    "3827797": [
        {
            "dateadded": "2026-04-21 13:05:20 UTC",
            "url": "http://61.52.75.204:58633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:09:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827797/",
            "reporter": "geenensp"
        }
    ],
    "3827796": [
        {
            "dateadded": "2026-04-21 12:59:08 UTC",
            "url": "https://equscript.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827796/",
            "reporter": "anonymous"
        }
    ],
    "3827795": [
        {
            "dateadded": "2026-04-21 12:57:17 UTC",
            "url": "http://222.142.79.163:55671/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827795/",
            "reporter": "geenensp"
        }
    ],
    "3827794": [
        {
            "dateadded": "2026-04-21 12:53:08 UTC",
            "url": "https://uoovxa.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827794/",
            "reporter": "anonymous"
        }
    ],
    "3827792": [
        {
            "dateadded": "2026-04-21 12:52:20 UTC",
            "url": "http://182.121.115.92:55312/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 12:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827792/",
            "reporter": "geenensp"
        }
    ],
    "3827793": [
        {
            "dateadded": "2026-04-21 12:52:20 UTC",
            "url": "http://125.44.205.74:38506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:58:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827793/",
            "reporter": "geenensp"
        }
    ],
    "3827791": [
        {
            "dateadded": "2026-04-21 12:52:06 UTC",
            "url": "http://123.12.225.225:52857/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827791/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827790": [
        {
            "dateadded": "2026-04-21 12:49:19 UTC",
            "url": "http://61.54.214.49:54653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 12:49:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827790/",
            "reporter": "geenensp"
        }
    ],
    "3827789": [
        {
            "dateadded": "2026-04-21 12:48:11 UTC",
            "url": "https://shal0-mount.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827789/",
            "reporter": "anonymous"
        }
    ],
    "3827788": [
        {
            "dateadded": "2026-04-21 12:42:07 UTC",
            "url": "https://easmb.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827788/",
            "reporter": "anonymous"
        }
    ],
    "3827787": [
        {
            "dateadded": "2026-04-21 12:37:19 UTC",
            "url": "http://42.231.66.222:36849/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:56:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827787/",
            "reporter": "geenensp"
        }
    ],
    "3827786": [
        {
            "dateadded": "2026-04-21 12:37:07 UTC",
            "url": "https://formatsol.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827786/",
            "reporter": "anonymous"
        }
    ],
    "3827785": [
        {
            "dateadded": "2026-04-21 12:34:19 UTC",
            "url": "http://222.142.79.163:55671/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 00:02:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827785/",
            "reporter": "geenensp"
        }
    ],
    "3827784": [
        {
            "dateadded": "2026-04-21 12:32:08 UTC",
            "url": "http://123.12.225.225:52857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827784/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827783": [
        {
            "dateadded": "2026-04-21 12:31:11 UTC",
            "url": "https://dyn-lineor.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827783/",
            "reporter": "anonymous"
        }
    ],
    "3827782": [
        {
            "dateadded": "2026-04-21 12:29:11 UTC",
            "url": "http://42.231.200.212:53206/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:11:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827782/",
            "reporter": "geenensp"
        }
    ],
    "3827781": [
        {
            "dateadded": "2026-04-21 12:28:22 UTC",
            "url": "http://39.74.188.55:54395/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827781/",
            "reporter": "geenensp"
        }
    ],
    "3827780": [
        {
            "dateadded": "2026-04-21 12:26:08 UTC",
            "url": "https://lumlinea.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827780/",
            "reporter": "anonymous"
        }
    ],
    "3827779": [
        {
            "dateadded": "2026-04-21 12:21:10 UTC",
            "url": "http://193.187.101.203:37039/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:27:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827779/",
            "reporter": "geenensp"
        }
    ],
    "3827778": [
        {
            "dateadded": "2026-04-21 12:20:09 UTC",
            "url": "https://secure-forge.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827778/",
            "reporter": "anonymous"
        }
    ],
    "3827777": [
        {
            "dateadded": "2026-04-21 12:15:21 UTC",
            "url": "http://222.137.146.71:54496/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827777/",
            "reporter": "geenensp"
        }
    ],
    "3827776": [
        {
            "dateadded": "2026-04-21 12:15:14 UTC",
            "url": "https://ik63uk.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827776/",
            "reporter": "anonymous"
        }
    ],
    "3827775": [
        {
            "dateadded": "2026-04-21 12:13:22 UTC",
            "url": "http://110.37.45.161:38562/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 12:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827775/",
            "reporter": "geenensp"
        }
    ],
    "3827774": [
        {
            "dateadded": "2026-04-21 12:10:17 UTC",
            "url": "https://cvw05my.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:10:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827774/",
            "reporter": "anonymous"
        }
    ],
    "3827773": [
        {
            "dateadded": "2026-04-21 12:06:16 UTC",
            "url": "http://42.231.200.212:53206/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:29:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827773/",
            "reporter": "geenensp"
        }
    ],
    "3827772": [
        {
            "dateadded": "2026-04-21 12:04:08 UTC",
            "url": "https://main-po-int6.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 12:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827772/",
            "reporter": "anonymous"
        }
    ],
    "3827770": [
        {
            "dateadded": "2026-04-21 12:02:06 UTC",
            "url": "http://222.141.78.121:58404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827770/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827771": [
        {
            "dateadded": "2026-04-21 12:02:06 UTC",
            "url": "http://59.47.190.189:45324/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827771/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827769": [
        {
            "dateadded": "2026-04-21 11:59:13 UTC",
            "url": "https://quickmove5.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827769/",
            "reporter": "anonymous"
        }
    ],
    "3827768": [
        {
            "dateadded": "2026-04-21 11:57:08 UTC",
            "url": "http://199.16.59.198:47006/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827768/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827767": [
        {
            "dateadded": "2026-04-21 11:52:14 UTC",
            "url": "https://empty-sp-ac4.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827767/",
            "reporter": "anonymous"
        }
    ],
    "3827766": [
        {
            "dateadded": "2026-04-21 11:47:21 UTC",
            "url": "http://115.56.144.218:53483/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827766/",
            "reporter": "geenensp"
        }
    ],
    "3827765": [
        {
            "dateadded": "2026-04-21 11:47:14 UTC",
            "url": "https://fullbox3.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827765/",
            "reporter": "anonymous"
        }
    ],
    "3827764": [
        {
            "dateadded": "2026-04-21 11:45:24 UTC",
            "url": "http://42.238.128.104:54546/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:17:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827764/",
            "reporter": "geenensp"
        }
    ],
    "3827763": [
        {
            "dateadded": "2026-04-21 11:44:20 UTC",
            "url": "http://42.238.128.104:54546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827763/",
            "reporter": "geenensp"
        }
    ],
    "3827762": [
        {
            "dateadded": "2026-04-21 11:42:11 UTC",
            "url": "https://light-pa-ck2.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827762/",
            "reporter": "anonymous"
        }
    ],
    "3827761": [
        {
            "dateadded": "2026-04-21 11:37:21 UTC",
            "url": "http://59.47.190.189:45324/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827761/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827760": [
        {
            "dateadded": "2026-04-21 11:37:10 UTC",
            "url": "https://heavyload1.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827760/",
            "reporter": "anonymous"
        }
    ],
    "3827759": [
        {
            "dateadded": "2026-04-21 11:32:11 UTC",
            "url": "https://light-mo-on6.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827759/",
            "reporter": "anonymous"
        }
    ],
    "3827758": [
        {
            "dateadded": "2026-04-21 11:30:24 UTC",
            "url": "http://39.74.188.55:54395/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:04:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827758/",
            "reporter": "geenensp"
        }
    ],
    "3827757": [
        {
            "dateadded": "2026-04-21 11:29:11 UTC",
            "url": "https://warmfire5.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827757/",
            "reporter": "anonymous"
        }
    ],
    "3827756": [
        {
            "dateadded": "2026-04-21 11:27:07 UTC",
            "url": "http://27.207.231.230:33928/i",
            "url_status": "offline",
            "last_online": "2026-04-24 16:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827756/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827755": [
        {
            "dateadded": "2026-04-21 11:20:11 UTC",
            "url": "https://cold-sn-ow4.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827755/",
            "reporter": "anonymous"
        }
    ],
    "3827754": [
        {
            "dateadded": "2026-04-21 11:16:10 UTC",
            "url": "http://182.121.249.174:41341/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827754/",
            "reporter": "geenensp"
        }
    ],
    "3827753": [
        {
            "dateadded": "2026-04-21 11:15:23 UTC",
            "url": "http://115.56.144.218:53483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:59:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827753/",
            "reporter": "geenensp"
        }
    ],
    "3827752": [
        {
            "dateadded": "2026-04-21 11:14:13 UTC",
            "url": "https://clearsky3.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827752/",
            "reporter": "anonymous"
        }
    ],
    "3827751": [
        {
            "dateadded": "2026-04-21 11:13:19 UTC",
            "url": "http://111.179.150.127:46789/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:01:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827751/",
            "reporter": "geenensp"
        }
    ],
    "3827750": [
        {
            "dateadded": "2026-04-21 11:12:38 UTC",
            "url": "http://180.241.223.215:51496/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:27:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827750/",
            "reporter": "geenensp"
        }
    ],
    "3827749": [
        {
            "dateadded": "2026-04-21 11:12:14 UTC",
            "url": "http://113.233.236.96:60693/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827749/",
            "reporter": "geenensp"
        }
    ],
    "3827748": [
        {
            "dateadded": "2026-04-21 11:09:14 UTC",
            "url": "https://rainy-ni-ght2.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827748/",
            "reporter": "anonymous"
        }
    ],
    "3827747": [
        {
            "dateadded": "2026-04-21 11:08:24 UTC",
            "url": "http://156.229.118.140:47229/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827747/",
            "reporter": "geenensp"
        }
    ],
    "3827746": [
        {
            "dateadded": "2026-04-21 11:08:21 UTC",
            "url": "http://182.124.2.207:57615/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:55:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827746/",
            "reporter": "geenensp"
        }
    ],
    "3827745": [
        {
            "dateadded": "2026-04-21 11:03:07 UTC",
            "url": "https://sunny-day1.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 11:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827745/",
            "reporter": "anonymous"
        }
    ],
    "3827744": [
        {
            "dateadded": "2026-04-21 11:02:08 UTC",
            "url": "http://182.112.223.124:58281/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827744/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827743": [
        {
            "dateadded": "2026-04-21 10:59:21 UTC",
            "url": "http://110.37.59.132:53220/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:06:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827743/",
            "reporter": "geenensp"
        }
    ],
    "3827742": [
        {
            "dateadded": "2026-04-21 10:58:13 UTC",
            "url": "https://best-lo-ok6.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827742/",
            "reporter": "anonymous"
        }
    ],
    "3827741": [
        {
            "dateadded": "2026-04-21 10:51:14 UTC",
            "url": "https://newstyle5.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827741/",
            "reporter": "anonymous"
        }
    ],
    "3827740": [
        {
            "dateadded": "2026-04-21 10:47:14 UTC",
            "url": "https://warm-co-at4.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827740/",
            "reporter": "anonymous"
        }
    ],
    "3827739": [
        {
            "dateadded": "2026-04-21 10:45:26 UTC",
            "url": "http://111.179.150.127:46789/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:03:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827739/",
            "reporter": "geenensp"
        }
    ],
    "3827738": [
        {
            "dateadded": "2026-04-21 10:41:15 UTC",
            "url": "https://longbelt3.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:41:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827738/",
            "reporter": "anonymous"
        }
    ],
    "3827737": [
        {
            "dateadded": "2026-04-21 10:36:13 UTC",
            "url": "http://42.231.204.252:51249/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827737/",
            "reporter": "geenensp"
        }
    ],
    "3827736": [
        {
            "dateadded": "2026-04-21 10:35:10 UTC",
            "url": "https://white-shi-rt2.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827736/",
            "reporter": "anonymous"
        }
    ],
    "3827735": [
        {
            "dateadded": "2026-04-21 10:31:07 UTC",
            "url": "https://blackhat1.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827735/",
            "reporter": "anonymous"
        }
    ],
    "3827734": [
        {
            "dateadded": "2026-04-21 10:24:16 UTC",
            "url": "http://123.232.142.200:55377/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827734/",
            "reporter": "geenensp"
        }
    ],
    "3827733": [
        {
            "dateadded": "2026-04-21 10:24:09 UTC",
            "url": "https://purewater6.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827733/",
            "reporter": "anonymous"
        }
    ],
    "3827732": [
        {
            "dateadded": "2026-04-21 10:23:22 UTC",
            "url": "http://115.50.224.118:56055/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:40:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827732/",
            "reporter": "geenensp"
        }
    ],
    "3827730": [
        {
            "dateadded": "2026-04-21 10:19:21 UTC",
            "url": "http://42.231.204.252:51249/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 04:56:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827730/",
            "reporter": "geenensp"
        }
    ],
    "3827731": [
        {
            "dateadded": "2026-04-21 10:19:21 UTC",
            "url": "http://123.5.158.134:37678/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:17:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827731/",
            "reporter": "geenensp"
        }
    ],
    "3827729": [
        {
            "dateadded": "2026-04-21 10:19:07 UTC",
            "url": "https://cool-mi-lk5.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827729/",
            "reporter": "anonymous"
        }
    ],
    "3827728": [
        {
            "dateadded": "2026-04-21 10:18:15 UTC",
            "url": "http://110.36.28.183:52065/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:51:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827728/",
            "reporter": "geenensp"
        }
    ],
    "3827727": [
        {
            "dateadded": "2026-04-21 10:13:17 UTC",
            "url": "http://110.36.28.183:52065/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827727/",
            "reporter": "geenensp"
        }
    ],
    "3827726": [
        {
            "dateadded": "2026-04-21 10:13:11 UTC",
            "url": "https://freshtea4.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827726/",
            "reporter": "anonymous"
        }
    ],
    "3827724": [
        {
            "dateadded": "2026-04-21 10:09:12 UTC",
            "url": "http://175.169.66.166:46337/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827724/",
            "reporter": "geenensp"
        }
    ],
    "3827725": [
        {
            "dateadded": "2026-04-21 10:09:12 UTC",
            "url": "https://hot-so-up3.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827725/",
            "reporter": "anonymous"
        }
    ],
    "3827723": [
        {
            "dateadded": "2026-04-21 10:06:15 UTC",
            "url": "https://sweet-bun2.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 10:06:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827723/",
            "reporter": "anonymous"
        }
    ],
    "3827722": [
        {
            "dateadded": "2026-04-21 10:02:08 UTC",
            "url": "http://113.226.64.138:36739/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827722/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827721": [
        {
            "dateadded": "2026-04-21 09:58:20 UTC",
            "url": "http://110.36.80.173:39637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:57:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827721/",
            "reporter": "geenensp"
        }
    ],
    "3827720": [
        {
            "dateadded": "2026-04-21 09:57:18 UTC",
            "url": "http://27.215.126.80:52804/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:25:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827720/",
            "reporter": "geenensp"
        }
    ],
    "3827719": [
        {
            "dateadded": "2026-04-21 09:57:09 UTC",
            "url": "https://tasty-pie1.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827719/",
            "reporter": "anonymous"
        }
    ],
    "3827718": [
        {
            "dateadded": "2026-04-21 09:51:18 UTC",
            "url": "http://123.5.158.134:37678/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:29:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827718/",
            "reporter": "geenensp"
        }
    ],
    "3827717": [
        {
            "dateadded": "2026-04-21 09:50:10 UTC",
            "url": "https://easytask6.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827717/",
            "reporter": "anonymous"
        }
    ],
    "3827716": [
        {
            "dateadded": "2026-04-21 09:48:20 UTC",
            "url": "http://123.14.83.99:42786/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:55:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827716/",
            "reporter": "geenensp"
        }
    ],
    "3827715": [
        {
            "dateadded": "2026-04-21 09:46:17 UTC",
            "url": "http://216.126.86.2:54875/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:44:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827715/",
            "reporter": "geenensp"
        }
    ],
    "3827714": [
        {
            "dateadded": "2026-04-21 09:45:10 UTC",
            "url": "https://just-ta-lk5.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827714/",
            "reporter": "anonymous"
        }
    ],
    "3827713": [
        {
            "dateadded": "2026-04-21 09:44:16 UTC",
            "url": "http://123.232.142.200:55377/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827713/",
            "reporter": "geenensp"
        }
    ],
    "3827712": [
        {
            "dateadded": "2026-04-21 09:44:14 UTC",
            "url": "http://27.215.126.80:52804/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:47:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827712/",
            "reporter": "geenensp"
        }
    ],
    "3827711": [
        {
            "dateadded": "2026-04-21 09:41:11 UTC",
            "url": "https://niceshot4.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827711/",
            "reporter": "anonymous"
        }
    ],
    "3827710": [
        {
            "dateadded": "2026-04-21 09:35:10 UTC",
            "url": "https://realfa-ct3.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827710/",
            "reporter": "anonymous"
        }
    ],
    "3827709": [
        {
            "dateadded": "2026-04-21 09:32:07 UTC",
            "url": "http://182.121.158.55:33054/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:55:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827709/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827708": [
        {
            "dateadded": "2026-04-21 09:29:08 UTC",
            "url": "https://best-time2.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827708/",
            "reporter": "anonymous"
        }
    ],
    "3827707": [
        {
            "dateadded": "2026-04-21 09:28:17 UTC",
            "url": "http://115.50.202.74:59180/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:41:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827707/",
            "reporter": "geenensp"
        }
    ],
    "3827706": [
        {
            "dateadded": "2026-04-21 09:25:15 UTC",
            "url": "http://123.14.83.99:42786/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:11:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827706/",
            "reporter": "geenensp"
        }
    ],
    "3827705": [
        {
            "dateadded": "2026-04-21 09:24:14 UTC",
            "url": "https://goodnews1.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827705/",
            "reporter": "anonymous"
        }
    ],
    "3827704": [
        {
            "dateadded": "2026-04-21 09:23:30 UTC",
            "url": "http://216.126.86.2:54875/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827704/",
            "reporter": "geenensp"
        }
    ],
    "3827703": [
        {
            "dateadded": "2026-04-21 09:19:13 UTC",
            "url": "https://side-vi-ew6.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827703/",
            "reporter": "anonymous"
        }
    ],
    "3827702": [
        {
            "dateadded": "2026-04-21 09:15:21 UTC",
            "url": "http://115.62.44.159:56609/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:18:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827702/",
            "reporter": "geenensp"
        }
    ],
    "3827701": [
        {
            "dateadded": "2026-04-21 09:12:09 UTC",
            "url": "https://backyard5.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827701/",
            "reporter": "anonymous"
        }
    ],
    "3827700": [
        {
            "dateadded": "2026-04-21 09:10:21 UTC",
            "url": "http://182.127.125.194:47135/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 09:10:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827700/",
            "reporter": "geenensp"
        }
    ],
    "3827699": [
        {
            "dateadded": "2026-04-21 09:08:08 UTC",
            "url": "https://full-ro-om4.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827699/",
            "reporter": "anonymous"
        }
    ],
    "3827698": [
        {
            "dateadded": "2026-04-21 09:07:07 UTC",
            "url": "http://42.56.219.68:46771/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827698/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827697": [
        {
            "dateadded": "2026-04-21 09:01:08 UTC",
            "url": "https://nextdoor3.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 09:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827697/",
            "reporter": "anonymous"
        }
    ],
    "3827696": [
        {
            "dateadded": "2026-04-21 09:00:20 UTC",
            "url": "http://113.236.87.176:43444/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:06:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827696/",
            "reporter": "geenensp"
        }
    ],
    "3827695": [
        {
            "dateadded": "2026-04-21 08:57:08 UTC",
            "url": "http://177.26.100.232:52211/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:45:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827695/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827694": [
        {
            "dateadded": "2026-04-21 08:56:10 UTC",
            "url": "https://cityli-fe2.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827694/",
            "reporter": "anonymous"
        }
    ],
    "3827693": [
        {
            "dateadded": "2026-04-21 08:53:09 UTC",
            "url": "http://115.50.202.74:59180/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827693/",
            "reporter": "geenensp"
        }
    ],
    "3827692": [
        {
            "dateadded": "2026-04-21 08:52:07 UTC",
            "url": "http://144.48.123.149:58125/i",
            "url_status": "offline",
            "last_online": "2026-04-23 00:13:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827692/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827691": [
        {
            "dateadded": "2026-04-21 08:50:12 UTC",
            "url": "https://home-base1.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827691/",
            "reporter": "anonymous"
        }
    ],
    "3827690": [
        {
            "dateadded": "2026-04-21 08:45:11 UTC",
            "url": "https://gold-fi-sh6.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827690/",
            "reporter": "anonymous"
        }
    ],
    "3827689": [
        {
            "dateadded": "2026-04-21 08:41:18 UTC",
            "url": "http://182.113.45.223:51635/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:19:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827689/",
            "reporter": "geenensp"
        }
    ],
    "3827688": [
        {
            "dateadded": "2026-04-21 08:39:07 UTC",
            "url": "https://warm-sun5.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827688/",
            "reporter": "anonymous"
        }
    ],
    "3827687": [
        {
            "dateadded": "2026-04-21 08:34:10 UTC",
            "url": "https://darkwood4.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827687/",
            "reporter": "anonymous"
        }
    ],
    "3827686": [
        {
            "dateadded": "2026-04-21 08:33:18 UTC",
            "url": "http://113.236.87.176:43444/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 12:31:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827686/",
            "reporter": "geenensp"
        }
    ],
    "3827685": [
        {
            "dateadded": "2026-04-21 08:32:10 UTC",
            "url": "http://110.36.80.162:52499/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:36:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827685/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827684": [
        {
            "dateadded": "2026-04-21 08:29:09 UTC",
            "url": "http://115.61.116.234:37178/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:11:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827684/",
            "reporter": "geenensp"
        }
    ],
    "3827683": [
        {
            "dateadded": "2026-04-21 08:28:14 UTC",
            "url": "https://high-hi-ll3.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827683/",
            "reporter": "anonymous"
        }
    ],
    "3827682": [
        {
            "dateadded": "2026-04-21 08:23:10 UTC",
            "url": "https://blue-sky2.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827682/",
            "reporter": "anonymous"
        }
    ],
    "3827681": [
        {
            "dateadded": "2026-04-21 08:18:11 UTC",
            "url": "http://182.113.45.223:51635/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827681/",
            "reporter": "geenensp"
        }
    ],
    "3827680": [
        {
            "dateadded": "2026-04-21 08:18:07 UTC",
            "url": "https://deepsea1.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827680/",
            "reporter": "anonymous"
        }
    ],
    "3827679": [
        {
            "dateadded": "2026-04-21 08:17:07 UTC",
            "url": "http://115.63.13.9:40062/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:01:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827679/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827678": [
        {
            "dateadded": "2026-04-21 08:14:12 UTC",
            "url": "http://115.61.116.234:37178/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827678/",
            "reporter": "geenensp"
        }
    ],
    "3827676": [
        {
            "dateadded": "2026-04-21 08:12:11 UTC",
            "url": "http://123.8.7.51:49444/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:03:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827676/",
            "reporter": "geenensp"
        }
    ],
    "3827677": [
        {
            "dateadded": "2026-04-21 08:12:11 UTC",
            "url": "https://soft-ba-g6.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827677/",
            "reporter": "anonymous"
        }
    ],
    "3827675": [
        {
            "dateadded": "2026-04-21 08:07:07 UTC",
            "url": "https://hardbox5.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827675/",
            "reporter": "anonymous"
        }
    ],
    "3827674": [
        {
            "dateadded": "2026-04-21 08:01:07 UTC",
            "url": "https://redma-rk4.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 08:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827674/",
            "reporter": "anonymous"
        }
    ],
    "3827673": [
        {
            "dateadded": "2026-04-21 07:55:11 UTC",
            "url": "https://thin-pen3.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827673/",
            "reporter": "anonymous"
        }
    ],
    "3827672": [
        {
            "dateadded": "2026-04-21 07:54:12 UTC",
            "url": "http://115.57.184.122:49912/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827672/",
            "reporter": "geenensp"
        }
    ],
    "3827671": [
        {
            "dateadded": "2026-04-21 07:50:18 UTC",
            "url": "http://36.92.154.218:40629/i",
            "url_status": "offline",
            "last_online": "2026-04-21 07:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827671/",
            "reporter": "geenensp"
        }
    ],
    "3827670": [
        {
            "dateadded": "2026-04-21 07:49:12 UTC",
            "url": "https://lastpa-ge2.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827670/",
            "reporter": "anonymous"
        }
    ],
    "3827669": [
        {
            "dateadded": "2026-04-21 07:44:11 UTC",
            "url": "https://openbook1.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827669/",
            "reporter": "anonymous"
        }
    ],
    "3827668": [
        {
            "dateadded": "2026-04-21 07:38:08 UTC",
            "url": "https://old-town6.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827668/",
            "reporter": "anonymous"
        }
    ],
    "3827667": [
        {
            "dateadded": "2026-04-21 07:37:08 UTC",
            "url": "http://221.14.207.105:42251/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:59:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827667/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827666": [
        {
            "dateadded": "2026-04-21 07:32:07 UTC",
            "url": "https://newtrip5.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827666/",
            "reporter": "anonymous"
        }
    ],
    "3827665": [
        {
            "dateadded": "2026-04-21 07:27:09 UTC",
            "url": "https://longro-ad4.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827665/",
            "reporter": "anonymous"
        }
    ],
    "3827664": [
        {
            "dateadded": "2026-04-21 07:25:24 UTC",
            "url": "http://27.37.112.2:60780/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:12:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827664/",
            "reporter": "geenensp"
        }
    ],
    "3827663": [
        {
            "dateadded": "2026-04-21 07:23:15 UTC",
            "url": "http://115.57.184.122:49912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827663/",
            "reporter": "geenensp"
        }
    ],
    "3827662": [
        {
            "dateadded": "2026-04-21 07:21:11 UTC",
            "url": "https://bigjump3.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827662/",
            "reporter": "anonymous"
        }
    ],
    "3827661": [
        {
            "dateadded": "2026-04-21 07:18:17 UTC",
            "url": "http://42.237.48.56:33520/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:42:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827661/",
            "reporter": "geenensp"
        }
    ],
    "3827660": [
        {
            "dateadded": "2026-04-21 07:17:20 UTC",
            "url": "http://112.240.175.123:44673/i",
            "url_status": "offline",
            "last_online": "2026-04-21 07:17:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827660/",
            "reporter": "geenensp"
        }
    ],
    "3827659": [
        {
            "dateadded": "2026-04-21 07:16:19 UTC",
            "url": "http://118.253.80.60:48921/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:01:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827659/",
            "reporter": "geenensp"
        }
    ],
    "3827658": [
        {
            "dateadded": "2026-04-21 07:16:10 UTC",
            "url": "https://slowwa-lk2.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827658/",
            "reporter": "anonymous"
        }
    ],
    "3827657": [
        {
            "dateadded": "2026-04-21 07:11:09 UTC",
            "url": "https://fast-run1.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827657/",
            "reporter": "anonymous"
        }
    ],
    "3827656": [
        {
            "dateadded": "2026-04-21 07:07:06 UTC",
            "url": "http://221.14.207.105:42251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827656/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827655": [
        {
            "dateadded": "2026-04-21 07:05:11 UTC",
            "url": "https://highstep6.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 07:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827655/",
            "reporter": "anonymous"
        }
    ],
    "3827654": [
        {
            "dateadded": "2026-04-21 07:04:16 UTC",
            "url": "http://125.41.142.253:56292/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827654/",
            "reporter": "geenensp"
        }
    ],
    "3827653": [
        {
            "dateadded": "2026-04-21 06:59:09 UTC",
            "url": "https://coldwind5.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827653/",
            "reporter": "anonymous"
        }
    ],
    "3827652": [
        {
            "dateadded": "2026-04-21 06:55:16 UTC",
            "url": "http://42.54.12.132:33929/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 12:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827652/",
            "reporter": "geenensp"
        }
    ],
    "3827651": [
        {
            "dateadded": "2026-04-21 06:55:10 UTC",
            "url": "https://white-wa-ll4.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827651/",
            "reporter": "anonymous"
        }
    ],
    "3827650": [
        {
            "dateadded": "2026-04-21 06:50:22 UTC",
            "url": "http://118.253.80.60:48921/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:51:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827650/",
            "reporter": "geenensp"
        }
    ],
    "3827649": [
        {
            "dateadded": "2026-04-21 06:49:10 UTC",
            "url": "https://small-cup3.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827649/",
            "reporter": "anonymous"
        }
    ],
    "3827648": [
        {
            "dateadded": "2026-04-21 06:46:16 UTC",
            "url": "http://216.249.4.20:53881/i",
            "url_status": "offline",
            "last_online": "2026-04-25 00:29:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827648/",
            "reporter": "geenensp"
        }
    ],
    "3827645": [
        {
            "dateadded": "2026-04-21 06:43:17 UTC",
            "url": "http://156.226.174.212/bins/sora.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827645/",
            "reporter": "abuse_ch"
        }
    ],
    "3827646": [
        {
            "dateadded": "2026-04-21 06:43:17 UTC",
            "url": "http://156.226.174.212/bins/sora.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 11:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827646/",
            "reporter": "abuse_ch"
        }
    ],
    "3827647": [
        {
            "dateadded": "2026-04-21 06:43:17 UTC",
            "url": "http://156.226.174.212/bins/sora.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 06:28:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827647/",
            "reporter": "abuse_ch"
        }
    ],
    "3827644": [
        {
            "dateadded": "2026-04-21 06:43:10 UTC",
            "url": "https://greenlamp2.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827644/",
            "reporter": "anonymous"
        }
    ],
    "3827636": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 05:20:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827636/",
            "reporter": "abuse_ch"
        }
    ],
    "3827637": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 09:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827637/",
            "reporter": "abuse_ch"
        }
    ],
    "3827638": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.ppc",
            "url_status": "offline",
            "last_online": "2026-04-27 06:00:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827638/",
            "reporter": "abuse_ch"
        }
    ],
    "3827639": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827639/",
            "reporter": "abuse_ch"
        }
    ],
    "3827640": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827640/",
            "reporter": "abuse_ch"
        }
    ],
    "3827641": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 08:43:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827641/",
            "reporter": "abuse_ch"
        }
    ],
    "3827642": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 06:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827642/",
            "reporter": "abuse_ch"
        }
    ],
    "3827643": [
        {
            "dateadded": "2026-04-21 06:42:12 UTC",
            "url": "http://156.226.174.212/bins/sora.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 05:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827643/",
            "reporter": "abuse_ch"
        }
    ],
    "3827629": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://156.226.174.212/bins/sora.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827629/",
            "reporter": "abuse_ch"
        }
    ],
    "3827630": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827630/",
            "reporter": "abuse_ch"
        }
    ],
    "3827631": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827631/",
            "reporter": "abuse_ch"
        }
    ],
    "3827632": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://156.226.174.212/bins/sora.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827632/",
            "reporter": "abuse_ch"
        }
    ],
    "3827633": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://156.226.174.212/bins/sora.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827633/",
            "reporter": "abuse_ch"
        }
    ],
    "3827634": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827634/",
            "reporter": "abuse_ch"
        }
    ],
    "3827635": [
        {
            "dateadded": "2026-04-21 06:42:09 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827635/",
            "reporter": "abuse_ch"
        }
    ],
    "3827627": [
        {
            "dateadded": "2026-04-21 06:38:09 UTC",
            "url": "https://blu-etable1.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827627/",
            "reporter": "anonymous"
        }
    ],
    "3827626": [
        {
            "dateadded": "2026-04-21 06:32:09 UTC",
            "url": "https://main-po-int6.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827626/",
            "reporter": "anonymous"
        }
    ],
    "3827625": [
        {
            "dateadded": "2026-04-21 06:28:18 UTC",
            "url": "http://42.235.92.76:60753/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:19:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827625/",
            "reporter": "geenensp"
        }
    ],
    "3827624": [
        {
            "dateadded": "2026-04-21 06:27:09 UTC",
            "url": "https://files.catbox.moe/jwhxzz.bin",
            "url_status": "offline",
            "last_online": "2026-04-22 10:41:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827624/",
            "reporter": "abuse_ch"
        }
    ],
    "3827623": [
        {
            "dateadded": "2026-04-21 06:26:13 UTC",
            "url": "https://quickmo-ve5.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827623/",
            "reporter": "anonymous"
        }
    ],
    "3827622": [
        {
            "dateadded": "2026-04-21 06:23:20 UTC",
            "url": "http://216.249.4.20:53881/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 01:16:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827622/",
            "reporter": "geenensp"
        }
    ],
    "3827621": [
        {
            "dateadded": "2026-04-21 06:21:09 UTC",
            "url": "https://empty-s-pac4.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827621/",
            "reporter": "anonymous"
        }
    ],
    "3827620": [
        {
            "dateadded": "2026-04-21 06:17:10 UTC",
            "url": "https://mosselnet.co.za/April_Staff_Appraisal_4qsK_pdf.arj",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:52 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827620/",
            "reporter": "abuse_ch"
        }
    ],
    "3827619": [
        {
            "dateadded": "2026-04-21 06:16:08 UTC",
            "url": "https://full-b-ox3.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827619/",
            "reporter": "anonymous"
        }
    ],
    "3827618": [
        {
            "dateadded": "2026-04-21 06:15:11 UTC",
            "url": "https://metotmimarlik.com.tr/wpveerus/vOjgNKOwObXSY180.bin",
            "url_status": "offline",
            "last_online": "2026-04-22 12:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827618/",
            "reporter": "abuse_ch"
        }
    ],
    "3827617": [
        {
            "dateadded": "2026-04-21 06:14:13 UTC",
            "url": "https://metotmimarlik.com.tr/wpveerus/Endevrdiernes.pfm",
            "url_status": "offline",
            "last_online": "2026-04-22 11:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827617/",
            "reporter": "abuse_ch"
        }
    ],
    "3827616": [
        {
            "dateadded": "2026-04-21 06:14:11 UTC",
            "url": "http://axodoyin.alwaysdata.net/UwU.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827616/",
            "reporter": "adliwahid"
        }
    ],
    "3827612": [
        {
            "dateadded": "2026-04-21 06:13:13 UTC",
            "url": "http://45.135.194.4/vps-agent-linux-amd64",
            "url_status": "offline",
            "last_online": "2026-04-21 11:44:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827612/",
            "reporter": "adliwahid"
        }
    ],
    "3827613": [
        {
            "dateadded": "2026-04-21 06:13:13 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/bdcf186ab_Vexaim-Rust.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827613/",
            "reporter": "burger"
        }
    ],
    "3827614": [
        {
            "dateadded": "2026-04-21 06:13:13 UTC",
            "url": "https://markway.ru/Setup.zip",
            "url_status": "offline",
            "last_online": "2026-04-24 05:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Convagent",
                "trojan"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827614/",
            "reporter": "SanchoZZ"
        }
    ],
    "3827611": [
        {
            "dateadded": "2026-04-21 06:13:12 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/4e78a8b89_Vexaim-Valorant.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827611/",
            "reporter": "burger"
        }
    ],
    "3827608": [
        {
            "dateadded": "2026-04-21 06:13:11 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/0092d6c39_Vexaim-FiveM.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827608/",
            "reporter": "burger"
        }
    ],
    "3827609": [
        {
            "dateadded": "2026-04-21 06:13:11 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/449e8790f_Vexaim-Callofduty.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827609/",
            "reporter": "burger"
        }
    ],
    "3827610": [
        {
            "dateadded": "2026-04-21 06:13:11 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/d101f069e_Vexaim-Roblox.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827610/",
            "reporter": "burger"
        }
    ],
    "3827606": [
        {
            "dateadded": "2026-04-21 06:13:10 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/0b1e3a8e8_Vexaim-HwidSpoofer.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827606/",
            "reporter": "burger"
        }
    ],
    "3827607": [
        {
            "dateadded": "2026-04-21 06:13:10 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/c1dd75655_Vexaim-fortnite.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827607/",
            "reporter": "burger"
        }
    ],
    "3827605": [
        {
            "dateadded": "2026-04-21 06:13:08 UTC",
            "url": "http://156.226.174.212/sora.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:07:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827605/",
            "reporter": "adliwahid"
        }
    ],
    "3827596": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://45.135.194.4:8080/c2.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827596/",
            "reporter": "adliwahid"
        }
    ],
    "3827597": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://176.65.139.130/bot.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827597/",
            "reporter": "adliwahid"
        }
    ],
    "3827598": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://45.135.194.4:8080/simple_agent.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827598/",
            "reporter": "adliwahid"
        }
    ],
    "3827599": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://45.135.194.4/install.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827599/",
            "reporter": "adliwahid"
        }
    ],
    "3827600": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/2976463be_Vexaim-R6.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827600/",
            "reporter": "burger"
        }
    ],
    "3827601": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://45.135.194.4:8080/sh_test.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827601/",
            "reporter": "adliwahid"
        }
    ],
    "3827602": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://45.135.194.4:8080/install.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827602/",
            "reporter": "adliwahid"
        }
    ],
    "3827603": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/5e29793e1_Vexaim-ApexLegends.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827603/",
            "reporter": "burger"
        }
    ],
    "3827604": [
        {
            "dateadded": "2026-04-21 06:13:07 UTC",
            "url": "http://2.26.84.151/bot.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 18:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827604/",
            "reporter": "adliwahid"
        }
    ],
    "3827595": [
        {
            "dateadded": "2026-04-21 06:12:08 UTC",
            "url": "http://182.127.125.194:47135/i",
            "url_status": "offline",
            "last_online": "2026-04-21 06:12:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827595/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827594": [
        {
            "dateadded": "2026-04-21 06:10:15 UTC",
            "url": "https://lightp-ack2.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827594/",
            "reporter": "anonymous"
        }
    ],
    "3827593": [
        {
            "dateadded": "2026-04-21 06:06:12 UTC",
            "url": "https://heavy-lo-ad1.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 06:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827593/",
            "reporter": "anonymous"
        }
    ],
    "3827592": [
        {
            "dateadded": "2026-04-21 06:02:23 UTC",
            "url": "http://58.65.215.0:42497/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827592/",
            "reporter": "geenensp"
        }
    ],
    "3827591": [
        {
            "dateadded": "2026-04-21 05:59:16 UTC",
            "url": "https://light-mo-on6.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827591/",
            "reporter": "anonymous"
        }
    ],
    "3827590": [
        {
            "dateadded": "2026-04-21 05:56:23 UTC",
            "url": "http://117.209.23.255:46920/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:56:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827590/",
            "reporter": "geenensp"
        }
    ],
    "3827589": [
        {
            "dateadded": "2026-04-21 05:56:22 UTC",
            "url": "http://110.36.26.86:47749/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:56:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827589/",
            "reporter": "geenensp"
        }
    ],
    "3827588": [
        {
            "dateadded": "2026-04-21 05:54:08 UTC",
            "url": "https://warmf-ire5.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827588/",
            "reporter": "anonymous"
        }
    ],
    "3827587": [
        {
            "dateadded": "2026-04-21 05:47:12 UTC",
            "url": "https://cold-sn-ow4.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827587/",
            "reporter": "anonymous"
        }
    ],
    "3827586": [
        {
            "dateadded": "2026-04-21 05:45:23 UTC",
            "url": "http://163.142.93.53:59042/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 04:58:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827586/",
            "reporter": "geenensp"
        }
    ],
    "3827585": [
        {
            "dateadded": "2026-04-21 05:45:22 UTC",
            "url": "http://175.169.104.199:40537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827585/",
            "reporter": "geenensp"
        }
    ],
    "3827584": [
        {
            "dateadded": "2026-04-21 05:43:11 UTC",
            "url": "https://clear-sky3.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827584/",
            "reporter": "anonymous"
        }
    ],
    "3827583": [
        {
            "dateadded": "2026-04-21 05:37:14 UTC",
            "url": "https://rainy-ni-ght2.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827583/",
            "reporter": "anonymous"
        }
    ],
    "3827582": [
        {
            "dateadded": "2026-04-21 05:32:35 UTC",
            "url": "http://117.209.23.255:46920/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827582/",
            "reporter": "geenensp"
        }
    ],
    "3827581": [
        {
            "dateadded": "2026-04-21 05:31:09 UTC",
            "url": "https://sunny-d-ay1.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827581/",
            "reporter": "anonymous"
        }
    ],
    "3827580": [
        {
            "dateadded": "2026-04-21 05:28:12 UTC",
            "url": "https://best-lo-ok6.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827580/",
            "reporter": "anonymous"
        }
    ],
    "3827579": [
        {
            "dateadded": "2026-04-21 05:25:16 UTC",
            "url": "https://newst-yle5.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827579/",
            "reporter": "anonymous"
        }
    ],
    "3827577": [
        {
            "dateadded": "2026-04-21 05:23:16 UTC",
            "url": "http://58.65.215.0:42497/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827577/",
            "reporter": "geenensp"
        }
    ],
    "3827578": [
        {
            "dateadded": "2026-04-21 05:23:16 UTC",
            "url": "http://115.56.40.55:52597/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:24:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827578/",
            "reporter": "geenensp"
        }
    ],
    "3827576": [
        {
            "dateadded": "2026-04-21 05:19:10 UTC",
            "url": "http://103.206.205.54:34463/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827576/",
            "reporter": "geenensp"
        }
    ],
    "3827575": [
        {
            "dateadded": "2026-04-21 05:16:06 UTC",
            "url": "https://warm-co-at4.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827575/",
            "reporter": "anonymous"
        }
    ],
    "3827574": [
        {
            "dateadded": "2026-04-21 05:12:08 UTC",
            "url": "http://110.37.88.210:36269/i",
            "url_status": "offline",
            "last_online": "2026-04-21 12:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827574/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827573": [
        {
            "dateadded": "2026-04-21 05:10:14 UTC",
            "url": "https://long-be-lt3.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827573/",
            "reporter": "anonymous"
        }
    ],
    "3827572": [
        {
            "dateadded": "2026-04-21 05:03:08 UTC",
            "url": "https://white-shir-t2.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 05:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827572/",
            "reporter": "anonymous"
        }
    ],
    "3827571": [
        {
            "dateadded": "2026-04-21 05:00:17 UTC",
            "url": "http://115.56.40.55:52597/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827571/",
            "reporter": "geenensp"
        }
    ],
    "3827570": [
        {
            "dateadded": "2026-04-21 04:58:16 UTC",
            "url": "http://110.136.46.178:44384/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827570/",
            "reporter": "geenensp"
        }
    ],
    "3827569": [
        {
            "dateadded": "2026-04-21 04:58:14 UTC",
            "url": "https://black-h-at1.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827569/",
            "reporter": "anonymous"
        }
    ],
    "3827568": [
        {
            "dateadded": "2026-04-21 04:57:07 UTC",
            "url": "http://110.37.88.210:36269/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:50:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827568/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827567": [
        {
            "dateadded": "2026-04-21 04:57:06 UTC",
            "url": "http://42.233.148.170:43622/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827567/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827566": [
        {
            "dateadded": "2026-04-21 04:54:12 UTC",
            "url": "https://purewa-ter6.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827566/",
            "reporter": "anonymous"
        }
    ],
    "3827565": [
        {
            "dateadded": "2026-04-21 04:48:13 UTC",
            "url": "https://coolmi-lk5.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827565/",
            "reporter": "anonymous"
        }
    ],
    "3827564": [
        {
            "dateadded": "2026-04-21 04:43:14 UTC",
            "url": "https://fresh-tea4.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827564/",
            "reporter": "anonymous"
        }
    ],
    "3827563": [
        {
            "dateadded": "2026-04-21 04:39:07 UTC",
            "url": "https://hot-s-oup3.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827563/",
            "reporter": "anonymous"
        }
    ],
    "3827562": [
        {
            "dateadded": "2026-04-21 04:32:18 UTC",
            "url": "http://182.112.234.30:46486/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827562/",
            "reporter": "geenensp"
        }
    ],
    "3827561": [
        {
            "dateadded": "2026-04-21 04:32:13 UTC",
            "url": "https://sweet-bun2.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827561/",
            "reporter": "anonymous"
        }
    ],
    "3827560": [
        {
            "dateadded": "2026-04-21 04:32:07 UTC",
            "url": "http://42.233.148.170:43622/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827560/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827559": [
        {
            "dateadded": "2026-04-21 04:27:14 UTC",
            "url": "http://36.92.154.218:40629/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827559/",
            "reporter": "geenensp"
        }
    ],
    "3827558": [
        {
            "dateadded": "2026-04-21 04:24:10 UTC",
            "url": "https://tasty-pi-e1.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827558/",
            "reporter": "anonymous"
        }
    ],
    "3827557": [
        {
            "dateadded": "2026-04-21 04:23:14 UTC",
            "url": "http://27.37.103.135:59660/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:13:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827557/",
            "reporter": "geenensp"
        }
    ],
    "3827556": [
        {
            "dateadded": "2026-04-21 04:20:12 UTC",
            "url": "https://easy-ta-sk6.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827556/",
            "reporter": "anonymous"
        }
    ],
    "3827555": [
        {
            "dateadded": "2026-04-21 04:14:09 UTC",
            "url": "https://justta-lk5.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827555/",
            "reporter": "anonymous"
        }
    ],
    "3827554": [
        {
            "dateadded": "2026-04-21 04:11:15 UTC",
            "url": "http://61.3.27.180:52857/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827554/",
            "reporter": "geenensp"
        }
    ],
    "3827553": [
        {
            "dateadded": "2026-04-21 04:08:06 UTC",
            "url": "https://nice-sh-ot4.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827553/",
            "reporter": "anonymous"
        }
    ],
    "3827552": [
        {
            "dateadded": "2026-04-21 04:07:14 UTC",
            "url": "http://105.186.219.99:37487/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:38:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827552/",
            "reporter": "geenensp"
        }
    ],
    "3827551": [
        {
            "dateadded": "2026-04-21 04:05:10 UTC",
            "url": "http://105.186.219.99:37487/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827551/",
            "reporter": "geenensp"
        }
    ],
    "3827550": [
        {
            "dateadded": "2026-04-21 04:04:09 UTC",
            "url": "https://real-fact3.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 04:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827550/",
            "reporter": "anonymous"
        }
    ],
    "3827549": [
        {
            "dateadded": "2026-04-21 03:58:12 UTC",
            "url": "http://123.8.7.51:49444/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827549/",
            "reporter": "geenensp"
        }
    ],
    "3827548": [
        {
            "dateadded": "2026-04-21 03:58:11 UTC",
            "url": "https://best-ti-me2.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827548/",
            "reporter": "anonymous"
        }
    ],
    "3827547": [
        {
            "dateadded": "2026-04-21 03:57:13 UTC",
            "url": "http://77.245.107.223:51061/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:38:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827547/",
            "reporter": "geenensp"
        }
    ],
    "3827546": [
        {
            "dateadded": "2026-04-21 03:52:11 UTC",
            "url": "https://good-n-ews1.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827546/",
            "reporter": "anonymous"
        }
    ],
    "3827545": [
        {
            "dateadded": "2026-04-21 03:49:08 UTC",
            "url": "http://61.52.39.112:37431/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827545/",
            "reporter": "geenensp"
        }
    ],
    "3827543": [
        {
            "dateadded": "2026-04-21 03:46:13 UTC",
            "url": "http://61.3.27.180:52857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 03:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827543/",
            "reporter": "geenensp"
        }
    ],
    "3827544": [
        {
            "dateadded": "2026-04-21 03:46:13 UTC",
            "url": "https://side-vi-ew6.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827544/",
            "reporter": "anonymous"
        }
    ],
    "3827542": [
        {
            "dateadded": "2026-04-21 03:45:09 UTC",
            "url": "http://123.130.150.174:42891/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:22:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827542/",
            "reporter": "geenensp"
        }
    ],
    "3827541": [
        {
            "dateadded": "2026-04-21 03:42:13 UTC",
            "url": "https://backy-ard5.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827541/",
            "reporter": "anonymous"
        }
    ],
    "3827540": [
        {
            "dateadded": "2026-04-21 03:42:08 UTC",
            "url": "http://123.14.123.238:54132/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:01:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827540/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827539": [
        {
            "dateadded": "2026-04-21 03:40:17 UTC",
            "url": "http://115.204.211.203:59763/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827539/",
            "reporter": "geenensp"
        }
    ],
    "3827538": [
        {
            "dateadded": "2026-04-21 03:36:20 UTC",
            "url": "http://182.121.158.55:33054/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827538/",
            "reporter": "geenensp"
        }
    ],
    "3827537": [
        {
            "dateadded": "2026-04-21 03:36:09 UTC",
            "url": "https://fullr-oom4.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827537/",
            "reporter": "anonymous"
        }
    ],
    "3827536": [
        {
            "dateadded": "2026-04-21 03:32:06 UTC",
            "url": "http://222.138.116.17:53758/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:52:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827536/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827535": [
        {
            "dateadded": "2026-04-21 03:30:14 UTC",
            "url": "http://42.56.219.68:46771/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827535/",
            "reporter": "geenensp"
        }
    ],
    "3827534": [
        {
            "dateadded": "2026-04-21 03:30:09 UTC",
            "url": "https://next-door3.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827534/",
            "reporter": "anonymous"
        }
    ],
    "3827533": [
        {
            "dateadded": "2026-04-21 03:25:19 UTC",
            "url": "http://123.13.0.227:46636/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827533/",
            "reporter": "geenensp"
        }
    ],
    "3827532": [
        {
            "dateadded": "2026-04-21 03:24:11 UTC",
            "url": "https://city-wa-lk2.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827532/",
            "reporter": "anonymous"
        }
    ],
    "3827531": [
        {
            "dateadded": "2026-04-21 03:23:11 UTC",
            "url": "http://221.15.227.138:34372/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:43:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827531/",
            "reporter": "geenensp"
        }
    ],
    "3827530": [
        {
            "dateadded": "2026-04-21 03:21:23 UTC",
            "url": "http://123.11.243.174:43883/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 12:13:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827530/",
            "reporter": "geenensp"
        }
    ],
    "3827529": [
        {
            "dateadded": "2026-04-21 03:21:10 UTC",
            "url": "https://top-f-loor1.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827529/",
            "reporter": "anonymous"
        }
    ],
    "3827528": [
        {
            "dateadded": "2026-04-21 03:20:11 UTC",
            "url": "http://123.130.150.174:42891/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:44:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827528/",
            "reporter": "geenensp"
        }
    ],
    "3827527": [
        {
            "dateadded": "2026-04-21 03:17:09 UTC",
            "url": "https://silver-ra-in6.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827527/",
            "reporter": "anonymous"
        }
    ],
    "3827526": [
        {
            "dateadded": "2026-04-21 03:13:12 UTC",
            "url": "http://125.41.225.171:57103/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:05:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827526/",
            "reporter": "geenensp"
        }
    ],
    "3827525": [
        {
            "dateadded": "2026-04-21 03:12:08 UTC",
            "url": "http://42.59.114.129:32782/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:48:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827525/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827524": [
        {
            "dateadded": "2026-04-21 03:09:14 UTC",
            "url": "http://61.241.191.103:49977/i",
            "url_status": "offline",
            "last_online": "2026-04-21 12:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827524/",
            "reporter": "geenensp"
        }
    ],
    "3827523": [
        {
            "dateadded": "2026-04-21 03:07:10 UTC",
            "url": "https://whitecl-oud5.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827523/",
            "reporter": "anonymous"
        }
    ],
    "3827522": [
        {
            "dateadded": "2026-04-21 03:04:18 UTC",
            "url": "http://115.56.57.42:54634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:48:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827522/",
            "reporter": "geenensp"
        }
    ],
    "3827521": [
        {
            "dateadded": "2026-04-21 03:02:07 UTC",
            "url": "https://goldfi-sh4.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 03:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827521/",
            "reporter": "anonymous"
        }
    ],
    "3827519": [
        {
            "dateadded": "2026-04-21 02:57:12 UTC",
            "url": "https://deep-ocean3.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827519/",
            "reporter": "anonymous"
        }
    ],
    "3827520": [
        {
            "dateadded": "2026-04-21 02:57:12 UTC",
            "url": "http://219.157.16.97:52865/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:42:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827520/",
            "reporter": "geenensp"
        }
    ],
    "3827518": [
        {
            "dateadded": "2026-04-21 02:54:18 UTC",
            "url": "http://42.4.105.58:44937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:12:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827518/",
            "reporter": "geenensp"
        }
    ],
    "3827517": [
        {
            "dateadded": "2026-04-21 02:51:10 UTC",
            "url": "https://dark-ni-ght2.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827517/",
            "reporter": "anonymous"
        }
    ],
    "3827516": [
        {
            "dateadded": "2026-04-21 02:47:18 UTC",
            "url": "http://125.40.83.225:42752/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:06:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827516/",
            "reporter": "geenensp"
        }
    ],
    "3827515": [
        {
            "dateadded": "2026-04-21 02:47:09 UTC",
            "url": "https://bright-sk-y1.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827515/",
            "reporter": "anonymous"
        }
    ],
    "3827514": [
        {
            "dateadded": "2026-04-21 02:45:13 UTC",
            "url": "http://111.164.69.142:57439/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827514/",
            "reporter": "geenensp"
        }
    ],
    "3827513": [
        {
            "dateadded": "2026-04-21 02:40:09 UTC",
            "url": "https://old-ca-se6.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827513/",
            "reporter": "anonymous"
        }
    ],
    "3827512": [
        {
            "dateadded": "2026-04-21 02:38:09 UTC",
            "url": "http://49.70.124.58:46148/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:43:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827512/",
            "reporter": "geenensp"
        }
    ],
    "3827511": [
        {
            "dateadded": "2026-04-21 02:37:06 UTC",
            "url": "http://42.59.114.129:32782/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:02:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827511/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827510": [
        {
            "dateadded": "2026-04-21 02:36:17 UTC",
            "url": "http://176.65.139.141/bins/jew.x86",
            "url_status": "offline",
            "last_online": "2026-04-24 11:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mirai",
                "x86-32"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827510/",
            "reporter": "geenensp"
        }
    ],
    "3827509": [
        {
            "dateadded": "2026-04-21 02:34:11 UTC",
            "url": "http://123.13.0.227:46636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 06:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827509/",
            "reporter": "geenensp"
        }
    ],
    "3827508": [
        {
            "dateadded": "2026-04-21 02:34:06 UTC",
            "url": "https://cool-stone5.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827508/",
            "reporter": "anonymous"
        }
    ],
    "3827507": [
        {
            "dateadded": "2026-04-21 02:29:08 UTC",
            "url": "https://warm-m-ilk4.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827507/",
            "reporter": "anonymous"
        }
    ],
    "3827506": [
        {
            "dateadded": "2026-04-21 02:24:10 UTC",
            "url": "https://hottea3.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827506/",
            "reporter": "anonymous"
        }
    ],
    "3827505": [
        {
            "dateadded": "2026-04-21 02:21:15 UTC",
            "url": "http://123.11.78.251:52320/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827505/",
            "reporter": "geenensp"
        }
    ],
    "3827504": [
        {
            "dateadded": "2026-04-21 02:18:10 UTC",
            "url": "https://sweet-bun2.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827504/",
            "reporter": "anonymous"
        }
    ],
    "3827503": [
        {
            "dateadded": "2026-04-21 02:12:08 UTC",
            "url": "https://fresh-app-l1.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827503/",
            "reporter": "anonymous"
        }
    ],
    "3827502": [
        {
            "dateadded": "2026-04-21 02:09:31 UTC",
            "url": "http://112.240.175.123:44673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827502/",
            "reporter": "geenensp"
        }
    ],
    "3827501": [
        {
            "dateadded": "2026-04-21 02:09:11 UTC",
            "url": "http://49.70.124.58:46148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:18:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827501/",
            "reporter": "geenensp"
        }
    ],
    "3827500": [
        {
            "dateadded": "2026-04-21 02:07:09 UTC",
            "url": "https://redbook6.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827500/",
            "reporter": "anonymous"
        }
    ],
    "3827499": [
        {
            "dateadded": "2026-04-21 02:07:08 UTC",
            "url": "http://219.154.26.37:42585/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827499/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827498": [
        {
            "dateadded": "2026-04-21 02:05:17 UTC",
            "url": "http://27.216.120.230:43757/i",
            "url_status": "offline",
            "last_online": "2026-04-25 15:23:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827498/",
            "reporter": "geenensp"
        }
    ],
    "3827497": [
        {
            "dateadded": "2026-04-21 02:01:09 UTC",
            "url": "https://coldwa-ter5.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 02:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827497/",
            "reporter": "anonymous"
        }
    ],
    "3827496": [
        {
            "dateadded": "2026-04-21 02:00:17 UTC",
            "url": "http://117.199.74.85:51885/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827496/",
            "reporter": "geenensp"
        }
    ],
    "3827495": [
        {
            "dateadded": "2026-04-21 01:56:19 UTC",
            "url": "http://125.42.195.156:35605/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:56:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827495/",
            "reporter": "geenensp"
        }
    ],
    "3827494": [
        {
            "dateadded": "2026-04-21 01:56:08 UTC",
            "url": "https://new-vi-ew4.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827494/",
            "reporter": "anonymous"
        }
    ],
    "3827492": [
        {
            "dateadded": "2026-04-21 01:54:16 UTC",
            "url": "http://42.237.48.56:33520/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:54:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827492/",
            "reporter": "geenensp"
        }
    ],
    "3827493": [
        {
            "dateadded": "2026-04-21 01:54:16 UTC",
            "url": "http://123.11.78.251:52320/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827493/",
            "reporter": "geenensp"
        }
    ],
    "3827491": [
        {
            "dateadded": "2026-04-21 01:53:19 UTC",
            "url": "http://116.149.31.4:40109/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827491/",
            "reporter": "adliwahid"
        }
    ],
    "3827490": [
        {
            "dateadded": "2026-04-21 01:53:17 UTC",
            "url": "http://123.188.53.69:50615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 12:44:02 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827490/",
            "reporter": "adliwahid"
        }
    ],
    "3827489": [
        {
            "dateadded": "2026-04-21 01:53:09 UTC",
            "url": "http://120.84.214.149:52583/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:14:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827489/",
            "reporter": "adliwahid"
        }
    ],
    "3827477": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://219.157.67.205:47368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 04:45:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827477/",
            "reporter": "adliwahid"
        }
    ],
    "3827478": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://125.47.73.222:44068/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:05:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827478/",
            "reporter": "adliwahid"
        }
    ],
    "3827479": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://110.38.221.11:38759/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827479/",
            "reporter": "adliwahid"
        }
    ],
    "3827480": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://60.19.157.29:35723/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827480/",
            "reporter": "adliwahid"
        }
    ],
    "3827481": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://36.49.26.178:44714/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:56:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827481/",
            "reporter": "adliwahid"
        }
    ],
    "3827482": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://110.38.221.11:38759/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827482/",
            "reporter": "adliwahid"
        }
    ],
    "3827483": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://60.23.233.241:56604/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:53:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827483/",
            "reporter": "adliwahid"
        }
    ],
    "3827484": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://61.54.235.220:34768/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827484/",
            "reporter": "adliwahid"
        }
    ],
    "3827485": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://123.132.147.237:55471/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827485/",
            "reporter": "adliwahid"
        }
    ],
    "3827486": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://119.152.232.95:59846/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827486/",
            "reporter": "adliwahid"
        }
    ],
    "3827487": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://222.137.94.32:57017/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:19:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827487/",
            "reporter": "adliwahid"
        }
    ],
    "3827488": [
        {
            "dateadded": "2026-04-21 01:53:08 UTC",
            "url": "http://27.37.127.166:52992/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:45:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827488/",
            "reporter": "adliwahid"
        }
    ],
    "3827476": [
        {
            "dateadded": "2026-04-21 01:52:21 UTC",
            "url": "http://68.235.251.85:60831/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827476/",
            "reporter": "adliwahid"
        }
    ],
    "3827475": [
        {
            "dateadded": "2026-04-21 01:52:17 UTC",
            "url": "http://68.235.251.85:60831/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827475/",
            "reporter": "adliwahid"
        }
    ],
    "3827474": [
        {
            "dateadded": "2026-04-21 01:52:14 UTC",
            "url": "http://117.217.224.223:53323/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:04:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827474/",
            "reporter": "adliwahid"
        }
    ],
    "3827470": [
        {
            "dateadded": "2026-04-21 01:52:11 UTC",
            "url": "http://60.23.233.241:56604/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:52:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827470/",
            "reporter": "adliwahid"
        }
    ],
    "3827471": [
        {
            "dateadded": "2026-04-21 01:52:11 UTC",
            "url": "http://83.69.13.106:60207/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:08:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827471/",
            "reporter": "adliwahid"
        }
    ],
    "3827472": [
        {
            "dateadded": "2026-04-21 01:52:11 UTC",
            "url": "http://123.13.49.196:48924/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:46:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827472/",
            "reporter": "adliwahid"
        }
    ],
    "3827473": [
        {
            "dateadded": "2026-04-21 01:52:11 UTC",
            "url": "http://123.189.175.33:40944/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827473/",
            "reporter": "adliwahid"
        }
    ],
    "3827452": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://202.110.28.203:45402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 23:19:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827452/",
            "reporter": "adliwahid"
        }
    ],
    "3827453": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://61.52.32.161:43109/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827453/",
            "reporter": "adliwahid"
        }
    ],
    "3827454": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://125.41.7.165:44712/i",
            "url_status": "offline",
            "last_online": "2026-04-21 06:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827454/",
            "reporter": "adliwahid"
        }
    ],
    "3827455": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://125.41.7.165:44712/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:47:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827455/",
            "reporter": "adliwahid"
        }
    ],
    "3827456": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://222.141.81.50:58938/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827456/",
            "reporter": "adliwahid"
        }
    ],
    "3827457": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://27.207.229.129:45869/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827457/",
            "reporter": "adliwahid"
        }
    ],
    "3827458": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://171.38.149.164:49606/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827458/",
            "reporter": "adliwahid"
        }
    ],
    "3827459": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://112.93.202.83:46327/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:55:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827459/",
            "reporter": "adliwahid"
        }
    ],
    "3827460": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://61.71.169.3:39471/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827460/",
            "reporter": "adliwahid"
        }
    ],
    "3827461": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://27.15.56.127:53745/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:45:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827461/",
            "reporter": "adliwahid"
        }
    ],
    "3827462": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://115.54.153.249:60510/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827462/",
            "reporter": "adliwahid"
        }
    ],
    "3827463": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://124.129.110.112:46511/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827463/",
            "reporter": "adliwahid"
        }
    ],
    "3827464": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://110.186.229.110:54000/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827464/",
            "reporter": "adliwahid"
        }
    ],
    "3827465": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://39.79.159.165:46558/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:26:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827465/",
            "reporter": "adliwahid"
        }
    ],
    "3827466": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://42.4.105.58:44937/i",
            "url_status": "offline",
            "last_online": "2026-04-25 04:53:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827466/",
            "reporter": "adliwahid"
        }
    ],
    "3827467": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://42.56.40.220:47095/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:52:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827467/",
            "reporter": "adliwahid"
        }
    ],
    "3827468": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://5.206.110.4:43625/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:38:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827468/",
            "reporter": "adliwahid"
        }
    ],
    "3827469": [
        {
            "dateadded": "2026-04-21 01:52:10 UTC",
            "url": "http://178.69.227.89:35882/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:52:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827469/",
            "reporter": "adliwahid"
        }
    ],
    "3827451": [
        {
            "dateadded": "2026-04-21 01:52:09 UTC",
            "url": "http://221.15.9.123:33543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827451/",
            "reporter": "adliwahid"
        }
    ],
    "3827450": [
        {
            "dateadded": "2026-04-21 01:52:06 UTC",
            "url": "http://46.10.44.142:64613/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827450/",
            "reporter": "adliwahid"
        }
    ],
    "3827449": [
        {
            "dateadded": "2026-04-21 01:51:20 UTC",
            "url": "http://88.235.109.245:56344/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:29:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827449/",
            "reporter": "adliwahid"
        }
    ],
    "3827447": [
        {
            "dateadded": "2026-04-21 01:51:14 UTC",
            "url": "http://176.121.199.3:31642/i",
            "url_status": "offline",
            "last_online": "2026-04-25 02:25:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827447/",
            "reporter": "adliwahid"
        }
    ],
    "3827448": [
        {
            "dateadded": "2026-04-21 01:51:14 UTC",
            "url": "http://151.42.171.194:45872/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827448/",
            "reporter": "geenensp"
        }
    ],
    "3827443": [
        {
            "dateadded": "2026-04-21 01:51:13 UTC",
            "url": "http://219.156.98.224:52257/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827443/",
            "reporter": "adliwahid"
        }
    ],
    "3827444": [
        {
            "dateadded": "2026-04-21 01:51:13 UTC",
            "url": "http://122.234.30.7:44501/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:09:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827444/",
            "reporter": "adliwahid"
        }
    ],
    "3827445": [
        {
            "dateadded": "2026-04-21 01:51:13 UTC",
            "url": "http://110.186.229.110:54000/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827445/",
            "reporter": "adliwahid"
        }
    ],
    "3827446": [
        {
            "dateadded": "2026-04-21 01:51:13 UTC",
            "url": "http://59.173.54.131:60896/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:49:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827446/",
            "reporter": "adliwahid"
        }
    ],
    "3827422": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://175.150.55.20:42024/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827422/",
            "reporter": "adliwahid"
        }
    ],
    "3827423": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://119.115.55.152:60983/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:57:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827423/",
            "reporter": "adliwahid"
        }
    ],
    "3827424": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://182.127.127.117:40518/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827424/",
            "reporter": "adliwahid"
        }
    ],
    "3827425": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://110.39.231.61:57505/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827425/",
            "reporter": "adliwahid"
        }
    ],
    "3827426": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://113.237.63.189:47545/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 08:38:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827426/",
            "reporter": "adliwahid"
        }
    ],
    "3827427": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://219.155.200.88:53735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827427/",
            "reporter": "adliwahid"
        }
    ],
    "3827428": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://219.156.98.81:50225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:51:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827428/",
            "reporter": "adliwahid"
        }
    ],
    "3827429": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://42.231.70.109:49781/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827429/",
            "reporter": "adliwahid"
        }
    ],
    "3827430": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://182.127.152.64:38038/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:22:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827430/",
            "reporter": "adliwahid"
        }
    ],
    "3827431": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://42.54.173.14:44279/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:11:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827431/",
            "reporter": "adliwahid"
        }
    ],
    "3827432": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://27.189.30.220:39967/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827432/",
            "reporter": "adliwahid"
        }
    ],
    "3827433": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://182.122.52.112:33589/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:08:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827433/",
            "reporter": "adliwahid"
        }
    ],
    "3827434": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://119.162.161.96:54977/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827434/",
            "reporter": "adliwahid"
        }
    ],
    "3827435": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://156.229.118.140:47229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:16:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827435/",
            "reporter": "adliwahid"
        }
    ],
    "3827436": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://202.110.28.203:45402/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:01:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827436/",
            "reporter": "adliwahid"
        }
    ],
    "3827437": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://119.152.232.95:59846/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:55:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827437/",
            "reporter": "adliwahid"
        }
    ],
    "3827438": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://31.148.197.150:33028/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827438/",
            "reporter": "adliwahid"
        }
    ],
    "3827439": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://115.54.153.249:60510/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:40:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827439/",
            "reporter": "adliwahid"
        }
    ],
    "3827440": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://61.52.32.161:43109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827440/",
            "reporter": "adliwahid"
        }
    ],
    "3827441": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://59.173.54.131:60896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:18:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827441/",
            "reporter": "adliwahid"
        }
    ],
    "3827442": [
        {
            "dateadded": "2026-04-21 01:51:12 UTC",
            "url": "http://221.15.9.123:33543/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827442/",
            "reporter": "adliwahid"
        }
    ],
    "3827421": [
        {
            "dateadded": "2026-04-21 01:51:11 UTC",
            "url": "http://103.245.195.38:43822/i",
            "url_status": "offline",
            "last_online": "2026-04-26 21:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827421/",
            "reporter": "adliwahid"
        }
    ],
    "3827420": [
        {
            "dateadded": "2026-04-21 01:50:21 UTC",
            "url": "http://113.230.52.12:52912/i",
            "url_status": "offline",
            "last_online": "2026-04-26 11:22:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827420/",
            "reporter": "adliwahid"
        }
    ],
    "3827416": [
        {
            "dateadded": "2026-04-21 01:50:14 UTC",
            "url": "http://123.5.173.21:40509/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827416/",
            "reporter": "adliwahid"
        }
    ],
    "3827417": [
        {
            "dateadded": "2026-04-21 01:50:14 UTC",
            "url": "http://61.71.169.3:39471/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:59:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827417/",
            "reporter": "adliwahid"
        }
    ],
    "3827418": [
        {
            "dateadded": "2026-04-21 01:50:14 UTC",
            "url": "http://124.129.110.112:46511/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827418/",
            "reporter": "adliwahid"
        }
    ],
    "3827419": [
        {
            "dateadded": "2026-04-21 01:50:14 UTC",
            "url": "https://bigwall3.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827419/",
            "reporter": "anonymous"
        }
    ],
    "3827408": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://125.41.225.171:57103/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:54:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827408/",
            "reporter": "adliwahid"
        }
    ],
    "3827409": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://42.86.80.179:52444/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:50:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827409/",
            "reporter": "adliwahid"
        }
    ],
    "3827410": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://222.141.81.50:58938/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:01:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827410/",
            "reporter": "adliwahid"
        }
    ],
    "3827411": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://61.163.158.31:59140/i",
            "url_status": "offline",
            "last_online": "2026-04-23 13:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827411/",
            "reporter": "adliwahid"
        }
    ],
    "3827412": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://125.161.192.225:46189/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:26:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827412/",
            "reporter": "adliwahid"
        }
    ],
    "3827413": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://182.124.28.30:41179/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827413/",
            "reporter": "adliwahid"
        }
    ],
    "3827414": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://123.132.147.237:55471/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827414/",
            "reporter": "adliwahid"
        }
    ],
    "3827415": [
        {
            "dateadded": "2026-04-21 01:50:13 UTC",
            "url": "http://182.124.28.30:41179/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:54:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827415/",
            "reporter": "adliwahid"
        }
    ],
    "3827399": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://115.55.11.39:44336/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:11:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827399/",
            "reporter": "adliwahid"
        }
    ],
    "3827400": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://42.227.187.182:44194/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:54:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827400/",
            "reporter": "adliwahid"
        }
    ],
    "3827401": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://42.225.206.151:33306/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827401/",
            "reporter": "adliwahid"
        }
    ],
    "3827402": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://61.52.88.221:45987/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827402/",
            "reporter": "adliwahid"
        }
    ],
    "3827403": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://182.127.45.103:34884/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827403/",
            "reporter": "adliwahid"
        }
    ],
    "3827404": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://175.151.165.236:51638/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 13:58:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827404/",
            "reporter": "adliwahid"
        }
    ],
    "3827405": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://61.53.94.107:33769/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:25:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827405/",
            "reporter": "adliwahid"
        }
    ],
    "3827406": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://112.93.202.83:46327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 04:58:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827406/",
            "reporter": "adliwahid"
        }
    ],
    "3827407": [
        {
            "dateadded": "2026-04-21 01:50:12 UTC",
            "url": "http://112.109.219.21:54244/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827407/",
            "reporter": "adliwahid"
        }
    ],
    "3827398": [
        {
            "dateadded": "2026-04-21 01:49:16 UTC",
            "url": "http://175.151.165.236:51638/i",
            "url_status": "offline",
            "last_online": "2026-04-26 17:16:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827398/",
            "reporter": "adliwahid"
        }
    ],
    "3827395": [
        {
            "dateadded": "2026-04-21 01:49:12 UTC",
            "url": "http://118.113.53.214:35863/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:01:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827395/",
            "reporter": "adliwahid"
        }
    ],
    "3827396": [
        {
            "dateadded": "2026-04-21 01:49:12 UTC",
            "url": "http://60.23.232.210:59412/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:40:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827396/",
            "reporter": "adliwahid"
        }
    ],
    "3827397": [
        {
            "dateadded": "2026-04-21 01:49:12 UTC",
            "url": "http://122.191.25.150:47353/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:49:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827397/",
            "reporter": "adliwahid"
        }
    ],
    "3827381": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://221.15.91.16:51299/i",
            "url_status": "offline",
            "last_online": "2026-04-22 00:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827381/",
            "reporter": "adliwahid"
        }
    ],
    "3827382": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://27.207.229.129:45869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827382/",
            "reporter": "adliwahid"
        }
    ],
    "3827383": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://112.239.122.58:44083/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827383/",
            "reporter": "adliwahid"
        }
    ],
    "3827384": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://113.238.14.226:50437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:20:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827384/",
            "reporter": "adliwahid"
        }
    ],
    "3827385": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://175.152.157.149:38327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827385/",
            "reporter": "adliwahid"
        }
    ],
    "3827386": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://42.57.181.118:57529/i",
            "url_status": "offline",
            "last_online": "2026-04-25 11:19:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827386/",
            "reporter": "adliwahid"
        }
    ],
    "3827387": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://219.156.98.81:50225/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:49:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827387/",
            "reporter": "adliwahid"
        }
    ],
    "3827388": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://175.150.55.20:42024/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827388/",
            "reporter": "adliwahid"
        }
    ],
    "3827389": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://42.227.187.182:44194/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:55:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827389/",
            "reporter": "adliwahid"
        }
    ],
    "3827390": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://182.127.152.64:38038/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:57:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827390/",
            "reporter": "adliwahid"
        }
    ],
    "3827391": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://182.122.52.112:33589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827391/",
            "reporter": "adliwahid"
        }
    ],
    "3827392": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://115.58.163.24:47720/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:59:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827392/",
            "reporter": "adliwahid"
        }
    ],
    "3827393": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://61.54.214.49:54653/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:07:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827393/",
            "reporter": "adliwahid"
        }
    ],
    "3827394": [
        {
            "dateadded": "2026-04-21 01:49:11 UTC",
            "url": "http://61.54.235.220:34768/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827394/",
            "reporter": "adliwahid"
        }
    ],
    "3827377": [
        {
            "dateadded": "2026-04-21 01:49:10 UTC",
            "url": "http://123.4.197.229:36570/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:49:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827377/",
            "reporter": "adliwahid"
        }
    ],
    "3827378": [
        {
            "dateadded": "2026-04-21 01:49:10 UTC",
            "url": "http://120.28.219.129:56473/i",
            "url_status": "offline",
            "last_online": "2026-04-26 08:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827378/",
            "reporter": "adliwahid"
        }
    ],
    "3827379": [
        {
            "dateadded": "2026-04-21 01:49:10 UTC",
            "url": "http://42.226.210.175:51379/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:05:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827379/",
            "reporter": "adliwahid"
        }
    ],
    "3827380": [
        {
            "dateadded": "2026-04-21 01:49:10 UTC",
            "url": "http://120.28.219.129:56473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 04:58:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827380/",
            "reporter": "adliwahid"
        }
    ],
    "3827375": [
        {
            "dateadded": "2026-04-21 01:48:21 UTC",
            "url": "http://175.146.253.100:35666/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:31:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827375/",
            "reporter": "adliwahid"
        }
    ],
    "3827376": [
        {
            "dateadded": "2026-04-21 01:48:21 UTC",
            "url": "http://175.169.66.166:46337/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827376/",
            "reporter": "adliwahid"
        }
    ],
    "3827374": [
        {
            "dateadded": "2026-04-21 01:48:20 UTC",
            "url": "http://116.149.31.4:40109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827374/",
            "reporter": "adliwahid"
        }
    ],
    "3827373": [
        {
            "dateadded": "2026-04-21 01:48:12 UTC",
            "url": "http://119.162.161.96:54977/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827373/",
            "reporter": "adliwahid"
        }
    ],
    "3827359": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://27.207.231.230:33928/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827359/",
            "reporter": "adliwahid"
        }
    ],
    "3827360": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://202.107.96.32:32873/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:02:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827360/",
            "reporter": "adliwahid"
        }
    ],
    "3827361": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://122.191.25.150:47353/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827361/",
            "reporter": "adliwahid"
        }
    ],
    "3827362": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://123.11.12.27:57114/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:54:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827362/",
            "reporter": "adliwahid"
        }
    ],
    "3827363": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://110.136.96.171:47500/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:50:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827363/",
            "reporter": "adliwahid"
        }
    ],
    "3827364": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://125.47.73.222:44068/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:06:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827364/",
            "reporter": "adliwahid"
        }
    ],
    "3827365": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://60.19.157.29:35723/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827365/",
            "reporter": "adliwahid"
        }
    ],
    "3827366": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://42.231.70.109:49781/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827366/",
            "reporter": "adliwahid"
        }
    ],
    "3827367": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://58.23.74.213:55017/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:24:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827367/",
            "reporter": "adliwahid"
        }
    ],
    "3827368": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://222.137.94.32:57017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827368/",
            "reporter": "adliwahid"
        }
    ],
    "3827369": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://27.189.30.220:39967/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827369/",
            "reporter": "adliwahid"
        }
    ],
    "3827370": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://182.127.45.103:34884/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827370/",
            "reporter": "adliwahid"
        }
    ],
    "3827371": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://221.15.91.16:51299/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 02:28:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827371/",
            "reporter": "adliwahid"
        }
    ],
    "3827372": [
        {
            "dateadded": "2026-04-21 01:48:11 UTC",
            "url": "http://175.152.157.149:38327/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827372/",
            "reporter": "adliwahid"
        }
    ],
    "3827353": [
        {
            "dateadded": "2026-04-21 01:48:10 UTC",
            "url": "http://182.127.109.167:57529/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:19:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827353/",
            "reporter": "adliwahid"
        }
    ],
    "3827354": [
        {
            "dateadded": "2026-04-21 01:48:10 UTC",
            "url": "http://180.243.65.33:38843/i",
            "url_status": "offline",
            "last_online": "2026-04-21 01:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827354/",
            "reporter": "adliwahid"
        }
    ],
    "3827355": [
        {
            "dateadded": "2026-04-21 01:48:10 UTC",
            "url": "http://183.214.149.164:49911/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827355/",
            "reporter": "adliwahid"
        }
    ],
    "3827356": [
        {
            "dateadded": "2026-04-21 01:48:10 UTC",
            "url": "http://116.138.218.112:52416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:17:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827356/",
            "reporter": "adliwahid"
        }
    ],
    "3827357": [
        {
            "dateadded": "2026-04-21 01:48:10 UTC",
            "url": "http://113.237.63.189:47545/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:18:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827357/",
            "reporter": "adliwahid"
        }
    ],
    "3827358": [
        {
            "dateadded": "2026-04-21 01:48:10 UTC",
            "url": "http://39.79.138.147:36311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 08:47:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827358/",
            "reporter": "adliwahid"
        }
    ],
    "3827352": [
        {
            "dateadded": "2026-04-21 01:47:14 UTC",
            "url": "http://42.225.206.151:33306/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827352/",
            "reporter": "geenensp"
        }
    ],
    "3827351": [
        {
            "dateadded": "2026-04-21 01:44:07 UTC",
            "url": "https://soft-cha-ir2.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827351/",
            "reporter": "anonymous"
        }
    ],
    "3827350": [
        {
            "dateadded": "2026-04-21 01:39:08 UTC",
            "url": "http://61.52.0.32:36389/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827350/",
            "reporter": "geenensp"
        }
    ],
    "3827349": [
        {
            "dateadded": "2026-04-21 01:39:07 UTC",
            "url": "https://open-wind1.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827349/",
            "reporter": "anonymous"
        }
    ],
    "3827348": [
        {
            "dateadded": "2026-04-21 01:34:13 UTC",
            "url": "https://cle-arbox6.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827348/",
            "reporter": "anonymous"
        }
    ],
    "3827347": [
        {
            "dateadded": "2026-04-21 01:33:07 UTC",
            "url": "http://182.117.68.190:37503/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:51:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827347/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827346": [
        {
            "dateadded": "2026-04-21 01:32:07 UTC",
            "url": "http://175.173.89.182:44943/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:32:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827346/",
            "reporter": "adliwahid"
        }
    ],
    "3827343": [
        {
            "dateadded": "2026-04-21 01:31:07 UTC",
            "url": "http://181.79.85.69:6044/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827343/",
            "reporter": "adliwahid"
        }
    ],
    "3827344": [
        {
            "dateadded": "2026-04-21 01:31:07 UTC",
            "url": "http://42.177.200.236:41439/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:59:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827344/",
            "reporter": "adliwahid"
        }
    ],
    "3827345": [
        {
            "dateadded": "2026-04-21 01:31:07 UTC",
            "url": "http://116.138.218.112:52416/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:11:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827345/",
            "reporter": "adliwahid"
        }
    ],
    "3827342": [
        {
            "dateadded": "2026-04-21 01:31:06 UTC",
            "url": "http://42.177.231.108:58979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 06:08:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827342/",
            "reporter": "adliwahid"
        }
    ],
    "3827341": [
        {
            "dateadded": "2026-04-21 01:30:26 UTC",
            "url": "http://123.189.192.153:38211/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827341/",
            "reporter": "adliwahid"
        }
    ],
    "3827334": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://94.244.36.34:43152/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:50:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827334/",
            "reporter": "adliwahid"
        }
    ],
    "3827335": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://42.6.65.240:60301/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:05:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827335/",
            "reporter": "adliwahid"
        }
    ],
    "3827336": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://42.224.91.179:44214/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827336/",
            "reporter": "adliwahid"
        }
    ],
    "3827337": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://125.43.229.235:51959/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827337/",
            "reporter": "adliwahid"
        }
    ],
    "3827338": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://125.43.229.235:51959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:15:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827338/",
            "reporter": "adliwahid"
        }
    ],
    "3827339": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://175.173.89.182:44943/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:33:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827339/",
            "reporter": "adliwahid"
        }
    ],
    "3827340": [
        {
            "dateadded": "2026-04-21 01:30:11 UTC",
            "url": "http://42.224.91.179:44214/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:55:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827340/",
            "reporter": "adliwahid"
        }
    ],
    "3827326": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://94.244.36.34:43152/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827326/",
            "reporter": "adliwahid"
        }
    ],
    "3827327": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://113.237.53.138:55571/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:39:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827327/",
            "reporter": "adliwahid"
        }
    ],
    "3827328": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://94.159.74.226:22142/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827328/",
            "reporter": "adliwahid"
        }
    ],
    "3827329": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://42.230.46.200:48596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:30:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827329/",
            "reporter": "adliwahid"
        }
    ],
    "3827330": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://123.189.131.52:42660/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 01:08:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827330/",
            "reporter": "adliwahid"
        }
    ],
    "3827331": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://27.220.92.204:58013/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:13:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827331/",
            "reporter": "adliwahid"
        }
    ],
    "3827332": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://42.176.14.83:37391/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 22:59:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827332/",
            "reporter": "adliwahid"
        }
    ],
    "3827333": [
        {
            "dateadded": "2026-04-21 01:30:10 UTC",
            "url": "http://83.228.109.209:53896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:40:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827333/",
            "reporter": "adliwahid"
        }
    ],
    "3827325": [
        {
            "dateadded": "2026-04-21 01:29:21 UTC",
            "url": "http://123.189.131.52:42660/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:25:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827325/",
            "reporter": "adliwahid"
        }
    ],
    "3827324": [
        {
            "dateadded": "2026-04-21 01:29:12 UTC",
            "url": "https://faststep5.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827324/",
            "reporter": "anonymous"
        }
    ],
    "3827319": [
        {
            "dateadded": "2026-04-21 01:29:08 UTC",
            "url": "http://42.230.46.200:48596/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:24:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827319/",
            "reporter": "adliwahid"
        }
    ],
    "3827320": [
        {
            "dateadded": "2026-04-21 01:29:08 UTC",
            "url": "http://222.127.48.186:40416/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:24:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827320/",
            "reporter": "adliwahid"
        }
    ],
    "3827321": [
        {
            "dateadded": "2026-04-21 01:29:08 UTC",
            "url": "http://153.3.11.210:52981/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827321/",
            "reporter": "adliwahid"
        }
    ],
    "3827322": [
        {
            "dateadded": "2026-04-21 01:29:08 UTC",
            "url": "http://27.206.140.177:48263/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:53:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827322/",
            "reporter": "adliwahid"
        }
    ],
    "3827323": [
        {
            "dateadded": "2026-04-21 01:29:08 UTC",
            "url": "http://27.206.140.177:48263/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:17:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827323/",
            "reporter": "adliwahid"
        }
    ],
    "3827318": [
        {
            "dateadded": "2026-04-21 01:29:07 UTC",
            "url": "http://24.35.228.16:36932/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827318/",
            "reporter": "adliwahid"
        }
    ],
    "3827317": [
        {
            "dateadded": "2026-04-21 01:28:20 UTC",
            "url": "http://27.37.118.20:48064/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:56:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827317/",
            "reporter": "adliwahid"
        }
    ],
    "3827316": [
        {
            "dateadded": "2026-04-21 01:28:07 UTC",
            "url": "http://111.249.251.152:57693/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:52:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827316/",
            "reporter": "adliwahid"
        }
    ],
    "3827313": [
        {
            "dateadded": "2026-04-21 01:28:06 UTC",
            "url": "http://175.164.98.99:33965/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:16:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827313/",
            "reporter": "adliwahid"
        }
    ],
    "3827314": [
        {
            "dateadded": "2026-04-21 01:28:06 UTC",
            "url": "http://119.117.62.95:34258/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827314/",
            "reporter": "adliwahid"
        }
    ],
    "3827315": [
        {
            "dateadded": "2026-04-21 01:28:06 UTC",
            "url": "http://42.176.14.83:37391/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:36:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827315/",
            "reporter": "adliwahid"
        }
    ],
    "3827312": [
        {
            "dateadded": "2026-04-21 01:27:14 UTC",
            "url": "http://115.63.12.165:56570/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:37:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827312/",
            "reporter": "adliwahid"
        }
    ],
    "3827307": [
        {
            "dateadded": "2026-04-21 01:27:08 UTC",
            "url": "http://110.36.80.162:52499/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:46:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827307/",
            "reporter": "adliwahid"
        }
    ],
    "3827308": [
        {
            "dateadded": "2026-04-21 01:27:08 UTC",
            "url": "http://27.37.114.123:39967/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:22:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827308/",
            "reporter": "adliwahid"
        }
    ],
    "3827309": [
        {
            "dateadded": "2026-04-21 01:27:08 UTC",
            "url": "http://123.189.192.153:38211/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827309/",
            "reporter": "adliwahid"
        }
    ],
    "3827310": [
        {
            "dateadded": "2026-04-21 01:27:08 UTC",
            "url": "http://103.213.235.26:49905/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827310/",
            "reporter": "adliwahid"
        }
    ],
    "3827311": [
        {
            "dateadded": "2026-04-21 01:27:08 UTC",
            "url": "http://27.218.57.214:60999/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827311/",
            "reporter": "adliwahid"
        }
    ],
    "3827303": [
        {
            "dateadded": "2026-04-21 01:26:08 UTC",
            "url": "http://113.237.53.138:55571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:36:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827303/",
            "reporter": "adliwahid"
        }
    ],
    "3827304": [
        {
            "dateadded": "2026-04-21 01:26:08 UTC",
            "url": "http://58.241.74.138:33145/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827304/",
            "reporter": "adliwahid"
        }
    ],
    "3827305": [
        {
            "dateadded": "2026-04-21 01:26:08 UTC",
            "url": "http://58.23.80.137:48453/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827305/",
            "reporter": "adliwahid"
        }
    ],
    "3827306": [
        {
            "dateadded": "2026-04-21 01:26:08 UTC",
            "url": "http://139.213.32.135:52647/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:33:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827306/",
            "reporter": "adliwahid"
        }
    ],
    "3827299": [
        {
            "dateadded": "2026-04-21 01:26:07 UTC",
            "url": "http://90.2.25.142:33487/.i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:43:43 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827299/",
            "reporter": "adliwahid"
        }
    ],
    "3827300": [
        {
            "dateadded": "2026-04-21 01:26:07 UTC",
            "url": "http://181.79.85.69:6044/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827300/",
            "reporter": "adliwahid"
        }
    ],
    "3827301": [
        {
            "dateadded": "2026-04-21 01:26:07 UTC",
            "url": "http://110.37.44.158:56889/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827301/",
            "reporter": "adliwahid"
        }
    ],
    "3827302": [
        {
            "dateadded": "2026-04-21 01:26:07 UTC",
            "url": "http://175.44.153.19:53012/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:23:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827302/",
            "reporter": "adliwahid"
        }
    ],
    "3827298": [
        {
            "dateadded": "2026-04-21 01:25:14 UTC",
            "url": "http://222.139.34.169:34153/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:47:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827298/",
            "reporter": "adliwahid"
        }
    ],
    "3827297": [
        {
            "dateadded": "2026-04-21 01:25:10 UTC",
            "url": "http://175.44.153.19:53012/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827297/",
            "reporter": "adliwahid"
        }
    ],
    "3827293": [
        {
            "dateadded": "2026-04-21 01:25:09 UTC",
            "url": "http://27.205.195.146:33352/i",
            "url_status": "offline",
            "last_online": "2026-04-24 07:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827293/",
            "reporter": "adliwahid"
        }
    ],
    "3827294": [
        {
            "dateadded": "2026-04-21 01:25:09 UTC",
            "url": "http://103.213.235.26:49905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:47:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827294/",
            "reporter": "adliwahid"
        }
    ],
    "3827295": [
        {
            "dateadded": "2026-04-21 01:25:09 UTC",
            "url": "http://175.164.98.99:33965/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:21:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827295/",
            "reporter": "adliwahid"
        }
    ],
    "3827296": [
        {
            "dateadded": "2026-04-21 01:25:09 UTC",
            "url": "http://115.55.232.160:52193/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:50:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827296/",
            "reporter": "adliwahid"
        }
    ],
    "3827291": [
        {
            "dateadded": "2026-04-21 01:25:08 UTC",
            "url": "http://75.118.179.93:41773/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827291/",
            "reporter": "adliwahid"
        }
    ],
    "3827292": [
        {
            "dateadded": "2026-04-21 01:25:08 UTC",
            "url": "http://125.42.125.47:48099/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 12:41:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827292/",
            "reporter": "adliwahid"
        }
    ],
    "3827290": [
        {
            "dateadded": "2026-04-21 01:23:09 UTC",
            "url": "https://white-pa-per4.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827290/",
            "reporter": "anonymous"
        }
    ],
    "3827289": [
        {
            "dateadded": "2026-04-21 01:22:07 UTC",
            "url": "http://182.117.68.190:37503/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:48:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827289/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827288": [
        {
            "dateadded": "2026-04-21 01:20:22 UTC",
            "url": "http://219.157.67.205:47368/i",
            "url_status": "offline",
            "last_online": "2026-04-22 04:42:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827288/",
            "reporter": "geenensp"
        }
    ],
    "3827287": [
        {
            "dateadded": "2026-04-21 01:19:16 UTC",
            "url": "http://88.84.222.217:34875/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 00:03:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827287/",
            "reporter": "geenensp"
        }
    ],
    "3827286": [
        {
            "dateadded": "2026-04-21 01:17:06 UTC",
            "url": "https://smalllamp3.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827286/",
            "reporter": "anonymous"
        }
    ],
    "3827285": [
        {
            "dateadded": "2026-04-21 01:16:18 UTC",
            "url": "http://116.139.127.58:55430/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 01:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827285/",
            "reporter": "geenensp"
        }
    ],
    "3827284": [
        {
            "dateadded": "2026-04-21 01:16:17 UTC",
            "url": "http://115.49.127.101:40062/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:02:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827284/",
            "reporter": "geenensp"
        }
    ],
    "3827283": [
        {
            "dateadded": "2026-04-21 01:15:20 UTC",
            "url": "http://119.99.165.108:40861/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:26:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827283/",
            "reporter": "geenensp"
        }
    ],
    "3827282": [
        {
            "dateadded": "2026-04-21 01:12:08 UTC",
            "url": "https://glassb-otl2.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827282/",
            "reporter": "anonymous"
        }
    ],
    "3827281": [
        {
            "dateadded": "2026-04-21 01:11:17 UTC",
            "url": "http://38.21.70.189:46293/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827281/",
            "reporter": "geenensp"
        }
    ],
    "3827280": [
        {
            "dateadded": "2026-04-21 01:07:09 UTC",
            "url": "https://home-tray1.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827280/",
            "reporter": "anonymous"
        }
    ],
    "3827279": [
        {
            "dateadded": "2026-04-21 01:02:07 UTC",
            "url": "http://123.12.236.250:40588/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:28:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827279/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827278": [
        {
            "dateadded": "2026-04-21 01:01:13 UTC",
            "url": "http://38.21.70.189:46293/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:46:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827278/",
            "reporter": "geenensp"
        }
    ],
    "3827277": [
        {
            "dateadded": "2026-04-21 01:00:09 UTC",
            "url": "https://main-point6.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 01:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827277/",
            "reporter": "anonymous"
        }
    ],
    "3827276": [
        {
            "dateadded": "2026-04-21 00:59:19 UTC",
            "url": "http://123.4.197.229:36570/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827276/",
            "reporter": "geenensp"
        }
    ],
    "3827275": [
        {
            "dateadded": "2026-04-21 00:56:09 UTC",
            "url": "https://quickmove5.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827275/",
            "reporter": "anonymous"
        }
    ],
    "3827274": [
        {
            "dateadded": "2026-04-21 00:55:21 UTC",
            "url": "http://72.29.46.195:43547/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827274/",
            "reporter": "geenensp"
        }
    ],
    "3827273": [
        {
            "dateadded": "2026-04-21 00:55:20 UTC",
            "url": "http://221.203.123.253:60683/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827273/",
            "reporter": "geenensp"
        }
    ],
    "3827272": [
        {
            "dateadded": "2026-04-21 00:52:21 UTC",
            "url": "http://120.37.212.197:43460/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:54:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827272/",
            "reporter": "geenensp"
        }
    ],
    "3827271": [
        {
            "dateadded": "2026-04-21 00:52:20 UTC",
            "url": "http://115.49.127.101:40062/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 12:23:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827271/",
            "reporter": "geenensp"
        }
    ],
    "3827270": [
        {
            "dateadded": "2026-04-21 00:52:08 UTC",
            "url": "http://123.12.236.250:40588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827270/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827269": [
        {
            "dateadded": "2026-04-21 00:49:10 UTC",
            "url": "https://emptys-pace4.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827269/",
            "reporter": "anonymous"
        }
    ],
    "3827268": [
        {
            "dateadded": "2026-04-21 00:45:13 UTC",
            "url": "http://119.99.165.108:40861/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:23:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827268/",
            "reporter": "geenensp"
        }
    ],
    "3827267": [
        {
            "dateadded": "2026-04-21 00:43:06 UTC",
            "url": "https://fullbox3.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827267/",
            "reporter": "anonymous"
        }
    ],
    "3827265": [
        {
            "dateadded": "2026-04-21 00:42:06 UTC",
            "url": "http://123.9.23.27:55263/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827265/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827266": [
        {
            "dateadded": "2026-04-21 00:42:06 UTC",
            "url": "http://183.23.135.246:35197/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:37:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827266/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827264": [
        {
            "dateadded": "2026-04-21 00:38:10 UTC",
            "url": "https://lightp-ack2.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827264/",
            "reporter": "anonymous"
        }
    ],
    "3827263": [
        {
            "dateadded": "2026-04-21 00:32:14 UTC",
            "url": "https://heavy-load1.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827263/",
            "reporter": "anonymous"
        }
    ],
    "3827262": [
        {
            "dateadded": "2026-04-21 00:30:23 UTC",
            "url": "http://221.203.123.253:60683/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:09:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827262/",
            "reporter": "geenensp"
        }
    ],
    "3827261": [
        {
            "dateadded": "2026-04-21 00:29:08 UTC",
            "url": "http://110.37.38.88:37786/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827261/",
            "reporter": "geenensp"
        }
    ],
    "3827260": [
        {
            "dateadded": "2026-04-21 00:28:13 UTC",
            "url": "http://36.64.184.26:59411/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827260/",
            "reporter": "geenensp"
        }
    ],
    "3827259": [
        {
            "dateadded": "2026-04-21 00:28:08 UTC",
            "url": "https://light-moon6.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827259/",
            "reporter": "anonymous"
        }
    ],
    "3827258": [
        {
            "dateadded": "2026-04-21 00:27:07 UTC",
            "url": "http://123.9.23.27:55263/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827258/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827257": [
        {
            "dateadded": "2026-04-21 00:22:10 UTC",
            "url": "https://warmfire5.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827257/",
            "reporter": "anonymous"
        }
    ],
    "3827256": [
        {
            "dateadded": "2026-04-21 00:17:10 UTC",
            "url": "https://coldsn-ow4.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827256/",
            "reporter": "anonymous"
        }
    ],
    "3827255": [
        {
            "dateadded": "2026-04-21 00:17:08 UTC",
            "url": "http://183.23.135.246:35197/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827255/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827254": [
        {
            "dateadded": "2026-04-21 00:16:20 UTC",
            "url": "http://42.234.234.138:34116/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827254/",
            "reporter": "geenensp"
        }
    ],
    "3827253": [
        {
            "dateadded": "2026-04-21 00:11:09 UTC",
            "url": "https://clear-sky3.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827253/",
            "reporter": "anonymous"
        }
    ],
    "3827252": [
        {
            "dateadded": "2026-04-21 00:05:16 UTC",
            "url": "http://110.37.38.88:37786/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827252/",
            "reporter": "geenensp"
        }
    ],
    "3827251": [
        {
            "dateadded": "2026-04-21 00:05:09 UTC",
            "url": "https://rainynight2.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827251/",
            "reporter": "anonymous"
        }
    ],
    "3827250": [
        {
            "dateadded": "2026-04-21 00:03:22 UTC",
            "url": "http://182.120.128.113:52717/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827250/",
            "reporter": "geenensp"
        }
    ],
    "3827249": [
        {
            "dateadded": "2026-04-21 00:00:29 UTC",
            "url": "https://sunnyd-ay1.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-21 00:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827249/",
            "reporter": "anonymous"
        }
    ],
    "3827248": [
        {
            "dateadded": "2026-04-20 23:54:15 UTC",
            "url": "https://best-look6.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827248/",
            "reporter": "anonymous"
        }
    ],
    "3827247": [
        {
            "dateadded": "2026-04-20 23:52:19 UTC",
            "url": "http://182.117.127.174:48581/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:49:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827247/",
            "reporter": "geenensp"
        }
    ],
    "3827245": [
        {
            "dateadded": "2026-04-20 23:49:14 UTC",
            "url": "http://196.189.104.106:59148/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827245/",
            "reporter": "geenensp"
        }
    ],
    "3827246": [
        {
            "dateadded": "2026-04-20 23:49:14 UTC",
            "url": "https://newst-yle5.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:49:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827246/",
            "reporter": "anonymous"
        }
    ],
    "3827244": [
        {
            "dateadded": "2026-04-20 23:47:24 UTC",
            "url": "http://115.63.44.208:50175/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:03:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827244/",
            "reporter": "geenensp"
        }
    ],
    "3827243": [
        {
            "dateadded": "2026-04-20 23:43:22 UTC",
            "url": "http://182.127.84.177:55540/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:45:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827243/",
            "reporter": "geenensp"
        }
    ],
    "3827242": [
        {
            "dateadded": "2026-04-20 23:43:12 UTC",
            "url": "https://warmcoat4.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827242/",
            "reporter": "anonymous"
        }
    ],
    "3827241": [
        {
            "dateadded": "2026-04-20 23:41:17 UTC",
            "url": "http://123.179.230.86:40046/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827241/",
            "reporter": "geenensp"
        }
    ],
    "3827240": [
        {
            "dateadded": "2026-04-20 23:38:07 UTC",
            "url": "https://long-belt3.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827240/",
            "reporter": "anonymous"
        }
    ],
    "3827239": [
        {
            "dateadded": "2026-04-20 23:32:09 UTC",
            "url": "https://whites-hirt2.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827239/",
            "reporter": "anonymous"
        }
    ],
    "3827238": [
        {
            "dateadded": "2026-04-20 23:32:08 UTC",
            "url": "http://124.131.2.132:46863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:19:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827238/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827237": [
        {
            "dateadded": "2026-04-20 23:31:22 UTC",
            "url": "http://182.127.84.177:55540/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:08:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827237/",
            "reporter": "geenensp"
        }
    ],
    "3827236": [
        {
            "dateadded": "2026-04-20 23:29:21 UTC",
            "url": "http://210.180.17.140:59391/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827236/",
            "reporter": "geenensp"
        }
    ],
    "3827235": [
        {
            "dateadded": "2026-04-20 23:26:13 UTC",
            "url": "https://blackhat1.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827235/",
            "reporter": "anonymous"
        }
    ],
    "3827234": [
        {
            "dateadded": "2026-04-20 23:21:08 UTC",
            "url": "https://pure-water6.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827234/",
            "reporter": "anonymous"
        }
    ],
    "3827233": [
        {
            "dateadded": "2026-04-20 23:20:25 UTC",
            "url": "http://196.189.104.106:59148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:13:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827233/",
            "reporter": "geenensp"
        }
    ],
    "3827232": [
        {
            "dateadded": "2026-04-20 23:19:23 UTC",
            "url": "http://182.116.85.51:34580/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:16:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827232/",
            "reporter": "geenensp"
        }
    ],
    "3827231": [
        {
            "dateadded": "2026-04-20 23:17:06 UTC",
            "url": "http://27.220.92.204:58013/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:43:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827231/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827230": [
        {
            "dateadded": "2026-04-20 23:16:21 UTC",
            "url": "http://175.175.52.62:36211/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827230/",
            "reporter": "geenensp"
        }
    ],
    "3827229": [
        {
            "dateadded": "2026-04-20 23:16:16 UTC",
            "url": "https://coolmilk5.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827229/",
            "reporter": "anonymous"
        }
    ],
    "3827228": [
        {
            "dateadded": "2026-04-20 23:10:12 UTC",
            "url": "https://fresht-ea4.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827228/",
            "reporter": "anonymous"
        }
    ],
    "3827227": [
        {
            "dateadded": "2026-04-20 23:07:07 UTC",
            "url": "http://123.9.197.199:36416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:50:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827227/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827226": [
        {
            "dateadded": "2026-04-20 23:05:26 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.mips",
            "url_status": "offline",
            "last_online": "2026-04-24 22:52:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827226/",
            "reporter": "botnetkiller"
        }
    ],
    "3827220": [
        {
            "dateadded": "2026-04-20 23:05:21 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 00:20:28 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827220/",
            "reporter": "botnetkiller"
        }
    ],
    "3827221": [
        {
            "dateadded": "2026-04-20 23:05:21 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 00:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827221/",
            "reporter": "botnetkiller"
        }
    ],
    "3827222": [
        {
            "dateadded": "2026-04-20 23:05:21 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 23:06:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827222/",
            "reporter": "botnetkiller"
        }
    ],
    "3827223": [
        {
            "dateadded": "2026-04-20 23:05:21 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 23:34:41 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827223/",
            "reporter": "botnetkiller"
        }
    ],
    "3827224": [
        {
            "dateadded": "2026-04-20 23:05:21 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 00:22:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827224/",
            "reporter": "botnetkiller"
        }
    ],
    "3827225": [
        {
            "dateadded": "2026-04-20 23:05:21 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 23:12:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827225/",
            "reporter": "botnetkiller"
        }
    ],
    "3827216": [
        {
            "dateadded": "2026-04-20 23:05:18 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.spc",
            "url_status": "offline",
            "last_online": "2026-04-24 23:10:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827216/",
            "reporter": "botnetkiller"
        }
    ],
    "3827217": [
        {
            "dateadded": "2026-04-20 23:05:18 UTC",
            "url": "http://179.43.182.70/1.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 00:00:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827217/",
            "reporter": "botnetkiller"
        }
    ],
    "3827218": [
        {
            "dateadded": "2026-04-20 23:05:18 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 23:28:38 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827218/",
            "reporter": "botnetkiller"
        }
    ],
    "3827219": [
        {
            "dateadded": "2026-04-20 23:05:18 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 00:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827219/",
            "reporter": "botnetkiller"
        }
    ],
    "3827215": [
        {
            "dateadded": "2026-04-20 23:05:17 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 00:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827215/",
            "reporter": "botnetkiller"
        }
    ],
    "3827214": [
        {
            "dateadded": "2026-04-20 23:04:14 UTC",
            "url": "https://hot-soup3.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 23:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827214/",
            "reporter": "anonymous"
        }
    ],
    "3827213": [
        {
            "dateadded": "2026-04-20 23:01:24 UTC",
            "url": "http://210.180.17.140:59391/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827213/",
            "reporter": "geenensp"
        }
    ],
    "3827212": [
        {
            "dateadded": "2026-04-20 22:58:13 UTC",
            "url": "https://sweet-bun2.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827212/",
            "reporter": "anonymous"
        }
    ],
    "3827211": [
        {
            "dateadded": "2026-04-20 22:54:23 UTC",
            "url": "http://182.116.85.51:34580/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:48:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827211/",
            "reporter": "geenensp"
        }
    ],
    "3827210": [
        {
            "dateadded": "2026-04-20 22:54:12 UTC",
            "url": "https://tasty-pie1.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827210/",
            "reporter": "anonymous"
        }
    ],
    "3827209": [
        {
            "dateadded": "2026-04-20 22:50:25 UTC",
            "url": "http://221.15.227.138:34372/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:11:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827209/",
            "reporter": "geenensp"
        }
    ],
    "3827208": [
        {
            "dateadded": "2026-04-20 22:47:14 UTC",
            "url": "https://easy-task6.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827208/",
            "reporter": "anonymous"
        }
    ],
    "3827207": [
        {
            "dateadded": "2026-04-20 22:43:16 UTC",
            "url": "https://justtalk5.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827207/",
            "reporter": "anonymous"
        }
    ],
    "3827206": [
        {
            "dateadded": "2026-04-20 22:38:09 UTC",
            "url": "https://nice-shot4.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827206/",
            "reporter": "anonymous"
        }
    ],
    "3827205": [
        {
            "dateadded": "2026-04-20 22:37:07 UTC",
            "url": "http://222.141.78.121:58404/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:47:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827205/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827204": [
        {
            "dateadded": "2026-04-20 22:36:18 UTC",
            "url": "https://real-fact3.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827204/",
            "reporter": "anonymous"
        }
    ],
    "3827203": [
        {
            "dateadded": "2026-04-20 22:28:18 UTC",
            "url": "http://123.14.251.124:37154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 07:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827203/",
            "reporter": "geenensp"
        }
    ],
    "3827202": [
        {
            "dateadded": "2026-04-20 22:26:08 UTC",
            "url": "https://besttime2.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827202/",
            "reporter": "anonymous"
        }
    ],
    "3827201": [
        {
            "dateadded": "2026-04-20 22:20:13 UTC",
            "url": "https://goodn-ews1.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827201/",
            "reporter": "anonymous"
        }
    ],
    "3827200": [
        {
            "dateadded": "2026-04-20 22:19:12 UTC",
            "url": "http://222.137.146.71:54496/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 16:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827200/",
            "reporter": "geenensp"
        }
    ],
    "3827199": [
        {
            "dateadded": "2026-04-20 22:18:18 UTC",
            "url": "http://182.121.228.232:59733/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:42:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827199/",
            "reporter": "geenensp"
        }
    ],
    "3827198": [
        {
            "dateadded": "2026-04-20 22:15:20 UTC",
            "url": "http://115.56.99.161:41027/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827198/",
            "reporter": "geenensp"
        }
    ],
    "3827197": [
        {
            "dateadded": "2026-04-20 22:15:18 UTC",
            "url": "http://115.55.59.184:59049/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:31:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827197/",
            "reporter": "geenensp"
        }
    ],
    "3827196": [
        {
            "dateadded": "2026-04-20 22:14:07 UTC",
            "url": "https://sideview6.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827196/",
            "reporter": "anonymous"
        }
    ],
    "3827195": [
        {
            "dateadded": "2026-04-20 22:10:09 UTC",
            "url": "https://backy-ard5.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827195/",
            "reporter": "anonymous"
        }
    ],
    "3827193": [
        {
            "dateadded": "2026-04-20 22:07:08 UTC",
            "url": "http://110.37.59.132:53220/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:52:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827193/",
            "reporter": "geenensp"
        }
    ],
    "3827194": [
        {
            "dateadded": "2026-04-20 22:07:08 UTC",
            "url": "http://219.157.16.97:52865/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827194/",
            "reporter": "geenensp"
        }
    ],
    "3827192": [
        {
            "dateadded": "2026-04-20 22:03:09 UTC",
            "url": "https://full-room4.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 22:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827192/",
            "reporter": "anonymous"
        }
    ],
    "3827191": [
        {
            "dateadded": "2026-04-20 22:01:17 UTC",
            "url": "http://182.117.76.74:46743/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:16:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827191/",
            "reporter": "geenensp"
        }
    ],
    "3827190": [
        {
            "dateadded": "2026-04-20 21:59:12 UTC",
            "url": "https://nextdoor3.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827190/",
            "reporter": "anonymous"
        }
    ],
    "3827189": [
        {
            "dateadded": "2026-04-20 21:57:08 UTC",
            "url": "http://118.232.137.101:44932/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:45:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827189/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827188": [
        {
            "dateadded": "2026-04-20 21:54:32 UTC",
            "url": "http://117.210.199.15:55359/i",
            "url_status": "offline",
            "last_online": "2026-04-20 21:54:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827188/",
            "reporter": "geenensp"
        }
    ],
    "3827187": [
        {
            "dateadded": "2026-04-20 21:54:07 UTC",
            "url": "https://cityli-fe2.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827187/",
            "reporter": "anonymous"
        }
    ],
    "3827186": [
        {
            "dateadded": "2026-04-20 21:51:10 UTC",
            "url": "https://home-base1.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827186/",
            "reporter": "anonymous"
        }
    ],
    "3827185": [
        {
            "dateadded": "2026-04-20 21:48:22 UTC",
            "url": "http://182.123.211.95:41662/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:35:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827185/",
            "reporter": "geenensp"
        }
    ],
    "3827184": [
        {
            "dateadded": "2026-04-20 21:47:10 UTC",
            "url": "http://115.55.59.184:59049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827184/",
            "reporter": "geenensp"
        }
    ],
    "3827183": [
        {
            "dateadded": "2026-04-20 21:41:08 UTC",
            "url": "https://silver-rain6.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827183/",
            "reporter": "anonymous"
        }
    ],
    "3827182": [
        {
            "dateadded": "2026-04-20 21:35:07 UTC",
            "url": "https://whitecloud5.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:35:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827182/",
            "reporter": "anonymous"
        }
    ],
    "3827181": [
        {
            "dateadded": "2026-04-20 21:31:16 UTC",
            "url": "http://182.117.76.74:46743/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:21:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827181/",
            "reporter": "geenensp"
        }
    ],
    "3827180": [
        {
            "dateadded": "2026-04-20 21:31:07 UTC",
            "url": "https://gold-fish4.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827180/",
            "reporter": "anonymous"
        }
    ],
    "3827179": [
        {
            "dateadded": "2026-04-20 21:27:23 UTC",
            "url": "http://1.62.200.34:60851/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827179/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827178": [
        {
            "dateadded": "2026-04-20 21:26:07 UTC",
            "url": "https://deepocean3.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827178/",
            "reporter": "anonymous"
        }
    ],
    "3827177": [
        {
            "dateadded": "2026-04-20 21:24:21 UTC",
            "url": "http://182.123.211.95:41662/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 06:19:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827177/",
            "reporter": "geenensp"
        }
    ],
    "3827176": [
        {
            "dateadded": "2026-04-20 21:20:12 UTC",
            "url": "https://darkn-ight2.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827176/",
            "reporter": "anonymous"
        }
    ],
    "3827175": [
        {
            "dateadded": "2026-04-20 21:19:21 UTC",
            "url": "http://115.55.247.249:49641/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:44:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827175/",
            "reporter": "geenensp"
        }
    ],
    "3827174": [
        {
            "dateadded": "2026-04-20 21:15:41 UTC",
            "url": "http://117.210.199.15:55359/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 21:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827174/",
            "reporter": "geenensp"
        }
    ],
    "3827173": [
        {
            "dateadded": "2026-04-20 21:14:07 UTC",
            "url": "https://bright-sky1.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827173/",
            "reporter": "anonymous"
        }
    ],
    "3827172": [
        {
            "dateadded": "2026-04-20 21:12:18 UTC",
            "url": "http://182.114.255.63:53703/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:54:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827172/",
            "reporter": "geenensp"
        }
    ],
    "3827171": [
        {
            "dateadded": "2026-04-20 21:08:06 UTC",
            "url": "https://coolstone6.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827171/",
            "reporter": "anonymous"
        }
    ],
    "3827170": [
        {
            "dateadded": "2026-04-20 21:07:08 UTC",
            "url": "http://94.26.106.134/rhombus",
            "url_status": "offline",
            "last_online": "2026-04-27 05:19:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827170/",
            "reporter": "botnetkiller"
        }
    ],
    "3827169": [
        {
            "dateadded": "2026-04-20 21:04:08 UTC",
            "url": "https://warmbr-ead5.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 21:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827169/",
            "reporter": "anonymous"
        }
    ],
    "3827168": [
        {
            "dateadded": "2026-04-20 20:57:14 UTC",
            "url": "https://hot-tea4.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827168/",
            "reporter": "anonymous"
        }
    ],
    "3827167": [
        {
            "dateadded": "2026-04-20 20:52:12 UTC",
            "url": "https://freshmilk3.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827167/",
            "reporter": "anonymous"
        }
    ],
    "3827166": [
        {
            "dateadded": "2026-04-20 20:47:12 UTC",
            "url": "https://sweet-pear2.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827166/",
            "reporter": "anonymous"
        }
    ],
    "3827165": [
        {
            "dateadded": "2026-04-20 20:46:10 UTC",
            "url": "http://182.114.255.63:53703/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:57:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827165/",
            "reporter": "geenensp"
        }
    ],
    "3827164": [
        {
            "dateadded": "2026-04-20 20:44:17 UTC",
            "url": "http://222.139.229.201:55697/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827164/",
            "reporter": "geenensp"
        }
    ],
    "3827162": [
        {
            "dateadded": "2026-04-20 20:42:07 UTC",
            "url": "http://42.234.234.138:34116/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827162/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827163": [
        {
            "dateadded": "2026-04-20 20:42:07 UTC",
            "url": "http://123.12.226.115:38418/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:00:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827163/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827161": [
        {
            "dateadded": "2026-04-20 20:41:09 UTC",
            "url": "https://tasty-apple1.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827161/",
            "reporter": "anonymous"
        }
    ],
    "3827160": [
        {
            "dateadded": "2026-04-20 20:40:10 UTC",
            "url": "http://123.11.132.150:58460/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:57:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827160/",
            "reporter": "geenensp"
        }
    ],
    "3827159": [
        {
            "dateadded": "2026-04-20 20:35:13 UTC",
            "url": "https://new-page6.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827159/",
            "reporter": "anonymous"
        }
    ],
    "3827158": [
        {
            "dateadded": "2026-04-20 20:30:20 UTC",
            "url": "http://139.218.43.94:57244/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:36:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827158/",
            "reporter": "geenensp"
        }
    ],
    "3827157": [
        {
            "dateadded": "2026-04-20 20:29:13 UTC",
            "url": "https://bigwall5.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827157/",
            "reporter": "anonymous"
        }
    ],
    "3827156": [
        {
            "dateadded": "2026-04-20 20:24:08 UTC",
            "url": "https://coldw-ater4.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827156/",
            "reporter": "anonymous"
        }
    ],
    "3827155": [
        {
            "dateadded": "2026-04-20 20:20:23 UTC",
            "url": "http://222.139.229.201:55697/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:38:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827155/",
            "reporter": "geenensp"
        }
    ],
    "3827154": [
        {
            "dateadded": "2026-04-20 20:19:19 UTC",
            "url": "http://115.55.62.233:53522/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:20:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827154/",
            "reporter": "geenensp"
        }
    ],
    "3827153": [
        {
            "dateadded": "2026-04-20 20:19:09 UTC",
            "url": "https://red-mark3.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827153/",
            "reporter": "anonymous"
        }
    ],
    "3827152": [
        {
            "dateadded": "2026-04-20 20:17:14 UTC",
            "url": "http://163.142.94.119:42424/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827152/",
            "reporter": "geenensp"
        }
    ],
    "3827151": [
        {
            "dateadded": "2026-04-20 20:13:20 UTC",
            "url": "http://111.88.7.48:44788/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 20:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827151/",
            "reporter": "geenensp"
        }
    ],
    "3827150": [
        {
            "dateadded": "2026-04-20 20:13:07 UTC",
            "url": "https://softwind2.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827150/",
            "reporter": "anonymous"
        }
    ],
    "3827149": [
        {
            "dateadded": "2026-04-20 20:12:07 UTC",
            "url": "http://118.232.137.101:44932/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827149/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827148": [
        {
            "dateadded": "2026-04-20 20:08:12 UTC",
            "url": "https://open-book1.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827148/",
            "reporter": "anonymous"
        }
    ],
    "3827147": [
        {
            "dateadded": "2026-04-20 20:06:11 UTC",
            "url": "http://118.251.21.68:59779/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827147/",
            "reporter": "geenensp"
        }
    ],
    "3827146": [
        {
            "dateadded": "2026-04-20 20:05:22 UTC",
            "url": "http://123.11.132.150:58460/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:20:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827146/",
            "reporter": "geenensp"
        }
    ],
    "3827145": [
        {
            "dateadded": "2026-04-20 20:05:10 UTC",
            "url": "https://highstep6.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827145/",
            "reporter": "anonymous"
        }
    ],
    "3827144": [
        {
            "dateadded": "2026-04-20 20:01:17 UTC",
            "url": "http://27.205.195.146:33352/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827144/",
            "reporter": "geenensp"
        }
    ],
    "3827143": [
        {
            "dateadded": "2026-04-20 20:01:08 UTC",
            "url": "https://cle-arview5.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 20:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827143/",
            "reporter": "anonymous"
        }
    ],
    "3827142": [
        {
            "dateadded": "2026-04-20 19:51:08 UTC",
            "url": "https://small-cup4.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827142/",
            "reporter": "anonymous"
        }
    ],
    "3827141": [
        {
            "dateadded": "2026-04-20 19:50:23 UTC",
            "url": "http://59.180.150.167:50121/i",
            "url_status": "offline",
            "last_online": "2026-04-20 19:50:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827141/",
            "reporter": "geenensp"
        }
    ],
    "3827140": [
        {
            "dateadded": "2026-04-20 19:50:13 UTC",
            "url": "http://163.142.94.119:42424/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 04:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827140/",
            "reporter": "geenensp"
        }
    ],
    "3827139": [
        {
            "dateadded": "2026-04-20 19:46:10 UTC",
            "url": "https://fastrun3.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827139/",
            "reporter": "anonymous"
        }
    ],
    "3827138": [
        {
            "dateadded": "2026-04-20 19:39:09 UTC",
            "url": "https://gre-enleaf2.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827138/",
            "reporter": "anonymous"
        }
    ],
    "3827137": [
        {
            "dateadded": "2026-04-20 19:35:15 UTC",
            "url": "https://blue-lamp1.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827137/",
            "reporter": "anonymous"
        }
    ],
    "3827136": [
        {
            "dateadded": "2026-04-20 19:29:12 UTC",
            "url": "https://easydone6.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827136/",
            "reporter": "anonymous"
        }
    ],
    "3827135": [
        {
            "dateadded": "2026-04-20 19:24:09 UTC",
            "url": "https://justplay5.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827135/",
            "reporter": "anonymous"
        }
    ],
    "3827134": [
        {
            "dateadded": "2026-04-20 19:22:11 UTC",
            "url": "http://118.251.21.68:59779/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827134/",
            "reporter": "geenensp"
        }
    ],
    "3827133": [
        {
            "dateadded": "2026-04-20 19:18:12 UTC",
            "url": "https://smartchoice4.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827133/",
            "reporter": "anonymous"
        }
    ],
    "3827132": [
        {
            "dateadded": "2026-04-20 19:17:58 UTC",
            "url": "http://59.180.150.167:50121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 19:17:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827132/",
            "reporter": "geenensp"
        }
    ],
    "3827131": [
        {
            "dateadded": "2026-04-20 19:17:14 UTC",
            "url": "http://123.189.149.146:46154/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:51:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827131/",
            "reporter": "geenensp"
        }
    ],
    "3827130": [
        {
            "dateadded": "2026-04-20 19:13:20 UTC",
            "url": "http://78.29.39.213:60409/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827130/",
            "reporter": "geenensp"
        }
    ],
    "3827129": [
        {
            "dateadded": "2026-04-20 19:12:17 UTC",
            "url": "http://115.53.200.87:51513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:16:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827129/",
            "reporter": "geenensp"
        }
    ],
    "3827128": [
        {
            "dateadded": "2026-04-20 19:12:06 UTC",
            "url": "https://reallife3.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827128/",
            "reporter": "anonymous"
        }
    ],
    "3827127": [
        {
            "dateadded": "2026-04-20 19:07:07 UTC",
            "url": "https://gooditem2.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827127/",
            "reporter": "anonymous"
        }
    ],
    "3827126": [
        {
            "dateadded": "2026-04-20 19:03:21 UTC",
            "url": "http://222.208.112.41:60362/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827126/",
            "reporter": "geenensp"
        }
    ],
    "3827125": [
        {
            "dateadded": "2026-04-20 19:03:11 UTC",
            "url": "https://homeshop1.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827125/",
            "reporter": "anonymous"
        }
    ],
    "3827124": [
        {
            "dateadded": "2026-04-20 19:00:12 UTC",
            "url": "https://fasttime6.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 19:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827124/",
            "reporter": "anonymous"
        }
    ],
    "3827123": [
        {
            "dateadded": "2026-04-20 18:56:11 UTC",
            "url": "http://182.119.253.124:40247/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:19:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827123/",
            "reporter": "geenensp"
        }
    ],
    "3827122": [
        {
            "dateadded": "2026-04-20 18:51:07 UTC",
            "url": "https://besttrip5.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827122/",
            "reporter": "anonymous"
        }
    ],
    "3827121": [
        {
            "dateadded": "2026-04-20 18:50:09 UTC",
            "url": "http://39.73.140.83:35437/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:50:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827121/",
            "reporter": "geenensp"
        }
    ],
    "3827120": [
        {
            "dateadded": "2026-04-20 18:49:10 UTC",
            "url": "http://123.189.149.146:46154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:20:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827120/",
            "reporter": "geenensp"
        }
    ],
    "3827119": [
        {
            "dateadded": "2026-04-20 18:47:10 UTC",
            "url": "http://78.29.39.213:60409/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827119/",
            "reporter": "geenensp"
        }
    ],
    "3827118": [
        {
            "dateadded": "2026-04-20 18:46:09 UTC",
            "url": "https://nextstep4.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827118/",
            "reporter": "anonymous"
        }
    ],
    "3827117": [
        {
            "dateadded": "2026-04-20 18:39:19 UTC",
            "url": "http://123.5.18.30:45057/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827117/",
            "reporter": "geenensp"
        }
    ],
    "3827116": [
        {
            "dateadded": "2026-04-20 18:39:09 UTC",
            "url": "https://oldmap3.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827116/",
            "reporter": "anonymous"
        }
    ],
    "3827115": [
        {
            "dateadded": "2026-04-20 18:38:19 UTC",
            "url": "http://42.225.87.198:47137/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827115/",
            "reporter": "geenensp"
        }
    ],
    "3827113": [
        {
            "dateadded": "2026-04-20 18:37:13 UTC",
            "url": "http://115.58.93.194:58018/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827113/",
            "reporter": "geenensp"
        }
    ],
    "3827114": [
        {
            "dateadded": "2026-04-20 18:37:13 UTC",
            "url": "http://182.113.33.41:54008/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:08:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827114/",
            "reporter": "geenensp"
        }
    ],
    "3827112": [
        {
            "dateadded": "2026-04-20 18:34:06 UTC",
            "url": "https://shortway2.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827112/",
            "reporter": "anonymous"
        }
    ],
    "3827111": [
        {
            "dateadded": "2026-04-20 18:33:17 UTC",
            "url": "http://115.58.93.194:58018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827111/",
            "reporter": "geenensp"
        }
    ],
    "3827110": [
        {
            "dateadded": "2026-04-20 18:30:20 UTC",
            "url": "http://42.228.126.37:58755/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:51:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827110/",
            "reporter": "geenensp"
        }
    ],
    "3827109": [
        {
            "dateadded": "2026-04-20 18:28:17 UTC",
            "url": "http://109.108.38.224:34211/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827109/",
            "reporter": "geenensp"
        }
    ],
    "3827108": [
        {
            "dateadded": "2026-04-20 18:28:12 UTC",
            "url": "https://mainroad1.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827108/",
            "reporter": "anonymous"
        }
    ],
    "3827107": [
        {
            "dateadded": "2026-04-20 18:25:18 UTC",
            "url": "http://182.113.33.41:54008/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827107/",
            "reporter": "geenensp"
        }
    ],
    "3827106": [
        {
            "dateadded": "2026-04-20 18:22:09 UTC",
            "url": "https://silverrain6.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827106/",
            "reporter": "anonymous"
        }
    ],
    "3827105": [
        {
            "dateadded": "2026-04-20 18:20:17 UTC",
            "url": "http://39.73.140.83:35437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:43:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827105/",
            "reporter": "geenensp"
        }
    ],
    "3827104": [
        {
            "dateadded": "2026-04-20 18:18:10 UTC",
            "url": "http://42.228.126.37:58755/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827104/",
            "reporter": "geenensp"
        }
    ],
    "3827102": [
        {
            "dateadded": "2026-04-20 18:17:11 UTC",
            "url": "http://116.139.140.86:38710/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827102/",
            "reporter": "geenensp"
        }
    ],
    "3827103": [
        {
            "dateadded": "2026-04-20 18:17:11 UTC",
            "url": "http://182.113.200.222:35702/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:15:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827103/",
            "reporter": "geenensp"
        }
    ],
    "3827101": [
        {
            "dateadded": "2026-04-20 18:17:07 UTC",
            "url": "https://whitecloud5.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827101/",
            "reporter": "anonymous"
        }
    ],
    "3827100": [
        {
            "dateadded": "2026-04-20 18:13:10 UTC",
            "url": "https://goldfish4.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827100/",
            "reporter": "anonymous"
        }
    ],
    "3827099": [
        {
            "dateadded": "2026-04-20 18:06:11 UTC",
            "url": "https://deepocean3.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827099/",
            "reporter": "anonymous"
        }
    ],
    "3827098": [
        {
            "dateadded": "2026-04-20 18:05:21 UTC",
            "url": "http://115.52.247.100:38494/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:24:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827098/",
            "reporter": "geenensp"
        }
    ],
    "3827097": [
        {
            "dateadded": "2026-04-20 18:04:25 UTC",
            "url": "http://109.108.38.224:34211/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:09:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827097/",
            "reporter": "geenensp"
        }
    ],
    "3827096": [
        {
            "dateadded": "2026-04-20 18:01:11 UTC",
            "url": "https://darknight2.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 18:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827096/",
            "reporter": "anonymous"
        }
    ],
    "3827095": [
        {
            "dateadded": "2026-04-20 18:00:28 UTC",
            "url": "http://115.52.247.100:38494/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 12:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827095/",
            "reporter": "geenensp"
        }
    ],
    "3827094": [
        {
            "dateadded": "2026-04-20 17:55:16 UTC",
            "url": "https://brightsky1.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827094/",
            "reporter": "anonymous"
        }
    ],
    "3827093": [
        {
            "dateadded": "2026-04-20 17:49:19 UTC",
            "url": "http://42.52.204.105:60149/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 14:06:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827093/",
            "reporter": "geenensp"
        }
    ],
    "3827092": [
        {
            "dateadded": "2026-04-20 17:49:12 UTC",
            "url": "https://coolstone6.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827092/",
            "reporter": "anonymous"
        }
    ],
    "3827090": [
        {
            "dateadded": "2026-04-20 17:48:19 UTC",
            "url": "http://182.113.200.222:35702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:23:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827090/",
            "reporter": "geenensp"
        }
    ],
    "3827091": [
        {
            "dateadded": "2026-04-20 17:48:19 UTC",
            "url": "http://222.246.111.227:47547/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827091/",
            "reporter": "geenensp"
        }
    ],
    "3827089": [
        {
            "dateadded": "2026-04-20 17:45:14 UTC",
            "url": "https://warmbread5.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827089/",
            "reporter": "anonymous"
        }
    ],
    "3827088": [
        {
            "dateadded": "2026-04-20 17:41:17 UTC",
            "url": "http://123.5.18.30:45057/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827088/",
            "reporter": "geenensp"
        }
    ],
    "3827087": [
        {
            "dateadded": "2026-04-20 17:39:14 UTC",
            "url": "https://hottea4.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827087/",
            "reporter": "anonymous"
        }
    ],
    "3827086": [
        {
            "dateadded": "2026-04-20 17:37:08 UTC",
            "url": "http://123.8.88.183:36698/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:53:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827086/",
            "reporter": "geenensp"
        }
    ],
    "3827085": [
        {
            "dateadded": "2026-04-20 17:33:13 UTC",
            "url": "https://freshmilk3.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827085/",
            "reporter": "anonymous"
        }
    ],
    "3827084": [
        {
            "dateadded": "2026-04-20 17:32:08 UTC",
            "url": "http://219.155.200.88:53735/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827084/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827083": [
        {
            "dateadded": "2026-04-20 17:32:07 UTC",
            "url": "http://222.139.109.141:51859/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827083/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827082": [
        {
            "dateadded": "2026-04-20 17:31:25 UTC",
            "url": "http://115.52.148.88:44792/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827082/",
            "reporter": "geenensp"
        }
    ],
    "3827081": [
        {
            "dateadded": "2026-04-20 17:29:17 UTC",
            "url": "http://125.161.142.236:35419/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:58:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827081/",
            "reporter": "geenensp"
        }
    ],
    "3827080": [
        {
            "dateadded": "2026-04-20 17:27:26 UTC",
            "url": "https://sweetpear2.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:27:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827080/",
            "reporter": "anonymous"
        }
    ],
    "3827079": [
        {
            "dateadded": "2026-04-20 17:24:23 UTC",
            "url": "http://182.121.249.174:41341/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827079/",
            "reporter": "geenensp"
        }
    ],
    "3827078": [
        {
            "dateadded": "2026-04-20 17:22:12 UTC",
            "url": "https://tastyapple1.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827078/",
            "reporter": "anonymous"
        }
    ],
    "3827077": [
        {
            "dateadded": "2026-04-20 17:21:22 UTC",
            "url": "http://222.246.111.227:47547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827077/",
            "reporter": "geenensp"
        }
    ],
    "3827076": [
        {
            "dateadded": "2026-04-20 17:18:24 UTC",
            "url": "http://110.37.5.37:35521/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:18:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827076/",
            "reporter": "geenensp"
        }
    ],
    "3827075": [
        {
            "dateadded": "2026-04-20 17:16:13 UTC",
            "url": "https://newpage6.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827075/",
            "reporter": "anonymous"
        }
    ],
    "3827074": [
        {
            "dateadded": "2026-04-20 17:15:24 UTC",
            "url": "http://110.37.5.37:35521/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827074/",
            "reporter": "geenensp"
        }
    ],
    "3827073": [
        {
            "dateadded": "2026-04-20 17:15:17 UTC",
            "url": "http://42.85.199.138:36640/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:42:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827073/",
            "reporter": "geenensp"
        }
    ],
    "3827072": [
        {
            "dateadded": "2026-04-20 17:14:28 UTC",
            "url": "http://42.85.199.138:36640/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 16:48:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827072/",
            "reporter": "geenensp"
        }
    ],
    "3827071": [
        {
            "dateadded": "2026-04-20 17:12:06 UTC",
            "url": "http://60.208.242.90:34479/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:55:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827071/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827070": [
        {
            "dateadded": "2026-04-20 17:11:23 UTC",
            "url": "http://115.52.148.88:44792/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827070/",
            "reporter": "geenensp"
        }
    ],
    "3827069": [
        {
            "dateadded": "2026-04-20 17:11:13 UTC",
            "url": "https://bigwall5.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827069/",
            "reporter": "anonymous"
        }
    ],
    "3827068": [
        {
            "dateadded": "2026-04-20 17:10:19 UTC",
            "url": "http://222.141.75.227:54476/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827068/",
            "reporter": "geenensp"
        }
    ],
    "3827067": [
        {
            "dateadded": "2026-04-20 17:07:09 UTC",
            "url": "https://coldwater4.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827067/",
            "reporter": "anonymous"
        }
    ],
    "3827066": [
        {
            "dateadded": "2026-04-20 17:07:08 UTC",
            "url": "http://27.37.125.50:43336/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:20:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827066/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827065": [
        {
            "dateadded": "2026-04-20 17:07:07 UTC",
            "url": "http://222.139.109.141:51859/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:23:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827065/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827064": [
        {
            "dateadded": "2026-04-20 17:06:23 UTC",
            "url": "http://110.37.121.43:38203/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:03:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827064/",
            "reporter": "geenensp"
        }
    ],
    "3827063": [
        {
            "dateadded": "2026-04-20 17:05:30 UTC",
            "url": "http://220.165.69.90:43048/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827063/",
            "reporter": "geenensp"
        }
    ],
    "3827062": [
        {
            "dateadded": "2026-04-20 17:04:15 UTC",
            "url": "https://redmark3.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 17:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827062/",
            "reporter": "anonymous"
        }
    ],
    "3827061": [
        {
            "dateadded": "2026-04-20 17:03:23 UTC",
            "url": "http://219.156.28.250:54663/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827061/",
            "reporter": "geenensp"
        }
    ],
    "3827060": [
        {
            "dateadded": "2026-04-20 17:00:24 UTC",
            "url": "http://125.41.142.253:56292/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:22:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827060/",
            "reporter": "geenensp"
        }
    ],
    "3827059": [
        {
            "dateadded": "2026-04-20 16:59:22 UTC",
            "url": "http://110.37.121.43:38203/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827059/",
            "reporter": "geenensp"
        }
    ],
    "3827058": [
        {
            "dateadded": "2026-04-20 16:55:26 UTC",
            "url": "http://182.127.26.114:51449/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:22:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827058/",
            "reporter": "geenensp"
        }
    ],
    "3827057": [
        {
            "dateadded": "2026-04-20 16:54:14 UTC",
            "url": "https://softwind2.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827057/",
            "reporter": "anonymous"
        }
    ],
    "3827056": [
        {
            "dateadded": "2026-04-20 16:49:08 UTC",
            "url": "https://openbook1.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827056/",
            "reporter": "anonymous"
        }
    ],
    "3827055": [
        {
            "dateadded": "2026-04-20 16:47:08 UTC",
            "url": "http://123.4.246.60:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827055/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827054": [
        {
            "dateadded": "2026-04-20 16:44:21 UTC",
            "url": "http://222.141.75.227:54476/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:29:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827054/",
            "reporter": "geenensp"
        }
    ],
    "3827053": [
        {
            "dateadded": "2026-04-20 16:43:13 UTC",
            "url": "https://hightree6.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827053/",
            "reporter": "anonymous"
        }
    ],
    "3827052": [
        {
            "dateadded": "2026-04-20 16:37:13 UTC",
            "url": "https://clearview5.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827052/",
            "reporter": "anonymous"
        }
    ],
    "3827051": [
        {
            "dateadded": "2026-04-20 16:32:08 UTC",
            "url": "https://smalllamp4.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827051/",
            "reporter": "anonymous"
        }
    ],
    "3827050": [
        {
            "dateadded": "2026-04-20 16:32:07 UTC",
            "url": "http://125.25.51.90:55440/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827050/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827049": [
        {
            "dateadded": "2026-04-20 16:27:07 UTC",
            "url": "https://fastrun3.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827049/",
            "reporter": "anonymous"
        }
    ],
    "3827048": [
        {
            "dateadded": "2026-04-20 16:24:22 UTC",
            "url": "http://182.127.26.114:51449/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827048/",
            "reporter": "geenensp"
        }
    ],
    "3827047": [
        {
            "dateadded": "2026-04-20 16:21:11 UTC",
            "url": "https://greenleaf2.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827047/",
            "reporter": "anonymous"
        }
    ],
    "3827046": [
        {
            "dateadded": "2026-04-20 16:16:14 UTC",
            "url": "https://bluebox1.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 16:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827046/",
            "reporter": "anonymous"
        }
    ],
    "3827045": [
        {
            "dateadded": "2026-04-20 16:07:07 UTC",
            "url": "http://125.25.51.90:55440/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827045/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827044": [
        {
            "dateadded": "2026-04-20 15:58:07 UTC",
            "url": "https://sc9t.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827044/",
            "reporter": "anonymous"
        }
    ],
    "3827043": [
        {
            "dateadded": "2026-04-20 15:52:09 UTC",
            "url": "https://qeeebs40.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827043/",
            "reporter": "anonymous"
        }
    ],
    "3827042": [
        {
            "dateadded": "2026-04-20 15:46:07 UTC",
            "url": "https://gene-mod.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827042/",
            "reporter": "anonymous"
        }
    ],
    "3827041": [
        {
            "dateadded": "2026-04-20 15:42:11 UTC",
            "url": "https://lum-spireos.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827041/",
            "reporter": "anonymous"
        }
    ],
    "3827040": [
        {
            "dateadded": "2026-04-20 15:40:08 UTC",
            "url": "https://apparelgate.co.uk/optimized_MSI.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827040/",
            "reporter": "abuse_ch"
        }
    ],
    "3827039": [
        {
            "dateadded": "2026-04-20 15:38:07 UTC",
            "url": "https://homecaremovers.com/WWWW.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827039/",
            "reporter": "abuse_ch"
        }
    ],
    "3827038": [
        {
            "dateadded": "2026-04-20 15:37:09 UTC",
            "url": "http://66.63.170.27/45/goodpeoplesneedformebest.hta",
            "url_status": "offline",
            "last_online": "2026-04-21 05:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827038/",
            "reporter": "abuse_ch"
        }
    ],
    "3827037": [
        {
            "dateadded": "2026-04-20 15:36:13 UTC",
            "url": "https://quorlith3is.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827037/",
            "reporter": "anonymous"
        }
    ],
    "3827036": [
        {
            "dateadded": "2026-04-20 15:32:10 UTC",
            "url": "https://crypto-corexchange.com/wp-includes/theme-compat/higzbol/nstyjrw/rszqlut/fgeekpk.txt",
            "url_status": "offline",
            "last_online": "2026-04-20 15:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827036/",
            "reporter": "abuse_ch"
        }
    ],
    "3827035": [
        {
            "dateadded": "2026-04-20 15:31:14 UTC",
            "url": "https://hasteb.in/h3Y7Duh1Nift0yD",
            "url_status": "offline",
            "last_online": "2026-04-20 15:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827035/",
            "reporter": "abuse_ch"
        }
    ],
    "3827034": [
        {
            "dateadded": "2026-04-20 15:30:23 UTC",
            "url": "https://c0nv-panel.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827034/",
            "reporter": "anonymous"
        }
    ],
    "3827033": [
        {
            "dateadded": "2026-04-20 15:27:12 UTC",
            "url": "http://61.54.204.53:56863/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:28:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827033/",
            "reporter": "geenensp"
        }
    ],
    "3827032": [
        {
            "dateadded": "2026-04-20 15:25:22 UTC",
            "url": "http://61.54.204.53:56863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:08:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827032/",
            "reporter": "geenensp"
        }
    ],
    "3827031": [
        {
            "dateadded": "2026-04-20 15:25:16 UTC",
            "url": "https://covstri.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827031/",
            "reporter": "anonymous"
        }
    ],
    "3827029": [
        {
            "dateadded": "2026-04-20 15:24:13 UTC",
            "url": "https://crypto-corexchange.com/wp-includes/theme-compat/higzbol/nstyjrw/rszqlut/mFSrkdn.txt",
            "url_status": "offline",
            "last_online": "2026-04-20 15:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827029/",
            "reporter": "abuse_ch"
        }
    ],
    "3827030": [
        {
            "dateadded": "2026-04-20 15:24:13 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1uIl2NsnX9vagASSxj2zoFkjUv1rdRBwd",
            "url_status": "offline",
            "last_online": "2026-04-21 06:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827030/",
            "reporter": "abuse_ch"
        }
    ],
    "3827028": [
        {
            "dateadded": "2026-04-20 15:24:11 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1-WXstiaW3yx5IiVzT5aV5h7ADiUmofLy",
            "url_status": "offline",
            "last_online": "2026-04-21 05:46:47 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827028/",
            "reporter": "abuse_ch"
        }
    ],
    "3827027": [
        {
            "dateadded": "2026-04-20 15:24:09 UTC",
            "url": "https://yaso.su/raw/pMstaA4S",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827027/",
            "reporter": "abuse_ch"
        }
    ],
    "3827026": [
        {
            "dateadded": "2026-04-20 15:23:13 UTC",
            "url": "https://pastee.dev/r/WHoTYJBS",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "CrysomeRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827026/",
            "reporter": "abuse_ch"
        }
    ],
    "3827025": [
        {
            "dateadded": "2026-04-20 15:22:13 UTC",
            "url": "https://ensions.xyz/woow.dat",
            "url_status": "offline",
            "last_online": "2026-04-20 22:55:45 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827025/",
            "reporter": "abuse_ch"
        }
    ],
    "3827024": [
        {
            "dateadded": "2026-04-20 15:21:09 UTC",
            "url": "https://md.ccsuquk.com/b.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827024/",
            "reporter": "abuse_ch"
        }
    ],
    "3827023": [
        {
            "dateadded": "2026-04-20 15:20:10 UTC",
            "url": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto/01.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827023/",
            "reporter": "abuse_ch"
        }
    ],
    "3827021": [
        {
            "dateadded": "2026-04-20 15:20:09 UTC",
            "url": "https://md.ccsuquk.com/lw.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827021/",
            "reporter": "abuse_ch"
        }
    ],
    "3827022": [
        {
            "dateadded": "2026-04-20 15:20:09 UTC",
            "url": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto/03.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827022/",
            "reporter": "abuse_ch"
        }
    ],
    "3827020": [
        {
            "dateadded": "2026-04-20 15:20:08 UTC",
            "url": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto/02.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827020/",
            "reporter": "abuse_ch"
        }
    ],
    "3827018": [
        {
            "dateadded": "2026-04-20 15:19:11 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1gXsJc-nWKjTQPbfR2eC4vxPMNAlB3d5E",
            "url_status": "offline",
            "last_online": "2026-04-20 15:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827018/",
            "reporter": "abuse_ch"
        }
    ],
    "3827019": [
        {
            "dateadded": "2026-04-20 15:19:11 UTC",
            "url": "https://wisdomheart.org/wp-admin/vv/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827019/",
            "reporter": "abuse_ch"
        }
    ],
    "3827017": [
        {
            "dateadded": "2026-04-20 15:19:10 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1ptFvlTlvgTX_0QTC2DHpi-ATjnHuByyO",
            "url_status": "offline",
            "last_online": "2026-04-21 04:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827017/",
            "reporter": "abuse_ch"
        }
    ],
    "3827016": [
        {
            "dateadded": "2026-04-20 15:19:09 UTC",
            "url": "https://ktfxyu6.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827016/",
            "reporter": "anonymous"
        }
    ],
    "3827015": [
        {
            "dateadded": "2026-04-20 15:13:11 UTC",
            "url": "https://qfw0.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827015/",
            "reporter": "anonymous"
        }
    ],
    "3827014": [
        {
            "dateadded": "2026-04-20 15:10:22 UTC",
            "url": "https://www.maxpower01.com/upload/src/file3025.mp3",
            "url_status": "offline",
            "last_online": "2026-04-23 23:07:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827014/",
            "reporter": "abuse_ch"
        }
    ],
    "3827013": [
        {
            "dateadded": "2026-04-20 15:10:15 UTC",
            "url": "https://pub-ec5d868d10f548e792c0fd1c080190aa.r2.dev/SyncroInstaller.msi",
            "url_status": "offline",
            "last_online": "2026-04-20 15:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "msi",
                "SyncroRMM"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827013/",
            "reporter": "abuse_ch"
        }
    ],
    "3827012": [
        {
            "dateadded": "2026-04-20 15:10:08 UTC",
            "url": "http://getamarin.ro/new-geta-marin-site/20426.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 11:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827012/",
            "reporter": "abuse_ch"
        }
    ],
    "3827010": [
        {
            "dateadded": "2026-04-20 15:09:11 UTC",
            "url": "http://valfanto.com/rumpaid.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827010/",
            "reporter": "abuse_ch"
        }
    ],
    "3827011": [
        {
            "dateadded": "2026-04-20 15:09:11 UTC",
            "url": "http://valfanto.com/yupaidnew.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827011/",
            "reporter": "abuse_ch"
        }
    ],
    "3827009": [
        {
            "dateadded": "2026-04-20 15:09:07 UTC",
            "url": "http://valfanto.com/obo20th.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827009/",
            "reporter": "abuse_ch"
        }
    ],
    "3827008": [
        {
            "dateadded": "2026-04-20 15:08:11 UTC",
            "url": "https://0tter7-gate.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827008/",
            "reporter": "anonymous"
        }
    ],
    "3827007": [
        {
            "dateadded": "2026-04-20 15:07:06 UTC",
            "url": "http://89.200.227.78:47297/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:37:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827007/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827006": [
        {
            "dateadded": "2026-04-20 15:06:06 UTC",
            "url": "https://www.vame.be/wffd/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827006/",
            "reporter": "abuse_ch"
        }
    ],
    "3827005": [
        {
            "dateadded": "2026-04-20 15:04:16 UTC",
            "url": "http://219.156.28.250:54663/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827005/",
            "reporter": "geenensp"
        }
    ],
    "3827004": [
        {
            "dateadded": "2026-04-20 15:03:09 UTC",
            "url": "https://rebatesouth.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 15:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827004/",
            "reporter": "anonymous"
        }
    ],
    "3827003": [
        {
            "dateadded": "2026-04-20 14:59:16 UTC",
            "url": "http://222.142.211.76:34670/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:01:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827003/",
            "reporter": "geenensp"
        }
    ],
    "3827002": [
        {
            "dateadded": "2026-04-20 14:57:12 UTC",
            "url": "https://roya-node.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827002/",
            "reporter": "anonymous"
        }
    ],
    "3827001": [
        {
            "dateadded": "2026-04-20 14:52:07 UTC",
            "url": "http://182.121.228.232:59733/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827001/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3827000": [
        {
            "dateadded": "2026-04-20 14:51:12 UTC",
            "url": "https://52rgfkcr.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3827000/",
            "reporter": "anonymous"
        }
    ],
    "3826999": [
        {
            "dateadded": "2026-04-20 14:49:11 UTC",
            "url": "http://105.225.26.203:47869/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:54:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826999/",
            "reporter": "geenensp"
        }
    ],
    "3826998": [
        {
            "dateadded": "2026-04-20 14:47:09 UTC",
            "url": "http://draalineverzignassi.com.br/wp-content/upgrade/plugin/szjBfLuyTWpr252.bin",
            "url_status": "offline",
            "last_online": "2026-04-20 14:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826998/",
            "reporter": "abuse_ch"
        }
    ],
    "3826997": [
        {
            "dateadded": "2026-04-20 14:46:21 UTC",
            "url": "http://182.117.128.208:35229/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:26:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826997/",
            "reporter": "geenensp"
        }
    ],
    "3826996": [
        {
            "dateadded": "2026-04-20 14:45:09 UTC",
            "url": "https://deco-spe.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826996/",
            "reporter": "anonymous"
        }
    ],
    "3826995": [
        {
            "dateadded": "2026-04-20 14:42:10 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1-bn5msPZ_jeieZ9CiwxuqGVC6HgqJFvH",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826995/",
            "reporter": "abuse_ch"
        }
    ],
    "3826994": [
        {
            "dateadded": "2026-04-20 14:42:07 UTC",
            "url": "http://89.200.227.78:47297/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:08:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826994/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826993": [
        {
            "dateadded": "2026-04-20 14:40:09 UTC",
            "url": "https://0liwtqxp.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826993/",
            "reporter": "anonymous"
        }
    ],
    "3826992": [
        {
            "dateadded": "2026-04-20 14:36:09 UTC",
            "url": "http://192.210.186.197/20/img_213647.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826992/",
            "reporter": "abuse_ch"
        }
    ],
    "3826991": [
        {
            "dateadded": "2026-04-20 14:35:15 UTC",
            "url": "http://66.63.170.75/40/img_180818.png",
            "url_status": "offline",
            "last_online": "2026-04-26 23:19:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826991/",
            "reporter": "abuse_ch"
        }
    ],
    "3826990": [
        {
            "dateadded": "2026-04-20 14:35:09 UTC",
            "url": "https://fieldsun.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826990/",
            "reporter": "anonymous"
        }
    ],
    "3826989": [
        {
            "dateadded": "2026-04-20 14:32:11 UTC",
            "url": "http://115.49.25.68:45537/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:40:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826989/",
            "reporter": "geenensp"
        }
    ],
    "3826988": [
        {
            "dateadded": "2026-04-20 14:30:19 UTC",
            "url": "http://222.142.211.76:34670/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 00:23:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826988/",
            "reporter": "geenensp"
        }
    ],
    "3826987": [
        {
            "dateadded": "2026-04-20 14:30:11 UTC",
            "url": "https://5ya72oy.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826987/",
            "reporter": "anonymous"
        }
    ],
    "3826986": [
        {
            "dateadded": "2026-04-20 14:24:10 UTC",
            "url": "https://slowcivi.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826986/",
            "reporter": "anonymous"
        }
    ],
    "3826985": [
        {
            "dateadded": "2026-04-20 14:23:22 UTC",
            "url": "http://105.225.26.203:47869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:43:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826985/",
            "reporter": "geenensp"
        }
    ],
    "3826984": [
        {
            "dateadded": "2026-04-20 14:23:21 UTC",
            "url": "http://182.117.128.208:35229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826984/",
            "reporter": "geenensp"
        }
    ],
    "3826983": [
        {
            "dateadded": "2026-04-20 14:23:07 UTC",
            "url": "https://kronos.bot.nu/ms64gw.vsix",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826983/",
            "reporter": "abuse_ch"
        }
    ],
    "3826982": [
        {
            "dateadded": "2026-04-20 14:20:09 UTC",
            "url": "https://tbgqldre.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826982/",
            "reporter": "anonymous"
        }
    ],
    "3826981": [
        {
            "dateadded": "2026-04-20 14:19:08 UTC",
            "url": "http://107.172.135.36/25/wegivenbestthinkgsformebest.hta",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:45 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826981/",
            "reporter": "abuse_ch"
        }
    ],
    "3826980": [
        {
            "dateadded": "2026-04-20 14:18:09 UTC",
            "url": "http://66.179.248.120/img/optimized_MSI.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:56 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826980/",
            "reporter": "abuse_ch"
        }
    ],
    "3826978": [
        {
            "dateadded": "2026-04-20 14:18:08 UTC",
            "url": "http://192.3.136.226/30/seemybestfeeelingformebest.hta",
            "url_status": "offline",
            "last_online": "2026-04-22 06:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826978/",
            "reporter": "abuse_ch"
        }
    ],
    "3826979": [
        {
            "dateadded": "2026-04-20 14:18:08 UTC",
            "url": "http://198.46.173.32/36/goodthingswithbestpfer.hta",
            "url_status": "offline",
            "last_online": "2026-04-23 05:39:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826979/",
            "reporter": "abuse_ch"
        }
    ],
    "3826977": [
        {
            "dateadded": "2026-04-20 14:17:09 UTC",
            "url": "https://3ik31.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826977/",
            "reporter": "anonymous"
        }
    ],
    "3826976": [
        {
            "dateadded": "2026-04-20 14:13:11 UTC",
            "url": "https://west-layer.4zoralin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 14:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826976/",
            "reporter": "anonymous"
        }
    ],
    "3826975": [
        {
            "dateadded": "2026-04-20 14:11:12 UTC",
            "url": "http://180.157.47.152:56511/i",
            "url_status": "offline",
            "last_online": "2026-04-24 09:04:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826975/",
            "reporter": "geenensp"
        }
    ],
    "3826974": [
        {
            "dateadded": "2026-04-20 14:05:24 UTC",
            "url": "http://draalineverzignassi.com.br/wp-content/upgrade/plugin/Resubjecti.csv",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826974/",
            "reporter": "abuse_ch"
        }
    ],
    "3826973": [
        {
            "dateadded": "2026-04-20 14:05:12 UTC",
            "url": "https://dlvryintl.com/Resubjecti.csv",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826973/",
            "reporter": "abuse_ch"
        }
    ],
    "3826972": [
        {
            "dateadded": "2026-04-20 14:05:08 UTC",
            "url": "https://dlvryintl.com/szjBfLuyTWpr252.bin",
            "url_status": "offline",
            "last_online": "2026-04-20 14:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826972/",
            "reporter": "abuse_ch"
        }
    ],
    "3826971": [
        {
            "dateadded": "2026-04-20 14:02:08 UTC",
            "url": "http://105.187.40.82:53685/i",
            "url_status": "offline",
            "last_online": "2026-04-20 14:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826971/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826970": [
        {
            "dateadded": "2026-04-20 14:00:17 UTC",
            "url": "http://112.229.195.37:40838/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:05:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826970/",
            "reporter": "geenensp"
        }
    ],
    "3826969": [
        {
            "dateadded": "2026-04-20 13:57:06 UTC",
            "url": "http://123.14.251.124:37154/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:15:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826969/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826968": [
        {
            "dateadded": "2026-04-20 13:41:22 UTC",
            "url": "http://219.156.174.89:56081/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826968/",
            "reporter": "geenensp"
        }
    ],
    "3826967": [
        {
            "dateadded": "2026-04-20 13:37:13 UTC",
            "url": "http://115.56.12.247:60768/i",
            "url_status": "offline",
            "last_online": "2026-04-20 13:37:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826967/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826966": [
        {
            "dateadded": "2026-04-20 13:34:40 UTC",
            "url": "http://112.229.195.37:40838/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:11:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826966/",
            "reporter": "geenensp"
        }
    ],
    "3826965": [
        {
            "dateadded": "2026-04-20 13:29:11 UTC",
            "url": "http://182.121.246.132:35002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 06:21:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826965/",
            "reporter": "geenensp"
        }
    ],
    "3826963": [
        {
            "dateadded": "2026-04-20 13:26:23 UTC",
            "url": "http://115.98.231.183:60816/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:36:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826963/",
            "reporter": "geenensp"
        }
    ],
    "3826964": [
        {
            "dateadded": "2026-04-20 13:26:23 UTC",
            "url": "http://113.221.26.178:38224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 13:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826964/",
            "reporter": "geenensp"
        }
    ],
    "3826962": [
        {
            "dateadded": "2026-04-20 13:25:20 UTC",
            "url": "http://222.142.255.163:59864/i",
            "url_status": "offline",
            "last_online": "2026-04-22 06:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826962/",
            "reporter": "geenensp"
        }
    ],
    "3826961": [
        {
            "dateadded": "2026-04-20 13:19:13 UTC",
            "url": "http://45.171.177.193:36529/i",
            "url_status": "offline",
            "last_online": "2026-04-22 11:22:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826961/",
            "reporter": "geenensp"
        }
    ],
    "3826960": [
        {
            "dateadded": "2026-04-20 13:02:20 UTC",
            "url": "http://115.53.200.87:51513/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826960/",
            "reporter": "geenensp"
        }
    ],
    "3826959": [
        {
            "dateadded": "2026-04-20 13:02:07 UTC",
            "url": "http://42.231.90.89:51491/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:49:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826959/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826958": [
        {
            "dateadded": "2026-04-20 13:00:13 UTC",
            "url": "http://115.56.166.51:36860/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826958/",
            "reporter": "geenensp"
        }
    ],
    "3826957": [
        {
            "dateadded": "2026-04-20 12:58:23 UTC",
            "url": "http://119.177.67.63:49879/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:41:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826957/",
            "reporter": "geenensp"
        }
    ],
    "3826956": [
        {
            "dateadded": "2026-04-20 12:57:16 UTC",
            "url": "http://222.141.23.57:33821/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:42:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826956/",
            "reporter": "geenensp"
        }
    ],
    "3826955": [
        {
            "dateadded": "2026-04-20 12:54:19 UTC",
            "url": "http://61.53.94.107:33769/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:00:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826955/",
            "reporter": "geenensp"
        }
    ],
    "3826954": [
        {
            "dateadded": "2026-04-20 12:49:14 UTC",
            "url": "http://219.156.174.89:56081/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:42:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826954/",
            "reporter": "geenensp"
        }
    ],
    "3826953": [
        {
            "dateadded": "2026-04-20 12:48:16 UTC",
            "url": "http://45.171.177.193:36529/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:58:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826953/",
            "reporter": "geenensp"
        }
    ],
    "3826951": [
        {
            "dateadded": "2026-04-20 12:47:20 UTC",
            "url": "http://123.179.230.86:40046/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826951/",
            "reporter": "geenensp"
        }
    ],
    "3826952": [
        {
            "dateadded": "2026-04-20 12:47:20 UTC",
            "url": "http://61.52.39.112:37431/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:36:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826952/",
            "reporter": "geenensp"
        }
    ],
    "3826950": [
        {
            "dateadded": "2026-04-20 12:46:22 UTC",
            "url": "http://59.97.247.198:33605/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826950/",
            "reporter": "geenensp"
        }
    ],
    "3826949": [
        {
            "dateadded": "2026-04-20 12:45:20 UTC",
            "url": "http://222.142.255.163:59864/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 04:47:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826949/",
            "reporter": "geenensp"
        }
    ],
    "3826948": [
        {
            "dateadded": "2026-04-20 12:42:07 UTC",
            "url": "http://175.148.206.118:33124/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:23:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826948/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826947": [
        {
            "dateadded": "2026-04-20 12:37:09 UTC",
            "url": "http://176.65.148.141/m68k",
            "url_status": "offline",
            "last_online": "2026-04-22 17:53:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826947/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826946": [
        {
            "dateadded": "2026-04-20 12:37:08 UTC",
            "url": "http://176.65.148.141/arm",
            "url_status": "offline",
            "last_online": "2026-04-22 18:24:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826946/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826945": [
        {
            "dateadded": "2026-04-20 12:36:19 UTC",
            "url": "http://176.65.148.141/arm6",
            "url_status": "offline",
            "last_online": "2026-04-22 17:29:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826945/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826938": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.148.141/arc",
            "url_status": "offline",
            "last_online": "2026-04-21 17:11:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826938/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826939": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.148.141/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 18:04:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826939/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826940": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.134.30/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-26 20:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826940/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826941": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.148.141/arm7",
            "url_status": "offline",
            "last_online": "2026-04-22 17:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826941/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826942": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.148.141/mips",
            "url_status": "offline",
            "last_online": "2026-04-21 18:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826942/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826943": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.148.141/ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 18:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826943/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826944": [
        {
            "dateadded": "2026-04-20 12:35:22 UTC",
            "url": "http://176.65.148.141/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-22 17:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826944/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826935": [
        {
            "dateadded": "2026-04-20 12:35:21 UTC",
            "url": "http://176.65.148.141/sh4",
            "url_status": "offline",
            "last_online": "2026-04-22 18:10:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826935/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826936": [
        {
            "dateadded": "2026-04-20 12:35:21 UTC",
            "url": "http://176.65.148.141/spc",
            "url_status": "offline",
            "last_online": "2026-04-22 16:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826936/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826937": [
        {
            "dateadded": "2026-04-20 12:35:21 UTC",
            "url": "http://176.65.148.141/x86",
            "url_status": "offline",
            "last_online": "2026-04-22 17:07:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826937/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826934": [
        {
            "dateadded": "2026-04-20 12:31:27 UTC",
            "url": "http://222.141.23.57:33821/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:34:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826934/",
            "reporter": "geenensp"
        }
    ],
    "3826933": [
        {
            "dateadded": "2026-04-20 12:29:08 UTC",
            "url": "http://192.210.186.197/20/verycleaneffectivethingscoming.hta",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826933/",
            "reporter": "abuse_ch"
        }
    ],
    "3826932": [
        {
            "dateadded": "2026-04-20 12:28:13 UTC",
            "url": "https://rizvedevelop.com/%D0%92%D0%BE%D0%BEtstappe%D0%B3Ulx64.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 12:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "password:ryos",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826932/",
            "reporter": "threat_hunterr"
        }
    ],
    "3826931": [
        {
            "dateadded": "2026-04-20 12:28:07 UTC",
            "url": "http://192.3.122.144/25/goodnewsformegood.hta",
            "url_status": "offline",
            "last_online": "2026-04-20 22:54:33 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826931/",
            "reporter": "abuse_ch"
        }
    ],
    "3826930": [
        {
            "dateadded": "2026-04-20 12:27:09 UTC",
            "url": "http://42.231.90.89:51491/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:07:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826930/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826929": [
        {
            "dateadded": "2026-04-20 12:27:08 UTC",
            "url": "http://45.225.135.61/fhKfephsUsIUnOnQCUkuUU63.bin",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826929/",
            "reporter": "abuse_ch"
        }
    ],
    "3826925": [
        {
            "dateadded": "2026-04-20 12:27:07 UTC",
            "url": "http://45.225.135.61/OPndZua3.bin",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826925/",
            "reporter": "abuse_ch"
        }
    ],
    "3826926": [
        {
            "dateadded": "2026-04-20 12:27:07 UTC",
            "url": "http://45.225.135.61/XunbTlnVKDYLMr54.bin",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826926/",
            "reporter": "abuse_ch"
        }
    ],
    "3826927": [
        {
            "dateadded": "2026-04-20 12:27:07 UTC",
            "url": "http://45.225.135.61/YHdTW67.bin",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826927/",
            "reporter": "abuse_ch"
        }
    ],
    "3826928": [
        {
            "dateadded": "2026-04-20 12:27:07 UTC",
            "url": "http://45.225.135.61/CUQAOWNQ46.bin",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826928/",
            "reporter": "abuse_ch"
        }
    ],
    "3826924": [
        {
            "dateadded": "2026-04-20 12:19:26 UTC",
            "url": "http://219.139.62.179:47439/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826924/",
            "reporter": "geenensp"
        }
    ],
    "3826923": [
        {
            "dateadded": "2026-04-20 12:13:25 UTC",
            "url": "http://42.178.117.77:36319/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:01:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826923/",
            "reporter": "geenensp"
        }
    ],
    "3826922": [
        {
            "dateadded": "2026-04-20 12:11:21 UTC",
            "url": "http://89.190.156.19/bins/hoho.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826922/",
            "reporter": "abuse_ch"
        }
    ],
    "3826920": [
        {
            "dateadded": "2026-04-20 12:10:16 UTC",
            "url": "http://89.190.156.19/bins/hoho.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826920/",
            "reporter": "abuse_ch"
        }
    ],
    "3826921": [
        {
            "dateadded": "2026-04-20 12:10:16 UTC",
            "url": "http://89.190.156.19/bins/hoho.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826921/",
            "reporter": "abuse_ch"
        }
    ],
    "3826916": [
        {
            "dateadded": "2026-04-20 12:09:21 UTC",
            "url": "http://89.190.156.19/bins/hoho.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826916/",
            "reporter": "abuse_ch"
        }
    ],
    "3826917": [
        {
            "dateadded": "2026-04-20 12:09:21 UTC",
            "url": "http://89.190.156.19/bins/hoho.spc",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826917/",
            "reporter": "abuse_ch"
        }
    ],
    "3826918": [
        {
            "dateadded": "2026-04-20 12:09:21 UTC",
            "url": "http://89.190.156.19/krane_linux_x64",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826918/",
            "reporter": "abuse_ch"
        }
    ],
    "3826919": [
        {
            "dateadded": "2026-04-20 12:09:21 UTC",
            "url": "http://89.190.156.19/krane_mipsle",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826919/",
            "reporter": "abuse_ch"
        }
    ],
    "3826910": [
        {
            "dateadded": "2026-04-20 12:09:20 UTC",
            "url": "http://89.190.156.19/bins/hoho.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826910/",
            "reporter": "abuse_ch"
        }
    ],
    "3826911": [
        {
            "dateadded": "2026-04-20 12:09:20 UTC",
            "url": "http://89.190.156.19/bins/hoho.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826911/",
            "reporter": "abuse_ch"
        }
    ],
    "3826912": [
        {
            "dateadded": "2026-04-20 12:09:20 UTC",
            "url": "http://89.190.156.19/bins/hoho.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826912/",
            "reporter": "abuse_ch"
        }
    ],
    "3826913": [
        {
            "dateadded": "2026-04-20 12:09:20 UTC",
            "url": "http://89.190.156.19/bins/hoho.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 13:56:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826913/",
            "reporter": "abuse_ch"
        }
    ],
    "3826914": [
        {
            "dateadded": "2026-04-20 12:09:20 UTC",
            "url": "http://89.190.156.19/bins/hoho.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826914/",
            "reporter": "abuse_ch"
        }
    ],
    "3826915": [
        {
            "dateadded": "2026-04-20 12:09:20 UTC",
            "url": "http://89.190.156.19/bins/hoho.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826915/",
            "reporter": "abuse_ch"
        }
    ],
    "3826909": [
        {
            "dateadded": "2026-04-20 12:00:20 UTC",
            "url": "http://219.155.220.138:56751/i",
            "url_status": "offline",
            "last_online": "2026-04-20 12:00:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826909/",
            "reporter": "geenensp"
        }
    ],
    "3826908": [
        {
            "dateadded": "2026-04-20 11:55:16 UTC",
            "url": "http://42.239.235.31:39010/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826908/",
            "reporter": "geenensp"
        }
    ],
    "3826907": [
        {
            "dateadded": "2026-04-20 11:44:22 UTC",
            "url": "http://27.219.44.149:55821/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826907/",
            "reporter": "geenensp"
        }
    ],
    "3826906": [
        {
            "dateadded": "2026-04-20 11:39:19 UTC",
            "url": "http://42.230.25.133:59989/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826906/",
            "reporter": "geenensp"
        }
    ],
    "3826905": [
        {
            "dateadded": "2026-04-20 11:37:09 UTC",
            "url": "http://139.218.43.94:57244/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826905/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826904": [
        {
            "dateadded": "2026-04-20 11:35:10 UTC",
            "url": "http://42.177.23.23:59988/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 17:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826904/",
            "reporter": "geenensp"
        }
    ],
    "3826903": [
        {
            "dateadded": "2026-04-20 11:33:20 UTC",
            "url": "http://117.131.92.150:55542/i",
            "url_status": "offline",
            "last_online": "2026-04-26 20:16:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826903/",
            "reporter": "geenensp"
        }
    ],
    "3826902": [
        {
            "dateadded": "2026-04-20 11:31:14 UTC",
            "url": "http://117.131.92.150:55542/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 20:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826902/",
            "reporter": "geenensp"
        }
    ],
    "3826901": [
        {
            "dateadded": "2026-04-20 11:12:21 UTC",
            "url": "http://219.155.220.138:56751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:12:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826901/",
            "reporter": "geenensp"
        }
    ],
    "3826900": [
        {
            "dateadded": "2026-04-20 11:11:27 UTC",
            "url": "http://42.234.206.56:43941/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:16:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826900/",
            "reporter": "geenensp"
        }
    ],
    "3826899": [
        {
            "dateadded": "2026-04-20 11:08:24 UTC",
            "url": "http://42.238.248.135:49918/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826899/",
            "reporter": "geenensp"
        }
    ],
    "3826898": [
        {
            "dateadded": "2026-04-20 11:07:09 UTC",
            "url": "http://220.161.100.126:53906/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:56:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826898/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826897": [
        {
            "dateadded": "2026-04-20 11:02:08 UTC",
            "url": "http://163.142.94.201:60470/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:14:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826897/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826896": [
        {
            "dateadded": "2026-04-20 10:48:20 UTC",
            "url": "http://36.70.224.13:50060/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826896/",
            "reporter": "geenensp"
        }
    ],
    "3826895": [
        {
            "dateadded": "2026-04-20 10:47:15 UTC",
            "url": "https://cool-milk5.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826895/",
            "reporter": "anonymous"
        }
    ],
    "3826894": [
        {
            "dateadded": "2026-04-20 10:45:22 UTC",
            "url": "http://123.5.114.100:34916/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:45:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826894/",
            "reporter": "geenensp"
        }
    ],
    "3826893": [
        {
            "dateadded": "2026-04-20 10:44:12 UTC",
            "url": "http://42.238.248.135:49918/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826893/",
            "reporter": "geenensp"
        }
    ],
    "3826892": [
        {
            "dateadded": "2026-04-20 10:42:12 UTC",
            "url": "https://fresh-tea4.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826892/",
            "reporter": "anonymous"
        }
    ],
    "3826891": [
        {
            "dateadded": "2026-04-20 10:37:14 UTC",
            "url": "https://hot-soup3.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826891/",
            "reporter": "anonymous"
        }
    ],
    "3826890": [
        {
            "dateadded": "2026-04-20 10:37:13 UTC",
            "url": "http://220.161.100.126:53906/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826890/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826889": [
        {
            "dateadded": "2026-04-20 10:36:30 UTC",
            "url": "http://36.70.224.13:50060/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826889/",
            "reporter": "geenensp"
        }
    ],
    "3826888": [
        {
            "dateadded": "2026-04-20 10:31:11 UTC",
            "url": "https://sweet-bun2.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826888/",
            "reporter": "anonymous"
        }
    ],
    "3826887": [
        {
            "dateadded": "2026-04-20 10:25:15 UTC",
            "url": "https://tasty-pie1.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826887/",
            "reporter": "anonymous"
        }
    ],
    "3826886": [
        {
            "dateadded": "2026-04-20 10:23:19 UTC",
            "url": "http://123.5.114.100:34916/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:45:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826886/",
            "reporter": "geenensp"
        }
    ],
    "3826885": [
        {
            "dateadded": "2026-04-20 10:19:07 UTC",
            "url": "https://easy-task6.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826885/",
            "reporter": "anonymous"
        }
    ],
    "3826884": [
        {
            "dateadded": "2026-04-20 10:14:20 UTC",
            "url": "http://163.142.93.191:35855/i",
            "url_status": "offline",
            "last_online": "2026-04-26 08:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826884/",
            "reporter": "geenensp"
        }
    ],
    "3826883": [
        {
            "dateadded": "2026-04-20 10:13:12 UTC",
            "url": "https://just-talk5.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826883/",
            "reporter": "anonymous"
        }
    ],
    "3826882": [
        {
            "dateadded": "2026-04-20 10:10:14 UTC",
            "url": "http://110.37.18.108:33408/i",
            "url_status": "offline",
            "last_online": "2026-04-20 14:59:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826882/",
            "reporter": "geenensp"
        }
    ],
    "3826881": [
        {
            "dateadded": "2026-04-20 10:08:10 UTC",
            "url": "https://nice-shot4.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826881/",
            "reporter": "anonymous"
        }
    ],
    "3826880": [
        {
            "dateadded": "2026-04-20 10:02:11 UTC",
            "url": "https://real-fact3.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 10:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826880/",
            "reporter": "anonymous"
        }
    ],
    "3826879": [
        {
            "dateadded": "2026-04-20 09:57:08 UTC",
            "url": "https://best-time2.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826879/",
            "reporter": "anonymous"
        }
    ],
    "3826878": [
        {
            "dateadded": "2026-04-20 09:54:19 UTC",
            "url": "http://123.11.243.174:43883/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:47:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826878/",
            "reporter": "geenensp"
        }
    ],
    "3826877": [
        {
            "dateadded": "2026-04-20 09:50:12 UTC",
            "url": "https://good-news1.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826877/",
            "reporter": "anonymous"
        }
    ],
    "3826876": [
        {
            "dateadded": "2026-04-20 09:47:12 UTC",
            "url": "http://110.37.18.108:33408/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 12:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826876/",
            "reporter": "geenensp"
        }
    ],
    "3826875": [
        {
            "dateadded": "2026-04-20 09:46:16 UTC",
            "url": "https://side-view6.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:46:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826875/",
            "reporter": "anonymous"
        }
    ],
    "3826874": [
        {
            "dateadded": "2026-04-20 09:44:17 UTC",
            "url": "http://81.230.148.181:58009/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:12:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826874/",
            "reporter": "geenensp"
        }
    ],
    "3826873": [
        {
            "dateadded": "2026-04-20 09:42:20 UTC",
            "url": "http://163.142.93.191:35855/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826873/",
            "reporter": "geenensp"
        }
    ],
    "3826872": [
        {
            "dateadded": "2026-04-20 09:41:19 UTC",
            "url": "http://42.179.8.152:39937/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:43:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826872/",
            "reporter": "geenensp"
        }
    ],
    "3826871": [
        {
            "dateadded": "2026-04-20 09:40:21 UTC",
            "url": "http://167.250.158.32:34175/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:29:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826871/",
            "reporter": "geenensp"
        }
    ],
    "3826870": [
        {
            "dateadded": "2026-04-20 09:40:15 UTC",
            "url": "https://back-yard5.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826870/",
            "reporter": "anonymous"
        }
    ],
    "3826869": [
        {
            "dateadded": "2026-04-20 09:38:19 UTC",
            "url": "http://115.55.253.100:42997/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:54:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826869/",
            "reporter": "geenensp"
        }
    ],
    "3826867": [
        {
            "dateadded": "2026-04-20 09:36:23 UTC",
            "url": "http://167.250.158.32:34175/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:55:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826867/",
            "reporter": "geenensp"
        }
    ],
    "3826868": [
        {
            "dateadded": "2026-04-20 09:36:23 UTC",
            "url": "http://115.55.253.100:42997/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826868/",
            "reporter": "geenensp"
        }
    ],
    "3826865": [
        {
            "dateadded": "2026-04-20 09:36:15 UTC",
            "url": "https://home-base1.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826865/",
            "reporter": "anonymous"
        }
    ],
    "3826866": [
        {
            "dateadded": "2026-04-20 09:36:15 UTC",
            "url": "https://full-room4.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826866/",
            "reporter": "anonymous"
        }
    ],
    "3826863": [
        {
            "dateadded": "2026-04-20 09:36:14 UTC",
            "url": "https://hub0-hinge.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826863/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826864": [
        {
            "dateadded": "2026-04-20 09:36:14 UTC",
            "url": "https://30urtlmu.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826864/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826862": [
        {
            "dateadded": "2026-04-20 09:36:11 UTC",
            "url": "https://city-life2.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826862/",
            "reporter": "anonymous"
        }
    ],
    "3826861": [
        {
            "dateadded": "2026-04-20 09:36:09 UTC",
            "url": "https://next-door3.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826861/",
            "reporter": "anonymous"
        }
    ],
    "3826858": [
        {
            "dateadded": "2026-04-20 09:20:35 UTC",
            "url": "https://meta-5har.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826858/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826859": [
        {
            "dateadded": "2026-04-20 09:20:35 UTC",
            "url": "https://good1.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826859/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826860": [
        {
            "dateadded": "2026-04-20 09:20:35 UTC",
            "url": "https://tridraix5.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826860/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826856": [
        {
            "dateadded": "2026-04-20 09:20:32 UTC",
            "url": "https://c3dar-sync.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826856/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826857": [
        {
            "dateadded": "2026-04-20 09:20:32 UTC",
            "url": "https://spot2.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826857/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826849": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "http://densefro.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826849/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826850": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "https://tal-forgeal.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826850/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826851": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "http://geo-4uth.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826851/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826852": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "http://photo-frame1.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826852/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826853": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "http://repair-work3.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826853/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826854": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "https://roughengine.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826854/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826855": [
        {
            "dateadded": "2026-04-20 09:20:31 UTC",
            "url": "https://peakree.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826855/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826835": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://echoblend.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826835/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826836": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://global-site6.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826836/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826837": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://civillabel.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826837/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826838": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "http://class-report5.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826838/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826839": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "http://qu4nt-panel.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826839/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826840": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://sxbrp.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826840/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826841": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "http://zsj7xqo.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826841/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826842": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://routerwago.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826842/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826843": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://bay-banne.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826843/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826844": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "http://public-help5.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826844/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826845": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "http://office-paper1.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826845/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826846": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://pa5tu-drive.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826846/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826847": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://dynamicsoun.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826847/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826848": [
        {
            "dateadded": "2026-04-20 09:20:30 UTC",
            "url": "https://main-street5.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826848/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826834": [
        {
            "dateadded": "2026-04-20 09:20:29 UTC",
            "url": "https://proto-dynam1.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826834/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826827": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "https://driv3-array.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826827/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826828": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "http://torr3nt-layer.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826828/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826829": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "http://local-event6.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826829/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826830": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "http://hotel-booking2.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826830/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826831": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "http://guest-portal2.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826831/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826832": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "http://world-press2.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826832/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826833": [
        {
            "dateadded": "2026-04-20 09:20:28 UTC",
            "url": "https://vialstr.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826833/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826815": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "https://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826815/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826816": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "http://flovv-chain.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826816/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826817": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "https://flovv-chain.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826817/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826818": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "https://livel-sou.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826818/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826819": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "http://arraynotifier.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826819/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826820": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "https://birdout.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826820/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826821": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "http://study-material4.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826821/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826822": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "https://t0mbk.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826822/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826823": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "http://ovumpg.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826823/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826824": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "http://b1oo9-hold.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826824/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826825": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "http://central-market1.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826825/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826826": [
        {
            "dateadded": "2026-04-20 09:20:27 UTC",
            "url": "https://tlnsb.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826826/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826804": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://help5.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826804/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826805": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://item4.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826805/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826806": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://jdqn.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826806/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826807": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "http://beach-resort4.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826807/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826808": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "http://bay-banne.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826808/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826809": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://spli1-watch.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826809/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826810": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://ice-mark.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826810/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826811": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://valu-span.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826811/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826812": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://zme1roui.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826812/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826813": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "https://njf8.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826813/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826814": [
        {
            "dateadded": "2026-04-20 09:20:26 UTC",
            "url": "http://ar2ymo.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826814/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826792": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "http://m0ss5-watch.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826792/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826793": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "https://travel-blog5.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826793/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826794": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "https://fernretai.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826794/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826795": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "https://quick-cash5.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826795/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826796": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "https://rtrr.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826796/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826797": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "https://zdjine7o.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826797/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826798": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "http://syxnh65t.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826798/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826799": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "http://p14sm-grid.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826799/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826800": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "http://zenmark1a.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826800/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826801": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "http://mnwgjp.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826801/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826802": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "https://gathe-tri.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826802/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826803": [
        {
            "dateadded": "2026-04-20 09:20:25 UTC",
            "url": "http://street-view6.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826803/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826784": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "http://81.230.148.181:58009/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:44:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826784/",
            "reporter": "geenensp"
        }
    ],
    "3826785": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "http://zme1roui.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826785/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826786": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "https://vtdlwy.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826786/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826787": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "https://va11-route.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826787/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826788": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "https://491ptjh.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826788/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826789": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "https://solmeshos.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826789/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826790": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "http://good-luck5.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826790/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826791": [
        {
            "dateadded": "2026-04-20 09:20:24 UTC",
            "url": "http://weather-post4.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826791/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826775": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "http://talfluxen3.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826775/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826776": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "https://area1.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826776/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826777": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "https://il2l4822.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826777/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826778": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "https://mnwgjp.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826778/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826779": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "https://soft-cov.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826779/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826780": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "http://167lo.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826780/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826781": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "https://auth7-core.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826781/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826782": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "http://qpp9.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826782/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826783": [
        {
            "dateadded": "2026-04-20 09:20:23 UTC",
            "url": "http://daily-news1.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826783/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826759": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://media-player6.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826759/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826760": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://castexport.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826760/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826761": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://393llqb.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826761/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826762": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://mernexen6.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826762/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826763": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://glue-stick5.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826763/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826764": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://authsnapshot.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826764/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826765": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://main6.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826765/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826766": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://zen-nexos.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826766/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826767": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://ind3-spool.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826767/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826768": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://167lo.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826768/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826769": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://sharpsummit.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826769/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826770": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://vor-coreum.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826770/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826771": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://fbhi02d.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826771/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826772": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "https://lummesh8or.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826772/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826773": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://vtdlwy.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826773/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826774": [
        {
            "dateadded": "2026-04-20 09:20:22 UTC",
            "url": "http://velspire3on.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826774/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826757": [
        {
            "dateadded": "2026-04-20 09:20:21 UTC",
            "url": "http://fernretai.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826757/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826758": [
        {
            "dateadded": "2026-04-20 09:20:21 UTC",
            "url": "http://soft-cov.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826758/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826750": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "http://kel-venor.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826750/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826751": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "https://shop1.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826751/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826752": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "https://d43mon-field.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826752/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826753": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "http://tourist-map3.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826753/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826754": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "https://wilpol.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826754/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826755": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "https://nnid.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826755/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826756": [
        {
            "dateadded": "2026-04-20 09:20:20 UTC",
            "url": "https://echo-span.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826756/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826744": [
        {
            "dateadded": "2026-04-20 09:20:19 UTC",
            "url": "http://image-zoom2.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826744/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826745": [
        {
            "dateadded": "2026-04-20 09:20:19 UTC",
            "url": "https://5ync-lab.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826745/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826746": [
        {
            "dateadded": "2026-04-20 09:20:19 UTC",
            "url": "https://freshstorage.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826746/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826747": [
        {
            "dateadded": "2026-04-20 09:20:19 UTC",
            "url": "https://vel-spireex.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826747/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826748": [
        {
            "dateadded": "2026-04-20 09:20:19 UTC",
            "url": "http://d43mon-field.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826748/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826749": [
        {
            "dateadded": "2026-04-20 09:20:19 UTC",
            "url": "http://student-form2.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826749/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826732": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://t1de-vault.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826732/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826733": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://5and-stack.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826733/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826734": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://total-summary4.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826734/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826735": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "https://xoqairj.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826735/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826736": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://zzx2x3.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826736/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826737": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://ae5z56.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826737/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826738": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://norlithix3.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826738/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826739": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://queu-crest.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826739/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826740": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://star-ring.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826740/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826741": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "http://vaq4sdju.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826741/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826742": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "https://breezscrip.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826742/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826743": [
        {
            "dateadded": "2026-04-20 09:20:18 UTC",
            "url": "https://pwmyu.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826743/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826727": [
        {
            "dateadded": "2026-04-20 09:20:17 UTC",
            "url": "https://alt-nirnbl.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826727/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826728": [
        {
            "dateadded": "2026-04-20 09:20:17 UTC",
            "url": "https://geo-4uth.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826728/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826729": [
        {
            "dateadded": "2026-04-20 09:20:17 UTC",
            "url": "https://vera.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826729/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826730": [
        {
            "dateadded": "2026-04-20 09:20:17 UTC",
            "url": "https://scenic-spot2.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826730/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826731": [
        {
            "dateadded": "2026-04-20 09:20:17 UTC",
            "url": "https://mruyas.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826731/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826722": [
        {
            "dateadded": "2026-04-20 09:20:16 UTC",
            "url": "https://velvenor9.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826722/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826723": [
        {
            "dateadded": "2026-04-20 09:20:16 UTC",
            "url": "http://travel-guide1.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826723/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826724": [
        {
            "dateadded": "2026-04-20 09:20:16 UTC",
            "url": "http://sound-track5.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826724/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826725": [
        {
            "dateadded": "2026-04-20 09:20:16 UTC",
            "url": "https://inn35-dock.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826725/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826726": [
        {
            "dateadded": "2026-04-20 09:20:16 UTC",
            "url": "https://castexport.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826726/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826712": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "https://opt1-phase.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826712/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826713": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "https://qpp9.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826713/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826714": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "https://registryfaithful.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826714/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826715": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "https://valleydispatcher.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826715/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826716": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "http://dyndraex.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826716/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826717": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "https://abzxcp.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 09:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826717/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826718": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "https://motmolecu.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826718/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826719": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "http://sport-match3.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826719/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826720": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "http://geo-dec0d.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826720/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826721": [
        {
            "dateadded": "2026-04-20 09:20:15 UTC",
            "url": "http://media-gallery3.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826721/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826702": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "http://hfjivor0.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826702/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826703": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "http://hpryikjw.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826703/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826704": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "https://m0ss5-watch.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826704/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826705": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "http://online-course3.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826705/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826706": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "https://h4rve5-loop.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826706/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826707": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "https://spedus.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826707/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826708": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "http://op3n-cast.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826708/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826709": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "https://guest2.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826709/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826710": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "https://listeshap.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826710/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826711": [
        {
            "dateadded": "2026-04-20 09:20:14 UTC",
            "url": "http://spedus.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826711/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826688": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://final-grade6.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826688/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826689": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "https://smart-point2.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826689/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826690": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://pa5tu-drive.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826690/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826691": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://water-pipe5.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826691/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826692": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://car-rental1.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826692/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826693": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://byteash.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826693/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826694": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://trip-advisor5.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826694/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826695": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://dynamicsoun.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826695/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826696": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://white-board4.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826696/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826697": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://jhknytxr.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826697/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826698": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "https://9waxfs6b.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826698/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826699": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://smart-door6.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826699/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826700": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "http://fast-drive2.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826700/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826701": [
        {
            "dateadded": "2026-04-20 09:20:13 UTC",
            "url": "https://latest-news3.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826701/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826679": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "https://small-team1.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826679/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826680": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "http://media3.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826680/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826681": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "https://star-ring.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826681/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826682": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "https://queryguard.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826682/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826683": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "https://small-map4.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826683/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826684": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "http://solcore0ix.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826684/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826685": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "https://torr3nt-layer.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826685/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826686": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "http://specapi.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826686/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826687": [
        {
            "dateadded": "2026-04-20 09:20:12 UTC",
            "url": "http://video-clip4.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826687/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826671": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "http://public-lesson1.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826671/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826672": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "https://dynflux6al.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826672/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826673": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "https://b1rd-panel.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826673/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826674": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "http://listeshap.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826674/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826675": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "http://alt-nirnbl.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826675/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826676": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "http://vscoj.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826676/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826677": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "https://open-source6.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826677/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826678": [
        {
            "dateadded": "2026-04-20 09:20:11 UTC",
            "url": "http://4cti-pulse.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826678/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826666": [
        {
            "dateadded": "2026-04-20 09:20:10 UTC",
            "url": "https://plasm-spool.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826666/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826667": [
        {
            "dateadded": "2026-04-20 09:20:10 UTC",
            "url": "http://m0ti9-route.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826667/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826668": [
        {
            "dateadded": "2026-04-20 09:20:10 UTC",
            "url": "http://echoblend.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826668/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826669": [
        {
            "dateadded": "2026-04-20 09:20:10 UTC",
            "url": "https://ae5z56.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826669/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826670": [
        {
            "dateadded": "2026-04-20 09:20:10 UTC",
            "url": "http://item-details4.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826670/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826653": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://local-office3.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826653/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826654": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "https://solnex0ex.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826654/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826655": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "https://ychgg.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826655/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826656": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://solcorear.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826656/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826657": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://auth7-core.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826657/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826658": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826658/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826659": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://large-parcel2.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826659/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826660": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "https://unitecres.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826660/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826661": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://velvenor9.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826661/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826662": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "https://box2.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826662/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826663": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "https://order1.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826663/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826664": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "http://491ptjh.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826664/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826665": [
        {
            "dateadded": "2026-04-20 09:20:09 UTC",
            "url": "https://sketchneuron.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826665/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826632": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://vaq4sdju.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826632/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826633": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://black-marker3.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826633/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826634": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://labeltheory.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826634/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826635": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://brand-mark6.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826635/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826636": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://fi3rce7-watch.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826636/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826637": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://media3.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826637/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826638": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://9adl.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826638/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826639": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://sercore2or.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826639/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826640": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://picture-book3.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826640/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826641": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://zen-nexos.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826641/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826642": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://fr0st-branch.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826642/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826643": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://arrayshore.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826643/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826644": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://desk-folder6.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826644/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826645": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://geo-r0ut.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826645/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826646": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://prime-list3.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826646/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826647": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://pencil-case2.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826647/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826648": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://lps08.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826648/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826649": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://xxvxsk4x.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826649/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826650": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "http://vvood-forge.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826650/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826651": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://par5e-array.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826651/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826652": [
        {
            "dateadded": "2026-04-20 09:20:08 UTC",
            "url": "https://povv3r3-sheet.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826652/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826608": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://hibcn.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826608/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826609": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://gate6-link.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826609/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826610": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://streambreeze.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826610/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826611": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://9waxfs6b.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826611/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826612": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://87phs.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826612/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826613": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://gutyx.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826613/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826614": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://home-section6.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826614/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826615": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://massivespectra.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826615/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826616": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://urban-vision1.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826616/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826617": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://snow-ass.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826617/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826618": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://neo-tok3.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826618/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826619": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://sharpsummit.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826619/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826620": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826620/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826621": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://mervaleon1.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826621/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826622": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://lnrjp.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826622/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826623": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://1ndex2-gate.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826623/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826624": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://28mp.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826624/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826625": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://t1de-vault.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826625/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826626": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://shiftcascade.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826626/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826627": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://solcorear.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826627/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826628": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://fundoasis.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826628/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826629": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://clean-house2.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826629/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826630": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "http://rtrr.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826630/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826631": [
        {
            "dateadded": "2026-04-20 09:20:07 UTC",
            "url": "https://best-choice1.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826631/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826583": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://garden-view4.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826583/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826584": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://order-status1.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826584/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826585": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://densefro.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826585/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826586": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://velline0os.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826586/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826587": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://norlithix3.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826587/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826588": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://bm1rtmr.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826588/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826589": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://fabricpayload.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826589/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826590": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://jhknytxr.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826590/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826591": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://casualquant.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826591/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826592": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://vvood-forge.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826592/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826593": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://iijbe.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826593/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826594": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://sketc-gate.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826594/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826595": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://gate6-link.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826595/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826596": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://fsefumza.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826596/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826597": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://11q31v.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826597/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826598": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://kel-venor.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826598/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826599": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://sketc-gate.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826599/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826600": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://s0ck-spool.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826600/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826601": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://home-service1.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826601/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826602": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://columnapi.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826602/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826603": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://tshev.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826603/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826604": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://encodersensor.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826604/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826605": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "http://393llqb.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826605/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826606": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://39rd.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826606/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826607": [
        {
            "dateadded": "2026-04-20 09:20:06 UTC",
            "url": "https://du5t3-forge.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826607/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3826582": [
        {
            "dateadded": "2026-04-20 09:19:07 UTC",
            "url": "http://61.53.74.19:40194/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:50:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826582/",
            "reporter": "geenensp"
        }
    ],
    "3826581": [
        {
            "dateadded": "2026-04-20 09:16:18 UTC",
            "url": "http://110.37.13.110:56976/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:49:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826581/",
            "reporter": "geenensp"
        }
    ],
    "3826580": [
        {
            "dateadded": "2026-04-20 09:15:20 UTC",
            "url": "http://110.36.80.163:38944/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826580/",
            "reporter": "geenensp"
        }
    ],
    "3826579": [
        {
            "dateadded": "2026-04-20 09:14:11 UTC",
            "url": "http://110.36.31.244:36903/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:27:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826579/",
            "reporter": "geenensp"
        }
    ],
    "3826578": [
        {
            "dateadded": "2026-04-20 09:12:08 UTC",
            "url": "https://gold-fish6.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826578/",
            "reporter": "anonymous"
        }
    ],
    "3826577": [
        {
            "dateadded": "2026-04-20 09:07:11 UTC",
            "url": "https://warm-sun5.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826577/",
            "reporter": "anonymous"
        }
    ],
    "3826576": [
        {
            "dateadded": "2026-04-20 09:06:40 UTC",
            "url": "http://119.36.203.34:59572/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826576/",
            "reporter": "geenensp"
        }
    ],
    "3826575": [
        {
            "dateadded": "2026-04-20 09:01:08 UTC",
            "url": "https://dark-wood4.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 09:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826575/",
            "reporter": "anonymous"
        }
    ],
    "3826574": [
        {
            "dateadded": "2026-04-20 08:55:09 UTC",
            "url": "https://high-hill3.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826574/",
            "reporter": "anonymous"
        }
    ],
    "3826573": [
        {
            "dateadded": "2026-04-20 08:52:19 UTC",
            "url": "http://201.149.107.50:51796/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:24:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826573/",
            "reporter": "geenensp"
        }
    ],
    "3826572": [
        {
            "dateadded": "2026-04-20 08:50:12 UTC",
            "url": "https://blue-sky2.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826572/",
            "reporter": "anonymous"
        }
    ],
    "3826571": [
        {
            "dateadded": "2026-04-20 08:48:17 UTC",
            "url": "http://95.56.232.109:46503/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826571/",
            "reporter": "geenensp"
        }
    ],
    "3826570": [
        {
            "dateadded": "2026-04-20 08:45:11 UTC",
            "url": "http://110.39.229.188:56974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826570/",
            "reporter": "geenensp"
        }
    ],
    "3826569": [
        {
            "dateadded": "2026-04-20 08:43:07 UTC",
            "url": "https://deep-sea1.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826569/",
            "reporter": "anonymous"
        }
    ],
    "3826568": [
        {
            "dateadded": "2026-04-20 08:42:05 UTC",
            "url": "http://37.52.190.75:37850/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:57:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826568/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826567": [
        {
            "dateadded": "2026-04-20 08:41:13 UTC",
            "url": "https://soft-bag6.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826567/",
            "reporter": "anonymous"
        }
    ],
    "3826566": [
        {
            "dateadded": "2026-04-20 08:37:11 UTC",
            "url": "https://hard-box5.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826566/",
            "reporter": "anonymous"
        }
    ],
    "3826565": [
        {
            "dateadded": "2026-04-20 08:31:19 UTC",
            "url": "http://201.149.107.50:51796/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:18:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826565/",
            "reporter": "geenensp"
        }
    ],
    "3826564": [
        {
            "dateadded": "2026-04-20 08:30:26 UTC",
            "url": "http://110.39.225.163:52907/i",
            "url_status": "offline",
            "last_online": "2026-04-20 08:30:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826564/",
            "reporter": "geenensp"
        }
    ],
    "3826563": [
        {
            "dateadded": "2026-04-20 08:27:09 UTC",
            "url": "https://red-mark4.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826563/",
            "reporter": "anonymous"
        }
    ],
    "3826562": [
        {
            "dateadded": "2026-04-20 08:22:11 UTC",
            "url": "https://thin-pen3.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826562/",
            "reporter": "anonymous"
        }
    ],
    "3826561": [
        {
            "dateadded": "2026-04-20 08:22:06 UTC",
            "url": "http://37.52.190.75:37850/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826561/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826560": [
        {
            "dateadded": "2026-04-20 08:20:13 UTC",
            "url": "http://95.56.232.109:46503/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826560/",
            "reporter": "geenensp"
        }
    ],
    "3826559": [
        {
            "dateadded": "2026-04-20 08:19:08 UTC",
            "url": "http://61.53.193.170:38506/i",
            "url_status": "offline",
            "last_online": "2026-04-20 12:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826559/",
            "reporter": "geenensp"
        }
    ],
    "3826558": [
        {
            "dateadded": "2026-04-20 08:17:09 UTC",
            "url": "https://last-page2.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826558/",
            "reporter": "anonymous"
        }
    ],
    "3826557": [
        {
            "dateadded": "2026-04-20 08:16:14 UTC",
            "url": "http://193.187.101.227:43875/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:58:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826557/",
            "reporter": "geenensp"
        }
    ],
    "3826556": [
        {
            "dateadded": "2026-04-20 08:15:12 UTC",
            "url": "https://open-book1.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826556/",
            "reporter": "anonymous"
        }
    ],
    "3826555": [
        {
            "dateadded": "2026-04-20 08:14:08 UTC",
            "url": "http://27.215.210.81:52053/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826555/",
            "reporter": "geenensp"
        }
    ],
    "3826554": [
        {
            "dateadded": "2026-04-20 08:13:18 UTC",
            "url": "http://42.224.147.201:50227/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826554/",
            "reporter": "geenensp"
        }
    ],
    "3826553": [
        {
            "dateadded": "2026-04-20 08:12:12 UTC",
            "url": "http://42.228.222.186:41123/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:52:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826553/",
            "reporter": "geenensp"
        }
    ],
    "3826552": [
        {
            "dateadded": "2026-04-20 08:05:09 UTC",
            "url": "https://old-town6.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826552/",
            "reporter": "anonymous"
        }
    ],
    "3826551": [
        {
            "dateadded": "2026-04-20 08:00:11 UTC",
            "url": "https://new-trip5.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 08:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826551/",
            "reporter": "anonymous"
        }
    ],
    "3826550": [
        {
            "dateadded": "2026-04-20 07:57:12 UTC",
            "url": "http://125.41.214.239:33998/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826550/",
            "reporter": "geenensp"
        }
    ],
    "3826549": [
        {
            "dateadded": "2026-04-20 07:57:07 UTC",
            "url": "http://42.229.217.114:41284/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826549/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826548": [
        {
            "dateadded": "2026-04-20 07:54:09 UTC",
            "url": "https://long-road4.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826548/",
            "reporter": "anonymous"
        }
    ],
    "3826547": [
        {
            "dateadded": "2026-04-20 07:47:13 UTC",
            "url": "https://big-jump3.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826547/",
            "reporter": "anonymous"
        }
    ],
    "3826546": [
        {
            "dateadded": "2026-04-20 07:46:22 UTC",
            "url": "http://193.187.101.227:43875/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826546/",
            "reporter": "geenensp"
        }
    ],
    "3826545": [
        {
            "dateadded": "2026-04-20 07:45:10 UTC",
            "url": "http://42.224.147.201:50227/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:38:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826545/",
            "reporter": "geenensp"
        }
    ],
    "3826544": [
        {
            "dateadded": "2026-04-20 07:42:13 UTC",
            "url": "https://slow-walk2.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826544/",
            "reporter": "anonymous"
        }
    ],
    "3826543": [
        {
            "dateadded": "2026-04-20 07:40:10 UTC",
            "url": "http://125.41.214.239:33998/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826543/",
            "reporter": "geenensp"
        }
    ],
    "3826541": [
        {
            "dateadded": "2026-04-20 07:37:09 UTC",
            "url": "http://42.229.217.114:41284/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 19:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826541/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826542": [
        {
            "dateadded": "2026-04-20 07:37:09 UTC",
            "url": "https://fast-run1.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826542/",
            "reporter": "anonymous"
        }
    ],
    "3826540": [
        {
            "dateadded": "2026-04-20 07:31:13 UTC",
            "url": "https://high-step6.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826540/",
            "reporter": "anonymous"
        }
    ],
    "3826539": [
        {
            "dateadded": "2026-04-20 07:30:25 UTC",
            "url": "http://110.36.75.245:54175/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:33:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826539/",
            "reporter": "geenensp"
        }
    ],
    "3826538": [
        {
            "dateadded": "2026-04-20 07:29:22 UTC",
            "url": "http://110.39.246.84:45879/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826538/",
            "reporter": "geenensp"
        }
    ],
    "3826537": [
        {
            "dateadded": "2026-04-20 07:26:14 UTC",
            "url": "https://cold-wind5.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826537/",
            "reporter": "anonymous"
        }
    ],
    "3826536": [
        {
            "dateadded": "2026-04-20 07:22:27 UTC",
            "url": "http://42.224.96.30:43574/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:04:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826536/",
            "reporter": "geenensp"
        }
    ],
    "3826535": [
        {
            "dateadded": "2026-04-20 07:20:12 UTC",
            "url": "https://white-wall4.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826535/",
            "reporter": "anonymous"
        }
    ],
    "3826534": [
        {
            "dateadded": "2026-04-20 07:14:13 UTC",
            "url": "https://small-cup3.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826534/",
            "reporter": "anonymous"
        }
    ],
    "3826533": [
        {
            "dateadded": "2026-04-20 07:10:17 UTC",
            "url": "http://39.68.43.217:34887/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826533/",
            "reporter": "geenensp"
        }
    ],
    "3826532": [
        {
            "dateadded": "2026-04-20 07:09:13 UTC",
            "url": "https://green-lamp2.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826532/",
            "reporter": "anonymous"
        }
    ],
    "3826531": [
        {
            "dateadded": "2026-04-20 07:07:25 UTC",
            "url": "http://175.107.12.59:58200/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:07:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826531/",
            "reporter": "geenensp"
        }
    ],
    "3826530": [
        {
            "dateadded": "2026-04-20 07:04:16 UTC",
            "url": "http://110.36.29.195:56653/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:41:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826530/",
            "reporter": "geenensp"
        }
    ],
    "3826529": [
        {
            "dateadded": "2026-04-20 07:03:12 UTC",
            "url": "https://blue-table1.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826529/",
            "reporter": "anonymous"
        }
    ],
    "3826528": [
        {
            "dateadded": "2026-04-20 07:02:22 UTC",
            "url": "http://110.38.201.35:59591/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826528/",
            "reporter": "geenensp"
        }
    ],
    "3826527": [
        {
            "dateadded": "2026-04-20 07:02:07 UTC",
            "url": "http://110.37.111.178:46833/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:25:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826527/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826526": [
        {
            "dateadded": "2026-04-20 06:58:12 UTC",
            "url": "https://pure-color6.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826526/",
            "reporter": "anonymous"
        }
    ],
    "3826525": [
        {
            "dateadded": "2026-04-20 06:51:15 UTC",
            "url": "http://59.96.139.46:35804/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:51:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826525/",
            "reporter": "geenensp"
        }
    ],
    "3826524": [
        {
            "dateadded": "2026-04-20 06:51:08 UTC",
            "url": "https://soft-touch5.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826524/",
            "reporter": "anonymous"
        }
    ],
    "3826523": [
        {
            "dateadded": "2026-04-20 06:47:10 UTC",
            "url": "https://cool-tone4.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826523/",
            "reporter": "anonymous"
        }
    ],
    "3826522": [
        {
            "dateadded": "2026-04-20 06:46:23 UTC",
            "url": "http://182.127.111.153:57891/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826522/",
            "reporter": "geenensp"
        }
    ],
    "3826521": [
        {
            "dateadded": "2026-04-20 06:41:11 UTC",
            "url": "https://best-view3.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826521/",
            "reporter": "anonymous"
        }
    ],
    "3826520": [
        {
            "dateadded": "2026-04-20 06:37:24 UTC",
            "url": "http://110.36.29.195:56653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826520/",
            "reporter": "geenensp"
        }
    ],
    "3826519": [
        {
            "dateadded": "2026-04-20 06:36:10 UTC",
            "url": "https://new-mix2.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826519/",
            "reporter": "anonymous"
        }
    ],
    "3826516": [
        {
            "dateadded": "2026-04-20 06:34:11 UTC",
            "url": "http://89.190.156.19/krane_mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:55:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826516/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826517": [
        {
            "dateadded": "2026-04-20 06:34:11 UTC",
            "url": "http://89.190.156.19/krane_armv5",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826517/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826518": [
        {
            "dateadded": "2026-04-20 06:34:11 UTC",
            "url": "http://89.190.156.19/krane_armv6",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826518/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826514": [
        {
            "dateadded": "2026-04-20 06:34:08 UTC",
            "url": "http://89.190.156.19/bins.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826514/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826515": [
        {
            "dateadded": "2026-04-20 06:34:08 UTC",
            "url": "http://89.190.156.19/krane_armv7",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826515/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826513": [
        {
            "dateadded": "2026-04-20 06:33:31 UTC",
            "url": "http://182.121.225.165:39470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 08:42:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826513/",
            "reporter": "geenensp"
        }
    ],
    "3826512": [
        {
            "dateadded": "2026-04-20 06:29:09 UTC",
            "url": "https://color-set1.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826512/",
            "reporter": "anonymous"
        }
    ],
    "3826511": [
        {
            "dateadded": "2026-04-20 06:23:13 UTC",
            "url": "https://solid-base64.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826511/",
            "reporter": "anonymous"
        }
    ],
    "3826510": [
        {
            "dateadded": "2026-04-20 06:22:25 UTC",
            "url": "http://182.126.117.234:42069/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826510/",
            "reporter": "geenensp"
        }
    ],
    "3826509": [
        {
            "dateadded": "2026-04-20 06:22:16 UTC",
            "url": "http://59.88.7.241:36398/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826509/",
            "reporter": "geenensp"
        }
    ],
    "3826508": [
        {
            "dateadded": "2026-04-20 06:22:08 UTC",
            "url": "http://110.36.76.24:60144/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:22:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826508/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826507": [
        {
            "dateadded": "2026-04-20 06:19:14 UTC",
            "url": "https://high-roof5.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826507/",
            "reporter": "anonymous"
        }
    ],
    "3826506": [
        {
            "dateadded": "2026-04-20 06:15:32 UTC",
            "url": "http://42.235.91.0:46595/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826506/",
            "reporter": "geenensp"
        }
    ],
    "3826505": [
        {
            "dateadded": "2026-04-20 06:14:25 UTC",
            "url": "http://182.127.127.117:40518/i",
            "url_status": "offline",
            "last_online": "2026-04-22 00:01:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826505/",
            "reporter": "geenensp"
        }
    ],
    "3826504": [
        {
            "dateadded": "2026-04-20 06:13:22 UTC",
            "url": "http://42.235.91.0:46595/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:40:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826504/",
            "reporter": "geenensp"
        }
    ],
    "3826503": [
        {
            "dateadded": "2026-04-20 06:13:10 UTC",
            "url": "https://open-door4.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826503/",
            "reporter": "anonymous"
        }
    ],
    "3826501": [
        {
            "dateadded": "2026-04-20 06:12:07 UTC",
            "url": "http://42.230.17.43:37422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826501/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826502": [
        {
            "dateadded": "2026-04-20 06:12:07 UTC",
            "url": "http://110.37.111.178:46833/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:43:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826502/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826500": [
        {
            "dateadded": "2026-04-20 06:08:24 UTC",
            "url": "http://180.243.65.33:38843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:50:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826500/",
            "reporter": "geenensp"
        }
    ],
    "3826499": [
        {
            "dateadded": "2026-04-20 06:08:15 UTC",
            "url": "https://bright-hall3.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:08:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826499/",
            "reporter": "anonymous"
        }
    ],
    "3826498": [
        {
            "dateadded": "2026-04-20 06:07:15 UTC",
            "url": "http://182.126.117.234:42069/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:20:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826498/",
            "reporter": "geenensp"
        }
    ],
    "3826497": [
        {
            "dateadded": "2026-04-20 06:01:14 UTC",
            "url": "https://clean-room2.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826497/",
            "reporter": "anonymous"
        }
    ],
    "3826496": [
        {
            "dateadded": "2026-04-20 05:59:38 UTC",
            "url": "http://175.107.12.59:58200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:58:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826496/",
            "reporter": "geenensp"
        }
    ],
    "3826495": [
        {
            "dateadded": "2026-04-20 05:57:07 UTC",
            "url": "http://110.36.76.24:60144/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:57:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826495/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826494": [
        {
            "dateadded": "2026-04-20 05:56:09 UTC",
            "url": "https://white-wall1.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826494/",
            "reporter": "anonymous"
        }
    ],
    "3826493": [
        {
            "dateadded": "2026-04-20 05:55:25 UTC",
            "url": "http://122.193.144.153:50873/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826493/",
            "reporter": "geenensp"
        }
    ],
    "3826492": [
        {
            "dateadded": "2026-04-20 05:53:27 UTC",
            "url": "http://116.53.58.200:40555/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826492/",
            "reporter": "geenensp"
        }
    ],
    "3826491": [
        {
            "dateadded": "2026-04-20 05:50:31 UTC",
            "url": "http://122.193.144.153:50873/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826491/",
            "reporter": "geenensp"
        }
    ],
    "3826490": [
        {
            "dateadded": "2026-04-20 05:50:23 UTC",
            "url": "http://75.118.179.93:41773/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:42:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826490/",
            "reporter": "geenensp"
        }
    ],
    "3826489": [
        {
            "dateadded": "2026-04-20 05:50:14 UTC",
            "url": "https://good-end6.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826489/",
            "reporter": "anonymous"
        }
    ],
    "3826488": [
        {
            "dateadded": "2026-04-20 05:49:19 UTC",
            "url": "http://160.30.142.2:38272/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:49:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826488/",
            "reporter": "geenensp"
        }
    ],
    "3826487": [
        {
            "dateadded": "2026-04-20 05:48:20 UTC",
            "url": "http://115.58.175.122:45571/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:01:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826487/",
            "reporter": "geenensp"
        }
    ],
    "3826486": [
        {
            "dateadded": "2026-04-20 05:47:15 UTC",
            "url": "https://fast-check5.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826486/",
            "reporter": "anonymous"
        }
    ],
    "3826485": [
        {
            "dateadded": "2026-04-20 05:46:24 UTC",
            "url": "http://115.58.175.122:45571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 20:46:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826485/",
            "reporter": "geenensp"
        }
    ],
    "3826484": [
        {
            "dateadded": "2026-04-20 05:43:10 UTC",
            "url": "https://top-result4.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826484/",
            "reporter": "anonymous"
        }
    ],
    "3826483": [
        {
            "dateadded": "2026-04-20 05:33:09 UTC",
            "url": "https://main-goal3.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826483/",
            "reporter": "anonymous"
        }
    ],
    "3826482": [
        {
            "dateadded": "2026-04-20 05:30:16 UTC",
            "url": "http://110.39.225.163:52907/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:28:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826482/",
            "reporter": "geenensp"
        }
    ],
    "3826481": [
        {
            "dateadded": "2026-04-20 05:29:22 UTC",
            "url": "http://115.61.19.69:35673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:29:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826481/",
            "reporter": "geenensp"
        }
    ],
    "3826480": [
        {
            "dateadded": "2026-04-20 05:27:14 UTC",
            "url": "https://clear-work2.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826480/",
            "reporter": "anonymous"
        }
    ],
    "3826479": [
        {
            "dateadded": "2026-04-20 05:27:08 UTC",
            "url": "http://110.37.90.172:48823/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:27:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826479/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826478": [
        {
            "dateadded": "2026-04-20 05:24:31 UTC",
            "url": "http://110.37.14.231:51409/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:24:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826478/",
            "reporter": "geenensp"
        }
    ],
    "3826477": [
        {
            "dateadded": "2026-04-20 05:23:09 UTC",
            "url": "https://prime-task1.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826477/",
            "reporter": "anonymous"
        }
    ],
    "3826476": [
        {
            "dateadded": "2026-04-20 05:16:13 UTC",
            "url": "https://best-style6.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826476/",
            "reporter": "anonymous"
        }
    ],
    "3826475": [
        {
            "dateadded": "2026-04-20 05:13:08 UTC",
            "url": "http://110.37.90.172:48823/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:14:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826475/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826474": [
        {
            "dateadded": "2026-04-20 05:12:18 UTC",
            "url": "http://115.63.43.146:56925/i",
            "url_status": "offline",
            "last_online": "2026-04-20 12:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826474/",
            "reporter": "geenensp"
        }
    ],
    "3826473": [
        {
            "dateadded": "2026-04-20 05:11:07 UTC",
            "url": "https://thin-layer5.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826473/",
            "reporter": "anonymous"
        }
    ],
    "3826472": [
        {
            "dateadded": "2026-04-20 05:05:13 UTC",
            "url": "https://red-fabric4.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 05:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826472/",
            "reporter": "anonymous"
        }
    ],
    "3826471": [
        {
            "dateadded": "2026-04-20 04:59:12 UTC",
            "url": "https://blue-silk3.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826471/",
            "reporter": "anonymous"
        }
    ],
    "3826470": [
        {
            "dateadded": "2026-04-20 04:57:21 UTC",
            "url": "http://119.185.243.168:48355/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826470/",
            "reporter": "geenensp"
        }
    ],
    "3826469": [
        {
            "dateadded": "2026-04-20 04:54:13 UTC",
            "url": "https://soft-wool2.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826469/",
            "reporter": "anonymous"
        }
    ],
    "3826468": [
        {
            "dateadded": "2026-04-20 04:49:13 UTC",
            "url": "https://warm-coat1.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826468/",
            "reporter": "anonymous"
        }
    ],
    "3826467": [
        {
            "dateadded": "2026-04-20 04:43:14 UTC",
            "url": "https://deep-void6.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826467/",
            "reporter": "anonymous"
        }
    ],
    "3826466": [
        {
            "dateadded": "2026-04-20 04:39:25 UTC",
            "url": "http://115.63.43.146:56925/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:08:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826466/",
            "reporter": "geenensp"
        }
    ],
    "3826465": [
        {
            "dateadded": "2026-04-20 04:37:14 UTC",
            "url": "https://fast-rocket5.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826465/",
            "reporter": "anonymous"
        }
    ],
    "3826464": [
        {
            "dateadded": "2026-04-20 04:31:10 UTC",
            "url": "https://high-speed4.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826464/",
            "reporter": "anonymous"
        }
    ],
    "3826463": [
        {
            "dateadded": "2026-04-20 04:26:15 UTC",
            "url": "https://moon-orbit3.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826463/",
            "reporter": "anonymous"
        }
    ],
    "3826462": [
        {
            "dateadded": "2026-04-20 04:26:07 UTC",
            "url": "http://221.14.196.111:42546/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:46:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826462/",
            "reporter": "geenensp"
        }
    ],
    "3826461": [
        {
            "dateadded": "2026-04-20 04:21:12 UTC",
            "url": "https://star-field2.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826461/",
            "reporter": "anonymous"
        }
    ],
    "3826460": [
        {
            "dateadded": "2026-04-20 04:15:07 UTC",
            "url": "https://space-travel1.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826460/",
            "reporter": "anonymous"
        }
    ],
    "3826459": [
        {
            "dateadded": "2026-04-20 04:09:08 UTC",
            "url": "https://best-life6.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826459/",
            "reporter": "anonymous"
        }
    ],
    "3826458": [
        {
            "dateadded": "2026-04-20 04:04:08 UTC",
            "url": "https://good-day5.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 04:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826458/",
            "reporter": "anonymous"
        }
    ],
    "3826457": [
        {
            "dateadded": "2026-04-20 03:58:09 UTC",
            "url": "https://small-step4.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826457/",
            "reporter": "anonymous"
        }
    ],
    "3826456": [
        {
            "dateadded": "2026-04-20 03:57:18 UTC",
            "url": "http://182.202.14.89:33403/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826456/",
            "reporter": "geenensp"
        }
    ],
    "3826455": [
        {
            "dateadded": "2026-04-20 03:55:24 UTC",
            "url": "http://175.175.52.62:36211/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826455/",
            "reporter": "geenensp"
        }
    ],
    "3826454": [
        {
            "dateadded": "2026-04-20 03:52:08 UTC",
            "url": "https://toy-box3.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826454/",
            "reporter": "anonymous"
        }
    ],
    "3826453": [
        {
            "dateadded": "2026-04-20 03:51:20 UTC",
            "url": "http://123.12.226.115:38418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:58:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826453/",
            "reporter": "geenensp"
        }
    ],
    "3826452": [
        {
            "dateadded": "2026-04-20 03:46:07 UTC",
            "url": "https://happy-play2.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826452/",
            "reporter": "anonymous"
        }
    ],
    "3826451": [
        {
            "dateadded": "2026-04-20 03:45:22 UTC",
            "url": "http://125.45.11.193:43192/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826451/",
            "reporter": "geenensp"
        }
    ],
    "3826450": [
        {
            "dateadded": "2026-04-20 03:41:09 UTC",
            "url": "https://child-care1.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826450/",
            "reporter": "anonymous"
        }
    ],
    "3826449": [
        {
            "dateadded": "2026-04-20 03:39:20 UTC",
            "url": "http://113.239.74.216:37394/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826449/",
            "reporter": "geenensp"
        }
    ],
    "3826448": [
        {
            "dateadded": "2026-04-20 03:37:07 UTC",
            "url": "http://95.65.234.57:55607/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:12:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826448/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826447": [
        {
            "dateadded": "2026-04-20 03:36:24 UTC",
            "url": "http://113.239.74.216:37394/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:58:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826447/",
            "reporter": "geenensp"
        }
    ],
    "3826446": [
        {
            "dateadded": "2026-04-20 03:36:10 UTC",
            "url": "https://final-step6.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826446/",
            "reporter": "anonymous"
        }
    ],
    "3826445": [
        {
            "dateadded": "2026-04-20 03:31:09 UTC",
            "url": "http://182.202.14.89:33403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:28:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826445/",
            "reporter": "geenensp"
        }
    ],
    "3826444": [
        {
            "dateadded": "2026-04-20 03:30:09 UTC",
            "url": "https://user-test5.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826444/",
            "reporter": "anonymous"
        }
    ],
    "3826443": [
        {
            "dateadded": "2026-04-20 03:28:19 UTC",
            "url": "http://123.8.88.183:36698/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:02:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826443/",
            "reporter": "geenensp"
        }
    ],
    "3826442": [
        {
            "dateadded": "2026-04-20 03:25:09 UTC",
            "url": "https://error-log4.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826442/",
            "reporter": "anonymous"
        }
    ],
    "3826441": [
        {
            "dateadded": "2026-04-20 03:19:20 UTC",
            "url": "http://221.14.196.111:42546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826441/",
            "reporter": "geenensp"
        }
    ],
    "3826440": [
        {
            "dateadded": "2026-04-20 03:19:09 UTC",
            "url": "https://data-point3.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826440/",
            "reporter": "anonymous"
        }
    ],
    "3826439": [
        {
            "dateadded": "2026-04-20 03:18:18 UTC",
            "url": "http://115.51.42.49:50982/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:59:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826439/",
            "reporter": "geenensp"
        }
    ],
    "3826438": [
        {
            "dateadded": "2026-04-20 03:17:24 UTC",
            "url": "http://182.116.12.200:60226/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 03:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826438/",
            "reporter": "geenensp"
        }
    ],
    "3826437": [
        {
            "dateadded": "2026-04-20 03:13:08 UTC",
            "url": "https://full-report2.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826437/",
            "reporter": "anonymous"
        }
    ],
    "3826436": [
        {
            "dateadded": "2026-04-20 03:08:09 UTC",
            "url": "https://quick-scan1.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826436/",
            "reporter": "anonymous"
        }
    ],
    "3826435": [
        {
            "dateadded": "2026-04-20 03:06:17 UTC",
            "url": "http://200.6.91.43:57730/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826435/",
            "reporter": "geenensp"
        }
    ],
    "3826430": [
        {
            "dateadded": "2026-04-20 03:03:18 UTC",
            "url": "http://42.177.186.233:51331/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:48:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826430/",
            "reporter": "geenensp"
        }
    ],
    "3826431": [
        {
            "dateadded": "2026-04-20 03:03:18 UTC",
            "url": "http://115.51.42.49:50982/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826431/",
            "reporter": "geenensp"
        }
    ],
    "3826432": [
        {
            "dateadded": "2026-04-20 03:03:18 UTC",
            "url": "http://42.177.186.233:51331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:06:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826432/",
            "reporter": "geenensp"
        }
    ],
    "3826433": [
        {
            "dateadded": "2026-04-20 03:03:18 UTC",
            "url": "http://105.186.223.83:51019/i",
            "url_status": "offline",
            "last_online": "2026-04-20 03:03:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826433/",
            "reporter": "geenensp"
        }
    ],
    "3826434": [
        {
            "dateadded": "2026-04-20 03:03:18 UTC",
            "url": "http://103.209.65.74:50347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 06:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826434/",
            "reporter": "geenensp"
        }
    ],
    "3826429": [
        {
            "dateadded": "2026-04-20 03:03:11 UTC",
            "url": "https://bright-glow5.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826429/",
            "reporter": "anonymous"
        }
    ],
    "3826425": [
        {
            "dateadded": "2026-04-20 03:03:10 UTC",
            "url": "http://182.122.217.73:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:54:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826425/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826426": [
        {
            "dateadded": "2026-04-20 03:03:10 UTC",
            "url": "http://112.81.139.157:56663/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826426/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826427": [
        {
            "dateadded": "2026-04-20 03:03:10 UTC",
            "url": "https://clear-tint6.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826427/",
            "reporter": "anonymous"
        }
    ],
    "3826428": [
        {
            "dateadded": "2026-04-20 03:03:10 UTC",
            "url": "https://deep-red4.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 03:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826428/",
            "reporter": "anonymous"
        }
    ],
    "3826424": [
        {
            "dateadded": "2026-04-20 03:03:09 UTC",
            "url": "https://github.com/zhaixing238/gitplay/raw/refs/heads/main/src-tauri/src/Software_2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826424/",
            "reporter": "tcains1"
        }
    ],
    "3826421": [
        {
            "dateadded": "2026-04-20 02:48:16 UTC",
            "url": "https://raw.githubusercontent.com/dilancito2107/Uninstall-Tool-Repack/refs/heads/main/unsurplice/Uninstall_Tool_Repack_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 07:26:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826421/",
            "reporter": "tcains1"
        }
    ],
    "3826422": [
        {
            "dateadded": "2026-04-20 02:48:16 UTC",
            "url": "https://github.com/zhaixing238/zhaixing238.github.io/raw/refs/heads/main/mica/github_io_zhaixing_2.8-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826422/",
            "reporter": "tcains1"
        }
    ],
    "3826423": [
        {
            "dateadded": "2026-04-20 02:48:16 UTC",
            "url": "https://github.com/jay97637/LLM-Observability-FOSS/raw/refs/heads/main/docs/LL_Observability_FOSS_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826423/",
            "reporter": "tcains1"
        }
    ],
    "3826405": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/aniff23/aniff23.github.io/refs/heads/main/Hokan/aniff-io-github-v3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 06:00:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826405/",
            "reporter": "tcains1"
        }
    ],
    "3826406": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/zhaixing238/gitplay/refs/heads/main/src-tauri/src/Software_2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826406/",
            "reporter": "tcains1"
        }
    ],
    "3826407": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/OFenomenal/ofenomenal.github.io/refs/heads/main/yokefellow/io_github_ofenomenal_v3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:46:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826407/",
            "reporter": "tcains1"
        }
    ],
    "3826408": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/Samsan2003/cg/raw/refs/heads/main/closed/Software_v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826408/",
            "reporter": "tcains1"
        }
    ],
    "3826409": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/dilancito2107/dilancito2107.github.io/refs/heads/main/Codiaceae/dilancito-github-io-2.8-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:28:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826409/",
            "reporter": "tcains1"
        }
    ],
    "3826410": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/Samsan2003/samsan2003.github.io/raw/refs/heads/main/goodish/github-io-samsan-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826410/",
            "reporter": "tcains1"
        }
    ],
    "3826411": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/jay97637/jay97637.github.io/raw/refs/heads/main/tectospondylic/io-github-jay-v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826411/",
            "reporter": "tcains1"
        }
    ],
    "3826412": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/PioneerPine/pioneerpine.github.io/refs/heads/main/Galbulae/github-pioneerpine-io-1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:38:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826412/",
            "reporter": "tcains1"
        }
    ],
    "3826413": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/dilancito2107/Uninstall-Tool-Repack/raw/refs/heads/main/unsurplice/Uninstall_Tool_Repack_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826413/",
            "reporter": "tcains1"
        }
    ],
    "3826414": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/jay97637/jay97637.github.io/refs/heads/main/tectospondylic/io-github-jay-v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826414/",
            "reporter": "tcains1"
        }
    ],
    "3826415": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/RaiyanRamin1/raiyanramin1.github.io/raw/refs/heads/main/hurtable/github_raiyanramin_io_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826415/",
            "reporter": "tcains1"
        }
    ],
    "3826416": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/PioneerPine/pioneerpine.github.io/raw/refs/heads/main/Galbulae/github-pioneerpine-io-1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826416/",
            "reporter": "tcains1"
        }
    ],
    "3826417": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/RaiyanRamin1/raiyanramin1.github.io/refs/heads/main/hurtable/github_raiyanramin_io_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 06:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826417/",
            "reporter": "tcains1"
        }
    ],
    "3826418": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://raw.githubusercontent.com/Samsan2003/cg/refs/heads/main/closed/Software_v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826418/",
            "reporter": "tcains1"
        }
    ],
    "3826419": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/aniff23/aniff23.github.io/raw/refs/heads/main/Hokan/aniff-io-github-v3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 08:09:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826419/",
            "reporter": "tcains1"
        }
    ],
    "3826420": [
        {
            "dateadded": "2026-04-20 02:48:15 UTC",
            "url": "https://github.com/OFenomenal/ofenomenal.github.io/raw/refs/heads/main/yokefellow/io_github_ofenomenal_v3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:17:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826420/",
            "reporter": "tcains1"
        }
    ],
    "3826399": [
        {
            "dateadded": "2026-04-20 02:48:14 UTC",
            "url": "https://raw.githubusercontent.com/Samsan2003/samsan2003.github.io/refs/heads/main/goodish/github-io-samsan-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826399/",
            "reporter": "tcains1"
        }
    ],
    "3826400": [
        {
            "dateadded": "2026-04-20 02:48:14 UTC",
            "url": "https://raw.githubusercontent.com/RaiyanRamin1/ipsw-skill/refs/heads/main/extension/references/ipsw_skill_3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 07:39:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826400/",
            "reporter": "tcains1"
        }
    ],
    "3826401": [
        {
            "dateadded": "2026-04-20 02:48:14 UTC",
            "url": "https://raw.githubusercontent.com/Darsq/QILING-Disk-Master-Repack/refs/heads/main/confelicity/Disk_QILIN_Master_Repack_v3.1-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826401/",
            "reporter": "tcains1"
        }
    ],
    "3826402": [
        {
            "dateadded": "2026-04-20 02:48:14 UTC",
            "url": "https://raw.githubusercontent.com/jay97637/LLM-Observability-FOSS/refs/heads/main/docs/LL_Observability_FOSS_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826402/",
            "reporter": "tcains1"
        }
    ],
    "3826403": [
        {
            "dateadded": "2026-04-20 02:48:14 UTC",
            "url": "https://github.com/OFenomenal/git-wt/raw/refs/heads/main/e2e/git-wt-ulexite.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826403/",
            "reporter": "tcains1"
        }
    ],
    "3826404": [
        {
            "dateadded": "2026-04-20 02:48:14 UTC",
            "url": "https://github.com/Darsq/QILING-Disk-Master-Repack/raw/refs/heads/main/confelicity/Disk_QILIN_Master_Repack_v3.1-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826404/",
            "reporter": "tcains1"
        }
    ],
    "3826398": [
        {
            "dateadded": "2026-04-20 02:48:13 UTC",
            "url": "https://raw.githubusercontent.com/aniff23/flashesp/refs/heads/master/uloncus/Software_v3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:52:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826398/",
            "reporter": "tcains1"
        }
    ],
    "3826392": [
        {
            "dateadded": "2026-04-20 02:48:09 UTC",
            "url": "https://raw.githubusercontent.com/OFenomenal/git-wt/refs/heads/main/e2e/git-wt-ulexite.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:42:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826392/",
            "reporter": "tcains1"
        }
    ],
    "3826393": [
        {
            "dateadded": "2026-04-20 02:48:09 UTC",
            "url": "https://raw.githubusercontent.com/PioneerPine/IdentityRegimes/refs/heads/main/docs/Regimes-Identity-v2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 06:05:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826393/",
            "reporter": "tcains1"
        }
    ],
    "3826394": [
        {
            "dateadded": "2026-04-20 02:48:09 UTC",
            "url": "https://github.com/PioneerPine/IdentityRegimes/raw/refs/heads/main/docs/Regimes-Identity-v2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:57:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826394/",
            "reporter": "tcains1"
        }
    ],
    "3826395": [
        {
            "dateadded": "2026-04-20 02:48:09 UTC",
            "url": "https://github.com/dilancito2107/dilancito2107.github.io/raw/refs/heads/main/Codiaceae/dilancito-github-io-2.8-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:44:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826395/",
            "reporter": "tcains1"
        }
    ],
    "3826396": [
        {
            "dateadded": "2026-04-20 02:48:09 UTC",
            "url": "https://github.com/aniff23/flashesp/raw/refs/heads/master/uloncus/Software_v3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826396/",
            "reporter": "tcains1"
        }
    ],
    "3826397": [
        {
            "dateadded": "2026-04-20 02:48:09 UTC",
            "url": "https://github.com/RaiyanRamin1/ipsw-skill/raw/refs/heads/main/extension/references/ipsw_skill_3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826397/",
            "reporter": "tcains1"
        }
    ],
    "3826391": [
        {
            "dateadded": "2026-04-20 02:48:08 UTC",
            "url": "https://raw.githubusercontent.com/zhaixing238/zhaixing238.github.io/refs/heads/main/mica/github_io_zhaixing_2.8-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826391/",
            "reporter": "tcains1"
        }
    ],
    "3826390": [
        {
            "dateadded": "2026-04-20 02:46:21 UTC",
            "url": "http://113.240.219.191:54418/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:57:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826390/",
            "reporter": "geenensp"
        }
    ],
    "3826389": [
        {
            "dateadded": "2026-04-20 02:46:07 UTC",
            "url": "https://pale-blue3.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826389/",
            "reporter": "anonymous"
        }
    ],
    "3826388": [
        {
            "dateadded": "2026-04-20 02:44:10 UTC",
            "url": "http://113.240.219.191:54418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826388/",
            "reporter": "geenensp"
        }
    ],
    "3826387": [
        {
            "dateadded": "2026-04-20 02:39:15 UTC",
            "url": "http://219.154.33.74:33261/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:25:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826387/",
            "reporter": "geenensp"
        }
    ],
    "3826386": [
        {
            "dateadded": "2026-04-20 02:39:07 UTC",
            "url": "https://soft-grey2.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826386/",
            "reporter": "anonymous"
        }
    ],
    "3826384": [
        {
            "dateadded": "2026-04-20 02:37:08 UTC",
            "url": "http://42.230.17.43:37422/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826384/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826385": [
        {
            "dateadded": "2026-04-20 02:37:08 UTC",
            "url": "http://112.81.139.157:56663/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 00:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826385/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826383": [
        {
            "dateadded": "2026-04-20 02:37:07 UTC",
            "url": "http://37.28.176.153:39675/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:14:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826383/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826382": [
        {
            "dateadded": "2026-04-20 02:34:08 UTC",
            "url": "https://dark-shade1.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826382/",
            "reporter": "anonymous"
        }
    ],
    "3826381": [
        {
            "dateadded": "2026-04-20 02:30:13 UTC",
            "url": "http://221.15.241.73:58685/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826381/",
            "reporter": "geenensp"
        }
    ],
    "3826380": [
        {
            "dateadded": "2026-04-20 02:30:12 UTC",
            "url": "http://221.14.14.246:49547/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826380/",
            "reporter": "geenensp"
        }
    ],
    "3826379": [
        {
            "dateadded": "2026-04-20 02:29:19 UTC",
            "url": "http://221.14.14.246:49547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:23:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826379/",
            "reporter": "geenensp"
        }
    ],
    "3826378": [
        {
            "dateadded": "2026-04-20 02:28:12 UTC",
            "url": "https://fresh-bloom6.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826378/",
            "reporter": "anonymous"
        }
    ],
    "3826377": [
        {
            "dateadded": "2026-04-20 02:26:21 UTC",
            "url": "http://42.242.42.207:49109/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826377/",
            "reporter": "geenensp"
        }
    ],
    "3826376": [
        {
            "dateadded": "2026-04-20 02:25:21 UTC",
            "url": "http://42.226.210.175:51379/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 06:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826376/",
            "reporter": "geenensp"
        }
    ],
    "3826375": [
        {
            "dateadded": "2026-04-20 02:22:10 UTC",
            "url": "https://pure-seed5.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826375/",
            "reporter": "anonymous"
        }
    ],
    "3826374": [
        {
            "dateadded": "2026-04-20 02:20:21 UTC",
            "url": "http://182.126.126.55:35736/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:26:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826374/",
            "reporter": "geenensp"
        }
    ],
    "3826373": [
        {
            "dateadded": "2026-04-20 02:18:21 UTC",
            "url": "http://36.80.133.55:60262/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826373/",
            "reporter": "geenensp"
        }
    ],
    "3826372": [
        {
            "dateadded": "2026-04-20 02:17:20 UTC",
            "url": "http://219.154.33.74:33261/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:22:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826372/",
            "reporter": "geenensp"
        }
    ],
    "3826371": [
        {
            "dateadded": "2026-04-20 02:17:11 UTC",
            "url": "https://wild-root2.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826371/",
            "reporter": "anonymous"
        }
    ],
    "3826370": [
        {
            "dateadded": "2026-04-20 02:17:10 UTC",
            "url": "https://high-stem4.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826370/",
            "reporter": "anonymous"
        }
    ],
    "3826367": [
        {
            "dateadded": "2026-04-20 02:17:09 UTC",
            "url": "http://37.28.176.153:39675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:58:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826367/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826368": [
        {
            "dateadded": "2026-04-20 02:17:09 UTC",
            "url": "http://45.163.68.69:40970/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826368/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826369": [
        {
            "dateadded": "2026-04-20 02:17:09 UTC",
            "url": "https://deep-soil3.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826369/",
            "reporter": "anonymous"
        }
    ],
    "3826365": [
        {
            "dateadded": "2026-04-20 02:17:08 UTC",
            "url": "http://27.207.124.106:49343/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826365/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826366": [
        {
            "dateadded": "2026-04-20 02:17:08 UTC",
            "url": "https://raw.githubusercontent.com/DeveloShaan/OpenAd-Specification_AdEngine_Text/refs/heads/main/institutor/OpenAd-Specification_AdEngine_Text.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826366/",
            "reporter": "tcains1"
        }
    ],
    "3826364": [
        {
            "dateadded": "2026-04-20 02:01:34 UTC",
            "url": "http://42.242.42.207:49109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826364/",
            "reporter": "geenensp"
        }
    ],
    "3826363": [
        {
            "dateadded": "2026-04-20 02:01:24 UTC",
            "url": "http://36.80.133.55:60262/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826363/",
            "reporter": "geenensp"
        }
    ],
    "3826361": [
        {
            "dateadded": "2026-04-20 02:01:21 UTC",
            "url": "http://105.187.40.82:53685/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826361/",
            "reporter": "geenensp"
        }
    ],
    "3826362": [
        {
            "dateadded": "2026-04-20 02:01:21 UTC",
            "url": "http://105.186.223.83:51019/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 02:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826362/",
            "reporter": "geenensp"
        }
    ],
    "3826359": [
        {
            "dateadded": "2026-04-20 02:01:20 UTC",
            "url": "http://113.228.151.196:59139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:04:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826359/",
            "reporter": "geenensp"
        }
    ],
    "3826360": [
        {
            "dateadded": "2026-04-20 02:01:20 UTC",
            "url": "http://42.55.9.3:49600/i",
            "url_status": "offline",
            "last_online": "2026-04-26 18:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826360/",
            "reporter": "geenensp"
        }
    ],
    "3826357": [
        {
            "dateadded": "2026-04-20 02:01:16 UTC",
            "url": "https://github.com/62DOC/laravel-docker-pgsql-tailwind-boilerplate/raw/refs/heads/main/src/app/View/tailwind_laravel_boilerplate_pgsql_docker_v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826357/",
            "reporter": "tcains1"
        }
    ],
    "3826358": [
        {
            "dateadded": "2026-04-20 02:01:16 UTC",
            "url": "https://signal-box5.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826358/",
            "reporter": "anonymous"
        }
    ],
    "3826347": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://github.com/Emacute/maize_disease_detection_system/raw/refs/heads/main/syllabicness/system_disease_detection_maize_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:29:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826347/",
            "reporter": "tcains1"
        }
    ],
    "3826348": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://flow-control6.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826348/",
            "reporter": "anonymous"
        }
    ],
    "3826349": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://github.com/gaja25/Demo-OS/raw/refs/heads/main/modules/Demo-OS-sparking.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826349/",
            "reporter": "tcains1"
        }
    ],
    "3826350": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://raw.githubusercontent.com/daffaekaptra/BatchAdministrator/refs/heads/main/Windows%2010%20%26%2011%20Scripts/Windows%20Privacy/Batch-Administrator-v1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:52:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826350/",
            "reporter": "tcains1"
        }
    ],
    "3826351": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://github.com/Sebs69/Asus-ROG-Aml-Deep-Dive/raw/refs/heads/main/besmother/Deep-Aml-Asus-Dive-RO-v2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826351/",
            "reporter": "tcains1"
        }
    ],
    "3826352": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://raw.githubusercontent.com/gaja25/Demo-OS/refs/heads/main/modules/Demo-OS-sparking.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826352/",
            "reporter": "tcains1"
        }
    ],
    "3826353": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://raw.githubusercontent.com/Sebs69/Asus-ROG-Aml-Deep-Dive/refs/heads/main/besmother/Deep-Aml-Asus-Dive-RO-v2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:58:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826353/",
            "reporter": "tcains1"
        }
    ],
    "3826354": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://github.com/daffaekaptra/BatchAdministrator/raw/refs/heads/main/Windows%2010%20&%2011%20Scripts/Windows%20Privacy/Batch-Administrator-v1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826354/",
            "reporter": "tcains1"
        }
    ],
    "3826355": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://github.com/beolog404/zkm-flow/raw/refs/heads/main/sources/zkm-flow-2.6-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:07:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826355/",
            "reporter": "tcains1"
        }
    ],
    "3826356": [
        {
            "dateadded": "2026-04-20 02:01:15 UTC",
            "url": "https://raw.githubusercontent.com/62DOC/laravel-docker-pgsql-tailwind-boilerplate/refs/heads/main/src/app/View/tailwind_laravel_boilerplate_pgsql_docker_v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826356/",
            "reporter": "tcains1"
        }
    ],
    "3826344": [
        {
            "dateadded": "2026-04-20 02:01:14 UTC",
            "url": "https://github.com/beolog404/VenusBloodHollow-FreeReleaseHub/raw/refs/heads/main/featherweight/Free_Venus_Hub_Blood_Hollow_Release_2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826344/",
            "reporter": "tcains1"
        }
    ],
    "3826345": [
        {
            "dateadded": "2026-04-20 02:01:14 UTC",
            "url": "https://github.com/Betawi10/Nyc311-Infrastructure-Hotspots-Google-Cloud-BigQuery-Hackathon-PoC/raw/refs/heads/master/.vs/todolistApi/v16/Nyc_Google_Query_Hackathon_Hotspots_C_Infrastructure_Po_Big_Cloud_3.1-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:00:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826345/",
            "reporter": "tcains1"
        }
    ],
    "3826346": [
        {
            "dateadded": "2026-04-20 02:01:14 UTC",
            "url": "https://github.com/DeveloShaan/OpenAd-Specification_AdEngine_Text/raw/refs/heads/main/institutor/OpenAd-Specification_AdEngine_Text.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:12:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826346/",
            "reporter": "tcains1"
        }
    ],
    "3826340": [
        {
            "dateadded": "2026-04-20 02:01:13 UTC",
            "url": "https://green-leaf1.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 02:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826340/",
            "reporter": "anonymous"
        }
    ],
    "3826341": [
        {
            "dateadded": "2026-04-20 02:01:13 UTC",
            "url": "https://github.com/Emacute/Coder-Kit/raw/refs/heads/main/kindlesome/Kit-Coder-1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:07:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826341/",
            "reporter": "tcains1"
        }
    ],
    "3826342": [
        {
            "dateadded": "2026-04-20 02:01:13 UTC",
            "url": "https://raw.githubusercontent.com/Emacute/Coder-Kit/refs/heads/main/kindlesome/Kit-Coder-1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826342/",
            "reporter": "tcains1"
        }
    ],
    "3826343": [
        {
            "dateadded": "2026-04-20 02:01:13 UTC",
            "url": "https://raw.githubusercontent.com/Emacute/maize_disease_detection_system/refs/heads/main/syllabicness/system_disease_detection_maize_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:19:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826343/",
            "reporter": "tcains1"
        }
    ],
    "3826336": [
        {
            "dateadded": "2026-04-20 02:01:12 UTC",
            "url": "http://27.207.124.106:49343/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826336/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826337": [
        {
            "dateadded": "2026-04-20 02:01:12 UTC",
            "url": "https://raw.githubusercontent.com/beolog404/VenusBloodHollow-FreeReleaseHub/refs/heads/main/featherweight/Free_Venus_Hub_Blood_Hollow_Release_2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 06:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826337/",
            "reporter": "tcains1"
        }
    ],
    "3826338": [
        {
            "dateadded": "2026-04-20 02:01:12 UTC",
            "url": "https://github.com/Betawi10/todoList/raw/refs/heads/master/src/components/todo_List_v3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826338/",
            "reporter": "tcains1"
        }
    ],
    "3826339": [
        {
            "dateadded": "2026-04-20 02:01:12 UTC",
            "url": "https://raw.githubusercontent.com/Betawi10/Nyc311-Infrastructure-Hotspots-Google-Cloud-BigQuery-Hackathon-PoC/refs/heads/master/.vs/todolistApi/v16/Nyc_Google_Query_Hackathon_Hotspots_C_Infrastructure_Po_Big_Cloud_3.1-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826339/",
            "reporter": "tcains1"
        }
    ],
    "3826333": [
        {
            "dateadded": "2026-04-20 02:01:11 UTC",
            "url": "https://raw.githubusercontent.com/Betawi10/todoList/refs/heads/master/src/components/todo_List_v3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 04:47:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826333/",
            "reporter": "tcains1"
        }
    ],
    "3826334": [
        {
            "dateadded": "2026-04-20 02:01:11 UTC",
            "url": "https://github.com/camilo-vs/patching-hacked-world/raw/refs/heads/Principal/Landrick_v3.2/__MACOSX/Landrick_v3.2/HTML/php/patching_world_hacked_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826334/",
            "reporter": "tcains1"
        }
    ],
    "3826335": [
        {
            "dateadded": "2026-04-20 02:01:11 UTC",
            "url": "https://raw.githubusercontent.com/beolog404/zkm-flow/refs/heads/main/sources/zkm-flow-2.6-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 05:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826335/",
            "reporter": "tcains1"
        }
    ],
    "3826332": [
        {
            "dateadded": "2026-04-20 02:01:10 UTC",
            "url": "http://110.39.229.188:56974/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826332/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826331": [
        {
            "dateadded": "2026-04-20 01:46:12 UTC",
            "url": "https://github.com/Oskar2133123/cursor-ide-setup/raw/refs/heads/main/docs/setup_ide_cursor_v1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:03:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826331/",
            "reporter": "tcains1"
        }
    ],
    "3826328": [
        {
            "dateadded": "2026-04-20 01:46:11 UTC",
            "url": "https://github.com/habibhassansehani/Arduino-Projects/raw/refs/heads/main/stevel/Projects_Arduino_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826328/",
            "reporter": "tcains1"
        }
    ],
    "3826329": [
        {
            "dateadded": "2026-04-20 01:46:11 UTC",
            "url": "https://raw.githubusercontent.com/habibhassansehani/Arduino-Projects/refs/heads/main/stevel/Projects_Arduino_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:54:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826329/",
            "reporter": "tcains1"
        }
    ],
    "3826330": [
        {
            "dateadded": "2026-04-20 01:46:11 UTC",
            "url": "https://github.com/habibhassansehani/openai-sdk-knowledge-org/raw/refs/heads/main/public/images/knowledge_sdk_org_openai_v3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:51:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826330/",
            "reporter": "tcains1"
        }
    ],
    "3826314": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://github.com/Shaki774/AI-Tools-List/raw/refs/heads/main/transillumination/Tools-List-A-v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:20:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826314/",
            "reporter": "tcains1"
        }
    ],
    "3826315": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/Oskar2133123/cursor-ide-setup/refs/heads/main/docs/setup_ide_cursor_v1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:10:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826315/",
            "reporter": "tcains1"
        }
    ],
    "3826316": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/Shaki774/AI-Tools-List/refs/heads/main/transillumination/Tools-List-A-v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:10:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826316/",
            "reporter": "tcains1"
        }
    ],
    "3826317": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/DeepuNikki/hestiacp/refs/heads/main/web/locale/sv/Software_v1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:51:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826317/",
            "reporter": "tcains1"
        }
    ],
    "3826318": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/Shahzaib14458/Wall-World-hacks-strike-kill-instant/refs/heads/main/somnambulary/instant-hacks-kill-World-Wall-strike-1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:52:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826318/",
            "reporter": "tcains1"
        }
    ],
    "3826319": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/DeepuNikki/Souls-Rebirth-hacks-gauge-no-awakening/refs/heads/main/farasula/gauge_Souls_awakening_Rebirth_hacks_no_v2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826319/",
            "reporter": "tcains1"
        }
    ],
    "3826320": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/camilo-vs/patching-hacked-world/refs/heads/Principal/Landrick_v3.2/__MACOSX/Landrick_v3.2/HTML/php/patching_world_hacked_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826320/",
            "reporter": "tcains1"
        }
    ],
    "3826321": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://github.com/Shahzaib14458/Wall-World-hacks-strike-kill-instant/raw/refs/heads/main/somnambulary/instant-hacks-kill-World-Wall-strike-1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826321/",
            "reporter": "tcains1"
        }
    ],
    "3826322": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://github.com/DeepuNikki/hestiacp/raw/refs/heads/main/web/locale/sv/Software_v1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826322/",
            "reporter": "tcains1"
        }
    ],
    "3826323": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://github.com/DeepuNikki/Souls-Rebirth-hacks-gauge-no-awakening/raw/refs/heads/main/farasula/gauge_Souls_awakening_Rebirth_hacks_no_v2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 12:02:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826323/",
            "reporter": "tcains1"
        }
    ],
    "3826324": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/kelvinlugohe/Hack-Baldurs-Gate-3-Minimum-Roll/refs/heads/main/photoactivity/Baldurs_Hack_Gate_Minimum_Roll_2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:05:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826324/",
            "reporter": "tcains1"
        }
    ],
    "3826325": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://github.com/kelvinlugohe/LGTV-Firmware-Downgrade/raw/refs/heads/main/wakingly/LGT-Firmware-Downgrade-v3.8-alpha.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:43:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826325/",
            "reporter": "tcains1"
        }
    ],
    "3826326": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://github.com/kelvinlugohe/Hack-Baldurs-Gate-3-Minimum-Roll/raw/refs/heads/main/photoactivity/Baldurs_Hack_Gate_Minimum_Roll_2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826326/",
            "reporter": "tcains1"
        }
    ],
    "3826327": [
        {
            "dateadded": "2026-04-20 01:46:10 UTC",
            "url": "https://raw.githubusercontent.com/kelvinlugohe/LGTV-Firmware-Downgrade/refs/heads/main/wakingly/LGT-Firmware-Downgrade-v3.8-alpha.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:56:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826327/",
            "reporter": "tcains1"
        }
    ],
    "3826313": [
        {
            "dateadded": "2026-04-20 01:46:09 UTC",
            "url": "https://raw.githubusercontent.com/habibhassansehani/openai-sdk-knowledge-org/refs/heads/main/public/images/knowledge_sdk_org_openai_v3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826313/",
            "reporter": "tcains1"
        }
    ],
    "3826312": [
        {
            "dateadded": "2026-04-20 01:43:10 UTC",
            "url": "https://data-input4.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826312/",
            "reporter": "anonymous"
        }
    ],
    "3826311": [
        {
            "dateadded": "2026-04-20 01:38:10 UTC",
            "url": "https://main-sensor3.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826311/",
            "reporter": "anonymous"
        }
    ],
    "3826310": [
        {
            "dateadded": "2026-04-20 01:37:11 UTC",
            "url": "https://github.com/Golane2/-/raw/refs/heads/main/intersexualism/Software-2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826310/",
            "reporter": "tcains1"
        }
    ],
    "3826308": [
        {
            "dateadded": "2026-04-20 01:37:08 UTC",
            "url": "http://45.163.68.69:40970/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 04:53:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826308/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826309": [
        {
            "dateadded": "2026-04-20 01:37:08 UTC",
            "url": "https://github.com/Golane2/1/raw/refs/heads/main/mattery/Software_1.8-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826309/",
            "reporter": "tcains1"
        }
    ],
    "3826304": [
        {
            "dateadded": "2026-04-20 01:37:07 UTC",
            "url": "https://github.com/ulas6221/Axie-Infinity-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack-km/raw/refs/heads/main/unfragrantly/Crypto_Hack_km_Game_Axie_Clicker_Cheat_Api_Infinity_Bot_Auto_Farm_3.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:41:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826304/",
            "reporter": "tcains1"
        }
    ],
    "3826305": [
        {
            "dateadded": "2026-04-20 01:37:07 UTC",
            "url": "https://raw.githubusercontent.com/ulas6221/Axie-Infinity-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack-km/refs/heads/main/unfragrantly/Crypto_Hack_km_Game_Axie_Clicker_Cheat_Api_Infinity_Bot_Auto_Farm_3.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826305/",
            "reporter": "tcains1"
        }
    ],
    "3826306": [
        {
            "dateadded": "2026-04-20 01:37:07 UTC",
            "url": "https://raw.githubusercontent.com/Golane2/-/refs/heads/main/intersexualism/Software-2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 10:41:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826306/",
            "reporter": "tcains1"
        }
    ],
    "3826307": [
        {
            "dateadded": "2026-04-20 01:37:07 UTC",
            "url": "https://raw.githubusercontent.com/Golane2/1/refs/heads/main/mattery/Software_1.8-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 12:01:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826307/",
            "reporter": "tcains1"
        }
    ],
    "3826303": [
        {
            "dateadded": "2026-04-20 01:37:06 UTC",
            "url": "https://github.com/Golane2/GasHero-Finance-Game-Bot-Auto-Farm-Clicker-Crypto-Blockchain-Hack-Cheat/raw/refs/heads/main/Portia/Cheat-Auto-Farm-Gas-Bot-Blockchain-Clicker-Finance-Hero-Game-Crypto-Hack-2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:11:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826303/",
            "reporter": "tcains1"
        }
    ],
    "3826302": [
        {
            "dateadded": "2026-04-20 01:33:10 UTC",
            "url": "https://github.com/govardhan908/DBFZ-cheat-engine-mod/raw/refs/heads/main/Caprimulgidae/cheat-mod-engine-DBF-2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 11:00:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826302/",
            "reporter": "tcains1"
        }
    ],
    "3826301": [
        {
            "dateadded": "2026-04-20 01:33:06 UTC",
            "url": "https://raw.githubusercontent.com/govardhan908/DBFZ-cheat-engine-mod/refs/heads/main/Caprimulgidae/cheat-mod-engine-DBF-2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-21 12:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826301/",
            "reporter": "tcains1"
        }
    ],
    "3826300": [
        {
            "dateadded": "2026-04-20 01:32:09 UTC",
            "url": "https://power-unit2.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826300/",
            "reporter": "anonymous"
        }
    ],
    "3826299": [
        {
            "dateadded": "2026-04-20 01:30:25 UTC",
            "url": "http://42.227.207.241:58129/i",
            "url_status": "offline",
            "last_online": "2026-04-20 01:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826299/",
            "reporter": "geenensp"
        }
    ],
    "3826298": [
        {
            "dateadded": "2026-04-20 01:27:13 UTC",
            "url": "https://smart-system1.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826298/",
            "reporter": "anonymous"
        }
    ],
    "3826297": [
        {
            "dateadded": "2026-04-20 01:27:07 UTC",
            "url": "http://124.131.2.132:46863/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:19:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826297/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826296": [
        {
            "dateadded": "2026-04-20 01:23:20 UTC",
            "url": "http://42.55.9.3:49600/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 19:31:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826296/",
            "reporter": "geenensp"
        }
    ],
    "3826295": [
        {
            "dateadded": "2026-04-20 01:22:11 UTC",
            "url": "http://124.66.72.84:55895/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826295/",
            "reporter": "geenensp"
        }
    ],
    "3826294": [
        {
            "dateadded": "2026-04-20 01:21:15 UTC",
            "url": "http://124.66.72.84:55895/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826294/",
            "reporter": "geenensp"
        }
    ],
    "3826293": [
        {
            "dateadded": "2026-04-20 01:21:08 UTC",
            "url": "https://deep-plot6.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826293/",
            "reporter": "anonymous"
        }
    ],
    "3826292": [
        {
            "dateadded": "2026-04-20 01:17:10 UTC",
            "url": "http://39.81.254.198:49077/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:46:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826292/",
            "reporter": "geenensp"
        }
    ],
    "3826291": [
        {
            "dateadded": "2026-04-20 01:15:23 UTC",
            "url": "https://gitlab.com/spineround/hamfal/-/raw/main/L7XH7UR9695U.exe",
            "url_status": "offline",
            "last_online": "2026-04-20 07:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826291/",
            "reporter": "tcains1"
        }
    ],
    "3826290": [
        {
            "dateadded": "2026-04-20 01:15:09 UTC",
            "url": "https://old-tale5.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826290/",
            "reporter": "anonymous"
        }
    ],
    "3826289": [
        {
            "dateadded": "2026-04-20 01:10:10 UTC",
            "url": "https://best-word4.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826289/",
            "reporter": "anonymous"
        }
    ],
    "3826288": [
        {
            "dateadded": "2026-04-20 01:09:13 UTC",
            "url": "https://github.com/PremierFlare/CS2-Cheat-2026-External/releases/download/new/CS2CheatExternal-4.3.7.rar",
            "url_status": "offline",
            "last_online": "2026-04-22 11:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-8871",
                "rar",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826288/",
            "reporter": "tcains1"
        }
    ],
    "3826287": [
        {
            "dateadded": "2026-04-20 01:04:08 UTC",
            "url": "https://page-turn3.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 01:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826287/",
            "reporter": "anonymous"
        }
    ],
    "3826286": [
        {
            "dateadded": "2026-04-20 01:01:18 UTC",
            "url": "http://115.62.181.242:33520/i",
            "url_status": "offline",
            "last_online": "2026-04-20 01:01:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826286/",
            "reporter": "geenensp"
        }
    ],
    "3826285": [
        {
            "dateadded": "2026-04-20 01:00:24 UTC",
            "url": "http://182.126.105.233:36256/i",
            "url_status": "offline",
            "last_online": "2026-04-20 01:00:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826285/",
            "reporter": "geenensp"
        }
    ],
    "3826284": [
        {
            "dateadded": "2026-04-20 00:58:08 UTC",
            "url": "https://new-story2.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826284/",
            "reporter": "anonymous"
        }
    ],
    "3826283": [
        {
            "dateadded": "2026-04-20 00:57:06 UTC",
            "url": "http://110.37.45.57:52525/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826283/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826282": [
        {
            "dateadded": "2026-04-20 00:54:06 UTC",
            "url": "http://39.81.254.198:49077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:49:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826282/",
            "reporter": "geenensp"
        }
    ],
    "3826281": [
        {
            "dateadded": "2026-04-20 00:53:15 UTC",
            "url": "https://book-read1.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:53:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826281/",
            "reporter": "anonymous"
        }
    ],
    "3826280": [
        {
            "dateadded": "2026-04-20 00:50:19 UTC",
            "url": "http://123.9.197.199:36416/i",
            "url_status": "offline",
            "last_online": "2026-04-21 19:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826280/",
            "reporter": "geenensp"
        }
    ],
    "3826279": [
        {
            "dateadded": "2026-04-20 00:47:12 UTC",
            "url": "https://soft-rain6.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826279/",
            "reporter": "anonymous"
        }
    ],
    "3826278": [
        {
            "dateadded": "2026-04-20 00:46:20 UTC",
            "url": "http://110.36.18.169:34786/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826278/",
            "reporter": "geenensp"
        }
    ],
    "3826277": [
        {
            "dateadded": "2026-04-20 00:45:23 UTC",
            "url": "http://61.137.158.117:34879/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826277/",
            "reporter": "geenensp"
        }
    ],
    "3826276": [
        {
            "dateadded": "2026-04-20 00:41:07 UTC",
            "url": "https://warm-wind5.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826276/",
            "reporter": "anonymous"
        }
    ],
    "3826275": [
        {
            "dateadded": "2026-04-20 00:36:08 UTC",
            "url": "https://white-snow4.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826275/",
            "reporter": "anonymous"
        }
    ],
    "3826274": [
        {
            "dateadded": "2026-04-20 00:32:08 UTC",
            "url": "http://110.37.11.215:38707/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826274/",
            "reporter": "geenensp"
        }
    ],
    "3826273": [
        {
            "dateadded": "2026-04-20 00:31:07 UTC",
            "url": "https://blue-cloud3.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826273/",
            "reporter": "anonymous"
        }
    ],
    "3826272": [
        {
            "dateadded": "2026-04-20 00:27:09 UTC",
            "url": "http://ts.bhaaratkeeshakti.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "ua-empty",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826272/",
            "reporter": "tcains1"
        }
    ],
    "3826271": [
        {
            "dateadded": "2026-04-20 00:27:08 UTC",
            "url": "http://110.37.45.57:52525/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826271/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826270": [
        {
            "dateadded": "2026-04-20 00:26:09 UTC",
            "url": "https://sun-light2.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826270/",
            "reporter": "anonymous"
        }
    ],
    "3826269": [
        {
            "dateadded": "2026-04-20 00:22:07 UTC",
            "url": "http://61.52.133.85:44081/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:00:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826269/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826265": [
        {
            "dateadded": "2026-04-20 00:19:21 UTC",
            "url": "http://87.121.79.73/00okarm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:20 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826265/",
            "reporter": "botnetkiller"
        }
    ],
    "3826266": [
        {
            "dateadded": "2026-04-20 00:19:21 UTC",
            "url": "http://87.121.79.73/00okx86",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826266/",
            "reporter": "botnetkiller"
        }
    ],
    "3826267": [
        {
            "dateadded": "2026-04-20 00:19:21 UTC",
            "url": "http://87.121.79.73/00okarm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826267/",
            "reporter": "botnetkiller"
        }
    ],
    "3826268": [
        {
            "dateadded": "2026-04-20 00:19:21 UTC",
            "url": "http://87.121.79.73/00okarm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:54 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826268/",
            "reporter": "botnetkiller"
        }
    ],
    "3826264": [
        {
            "dateadded": "2026-04-20 00:19:08 UTC",
            "url": "https://sky-view1.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826264/",
            "reporter": "anonymous"
        }
    ],
    "3826262": [
        {
            "dateadded": "2026-04-20 00:18:16 UTC",
            "url": "http://182.126.105.233:36256/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:18:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826262/",
            "reporter": "geenensp"
        }
    ],
    "3826263": [
        {
            "dateadded": "2026-04-20 00:18:16 UTC",
            "url": "http://61.137.158.117:34879/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826263/",
            "reporter": "geenensp"
        }
    ],
    "3826261": [
        {
            "dateadded": "2026-04-20 00:18:15 UTC",
            "url": "http://87.121.79.73/00oksh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826261/",
            "reporter": "botnetkiller"
        }
    ],
    "3826255": [
        {
            "dateadded": "2026-04-20 00:17:22 UTC",
            "url": "http://87.121.79.73/00okspc",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826255/",
            "reporter": "botnetkiller"
        }
    ],
    "3826256": [
        {
            "dateadded": "2026-04-20 00:17:22 UTC",
            "url": "http://87.121.79.73/ok",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826256/",
            "reporter": "botnetkiller"
        }
    ],
    "3826257": [
        {
            "dateadded": "2026-04-20 00:17:22 UTC",
            "url": "http://87.121.79.73/00okm68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826257/",
            "reporter": "botnetkiller"
        }
    ],
    "3826258": [
        {
            "dateadded": "2026-04-20 00:17:22 UTC",
            "url": "http://87.121.79.73/00okmips",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826258/",
            "reporter": "botnetkiller"
        }
    ],
    "3826259": [
        {
            "dateadded": "2026-04-20 00:17:22 UTC",
            "url": "http://87.121.79.73/00okx64",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826259/",
            "reporter": "botnetkiller"
        }
    ],
    "3826260": [
        {
            "dateadded": "2026-04-20 00:17:22 UTC",
            "url": "http://87.121.79.73/00okmpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826260/",
            "reporter": "botnetkiller"
        }
    ],
    "3826254": [
        {
            "dateadded": "2026-04-20 00:17:11 UTC",
            "url": "http://87.121.79.73/00okppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826254/",
            "reporter": "botnetkiller"
        }
    ],
    "3826253": [
        {
            "dateadded": "2026-04-20 00:14:09 UTC",
            "url": "https://cool-drink6.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826253/",
            "reporter": "anonymous"
        }
    ],
    "3826251": [
        {
            "dateadded": "2026-04-20 00:10:24 UTC",
            "url": "http://110.37.11.215:38707/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826251/",
            "reporter": "geenensp"
        }
    ],
    "3826250": [
        {
            "dateadded": "2026-04-20 00:08:11 UTC",
            "url": "https://hot-coffee5.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826250/",
            "reporter": "anonymous"
        }
    ],
    "3826249": [
        {
            "dateadded": "2026-04-20 00:02:22 UTC",
            "url": "http://168.227.163.32:42392/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826249/",
            "reporter": "geenensp"
        }
    ],
    "3826248": [
        {
            "dateadded": "2026-04-20 00:02:13 UTC",
            "url": "https://sweet-cake4.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 00:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826248/",
            "reporter": "anonymous"
        }
    ],
    "3826246": [
        {
            "dateadded": "2026-04-19 23:57:09 UTC",
            "url": "http://39.88.129.180:44722/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826246/",
            "reporter": "geenensp"
        }
    ],
    "3826247": [
        {
            "dateadded": "2026-04-19 23:57:09 UTC",
            "url": "http://222.127.171.38:52706/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826247/",
            "reporter": "geenensp"
        }
    ],
    "3826245": [
        {
            "dateadded": "2026-04-19 23:57:07 UTC",
            "url": "http://61.52.133.85:44081/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826245/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826244": [
        {
            "dateadded": "2026-04-19 23:56:07 UTC",
            "url": "https://fresh-food3.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826244/",
            "reporter": "anonymous"
        }
    ],
    "3826243": [
        {
            "dateadded": "2026-04-19 23:51:09 UTC",
            "url": "https://tasty-meal2.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826243/",
            "reporter": "anonymous"
        }
    ],
    "3826242": [
        {
            "dateadded": "2026-04-19 23:50:19 UTC",
            "url": "http://123.7.220.126:39624/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826242/",
            "reporter": "geenensp"
        }
    ],
    "3826241": [
        {
            "dateadded": "2026-04-19 23:46:08 UTC",
            "url": "https://home-chef1.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826241/",
            "reporter": "anonymous"
        }
    ],
    "3826240": [
        {
            "dateadded": "2026-04-19 23:45:22 UTC",
            "url": "http://110.37.28.220:60065/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:07:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826240/",
            "reporter": "geenensp"
        }
    ],
    "3826236": [
        {
            "dateadded": "2026-04-19 23:39:25 UTC",
            "url": "http://176.65.134.30/x86",
            "url_status": "offline",
            "last_online": "2026-04-26 20:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826236/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826237": [
        {
            "dateadded": "2026-04-19 23:39:25 UTC",
            "url": "http://176.65.134.30/m68k",
            "url_status": "offline",
            "last_online": "2026-04-26 20:02:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826237/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826238": [
        {
            "dateadded": "2026-04-19 23:39:25 UTC",
            "url": "http://176.65.134.30/arm",
            "url_status": "offline",
            "last_online": "2026-04-26 19:21:48 UTC",
            "threat": "malware_download",
            "tags": [
                "DemonBot",
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826238/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826239": [
        {
            "dateadded": "2026-04-19 23:39:25 UTC",
            "url": "http://176.65.134.30/spc",
            "url_status": "offline",
            "last_online": "2026-04-26 20:06:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826239/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826234": [
        {
            "dateadded": "2026-04-19 23:39:17 UTC",
            "url": "http://176.65.134.30/arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 17:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826234/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826235": [
        {
            "dateadded": "2026-04-19 23:39:17 UTC",
            "url": "http://176.65.134.30/arc",
            "url_status": "offline",
            "last_online": "2026-04-26 18:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826235/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826229": [
        {
            "dateadded": "2026-04-19 23:39:16 UTC",
            "url": "http://176.65.134.30/mips",
            "url_status": "offline",
            "last_online": "2026-04-26 20:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826229/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826230": [
        {
            "dateadded": "2026-04-19 23:39:16 UTC",
            "url": "http://176.65.134.30/ppc",
            "url_status": "offline",
            "last_online": "2026-04-26 19:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826230/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826231": [
        {
            "dateadded": "2026-04-19 23:39:16 UTC",
            "url": "http://176.65.134.30/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-26 19:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826231/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826232": [
        {
            "dateadded": "2026-04-19 23:39:16 UTC",
            "url": "http://176.65.134.30/sh4",
            "url_status": "offline",
            "last_online": "2026-04-26 19:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826232/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826233": [
        {
            "dateadded": "2026-04-19 23:39:16 UTC",
            "url": "http://176.65.134.30/arm6",
            "url_status": "offline",
            "last_online": "2026-04-26 19:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826233/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3826228": [
        {
            "dateadded": "2026-04-19 23:39:11 UTC",
            "url": "https://top-deal6.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826228/",
            "reporter": "anonymous"
        }
    ],
    "3826227": [
        {
            "dateadded": "2026-04-19 23:38:29 UTC",
            "url": "http://168.227.163.32:42392/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826227/",
            "reporter": "geenensp"
        }
    ],
    "3826226": [
        {
            "dateadded": "2026-04-19 23:34:08 UTC",
            "url": "https://fast-buy5.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826226/",
            "reporter": "anonymous"
        }
    ],
    "3826225": [
        {
            "dateadded": "2026-04-19 23:31:24 UTC",
            "url": "http://42.230.197.177:56830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826225/",
            "reporter": "geenensp"
        }
    ],
    "3826223": [
        {
            "dateadded": "2026-04-19 23:31:23 UTC",
            "url": "http://116.138.96.110:59121/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:49:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826223/",
            "reporter": "geenensp"
        }
    ],
    "3826224": [
        {
            "dateadded": "2026-04-19 23:31:23 UTC",
            "url": "http://123.129.153.253:58816/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:02:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826224/",
            "reporter": "geenensp"
        }
    ],
    "3826222": [
        {
            "dateadded": "2026-04-19 23:31:11 UTC",
            "url": "https://new-item4.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826222/",
            "reporter": "anonymous"
        }
    ],
    "3826221": [
        {
            "dateadded": "2026-04-19 23:30:21 UTC",
            "url": "http://182.126.126.55:35736/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826221/",
            "reporter": "geenensp"
        }
    ],
    "3826220": [
        {
            "dateadded": "2026-04-19 23:27:08 UTC",
            "url": "http://182.112.209.213:45371/i",
            "url_status": "offline",
            "last_online": "2026-04-20 19:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826220/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826219": [
        {
            "dateadded": "2026-04-19 23:23:13 UTC",
            "url": "http://220.201.89.80:50595/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826219/",
            "reporter": "geenensp"
        }
    ],
    "3826218": [
        {
            "dateadded": "2026-04-19 23:21:15 UTC",
            "url": "https://good-sale3.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826218/",
            "reporter": "anonymous"
        }
    ],
    "3826217": [
        {
            "dateadded": "2026-04-19 23:16:15 UTC",
            "url": "https://best-price2.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826217/",
            "reporter": "anonymous"
        }
    ],
    "3826216": [
        {
            "dateadded": "2026-04-19 23:10:22 UTC",
            "url": "http://125.44.253.240:34631/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:30:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826216/",
            "reporter": "geenensp"
        }
    ],
    "3826215": [
        {
            "dateadded": "2026-04-19 23:10:13 UTC",
            "url": "https://shop-list1.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826215/",
            "reporter": "anonymous"
        }
    ],
    "3826214": [
        {
            "dateadded": "2026-04-19 23:04:14 UTC",
            "url": "https://city-walk6.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 23:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826214/",
            "reporter": "anonymous"
        }
    ],
    "3826213": [
        {
            "dateadded": "2026-04-19 22:59:13 UTC",
            "url": "https://local-trip5.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826213/",
            "reporter": "anonymous"
        }
    ],
    "3826212": [
        {
            "dateadded": "2026-04-19 22:57:26 UTC",
            "url": "http://61.52.0.32:36389/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:03:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826212/",
            "reporter": "geenensp"
        }
    ],
    "3826211": [
        {
            "dateadded": "2026-04-19 22:54:19 UTC",
            "url": "http://182.117.69.253:54165/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:54:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826211/",
            "reporter": "geenensp"
        }
    ],
    "3826210": [
        {
            "dateadded": "2026-04-19 22:53:24 UTC",
            "url": "http://222.127.171.38:52706/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826210/",
            "reporter": "geenensp"
        }
    ],
    "3826209": [
        {
            "dateadded": "2026-04-19 22:53:12 UTC",
            "url": "https://beach-view4.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826209/",
            "reporter": "anonymous"
        }
    ],
    "3826208": [
        {
            "dateadded": "2026-04-19 22:52:16 UTC",
            "url": "http://116.138.96.110:59121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826208/",
            "reporter": "geenensp"
        }
    ],
    "3826207": [
        {
            "dateadded": "2026-04-19 22:48:12 UTC",
            "url": "https://hotel-stay3.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826207/",
            "reporter": "anonymous"
        }
    ],
    "3826206": [
        {
            "dateadded": "2026-04-19 22:44:29 UTC",
            "url": "http://125.44.253.240:34631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826206/",
            "reporter": "geenensp"
        }
    ],
    "3826205": [
        {
            "dateadded": "2026-04-19 22:41:22 UTC",
            "url": "http://196.189.68.239:46182/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826205/",
            "reporter": "geenensp"
        }
    ],
    "3826204": [
        {
            "dateadded": "2026-04-19 22:41:14 UTC",
            "url": "https://world-tour2.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826204/",
            "reporter": "anonymous"
        }
    ],
    "3826203": [
        {
            "dateadded": "2026-04-19 22:37:14 UTC",
            "url": "https://travel-blog1.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826203/",
            "reporter": "anonymous"
        }
    ],
    "3826202": [
        {
            "dateadded": "2026-04-19 22:37:08 UTC",
            "url": "http://115.55.174.100:55537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:37:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826202/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826201": [
        {
            "dateadded": "2026-04-19 22:31:12 UTC",
            "url": "https://clear-goal6.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826201/",
            "reporter": "anonymous"
        }
    ],
    "3826200": [
        {
            "dateadded": "2026-04-19 22:25:08 UTC",
            "url": "https://smart-time5.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826200/",
            "reporter": "anonymous"
        }
    ],
    "3826199": [
        {
            "dateadded": "2026-04-19 22:21:09 UTC",
            "url": "http://60.211.44.179:42645/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826199/",
            "reporter": "geenensp"
        }
    ],
    "3826198": [
        {
            "dateadded": "2026-04-19 22:19:10 UTC",
            "url": "https://best-plan4.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826198/",
            "reporter": "anonymous"
        }
    ],
    "3826197": [
        {
            "dateadded": "2026-04-19 22:14:22 UTC",
            "url": "http://196.189.68.239:46182/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:27:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826197/",
            "reporter": "geenensp"
        }
    ],
    "3826196": [
        {
            "dateadded": "2026-04-19 22:14:12 UTC",
            "url": "https://team-work3.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826196/",
            "reporter": "anonymous"
        }
    ],
    "3826195": [
        {
            "dateadded": "2026-04-19 22:08:07 UTC",
            "url": "https://office-job2.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826195/",
            "reporter": "anonymous"
        }
    ],
    "3826194": [
        {
            "dateadded": "2026-04-19 22:05:12 UTC",
            "url": "https://daily-task1.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 22:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826194/",
            "reporter": "anonymous"
        }
    ],
    "3826193": [
        {
            "dateadded": "2026-04-19 21:59:09 UTC",
            "url": "https://main-frame6.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826193/",
            "reporter": "anonymous"
        }
    ],
    "3826192": [
        {
            "dateadded": "2026-04-19 21:58:20 UTC",
            "url": "http://196.189.104.106:60280/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:43:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826192/",
            "reporter": "geenensp"
        }
    ],
    "3826191": [
        {
            "dateadded": "2026-04-19 21:55:20 UTC",
            "url": "http://36.89.252.178:38731/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:59:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826191/",
            "reporter": "geenensp"
        }
    ],
    "3826190": [
        {
            "dateadded": "2026-04-19 21:51:09 UTC",
            "url": "https://fast-cloud5.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826190/",
            "reporter": "anonymous"
        }
    ],
    "3826189": [
        {
            "dateadded": "2026-04-19 21:46:09 UTC",
            "url": "https://data-base4.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826189/",
            "reporter": "anonymous"
        }
    ],
    "3826188": [
        {
            "dateadded": "2026-04-19 21:41:09 UTC",
            "url": "https://web-server3.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826188/",
            "reporter": "anonymous"
        }
    ],
    "3826187": [
        {
            "dateadded": "2026-04-19 21:39:18 UTC",
            "url": "http://176.65.139.76/bins/parm7",
            "url_status": "online",
            "last_online": "2026-04-27 13:04:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826187/",
            "reporter": "geenensp"
        }
    ],
    "3826186": [
        {
            "dateadded": "2026-04-19 21:35:12 UTC",
            "url": "http://42.53.68.75:36874/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826186/",
            "reporter": "geenensp"
        }
    ],
    "3826185": [
        {
            "dateadded": "2026-04-19 21:35:10 UTC",
            "url": "https://smart-node2.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826185/",
            "reporter": "anonymous"
        }
    ],
    "3826184": [
        {
            "dateadded": "2026-04-19 21:32:13 UTC",
            "url": "http://59.97.250.23:38831/i",
            "url_status": "offline",
            "last_online": "2026-04-19 21:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826184/",
            "reporter": "geenensp"
        }
    ],
    "3826183": [
        {
            "dateadded": "2026-04-19 21:28:09 UTC",
            "url": "https://tech-portal1.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826183/",
            "reporter": "anonymous"
        }
    ],
    "3826182": [
        {
            "dateadded": "2026-04-19 21:26:19 UTC",
            "url": "http://42.224.178.233:46590/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:33:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826182/",
            "reporter": "geenensp"
        }
    ],
    "3826181": [
        {
            "dateadded": "2026-04-19 21:25:20 UTC",
            "url": "http://115.55.11.39:44336/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:41:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826181/",
            "reporter": "geenensp"
        }
    ],
    "3826180": [
        {
            "dateadded": "2026-04-19 21:24:11 UTC",
            "url": "https://live-show6.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826180/",
            "reporter": "anonymous"
        }
    ],
    "3826179": [
        {
            "dateadded": "2026-04-19 21:18:07 UTC",
            "url": "https://photo-shot5.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826179/",
            "reporter": "anonymous"
        }
    ],
    "3826178": [
        {
            "dateadded": "2026-04-19 21:17:07 UTC",
            "url": "http://115.58.157.39:33156/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:07:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826178/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826177": [
        {
            "dateadded": "2026-04-19 21:13:07 UTC",
            "url": "https://dance-floor4.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826177/",
            "reporter": "anonymous"
        }
    ],
    "3826176": [
        {
            "dateadded": "2026-04-19 21:12:19 UTC",
            "url": "http://113.238.14.226:50437/i",
            "url_status": "offline",
            "last_online": "2026-04-22 15:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826176/",
            "reporter": "geenensp"
        }
    ],
    "3826175": [
        {
            "dateadded": "2026-04-19 21:11:20 UTC",
            "url": "http://36.64.174.50:60361/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826175/",
            "reporter": "geenensp"
        }
    ],
    "3826174": [
        {
            "dateadded": "2026-04-19 21:11:18 UTC",
            "url": "http://59.97.250.23:38831/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 21:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826174/",
            "reporter": "geenensp"
        }
    ],
    "3826173": [
        {
            "dateadded": "2026-04-19 21:09:17 UTC",
            "url": "http://42.53.68.75:36874/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826173/",
            "reporter": "geenensp"
        }
    ],
    "3826170": [
        {
            "dateadded": "2026-04-19 21:07:07 UTC",
            "url": "http://115.59.120.154:52636/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:00:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826170/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826171": [
        {
            "dateadded": "2026-04-19 21:07:07 UTC",
            "url": "http://58.50.200.133:52069/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826171/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826172": [
        {
            "dateadded": "2026-04-19 21:07:07 UTC",
            "url": "https://music-band3.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826172/",
            "reporter": "anonymous"
        }
    ],
    "3826169": [
        {
            "dateadded": "2026-04-19 21:05:12 UTC",
            "url": "http://123.8.30.17:44165/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826169/",
            "reporter": "geenensp"
        }
    ],
    "3826168": [
        {
            "dateadded": "2026-04-19 21:00:10 UTC",
            "url": "https://color-paint2.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 21:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826168/",
            "reporter": "anonymous"
        }
    ],
    "3826167": [
        {
            "dateadded": "2026-04-19 20:58:10 UTC",
            "url": "http://61.52.34.205:38848/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:12:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826167/",
            "reporter": "geenensp"
        }
    ],
    "3826166": [
        {
            "dateadded": "2026-04-19 20:55:15 UTC",
            "url": "https://art-studio1.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826166/",
            "reporter": "anonymous"
        }
    ],
    "3826165": [
        {
            "dateadded": "2026-04-19 20:50:08 UTC",
            "url": "https://large-box6.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826165/",
            "reporter": "anonymous"
        }
    ],
    "3826164": [
        {
            "dateadded": "2026-04-19 20:48:20 UTC",
            "url": "http://110.36.25.33:58709/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826164/",
            "reporter": "geenensp"
        }
    ],
    "3826163": [
        {
            "dateadded": "2026-04-19 20:45:20 UTC",
            "url": "http://27.37.108.110:60944/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:39:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826163/",
            "reporter": "geenensp"
        }
    ],
    "3826162": [
        {
            "dateadded": "2026-04-19 20:44:09 UTC",
            "url": "https://air-flight5.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826162/",
            "reporter": "anonymous"
        }
    ],
    "3826161": [
        {
            "dateadded": "2026-04-19 20:43:20 UTC",
            "url": "http://36.64.174.50:60361/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826161/",
            "reporter": "geenensp"
        }
    ],
    "3826160": [
        {
            "dateadded": "2026-04-19 20:41:18 UTC",
            "url": "http://115.49.4.124:56199/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:37:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826160/",
            "reporter": "geenensp"
        }
    ],
    "3826159": [
        {
            "dateadded": "2026-04-19 20:39:07 UTC",
            "url": "https://global-ship4.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826159/",
            "reporter": "anonymous"
        }
    ],
    "3826154": [
        {
            "dateadded": "2026-04-19 20:37:06 UTC",
            "url": "http://198.50.124.45/bins/mynode.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826154/",
            "reporter": "botnetkiller"
        }
    ],
    "3826155": [
        {
            "dateadded": "2026-04-19 20:37:06 UTC",
            "url": "http://198.50.124.45/bins/mynode.powerpc-440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826155/",
            "reporter": "botnetkiller"
        }
    ],
    "3826156": [
        {
            "dateadded": "2026-04-19 20:37:06 UTC",
            "url": "http://198.50.124.45/bins/mynode.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826156/",
            "reporter": "botnetkiller"
        }
    ],
    "3826157": [
        {
            "dateadded": "2026-04-19 20:37:06 UTC",
            "url": "http://198.50.124.45/bins/mynode.armv7l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826157/",
            "reporter": "botnetkiller"
        }
    ],
    "3826158": [
        {
            "dateadded": "2026-04-19 20:37:06 UTC",
            "url": "http://198.50.124.45/bins/mynode.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826158/",
            "reporter": "botnetkiller"
        }
    ],
    "3826153": [
        {
            "dateadded": "2026-04-19 20:33:11 UTC",
            "url": "http://59.97.245.228:33605/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826153/",
            "reporter": "geenensp"
        }
    ],
    "3826152": [
        {
            "dateadded": "2026-04-19 20:33:10 UTC",
            "url": "https://safe-store3.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826152/",
            "reporter": "anonymous"
        }
    ],
    "3826151": [
        {
            "dateadded": "2026-04-19 20:29:10 UTC",
            "url": "http://42.224.178.233:46590/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:41:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826151/",
            "reporter": "geenensp"
        }
    ],
    "3826150": [
        {
            "dateadded": "2026-04-19 20:27:12 UTC",
            "url": "https://fast-cargo2.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826150/",
            "reporter": "anonymous"
        }
    ],
    "3826149": [
        {
            "dateadded": "2026-04-19 20:26:18 UTC",
            "url": "http://61.52.34.205:38848/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:25:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826149/",
            "reporter": "geenensp"
        }
    ],
    "3826141": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:20 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826141/",
            "reporter": "botnetkiller"
        }
    ],
    "3826142": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/penis.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826142/",
            "reporter": "botnetkiller"
        }
    ],
    "3826143": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826143/",
            "reporter": "botnetkiller"
        }
    ],
    "3826144": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826144/",
            "reporter": "botnetkiller"
        }
    ],
    "3826145": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826145/",
            "reporter": "botnetkiller"
        }
    ],
    "3826146": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:17:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826146/",
            "reporter": "botnetkiller"
        }
    ],
    "3826147": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826147/",
            "reporter": "botnetkiller"
        }
    ],
    "3826148": [
        {
            "dateadded": "2026-04-19 20:25:23 UTC",
            "url": "http://198.50.124.45/bins/mynode.armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:43 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826148/",
            "reporter": "botnetkiller"
        }
    ],
    "3826140": [
        {
            "dateadded": "2026-04-19 20:22:24 UTC",
            "url": "http://115.49.88.187:38196/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:42:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826140/",
            "reporter": "geenensp"
        }
    ],
    "3826139": [
        {
            "dateadded": "2026-04-19 20:21:09 UTC",
            "url": "https://heavy-truck1.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826139/",
            "reporter": "anonymous"
        }
    ],
    "3826138": [
        {
            "dateadded": "2026-04-19 20:20:41 UTC",
            "url": "http://216.126.86.34:57249/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826138/",
            "reporter": "geenensp"
        }
    ],
    "3826137": [
        {
            "dateadded": "2026-04-19 20:19:20 UTC",
            "url": "http://221.15.179.52:59362/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826137/",
            "reporter": "geenensp"
        }
    ],
    "3826136": [
        {
            "dateadded": "2026-04-19 20:17:19 UTC",
            "url": "http://110.36.25.33:58709/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:48:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826136/",
            "reporter": "geenensp"
        }
    ],
    "3826135": [
        {
            "dateadded": "2026-04-19 20:17:14 UTC",
            "url": "https://blue-lake6.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826135/",
            "reporter": "anonymous"
        }
    ],
    "3826134": [
        {
            "dateadded": "2026-04-19 20:12:10 UTC",
            "url": "http://115.49.4.124:56199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:22:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826134/",
            "reporter": "geenensp"
        }
    ],
    "3826133": [
        {
            "dateadded": "2026-04-19 20:11:10 UTC",
            "url": "https://open-field5.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826133/",
            "reporter": "anonymous"
        }
    ],
    "3826132": [
        {
            "dateadded": "2026-04-19 20:05:08 UTC",
            "url": "https://deep-cave4.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 20:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826132/",
            "reporter": "anonymous"
        }
    ],
    "3826130": [
        {
            "dateadded": "2026-04-19 19:59:17 UTC",
            "url": "http://110.37.28.220:60065/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826130/",
            "reporter": "geenensp"
        }
    ],
    "3826131": [
        {
            "dateadded": "2026-04-19 19:59:17 UTC",
            "url": "http://222.134.162.141:50727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826131/",
            "reporter": "geenensp"
        }
    ],
    "3826129": [
        {
            "dateadded": "2026-04-19 19:59:11 UTC",
            "url": "https://high-mount3.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826129/",
            "reporter": "anonymous"
        }
    ],
    "3826128": [
        {
            "dateadded": "2026-04-19 19:58:19 UTC",
            "url": "http://42.54.12.132:33929/i",
            "url_status": "offline",
            "last_online": "2026-04-21 12:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826128/",
            "reporter": "geenensp"
        }
    ],
    "3826127": [
        {
            "dateadded": "2026-04-19 19:54:11 UTC",
            "url": "https://wild-river2.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826127/",
            "reporter": "anonymous"
        }
    ],
    "3826126": [
        {
            "dateadded": "2026-04-19 19:48:09 UTC",
            "url": "https://green-forest1.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826126/",
            "reporter": "anonymous"
        }
    ],
    "3826125": [
        {
            "dateadded": "2026-04-19 19:42:06 UTC",
            "url": "https://lpke7.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:42:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826125/",
            "reporter": "anonymous"
        }
    ],
    "3826124": [
        {
            "dateadded": "2026-04-19 19:37:06 UTC",
            "url": "http://60.23.73.11:44902/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:28:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826124/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826123": [
        {
            "dateadded": "2026-04-19 19:36:14 UTC",
            "url": "https://formatcon.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826123/",
            "reporter": "anonymous"
        }
    ],
    "3826122": [
        {
            "dateadded": "2026-04-19 19:32:08 UTC",
            "url": "https://nvxlifpf.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826122/",
            "reporter": "anonymous"
        }
    ],
    "3826121": [
        {
            "dateadded": "2026-04-19 19:28:19 UTC",
            "url": "http://190.109.227.174:38508/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826121/",
            "reporter": "geenensp"
        }
    ],
    "3826120": [
        {
            "dateadded": "2026-04-19 19:27:06 UTC",
            "url": "http://61.163.128.183:43524/i",
            "url_status": "offline",
            "last_online": "2026-04-19 19:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826120/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826119": [
        {
            "dateadded": "2026-04-19 19:26:22 UTC",
            "url": "http://110.39.231.61:57505/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826119/",
            "reporter": "geenensp"
        }
    ],
    "3826118": [
        {
            "dateadded": "2026-04-19 19:25:24 UTC",
            "url": "http://42.230.231.137:46938/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826118/",
            "reporter": "geenensp"
        }
    ],
    "3826117": [
        {
            "dateadded": "2026-04-19 19:25:12 UTC",
            "url": "https://xazhg.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:25:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826117/",
            "reporter": "anonymous"
        }
    ],
    "3826116": [
        {
            "dateadded": "2026-04-19 19:20:10 UTC",
            "url": "https://p0rt-hold.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826116/",
            "reporter": "anonymous"
        }
    ],
    "3826115": [
        {
            "dateadded": "2026-04-19 19:17:14 UTC",
            "url": "http://163.142.84.73:36056/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:33:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826115/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826114": [
        {
            "dateadded": "2026-04-19 19:17:07 UTC",
            "url": "http://61.163.128.183:43524/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 19:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826114/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826113": [
        {
            "dateadded": "2026-04-19 19:15:09 UTC",
            "url": "https://casca-frame.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826113/",
            "reporter": "anonymous"
        }
    ],
    "3826112": [
        {
            "dateadded": "2026-04-19 19:13:07 UTC",
            "url": "http://59.97.252.176:58392/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826112/",
            "reporter": "geenensp"
        }
    ],
    "3826111": [
        {
            "dateadded": "2026-04-19 19:12:07 UTC",
            "url": "http://60.23.73.11:44902/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:52:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826111/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826110": [
        {
            "dateadded": "2026-04-19 19:09:08 UTC",
            "url": "https://spatra.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826110/",
            "reporter": "anonymous"
        }
    ],
    "3826109": [
        {
            "dateadded": "2026-04-19 19:04:09 UTC",
            "url": "https://rur4-watch.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 19:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826109/",
            "reporter": "anonymous"
        }
    ],
    "3826108": [
        {
            "dateadded": "2026-04-19 18:58:08 UTC",
            "url": "https://builrai.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826108/",
            "reporter": "anonymous"
        }
    ],
    "3826107": [
        {
            "dateadded": "2026-04-19 18:57:18 UTC",
            "url": "http://168.195.7.78:51932/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:58:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826107/",
            "reporter": "geenensp"
        }
    ],
    "3826106": [
        {
            "dateadded": "2026-04-19 18:57:17 UTC",
            "url": "http://110.37.34.154:49758/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:04:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826106/",
            "reporter": "geenensp"
        }
    ],
    "3826105": [
        {
            "dateadded": "2026-04-19 18:56:16 UTC",
            "url": "http://190.109.227.174:38508/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826105/",
            "reporter": "geenensp"
        }
    ],
    "3826104": [
        {
            "dateadded": "2026-04-19 18:55:21 UTC",
            "url": "http://115.57.250.244:45842/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:54:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826104/",
            "reporter": "geenensp"
        }
    ],
    "3826103": [
        {
            "dateadded": "2026-04-19 18:53:17 UTC",
            "url": "http://218.16.164.32:34133/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826103/",
            "reporter": "geenensp"
        }
    ],
    "3826102": [
        {
            "dateadded": "2026-04-19 18:52:08 UTC",
            "url": "https://spruce-field.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826102/",
            "reporter": "anonymous"
        }
    ],
    "3826101": [
        {
            "dateadded": "2026-04-19 18:50:14 UTC",
            "url": "http://182.112.99.168:53911/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:53:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826101/",
            "reporter": "geenensp"
        }
    ],
    "3826099": [
        {
            "dateadded": "2026-04-19 18:47:18 UTC",
            "url": "http://110.37.34.154:49758/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:19:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826099/",
            "reporter": "geenensp"
        }
    ],
    "3826100": [
        {
            "dateadded": "2026-04-19 18:47:18 UTC",
            "url": "http://110.36.70.136:36286/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:50:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826100/",
            "reporter": "geenensp"
        }
    ],
    "3826098": [
        {
            "dateadded": "2026-04-19 18:46:21 UTC",
            "url": "http://59.97.252.176:58392/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826098/",
            "reporter": "geenensp"
        }
    ],
    "3826097": [
        {
            "dateadded": "2026-04-19 18:46:07 UTC",
            "url": "https://118jq.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826097/",
            "reporter": "anonymous"
        }
    ],
    "3826096": [
        {
            "dateadded": "2026-04-19 18:41:08 UTC",
            "url": "https://slu780t.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826096/",
            "reporter": "anonymous"
        }
    ],
    "3826095": [
        {
            "dateadded": "2026-04-19 18:36:08 UTC",
            "url": "https://sernex2en.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826095/",
            "reporter": "anonymous"
        }
    ],
    "3826094": [
        {
            "dateadded": "2026-04-19 18:30:11 UTC",
            "url": "https://coucinema.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826094/",
            "reporter": "anonymous"
        }
    ],
    "3826093": [
        {
            "dateadded": "2026-04-19 18:26:06 UTC",
            "url": "http://62.60.226.159/np.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 17:12:43 UTC",
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey",
                "Neutrino"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826093/",
            "reporter": "c2hunter"
        }
    ],
    "3826092": [
        {
            "dateadded": "2026-04-19 18:24:10 UTC",
            "url": "https://freshlin.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826092/",
            "reporter": "anonymous"
        }
    ],
    "3826091": [
        {
            "dateadded": "2026-04-19 18:23:19 UTC",
            "url": "http://110.36.70.136:36286/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:45:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826091/",
            "reporter": "geenensp"
        }
    ],
    "3826090": [
        {
            "dateadded": "2026-04-19 18:21:06 UTC",
            "url": "http://123.190.29.232:37093/i",
            "url_status": "online",
            "last_online": "2026-04-27 14:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826090/",
            "reporter": "geenensp"
        }
    ],
    "3826089": [
        {
            "dateadded": "2026-04-19 18:19:24 UTC",
            "url": "http://218.16.164.32:34133/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:02:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826089/",
            "reporter": "geenensp"
        }
    ],
    "3826088": [
        {
            "dateadded": "2026-04-19 18:19:22 UTC",
            "url": "http://182.117.127.174:48581/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826088/",
            "reporter": "geenensp"
        }
    ],
    "3826087": [
        {
            "dateadded": "2026-04-19 18:19:08 UTC",
            "url": "https://6jny.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826087/",
            "reporter": "anonymous"
        }
    ],
    "3826086": [
        {
            "dateadded": "2026-04-19 18:13:11 UTC",
            "url": "https://050oanp8.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826086/",
            "reporter": "anonymous"
        }
    ],
    "3826085": [
        {
            "dateadded": "2026-04-19 18:13:09 UTC",
            "url": "https://rzdwkgtc.chernichco5t.digital/?ublib=WUZlbCTAjNOluybN",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826085/",
            "reporter": "anonymous"
        }
    ],
    "3826084": [
        {
            "dateadded": "2026-04-19 18:07:09 UTC",
            "url": "https://ph0ton0-crest.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826084/",
            "reporter": "anonymous"
        }
    ],
    "3826083": [
        {
            "dateadded": "2026-04-19 18:04:21 UTC",
            "url": "http://105.184.116.68:54233/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:02:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826083/",
            "reporter": "geenensp"
        }
    ],
    "3826082": [
        {
            "dateadded": "2026-04-19 18:02:07 UTC",
            "url": "http://110.37.35.199:49137/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:59:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826082/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826081": [
        {
            "dateadded": "2026-04-19 18:01:07 UTC",
            "url": "https://triggerunload.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 18:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826081/",
            "reporter": "anonymous"
        }
    ],
    "3826080": [
        {
            "dateadded": "2026-04-19 17:57:08 UTC",
            "url": "https://quickque.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826080/",
            "reporter": "anonymous"
        }
    ],
    "3826079": [
        {
            "dateadded": "2026-04-19 17:55:39 UTC",
            "url": "http://123.190.29.232:37093/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826079/",
            "reporter": "geenensp"
        }
    ],
    "3826078": [
        {
            "dateadded": "2026-04-19 17:53:16 UTC",
            "url": "http://119.115.55.152:60983/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:29:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826078/",
            "reporter": "geenensp"
        }
    ],
    "3826077": [
        {
            "dateadded": "2026-04-19 17:52:10 UTC",
            "url": "https://kxqj.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826077/",
            "reporter": "anonymous"
        }
    ],
    "3826076": [
        {
            "dateadded": "2026-04-19 17:49:13 UTC",
            "url": "https://moleculeblend.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826076/",
            "reporter": "anonymous"
        }
    ],
    "3826075": [
        {
            "dateadded": "2026-04-19 17:46:18 UTC",
            "url": "http://182.112.29.187:36133/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:35:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826075/",
            "reporter": "geenensp"
        }
    ],
    "3826073": [
        {
            "dateadded": "2026-04-19 17:44:29 UTC",
            "url": "http://115.49.113.199:58824/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:52:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826073/",
            "reporter": "geenensp"
        }
    ],
    "3826074": [
        {
            "dateadded": "2026-04-19 17:44:29 UTC",
            "url": "http://112.248.113.111:49268/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:45:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826074/",
            "reporter": "geenensp"
        }
    ],
    "3826072": [
        {
            "dateadded": "2026-04-19 17:38:10 UTC",
            "url": "https://5jhxktfe.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826072/",
            "reporter": "anonymous"
        }
    ],
    "3826071": [
        {
            "dateadded": "2026-04-19 17:35:19 UTC",
            "url": "http://110.37.91.29:37709/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826071/",
            "reporter": "NDA0E"
        }
    ],
    "3826070": [
        {
            "dateadded": "2026-04-19 17:34:20 UTC",
            "url": "http://110.37.14.251:42916/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:57:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826070/",
            "reporter": "geenensp"
        }
    ],
    "3826069": [
        {
            "dateadded": "2026-04-19 17:33:13 UTC",
            "url": "https://t3st-plate.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826069/",
            "reporter": "anonymous"
        }
    ],
    "3826068": [
        {
            "dateadded": "2026-04-19 17:30:26 UTC",
            "url": "http://39.88.129.180:44722/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826068/",
            "reporter": "geenensp"
        }
    ],
    "3826067": [
        {
            "dateadded": "2026-04-19 17:28:13 UTC",
            "url": "https://cavhn.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826067/",
            "reporter": "anonymous"
        }
    ],
    "3826066": [
        {
            "dateadded": "2026-04-19 17:27:58 UTC",
            "url": "http://112.248.113.111:49268/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:28:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826066/",
            "reporter": "geenensp"
        }
    ],
    "3826065": [
        {
            "dateadded": "2026-04-19 17:27:50 UTC",
            "url": "http://119.36.203.34:59572/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:40:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826065/",
            "reporter": "geenensp"
        }
    ],
    "3826064": [
        {
            "dateadded": "2026-04-19 17:27:39 UTC",
            "url": "http://105.184.116.68:54233/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:11:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826064/",
            "reporter": "geenensp"
        }
    ],
    "3826063": [
        {
            "dateadded": "2026-04-19 17:22:14 UTC",
            "url": "https://lumnex2ar.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826063/",
            "reporter": "anonymous"
        }
    ],
    "3826062": [
        {
            "dateadded": "2026-04-19 17:17:08 UTC",
            "url": "https://f0x-span.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826062/",
            "reporter": "anonymous"
        }
    ],
    "3826061": [
        {
            "dateadded": "2026-04-19 17:16:25 UTC",
            "url": "http://115.49.113.199:58824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:23:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826061/",
            "reporter": "geenensp"
        }
    ],
    "3826060": [
        {
            "dateadded": "2026-04-19 17:14:24 UTC",
            "url": "http://110.37.14.251:42916/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 04:35:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826060/",
            "reporter": "geenensp"
        }
    ],
    "3826059": [
        {
            "dateadded": "2026-04-19 17:11:11 UTC",
            "url": "https://sdkmodu.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826059/",
            "reporter": "anonymous"
        }
    ],
    "3826058": [
        {
            "dateadded": "2026-04-19 17:05:14 UTC",
            "url": "https://soumea.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 17:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826058/",
            "reporter": "anonymous"
        }
    ],
    "3826057": [
        {
            "dateadded": "2026-04-19 17:03:27 UTC",
            "url": "http://222.137.133.139:41679/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:03:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826057/",
            "reporter": "geenensp"
        }
    ],
    "3826056": [
        {
            "dateadded": "2026-04-19 17:00:17 UTC",
            "url": "http://42.4.105.106:38727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826056/",
            "reporter": "geenensp"
        }
    ],
    "3826055": [
        {
            "dateadded": "2026-04-19 17:00:15 UTC",
            "url": "http://115.55.62.233:53522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826055/",
            "reporter": "geenensp"
        }
    ],
    "3826054": [
        {
            "dateadded": "2026-04-19 16:59:09 UTC",
            "url": "https://spec4-craft.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826054/",
            "reporter": "anonymous"
        }
    ],
    "3826053": [
        {
            "dateadded": "2026-04-19 16:56:40 UTC",
            "url": "http://112.225.137.219:37722/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:30:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826053/",
            "reporter": "geenensp"
        }
    ],
    "3826052": [
        {
            "dateadded": "2026-04-19 16:54:13 UTC",
            "url": "https://lumtideen9.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826052/",
            "reporter": "anonymous"
        }
    ],
    "3826051": [
        {
            "dateadded": "2026-04-19 16:51:11 UTC",
            "url": "https://snqw.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826051/",
            "reporter": "anonymous"
        }
    ],
    "3826050": [
        {
            "dateadded": "2026-04-19 16:47:14 UTC",
            "url": "https://8rv3pcd.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826050/",
            "reporter": "anonymous"
        }
    ],
    "3826049": [
        {
            "dateadded": "2026-04-19 16:37:13 UTC",
            "url": "https://hsipz.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826049/",
            "reporter": "anonymous"
        }
    ],
    "3826048": [
        {
            "dateadded": "2026-04-19 16:36:18 UTC",
            "url": "http://175.165.199.109:59490/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826048/",
            "reporter": "geenensp"
        }
    ],
    "3826047": [
        {
            "dateadded": "2026-04-19 16:35:24 UTC",
            "url": "http://223.151.72.17:38728/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:56:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826047/",
            "reporter": "geenensp"
        }
    ],
    "3826046": [
        {
            "dateadded": "2026-04-19 16:32:13 UTC",
            "url": "https://oz557xfr.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826046/",
            "reporter": "anonymous"
        }
    ],
    "3826045": [
        {
            "dateadded": "2026-04-19 16:29:19 UTC",
            "url": "http://61.52.157.133:53803/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826045/",
            "reporter": "geenensp"
        }
    ],
    "3826044": [
        {
            "dateadded": "2026-04-19 16:28:27 UTC",
            "url": "http://190.109.227.57:60024/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826044/",
            "reporter": "geenensp"
        }
    ],
    "3826042": [
        {
            "dateadded": "2026-04-19 16:27:14 UTC",
            "url": "http://125.41.213.141:60768/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826042/",
            "reporter": "geenensp"
        }
    ],
    "3826043": [
        {
            "dateadded": "2026-04-19 16:27:14 UTC",
            "url": "http://182.127.38.189:37942/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:43:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826043/",
            "reporter": "geenensp"
        }
    ],
    "3826041": [
        {
            "dateadded": "2026-04-19 16:26:14 UTC",
            "url": "https://nor-tideet.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826041/",
            "reporter": "anonymous"
        }
    ],
    "3826040": [
        {
            "dateadded": "2026-04-19 16:20:21 UTC",
            "url": "http://42.228.222.186:41123/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:34:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826040/",
            "reporter": "geenensp"
        }
    ],
    "3826039": [
        {
            "dateadded": "2026-04-19 16:20:10 UTC",
            "url": "https://pvc1l.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826039/",
            "reporter": "anonymous"
        }
    ],
    "3826038": [
        {
            "dateadded": "2026-04-19 16:17:10 UTC",
            "url": "http://182.117.166.228:48481/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:44:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826038/",
            "reporter": "geenensp"
        }
    ],
    "3826037": [
        {
            "dateadded": "2026-04-19 16:15:12 UTC",
            "url": "https://stre4m-well.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826037/",
            "reporter": "anonymous"
        }
    ],
    "3826036": [
        {
            "dateadded": "2026-04-19 16:09:08 UTC",
            "url": "https://efiarz.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826036/",
            "reporter": "anonymous"
        }
    ],
    "3826035": [
        {
            "dateadded": "2026-04-19 16:07:08 UTC",
            "url": "http://124.131.151.187:36476/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:47:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826035/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826034": [
        {
            "dateadded": "2026-04-19 16:03:09 UTC",
            "url": "https://echamb.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 16:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826034/",
            "reporter": "anonymous"
        }
    ],
    "3826032": [
        {
            "dateadded": "2026-04-19 16:02:08 UTC",
            "url": "http://110.36.20.111:57300/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:18:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826032/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826033": [
        {
            "dateadded": "2026-04-19 16:02:08 UTC",
            "url": "http://110.36.20.111:57300/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826033/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826031": [
        {
            "dateadded": "2026-04-19 16:00:12 UTC",
            "url": "http://223.151.72.17:38728/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:03:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826031/",
            "reporter": "geenensp"
        }
    ],
    "3826030": [
        {
            "dateadded": "2026-04-19 15:58:09 UTC",
            "url": "https://umxburt3.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826030/",
            "reporter": "anonymous"
        }
    ],
    "3826029": [
        {
            "dateadded": "2026-04-19 15:57:06 UTC",
            "url": "http://123.5.157.109:55274/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:15:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826029/",
            "reporter": "geenensp"
        }
    ],
    "3826027": [
        {
            "dateadded": "2026-04-19 15:56:20 UTC",
            "url": "http://110.37.17.198:39350/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826027/",
            "reporter": "geenensp"
        }
    ],
    "3826028": [
        {
            "dateadded": "2026-04-19 15:56:20 UTC",
            "url": "http://115.58.85.212:40588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 15:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826028/",
            "reporter": "geenensp"
        }
    ],
    "3826026": [
        {
            "dateadded": "2026-04-19 15:55:19 UTC",
            "url": "http://112.93.200.68:60882/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826026/",
            "reporter": "geenensp"
        }
    ],
    "3826025": [
        {
            "dateadded": "2026-04-19 15:55:18 UTC",
            "url": "http://115.50.185.64:59180/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:51:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826025/",
            "reporter": "geenensp"
        }
    ],
    "3826024": [
        {
            "dateadded": "2026-04-19 15:52:07 UTC",
            "url": "https://alt-5tudio.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826024/",
            "reporter": "anonymous"
        }
    ],
    "3826020": [
        {
            "dateadded": "2026-04-19 15:51:36 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826020/",
            "reporter": "abuse_ch"
        }
    ],
    "3826021": [
        {
            "dateadded": "2026-04-19 15:51:36 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826021/",
            "reporter": "abuse_ch"
        }
    ],
    "3826022": [
        {
            "dateadded": "2026-04-19 15:51:36 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826022/",
            "reporter": "abuse_ch"
        }
    ],
    "3826023": [
        {
            "dateadded": "2026-04-19 15:51:36 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826023/",
            "reporter": "abuse_ch"
        }
    ],
    "3826014": [
        {
            "dateadded": "2026-04-19 15:51:23 UTC",
            "url": "http://110.37.115.90:59262/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826014/",
            "reporter": "geenensp"
        }
    ],
    "3826015": [
        {
            "dateadded": "2026-04-19 15:51:23 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826015/",
            "reporter": "abuse_ch"
        }
    ],
    "3826016": [
        {
            "dateadded": "2026-04-19 15:51:23 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826016/",
            "reporter": "abuse_ch"
        }
    ],
    "3826017": [
        {
            "dateadded": "2026-04-19 15:51:23 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826017/",
            "reporter": "abuse_ch"
        }
    ],
    "3826018": [
        {
            "dateadded": "2026-04-19 15:51:23 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826018/",
            "reporter": "abuse_ch"
        }
    ],
    "3826019": [
        {
            "dateadded": "2026-04-19 15:51:23 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826019/",
            "reporter": "abuse_ch"
        }
    ],
    "3826010": [
        {
            "dateadded": "2026-04-19 15:51:22 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826010/",
            "reporter": "abuse_ch"
        }
    ],
    "3826011": [
        {
            "dateadded": "2026-04-19 15:51:22 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826011/",
            "reporter": "abuse_ch"
        }
    ],
    "3826012": [
        {
            "dateadded": "2026-04-19 15:51:22 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826012/",
            "reporter": "abuse_ch"
        }
    ],
    "3826013": [
        {
            "dateadded": "2026-04-19 15:51:22 UTC",
            "url": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826013/",
            "reporter": "abuse_ch"
        }
    ],
    "3826009": [
        {
            "dateadded": "2026-04-19 15:51:12 UTC",
            "url": "http://110.37.115.90:59262/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:36:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826009/",
            "reporter": "geenensp"
        }
    ],
    "3826008": [
        {
            "dateadded": "2026-04-19 15:50:15 UTC",
            "url": "https://zoommeetingg.click/zoom/Windows/files/17UATCXCBHL34_19SI0B7FBSUF4_windows_x64.msi",
            "url_status": "offline",
            "last_online": "2026-04-19 17:55:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826008/",
            "reporter": "anonymous"
        }
    ],
    "3826007": [
        {
            "dateadded": "2026-04-19 15:50:07 UTC",
            "url": "http://129.213.9.74:1338/sora.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826007/",
            "reporter": "geenensp"
        }
    ],
    "3826006": [
        {
            "dateadded": "2026-04-19 15:47:11 UTC",
            "url": "https://pcllgu4.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826006/",
            "reporter": "anonymous"
        }
    ],
    "3826005": [
        {
            "dateadded": "2026-04-19 15:47:08 UTC",
            "url": "http://219.155.253.184:58047/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:43:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826005/",
            "reporter": "geenensp"
        }
    ],
    "3826004": [
        {
            "dateadded": "2026-04-19 15:47:07 UTC",
            "url": "http://124.131.151.187:36476/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826004/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3826003": [
        {
            "dateadded": "2026-04-19 15:45:15 UTC",
            "url": "http://42.176.28.143:35701/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:56:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826003/",
            "reporter": "geenensp"
        }
    ],
    "3826002": [
        {
            "dateadded": "2026-04-19 15:41:09 UTC",
            "url": "https://r31a6-gate.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826002/",
            "reporter": "anonymous"
        }
    ],
    "3826001": [
        {
            "dateadded": "2026-04-19 15:37:16 UTC",
            "url": "http://182.127.38.189:37942/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826001/",
            "reporter": "geenensp"
        }
    ],
    "3826000": [
        {
            "dateadded": "2026-04-19 15:36:08 UTC",
            "url": "https://cliffbala.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3826000/",
            "reporter": "anonymous"
        }
    ],
    "3825999": [
        {
            "dateadded": "2026-04-19 15:32:11 UTC",
            "url": "http://115.50.185.64:59180/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:48:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825999/",
            "reporter": "geenensp"
        }
    ],
    "3825998": [
        {
            "dateadded": "2026-04-19 15:31:19 UTC",
            "url": "http://123.5.157.109:55274/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825998/",
            "reporter": "geenensp"
        }
    ],
    "3825997": [
        {
            "dateadded": "2026-04-19 15:30:10 UTC",
            "url": "https://retailree.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825997/",
            "reporter": "anonymous"
        }
    ],
    "3825996": [
        {
            "dateadded": "2026-04-19 15:27:26 UTC",
            "url": "http://117.214.230.175:52561/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825996/",
            "reporter": "geenensp"
        }
    ],
    "3825995": [
        {
            "dateadded": "2026-04-19 15:27:07 UTC",
            "url": "http://42.177.231.108:58979/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:52:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825995/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825994": [
        {
            "dateadded": "2026-04-19 15:24:14 UTC",
            "url": "https://ul9d3.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825994/",
            "reporter": "anonymous"
        }
    ],
    "3825993": [
        {
            "dateadded": "2026-04-19 15:18:10 UTC",
            "url": "https://voltquarry.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825993/",
            "reporter": "anonymous"
        }
    ],
    "3825992": [
        {
            "dateadded": "2026-04-19 15:15:20 UTC",
            "url": "http://42.176.28.143:35701/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:40:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825992/",
            "reporter": "geenensp"
        }
    ],
    "3825991": [
        {
            "dateadded": "2026-04-19 15:14:11 UTC",
            "url": "http://185.97.113.40:46371/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:55:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825991/",
            "reporter": "geenensp"
        }
    ],
    "3825990": [
        {
            "dateadded": "2026-04-19 15:14:10 UTC",
            "url": "https://posterharbor.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825990/",
            "reporter": "anonymous"
        }
    ],
    "3825989": [
        {
            "dateadded": "2026-04-19 15:11:17 UTC",
            "url": "http://154.248.175.224:50396/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:56:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825989/",
            "reporter": "geenensp"
        }
    ],
    "3825988": [
        {
            "dateadded": "2026-04-19 15:10:13 UTC",
            "url": "http://125.41.224.179:53192/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:09:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825988/",
            "reporter": "geenensp"
        }
    ],
    "3825987": [
        {
            "dateadded": "2026-04-19 15:08:17 UTC",
            "url": "http://185.97.113.40:46371/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825987/",
            "reporter": "geenensp"
        }
    ],
    "3825986": [
        {
            "dateadded": "2026-04-19 15:08:13 UTC",
            "url": "https://arnubx.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825986/",
            "reporter": "anonymous"
        }
    ],
    "3825985": [
        {
            "dateadded": "2026-04-19 15:03:10 UTC",
            "url": "https://63ev.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825985/",
            "reporter": "anonymous"
        }
    ],
    "3825984": [
        {
            "dateadded": "2026-04-19 15:02:15 UTC",
            "url": "http://115.50.227.85:60753/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825984/",
            "reporter": "geenensp"
        }
    ],
    "3825983": [
        {
            "dateadded": "2026-04-19 15:02:10 UTC",
            "url": "http://105.224.218.80:40699/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:50:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825983/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825982": [
        {
            "dateadded": "2026-04-19 15:00:10 UTC",
            "url": "https://pipelinestudi.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 15:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825982/",
            "reporter": "anonymous"
        }
    ],
    "3825981": [
        {
            "dateadded": "2026-04-19 14:57:20 UTC",
            "url": "http://59.184.60.64:55144/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 14:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825981/",
            "reporter": "geenensp"
        }
    ],
    "3825980": [
        {
            "dateadded": "2026-04-19 14:51:11 UTC",
            "url": "https://g9jy.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 14:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825980/",
            "reporter": "anonymous"
        }
    ],
    "3825979": [
        {
            "dateadded": "2026-04-19 14:50:22 UTC",
            "url": "http://42.5.74.106:42219/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825979/",
            "reporter": "geenensp"
        }
    ],
    "3825978": [
        {
            "dateadded": "2026-04-19 14:50:19 UTC",
            "url": "http://125.45.64.231:39176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825978/",
            "reporter": "geenensp"
        }
    ],
    "3825977": [
        {
            "dateadded": "2026-04-19 14:48:19 UTC",
            "url": "http://182.117.166.228:48481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825977/",
            "reporter": "geenensp"
        }
    ],
    "3825976": [
        {
            "dateadded": "2026-04-19 14:46:14 UTC",
            "url": "http://125.41.224.179:53192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:54:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825976/",
            "reporter": "geenensp"
        }
    ],
    "3825975": [
        {
            "dateadded": "2026-04-19 14:45:11 UTC",
            "url": "https://golgath.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 14:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825975/",
            "reporter": "anonymous"
        }
    ],
    "3825974": [
        {
            "dateadded": "2026-04-19 14:37:08 UTC",
            "url": "https://traile1-wave.craftf1uctuate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 14:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825974/",
            "reporter": "anonymous"
        }
    ],
    "3825973": [
        {
            "dateadded": "2026-04-19 14:35:19 UTC",
            "url": "http://178.78.57.64:45346/i",
            "url_status": "offline",
            "last_online": "2026-04-25 17:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825973/",
            "reporter": "geenensp"
        }
    ],
    "3825972": [
        {
            "dateadded": "2026-04-19 14:30:20 UTC",
            "url": "http://111.164.69.142:57439/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:52:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825972/",
            "reporter": "geenensp"
        }
    ],
    "3825971": [
        {
            "dateadded": "2026-04-19 14:28:09 UTC",
            "url": "http://113.230.52.12:52912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 11:58:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825971/",
            "reporter": "geenensp"
        }
    ],
    "3825970": [
        {
            "dateadded": "2026-04-19 14:27:09 UTC",
            "url": "http://219.157.56.31:44224/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:39:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825970/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825969": [
        {
            "dateadded": "2026-04-19 14:24:20 UTC",
            "url": "http://42.5.74.106:42219/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825969/",
            "reporter": "geenensp"
        }
    ],
    "3825968": [
        {
            "dateadded": "2026-04-19 14:17:07 UTC",
            "url": "http://27.213.219.78:43957/i",
            "url_status": "offline",
            "last_online": "2026-04-24 22:20:42 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825968/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825967": [
        {
            "dateadded": "2026-04-19 14:07:08 UTC",
            "url": "http://105.224.218.80:40699/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825967/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825966": [
        {
            "dateadded": "2026-04-19 14:05:18 UTC",
            "url": "http://178.78.57.64:45346/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 18:35:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825966/",
            "reporter": "geenensp"
        }
    ],
    "3825965": [
        {
            "dateadded": "2026-04-19 14:01:14 UTC",
            "url": "https://light-task6.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 14:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825965/",
            "reporter": "anonymous"
        }
    ],
    "3825964": [
        {
            "dateadded": "2026-04-19 14:00:21 UTC",
            "url": "http://42.54.173.14:44279/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825964/",
            "reporter": "geenensp"
        }
    ],
    "3825963": [
        {
            "dateadded": "2026-04-19 13:54:08 UTC",
            "url": "https://heavy-load5.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825963/",
            "reporter": "anonymous"
        }
    ],
    "3825962": [
        {
            "dateadded": "2026-04-19 13:53:21 UTC",
            "url": "http://110.37.76.196:35133/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825962/",
            "reporter": "geenensp"
        }
    ],
    "3825961": [
        {
            "dateadded": "2026-04-19 13:51:21 UTC",
            "url": "http://110.37.66.64:34561/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:53:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825961/",
            "reporter": "geenensp"
        }
    ],
    "3825960": [
        {
            "dateadded": "2026-04-19 13:50:09 UTC",
            "url": "https://large-pack4.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825960/",
            "reporter": "anonymous"
        }
    ],
    "3825959": [
        {
            "dateadded": "2026-04-19 13:48:13 UTC",
            "url": "http://123.7.227.210:49002/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825959/",
            "reporter": "geenensp"
        }
    ],
    "3825958": [
        {
            "dateadded": "2026-04-19 13:45:14 UTC",
            "url": "http://117.216.53.82:54164/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:42:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825958/",
            "reporter": "geenensp"
        }
    ],
    "3825957": [
        {
            "dateadded": "2026-04-19 13:43:13 UTC",
            "url": "https://small-gift3.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825957/",
            "reporter": "anonymous"
        }
    ],
    "3825956": [
        {
            "dateadded": "2026-04-19 13:39:08 UTC",
            "url": "https://open-box2.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825956/",
            "reporter": "anonymous"
        }
    ],
    "3825955": [
        {
            "dateadded": "2026-04-19 13:35:15 UTC",
            "url": "http://110.37.100.152:34581/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825955/",
            "reporter": "geenensp"
        }
    ],
    "3825954": [
        {
            "dateadded": "2026-04-19 13:32:07 UTC",
            "url": "https://book-shelf1.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825954/",
            "reporter": "anonymous"
        }
    ],
    "3825953": [
        {
            "dateadded": "2026-04-19 13:31:18 UTC",
            "url": "http://110.37.100.152:34581/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825953/",
            "reporter": "geenensp"
        }
    ],
    "3825952": [
        {
            "dateadded": "2026-04-19 13:27:16 UTC",
            "url": "https://fresh-bun6.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825952/",
            "reporter": "anonymous"
        }
    ],
    "3825951": [
        {
            "dateadded": "2026-04-19 13:27:09 UTC",
            "url": "http://160.30.142.2:38272/i",
            "url_status": "offline",
            "last_online": "2026-04-20 05:17:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825951/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825949": [
        {
            "dateadded": "2026-04-19 13:25:21 UTC",
            "url": "http://110.37.66.64:34561/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:52:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825949/",
            "reporter": "geenensp"
        }
    ],
    "3825950": [
        {
            "dateadded": "2026-04-19 13:25:21 UTC",
            "url": "http://42.86.168.159:46902/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825950/",
            "reporter": "geenensp"
        }
    ],
    "3825948": [
        {
            "dateadded": "2026-04-19 13:24:22 UTC",
            "url": "http://182.117.69.253:54165/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825948/",
            "reporter": "geenensp"
        }
    ],
    "3825946": [
        {
            "dateadded": "2026-04-19 13:23:18 UTC",
            "url": "http://27.207.232.57:56216/i",
            "url_status": "offline",
            "last_online": "2026-04-19 13:23:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825946/",
            "reporter": "geenensp"
        }
    ],
    "3825947": [
        {
            "dateadded": "2026-04-19 13:23:18 UTC",
            "url": "http://27.207.232.57:56216/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 13:23:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825947/",
            "reporter": "geenensp"
        }
    ],
    "3825945": [
        {
            "dateadded": "2026-04-19 13:22:09 UTC",
            "url": "https://cool-milk5.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825945/",
            "reporter": "anonymous"
        }
    ],
    "3825944": [
        {
            "dateadded": "2026-04-19 13:19:23 UTC",
            "url": "http://117.216.53.82:54164/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825944/",
            "reporter": "geenensp"
        }
    ],
    "3825943": [
        {
            "dateadded": "2026-04-19 13:19:20 UTC",
            "url": "http://153.3.11.210:52981/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825943/",
            "reporter": "geenensp"
        }
    ],
    "3825942": [
        {
            "dateadded": "2026-04-19 13:18:10 UTC",
            "url": "http://27.220.243.61:53157/i",
            "url_status": "offline",
            "last_online": "2026-04-19 13:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825942/",
            "reporter": "geenensp"
        }
    ],
    "3825941": [
        {
            "dateadded": "2026-04-19 13:15:09 UTC",
            "url": "https://hot-grill4.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825941/",
            "reporter": "anonymous"
        }
    ],
    "3825940": [
        {
            "dateadded": "2026-04-19 13:14:12 UTC",
            "url": "http://81.215.173.87:40631/i",
            "url_status": "offline",
            "last_online": "2026-04-19 13:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825940/",
            "reporter": "geenensp"
        }
    ],
    "3825939": [
        {
            "dateadded": "2026-04-19 13:11:16 UTC",
            "url": "http://123.9.101.109:59602/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:36:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825939/",
            "reporter": "geenensp"
        }
    ],
    "3825938": [
        {
            "dateadded": "2026-04-19 13:10:11 UTC",
            "url": "https://sweet-cake3.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825938/",
            "reporter": "anonymous"
        }
    ],
    "3825937": [
        {
            "dateadded": "2026-04-19 13:07:06 UTC",
            "url": "http://110.36.95.252:49490/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:29:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825937/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825936": [
        {
            "dateadded": "2026-04-19 13:04:09 UTC",
            "url": "https://tasty-pie2.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 13:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825936/",
            "reporter": "anonymous"
        }
    ],
    "3825934": [
        {
            "dateadded": "2026-04-19 12:59:23 UTC",
            "url": "http://59.42.88.166:56735/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825934/",
            "reporter": "geenensp"
        }
    ],
    "3825935": [
        {
            "dateadded": "2026-04-19 12:59:23 UTC",
            "url": "http://27.220.243.61:53157/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:59:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825935/",
            "reporter": "geenensp"
        }
    ],
    "3825933": [
        {
            "dateadded": "2026-04-19 12:59:08 UTC",
            "url": "https://home-chef1.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825933/",
            "reporter": "anonymous"
        }
    ],
    "3825932": [
        {
            "dateadded": "2026-04-19 12:58:18 UTC",
            "url": "http://72.255.30.244:57291/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:33:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825932/",
            "reporter": "geenensp"
        }
    ],
    "3825931": [
        {
            "dateadded": "2026-04-19 12:57:16 UTC",
            "url": "http://42.86.168.159:46902/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 15:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825931/",
            "reporter": "geenensp"
        }
    ],
    "3825930": [
        {
            "dateadded": "2026-04-19 12:57:09 UTC",
            "url": "http://125.42.125.47:48099/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825930/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825929": [
        {
            "dateadded": "2026-04-19 12:53:10 UTC",
            "url": "https://cloud-node6.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825929/",
            "reporter": "anonymous"
        }
    ],
    "3825928": [
        {
            "dateadded": "2026-04-19 12:52:08 UTC",
            "url": "http://168.195.7.78:51932/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:02:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825928/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825927": [
        {
            "dateadded": "2026-04-19 12:51:19 UTC",
            "url": "http://61.53.103.83:36096/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:44:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825927/",
            "reporter": "geenensp"
        }
    ],
    "3825926": [
        {
            "dateadded": "2026-04-19 12:48:14 UTC",
            "url": "https://data-base5.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825926/",
            "reporter": "anonymous"
        }
    ],
    "3825925": [
        {
            "dateadded": "2026-04-19 12:42:10 UTC",
            "url": "http://125.45.64.231:39176/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825925/",
            "reporter": "geenensp"
        }
    ],
    "3825924": [
        {
            "dateadded": "2026-04-19 12:42:09 UTC",
            "url": "https://file-list4.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825924/",
            "reporter": "anonymous"
        }
    ],
    "3825923": [
        {
            "dateadded": "2026-04-19 12:41:27 UTC",
            "url": "http://123.9.101.109:59602/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825923/",
            "reporter": "geenensp"
        }
    ],
    "3825922": [
        {
            "dateadded": "2026-04-19 12:37:15 UTC",
            "url": "https://page-link3.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825922/",
            "reporter": "anonymous"
        }
    ],
    "3825921": [
        {
            "dateadded": "2026-04-19 12:30:11 UTC",
            "url": "https://site-map2.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825921/",
            "reporter": "anonymous"
        }
    ],
    "3825920": [
        {
            "dateadded": "2026-04-19 12:28:22 UTC",
            "url": "http://115.49.88.187:38196/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:25:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825920/",
            "reporter": "geenensp"
        }
    ],
    "3825919": [
        {
            "dateadded": "2026-04-19 12:27:18 UTC",
            "url": "http://61.53.103.83:36096/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825919/",
            "reporter": "geenensp"
        }
    ],
    "3825918": [
        {
            "dateadded": "2026-04-19 12:26:11 UTC",
            "url": "https://user-info1.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825918/",
            "reporter": "anonymous"
        }
    ],
    "3825917": [
        {
            "dateadded": "2026-04-19 12:19:22 UTC",
            "url": "http://119.185.243.108:50826/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:42:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825917/",
            "reporter": "geenensp"
        }
    ],
    "3825916": [
        {
            "dateadded": "2026-04-19 12:19:08 UTC",
            "url": "https://boat-tour6.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825916/",
            "reporter": "anonymous"
        }
    ],
    "3825915": [
        {
            "dateadded": "2026-04-19 12:15:16 UTC",
            "url": "https://island-trip5.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825915/",
            "reporter": "anonymous"
        }
    ],
    "3825914": [
        {
            "dateadded": "2026-04-19 12:10:26 UTC",
            "url": "http://39.74.51.68:38320/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:10:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825914/",
            "reporter": "geenensp"
        }
    ],
    "3825913": [
        {
            "dateadded": "2026-04-19 12:09:14 UTC",
            "url": "https://blue-wave4.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825913/",
            "reporter": "anonymous"
        }
    ],
    "3825912": [
        {
            "dateadded": "2026-04-19 12:07:09 UTC",
            "url": "http://123.14.99.17:42926/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:15:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825912/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825911": [
        {
            "dateadded": "2026-04-19 12:03:16 UTC",
            "url": "https://palm-tree3.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 12:03:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825911/",
            "reporter": "anonymous"
        }
    ],
    "3825910": [
        {
            "dateadded": "2026-04-19 11:57:13 UTC",
            "url": "https://sand-beach2.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825910/",
            "reporter": "anonymous"
        }
    ],
    "3825909": [
        {
            "dateadded": "2026-04-19 11:52:17 UTC",
            "url": "https://ocean-view1.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:52:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825909/",
            "reporter": "anonymous"
        }
    ],
    "3825908": [
        {
            "dateadded": "2026-04-19 11:46:15 UTC",
            "url": "https://pure-void6.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825908/",
            "reporter": "anonymous"
        }
    ],
    "3825907": [
        {
            "dateadded": "2026-04-19 11:43:29 UTC",
            "url": "http://61.52.88.221:45987/i",
            "url_status": "offline",
            "last_online": "2026-04-21 21:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825907/",
            "reporter": "geenensp"
        }
    ],
    "3825906": [
        {
            "dateadded": "2026-04-19 11:40:16 UTC",
            "url": "https://smart-auth5.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825906/",
            "reporter": "anonymous"
        }
    ],
    "3825905": [
        {
            "dateadded": "2026-04-19 11:38:32 UTC",
            "url": "http://125.44.54.187:48002/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:47:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825905/",
            "reporter": "geenensp"
        }
    ],
    "3825904": [
        {
            "dateadded": "2026-04-19 11:37:26 UTC",
            "url": "http://39.74.51.68:38320/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825904/",
            "reporter": "geenensp"
        }
    ],
    "3825903": [
        {
            "dateadded": "2026-04-19 11:35:18 UTC",
            "url": "http://119.185.243.108:50826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 06:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825903/",
            "reporter": "geenensp"
        }
    ],
    "3825902": [
        {
            "dateadded": "2026-04-19 11:34:14 UTC",
            "url": "https://cloud-gate4.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825902/",
            "reporter": "anonymous"
        }
    ],
    "3825896": [
        {
            "dateadded": "2026-04-19 11:29:40 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825896/",
            "reporter": "abuse_ch"
        }
    ],
    "3825897": [
        {
            "dateadded": "2026-04-19 11:29:40 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825897/",
            "reporter": "abuse_ch"
        }
    ],
    "3825898": [
        {
            "dateadded": "2026-04-19 11:29:40 UTC",
            "url": "http://89.190.156.34/bins/hoho.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825898/",
            "reporter": "abuse_ch"
        }
    ],
    "3825899": [
        {
            "dateadded": "2026-04-19 11:29:40 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825899/",
            "reporter": "abuse_ch"
        }
    ],
    "3825900": [
        {
            "dateadded": "2026-04-19 11:29:40 UTC",
            "url": "http://89.190.156.34/bins/hoho.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825900/",
            "reporter": "abuse_ch"
        }
    ],
    "3825901": [
        {
            "dateadded": "2026-04-19 11:29:40 UTC",
            "url": "http://89.190.156.34/bins/hoho.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825901/",
            "reporter": "abuse_ch"
        }
    ],
    "3825894": [
        {
            "dateadded": "2026-04-19 11:29:38 UTC",
            "url": "http://89.190.156.34/bins/hoho.i586",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825894/",
            "reporter": "abuse_ch"
        }
    ],
    "3825895": [
        {
            "dateadded": "2026-04-19 11:29:38 UTC",
            "url": "http://89.190.156.34/bins/hoho.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825895/",
            "reporter": "abuse_ch"
        }
    ],
    "3825893": [
        {
            "dateadded": "2026-04-19 11:29:27 UTC",
            "url": "http://85.11.167.21/scar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825893/",
            "reporter": "abuse_ch"
        }
    ],
    "3825888": [
        {
            "dateadded": "2026-04-19 11:29:20 UTC",
            "url": "http://89.190.156.34/bins/hoho.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825888/",
            "reporter": "abuse_ch"
        }
    ],
    "3825889": [
        {
            "dateadded": "2026-04-19 11:29:20 UTC",
            "url": "http://89.190.156.34/bins/hoho.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825889/",
            "reporter": "abuse_ch"
        }
    ],
    "3825890": [
        {
            "dateadded": "2026-04-19 11:29:20 UTC",
            "url": "http://89.190.156.34/bins/hoho.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825890/",
            "reporter": "abuse_ch"
        }
    ],
    "3825891": [
        {
            "dateadded": "2026-04-19 11:29:20 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825891/",
            "reporter": "abuse_ch"
        }
    ],
    "3825892": [
        {
            "dateadded": "2026-04-19 11:29:20 UTC",
            "url": "http://89.190.156.34/bins/hoho.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825892/",
            "reporter": "abuse_ch"
        }
    ],
    "3825885": [
        {
            "dateadded": "2026-04-19 11:29:18 UTC",
            "url": "http://45.156.87.140/scar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825885/",
            "reporter": "abuse_ch"
        }
    ],
    "3825886": [
        {
            "dateadded": "2026-04-19 11:29:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825886/",
            "reporter": "abuse_ch"
        }
    ],
    "3825887": [
        {
            "dateadded": "2026-04-19 11:29:18 UTC",
            "url": "http://89.190.156.34/bins/hoho.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825887/",
            "reporter": "abuse_ch"
        }
    ],
    "3825884": [
        {
            "dateadded": "2026-04-19 11:29:14 UTC",
            "url": "https://web-tunnel3.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825884/",
            "reporter": "anonymous"
        }
    ],
    "3825880": [
        {
            "dateadded": "2026-04-19 11:29:12 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825880/",
            "reporter": "abuse_ch"
        }
    ],
    "3825881": [
        {
            "dateadded": "2026-04-19 11:29:12 UTC",
            "url": "http://89.190.156.34/bins/hoho.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825881/",
            "reporter": "abuse_ch"
        }
    ],
    "3825882": [
        {
            "dateadded": "2026-04-19 11:29:12 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825882/",
            "reporter": "abuse_ch"
        }
    ],
    "3825883": [
        {
            "dateadded": "2026-04-19 11:29:12 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825883/",
            "reporter": "abuse_ch"
        }
    ],
    "3825879": [
        {
            "dateadded": "2026-04-19 11:29:11 UTC",
            "url": "http://89.190.156.34/bins/hoho.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825879/",
            "reporter": "abuse_ch"
        }
    ],
    "3825875": [
        {
            "dateadded": "2026-04-19 11:29:09 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825875/",
            "reporter": "abuse_ch"
        }
    ],
    "3825876": [
        {
            "dateadded": "2026-04-19 11:29:09 UTC",
            "url": "http://89.190.156.34/bins/hoho.mips",
            "url_status": "online",
            "last_online": "2026-04-27 13:31:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825876/",
            "reporter": "abuse_ch"
        }
    ],
    "3825877": [
        {
            "dateadded": "2026-04-19 11:29:09 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825877/",
            "reporter": "abuse_ch"
        }
    ],
    "3825878": [
        {
            "dateadded": "2026-04-19 11:29:09 UTC",
            "url": "http://89.190.156.34/bins/hoho.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825878/",
            "reporter": "abuse_ch"
        }
    ],
    "3825874": [
        {
            "dateadded": "2026-04-19 11:29:08 UTC",
            "url": "http://85.11.167.21/x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825874/",
            "reporter": "abuse_ch"
        }
    ],
    "3825873": [
        {
            "dateadded": "2026-04-19 11:24:15 UTC",
            "url": "https://secure-node2.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825873/",
            "reporter": "anonymous"
        }
    ],
    "3825872": [
        {
            "dateadded": "2026-04-19 11:23:34 UTC",
            "url": "http://163.142.95.184:43603/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:13:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825872/",
            "reporter": "geenensp"
        }
    ],
    "3825871": [
        {
            "dateadded": "2026-04-19 11:18:14 UTC",
            "url": "https://data-proxy1.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825871/",
            "reporter": "anonymous"
        }
    ],
    "3825870": [
        {
            "dateadded": "2026-04-19 11:15:32 UTC",
            "url": "http://117.217.47.107:59022/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:15:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825870/",
            "reporter": "geenensp"
        }
    ],
    "3825869": [
        {
            "dateadded": "2026-04-19 11:13:15 UTC",
            "url": "http://125.44.54.187:48002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825869/",
            "reporter": "geenensp"
        }
    ],
    "3825868": [
        {
            "dateadded": "2026-04-19 11:12:14 UTC",
            "url": "https://sport-news6.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825868/",
            "reporter": "anonymous"
        }
    ],
    "3825867": [
        {
            "dateadded": "2026-04-19 11:11:17 UTC",
            "url": "http://42.232.239.6:37573/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:40:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825867/",
            "reporter": "geenensp"
        }
    ],
    "3825866": [
        {
            "dateadded": "2026-04-19 11:07:37 UTC",
            "url": "http://119.117.62.95:34258/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825866/",
            "reporter": "geenensp"
        }
    ],
    "3825865": [
        {
            "dateadded": "2026-04-19 11:07:16 UTC",
            "url": "https://final-game5.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:07:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825865/",
            "reporter": "anonymous"
        }
    ],
    "3825864": [
        {
            "dateadded": "2026-04-19 11:05:43 UTC",
            "url": "https://x.vodxz.icu/d/amoookde.x",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "backdoor",
                "elf"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825864/",
            "reporter": "anonymous"
        }
    ],
    "3825863": [
        {
            "dateadded": "2026-04-19 11:05:20 UTC",
            "url": "https://fd.v2downf.shop//tmp/f/10dfff942805d90d6ebb28bd58093653_20251208021850.so",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "backdoor"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825863/",
            "reporter": "anonymous"
        }
    ],
    "3825862": [
        {
            "dateadded": "2026-04-19 11:05:19 UTC",
            "url": "https://oblionts.com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/v1",
            "url_status": "offline",
            "last_online": "2026-04-20 11:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                " Dropper",
                "ClickFix",
                "shellcode"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825862/",
            "reporter": "jmnugent"
        }
    ],
    "3825861": [
        {
            "dateadded": "2026-04-19 11:05:15 UTC",
            "url": "https://oblionts.com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/loc1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                " Dropper",
                "ClickFix",
                "shellcode"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825861/",
            "reporter": "jmnugent"
        }
    ],
    "3825860": [
        {
            "dateadded": "2026-04-19 11:05:14 UTC",
            "url": "https://tg-xxooxx888.8964.mom/loader.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825860/",
            "reporter": "geenensp"
        }
    ],
    "3825858": [
        {
            "dateadded": "2026-04-19 11:05:09 UTC",
            "url": "http://123.10.146.43:46420/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825858/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825859": [
        {
            "dateadded": "2026-04-19 11:05:09 UTC",
            "url": "http://176.65.132.178/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825859/",
            "reporter": "geenensp"
        }
    ],
    "3825857": [
        {
            "dateadded": "2026-04-19 11:00:15 UTC",
            "url": "https://best-player4.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 11:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825857/",
            "reporter": "anonymous"
        }
    ],
    "3825856": [
        {
            "dateadded": "2026-04-19 10:55:11 UTC",
            "url": "https://gold-medal3.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825856/",
            "reporter": "anonymous"
        }
    ],
    "3825855": [
        {
            "dateadded": "2026-04-19 10:51:13 UTC",
            "url": "https://team-score2.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825855/",
            "reporter": "anonymous"
        }
    ],
    "3825854": [
        {
            "dateadded": "2026-04-19 10:47:34 UTC",
            "url": "http://117.217.47.107:59022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825854/",
            "reporter": "geenensp"
        }
    ],
    "3825853": [
        {
            "dateadded": "2026-04-19 10:45:19 UTC",
            "url": "http://42.232.239.6:37573/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:09:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825853/",
            "reporter": "geenensp"
        }
    ],
    "3825851": [
        {
            "dateadded": "2026-04-19 10:44:23 UTC",
            "url": "http://61.52.156.170:43245/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825851/",
            "reporter": "geenensp"
        }
    ],
    "3825852": [
        {
            "dateadded": "2026-04-19 10:44:23 UTC",
            "url": "http://61.52.156.170:43245/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825852/",
            "reporter": "geenensp"
        }
    ],
    "3825850": [
        {
            "dateadded": "2026-04-19 10:44:10 UTC",
            "url": "https://fast-match1.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825850/",
            "reporter": "anonymous"
        }
    ],
    "3825849": [
        {
            "dateadded": "2026-04-19 10:42:21 UTC",
            "url": "http://49.89.101.139:51023/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825849/",
            "reporter": "geenensp"
        }
    ],
    "3825848": [
        {
            "dateadded": "2026-04-19 10:39:09 UTC",
            "url": "https://live-feed6.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825848/",
            "reporter": "anonymous"
        }
    ],
    "3825847": [
        {
            "dateadded": "2026-04-19 10:37:35 UTC",
            "url": "http://222.137.79.95:60773/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:57:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825847/",
            "reporter": "geenensp"
        }
    ],
    "3825846": [
        {
            "dateadded": "2026-04-19 10:32:14 UTC",
            "url": "https://film-edit5.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825846/",
            "reporter": "anonymous"
        }
    ],
    "3825845": [
        {
            "dateadded": "2026-04-19 10:30:22 UTC",
            "url": "http://49.89.101.139:51023/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825845/",
            "reporter": "geenensp"
        }
    ],
    "3825844": [
        {
            "dateadded": "2026-04-19 10:28:09 UTC",
            "url": "https://photo-shot4.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825844/",
            "reporter": "anonymous"
        }
    ],
    "3825843": [
        {
            "dateadded": "2026-04-19 10:22:09 UTC",
            "url": "https://sound-mix3.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825843/",
            "reporter": "anonymous"
        }
    ],
    "3825842": [
        {
            "dateadded": "2026-04-19 10:16:07 UTC",
            "url": "https://video-clip2.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825842/",
            "reporter": "anonymous"
        }
    ],
    "3825841": [
        {
            "dateadded": "2026-04-19 10:13:08 UTC",
            "url": "https://media-info1.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825841/",
            "reporter": "anonymous"
        }
    ],
    "3825840": [
        {
            "dateadded": "2026-04-19 10:09:09 UTC",
            "url": "https://soft-paper6.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825840/",
            "reporter": "anonymous"
        }
    ],
    "3825839": [
        {
            "dateadded": "2026-04-19 10:00:15 UTC",
            "url": "https://thick-file5.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 10:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825839/",
            "reporter": "anonymous"
        }
    ],
    "3825838": [
        {
            "dateadded": "2026-04-19 09:57:14 UTC",
            "url": "http://222.137.79.95:60773/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:59:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825838/",
            "reporter": "geenensp"
        }
    ],
    "3825837": [
        {
            "dateadded": "2026-04-19 09:57:13 UTC",
            "url": "http://42.228.42.81:35116/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:31:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825837/",
            "reporter": "geenensp"
        }
    ],
    "3825836": [
        {
            "dateadded": "2026-04-19 09:54:10 UTC",
            "url": "https://red-mark4.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825836/",
            "reporter": "anonymous"
        }
    ],
    "3825835": [
        {
            "dateadded": "2026-04-19 09:50:19 UTC",
            "url": "http://125.41.228.146:57103/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:52:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825835/",
            "reporter": "geenensp"
        }
    ],
    "3825834": [
        {
            "dateadded": "2026-04-19 09:48:18 UTC",
            "url": "http://125.41.168.154:51903/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:28:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825834/",
            "reporter": "geenensp"
        }
    ],
    "3825833": [
        {
            "dateadded": "2026-04-19 09:48:06 UTC",
            "url": "https://blue-pen3.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:48:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825833/",
            "reporter": "anonymous"
        }
    ],
    "3825832": [
        {
            "dateadded": "2026-04-19 09:45:18 UTC",
            "url": "http://113.233.113.106:40495/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:38:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825832/",
            "reporter": "geenensp"
        }
    ],
    "3825831": [
        {
            "dateadded": "2026-04-19 09:43:10 UTC",
            "url": "https://white-page2.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825831/",
            "reporter": "anonymous"
        }
    ],
    "3825830": [
        {
            "dateadded": "2026-04-19 09:37:11 UTC",
            "url": "https://black-ink1.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825830/",
            "reporter": "anonymous"
        }
    ],
    "3825829": [
        {
            "dateadded": "2026-04-19 09:35:15 UTC",
            "url": "http://36.70.192.47:42680/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825829/",
            "reporter": "geenensp"
        }
    ],
    "3825828": [
        {
            "dateadded": "2026-04-19 09:34:18 UTC",
            "url": "http://42.228.42.81:35116/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:46:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825828/",
            "reporter": "geenensp"
        }
    ],
    "3825827": [
        {
            "dateadded": "2026-04-19 09:32:08 UTC",
            "url": "https://night-view6.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825827/",
            "reporter": "anonymous"
        }
    ],
    "3825826": [
        {
            "dateadded": "2026-04-19 09:26:07 UTC",
            "url": "https://main-square5.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825826/",
            "reporter": "anonymous"
        }
    ],
    "3825825": [
        {
            "dateadded": "2026-04-19 09:25:25 UTC",
            "url": "http://210.10.180.153:42905/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825825/",
            "reporter": "geenensp"
        }
    ],
    "3825824": [
        {
            "dateadded": "2026-04-19 09:24:18 UTC",
            "url": "http://110.37.3.239:52184/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:23:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825824/",
            "reporter": "geenensp"
        }
    ],
    "3825823": [
        {
            "dateadded": "2026-04-19 09:21:14 UTC",
            "url": "http://125.41.168.154:51903/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:56:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825823/",
            "reporter": "geenensp"
        }
    ],
    "3825822": [
        {
            "dateadded": "2026-04-19 09:21:09 UTC",
            "url": "https://old-street4.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825822/",
            "reporter": "anonymous"
        }
    ],
    "3825821": [
        {
            "dateadded": "2026-04-19 09:19:17 UTC",
            "url": "http://123.11.73.96:52320/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:47:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825821/",
            "reporter": "geenensp"
        }
    ],
    "3825820": [
        {
            "dateadded": "2026-04-19 09:17:12 UTC",
            "url": "http://42.239.252.55:43722/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825820/",
            "reporter": "geenensp"
        }
    ],
    "3825819": [
        {
            "dateadded": "2026-04-19 09:16:19 UTC",
            "url": "http://113.233.113.106:40495/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:34:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825819/",
            "reporter": "geenensp"
        }
    ],
    "3825818": [
        {
            "dateadded": "2026-04-19 09:16:18 UTC",
            "url": "http://175.148.158.226:55588/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:26:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825818/",
            "reporter": "geenensp"
        }
    ],
    "3825817": [
        {
            "dateadded": "2026-04-19 09:14:09 UTC",
            "url": "https://urban-style3.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825817/",
            "reporter": "anonymous"
        }
    ],
    "3825816": [
        {
            "dateadded": "2026-04-19 09:09:16 UTC",
            "url": "http://175.151.227.23:32919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825816/",
            "reporter": "geenensp"
        }
    ],
    "3825815": [
        {
            "dateadded": "2026-04-19 09:09:09 UTC",
            "url": "https://modern-base2.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825815/",
            "reporter": "anonymous"
        }
    ],
    "3825814": [
        {
            "dateadded": "2026-04-19 09:07:07 UTC",
            "url": "http://36.89.252.178:38731/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:35:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825814/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825813": [
        {
            "dateadded": "2026-04-19 09:04:12 UTC",
            "url": "https://city-plan1.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 09:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825813/",
            "reporter": "anonymous"
        }
    ],
    "3825812": [
        {
            "dateadded": "2026-04-19 08:59:19 UTC",
            "url": "http://39.78.47.223:45082/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:03:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825812/",
            "reporter": "geenensp"
        }
    ],
    "3825811": [
        {
            "dateadded": "2026-04-19 08:59:09 UTC",
            "url": "https://green-yard6.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825811/",
            "reporter": "anonymous"
        }
    ],
    "3825810": [
        {
            "dateadded": "2026-04-19 08:57:06 UTC",
            "url": "http://112.248.185.196:54532/i",
            "url_status": "offline",
            "last_online": "2026-04-20 12:03:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825810/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825809": [
        {
            "dateadded": "2026-04-19 08:56:21 UTC",
            "url": "http://210.10.180.153:42905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:37:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825809/",
            "reporter": "geenensp"
        }
    ],
    "3825808": [
        {
            "dateadded": "2026-04-19 08:56:20 UTC",
            "url": "http://117.63.138.35:39589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:00:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825808/",
            "reporter": "geenensp"
        }
    ],
    "3825807": [
        {
            "dateadded": "2026-04-19 08:56:09 UTC",
            "url": "https://small-garden5.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825807/",
            "reporter": "anonymous"
        }
    ],
    "3825806": [
        {
            "dateadded": "2026-04-19 08:53:19 UTC",
            "url": "http://110.37.3.239:52184/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825806/",
            "reporter": "geenensp"
        }
    ],
    "3825805": [
        {
            "dateadded": "2026-04-19 08:51:14 UTC",
            "url": "http://175.148.158.226:55588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825805/",
            "reporter": "geenensp"
        }
    ],
    "3825804": [
        {
            "dateadded": "2026-04-19 08:51:11 UTC",
            "url": "http://42.239.252.55:43722/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825804/",
            "reporter": "geenensp"
        }
    ],
    "3825803": [
        {
            "dateadded": "2026-04-19 08:47:08 UTC",
            "url": "https://warm-house4.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825803/",
            "reporter": "anonymous"
        }
    ],
    "3825802": [
        {
            "dateadded": "2026-04-19 08:46:12 UTC",
            "url": "http://123.13.140.59:43971/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:45:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825802/",
            "reporter": "geenensp"
        }
    ],
    "3825801": [
        {
            "dateadded": "2026-04-19 08:44:16 UTC",
            "url": "http://115.60.209.65:42222/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:27:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825801/",
            "reporter": "geenensp"
        }
    ],
    "3825800": [
        {
            "dateadded": "2026-04-19 08:40:10 UTC",
            "url": "https://smart-decor3.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825800/",
            "reporter": "anonymous"
        }
    ],
    "3825799": [
        {
            "dateadded": "2026-04-19 08:38:10 UTC",
            "url": "http://105.184.190.66:34947/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:14:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825799/",
            "reporter": "geenensp"
        }
    ],
    "3825798": [
        {
            "dateadded": "2026-04-19 08:37:07 UTC",
            "url": "http://110.36.24.140:35009/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:33:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825798/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825797": [
        {
            "dateadded": "2026-04-19 08:36:18 UTC",
            "url": "http://123.134.58.161:47020/i",
            "url_status": "offline",
            "last_online": "2026-04-23 16:53:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825797/",
            "reporter": "geenensp"
        }
    ],
    "3825796": [
        {
            "dateadded": "2026-04-19 08:35:11 UTC",
            "url": "https://living-room2.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825796/",
            "reporter": "anonymous"
        }
    ],
    "3825795": [
        {
            "dateadded": "2026-04-19 08:32:07 UTC",
            "url": "http://112.248.185.196:54532/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825795/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825794": [
        {
            "dateadded": "2026-04-19 08:30:09 UTC",
            "url": "https://home-design1.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825794/",
            "reporter": "anonymous"
        }
    ],
    "3825793": [
        {
            "dateadded": "2026-04-19 08:27:17 UTC",
            "url": "http://45.156.87.194/dlr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-19 08:27:17 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825793/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825792": [
        {
            "dateadded": "2026-04-19 08:26:21 UTC",
            "url": "http://39.78.47.223:45082/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 08:59:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825792/",
            "reporter": "geenensp"
        }
    ],
    "3825791": [
        {
            "dateadded": "2026-04-19 08:26:20 UTC",
            "url": "http://39.81.219.237:37545/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:26:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825791/",
            "reporter": "geenensp"
        }
    ],
    "3825790": [
        {
            "dateadded": "2026-04-19 08:26:19 UTC",
            "url": "http://45.156.87.194/dlr.spc",
            "url_status": "offline",
            "last_online": "2026-04-19 08:26:19 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825790/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825789": [
        {
            "dateadded": "2026-04-19 08:25:19 UTC",
            "url": "http://45.156.87.194/dlr.x86",
            "url_status": "offline",
            "last_online": "2026-04-19 08:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825789/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825788": [
        {
            "dateadded": "2026-04-19 08:24:22 UTC",
            "url": "http://45.156.87.194/dlr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825788/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825783": [
        {
            "dateadded": "2026-04-19 08:24:21 UTC",
            "url": "http://45.156.87.194/dlr.mips",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825783/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825784": [
        {
            "dateadded": "2026-04-19 08:24:21 UTC",
            "url": "http://45.156.87.194/dlr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825784/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825785": [
        {
            "dateadded": "2026-04-19 08:24:21 UTC",
            "url": "http://45.156.87.194/dlr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825785/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825786": [
        {
            "dateadded": "2026-04-19 08:24:21 UTC",
            "url": "http://45.156.87.194/dlr.arm",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825786/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825787": [
        {
            "dateadded": "2026-04-19 08:24:21 UTC",
            "url": "http://45.156.87.194/dlr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825787/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825781": [
        {
            "dateadded": "2026-04-19 08:24:20 UTC",
            "url": "http://45.156.87.194/dlr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825781/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825782": [
        {
            "dateadded": "2026-04-19 08:24:20 UTC",
            "url": "http://45.156.87.194/dlr.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-194",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825782/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825780": [
        {
            "dateadded": "2026-04-19 08:24:11 UTC",
            "url": "https://old-library6.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825780/",
            "reporter": "anonymous"
        }
    ],
    "3825779": [
        {
            "dateadded": "2026-04-19 08:22:13 UTC",
            "url": "http://123.11.73.96:52320/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:58:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825779/",
            "reporter": "geenensp"
        }
    ],
    "3825778": [
        {
            "dateadded": "2026-04-19 08:22:10 UTC",
            "url": "http://185.132.53.161/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-19 08:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "185-132-53-161",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825778/",
            "reporter": "BlinkzSec"
        }
    ],
    "3825777": [
        {
            "dateadded": "2026-04-19 08:18:09 UTC",
            "url": "https://new-author5.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825777/",
            "reporter": "anonymous"
        }
    ],
    "3825776": [
        {
            "dateadded": "2026-04-19 08:16:10 UTC",
            "url": "http://115.60.209.65:42222/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:22:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825776/",
            "reporter": "geenensp"
        }
    ],
    "3825775": [
        {
            "dateadded": "2026-04-19 08:12:07 UTC",
            "url": "https://best-seller4.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825775/",
            "reporter": "anonymous"
        }
    ],
    "3825774": [
        {
            "dateadded": "2026-04-19 08:09:12 UTC",
            "url": "http://105.184.190.66:34947/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825774/",
            "reporter": "geenensp"
        }
    ],
    "3825773": [
        {
            "dateadded": "2026-04-19 08:08:10 UTC",
            "url": "https://page-number3.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825773/",
            "reporter": "anonymous"
        }
    ],
    "3825772": [
        {
            "dateadded": "2026-04-19 08:06:12 UTC",
            "url": "http://123.134.58.161:47020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 18:12:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825772/",
            "reporter": "geenensp"
        }
    ],
    "3825771": [
        {
            "dateadded": "2026-04-19 08:06:11 UTC",
            "url": "http://110.37.121.43:55232/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:53:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825771/",
            "reporter": "geenensp"
        }
    ],
    "3825770": [
        {
            "dateadded": "2026-04-19 08:01:08 UTC",
            "url": "https://read-more2.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 08:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825770/",
            "reporter": "anonymous"
        }
    ],
    "3825769": [
        {
            "dateadded": "2026-04-19 07:59:16 UTC",
            "url": "http://39.81.219.237:37545/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 04:51:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825769/",
            "reporter": "geenensp"
        }
    ],
    "3825768": [
        {
            "dateadded": "2026-04-19 07:56:12 UTC",
            "url": "https://open-book1.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825768/",
            "reporter": "anonymous"
        }
    ],
    "3825767": [
        {
            "dateadded": "2026-04-19 07:54:17 UTC",
            "url": "http://42.234.140.72:56418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 07:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825767/",
            "reporter": "geenensp"
        }
    ],
    "3825766": [
        {
            "dateadded": "2026-04-19 07:51:14 UTC",
            "url": "https://cool-drink6.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825766/",
            "reporter": "anonymous"
        }
    ],
    "3825765": [
        {
            "dateadded": "2026-04-19 07:48:16 UTC",
            "url": "http://110.39.239.253:58972/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:48:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825765/",
            "reporter": "geenensp"
        }
    ],
    "3825764": [
        {
            "dateadded": "2026-04-19 07:47:08 UTC",
            "url": "http://27.200.102.72:52819/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825764/",
            "reporter": "geenensp"
        }
    ],
    "3825763": [
        {
            "dateadded": "2026-04-19 07:47:06 UTC",
            "url": "http://42.225.68.198:35382/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825763/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825762": [
        {
            "dateadded": "2026-04-19 07:44:08 UTC",
            "url": "https://fresh-juice5.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825762/",
            "reporter": "anonymous"
        }
    ],
    "3825760": [
        {
            "dateadded": "2026-04-19 07:41:16 UTC",
            "url": "http://110.37.61.34:53937/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825760/",
            "reporter": "geenensp"
        }
    ],
    "3825761": [
        {
            "dateadded": "2026-04-19 07:41:16 UTC",
            "url": "http://110.37.121.43:55232/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:53:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825761/",
            "reporter": "geenensp"
        }
    ],
    "3825759": [
        {
            "dateadded": "2026-04-19 07:40:19 UTC",
            "url": "http://42.179.8.152:39937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:44:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825759/",
            "reporter": "geenensp"
        }
    ],
    "3825758": [
        {
            "dateadded": "2026-04-19 07:39:08 UTC",
            "url": "https://sweet-cake4.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825758/",
            "reporter": "anonymous"
        }
    ],
    "3825757": [
        {
            "dateadded": "2026-04-19 07:37:08 UTC",
            "url": "http://123.7.220.126:39624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:49:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825757/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825756": [
        {
            "dateadded": "2026-04-19 07:33:10 UTC",
            "url": "https://tasty-dish3.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825756/",
            "reporter": "anonymous"
        }
    ],
    "3825755": [
        {
            "dateadded": "2026-04-19 07:28:08 UTC",
            "url": "https://good-meal2.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825755/",
            "reporter": "anonymous"
        }
    ],
    "3825754": [
        {
            "dateadded": "2026-04-19 07:22:09 UTC",
            "url": "https://fast-food1.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825754/",
            "reporter": "anonymous"
        }
    ],
    "3825753": [
        {
            "dateadded": "2026-04-19 07:22:07 UTC",
            "url": "http://105.184.14.190:47741/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 07:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825753/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825752": [
        {
            "dateadded": "2026-04-19 07:21:23 UTC",
            "url": "http://110.39.239.253:58972/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:51:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825752/",
            "reporter": "geenensp"
        }
    ],
    "3825751": [
        {
            "dateadded": "2026-04-19 07:19:11 UTC",
            "url": "http://61.53.125.53:60502/i",
            "url_status": "offline",
            "last_online": "2026-04-19 10:30:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825751/",
            "reporter": "geenensp"
        }
    ],
    "3825750": [
        {
            "dateadded": "2026-04-19 07:17:11 UTC",
            "url": "https://live-stream6.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825750/",
            "reporter": "anonymous"
        }
    ],
    "3825749": [
        {
            "dateadded": "2026-04-19 07:16:11 UTC",
            "url": "http://110.37.61.34:53937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825749/",
            "reporter": "geenensp"
        }
    ],
    "3825748": [
        {
            "dateadded": "2026-04-19 07:14:09 UTC",
            "url": "http://117.248.31.185:33605/i",
            "url_status": "offline",
            "last_online": "2026-04-19 07:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825748/",
            "reporter": "geenensp"
        }
    ],
    "3825747": [
        {
            "dateadded": "2026-04-19 07:12:13 UTC",
            "url": "https://hot-topic5.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825747/",
            "reporter": "anonymous"
        }
    ],
    "3825746": [
        {
            "dateadded": "2026-04-19 07:12:07 UTC",
            "url": "http://182.114.250.48:58215/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:57:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825746/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825745": [
        {
            "dateadded": "2026-04-19 07:05:09 UTC",
            "url": "https://weather-post4.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825745/",
            "reporter": "anonymous"
        }
    ],
    "3825744": [
        {
            "dateadded": "2026-04-19 07:02:07 UTC",
            "url": "http://110.37.103.93:40049/i",
            "url_status": "offline",
            "last_online": "2026-04-19 10:29:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825744/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825743": [
        {
            "dateadded": "2026-04-19 07:00:11 UTC",
            "url": "http://61.53.125.53:60502/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:09:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825743/",
            "reporter": "geenensp"
        }
    ],
    "3825742": [
        {
            "dateadded": "2026-04-19 07:00:08 UTC",
            "url": "https://sport-match3.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 07:00:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825742/",
            "reporter": "anonymous"
        }
    ],
    "3825741": [
        {
            "dateadded": "2026-04-19 06:59:19 UTC",
            "url": "http://115.50.46.18:44677/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:44:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825741/",
            "reporter": "geenensp"
        }
    ],
    "3825740": [
        {
            "dateadded": "2026-04-19 06:55:11 UTC",
            "url": "https://world-press2.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825740/",
            "reporter": "anonymous"
        }
    ],
    "3825739": [
        {
            "dateadded": "2026-04-19 06:48:09 UTC",
            "url": "https://daily-news1.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825739/",
            "reporter": "anonymous"
        }
    ],
    "3825738": [
        {
            "dateadded": "2026-04-19 06:47:08 UTC",
            "url": "http://182.114.250.48:58215/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 18:02:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825738/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825737": [
        {
            "dateadded": "2026-04-19 06:43:24 UTC",
            "url": "http://222.219.74.93:58121/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825737/",
            "reporter": "geenensp"
        }
    ],
    "3825736": [
        {
            "dateadded": "2026-04-19 06:43:11 UTC",
            "url": "https://white-snow6.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825736/",
            "reporter": "anonymous"
        }
    ],
    "3825735": [
        {
            "dateadded": "2026-04-19 06:38:07 UTC",
            "url": "https://silver-coin5.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825735/",
            "reporter": "anonymous"
        }
    ],
    "3825734": [
        {
            "dateadded": "2026-04-19 06:32:08 UTC",
            "url": "http://119.162.75.33:46969/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825734/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825733": [
        {
            "dateadded": "2026-04-19 06:29:16 UTC",
            "url": "http://115.50.46.18:44677/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:44:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825733/",
            "reporter": "geenensp"
        }
    ],
    "3825732": [
        {
            "dateadded": "2026-04-19 06:27:11 UTC",
            "url": "https://gold-star4.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825732/",
            "reporter": "anonymous"
        }
    ],
    "3825731": [
        {
            "dateadded": "2026-04-19 06:27:09 UTC",
            "url": "http://162.255.251.91:52777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825731/",
            "reporter": "geenensp"
        }
    ],
    "3825730": [
        {
            "dateadded": "2026-04-19 06:23:09 UTC",
            "url": "https://red-apple3.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825730/",
            "reporter": "anonymous"
        }
    ],
    "3825729": [
        {
            "dateadded": "2026-04-19 06:15:09 UTC",
            "url": "https://green-grass2.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825729/",
            "reporter": "anonymous"
        }
    ],
    "3825728": [
        {
            "dateadded": "2026-04-19 06:12:17 UTC",
            "url": "http://42.224.100.97:35721/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 06:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825728/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825727": [
        {
            "dateadded": "2026-04-19 06:11:18 UTC",
            "url": "http://39.79.151.99:45028/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:59:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825727/",
            "reporter": "geenensp"
        }
    ],
    "3825726": [
        {
            "dateadded": "2026-04-19 06:09:15 UTC",
            "url": "https://blue-ocean1.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:09:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825726/",
            "reporter": "anonymous"
        }
    ],
    "3825725": [
        {
            "dateadded": "2026-04-19 06:04:17 UTC",
            "url": "https://city-park6.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 06:04:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825725/",
            "reporter": "anonymous"
        }
    ],
    "3825724": [
        {
            "dateadded": "2026-04-19 05:59:11 UTC",
            "url": "https://gas-station5.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825724/",
            "reporter": "anonymous"
        }
    ],
    "3825723": [
        {
            "dateadded": "2026-04-19 05:57:08 UTC",
            "url": "http://58.50.200.133:52069/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:07:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825723/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825722": [
        {
            "dateadded": "2026-04-19 05:52:15 UTC",
            "url": "https://auto-parts4.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825722/",
            "reporter": "anonymous"
        }
    ],
    "3825721": [
        {
            "dateadded": "2026-04-19 05:48:13 UTC",
            "url": "https://road-trip3.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825721/",
            "reporter": "anonymous"
        }
    ],
    "3825720": [
        {
            "dateadded": "2026-04-19 05:47:11 UTC",
            "url": "http://113.221.78.158:37348/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:18:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825720/",
            "reporter": "geenensp"
        }
    ],
    "3825719": [
        {
            "dateadded": "2026-04-19 05:42:08 UTC",
            "url": "http://222.134.162.141:50727/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825719/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825718": [
        {
            "dateadded": "2026-04-19 05:41:21 UTC",
            "url": "http://39.79.151.99:45028/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:47:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825718/",
            "reporter": "geenensp"
        }
    ],
    "3825717": [
        {
            "dateadded": "2026-04-19 05:41:15 UTC",
            "url": "https://fast-drive2.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:41:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825717/",
            "reporter": "anonymous"
        }
    ],
    "3825716": [
        {
            "dateadded": "2026-04-19 05:36:15 UTC",
            "url": "https://car-rental1.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825716/",
            "reporter": "anonymous"
        }
    ],
    "3825715": [
        {
            "dateadded": "2026-04-19 05:31:12 UTC",
            "url": "https://media-player6.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825715/",
            "reporter": "anonymous"
        }
    ],
    "3825713": [
        {
            "dateadded": "2026-04-19 05:30:31 UTC",
            "url": "http://45.156.87.194/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-19 05:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825713/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825714": [
        {
            "dateadded": "2026-04-19 05:30:31 UTC",
            "url": "http://45.156.87.194/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 05:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825714/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825712": [
        {
            "dateadded": "2026-04-19 05:30:30 UTC",
            "url": "http://185.132.53.161/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 10:41:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825712/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825707": [
        {
            "dateadded": "2026-04-19 05:29:30 UTC",
            "url": "http://45.156.87.194/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825707/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825708": [
        {
            "dateadded": "2026-04-19 05:29:30 UTC",
            "url": "http://45.156.87.194/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825708/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825709": [
        {
            "dateadded": "2026-04-19 05:29:30 UTC",
            "url": "http://45.156.87.194/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825709/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825710": [
        {
            "dateadded": "2026-04-19 05:29:30 UTC",
            "url": "http://45.156.87.194/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825710/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825711": [
        {
            "dateadded": "2026-04-19 05:29:30 UTC",
            "url": "http://45.156.87.194/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825711/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825705": [
        {
            "dateadded": "2026-04-19 05:29:29 UTC",
            "url": "http://45.156.87.194/debug.dbg",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825705/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825706": [
        {
            "dateadded": "2026-04-19 05:29:29 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.arm",
            "url_status": "offline",
            "last_online": "2026-04-19 11:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825706/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825703": [
        {
            "dateadded": "2026-04-19 05:29:27 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.m68k",
            "url_status": "offline",
            "last_online": "2026-04-19 12:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825703/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825704": [
        {
            "dateadded": "2026-04-19 05:29:27 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.arc",
            "url_status": "offline",
            "last_online": "2026-04-19 11:43:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825704/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825699": [
        {
            "dateadded": "2026-04-19 05:29:13 UTC",
            "url": "http://45.156.87.194/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825699/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825700": [
        {
            "dateadded": "2026-04-19 05:29:13 UTC",
            "url": "http://45.156.87.194/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825700/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825701": [
        {
            "dateadded": "2026-04-19 05:29:13 UTC",
            "url": "http://45.156.87.194/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825701/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825702": [
        {
            "dateadded": "2026-04-19 05:29:13 UTC",
            "url": "http://45.156.87.194/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-19 05:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825702/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825698": [
        {
            "dateadded": "2026-04-19 05:28:30 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 11:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825698/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825697": [
        {
            "dateadded": "2026-04-19 05:28:24 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.arm5",
            "url_status": "offline",
            "last_online": "2026-04-19 11:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825697/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825694": [
        {
            "dateadded": "2026-04-19 05:28:23 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.arm6",
            "url_status": "offline",
            "last_online": "2026-04-19 11:39:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825694/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825695": [
        {
            "dateadded": "2026-04-19 05:28:23 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.i686",
            "url_status": "offline",
            "last_online": "2026-04-19 12:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825695/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825696": [
        {
            "dateadded": "2026-04-19 05:28:23 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.x86",
            "url_status": "offline",
            "last_online": "2026-04-19 11:54:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825696/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825685": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://185.132.53.161/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-19 10:30:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825685/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825686": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 12:35:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825686/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825687": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://185.132.53.161/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 10:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825687/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825688": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 10:32:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825688/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825689": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.ppc",
            "url_status": "offline",
            "last_online": "2026-04-19 12:20:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825689/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825690": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://185.132.53.161/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-19 05:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825690/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825691": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.sh4",
            "url_status": "offline",
            "last_online": "2026-04-19 11:59:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825691/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825692": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.spc",
            "url_status": "offline",
            "last_online": "2026-04-19 12:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825692/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825693": [
        {
            "dateadded": "2026-04-19 05:28:15 UTC",
            "url": "http://176.65.148.193/hiddenbin/Space.mips",
            "url_status": "offline",
            "last_online": "2026-04-19 11:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825693/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825684": [
        {
            "dateadded": "2026-04-19 05:27:15 UTC",
            "url": "http://92.112.127.184/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-19 05:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825684/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825674": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://14.157.18.236:54022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825674/",
            "reporter": "geenensp"
        }
    ],
    "3825675": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://110.37.27.87:60156/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:54:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825675/",
            "reporter": "geenensp"
        }
    ],
    "3825676": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-19 10:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825676/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825677": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-19 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825677/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825678": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-19 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825678/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825679": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-19 10:57:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825679/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825680": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-19 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825680/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825681": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-19 11:02:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825681/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825682": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://92.112.127.184/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 05:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825682/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825683": [
        {
            "dateadded": "2026-04-19 05:27:14 UTC",
            "url": "http://185.132.53.161/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-19 10:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825683/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3825673": [
        {
            "dateadded": "2026-04-19 05:24:17 UTC",
            "url": "https://sound-track5.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825673/",
            "reporter": "anonymous"
        }
    ],
    "3825672": [
        {
            "dateadded": "2026-04-19 05:24:13 UTC",
            "url": "http://221.14.107.90:58845/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:51:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825672/",
            "reporter": "geenensp"
        }
    ],
    "3825671": [
        {
            "dateadded": "2026-04-19 05:20:25 UTC",
            "url": "http://42.224.122.75:44241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:56:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825671/",
            "reporter": "geenensp"
        }
    ],
    "3825670": [
        {
            "dateadded": "2026-04-19 05:20:17 UTC",
            "url": "https://video-clip4.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:20:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825670/",
            "reporter": "anonymous"
        }
    ],
    "3825669": [
        {
            "dateadded": "2026-04-19 05:17:22 UTC",
            "url": "http://42.87.185.153:47418/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:01:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825669/",
            "reporter": "geenensp"
        }
    ],
    "3825668": [
        {
            "dateadded": "2026-04-19 05:14:15 UTC",
            "url": "http://59.97.250.196:33642/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825668/",
            "reporter": "geenensp"
        }
    ],
    "3825667": [
        {
            "dateadded": "2026-04-19 05:13:13 UTC",
            "url": "https://picture-book3.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825667/",
            "reporter": "anonymous"
        }
    ],
    "3825666": [
        {
            "dateadded": "2026-04-19 05:08:18 UTC",
            "url": "https://image-zoom2.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825666/",
            "reporter": "anonymous"
        }
    ],
    "3825665": [
        {
            "dateadded": "2026-04-19 05:07:10 UTC",
            "url": "http://59.97.250.196:33642/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825665/",
            "reporter": "geenensp"
        }
    ],
    "3825664": [
        {
            "dateadded": "2026-04-19 05:03:14 UTC",
            "url": "https://photo-frame1.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 05:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825664/",
            "reporter": "anonymous"
        }
    ],
    "3825663": [
        {
            "dateadded": "2026-04-19 05:00:26 UTC",
            "url": "http://182.47.201.7:52455/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825663/",
            "reporter": "geenensp"
        }
    ],
    "3825662": [
        {
            "dateadded": "2026-04-19 05:00:25 UTC",
            "url": "http://110.37.27.87:60156/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:41:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825662/",
            "reporter": "geenensp"
        }
    ],
    "3825661": [
        {
            "dateadded": "2026-04-19 04:59:13 UTC",
            "url": "http://182.121.80.120:59275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825661/",
            "reporter": "geenensp"
        }
    ],
    "3825660": [
        {
            "dateadded": "2026-04-19 04:58:24 UTC",
            "url": "http://42.87.185.153:47418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 23:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825660/",
            "reporter": "geenensp"
        }
    ],
    "3825659": [
        {
            "dateadded": "2026-04-19 04:57:13 UTC",
            "url": "https://smart-door6.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825659/",
            "reporter": "anonymous"
        }
    ],
    "3825658": [
        {
            "dateadded": "2026-04-19 04:52:14 UTC",
            "url": "http://115.50.97.188:42557/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:44:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825658/",
            "reporter": "geenensp"
        }
    ],
    "3825657": [
        {
            "dateadded": "2026-04-19 04:51:13 UTC",
            "url": "https://water-pipe5.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825657/",
            "reporter": "anonymous"
        }
    ],
    "3825656": [
        {
            "dateadded": "2026-04-19 04:49:23 UTC",
            "url": "http://42.237.53.122:46594/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:49:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825656/",
            "reporter": "geenensp"
        }
    ],
    "3825655": [
        {
            "dateadded": "2026-04-19 04:46:13 UTC",
            "url": "https://garden-view4.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825655/",
            "reporter": "anonymous"
        }
    ],
    "3825654": [
        {
            "dateadded": "2026-04-19 04:41:15 UTC",
            "url": "http://222.142.210.48:50249/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:36:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825654/",
            "reporter": "geenensp"
        }
    ],
    "3825653": [
        {
            "dateadded": "2026-04-19 04:40:17 UTC",
            "url": "https://repair-work3.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825653/",
            "reporter": "anonymous"
        }
    ],
    "3825652": [
        {
            "dateadded": "2026-04-19 04:35:14 UTC",
            "url": "https://clean-house2.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825652/",
            "reporter": "anonymous"
        }
    ],
    "3825651": [
        {
            "dateadded": "2026-04-19 04:32:23 UTC",
            "url": "http://42.237.53.122:46594/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825651/",
            "reporter": "geenensp"
        }
    ],
    "3825650": [
        {
            "dateadded": "2026-04-19 04:30:15 UTC",
            "url": "https://home-service1.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825650/",
            "reporter": "anonymous"
        }
    ],
    "3825649": [
        {
            "dateadded": "2026-04-19 04:27:09 UTC",
            "url": "https://desk-folder6.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825649/",
            "reporter": "anonymous"
        }
    ],
    "3825648": [
        {
            "dateadded": "2026-04-19 04:26:17 UTC",
            "url": "http://125.161.141.23:53658/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:23:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825648/",
            "reporter": "geenensp"
        }
    ],
    "3825647": [
        {
            "dateadded": "2026-04-19 04:24:12 UTC",
            "url": "http://115.49.25.245:43625/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825647/",
            "reporter": "geenensp"
        }
    ],
    "3825646": [
        {
            "dateadded": "2026-04-19 04:21:27 UTC",
            "url": "http://110.36.72.162:42300/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825646/",
            "reporter": "geenensp"
        }
    ],
    "3825645": [
        {
            "dateadded": "2026-04-19 04:17:08 UTC",
            "url": "https://glue-stick5.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825645/",
            "reporter": "anonymous"
        }
    ],
    "3825644": [
        {
            "dateadded": "2026-04-19 04:15:20 UTC",
            "url": "http://61.52.75.204:40567/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825644/",
            "reporter": "geenensp"
        }
    ],
    "3825643": [
        {
            "dateadded": "2026-04-19 04:14:08 UTC",
            "url": "http://115.50.97.188:42557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 04:52:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825643/",
            "reporter": "geenensp"
        }
    ],
    "3825642": [
        {
            "dateadded": "2026-04-19 04:12:09 UTC",
            "url": "https://white-board4.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825642/",
            "reporter": "anonymous"
        }
    ],
    "3825641": [
        {
            "dateadded": "2026-04-19 04:11:19 UTC",
            "url": "http://42.232.228.122:48596/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:53:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825641/",
            "reporter": "geenensp"
        }
    ],
    "3825640": [
        {
            "dateadded": "2026-04-19 04:06:08 UTC",
            "url": "https://black-marker3.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825640/",
            "reporter": "anonymous"
        }
    ],
    "3825639": [
        {
            "dateadded": "2026-04-19 04:02:17 UTC",
            "url": "http://222.142.210.48:50249/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:59:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825639/",
            "reporter": "geenensp"
        }
    ],
    "3825638": [
        {
            "dateadded": "2026-04-19 04:01:07 UTC",
            "url": "https://pencil-case2.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 04:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825638/",
            "reporter": "anonymous"
        }
    ],
    "3825637": [
        {
            "dateadded": "2026-04-19 04:00:21 UTC",
            "url": "http://125.161.141.23:53658/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825637/",
            "reporter": "geenensp"
        }
    ],
    "3825636": [
        {
            "dateadded": "2026-04-19 03:57:17 UTC",
            "url": "http://193.187.101.68:55242/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825636/",
            "reporter": "geenensp"
        }
    ],
    "3825635": [
        {
            "dateadded": "2026-04-19 03:55:10 UTC",
            "url": "https://office-paper1.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825635/",
            "reporter": "anonymous"
        }
    ],
    "3825634": [
        {
            "dateadded": "2026-04-19 03:54:20 UTC",
            "url": "http://182.121.225.165:39470/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:40:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825634/",
            "reporter": "geenensp"
        }
    ],
    "3825633": [
        {
            "dateadded": "2026-04-19 03:54:19 UTC",
            "url": "http://31.148.232.87:1473/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825633/",
            "reporter": "geenensp"
        }
    ],
    "3825632": [
        {
            "dateadded": "2026-04-19 03:50:16 UTC",
            "url": "http://123.132.146.90:53177/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825632/",
            "reporter": "geenensp"
        }
    ],
    "3825631": [
        {
            "dateadded": "2026-04-19 03:49:09 UTC",
            "url": "https://local-event6.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825631/",
            "reporter": "anonymous"
        }
    ],
    "3825630": [
        {
            "dateadded": "2026-04-19 03:46:18 UTC",
            "url": "http://196.190.69.149:36554/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825630/",
            "reporter": "geenensp"
        }
    ],
    "3825629": [
        {
            "dateadded": "2026-04-19 03:45:13 UTC",
            "url": "http://42.226.67.180:53843/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:47:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825629/",
            "reporter": "geenensp"
        }
    ],
    "3825628": [
        {
            "dateadded": "2026-04-19 03:43:12 UTC",
            "url": "https://trip-advisor5.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825628/",
            "reporter": "anonymous"
        }
    ],
    "3825627": [
        {
            "dateadded": "2026-04-19 03:38:09 UTC",
            "url": "https://beach-resort4.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825627/",
            "reporter": "anonymous"
        }
    ],
    "3825626": [
        {
            "dateadded": "2026-04-19 03:33:07 UTC",
            "url": "https://world-map3.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825626/",
            "reporter": "anonymous"
        }
    ],
    "3825625": [
        {
            "dateadded": "2026-04-19 03:30:16 UTC",
            "url": "http://175.147.90.6:40569/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825625/",
            "reporter": "geenensp"
        }
    ],
    "3825624": [
        {
            "dateadded": "2026-04-19 03:29:17 UTC",
            "url": "http://31.148.232.87:1473/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825624/",
            "reporter": "geenensp"
        }
    ],
    "3825623": [
        {
            "dateadded": "2026-04-19 03:27:06 UTC",
            "url": "https://hotel-check2.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825623/",
            "reporter": "anonymous"
        }
    ],
    "3825622": [
        {
            "dateadded": "2026-04-19 03:21:10 UTC",
            "url": "https://travel-guide1.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825622/",
            "reporter": "anonymous"
        }
    ],
    "3825621": [
        {
            "dateadded": "2026-04-19 03:20:19 UTC",
            "url": "http://42.226.67.180:53843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:32:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825621/",
            "reporter": "geenensp"
        }
    ],
    "3825620": [
        {
            "dateadded": "2026-04-19 03:17:14 UTC",
            "url": "http://196.190.69.149:36554/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:24:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825620/",
            "reporter": "geenensp"
        }
    ],
    "3825619": [
        {
            "dateadded": "2026-04-19 03:16:09 UTC",
            "url": "https://grade-point6.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825619/",
            "reporter": "anonymous"
        }
    ],
    "3825618": [
        {
            "dateadded": "2026-04-19 03:15:25 UTC",
            "url": "http://42.227.158.237:45907/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:41:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825618/",
            "reporter": "geenensp"
        }
    ],
    "3825617": [
        {
            "dateadded": "2026-04-19 03:14:18 UTC",
            "url": "http://110.37.96.89:57688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 03:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825617/",
            "reporter": "geenensp"
        }
    ],
    "3825616": [
        {
            "dateadded": "2026-04-19 03:13:21 UTC",
            "url": "http://182.127.109.167:57529/i",
            "url_status": "offline",
            "last_online": "2026-04-23 18:17:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825616/",
            "reporter": "geenensp"
        }
    ],
    "3825615": [
        {
            "dateadded": "2026-04-19 03:09:10 UTC",
            "url": "https://book-reader5.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825615/",
            "reporter": "anonymous"
        }
    ],
    "3825614": [
        {
            "dateadded": "2026-04-19 03:04:07 UTC",
            "url": "https://class-report4.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 03:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825614/",
            "reporter": "anonymous"
        }
    ],
    "3825613": [
        {
            "dateadded": "2026-04-19 02:59:12 UTC",
            "url": "https://final-lesson3.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825613/",
            "reporter": "anonymous"
        }
    ],
    "3825612": [
        {
            "dateadded": "2026-04-19 02:55:14 UTC",
            "url": "http://61.52.157.133:53803/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:13:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825612/",
            "reporter": "geenensp"
        }
    ],
    "3825611": [
        {
            "dateadded": "2026-04-19 02:54:19 UTC",
            "url": "http://122.138.221.70:54273/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825611/",
            "reporter": "geenensp"
        }
    ],
    "3825610": [
        {
            "dateadded": "2026-04-19 02:54:08 UTC",
            "url": "https://smart-student2.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825610/",
            "reporter": "anonymous"
        }
    ],
    "3825609": [
        {
            "dateadded": "2026-04-19 02:51:20 UTC",
            "url": "http://42.180.13.85:45414/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825609/",
            "reporter": "geenensp"
        }
    ],
    "3825608": [
        {
            "dateadded": "2026-04-19 02:48:08 UTC",
            "url": "https://online-study1.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825608/",
            "reporter": "anonymous"
        }
    ],
    "3825607": [
        {
            "dateadded": "2026-04-19 02:43:08 UTC",
            "url": "https://10987.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825607/",
            "reporter": "anonymous"
        }
    ],
    "3825606": [
        {
            "dateadded": "2026-04-19 02:42:16 UTC",
            "url": "http://115.63.206.75:35651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 02:42:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825606/",
            "reporter": "geenensp"
        }
    ],
    "3825605": [
        {
            "dateadded": "2026-04-19 02:41:08 UTC",
            "url": "https://tallithar8.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825605/",
            "reporter": "anonymous"
        }
    ],
    "3825604": [
        {
            "dateadded": "2026-04-19 02:31:13 UTC",
            "url": "http://182.112.29.187:36133/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:48:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825604/",
            "reporter": "geenensp"
        }
    ],
    "3825603": [
        {
            "dateadded": "2026-04-19 02:31:12 UTC",
            "url": "http://119.183.130.225:34157/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825603/",
            "reporter": "geenensp"
        }
    ],
    "3825602": [
        {
            "dateadded": "2026-04-19 02:30:10 UTC",
            "url": "https://ed171vt.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825602/",
            "reporter": "anonymous"
        }
    ],
    "3825601": [
        {
            "dateadded": "2026-04-19 02:26:14 UTC",
            "url": "http://122.138.221.70:54273/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:29:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825601/",
            "reporter": "geenensp"
        }
    ],
    "3825600": [
        {
            "dateadded": "2026-04-19 02:25:09 UTC",
            "url": "https://ion-cas.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825600/",
            "reporter": "anonymous"
        }
    ],
    "3825599": [
        {
            "dateadded": "2026-04-19 02:24:20 UTC",
            "url": "http://105.186.137.179:52785/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:55:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825599/",
            "reporter": "geenensp"
        }
    ],
    "3825598": [
        {
            "dateadded": "2026-04-19 02:23:16 UTC",
            "url": "http://138.204.196.136:38329/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:23:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825598/",
            "reporter": "geenensp"
        }
    ],
    "3825597": [
        {
            "dateadded": "2026-04-19 02:20:08 UTC",
            "url": "https://profitlat.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825597/",
            "reporter": "anonymous"
        }
    ],
    "3825596": [
        {
            "dateadded": "2026-04-19 02:17:22 UTC",
            "url": "http://182.122.221.88:36078/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825596/",
            "reporter": "geenensp"
        }
    ],
    "3825595": [
        {
            "dateadded": "2026-04-19 02:16:25 UTC",
            "url": "http://103.172.186.155:39086/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825595/",
            "reporter": "geenensp"
        }
    ],
    "3825594": [
        {
            "dateadded": "2026-04-19 02:16:07 UTC",
            "url": "https://echo-slow.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825594/",
            "reporter": "anonymous"
        }
    ],
    "3825593": [
        {
            "dateadded": "2026-04-19 02:13:18 UTC",
            "url": "http://154.242.15.158:34517/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825593/",
            "reporter": "geenensp"
        }
    ],
    "3825592": [
        {
            "dateadded": "2026-04-19 02:13:08 UTC",
            "url": "https://arkdraa3.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825592/",
            "reporter": "anonymous"
        }
    ],
    "3825591": [
        {
            "dateadded": "2026-04-19 02:10:22 UTC",
            "url": "http://119.183.130.225:34157/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825591/",
            "reporter": "geenensp"
        }
    ],
    "3825590": [
        {
            "dateadded": "2026-04-19 02:03:07 UTC",
            "url": "https://arktide7en.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 02:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825590/",
            "reporter": "anonymous"
        }
    ],
    "3825589": [
        {
            "dateadded": "2026-04-19 01:58:16 UTC",
            "url": "http://111.220.36.76:49868/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:19:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825589/",
            "reporter": "geenensp"
        }
    ],
    "3825588": [
        {
            "dateadded": "2026-04-19 01:58:14 UTC",
            "url": "http://123.9.88.34:54653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825588/",
            "reporter": "geenensp"
        }
    ],
    "3825587": [
        {
            "dateadded": "2026-04-19 01:58:08 UTC",
            "url": "https://hyper-h1dde.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825587/",
            "reporter": "anonymous"
        }
    ],
    "3825586": [
        {
            "dateadded": "2026-04-19 01:56:16 UTC",
            "url": "http://87.110.15.80:60413/i",
            "url_status": "offline",
            "last_online": "2026-04-25 12:01:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825586/",
            "reporter": "geenensp"
        }
    ],
    "3825585": [
        {
            "dateadded": "2026-04-19 01:53:09 UTC",
            "url": "http://219.155.224.101:41959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825585/",
            "reporter": "geenensp"
        }
    ],
    "3825584": [
        {
            "dateadded": "2026-04-19 01:52:08 UTC",
            "url": "https://load-array.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825584/",
            "reporter": "anonymous"
        }
    ],
    "3825583": [
        {
            "dateadded": "2026-04-19 01:48:14 UTC",
            "url": "https://adapterharvest.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825583/",
            "reporter": "anonymous"
        }
    ],
    "3825582": [
        {
            "dateadded": "2026-04-19 01:47:08 UTC",
            "url": "http://190.109.227.57:60024/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825582/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825581": [
        {
            "dateadded": "2026-04-19 01:43:15 UTC",
            "url": "http://81.215.173.87:40631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825581/",
            "reporter": "geenensp"
        }
    ],
    "3825580": [
        {
            "dateadded": "2026-04-19 01:41:09 UTC",
            "url": "https://thxzt16c.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825580/",
            "reporter": "anonymous"
        }
    ],
    "3825579": [
        {
            "dateadded": "2026-04-19 01:35:09 UTC",
            "url": "https://stock-cir.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825579/",
            "reporter": "anonymous"
        }
    ],
    "3825578": [
        {
            "dateadded": "2026-04-19 01:32:11 UTC",
            "url": "http://42.6.253.178:44176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:05:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825578/",
            "reporter": "geenensp"
        }
    ],
    "3825577": [
        {
            "dateadded": "2026-04-19 01:32:09 UTC",
            "url": "http://87.110.15.80:60413/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 11:21:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825577/",
            "reporter": "geenensp"
        }
    ],
    "3825576": [
        {
            "dateadded": "2026-04-19 01:29:09 UTC",
            "url": "https://yabplkm.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825576/",
            "reporter": "anonymous"
        }
    ],
    "3825575": [
        {
            "dateadded": "2026-04-19 01:25:14 UTC",
            "url": "http://115.58.85.212:40588/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:30:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825575/",
            "reporter": "geenensp"
        }
    ],
    "3825574": [
        {
            "dateadded": "2026-04-19 01:24:17 UTC",
            "url": "https://az60udk.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825574/",
            "reporter": "anonymous"
        }
    ],
    "3825573": [
        {
            "dateadded": "2026-04-19 01:22:15 UTC",
            "url": "http://105.184.241.153:47017/i",
            "url_status": "offline",
            "last_online": "2026-04-19 01:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825573/",
            "reporter": "geenensp"
        }
    ],
    "3825572": [
        {
            "dateadded": "2026-04-19 01:22:11 UTC",
            "url": "http://124.162.223.228:43443/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825572/",
            "reporter": "geenensp"
        }
    ],
    "3825571": [
        {
            "dateadded": "2026-04-19 01:19:20 UTC",
            "url": "http://162.255.251.91:52777/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825571/",
            "reporter": "geenensp"
        }
    ],
    "3825570": [
        {
            "dateadded": "2026-04-19 01:19:19 UTC",
            "url": "http://216.249.4.20:56301/i",
            "url_status": "offline",
            "last_online": "2026-04-19 10:43:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825570/",
            "reporter": "geenensp"
        }
    ],
    "3825569": [
        {
            "dateadded": "2026-04-19 01:18:18 UTC",
            "url": "http://27.15.56.127:53745/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825569/",
            "reporter": "geenensp"
        }
    ],
    "3825568": [
        {
            "dateadded": "2026-04-19 01:18:07 UTC",
            "url": "https://i2wigref.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825568/",
            "reporter": "anonymous"
        }
    ],
    "3825567": [
        {
            "dateadded": "2026-04-19 01:16:23 UTC",
            "url": "http://112.251.118.49:48095/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825567/",
            "reporter": "geenensp"
        }
    ],
    "3825566": [
        {
            "dateadded": "2026-04-19 01:13:07 UTC",
            "url": "https://cnjcb.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825566/",
            "reporter": "anonymous"
        }
    ],
    "3825565": [
        {
            "dateadded": "2026-04-19 01:12:07 UTC",
            "url": "http://182.121.171.45:52194/i",
            "url_status": "offline",
            "last_online": "2026-04-19 01:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825565/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825564": [
        {
            "dateadded": "2026-04-19 01:09:21 UTC",
            "url": "http://110.36.93.217:33939/i",
            "url_status": "offline",
            "last_online": "2026-04-19 01:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825564/",
            "reporter": "geenensp"
        }
    ],
    "3825563": [
        {
            "dateadded": "2026-04-19 01:07:10 UTC",
            "url": "https://deli-soli.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825563/",
            "reporter": "anonymous"
        }
    ],
    "3825562": [
        {
            "dateadded": "2026-04-19 01:01:10 UTC",
            "url": "https://lveu.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 01:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825562/",
            "reporter": "anonymous"
        }
    ],
    "3825561": [
        {
            "dateadded": "2026-04-19 01:00:22 UTC",
            "url": "http://110.37.102.128:56673/i",
            "url_status": "offline",
            "last_online": "2026-04-19 01:00:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825561/",
            "reporter": "geenensp"
        }
    ],
    "3825560": [
        {
            "dateadded": "2026-04-19 00:57:21 UTC",
            "url": "http://36.88.136.194:51263/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:30:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825560/",
            "reporter": "geenensp"
        }
    ],
    "3825558": [
        {
            "dateadded": "2026-04-19 00:56:08 UTC",
            "url": "http://36.88.136.194:51263/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825558/",
            "reporter": "geenensp"
        }
    ],
    "3825559": [
        {
            "dateadded": "2026-04-19 00:56:08 UTC",
            "url": "https://modernsilver.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825559/",
            "reporter": "anonymous"
        }
    ],
    "3825557": [
        {
            "dateadded": "2026-04-19 00:55:11 UTC",
            "url": "http://123.10.0.193:51201/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825557/",
            "reporter": "geenensp"
        }
    ],
    "3825556": [
        {
            "dateadded": "2026-04-19 00:53:39 UTC",
            "url": "http://112.251.118.49:48095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:57:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825556/",
            "reporter": "geenensp"
        }
    ],
    "3825555": [
        {
            "dateadded": "2026-04-19 00:53:15 UTC",
            "url": "http://216.249.4.20:56301/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825555/",
            "reporter": "geenensp"
        }
    ],
    "3825554": [
        {
            "dateadded": "2026-04-19 00:49:09 UTC",
            "url": "https://dkkvkpl.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825554/",
            "reporter": "anonymous"
        }
    ],
    "3825553": [
        {
            "dateadded": "2026-04-19 00:46:20 UTC",
            "url": "http://124.162.223.228:43443/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:19:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825553/",
            "reporter": "geenensp"
        }
    ],
    "3825552": [
        {
            "dateadded": "2026-04-19 00:46:19 UTC",
            "url": "http://39.64.242.58:34765/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:47:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825552/",
            "reporter": "geenensp"
        }
    ],
    "3825551": [
        {
            "dateadded": "2026-04-19 00:45:19 UTC",
            "url": "http://123.10.35.114:34819/i",
            "url_status": "offline",
            "last_online": "2026-04-19 06:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825551/",
            "reporter": "geenensp"
        }
    ],
    "3825550": [
        {
            "dateadded": "2026-04-19 00:45:08 UTC",
            "url": "https://pix32-logic.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825550/",
            "reporter": "anonymous"
        }
    ],
    "3825549": [
        {
            "dateadded": "2026-04-19 00:42:17 UTC",
            "url": "http://196.189.104.106:35051/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 00:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825549/",
            "reporter": "geenensp"
        }
    ],
    "3825548": [
        {
            "dateadded": "2026-04-19 00:41:11 UTC",
            "url": "http://110.36.93.217:33939/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 00:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825548/",
            "reporter": "geenensp"
        }
    ],
    "3825547": [
        {
            "dateadded": "2026-04-19 00:39:13 UTC",
            "url": "http://105.184.14.190:47741/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825547/",
            "reporter": "geenensp"
        }
    ],
    "3825546": [
        {
            "dateadded": "2026-04-19 00:39:08 UTC",
            "url": "https://vialnoti.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825546/",
            "reporter": "anonymous"
        }
    ],
    "3825545": [
        {
            "dateadded": "2026-04-19 00:37:06 UTC",
            "url": "http://39.79.35.106:44418/i",
            "url_status": "offline",
            "last_online": "2026-04-19 00:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825545/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825544": [
        {
            "dateadded": "2026-04-19 00:35:26 UTC",
            "url": "http://5.172.22.97:58945/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:02:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825544/",
            "reporter": "geenensp"
        }
    ],
    "3825543": [
        {
            "dateadded": "2026-04-19 00:34:17 UTC",
            "url": "http://110.37.102.128:56673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 00:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825543/",
            "reporter": "geenensp"
        }
    ],
    "3825542": [
        {
            "dateadded": "2026-04-19 00:34:09 UTC",
            "url": "https://vor-spireos.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825542/",
            "reporter": "anonymous"
        }
    ],
    "3825541": [
        {
            "dateadded": "2026-04-19 00:28:06 UTC",
            "url": "https://ipghcn.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825541/",
            "reporter": "anonymous"
        }
    ],
    "3825540": [
        {
            "dateadded": "2026-04-19 00:23:11 UTC",
            "url": "https://2mbdmbjd.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825540/",
            "reporter": "anonymous"
        }
    ],
    "3825539": [
        {
            "dateadded": "2026-04-19 00:17:20 UTC",
            "url": "http://123.10.35.114:34819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825539/",
            "reporter": "geenensp"
        }
    ],
    "3825538": [
        {
            "dateadded": "2026-04-19 00:17:08 UTC",
            "url": "https://mediacata.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825538/",
            "reporter": "anonymous"
        }
    ],
    "3825537": [
        {
            "dateadded": "2026-04-19 00:14:19 UTC",
            "url": "http://112.251.230.194:44279/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825537/",
            "reporter": "geenensp"
        }
    ],
    "3825536": [
        {
            "dateadded": "2026-04-19 00:12:11 UTC",
            "url": "https://portvelv.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825536/",
            "reporter": "anonymous"
        }
    ],
    "3825535": [
        {
            "dateadded": "2026-04-19 00:06:12 UTC",
            "url": "https://deployreed.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825535/",
            "reporter": "anonymous"
        }
    ],
    "3825534": [
        {
            "dateadded": "2026-04-19 00:02:08 UTC",
            "url": "http://119.187.192.170:35563/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:59:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825534/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825533": [
        {
            "dateadded": "2026-04-19 00:00:17 UTC",
            "url": "https://dynfluxar3.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-19 00:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825533/",
            "reporter": "anonymous"
        }
    ],
    "3825532": [
        {
            "dateadded": "2026-04-18 23:54:13 UTC",
            "url": "https://oputo.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825532/",
            "reporter": "anonymous"
        }
    ],
    "3825531": [
        {
            "dateadded": "2026-04-18 23:52:08 UTC",
            "url": "http://120.28.193.143:44022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 22:49:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825531/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825530": [
        {
            "dateadded": "2026-04-18 23:49:09 UTC",
            "url": "https://pineroute.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825530/",
            "reporter": "anonymous"
        }
    ],
    "3825529": [
        {
            "dateadded": "2026-04-18 23:47:36 UTC",
            "url": "http://112.251.230.194:44279/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825529/",
            "reporter": "geenensp"
        }
    ],
    "3825528": [
        {
            "dateadded": "2026-04-18 23:44:13 UTC",
            "url": "https://sapvial.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825528/",
            "reporter": "anonymous"
        }
    ],
    "3825527": [
        {
            "dateadded": "2026-04-18 23:42:23 UTC",
            "url": "http://125.43.244.41:36938/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825527/",
            "reporter": "geenensp"
        }
    ],
    "3825526": [
        {
            "dateadded": "2026-04-18 23:38:13 UTC",
            "url": "https://packbind.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825526/",
            "reporter": "anonymous"
        }
    ],
    "3825525": [
        {
            "dateadded": "2026-04-18 23:32:12 UTC",
            "url": "https://latti6-mesh.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825525/",
            "reporter": "anonymous"
        }
    ],
    "3825524": [
        {
            "dateadded": "2026-04-18 23:26:11 UTC",
            "url": "https://revifern.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825524/",
            "reporter": "anonymous"
        }
    ],
    "3825523": [
        {
            "dateadded": "2026-04-18 23:23:27 UTC",
            "url": "http://103.181.158.75:37410/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:04:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825523/",
            "reporter": "geenensp"
        }
    ],
    "3825522": [
        {
            "dateadded": "2026-04-18 23:22:23 UTC",
            "url": "http://80.67.33.209:45468/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:44:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825522/",
            "reporter": "geenensp"
        }
    ],
    "3825521": [
        {
            "dateadded": "2026-04-18 23:21:15 UTC",
            "url": "https://forrna9-watch.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825521/",
            "reporter": "anonymous"
        }
    ],
    "3825520": [
        {
            "dateadded": "2026-04-18 23:20:22 UTC",
            "url": "http://80.67.33.209:45468/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825520/",
            "reporter": "geenensp"
        }
    ],
    "3825519": [
        {
            "dateadded": "2026-04-18 23:17:08 UTC",
            "url": "http://119.187.192.170:35563/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:40:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825519/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825518": [
        {
            "dateadded": "2026-04-18 23:15:10 UTC",
            "url": "https://s0rt3-frame.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825518/",
            "reporter": "anonymous"
        }
    ],
    "3825517": [
        {
            "dateadded": "2026-04-18 23:11:27 UTC",
            "url": "http://115.49.23.223:42073/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:04:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825517/",
            "reporter": "geenensp"
        }
    ],
    "3825516": [
        {
            "dateadded": "2026-04-18 23:10:09 UTC",
            "url": "https://arklithix.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825516/",
            "reporter": "anonymous"
        }
    ],
    "3825515": [
        {
            "dateadded": "2026-04-18 23:04:23 UTC",
            "url": "http://115.57.162.241:43253/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825515/",
            "reporter": "geenensp"
        }
    ],
    "3825514": [
        {
            "dateadded": "2026-04-18 23:04:13 UTC",
            "url": "https://geyserlab.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 23:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825514/",
            "reporter": "anonymous"
        }
    ],
    "3825513": [
        {
            "dateadded": "2026-04-18 23:00:24 UTC",
            "url": "http://110.37.40.215:45481/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:48:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825513/",
            "reporter": "geenensp"
        }
    ],
    "3825512": [
        {
            "dateadded": "2026-04-18 22:59:09 UTC",
            "url": "https://windsystem.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825512/",
            "reporter": "anonymous"
        }
    ],
    "3825511": [
        {
            "dateadded": "2026-04-18 22:56:08 UTC",
            "url": "http://125.43.244.41:36938/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825511/",
            "reporter": "geenensp"
        }
    ],
    "3825510": [
        {
            "dateadded": "2026-04-18 22:56:07 UTC",
            "url": "http://115.63.47.188:56925/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:26:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825510/",
            "reporter": "geenensp"
        }
    ],
    "3825509": [
        {
            "dateadded": "2026-04-18 22:55:20 UTC",
            "url": "http://119.166.41.200:52321/i",
            "url_status": "offline",
            "last_online": "2026-04-23 10:57:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825509/",
            "reporter": "geenensp"
        }
    ],
    "3825508": [
        {
            "dateadded": "2026-04-18 22:53:23 UTC",
            "url": "http://179.43.182.70/hiddenbin/Space.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 23:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "64-bit",
                "elf",
                "mirai",
                "x86-64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825508/",
            "reporter": "geenensp"
        }
    ],
    "3825507": [
        {
            "dateadded": "2026-04-18 22:53:08 UTC",
            "url": "https://threa-moon.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825507/",
            "reporter": "anonymous"
        }
    ],
    "3825506": [
        {
            "dateadded": "2026-04-18 22:48:22 UTC",
            "url": "http://115.49.23.223:42073/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825506/",
            "reporter": "geenensp"
        }
    ],
    "3825505": [
        {
            "dateadded": "2026-04-18 22:47:13 UTC",
            "url": "https://f335e.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825505/",
            "reporter": "anonymous"
        }
    ],
    "3825503": [
        {
            "dateadded": "2026-04-18 22:45:27 UTC",
            "url": "http://219.157.234.221:35134/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825503/",
            "reporter": "geenensp"
        }
    ],
    "3825504": [
        {
            "dateadded": "2026-04-18 22:45:27 UTC",
            "url": "http://219.157.234.221:35134/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825504/",
            "reporter": "geenensp"
        }
    ],
    "3825502": [
        {
            "dateadded": "2026-04-18 22:44:11 UTC",
            "url": "https://nzhfxgcc.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825502/",
            "reporter": "anonymous"
        }
    ],
    "3825501": [
        {
            "dateadded": "2026-04-18 22:41:13 UTC",
            "url": "https://azcqv.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825501/",
            "reporter": "anonymous"
        }
    ],
    "3825500": [
        {
            "dateadded": "2026-04-18 22:36:11 UTC",
            "url": "http://180.180.56.203:59787/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:30:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825500/",
            "reporter": "geenensp"
        }
    ],
    "3825499": [
        {
            "dateadded": "2026-04-18 22:31:14 UTC",
            "url": "http://221.14.171.206:37998/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825499/",
            "reporter": "geenensp"
        }
    ],
    "3825498": [
        {
            "dateadded": "2026-04-18 22:30:14 UTC",
            "url": "https://qu3ue-leaf.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825498/",
            "reporter": "anonymous"
        }
    ],
    "3825497": [
        {
            "dateadded": "2026-04-18 22:29:22 UTC",
            "url": "http://110.37.40.215:45481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825497/",
            "reporter": "geenensp"
        }
    ],
    "3825496": [
        {
            "dateadded": "2026-04-18 22:29:10 UTC",
            "url": "http://115.57.162.241:43253/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:40:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825496/",
            "reporter": "geenensp"
        }
    ],
    "3825495": [
        {
            "dateadded": "2026-04-18 22:28:28 UTC",
            "url": "http://175.147.236.102:46951/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:58:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825495/",
            "reporter": "geenensp"
        }
    ],
    "3825494": [
        {
            "dateadded": "2026-04-18 22:26:17 UTC",
            "url": "http://39.83.2.247:50833/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825494/",
            "reporter": "geenensp"
        }
    ],
    "3825493": [
        {
            "dateadded": "2026-04-18 22:26:09 UTC",
            "url": "https://n662mc07.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825493/",
            "reporter": "anonymous"
        }
    ],
    "3825492": [
        {
            "dateadded": "2026-04-18 22:23:21 UTC",
            "url": "http://119.166.41.200:52321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825492/",
            "reporter": "geenensp"
        }
    ],
    "3825491": [
        {
            "dateadded": "2026-04-18 22:21:19 UTC",
            "url": "http://61.52.80.59:40184/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:21:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825491/",
            "reporter": "geenensp"
        }
    ],
    "3825490": [
        {
            "dateadded": "2026-04-18 22:20:08 UTC",
            "url": "https://5503.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825490/",
            "reporter": "anonymous"
        }
    ],
    "3825489": [
        {
            "dateadded": "2026-04-18 22:17:17 UTC",
            "url": "http://42.6.66.181:50868/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:04:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825489/",
            "reporter": "geenensp"
        }
    ],
    "3825488": [
        {
            "dateadded": "2026-04-18 22:16:14 UTC",
            "url": "http://36.71.31.7:48002/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825488/",
            "reporter": "geenensp"
        }
    ],
    "3825487": [
        {
            "dateadded": "2026-04-18 22:16:13 UTC",
            "url": "https://p4rce9-loop.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825487/",
            "reporter": "anonymous"
        }
    ],
    "3825486": [
        {
            "dateadded": "2026-04-18 22:13:10 UTC",
            "url": "https://auditcove.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825486/",
            "reporter": "anonymous"
        }
    ],
    "3825485": [
        {
            "dateadded": "2026-04-18 22:09:14 UTC",
            "url": "http://110.39.255.129:42139/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825485/",
            "reporter": "geenensp"
        }
    ],
    "3825483": [
        {
            "dateadded": "2026-04-18 22:07:16 UTC",
            "url": "http://27.11.248.133:40811/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:05:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825483/",
            "reporter": "geenensp"
        }
    ],
    "3825484": [
        {
            "dateadded": "2026-04-18 22:07:16 UTC",
            "url": "http://180.180.56.203:59787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:58:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825484/",
            "reporter": "geenensp"
        }
    ],
    "3825482": [
        {
            "dateadded": "2026-04-18 22:07:09 UTC",
            "url": "http://217.168.128.146:41013/.i",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825482/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825481": [
        {
            "dateadded": "2026-04-18 22:05:09 UTC",
            "url": "http://123.14.157.175:40022/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:45:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825481/",
            "reporter": "geenensp"
        }
    ],
    "3825480": [
        {
            "dateadded": "2026-04-18 22:00:16 UTC",
            "url": "https://fcjcbzp.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 22:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825480/",
            "reporter": "anonymous"
        }
    ],
    "3825479": [
        {
            "dateadded": "2026-04-18 21:53:07 UTC",
            "url": "https://vbaw.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825479/",
            "reporter": "anonymous"
        }
    ],
    "3825478": [
        {
            "dateadded": "2026-04-18 21:46:08 UTC",
            "url": "https://5un-lab.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825478/",
            "reporter": "anonymous"
        }
    ],
    "3825477": [
        {
            "dateadded": "2026-04-18 21:45:20 UTC",
            "url": "http://110.39.255.129:42139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825477/",
            "reporter": "geenensp"
        }
    ],
    "3825476": [
        {
            "dateadded": "2026-04-18 21:45:19 UTC",
            "url": "http://61.53.193.170:41115/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825476/",
            "reporter": "geenensp"
        }
    ],
    "3825475": [
        {
            "dateadded": "2026-04-18 21:42:22 UTC",
            "url": "http://39.79.108.211:45747/i",
            "url_status": "offline",
            "last_online": "2026-04-18 21:42:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825475/",
            "reporter": "geenensp"
        }
    ],
    "3825474": [
        {
            "dateadded": "2026-04-18 21:41:21 UTC",
            "url": "http://42.6.66.181:50868/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825474/",
            "reporter": "geenensp"
        }
    ],
    "3825473": [
        {
            "dateadded": "2026-04-18 21:38:09 UTC",
            "url": "https://k28gzwh.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825473/",
            "reporter": "anonymous"
        }
    ],
    "3825472": [
        {
            "dateadded": "2026-04-18 21:37:20 UTC",
            "url": "http://123.14.157.175:40022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:35:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825472/",
            "reporter": "geenensp"
        }
    ],
    "3825471": [
        {
            "dateadded": "2026-04-18 21:37:19 UTC",
            "url": "http://110.39.229.159:37697/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:50:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825471/",
            "reporter": "geenensp"
        }
    ],
    "3825470": [
        {
            "dateadded": "2026-04-18 21:30:12 UTC",
            "url": "https://freightframe.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825470/",
            "reporter": "anonymous"
        }
    ],
    "3825469": [
        {
            "dateadded": "2026-04-18 21:26:21 UTC",
            "url": "http://106.4.65.159:57091/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825469/",
            "reporter": "geenensp"
        }
    ],
    "3825468": [
        {
            "dateadded": "2026-04-18 21:25:09 UTC",
            "url": "http://182.124.147.163:40481/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:00:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825468/",
            "reporter": "geenensp"
        }
    ],
    "3825467": [
        {
            "dateadded": "2026-04-18 21:22:13 UTC",
            "url": "https://ledgerinn.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825467/",
            "reporter": "anonymous"
        }
    ],
    "3825466": [
        {
            "dateadded": "2026-04-18 21:22:08 UTC",
            "url": "http://115.49.211.249:55738/i",
            "url_status": "offline",
            "last_online": "2026-04-18 21:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825466/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825465": [
        {
            "dateadded": "2026-04-18 21:20:11 UTC",
            "url": "http://125.40.9.222:57297/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:52:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825465/",
            "reporter": "geenensp"
        }
    ],
    "3825464": [
        {
            "dateadded": "2026-04-18 21:19:12 UTC",
            "url": "http://39.79.108.211:45747/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 21:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825464/",
            "reporter": "geenensp"
        }
    ],
    "3825463": [
        {
            "dateadded": "2026-04-18 21:17:14 UTC",
            "url": "http://182.117.77.55:48956/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825463/",
            "reporter": "geenensp"
        }
    ],
    "3825462": [
        {
            "dateadded": "2026-04-18 21:15:17 UTC",
            "url": "http://120.28.137.87:54550/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:40:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825462/",
            "reporter": "geenensp"
        }
    ],
    "3825461": [
        {
            "dateadded": "2026-04-18 21:15:09 UTC",
            "url": "https://dynnex4on.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825461/",
            "reporter": "anonymous"
        }
    ],
    "3825460": [
        {
            "dateadded": "2026-04-18 21:12:28 UTC",
            "url": "http://112.238.101.44:44128/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825460/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825459": [
        {
            "dateadded": "2026-04-18 21:12:27 UTC",
            "url": "http://112.238.101.44:44128/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:38:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825459/",
            "reporter": "geenensp"
        }
    ],
    "3825458": [
        {
            "dateadded": "2026-04-18 21:12:08 UTC",
            "url": "http://42.230.231.137:46938/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:31:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825458/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825457": [
        {
            "dateadded": "2026-04-18 21:07:11 UTC",
            "url": "https://temp-enc.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 21:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825457/",
            "reporter": "anonymous"
        }
    ],
    "3825456": [
        {
            "dateadded": "2026-04-18 21:07:06 UTC",
            "url": "http://182.120.136.207:53134/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825456/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825455": [
        {
            "dateadded": "2026-04-18 21:02:19 UTC",
            "url": "http://61.53.193.170:41115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:29:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825455/",
            "reporter": "geenensp"
        }
    ],
    "3825454": [
        {
            "dateadded": "2026-04-18 21:00:14 UTC",
            "url": "http://106.4.65.159:57091/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825454/",
            "reporter": "geenensp"
        }
    ],
    "3825453": [
        {
            "dateadded": "2026-04-18 20:59:11 UTC",
            "url": "https://ggsf.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825453/",
            "reporter": "anonymous"
        }
    ],
    "3825452": [
        {
            "dateadded": "2026-04-18 20:57:18 UTC",
            "url": "http://123.8.30.17:44165/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:03:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825452/",
            "reporter": "geenensp"
        }
    ],
    "3825451": [
        {
            "dateadded": "2026-04-18 20:53:18 UTC",
            "url": "http://123.7.227.210:49002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:39:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825451/",
            "reporter": "geenensp"
        }
    ],
    "3825450": [
        {
            "dateadded": "2026-04-18 20:52:12 UTC",
            "url": "https://ubyzw.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825450/",
            "reporter": "anonymous"
        }
    ],
    "3825449": [
        {
            "dateadded": "2026-04-18 20:47:17 UTC",
            "url": "http://120.28.137.87:54550/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 04:54:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825449/",
            "reporter": "geenensp"
        }
    ],
    "3825448": [
        {
            "dateadded": "2026-04-18 20:44:06 UTC",
            "url": "https://castsynt.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825448/",
            "reporter": "anonymous"
        }
    ],
    "3825447": [
        {
            "dateadded": "2026-04-18 20:42:14 UTC",
            "url": "http://123.4.135.164:47012/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 20:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825447/",
            "reporter": "geenensp"
        }
    ],
    "3825446": [
        {
            "dateadded": "2026-04-18 20:42:13 UTC",
            "url": "http://125.41.228.146:57103/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:48:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825446/",
            "reporter": "geenensp"
        }
    ],
    "3825445": [
        {
            "dateadded": "2026-04-18 20:42:07 UTC",
            "url": "http://182.120.136.207:53134/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825445/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825444": [
        {
            "dateadded": "2026-04-18 20:40:20 UTC",
            "url": "http://36.64.184.26:47757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825444/",
            "reporter": "geenensp"
        }
    ],
    "3825443": [
        {
            "dateadded": "2026-04-18 20:36:08 UTC",
            "url": "https://rnerge-field.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825443/",
            "reporter": "anonymous"
        }
    ],
    "3825442": [
        {
            "dateadded": "2026-04-18 20:29:12 UTC",
            "url": "http://113.228.151.196:59139/i",
            "url_status": "offline",
            "last_online": "2026-04-21 06:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825442/",
            "reporter": "geenensp"
        }
    ],
    "3825441": [
        {
            "dateadded": "2026-04-18 20:28:08 UTC",
            "url": "https://sand-visua.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825441/",
            "reporter": "anonymous"
        }
    ],
    "3825440": [
        {
            "dateadded": "2026-04-18 20:21:08 UTC",
            "url": "https://quorvenar4.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825440/",
            "reporter": "anonymous"
        }
    ],
    "3825439": [
        {
            "dateadded": "2026-04-18 20:19:19 UTC",
            "url": "http://39.81.89.212:57930/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:26:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825439/",
            "reporter": "geenensp"
        }
    ],
    "3825438": [
        {
            "dateadded": "2026-04-18 20:17:10 UTC",
            "url": "http://105.186.250.193:57817/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:59:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825438/",
            "reporter": "geenensp"
        }
    ],
    "3825437": [
        {
            "dateadded": "2026-04-18 20:17:07 UTC",
            "url": "http://110.36.24.140:35009/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:59:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825437/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825436": [
        {
            "dateadded": "2026-04-18 20:13:17 UTC",
            "url": "http://115.56.157.55:46743/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:41:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825436/",
            "reporter": "geenensp"
        }
    ],
    "3825435": [
        {
            "dateadded": "2026-04-18 20:13:09 UTC",
            "url": "https://voltdesign.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825435/",
            "reporter": "anonymous"
        }
    ],
    "3825434": [
        {
            "dateadded": "2026-04-18 20:06:09 UTC",
            "url": "https://tritideex2.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 20:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825434/",
            "reporter": "anonymous"
        }
    ],
    "3825433": [
        {
            "dateadded": "2026-04-18 19:59:12 UTC",
            "url": "http://182.127.55.173:54725/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:48:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825433/",
            "reporter": "geenensp"
        }
    ],
    "3825432": [
        {
            "dateadded": "2026-04-18 19:58:08 UTC",
            "url": "https://quorforge3et.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825432/",
            "reporter": "anonymous"
        }
    ],
    "3825430": [
        {
            "dateadded": "2026-04-18 19:56:10 UTC",
            "url": "http://180.157.252.60:41471/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825430/",
            "reporter": "geenensp"
        }
    ],
    "3825431": [
        {
            "dateadded": "2026-04-18 19:56:10 UTC",
            "url": "http://42.234.146.0:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:50:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825431/",
            "reporter": "geenensp"
        }
    ],
    "3825429": [
        {
            "dateadded": "2026-04-18 19:51:08 UTC",
            "url": "https://frame-inn.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825429/",
            "reporter": "anonymous"
        }
    ],
    "3825428": [
        {
            "dateadded": "2026-04-18 19:47:13 UTC",
            "url": "http://182.113.200.103:39367/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825428/",
            "reporter": "geenensp"
        }
    ],
    "3825427": [
        {
            "dateadded": "2026-04-18 19:44:12 UTC",
            "url": "http://110.36.19.51:44824/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:09:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825427/",
            "reporter": "geenensp"
        }
    ],
    "3825426": [
        {
            "dateadded": "2026-04-18 19:44:07 UTC",
            "url": "https://cleanprice.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825426/",
            "reporter": "anonymous"
        }
    ],
    "3825425": [
        {
            "dateadded": "2026-04-18 19:41:21 UTC",
            "url": "http://222.140.184.36:39972/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 19:41:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825425/",
            "reporter": "geenensp"
        }
    ],
    "3825424": [
        {
            "dateadded": "2026-04-18 19:36:08 UTC",
            "url": "https://1jec49.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825424/",
            "reporter": "anonymous"
        }
    ],
    "3825423": [
        {
            "dateadded": "2026-04-18 19:33:13 UTC",
            "url": "http://180.157.252.60:41471/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825423/",
            "reporter": "geenensp"
        }
    ],
    "3825422": [
        {
            "dateadded": "2026-04-18 19:28:06 UTC",
            "url": "https://proto-5cree.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825422/",
            "reporter": "anonymous"
        }
    ],
    "3825420": [
        {
            "dateadded": "2026-04-18 19:21:18 UTC",
            "url": "http://113.229.108.24:37866/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825420/",
            "reporter": "geenensp"
        }
    ],
    "3825421": [
        {
            "dateadded": "2026-04-18 19:21:18 UTC",
            "url": "http://182.127.55.173:54725/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:40:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825421/",
            "reporter": "geenensp"
        }
    ],
    "3825419": [
        {
            "dateadded": "2026-04-18 19:20:12 UTC",
            "url": "https://lpxkdb6.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825419/",
            "reporter": "anonymous"
        }
    ],
    "3825418": [
        {
            "dateadded": "2026-04-18 19:17:16 UTC",
            "url": "http://110.36.19.51:44824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:16:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825418/",
            "reporter": "geenensp"
        }
    ],
    "3825417": [
        {
            "dateadded": "2026-04-18 19:15:16 UTC",
            "url": "http://27.222.59.209:43199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825417/",
            "reporter": "geenensp"
        }
    ],
    "3825416": [
        {
            "dateadded": "2026-04-18 19:13:08 UTC",
            "url": "https://sermesh7ex.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825416/",
            "reporter": "anonymous"
        }
    ],
    "3825414": [
        {
            "dateadded": "2026-04-18 19:12:07 UTC",
            "url": "http://42.238.168.90:49879/i",
            "url_status": "offline",
            "last_online": "2026-04-18 19:12:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825414/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825415": [
        {
            "dateadded": "2026-04-18 19:12:07 UTC",
            "url": "http://42.227.158.237:45907/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825415/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825413": [
        {
            "dateadded": "2026-04-18 19:05:23 UTC",
            "url": "http://119.185.243.168:48355/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:23:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825413/",
            "reporter": "geenensp"
        }
    ],
    "3825412": [
        {
            "dateadded": "2026-04-18 19:05:21 UTC",
            "url": "http://113.229.108.24:37866/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825412/",
            "reporter": "geenensp"
        }
    ],
    "3825411": [
        {
            "dateadded": "2026-04-18 19:05:10 UTC",
            "url": "https://balanmeadow.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 19:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825411/",
            "reporter": "anonymous"
        }
    ],
    "3825410": [
        {
            "dateadded": "2026-04-18 18:58:10 UTC",
            "url": "http://182.113.200.103:39367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825410/",
            "reporter": "geenensp"
        }
    ],
    "3825409": [
        {
            "dateadded": "2026-04-18 18:56:11 UTC",
            "url": "https://edimor.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825409/",
            "reporter": "anonymous"
        }
    ],
    "3825408": [
        {
            "dateadded": "2026-04-18 18:53:21 UTC",
            "url": "http://59.97.249.222:58496/i",
            "url_status": "offline",
            "last_online": "2026-04-18 18:53:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825408/",
            "reporter": "geenensp"
        }
    ],
    "3825407": [
        {
            "dateadded": "2026-04-18 18:52:13 UTC",
            "url": "http://115.57.49.83:49912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825407/",
            "reporter": "geenensp"
        }
    ],
    "3825406": [
        {
            "dateadded": "2026-04-18 18:50:08 UTC",
            "url": "https://dl9p.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825406/",
            "reporter": "anonymous"
        }
    ],
    "3825405": [
        {
            "dateadded": "2026-04-18 18:47:07 UTC",
            "url": "http://42.238.168.90:49879/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 18:47:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825405/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825404": [
        {
            "dateadded": "2026-04-18 18:42:14 UTC",
            "url": "https://zjpd.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825404/",
            "reporter": "anonymous"
        }
    ],
    "3825403": [
        {
            "dateadded": "2026-04-18 18:42:07 UTC",
            "url": "http://42.55.215.87:43772/i",
            "url_status": "offline",
            "last_online": "2026-04-23 22:48:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825403/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825402": [
        {
            "dateadded": "2026-04-18 18:35:09 UTC",
            "url": "https://scannergarden.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825402/",
            "reporter": "anonymous"
        }
    ],
    "3825401": [
        {
            "dateadded": "2026-04-18 18:26:07 UTC",
            "url": "https://c0urie-dock.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825401/",
            "reporter": "anonymous"
        }
    ],
    "3825399": [
        {
            "dateadded": "2026-04-18 18:22:08 UTC",
            "url": "http://115.63.52.94:55155/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:52:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825399/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825400": [
        {
            "dateadded": "2026-04-18 18:22:08 UTC",
            "url": "http://42.55.215.87:43772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 22:57:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825400/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825398": [
        {
            "dateadded": "2026-04-18 18:19:21 UTC",
            "url": "http://42.224.171.192:48323/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:37:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825398/",
            "reporter": "geenensp"
        }
    ],
    "3825397": [
        {
            "dateadded": "2026-04-18 18:18:09 UTC",
            "url": "https://merdra7ix.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825397/",
            "reporter": "anonymous"
        }
    ],
    "3825396": [
        {
            "dateadded": "2026-04-18 18:16:14 UTC",
            "url": "http://42.226.67.33:47120/i",
            "url_status": "offline",
            "last_online": "2026-04-18 18:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825396/",
            "reporter": "geenensp"
        }
    ],
    "3825395": [
        {
            "dateadded": "2026-04-18 18:11:13 UTC",
            "url": "https://vorfluxor5.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825395/",
            "reporter": "anonymous"
        }
    ],
    "3825394": [
        {
            "dateadded": "2026-04-18 18:03:09 UTC",
            "url": "https://ts70.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 18:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825394/",
            "reporter": "anonymous"
        }
    ],
    "3825393": [
        {
            "dateadded": "2026-04-18 17:57:32 UTC",
            "url": "http://42.224.171.192:48323/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:09:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825393/",
            "reporter": "geenensp"
        }
    ],
    "3825392": [
        {
            "dateadded": "2026-04-18 17:56:11 UTC",
            "url": "https://socialplai.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825392/",
            "reporter": "anonymous"
        }
    ],
    "3825391": [
        {
            "dateadded": "2026-04-18 17:54:19 UTC",
            "url": "http://124.133.46.171:44076/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:31:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825391/",
            "reporter": "geenensp"
        }
    ],
    "3825390": [
        {
            "dateadded": "2026-04-18 17:53:22 UTC",
            "url": "http://42.226.67.33:47120/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:53:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825390/",
            "reporter": "geenensp"
        }
    ],
    "3825389": [
        {
            "dateadded": "2026-04-18 17:48:24 UTC",
            "url": "http://115.55.63.164:56596/i",
            "url_status": "offline",
            "last_online": "2026-04-19 06:05:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825389/",
            "reporter": "geenensp"
        }
    ],
    "3825388": [
        {
            "dateadded": "2026-04-18 17:48:14 UTC",
            "url": "https://c0rt3x-spool.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825388/",
            "reporter": "anonymous"
        }
    ],
    "3825387": [
        {
            "dateadded": "2026-04-18 17:45:21 UTC",
            "url": "http://115.55.63.164:56596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825387/",
            "reporter": "geenensp"
        }
    ],
    "3825386": [
        {
            "dateadded": "2026-04-18 17:41:11 UTC",
            "url": "https://7skoub.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825386/",
            "reporter": "anonymous"
        }
    ],
    "3825385": [
        {
            "dateadded": "2026-04-18 17:33:24 UTC",
            "url": "http://175.151.255.237:45797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:43:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825385/",
            "reporter": "geenensp"
        }
    ],
    "3825384": [
        {
            "dateadded": "2026-04-18 17:33:19 UTC",
            "url": "https://glacierfocu.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825384/",
            "reporter": "anonymous"
        }
    ],
    "3825383": [
        {
            "dateadded": "2026-04-18 17:27:22 UTC",
            "url": "http://221.15.143.17:35279/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:08:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825383/",
            "reporter": "geenensp"
        }
    ],
    "3825382": [
        {
            "dateadded": "2026-04-18 17:25:13 UTC",
            "url": "https://isy00.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825382/",
            "reporter": "anonymous"
        }
    ],
    "3825381": [
        {
            "dateadded": "2026-04-18 17:23:21 UTC",
            "url": "http://115.49.64.38:36313/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825381/",
            "reporter": "geenensp"
        }
    ],
    "3825380": [
        {
            "dateadded": "2026-04-18 17:19:14 UTC",
            "url": "http://123.14.88.30:57807/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825380/",
            "reporter": "geenensp"
        }
    ],
    "3825379": [
        {
            "dateadded": "2026-04-18 17:18:13 UTC",
            "url": "https://53xs2msk.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825379/",
            "reporter": "anonymous"
        }
    ],
    "3825378": [
        {
            "dateadded": "2026-04-18 17:13:26 UTC",
            "url": "http://218.60.179.130:55164/i",
            "url_status": "offline",
            "last_online": "2026-04-25 18:03:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825378/",
            "reporter": "geenensp"
        }
    ],
    "3825377": [
        {
            "dateadded": "2026-04-18 17:11:06 UTC",
            "url": "https://wcq78s.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825377/",
            "reporter": "anonymous"
        }
    ],
    "3825375": [
        {
            "dateadded": "2026-04-18 17:07:07 UTC",
            "url": "http://110.39.234.150:55111/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:29:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825375/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825376": [
        {
            "dateadded": "2026-04-18 17:07:07 UTC",
            "url": "http://123.5.154.10:51080/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:58:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825376/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825374": [
        {
            "dateadded": "2026-04-18 17:04:31 UTC",
            "url": "http://123.14.88.30:57807/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825374/",
            "reporter": "geenensp"
        }
    ],
    "3825373": [
        {
            "dateadded": "2026-04-18 17:02:16 UTC",
            "url": "https://triggerclean.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 17:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825373/",
            "reporter": "anonymous"
        }
    ],
    "3825372": [
        {
            "dateadded": "2026-04-18 17:02:10 UTC",
            "url": "http://123.5.154.10:51080/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825372/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825371": [
        {
            "dateadded": "2026-04-18 16:54:13 UTC",
            "url": "https://kelforgeon.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825371/",
            "reporter": "anonymous"
        }
    ],
    "3825370": [
        {
            "dateadded": "2026-04-18 16:52:27 UTC",
            "url": "http://218.60.179.130:55164/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825370/",
            "reporter": "geenensp"
        }
    ],
    "3825369": [
        {
            "dateadded": "2026-04-18 16:47:17 UTC",
            "url": "https://sollithum1.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:47:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825369/",
            "reporter": "anonymous"
        }
    ],
    "3825368": [
        {
            "dateadded": "2026-04-18 16:47:07 UTC",
            "url": "http://110.39.238.26:41577/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825368/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825367": [
        {
            "dateadded": "2026-04-18 16:39:26 UTC",
            "url": "http://85.12.205.35:52084/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:57:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825367/",
            "reporter": "geenensp"
        }
    ],
    "3825366": [
        {
            "dateadded": "2026-04-18 16:39:07 UTC",
            "url": "https://spri5-grid.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825366/",
            "reporter": "anonymous"
        }
    ],
    "3825365": [
        {
            "dateadded": "2026-04-18 16:32:08 UTC",
            "url": "http://115.63.52.94:55155/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825365/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825364": [
        {
            "dateadded": "2026-04-18 16:31:14 UTC",
            "url": "https://runtimeport.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825364/",
            "reporter": "anonymous"
        }
    ],
    "3825363": [
        {
            "dateadded": "2026-04-18 16:28:24 UTC",
            "url": "http://42.224.82.204:38990/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:47:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825363/",
            "reporter": "geenensp"
        }
    ],
    "3825362": [
        {
            "dateadded": "2026-04-18 16:27:31 UTC",
            "url": "http://221.14.171.206:37998/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:42:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825362/",
            "reporter": "geenensp"
        }
    ],
    "3825361": [
        {
            "dateadded": "2026-04-18 16:23:15 UTC",
            "url": "https://r0ut-line.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825361/",
            "reporter": "anonymous"
        }
    ],
    "3825360": [
        {
            "dateadded": "2026-04-18 16:17:12 UTC",
            "url": "https://sfcbq.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825360/",
            "reporter": "anonymous"
        }
    ],
    "3825359": [
        {
            "dateadded": "2026-04-18 16:17:10 UTC",
            "url": "http://110.39.238.26:41577/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:26:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825359/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825358": [
        {
            "dateadded": "2026-04-18 16:08:12 UTC",
            "url": "https://ibjxfl.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825358/",
            "reporter": "anonymous"
        }
    ],
    "3825357": [
        {
            "dateadded": "2026-04-18 16:01:10 UTC",
            "url": "https://plan-couri.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 16:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825357/",
            "reporter": "anonymous"
        }
    ],
    "3825356": [
        {
            "dateadded": "2026-04-18 15:57:08 UTC",
            "url": "http://110.37.18.108:33475/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:37:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825356/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825355": [
        {
            "dateadded": "2026-04-18 15:54:14 UTC",
            "url": "https://l0c4l-phase.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825355/",
            "reporter": "anonymous"
        }
    ],
    "3825354": [
        {
            "dateadded": "2026-04-18 15:52:07 UTC",
            "url": "http://27.215.110.170:36350/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:10:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825354/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825353": [
        {
            "dateadded": "2026-04-18 15:46:21 UTC",
            "url": "http://123.132.146.90:53177/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:42:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825353/",
            "reporter": "geenensp"
        }
    ],
    "3825352": [
        {
            "dateadded": "2026-04-18 15:46:10 UTC",
            "url": "https://crims0n-path.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825352/",
            "reporter": "anonymous"
        }
    ],
    "3825350": [
        {
            "dateadded": "2026-04-18 15:39:18 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:07:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825350/",
            "reporter": "botnetkiller"
        }
    ],
    "3825351": [
        {
            "dateadded": "2026-04-18 15:39:18 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:38:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825351/",
            "reporter": "botnetkiller"
        }
    ],
    "3825349": [
        {
            "dateadded": "2026-04-18 15:39:07 UTC",
            "url": "https://c4rry-index.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825349/",
            "reporter": "anonymous"
        }
    ],
    "3825348": [
        {
            "dateadded": "2026-04-18 15:38:20 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825348/",
            "reporter": "botnetkiller"
        }
    ],
    "3825346": [
        {
            "dateadded": "2026-04-18 15:38:18 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 10:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825346/",
            "reporter": "botnetkiller"
        }
    ],
    "3825347": [
        {
            "dateadded": "2026-04-18 15:38:18 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:46:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825347/",
            "reporter": "botnetkiller"
        }
    ],
    "3825337": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://42.229.216.18:52636/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:46:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825337/",
            "reporter": "geenensp"
        }
    ],
    "3825338": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825338/",
            "reporter": "botnetkiller"
        }
    ],
    "3825339": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825339/",
            "reporter": "botnetkiller"
        }
    ],
    "3825340": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:07:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825340/",
            "reporter": "botnetkiller"
        }
    ],
    "3825341": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825341/",
            "reporter": "botnetkiller"
        }
    ],
    "3825342": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825342/",
            "reporter": "botnetkiller"
        }
    ],
    "3825343": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825343/",
            "reporter": "botnetkiller"
        }
    ],
    "3825344": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 10:52:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825344/",
            "reporter": "botnetkiller"
        }
    ],
    "3825345": [
        {
            "dateadded": "2026-04-18 15:38:15 UTC",
            "url": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:19:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825345/",
            "reporter": "botnetkiller"
        }
    ],
    "3825336": [
        {
            "dateadded": "2026-04-18 15:37:11 UTC",
            "url": "http://45.135.193.114/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825336/",
            "reporter": "botnetkiller"
        }
    ],
    "3825335": [
        {
            "dateadded": "2026-04-18 15:37:10 UTC",
            "url": "http://65.87.7.5/lll",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825335/",
            "reporter": "botnetkiller"
        }
    ],
    "3825330": [
        {
            "dateadded": "2026-04-18 15:37:07 UTC",
            "url": "http://65.87.7.5/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825330/",
            "reporter": "botnetkiller"
        }
    ],
    "3825331": [
        {
            "dateadded": "2026-04-18 15:37:07 UTC",
            "url": "http://176.65.148.173/i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825331/",
            "reporter": "botnetkiller"
        }
    ],
    "3825332": [
        {
            "dateadded": "2026-04-18 15:37:07 UTC",
            "url": "http://176.65.148.173/arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825332/",
            "reporter": "botnetkiller"
        }
    ],
    "3825333": [
        {
            "dateadded": "2026-04-18 15:37:07 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825333/",
            "reporter": "botnetkiller"
        }
    ],
    "3825334": [
        {
            "dateadded": "2026-04-18 15:37:07 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825334/",
            "reporter": "botnetkiller"
        }
    ],
    "3825329": [
        {
            "dateadded": "2026-04-18 15:35:21 UTC",
            "url": "http://42.229.216.18:52636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825329/",
            "reporter": "geenensp"
        }
    ],
    "3825328": [
        {
            "dateadded": "2026-04-18 15:32:19 UTC",
            "url": "http://61.53.80.189:43465/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825328/",
            "reporter": "geenensp"
        }
    ],
    "3825323": [
        {
            "dateadded": "2026-04-18 15:31:20 UTC",
            "url": "http://176.65.139.115/FBI.sh4",
            "url_status": "offline",
            "last_online": "2026-04-21 04:51:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825323/",
            "reporter": "botnetkiller"
        }
    ],
    "3825324": [
        {
            "dateadded": "2026-04-18 15:31:20 UTC",
            "url": "http://176.65.139.115/FBI.i686",
            "url_status": "offline",
            "last_online": "2026-04-21 05:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825324/",
            "reporter": "botnetkiller"
        }
    ],
    "3825325": [
        {
            "dateadded": "2026-04-18 15:31:20 UTC",
            "url": "http://176.65.139.115/FBI.arm6",
            "url_status": "offline",
            "last_online": "2026-04-21 05:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825325/",
            "reporter": "botnetkiller"
        }
    ],
    "3825326": [
        {
            "dateadded": "2026-04-18 15:31:20 UTC",
            "url": "http://176.65.139.115/FBI.x86",
            "url_status": "offline",
            "last_online": "2026-04-21 05:45:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825326/",
            "reporter": "botnetkiller"
        }
    ],
    "3825327": [
        {
            "dateadded": "2026-04-18 15:31:20 UTC",
            "url": "http://176.65.139.115/FBI.arm7",
            "url_status": "offline",
            "last_online": "2026-04-20 23:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825327/",
            "reporter": "botnetkiller"
        }
    ],
    "3825322": [
        {
            "dateadded": "2026-04-18 15:31:11 UTC",
            "url": "https://atom0-bridge.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825322/",
            "reporter": "anonymous"
        }
    ],
    "3825321": [
        {
            "dateadded": "2026-04-18 15:30:25 UTC",
            "url": "http://176.65.139.115/FBI.arm5",
            "url_status": "offline",
            "last_online": "2026-04-20 23:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825321/",
            "reporter": "botnetkiller"
        }
    ],
    "3825319": [
        {
            "dateadded": "2026-04-18 15:30:24 UTC",
            "url": "http://176.65.139.115/FBI.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-21 04:43:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825319/",
            "reporter": "botnetkiller"
        }
    ],
    "3825320": [
        {
            "dateadded": "2026-04-18 15:30:24 UTC",
            "url": "http://176.65.139.115/FBI.ppc",
            "url_status": "offline",
            "last_online": "2026-04-20 22:49:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825320/",
            "reporter": "botnetkiller"
        }
    ],
    "3825317": [
        {
            "dateadded": "2026-04-18 15:30:23 UTC",
            "url": "http://176.65.139.115/FBI.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825317/",
            "reporter": "botnetkiller"
        }
    ],
    "3825318": [
        {
            "dateadded": "2026-04-18 15:30:23 UTC",
            "url": "http://176.65.139.115/FBI.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825318/",
            "reporter": "botnetkiller"
        }
    ],
    "3825313": [
        {
            "dateadded": "2026-04-18 15:30:22 UTC",
            "url": "http://176.65.139.115/FBI.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825313/",
            "reporter": "botnetkiller"
        }
    ],
    "3825314": [
        {
            "dateadded": "2026-04-18 15:30:22 UTC",
            "url": "http://176.65.139.115/FBI.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825314/",
            "reporter": "botnetkiller"
        }
    ],
    "3825315": [
        {
            "dateadded": "2026-04-18 15:30:22 UTC",
            "url": "http://176.65.139.115/FBI.ppc-440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825315/",
            "reporter": "botnetkiller"
        }
    ],
    "3825316": [
        {
            "dateadded": "2026-04-18 15:30:22 UTC",
            "url": "http://176.65.139.115/FBI.mips",
            "url_status": "offline",
            "last_online": "2026-04-21 05:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825316/",
            "reporter": "botnetkiller"
        }
    ],
    "3825312": [
        {
            "dateadded": "2026-04-18 15:30:20 UTC",
            "url": "http://176.65.139.115/FBI.i586",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825312/",
            "reporter": "botnetkiller"
        }
    ],
    "3825311": [
        {
            "dateadded": "2026-04-18 15:30:15 UTC",
            "url": "http://176.65.139.115/FBI.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825311/",
            "reporter": "botnetkiller"
        }
    ],
    "3825309": [
        {
            "dateadded": "2026-04-18 15:27:06 UTC",
            "url": "http://125.41.169.214:35752/i",
            "url_status": "offline",
            "last_online": "2026-04-19 06:09:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825309/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825310": [
        {
            "dateadded": "2026-04-18 15:27:06 UTC",
            "url": "http://125.41.6.169:56221/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825310/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825308": [
        {
            "dateadded": "2026-04-18 15:25:10 UTC",
            "url": "http://125.40.9.222:57297/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:28:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825308/",
            "reporter": "geenensp"
        }
    ],
    "3825307": [
        {
            "dateadded": "2026-04-18 15:23:20 UTC",
            "url": "http://182.119.253.241:49522/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:50:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825307/",
            "reporter": "geenensp"
        }
    ],
    "3825306": [
        {
            "dateadded": "2026-04-18 15:23:12 UTC",
            "url": "https://mer-draet.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825306/",
            "reporter": "anonymous"
        }
    ],
    "3825305": [
        {
            "dateadded": "2026-04-18 15:16:09 UTC",
            "url": "https://1e4r-span.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825305/",
            "reporter": "anonymous"
        }
    ],
    "3825304": [
        {
            "dateadded": "2026-04-18 15:12:08 UTC",
            "url": "http://115.58.157.39:33156/i",
            "url_status": "offline",
            "last_online": "2026-04-20 19:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825304/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825303": [
        {
            "dateadded": "2026-04-18 15:08:17 UTC",
            "url": "http://176.65.139.115/O.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825303/",
            "reporter": "botnetkiller"
        }
    ],
    "3825302": [
        {
            "dateadded": "2026-04-18 15:08:11 UTC",
            "url": "https://6a00327.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825302/",
            "reporter": "anonymous"
        }
    ],
    "3825301": [
        {
            "dateadded": "2026-04-18 15:01:19 UTC",
            "url": "http://182.119.253.241:49522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825301/",
            "reporter": "geenensp"
        }
    ],
    "3825300": [
        {
            "dateadded": "2026-04-18 15:00:10 UTC",
            "url": "https://sx9v1.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 15:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825300/",
            "reporter": "anonymous"
        }
    ],
    "3825299": [
        {
            "dateadded": "2026-04-18 14:57:16 UTC",
            "url": "http://27.207.161.220:54617/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:55:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825299/",
            "reporter": "geenensp"
        }
    ],
    "3825297": [
        {
            "dateadded": "2026-04-18 14:57:07 UTC",
            "url": "http://125.41.6.169:56221/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825297/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825298": [
        {
            "dateadded": "2026-04-18 14:57:07 UTC",
            "url": "http://125.41.169.214:35752/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:45:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825298/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825296": [
        {
            "dateadded": "2026-04-18 14:53:09 UTC",
            "url": "https://watch-signal.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825296/",
            "reporter": "anonymous"
        }
    ],
    "3825295": [
        {
            "dateadded": "2026-04-18 14:52:18 UTC",
            "url": "http://125.46.221.62:40576/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:03:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825295/",
            "reporter": "geenensp"
        }
    ],
    "3825294": [
        {
            "dateadded": "2026-04-18 14:44:08 UTC",
            "url": "https://rwwolv22.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825294/",
            "reporter": "anonymous"
        }
    ],
    "3825293": [
        {
            "dateadded": "2026-04-18 14:42:10 UTC",
            "url": "http://195.64.233.167:4593/.i",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825293/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825292": [
        {
            "dateadded": "2026-04-18 14:37:09 UTC",
            "url": "https://stab7-sheet.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825292/",
            "reporter": "anonymous"
        }
    ],
    "3825291": [
        {
            "dateadded": "2026-04-18 14:31:17 UTC",
            "url": "http://27.207.161.220:54617/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 04:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825291/",
            "reporter": "geenensp"
        }
    ],
    "3825290": [
        {
            "dateadded": "2026-04-18 14:29:07 UTC",
            "url": "https://veldraex9.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825290/",
            "reporter": "anonymous"
        }
    ],
    "3825289": [
        {
            "dateadded": "2026-04-18 14:24:09 UTC",
            "url": "http://123.8.42.99:41179/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825289/",
            "reporter": "geenensp"
        }
    ],
    "3825288": [
        {
            "dateadded": "2026-04-18 14:22:12 UTC",
            "url": "https://3wteeo.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825288/",
            "reporter": "anonymous"
        }
    ],
    "3825287": [
        {
            "dateadded": "2026-04-18 14:20:21 UTC",
            "url": "http://39.89.164.173:37039/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:37:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825287/",
            "reporter": "geenensp"
        }
    ],
    "3825286": [
        {
            "dateadded": "2026-04-18 14:14:12 UTC",
            "url": "https://bluhz.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825286/",
            "reporter": "anonymous"
        }
    ],
    "3825285": [
        {
            "dateadded": "2026-04-18 14:11:19 UTC",
            "url": "http://61.53.149.92:54741/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825285/",
            "reporter": "geenensp"
        }
    ],
    "3825284": [
        {
            "dateadded": "2026-04-18 14:11:18 UTC",
            "url": "http://110.37.53.236:32928/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:26:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825284/",
            "reporter": "geenensp"
        }
    ],
    "3825283": [
        {
            "dateadded": "2026-04-18 14:07:17 UTC",
            "url": "http://182.116.91.238:47673/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:44:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825283/",
            "reporter": "geenensp"
        }
    ],
    "3825282": [
        {
            "dateadded": "2026-04-18 14:06:10 UTC",
            "url": "https://broker-plate.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 14:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825282/",
            "reporter": "anonymous"
        }
    ],
    "3825281": [
        {
            "dateadded": "2026-04-18 14:02:23 UTC",
            "url": "http://36.71.31.7:48002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:52:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825281/",
            "reporter": "geenensp"
        }
    ],
    "3825280": [
        {
            "dateadded": "2026-04-18 14:00:20 UTC",
            "url": "http://182.116.91.238:47673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825280/",
            "reporter": "geenensp"
        }
    ],
    "3825279": [
        {
            "dateadded": "2026-04-18 13:59:14 UTC",
            "url": "https://geo-via1.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825279/",
            "reporter": "anonymous"
        }
    ],
    "3825278": [
        {
            "dateadded": "2026-04-18 13:57:24 UTC",
            "url": "http://60.18.51.153:37929/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825278/",
            "reporter": "geenensp"
        }
    ],
    "3825277": [
        {
            "dateadded": "2026-04-18 13:56:20 UTC",
            "url": "http://123.8.42.99:41179/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825277/",
            "reporter": "geenensp"
        }
    ],
    "3825276": [
        {
            "dateadded": "2026-04-18 13:52:07 UTC",
            "url": "http://219.155.224.101:41959/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825276/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825275": [
        {
            "dateadded": "2026-04-18 13:51:11 UTC",
            "url": "https://2gxb0vyl.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825275/",
            "reporter": "anonymous"
        }
    ],
    "3825274": [
        {
            "dateadded": "2026-04-18 13:50:20 UTC",
            "url": "http://110.37.53.236:32928/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825274/",
            "reporter": "geenensp"
        }
    ],
    "3825273": [
        {
            "dateadded": "2026-04-18 13:44:09 UTC",
            "url": "https://talcoreos.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825273/",
            "reporter": "anonymous"
        }
    ],
    "3825272": [
        {
            "dateadded": "2026-04-18 13:42:19 UTC",
            "url": "http://39.67.103.35:46835/i",
            "url_status": "offline",
            "last_online": "2026-04-18 13:42:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825272/",
            "reporter": "geenensp"
        }
    ],
    "3825271": [
        {
            "dateadded": "2026-04-18 13:42:18 UTC",
            "url": "http://188.129.211.113:35924/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:49:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825271/",
            "reporter": "geenensp"
        }
    ],
    "3825270": [
        {
            "dateadded": "2026-04-18 13:36:11 UTC",
            "url": "https://sri4.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825270/",
            "reporter": "anonymous"
        }
    ],
    "3825269": [
        {
            "dateadded": "2026-04-18 13:30:21 UTC",
            "url": "https://filebin.net/lowoyel91h576uav/cag54tgv8n",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825269/",
            "reporter": "NDA0E"
        }
    ],
    "3825268": [
        {
            "dateadded": "2026-04-18 13:30:13 UTC",
            "url": "http://161.97.173.12:8000/bot_mipsle",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825268/",
            "reporter": "NDA0E"
        }
    ],
    "3825267": [
        {
            "dateadded": "2026-04-18 13:28:16 UTC",
            "url": "https://layoutcrawle.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825267/",
            "reporter": "anonymous"
        }
    ],
    "3825266": [
        {
            "dateadded": "2026-04-18 13:20:08 UTC",
            "url": "https://52hb.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825266/",
            "reporter": "anonymous"
        }
    ],
    "3825265": [
        {
            "dateadded": "2026-04-18 13:17:14 UTC",
            "url": "http://42.224.97.209:59894/i",
            "url_status": "offline",
            "last_online": "2026-04-19 00:03:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825265/",
            "reporter": "geenensp"
        }
    ],
    "3825264": [
        {
            "dateadded": "2026-04-18 13:15:19 UTC",
            "url": "http://222.142.195.25:46636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825264/",
            "reporter": "geenensp"
        }
    ],
    "3825263": [
        {
            "dateadded": "2026-04-18 13:14:10 UTC",
            "url": "http://39.67.103.35:46835/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 13:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825263/",
            "reporter": "geenensp"
        }
    ],
    "3825262": [
        {
            "dateadded": "2026-04-18 13:14:07 UTC",
            "url": "https://sub-the0.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825262/",
            "reporter": "anonymous"
        }
    ],
    "3825261": [
        {
            "dateadded": "2026-04-18 13:11:08 UTC",
            "url": "https://asdf.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825261/",
            "reporter": "anonymous"
        }
    ],
    "3825260": [
        {
            "dateadded": "2026-04-18 13:10:19 UTC",
            "url": "http://108.170.136.155:60886/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:10:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825260/",
            "reporter": "geenensp"
        }
    ],
    "3825259": [
        {
            "dateadded": "2026-04-18 13:08:10 UTC",
            "url": "https://lowa.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 13:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825259/",
            "reporter": "anonymous"
        }
    ],
    "3825258": [
        {
            "dateadded": "2026-04-18 13:07:07 UTC",
            "url": "http://202.107.97.72:50487/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:14:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825258/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825257": [
        {
            "dateadded": "2026-04-18 12:59:10 UTC",
            "url": "https://low-cost6.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825257/",
            "reporter": "anonymous"
        }
    ],
    "3825256": [
        {
            "dateadded": "2026-04-18 12:52:08 UTC",
            "url": "https://best-deal5.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825256/",
            "reporter": "anonymous"
        }
    ],
    "3825255": [
        {
            "dateadded": "2026-04-18 12:47:18 UTC",
            "url": "http://115.49.4.155:43883/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:31:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825255/",
            "reporter": "geenensp"
        }
    ],
    "3825253": [
        {
            "dateadded": "2026-04-18 12:47:07 UTC",
            "url": "http://168.195.7.105:40595/i",
            "url_status": "offline",
            "last_online": "2026-04-18 12:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825253/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825254": [
        {
            "dateadded": "2026-04-18 12:47:07 UTC",
            "url": "http://123.10.0.193:51201/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825254/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825252": [
        {
            "dateadded": "2026-04-18 12:44:07 UTC",
            "url": "https://new-stock4.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825252/",
            "reporter": "anonymous"
        }
    ],
    "3825251": [
        {
            "dateadded": "2026-04-18 12:42:09 UTC",
            "url": "http://108.170.136.155:60886/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:37:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825251/",
            "reporter": "geenensp"
        }
    ],
    "3825250": [
        {
            "dateadded": "2026-04-18 12:37:07 UTC",
            "url": "http://202.107.97.72:50487/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:38:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825250/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825249": [
        {
            "dateadded": "2026-04-18 12:36:10 UTC",
            "url": "https://gift-item3.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825249/",
            "reporter": "anonymous"
        }
    ],
    "3825248": [
        {
            "dateadded": "2026-04-18 12:29:12 UTC",
            "url": "https://sale-price2.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825248/",
            "reporter": "anonymous"
        }
    ],
    "3825247": [
        {
            "dateadded": "2026-04-18 12:27:18 UTC",
            "url": "http://105.184.152.109:54081/i",
            "url_status": "offline",
            "last_online": "2026-04-18 12:27:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825247/",
            "reporter": "geenensp"
        }
    ],
    "3825246": [
        {
            "dateadded": "2026-04-18 12:26:17 UTC",
            "url": "http://125.46.134.141:58243/i",
            "url_status": "offline",
            "last_online": "2026-04-18 12:26:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825246/",
            "reporter": "geenensp"
        }
    ],
    "3825245": [
        {
            "dateadded": "2026-04-18 12:22:30 UTC",
            "url": "http://115.50.227.85:60753/i",
            "url_status": "offline",
            "last_online": "2026-04-19 18:04:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825245/",
            "reporter": "geenensp"
        }
    ],
    "3825244": [
        {
            "dateadded": "2026-04-18 12:22:10 UTC",
            "url": "https://shop-list1.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825244/",
            "reporter": "anonymous"
        }
    ],
    "3825242": [
        {
            "dateadded": "2026-04-18 12:19:16 UTC",
            "url": "http://110.36.27.207:51914/i",
            "url_status": "offline",
            "last_online": "2026-04-26 00:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825242/",
            "reporter": "geenensp"
        }
    ],
    "3825243": [
        {
            "dateadded": "2026-04-18 12:19:16 UTC",
            "url": "http://58.54.52.122:40553/i",
            "url_status": "offline",
            "last_online": "2026-04-21 17:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825243/",
            "reporter": "geenensp"
        }
    ],
    "3825241": [
        {
            "dateadded": "2026-04-18 12:18:22 UTC",
            "url": "http://115.49.4.155:43883/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825241/",
            "reporter": "geenensp"
        }
    ],
    "3825240": [
        {
            "dateadded": "2026-04-18 12:17:08 UTC",
            "url": "http://168.195.7.105:40595/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 12:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825240/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825239": [
        {
            "dateadded": "2026-04-18 12:14:09 UTC",
            "url": "http://105.225.135.20:60119/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825239/",
            "reporter": "geenensp"
        }
    ],
    "3825238": [
        {
            "dateadded": "2026-04-18 12:13:10 UTC",
            "url": "https://tasty-ham6.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825238/",
            "reporter": "anonymous"
        }
    ],
    "3825237": [
        {
            "dateadded": "2026-04-18 12:10:20 UTC",
            "url": "http://101.50.71.149:48916/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825237/",
            "reporter": "geenensp"
        }
    ],
    "3825236": [
        {
            "dateadded": "2026-04-18 12:06:15 UTC",
            "url": "https://cool-mint5.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 12:06:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825236/",
            "reporter": "anonymous"
        }
    ],
    "3825235": [
        {
            "dateadded": "2026-04-18 11:58:13 UTC",
            "url": "https://hot-grill4.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825235/",
            "reporter": "anonymous"
        }
    ],
    "3825234": [
        {
            "dateadded": "2026-04-18 11:55:22 UTC",
            "url": "http://110.36.27.207:51914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:42:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825234/",
            "reporter": "geenensp"
        }
    ],
    "3825233": [
        {
            "dateadded": "2026-04-18 11:54:19 UTC",
            "url": "http://58.54.52.122:40553/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 19:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825233/",
            "reporter": "geenensp"
        }
    ],
    "3825232": [
        {
            "dateadded": "2026-04-18 11:51:11 UTC",
            "url": "https://sweet-pie3.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825232/",
            "reporter": "anonymous"
        }
    ],
    "3825231": [
        {
            "dateadded": "2026-04-18 11:50:22 UTC",
            "url": "http://105.184.76.52:43331/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825231/",
            "reporter": "geenensp"
        }
    ],
    "3825230": [
        {
            "dateadded": "2026-04-18 11:48:23 UTC",
            "url": "http://105.184.76.52:43331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:51:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825230/",
            "reporter": "geenensp"
        }
    ],
    "3825229": [
        {
            "dateadded": "2026-04-18 11:47:16 UTC",
            "url": "http://115.55.199.80:45710/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:33:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825229/",
            "reporter": "geenensp"
        }
    ],
    "3825228": [
        {
            "dateadded": "2026-04-18 11:43:07 UTC",
            "url": "https://best-food2.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825228/",
            "reporter": "anonymous"
        }
    ],
    "3825227": [
        {
            "dateadded": "2026-04-18 11:34:10 UTC",
            "url": "https://cnpaintequipment.com/",
            "url_status": "offline",
            "last_online": "2026-04-20 10:47:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825227/",
            "reporter": "abuse_ch"
        }
    ],
    "3825226": [
        {
            "dateadded": "2026-04-18 11:34:09 UTC",
            "url": "https://home-chef1.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825226/",
            "reporter": "anonymous"
        }
    ],
    "3825225": [
        {
            "dateadded": "2026-04-18 11:33:19 UTC",
            "url": "https://insureongo.net/armistixconp.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 11:50:56 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825225/",
            "reporter": "abuse_ch"
        }
    ],
    "3825224": [
        {
            "dateadded": "2026-04-18 11:29:11 UTC",
            "url": "http://xrplnode.dev/install",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825224/",
            "reporter": "abuse_ch"
        }
    ],
    "3825223": [
        {
            "dateadded": "2026-04-18 11:27:12 UTC",
            "url": "https://page-link6.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825223/",
            "reporter": "anonymous"
        }
    ],
    "3825222": [
        {
            "dateadded": "2026-04-18 11:20:10 UTC",
            "url": "https://user-info5.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825222/",
            "reporter": "anonymous"
        }
    ],
    "3825221": [
        {
            "dateadded": "2026-04-18 11:18:23 UTC",
            "url": "http://115.53.216.204:51513/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825221/",
            "reporter": "geenensp"
        }
    ],
    "3825220": [
        {
            "dateadded": "2026-04-18 11:12:13 UTC",
            "url": "http://115.59.4.244:60762/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:21:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825220/",
            "reporter": "geenensp"
        }
    ],
    "3825219": [
        {
            "dateadded": "2026-04-18 11:11:10 UTC",
            "url": "https://site-map4.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825219/",
            "reporter": "anonymous"
        }
    ],
    "3825218": [
        {
            "dateadded": "2026-04-18 11:09:17 UTC",
            "url": "http://45.166.188.48:34864/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825218/",
            "reporter": "geenensp"
        }
    ],
    "3825217": [
        {
            "dateadded": "2026-04-18 11:05:09 UTC",
            "url": "https://post-card3.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 11:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825217/",
            "reporter": "anonymous"
        }
    ],
    "3825216": [
        {
            "dateadded": "2026-04-18 10:59:22 UTC",
            "url": "http://123.10.51.10:59125/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825216/",
            "reporter": "geenensp"
        }
    ],
    "3825215": [
        {
            "dateadded": "2026-04-18 10:57:21 UTC",
            "url": "http://42.235.42.55:57811/i",
            "url_status": "offline",
            "last_online": "2026-04-22 10:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825215/",
            "reporter": "geenensp"
        }
    ],
    "3825214": [
        {
            "dateadded": "2026-04-18 10:57:12 UTC",
            "url": "https://news-feed2.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825214/",
            "reporter": "anonymous"
        }
    ],
    "3825213": [
        {
            "dateadded": "2026-04-18 10:50:15 UTC",
            "url": "https://web-blog1.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825213/",
            "reporter": "anonymous"
        }
    ],
    "3825212": [
        {
            "dateadded": "2026-04-18 10:49:26 UTC",
            "url": "http://115.55.199.80:45710/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825212/",
            "reporter": "geenensp"
        }
    ],
    "3825211": [
        {
            "dateadded": "2026-04-18 10:45:19 UTC",
            "url": "http://115.53.216.204:51513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825211/",
            "reporter": "geenensp"
        }
    ],
    "3825210": [
        {
            "dateadded": "2026-04-18 10:45:18 UTC",
            "url": "http://171.36.118.239:53826/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:46:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825210/",
            "reporter": "geenensp"
        }
    ],
    "3825209": [
        {
            "dateadded": "2026-04-18 10:44:29 UTC",
            "url": "http://171.36.118.239:53826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825209/",
            "reporter": "geenensp"
        }
    ],
    "3825208": [
        {
            "dateadded": "2026-04-18 10:42:14 UTC",
            "url": "https://new-level6.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825208/",
            "reporter": "anonymous"
        }
    ],
    "3825207": [
        {
            "dateadded": "2026-04-18 10:37:07 UTC",
            "url": "http://39.79.59.177:56767/i",
            "url_status": "offline",
            "last_online": "2026-04-20 05:11:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825207/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825206": [
        {
            "dateadded": "2026-04-18 10:35:23 UTC",
            "url": "http://222.138.227.182:42377/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:59:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825206/",
            "reporter": "geenensp"
        }
    ],
    "3825205": [
        {
            "dateadded": "2026-04-18 10:35:15 UTC",
            "url": "https://team-win5.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825205/",
            "reporter": "anonymous"
        }
    ],
    "3825204": [
        {
            "dateadded": "2026-04-18 10:32:07 UTC",
            "url": "http://123.10.237.235:45466/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:59:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825204/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825203": [
        {
            "dateadded": "2026-04-18 10:28:25 UTC",
            "url": "http://221.15.143.17:35279/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:41:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825203/",
            "reporter": "geenensp"
        }
    ],
    "3825202": [
        {
            "dateadded": "2026-04-18 10:27:26 UTC",
            "url": "http://61.52.80.59:40184/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825202/",
            "reporter": "geenensp"
        }
    ],
    "3825201": [
        {
            "dateadded": "2026-04-18 10:27:19 UTC",
            "url": "https://fast-move4.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825201/",
            "reporter": "anonymous"
        }
    ],
    "3825200": [
        {
            "dateadded": "2026-04-18 10:27:10 UTC",
            "url": "http://110.36.20.85:40051/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 14:45:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825200/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825199": [
        {
            "dateadded": "2026-04-18 10:23:16 UTC",
            "url": "http://105.226.10.165:44977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:45:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825199/",
            "reporter": "geenensp"
        }
    ],
    "3825198": [
        {
            "dateadded": "2026-04-18 10:20:18 UTC",
            "url": "http://115.48.148.65:54393/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825198/",
            "reporter": "geenensp"
        }
    ],
    "3825197": [
        {
            "dateadded": "2026-04-18 10:19:10 UTC",
            "url": "https://best-score3.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825197/",
            "reporter": "anonymous"
        }
    ],
    "3825196": [
        {
            "dateadded": "2026-04-18 10:17:13 UTC",
            "url": "http://123.10.237.235:45466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825196/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825195": [
        {
            "dateadded": "2026-04-18 10:13:08 UTC",
            "url": "http://110.36.93.182:56503/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:28:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825195/",
            "reporter": "geenensp"
        }
    ],
    "3825194": [
        {
            "dateadded": "2026-04-18 10:12:08 UTC",
            "url": "http://179.49.213.85:40745/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:49:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825194/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825193": [
        {
            "dateadded": "2026-04-18 10:11:29 UTC",
            "url": "http://103.249.199.1:53879/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:54:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825193/",
            "reporter": "geenensp"
        }
    ],
    "3825192": [
        {
            "dateadded": "2026-04-18 10:11:08 UTC",
            "url": "https://top-play2.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825192/",
            "reporter": "anonymous"
        }
    ],
    "3825191": [
        {
            "dateadded": "2026-04-18 10:04:08 UTC",
            "url": "https://game-mode1.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825191/",
            "reporter": "anonymous"
        }
    ],
    "3825190": [
        {
            "dateadded": "2026-04-18 10:01:07 UTC",
            "url": "https://blue-lake6.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 10:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825190/",
            "reporter": "anonymous"
        }
    ],
    "3825189": [
        {
            "dateadded": "2026-04-18 09:50:13 UTC",
            "url": "https://cold-ice5.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825189/",
            "reporter": "anonymous"
        }
    ],
    "3825188": [
        {
            "dateadded": "2026-04-18 09:45:30 UTC",
            "url": "http://103.249.199.1:53879/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825188/",
            "reporter": "geenensp"
        }
    ],
    "3825187": [
        {
            "dateadded": "2026-04-18 09:42:09 UTC",
            "url": "http://203.177.251.31:45986/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:59:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825187/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825186": [
        {
            "dateadded": "2026-04-18 09:42:08 UTC",
            "url": "https://open-field4.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825186/",
            "reporter": "anonymous"
        }
    ],
    "3825185": [
        {
            "dateadded": "2026-04-18 09:42:07 UTC",
            "url": "http://39.79.59.177:56767/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:42:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825185/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825184": [
        {
            "dateadded": "2026-04-18 09:34:07 UTC",
            "url": "https://high-hill3.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825184/",
            "reporter": "anonymous"
        }
    ],
    "3825183": [
        {
            "dateadded": "2026-04-18 09:32:09 UTC",
            "url": "http://39.89.164.173:37039/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:19:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825183/",
            "reporter": "geenensp"
        }
    ],
    "3825181": [
        {
            "dateadded": "2026-04-18 09:27:12 UTC",
            "url": "http://110.39.235.153:41146/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825181/",
            "reporter": "geenensp"
        }
    ],
    "3825182": [
        {
            "dateadded": "2026-04-18 09:27:12 UTC",
            "url": "http://125.44.52.93:36860/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 13:56:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825182/",
            "reporter": "geenensp"
        }
    ],
    "3825180": [
        {
            "dateadded": "2026-04-18 09:27:07 UTC",
            "url": "http://115.55.173.241:55537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:20:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825180/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825179": [
        {
            "dateadded": "2026-04-18 09:26:12 UTC",
            "url": "https://deep-sea2.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825179/",
            "reporter": "anonymous"
        }
    ],
    "3825178": [
        {
            "dateadded": "2026-04-18 09:21:08 UTC",
            "url": "https://wild-life1.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825178/",
            "reporter": "anonymous"
        }
    ],
    "3825177": [
        {
            "dateadded": "2026-04-18 09:19:19 UTC",
            "url": "http://101.50.71.149:48916/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825177/",
            "reporter": "geenensp"
        }
    ],
    "3825176": [
        {
            "dateadded": "2026-04-18 09:18:17 UTC",
            "url": "http://110.36.2.23:54679/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:48:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825176/",
            "reporter": "geenensp"
        }
    ],
    "3825175": [
        {
            "dateadded": "2026-04-18 09:15:16 UTC",
            "url": "https://clean-tech6.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825175/",
            "reporter": "anonymous"
        }
    ],
    "3825174": [
        {
            "dateadded": "2026-04-18 09:14:12 UTC",
            "url": "http://115.48.162.0:53130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:52:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825174/",
            "reporter": "geenensp"
        }
    ],
    "3825173": [
        {
            "dateadded": "2026-04-18 09:12:18 UTC",
            "url": "http://115.62.15.110:34786/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:19:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825173/",
            "reporter": "geenensp"
        }
    ],
    "3825172": [
        {
            "dateadded": "2026-04-18 09:07:08 UTC",
            "url": "https://pure-energy5.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 09:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825172/",
            "reporter": "anonymous"
        }
    ],
    "3825171": [
        {
            "dateadded": "2026-04-18 09:05:18 UTC",
            "url": "http://110.39.235.153:41146/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:23:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825171/",
            "reporter": "geenensp"
        }
    ],
    "3825170": [
        {
            "dateadded": "2026-04-18 08:59:13 UTC",
            "url": "https://eco-power4.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825170/",
            "reporter": "anonymous"
        }
    ],
    "3825164": [
        {
            "dateadded": "2026-04-18 08:58:21 UTC",
            "url": "http://192.109.200.254/skid.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825164/",
            "reporter": "adliwahid"
        }
    ],
    "3825165": [
        {
            "dateadded": "2026-04-18 08:58:21 UTC",
            "url": "http://192.109.200.254/skid.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825165/",
            "reporter": "adliwahid"
        }
    ],
    "3825166": [
        {
            "dateadded": "2026-04-18 08:58:21 UTC",
            "url": "http://192.109.200.254/skid.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825166/",
            "reporter": "adliwahid"
        }
    ],
    "3825167": [
        {
            "dateadded": "2026-04-18 08:58:21 UTC",
            "url": "http://192.109.200.254/skid.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825167/",
            "reporter": "adliwahid"
        }
    ],
    "3825168": [
        {
            "dateadded": "2026-04-18 08:58:21 UTC",
            "url": "http://192.109.200.254/skid.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825168/",
            "reporter": "adliwahid"
        }
    ],
    "3825169": [
        {
            "dateadded": "2026-04-18 08:58:21 UTC",
            "url": "http://192.109.200.254/skid.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825169/",
            "reporter": "adliwahid"
        }
    ],
    "3825163": [
        {
            "dateadded": "2026-04-18 08:58:16 UTC",
            "url": "http://182.116.10.86:51635/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:23:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825163/",
            "reporter": "geenensp"
        }
    ],
    "3825161": [
        {
            "dateadded": "2026-04-18 08:58:12 UTC",
            "url": "http://185.218.194.106/l_mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825161/",
            "reporter": "adliwahid"
        }
    ],
    "3825162": [
        {
            "dateadded": "2026-04-18 08:58:12 UTC",
            "url": "http://185.218.194.106/l_arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825162/",
            "reporter": "adliwahid"
        }
    ],
    "3825146": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://36.92.154.210:31395/config",
            "url_status": "offline",
            "last_online": "2026-04-18 10:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825146/",
            "reporter": "adliwahid"
        }
    ],
    "3825147": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://36.92.154.210:31395/mozi.a",
            "url_status": "offline",
            "last_online": "2026-04-18 10:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825147/",
            "reporter": "adliwahid"
        }
    ],
    "3825148": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.i586",
            "url_status": "offline",
            "last_online": "2026-04-18 10:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825148/",
            "reporter": "adliwahid"
        }
    ],
    "3825149": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://49.158.206.47:52010/mozi.a",
            "url_status": "online",
            "last_online": "2026-04-27 12:48:37 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825149/",
            "reporter": "adliwahid"
        }
    ],
    "3825150": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.arm4",
            "url_status": "offline",
            "last_online": "2026-04-18 11:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825150/",
            "reporter": "adliwahid"
        }
    ],
    "3825151": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.sparc",
            "url_status": "offline",
            "last_online": "2026-04-18 11:25:52 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825151/",
            "reporter": "adliwahid"
        }
    ],
    "3825152": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.arm7",
            "url_status": "offline",
            "last_online": "2026-04-18 10:42:16 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825152/",
            "reporter": "adliwahid"
        }
    ],
    "3825153": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.ppc",
            "url_status": "offline",
            "last_online": "2026-04-18 10:34:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825153/",
            "reporter": "adliwahid"
        }
    ],
    "3825154": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 08:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825154/",
            "reporter": "adliwahid"
        }
    ],
    "3825155": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://194.110.247.62/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 08:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825155/",
            "reporter": "adliwahid"
        }
    ],
    "3825156": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.i686",
            "url_status": "offline",
            "last_online": "2026-04-18 11:24:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825156/",
            "reporter": "adliwahid"
        }
    ],
    "3825157": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.m68k",
            "url_status": "offline",
            "last_online": "2026-04-18 10:28:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825157/",
            "reporter": "adliwahid"
        }
    ],
    "3825158": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://89.190.156.34/Demon.arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 11:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825158/",
            "reporter": "adliwahid"
        }
    ],
    "3825159": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://194.110.247.62/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 08:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825159/",
            "reporter": "adliwahid"
        }
    ],
    "3825160": [
        {
            "dateadded": "2026-04-18 08:58:11 UTC",
            "url": "http://194.110.247.62/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-18 08:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825160/",
            "reporter": "adliwahid"
        }
    ],
    "3825143": [
        {
            "dateadded": "2026-04-18 08:58:10 UTC",
            "url": "http://37.131.200.170:1794/mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-22 07:20:21 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825143/",
            "reporter": "adliwahid"
        }
    ],
    "3825144": [
        {
            "dateadded": "2026-04-18 08:58:10 UTC",
            "url": "http://37.131.200.170:1794/Mozi.a",
            "url_status": "offline",
            "last_online": "2026-04-22 05:32:00 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825144/",
            "reporter": "adliwahid"
        }
    ],
    "3825145": [
        {
            "dateadded": "2026-04-18 08:58:10 UTC",
            "url": "http://37.131.200.170:1794/config",
            "url_status": "offline",
            "last_online": "2026-04-22 07:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825145/",
            "reporter": "adliwahid"
        }
    ],
    "3825141": [
        {
            "dateadded": "2026-04-18 08:58:07 UTC",
            "url": "http://2.26.103.215/haker.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825141/",
            "reporter": "adliwahid"
        }
    ],
    "3825142": [
        {
            "dateadded": "2026-04-18 08:58:07 UTC",
            "url": "http://36.92.154.210:31395/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-18 10:43:40 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825142/",
            "reporter": "adliwahid"
        }
    ],
    "3825140": [
        {
            "dateadded": "2026-04-18 08:57:23 UTC",
            "url": "http://192.109.200.254/skid.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825140/",
            "reporter": "adliwahid"
        }
    ],
    "3825139": [
        {
            "dateadded": "2026-04-18 08:57:21 UTC",
            "url": "http://192.109.200.254/skid.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825139/",
            "reporter": "adliwahid"
        }
    ],
    "3825138": [
        {
            "dateadded": "2026-04-18 08:57:10 UTC",
            "url": "http://115.63.47.188:56925/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825138/",
            "reporter": "geenensp"
        }
    ],
    "3825130": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://89.190.156.34/bins.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825130/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825131": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://49.158.206.47:52010/Mozi.m",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:22 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825131/",
            "reporter": "adliwahid"
        }
    ],
    "3825132": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://89.190.156.34/Demon.ppc440fp",
            "url_status": "offline",
            "last_online": "2026-04-18 11:31:38 UTC",
            "threat": "malware_download",
            "tags": [
                "DemonBot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825132/",
            "reporter": "adliwahid"
        }
    ],
    "3825133": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://89.190.156.34/Demon.sh4",
            "url_status": "offline",
            "last_online": "2026-04-18 08:57:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825133/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825134": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://89.190.156.34/Demon.mips",
            "url_status": "offline",
            "last_online": "2026-04-18 11:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825134/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825135": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://89.190.156.34/Demon.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-18 11:31:02 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825135/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825136": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://89.190.156.34/Demon.x86",
            "url_status": "offline",
            "last_online": "2026-04-18 10:28:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825136/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825137": [
        {
            "dateadded": "2026-04-18 08:57:08 UTC",
            "url": "http://49.158.206.47:52010/config",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825137/",
            "reporter": "adliwahid"
        }
    ],
    "3825128": [
        {
            "dateadded": "2026-04-18 08:57:06 UTC",
            "url": "http://103.77.246.172/all.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825128/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825129": [
        {
            "dateadded": "2026-04-18 08:57:06 UTC",
            "url": "https://filebin.net/5mszlflcu1n04xb4/cag54tgv8n",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825129/",
            "reporter": "geenensp"
        }
    ],
    "3825127": [
        {
            "dateadded": "2026-04-18 08:51:09 UTC",
            "url": "https://green-heat3.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825127/",
            "reporter": "anonymous"
        }
    ],
    "3825126": [
        {
            "dateadded": "2026-04-18 08:49:15 UTC",
            "url": "http://110.36.2.23:54679/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:21:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825126/",
            "reporter": "geenensp"
        }
    ],
    "3825125": [
        {
            "dateadded": "2026-04-18 08:48:10 UTC",
            "url": "http://27.37.114.123:60944/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825125/",
            "reporter": "geenensp"
        }
    ],
    "3825124": [
        {
            "dateadded": "2026-04-18 08:47:07 UTC",
            "url": "http://125.41.8.2:37503/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:20:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825124/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825123": [
        {
            "dateadded": "2026-04-18 08:44:07 UTC",
            "url": "https://wind-farm2.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825123/",
            "reporter": "anonymous"
        }
    ],
    "3825122": [
        {
            "dateadded": "2026-04-18 08:43:12 UTC",
            "url": "http://42.230.219.51:51248/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825122/",
            "reporter": "geenensp"
        }
    ],
    "3825121": [
        {
            "dateadded": "2026-04-18 08:41:15 UTC",
            "url": "http://42.224.25.44:45106/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:55:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825121/",
            "reporter": "geenensp"
        }
    ],
    "3825120": [
        {
            "dateadded": "2026-04-18 08:41:14 UTC",
            "url": "http://39.81.89.212:57930/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:51:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825120/",
            "reporter": "geenensp"
        }
    ],
    "3825119": [
        {
            "dateadded": "2026-04-18 08:39:10 UTC",
            "url": "http://42.230.219.51:51248/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:23:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825119/",
            "reporter": "geenensp"
        }
    ],
    "3825118": [
        {
            "dateadded": "2026-04-18 08:36:10 UTC",
            "url": "https://solar-light1.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825118/",
            "reporter": "anonymous"
        }
    ],
    "3825117": [
        {
            "dateadded": "2026-04-18 08:35:17 UTC",
            "url": "http://113.221.26.177:55585/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825117/",
            "reporter": "geenensp"
        }
    ],
    "3825116": [
        {
            "dateadded": "2026-04-18 08:31:15 UTC",
            "url": "http://182.116.10.86:51635/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825116/",
            "reporter": "geenensp"
        }
    ],
    "3825115": [
        {
            "dateadded": "2026-04-18 08:30:10 UTC",
            "url": "http://123.10.51.10:59125/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825115/",
            "reporter": "geenensp"
        }
    ],
    "3825114": [
        {
            "dateadded": "2026-04-18 08:28:08 UTC",
            "url": "https://live-feed6.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825114/",
            "reporter": "anonymous"
        }
    ],
    "3825113": [
        {
            "dateadded": "2026-04-18 08:27:16 UTC",
            "url": "http://42.230.197.177:56830/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:22:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825113/",
            "reporter": "geenensp"
        }
    ],
    "3825112": [
        {
            "dateadded": "2026-04-18 08:21:13 UTC",
            "url": "http://110.36.77.34:51002/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:25:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825112/",
            "reporter": "geenensp"
        }
    ],
    "3825111": [
        {
            "dateadded": "2026-04-18 08:20:10 UTC",
            "url": "https://media-link5.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825111/",
            "reporter": "anonymous"
        }
    ],
    "3825110": [
        {
            "dateadded": "2026-04-18 08:18:14 UTC",
            "url": "http://115.62.15.110:34786/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:21:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825110/",
            "reporter": "geenensp"
        }
    ],
    "3825109": [
        {
            "dateadded": "2026-04-18 08:17:08 UTC",
            "url": "http://110.36.77.34:51002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:23:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825109/",
            "reporter": "geenensp"
        }
    ],
    "3825108": [
        {
            "dateadded": "2026-04-18 08:13:15 UTC",
            "url": "http://113.221.26.177:55585/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825108/",
            "reporter": "geenensp"
        }
    ],
    "3825107": [
        {
            "dateadded": "2026-04-18 08:13:08 UTC",
            "url": "https://photo-shot4.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825107/",
            "reporter": "anonymous"
        }
    ],
    "3825106": [
        {
            "dateadded": "2026-04-18 08:06:08 UTC",
            "url": "https://film-edit3.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 08:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825106/",
            "reporter": "anonymous"
        }
    ],
    "3825105": [
        {
            "dateadded": "2026-04-18 07:58:14 UTC",
            "url": "http://42.235.42.55:57811/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:44:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825105/",
            "reporter": "geenensp"
        }
    ],
    "3825104": [
        {
            "dateadded": "2026-04-18 07:58:13 UTC",
            "url": "http://110.37.95.229:51202/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825104/",
            "reporter": "geenensp"
        }
    ],
    "3825103": [
        {
            "dateadded": "2026-04-18 07:58:07 UTC",
            "url": "https://sound-mix2.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825103/",
            "reporter": "anonymous"
        }
    ],
    "3825102": [
        {
            "dateadded": "2026-04-18 07:55:12 UTC",
            "url": "http://123.9.88.34:54653/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:20:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825102/",
            "reporter": "geenensp"
        }
    ],
    "3825101": [
        {
            "dateadded": "2026-04-18 07:50:13 UTC",
            "url": "https://video-clip1.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825101/",
            "reporter": "anonymous"
        }
    ],
    "3825099": [
        {
            "dateadded": "2026-04-18 07:43:09 UTC",
            "url": "http://114.248.19.209:54174/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825099/",
            "reporter": "geenensp"
        }
    ],
    "3825100": [
        {
            "dateadded": "2026-04-18 07:43:09 UTC",
            "url": "http://114.248.19.209:54174/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:03:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825100/",
            "reporter": "geenensp"
        }
    ],
    "3825098": [
        {
            "dateadded": "2026-04-18 07:42:09 UTC",
            "url": "https://store-house6.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825098/",
            "reporter": "anonymous"
        }
    ],
    "3825097": [
        {
            "dateadded": "2026-04-18 07:40:06 UTC",
            "url": "http://46.147.82.88:48559/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825097/",
            "reporter": "adliwahid"
        }
    ],
    "3825096": [
        {
            "dateadded": "2026-04-18 07:39:27 UTC",
            "url": "http://42.243.140.215:33668/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825096/",
            "reporter": "adliwahid"
        }
    ],
    "3825095": [
        {
            "dateadded": "2026-04-18 07:39:22 UTC",
            "url": "http://42.243.140.215:33668/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 14:52:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825095/",
            "reporter": "adliwahid"
        }
    ],
    "3825094": [
        {
            "dateadded": "2026-04-18 07:39:16 UTC",
            "url": "http://42.225.242.55:53534/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:47:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825094/",
            "reporter": "adliwahid"
        }
    ],
    "3825093": [
        {
            "dateadded": "2026-04-18 07:39:14 UTC",
            "url": "http://42.225.242.55:53534/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:14:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825093/",
            "reporter": "adliwahid"
        }
    ],
    "3825085": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://182.114.197.0:45537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:46:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825085/",
            "reporter": "adliwahid"
        }
    ],
    "3825086": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://182.122.221.88:36078/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:45:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825086/",
            "reporter": "adliwahid"
        }
    ],
    "3825087": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://119.167.2.100:51566/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825087/",
            "reporter": "adliwahid"
        }
    ],
    "3825088": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://123.129.39.253:43067/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825088/",
            "reporter": "adliwahid"
        }
    ],
    "3825089": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://222.142.195.25:46636/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825089/",
            "reporter": "adliwahid"
        }
    ],
    "3825090": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://42.233.85.194:44074/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:16:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825090/",
            "reporter": "adliwahid"
        }
    ],
    "3825091": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://123.129.39.253:43067/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825091/",
            "reporter": "adliwahid"
        }
    ],
    "3825092": [
        {
            "dateadded": "2026-04-18 07:39:13 UTC",
            "url": "http://219.155.253.184:58047/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:21:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825092/",
            "reporter": "adliwahid"
        }
    ],
    "3825072": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://39.79.35.106:44418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:29:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825072/",
            "reporter": "adliwahid"
        }
    ],
    "3825073": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://140.237.6.248:41787/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825073/",
            "reporter": "adliwahid"
        }
    ],
    "3825074": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://94.159.74.226:22142/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825074/",
            "reporter": "adliwahid"
        }
    ],
    "3825075": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://124.94.168.196:55366/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 19:09:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825075/",
            "reporter": "adliwahid"
        }
    ],
    "3825076": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://27.10.45.103:54405/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825076/",
            "reporter": "adliwahid"
        }
    ],
    "3825077": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://42.227.50.174:48914/i",
            "url_status": "offline",
            "last_online": "2026-04-18 18:51:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825077/",
            "reporter": "adliwahid"
        }
    ],
    "3825078": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://119.187.59.136:60927/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825078/",
            "reporter": "adliwahid"
        }
    ],
    "3825079": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://123.9.196.223:35204/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:44:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825079/",
            "reporter": "adliwahid"
        }
    ],
    "3825080": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://60.215.17.250:40895/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825080/",
            "reporter": "adliwahid"
        }
    ],
    "3825081": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://121.226.238.62:54035/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:00:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825081/",
            "reporter": "adliwahid"
        }
    ],
    "3825082": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://121.226.238.62:54035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 22:45:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825082/",
            "reporter": "adliwahid"
        }
    ],
    "3825083": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://171.38.79.118:58523/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:00:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825083/",
            "reporter": "adliwahid"
        }
    ],
    "3825084": [
        {
            "dateadded": "2026-04-18 07:39:12 UTC",
            "url": "http://60.211.44.179:42645/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:14:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825084/",
            "reporter": "adliwahid"
        }
    ],
    "3825070": [
        {
            "dateadded": "2026-04-18 07:39:11 UTC",
            "url": "http://42.52.204.105:60149/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:37:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825070/",
            "reporter": "adliwahid"
        }
    ],
    "3825071": [
        {
            "dateadded": "2026-04-18 07:39:11 UTC",
            "url": "http://183.184.149.21:50751/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825071/",
            "reporter": "adliwahid"
        }
    ],
    "3825069": [
        {
            "dateadded": "2026-04-18 07:39:08 UTC",
            "url": "http://77.236.74.65:37550/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:52:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825069/",
            "reporter": "adliwahid"
        }
    ],
    "3825068": [
        {
            "dateadded": "2026-04-18 07:38:27 UTC",
            "url": "http://123.188.86.106:34212/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:07:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825068/",
            "reporter": "adliwahid"
        }
    ],
    "3825059": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://61.54.198.34:56863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:08:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825059/",
            "reporter": "adliwahid"
        }
    ],
    "3825060": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://119.187.59.136:60927/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825060/",
            "reporter": "adliwahid"
        }
    ],
    "3825061": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://222.137.235.128:44068/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825061/",
            "reporter": "adliwahid"
        }
    ],
    "3825062": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://125.41.141.21:43524/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825062/",
            "reporter": "adliwahid"
        }
    ],
    "3825063": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://27.12.40.94:51484/i",
            "url_status": "offline",
            "last_online": "2026-04-21 11:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825063/",
            "reporter": "adliwahid"
        }
    ],
    "3825064": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://123.10.176.39:48200/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:59:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825064/",
            "reporter": "adliwahid"
        }
    ],
    "3825065": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://221.14.17.198:41296/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825065/",
            "reporter": "adliwahid"
        }
    ],
    "3825066": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://183.184.149.21:50751/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825066/",
            "reporter": "adliwahid"
        }
    ],
    "3825067": [
        {
            "dateadded": "2026-04-18 07:38:09 UTC",
            "url": "http://123.11.74.162:60415/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:27:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825067/",
            "reporter": "adliwahid"
        }
    ],
    "3825050": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://46.147.82.88:48559/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825050/",
            "reporter": "adliwahid"
        }
    ],
    "3825051": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://123.9.196.223:35204/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:46:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825051/",
            "reporter": "adliwahid"
        }
    ],
    "3825052": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://93.157.253.209:45483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:49:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825052/",
            "reporter": "adliwahid"
        }
    ],
    "3825053": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://77.236.74.65:37550/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:54:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825053/",
            "reporter": "adliwahid"
        }
    ],
    "3825054": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://221.13.250.121:38900/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:59:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825054/",
            "reporter": "adliwahid"
        }
    ],
    "3825055": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://98.167.107.155:44344/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825055/",
            "reporter": "adliwahid"
        }
    ],
    "3825056": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://1.43.21.116:40105/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:09:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825056/",
            "reporter": "adliwahid"
        }
    ],
    "3825057": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://182.122.253.145:56653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:39:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825057/",
            "reporter": "adliwahid"
        }
    ],
    "3825058": [
        {
            "dateadded": "2026-04-18 07:38:08 UTC",
            "url": "http://182.116.94.186:56232/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:53:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825058/",
            "reporter": "adliwahid"
        }
    ],
    "3825048": [
        {
            "dateadded": "2026-04-18 07:38:07 UTC",
            "url": "http://178.238.27.138:54880/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:46:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825048/",
            "reporter": "adliwahid"
        }
    ],
    "3825049": [
        {
            "dateadded": "2026-04-18 07:38:07 UTC",
            "url": "http://38.21.70.189:49079/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:02:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825049/",
            "reporter": "adliwahid"
        }
    ],
    "3825047": [
        {
            "dateadded": "2026-04-18 07:37:28 UTC",
            "url": "http://221.212.104.146:45880/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:44:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825047/",
            "reporter": "adliwahid"
        }
    ],
    "3825046": [
        {
            "dateadded": "2026-04-18 07:37:14 UTC",
            "url": "http://171.81.103.95:36295/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:52:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825046/",
            "reporter": "adliwahid"
        }
    ],
    "3825045": [
        {
            "dateadded": "2026-04-18 07:37:11 UTC",
            "url": "http://171.81.103.95:36295/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825045/",
            "reporter": "adliwahid"
        }
    ],
    "3825037": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://182.124.190.55:59508/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:36:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825037/",
            "reporter": "adliwahid"
        }
    ],
    "3825038": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://182.116.94.186:56232/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:57:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825038/",
            "reporter": "adliwahid"
        }
    ],
    "3825039": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://123.130.166.202:37717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 07:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825039/",
            "reporter": "adliwahid"
        }
    ],
    "3825040": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://123.234.90.144:43115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825040/",
            "reporter": "adliwahid"
        }
    ],
    "3825041": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://175.151.227.23:32919/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:09:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825041/",
            "reporter": "adliwahid"
        }
    ],
    "3825042": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://61.52.90.174:38676/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:05:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825042/",
            "reporter": "adliwahid"
        }
    ],
    "3825043": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://140.237.6.248:41787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:05:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825043/",
            "reporter": "adliwahid"
        }
    ],
    "3825044": [
        {
            "dateadded": "2026-04-18 07:37:09 UTC",
            "url": "http://1.43.21.116:40105/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:46:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825044/",
            "reporter": "adliwahid"
        }
    ],
    "3825031": [
        {
            "dateadded": "2026-04-18 07:37:08 UTC",
            "url": "http://37.52.242.125:44102/i",
            "url_status": "offline",
            "last_online": "2026-04-18 12:03:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825031/",
            "reporter": "adliwahid"
        }
    ],
    "3825032": [
        {
            "dateadded": "2026-04-18 07:37:08 UTC",
            "url": "http://42.228.247.124:44677/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:18:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825032/",
            "reporter": "adliwahid"
        }
    ],
    "3825033": [
        {
            "dateadded": "2026-04-18 07:37:08 UTC",
            "url": "http://123.7.221.59:55225/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825033/",
            "reporter": "adliwahid"
        }
    ],
    "3825034": [
        {
            "dateadded": "2026-04-18 07:37:08 UTC",
            "url": "http://123.7.221.59:55225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825034/",
            "reporter": "adliwahid"
        }
    ],
    "3825035": [
        {
            "dateadded": "2026-04-18 07:37:08 UTC",
            "url": "http://182.124.190.55:59508/i",
            "url_status": "offline",
            "last_online": "2026-04-19 14:52:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825035/",
            "reporter": "adliwahid"
        }
    ],
    "3825036": [
        {
            "dateadded": "2026-04-18 07:37:08 UTC",
            "url": "http://45.201.157.212:55247/i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:53:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825036/",
            "reporter": "adliwahid"
        }
    ],
    "3825029": [
        {
            "dateadded": "2026-04-18 07:37:07 UTC",
            "url": "http://193.187.101.203:37039/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:48:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825029/",
            "reporter": "adliwahid"
        }
    ],
    "3825030": [
        {
            "dateadded": "2026-04-18 07:37:07 UTC",
            "url": "http://178.238.27.138:54880/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:29:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825030/",
            "reporter": "adliwahid"
        }
    ],
    "3825028": [
        {
            "dateadded": "2026-04-18 07:36:17 UTC",
            "url": "http://42.6.189.41:35476/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:28:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825028/",
            "reporter": "geenensp"
        }
    ],
    "3825027": [
        {
            "dateadded": "2026-04-18 07:35:12 UTC",
            "url": "https://box-pack5.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825027/",
            "reporter": "anonymous"
        }
    ],
    "3825026": [
        {
            "dateadded": "2026-04-18 07:28:10 UTC",
            "url": "https://air-flight4.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825026/",
            "reporter": "anonymous"
        }
    ],
    "3825025": [
        {
            "dateadded": "2026-04-18 07:26:16 UTC",
            "url": "http://125.160.191.219:53118/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:58:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825025/",
            "reporter": "geenensp"
        }
    ],
    "3825024": [
        {
            "dateadded": "2026-04-18 07:22:06 UTC",
            "url": "http://110.37.1.162:54280/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825024/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825023": [
        {
            "dateadded": "2026-04-18 07:19:07 UTC",
            "url": "https://ship-port3.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825023/",
            "reporter": "anonymous"
        }
    ],
    "3825022": [
        {
            "dateadded": "2026-04-18 07:17:06 UTC",
            "url": "http://42.239.227.220:42997/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:32:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825022/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825021": [
        {
            "dateadded": "2026-04-18 07:12:08 UTC",
            "url": "https://heavy-truck2.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825021/",
            "reporter": "anonymous"
        }
    ],
    "3825020": [
        {
            "dateadded": "2026-04-18 07:08:12 UTC",
            "url": "http://42.6.189.41:35476/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:57:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825020/",
            "reporter": "geenensp"
        }
    ],
    "3825019": [
        {
            "dateadded": "2026-04-18 07:05:08 UTC",
            "url": "https://fast-cargo1.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 07:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825019/",
            "reporter": "anonymous"
        }
    ],
    "3825018": [
        {
            "dateadded": "2026-04-18 06:59:13 UTC",
            "url": "http://123.9.218.150:43027/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:01:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825018/",
            "reporter": "geenensp"
        }
    ],
    "3825017": [
        {
            "dateadded": "2026-04-18 06:57:07 UTC",
            "url": "http://115.52.25.89:55774/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:26:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825017/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825016": [
        {
            "dateadded": "2026-04-18 06:56:11 UTC",
            "url": "https://work-bench6.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825016/",
            "reporter": "anonymous"
        }
    ],
    "3825015": [
        {
            "dateadded": "2026-04-18 06:54:07 UTC",
            "url": "http://182.117.114.193:48581/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825015/",
            "reporter": "geenensp"
        }
    ],
    "3825014": [
        {
            "dateadded": "2026-04-18 06:53:15 UTC",
            "url": "http://101.108.146.151:39609/i",
            "url_status": "offline",
            "last_online": "2026-04-18 06:53:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825014/",
            "reporter": "geenensp"
        }
    ],
    "3825013": [
        {
            "dateadded": "2026-04-18 06:52:13 UTC",
            "url": "http://61.53.126.233:43434/i",
            "url_status": "offline",
            "last_online": "2026-04-18 06:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825013/",
            "reporter": "geenensp"
        }
    ],
    "3825011": [
        {
            "dateadded": "2026-04-18 06:52:07 UTC",
            "url": "http://105.184.102.151:60455/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825011/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825012": [
        {
            "dateadded": "2026-04-18 06:52:07 UTC",
            "url": "http://105.184.152.109:54081/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825012/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825010": [
        {
            "dateadded": "2026-04-18 06:50:15 UTC",
            "url": "https://wood-glue5.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825010/",
            "reporter": "anonymous"
        }
    ],
    "3825009": [
        {
            "dateadded": "2026-04-18 06:48:13 UTC",
            "url": "http://182.121.253.40:41341/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825009/",
            "reporter": "geenensp"
        }
    ],
    "3825008": [
        {
            "dateadded": "2026-04-18 06:42:11 UTC",
            "url": "https://metal-bolt4.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825008/",
            "reporter": "anonymous"
        }
    ],
    "3825007": [
        {
            "dateadded": "2026-04-18 06:42:08 UTC",
            "url": "http://220.202.89.244:60868/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:57:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825007/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825006": [
        {
            "dateadded": "2026-04-18 06:37:08 UTC",
            "url": "http://42.239.227.220:42997/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825006/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825005": [
        {
            "dateadded": "2026-04-18 06:34:09 UTC",
            "url": "https://sharp-saw3.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825005/",
            "reporter": "anonymous"
        }
    ],
    "3825004": [
        {
            "dateadded": "2026-04-18 06:33:12 UTC",
            "url": "http://101.108.146.151:39609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 06:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825004/",
            "reporter": "geenensp"
        }
    ],
    "3825003": [
        {
            "dateadded": "2026-04-18 06:28:15 UTC",
            "url": "http://123.9.218.150:43027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825003/",
            "reporter": "geenensp"
        }
    ],
    "3825002": [
        {
            "dateadded": "2026-04-18 06:27:12 UTC",
            "url": "http://115.52.25.89:55774/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:31:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825002/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3825001": [
        {
            "dateadded": "2026-04-18 06:26:16 UTC",
            "url": "http://182.117.114.193:48581/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825001/",
            "reporter": "geenensp"
        }
    ],
    "3825000": [
        {
            "dateadded": "2026-04-18 06:26:08 UTC",
            "url": "https://power-drill2.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3825000/",
            "reporter": "anonymous"
        }
    ],
    "3824999": [
        {
            "dateadded": "2026-04-18 06:24:13 UTC",
            "url": "http://110.36.80.171:34909/i",
            "url_status": "offline",
            "last_online": "2026-04-18 06:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824999/",
            "reporter": "geenensp"
        }
    ],
    "3824991": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824991/",
            "reporter": "botnetkiller"
        }
    ],
    "3824992": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824992/",
            "reporter": "botnetkiller"
        }
    ],
    "3824993": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824993/",
            "reporter": "botnetkiller"
        }
    ],
    "3824994": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824994/",
            "reporter": "botnetkiller"
        }
    ],
    "3824995": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824995/",
            "reporter": "botnetkiller"
        }
    ],
    "3824996": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824996/",
            "reporter": "botnetkiller"
        }
    ],
    "3824997": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824997/",
            "reporter": "botnetkiller"
        }
    ],
    "3824998": [
        {
            "dateadded": "2026-04-18 06:23:13 UTC",
            "url": "http://176.65.139.64/bins/sora.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824998/",
            "reporter": "botnetkiller"
        }
    ],
    "3824987": [
        {
            "dateadded": "2026-04-18 06:23:11 UTC",
            "url": "http://176.65.139.64/bins/sora.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824987/",
            "reporter": "botnetkiller"
        }
    ],
    "3824988": [
        {
            "dateadded": "2026-04-18 06:23:11 UTC",
            "url": "http://176.65.139.64/bins/sora.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824988/",
            "reporter": "botnetkiller"
        }
    ],
    "3824989": [
        {
            "dateadded": "2026-04-18 06:23:11 UTC",
            "url": "http://176.65.139.64/bins/sora.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824989/",
            "reporter": "botnetkiller"
        }
    ],
    "3824990": [
        {
            "dateadded": "2026-04-18 06:23:11 UTC",
            "url": "http://176.65.139.64/bins/sora.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824990/",
            "reporter": "botnetkiller"
        }
    ],
    "3824986": [
        {
            "dateadded": "2026-04-18 06:23:09 UTC",
            "url": "https://hand-tool1.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824986/",
            "reporter": "anonymous"
        }
    ],
    "3824985": [
        {
            "dateadded": "2026-04-18 06:23:06 UTC",
            "url": "http://176.65.139.64/bins/sora.spc",
            "url_status": "offline",
            "last_online": "2026-04-23 17:02:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824985/",
            "reporter": "botnetkiller"
        }
    ],
    "3824984": [
        {
            "dateadded": "2026-04-18 06:23:05 UTC",
            "url": "http://176.65.139.64/bins/sora.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824984/",
            "reporter": "botnetkiller"
        }
    ],
    "3824983": [
        {
            "dateadded": "2026-04-18 06:22:08 UTC",
            "url": "http://176.65.139.64/bins/sora.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824983/",
            "reporter": "botnetkiller"
        }
    ],
    "3824982": [
        {
            "dateadded": "2026-04-18 06:19:07 UTC",
            "url": "http://182.116.33.91:57739/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:03:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824982/",
            "reporter": "geenensp"
        }
    ],
    "3824981": [
        {
            "dateadded": "2026-04-18 06:17:07 UTC",
            "url": "http://222.142.253.68:54634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:13:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824981/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824980": [
        {
            "dateadded": "2026-04-18 06:13:09 UTC",
            "url": "http://113.231.228.6:45482/i",
            "url_status": "offline",
            "last_online": "2026-04-25 23:03:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824980/",
            "reporter": "geenensp"
        }
    ],
    "3824979": [
        {
            "dateadded": "2026-04-18 06:10:08 UTC",
            "url": "https://night-road6.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824979/",
            "reporter": "anonymous"
        }
    ],
    "3824978": [
        {
            "dateadded": "2026-04-18 06:03:10 UTC",
            "url": "https://main-bridge5.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 06:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824978/",
            "reporter": "anonymous"
        }
    ],
    "3824977": [
        {
            "dateadded": "2026-04-18 06:01:16 UTC",
            "url": "http://182.121.253.40:41341/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824977/",
            "reporter": "geenensp"
        }
    ],
    "3824976": [
        {
            "dateadded": "2026-04-18 06:00:16 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.arm6",
            "url_status": "offline",
            "last_online": "2026-04-20 18:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824976/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824969": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.x86",
            "url_status": "offline",
            "last_online": "2026-04-20 16:52:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824969/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824970": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.arm7",
            "url_status": "offline",
            "last_online": "2026-04-20 16:42:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824970/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824971": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.arc",
            "url_status": "offline",
            "last_online": "2026-04-20 17:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824971/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824972": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.sh4",
            "url_status": "offline",
            "last_online": "2026-04-20 18:03:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824972/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824973": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.m68k",
            "url_status": "offline",
            "last_online": "2026-04-20 16:34:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824973/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824974": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.i686",
            "url_status": "offline",
            "last_online": "2026-04-20 16:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824974/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824975": [
        {
            "dateadded": "2026-04-18 06:00:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.ppc",
            "url_status": "offline",
            "last_online": "2026-04-20 16:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824975/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824968": [
        {
            "dateadded": "2026-04-18 06:00:13 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.mips",
            "url_status": "offline",
            "last_online": "2026-04-20 17:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824968/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824965": [
        {
            "dateadded": "2026-04-18 06:00:11 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-20 18:10:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824965/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824966": [
        {
            "dateadded": "2026-04-18 06:00:11 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.arm",
            "url_status": "offline",
            "last_online": "2026-04-20 17:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824966/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824967": [
        {
            "dateadded": "2026-04-18 06:00:11 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-20 17:43:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824967/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824963": [
        {
            "dateadded": "2026-04-18 05:59:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.arm5",
            "url_status": "offline",
            "last_online": "2026-04-20 17:54:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824963/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824964": [
        {
            "dateadded": "2026-04-18 05:59:14 UTC",
            "url": "http://45.141.148.121/hiddenbin/Space.spc",
            "url_status": "offline",
            "last_online": "2026-04-20 17:57:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824964/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824962": [
        {
            "dateadded": "2026-04-18 05:58:10 UTC",
            "url": "http://115.58.175.166:45571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824962/",
            "reporter": "geenensp"
        }
    ],
    "3824961": [
        {
            "dateadded": "2026-04-18 05:56:11 UTC",
            "url": "https://street-light4.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824961/",
            "reporter": "anonymous"
        }
    ],
    "3824960": [
        {
            "dateadded": "2026-04-18 05:51:12 UTC",
            "url": "https://city-tower3.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824960/",
            "reporter": "anonymous"
        }
    ],
    "3824959": [
        {
            "dateadded": "2026-04-18 05:44:16 UTC",
            "url": "http://125.41.227.243:53192/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824959/",
            "reporter": "geenensp"
        }
    ],
    "3824958": [
        {
            "dateadded": "2026-04-18 05:44:14 UTC",
            "url": "https://metro-station2.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824958/",
            "reporter": "anonymous"
        }
    ],
    "3824957": [
        {
            "dateadded": "2026-04-18 05:40:14 UTC",
            "url": "http://123.7.222.8:44027/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:26:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824957/",
            "reporter": "geenensp"
        }
    ],
    "3824956": [
        {
            "dateadded": "2026-04-18 05:37:07 UTC",
            "url": "https://central-park1.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824956/",
            "reporter": "anonymous"
        }
    ],
    "3824955": [
        {
            "dateadded": "2026-04-18 05:34:13 UTC",
            "url": "https://ship-yard6.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824955/",
            "reporter": "anonymous"
        }
    ],
    "3824954": [
        {
            "dateadded": "2026-04-18 05:32:09 UTC",
            "url": "http://221.15.4.218:44733/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:50:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824954/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824953": [
        {
            "dateadded": "2026-04-18 05:30:09 UTC",
            "url": "http://14.157.18.236:54022/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:04:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824953/",
            "reporter": "geenensp"
        }
    ],
    "3824952": [
        {
            "dateadded": "2026-04-18 05:26:16 UTC",
            "url": "http://123.7.222.8:44027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:30:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824952/",
            "reporter": "geenensp"
        }
    ],
    "3824951": [
        {
            "dateadded": "2026-04-18 05:22:09 UTC",
            "url": "https://boat-tour5.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824951/",
            "reporter": "anonymous"
        }
    ],
    "3824950": [
        {
            "dateadded": "2026-04-18 05:21:09 UTC",
            "url": "http://105.186.233.123:52329/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:54:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824950/",
            "reporter": "geenensp"
        }
    ],
    "3824949": [
        {
            "dateadded": "2026-04-18 05:20:14 UTC",
            "url": "http://176.65.139.64/bins/sora.x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mirai",
                "x86-32"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824949/",
            "reporter": "geenensp"
        }
    ],
    "3824948": [
        {
            "dateadded": "2026-04-18 05:18:09 UTC",
            "url": "http://125.41.227.243:53192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:16:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824948/",
            "reporter": "geenensp"
        }
    ],
    "3824947": [
        {
            "dateadded": "2026-04-18 05:14:14 UTC",
            "url": "https://island-trip4.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824947/",
            "reporter": "anonymous"
        }
    ],
    "3824938": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824938/",
            "reporter": "botnetkiller"
        }
    ],
    "3824939": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824939/",
            "reporter": "botnetkiller"
        }
    ],
    "3824940": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824940/",
            "reporter": "botnetkiller"
        }
    ],
    "3824941": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/armv5l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824941/",
            "reporter": "botnetkiller"
        }
    ],
    "3824942": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/armv7l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824942/",
            "reporter": "botnetkiller"
        }
    ],
    "3824943": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824943/",
            "reporter": "botnetkiller"
        }
    ],
    "3824944": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824944/",
            "reporter": "botnetkiller"
        }
    ],
    "3824945": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824945/",
            "reporter": "botnetkiller"
        }
    ],
    "3824946": [
        {
            "dateadded": "2026-04-18 05:13:06 UTC",
            "url": "http://45.202.243.118/n2/sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824946/",
            "reporter": "botnetkiller"
        }
    ],
    "3824937": [
        {
            "dateadded": "2026-04-18 05:11:14 UTC",
            "url": "http://105.186.233.123:52329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:50:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824937/",
            "reporter": "geenensp"
        }
    ],
    "3824936": [
        {
            "dateadded": "2026-04-18 05:06:15 UTC",
            "url": "http://27.10.45.103:54405/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824936/",
            "reporter": "geenensp"
        }
    ],
    "3824935": [
        {
            "dateadded": "2026-04-18 05:06:07 UTC",
            "url": "https://palm-tree3.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824935/",
            "reporter": "anonymous"
        }
    ],
    "3824934": [
        {
            "dateadded": "2026-04-18 05:04:20 UTC",
            "url": "http://217.60.61.176:8080/dlr.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824934/",
            "reporter": "botnetkiller"
        }
    ],
    "3824931": [
        {
            "dateadded": "2026-04-18 05:04:10 UTC",
            "url": "http://217.60.61.176:8080/dlr.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824931/",
            "reporter": "botnetkiller"
        }
    ],
    "3824932": [
        {
            "dateadded": "2026-04-18 05:04:10 UTC",
            "url": "http://217.60.61.176:8080/dlr.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824932/",
            "reporter": "botnetkiller"
        }
    ],
    "3824930": [
        {
            "dateadded": "2026-04-18 05:00:18 UTC",
            "url": "https://sand-beach2.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 05:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824930/",
            "reporter": "anonymous"
        }
    ],
    "3824929": [
        {
            "dateadded": "2026-04-18 04:58:08 UTC",
            "url": "http://43.228.157.130/diicot.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:00:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824929/",
            "reporter": "botnetkiller"
        }
    ],
    "3824928": [
        {
            "dateadded": "2026-04-18 04:52:15 UTC",
            "url": "https://clean-sea1.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824928/",
            "reporter": "anonymous"
        }
    ],
    "3824927": [
        {
            "dateadded": "2026-04-18 04:51:07 UTC",
            "url": "http://110.85.99.217:38787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824927/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824926": [
        {
            "dateadded": "2026-04-18 04:50:08 UTC",
            "url": "http://113.230.93.100:50346/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:03:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824926/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824925": [
        {
            "dateadded": "2026-04-18 04:48:11 UTC",
            "url": "http://115.55.173.241:55537/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824925/",
            "reporter": "geenensp"
        }
    ],
    "3824924": [
        {
            "dateadded": "2026-04-18 04:48:07 UTC",
            "url": "http://182.113.203.84:53522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:58:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824924/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824915": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/armv7l",
            "url_status": "offline",
            "last_online": "2026-04-24 11:23:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824915/",
            "reporter": "botnetkiller"
        }
    ],
    "3824916": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 11:58:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824916/",
            "reporter": "botnetkiller"
        }
    ],
    "3824917": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 12:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824917/",
            "reporter": "botnetkiller"
        }
    ],
    "3824918": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/armv6l",
            "url_status": "offline",
            "last_online": "2026-04-24 11:51:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824918/",
            "reporter": "botnetkiller"
        }
    ],
    "3824919": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/aarch64",
            "url_status": "offline",
            "last_online": "2026-04-24 12:03:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824919/",
            "reporter": "botnetkiller"
        }
    ],
    "3824920": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/armv4l",
            "url_status": "offline",
            "last_online": "2026-04-24 12:18:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824920/",
            "reporter": "botnetkiller"
        }
    ],
    "3824921": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 12:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824921/",
            "reporter": "botnetkiller"
        }
    ],
    "3824922": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 12:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824922/",
            "reporter": "botnetkiller"
        }
    ],
    "3824923": [
        {
            "dateadded": "2026-04-18 04:43:13 UTC",
            "url": "http://162.248.102.107/n2/mips64",
            "url_status": "offline",
            "last_online": "2026-04-24 12:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824923/",
            "reporter": "botnetkiller"
        }
    ],
    "3824914": [
        {
            "dateadded": "2026-04-18 04:43:08 UTC",
            "url": "https://tasty-bun6.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824914/",
            "reporter": "anonymous"
        }
    ],
    "3824913": [
        {
            "dateadded": "2026-04-18 04:36:13 UTC",
            "url": "https://hot-soup5.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824913/",
            "reporter": "anonymous"
        }
    ],
    "3824912": [
        {
            "dateadded": "2026-04-18 04:33:17 UTC",
            "url": "http://87.121.112.57/dips",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824912/",
            "reporter": "botnetkiller"
        }
    ],
    "3824911": [
        {
            "dateadded": "2026-04-18 04:32:09 UTC",
            "url": "http://175.147.18.219:57547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 04:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824911/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824910": [
        {
            "dateadded": "2026-04-18 04:32:07 UTC",
            "url": "http://61.53.125.53:33301/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824910/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824909": [
        {
            "dateadded": "2026-04-18 04:28:13 UTC",
            "url": "https://cool-milk4.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824909/",
            "reporter": "anonymous"
        }
    ],
    "3824907": [
        {
            "dateadded": "2026-04-18 04:22:12 UTC",
            "url": "http://156.229.165.225:1337",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "nc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824907/",
            "reporter": "botnetkiller"
        }
    ],
    "3824908": [
        {
            "dateadded": "2026-04-18 04:22:12 UTC",
            "url": "http://156.229.165.225:9999",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "nc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824908/",
            "reporter": "botnetkiller"
        }
    ],
    "3824906": [
        {
            "dateadded": "2026-04-18 04:21:08 UTC",
            "url": "http://220.202.66.169:59140/i",
            "url_status": "offline",
            "last_online": "2026-04-19 15:35:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824906/",
            "reporter": "geenensp"
        }
    ],
    "3824905": [
        {
            "dateadded": "2026-04-18 04:20:08 UTC",
            "url": "https://sweet-cake3.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824905/",
            "reporter": "anonymous"
        }
    ],
    "3824896": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://85.11.167.21/sex.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:28:55 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-21",
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824896/",
            "reporter": "BlinkzSec"
        }
    ],
    "3824897": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://156.229.165.225/alyssaaarm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824897/",
            "reporter": "botnetkiller"
        }
    ],
    "3824898": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://156.229.165.225/alyssaaarm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824898/",
            "reporter": "botnetkiller"
        }
    ],
    "3824899": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://85.11.167.21/dc",
            "url_status": "offline",
            "last_online": "2026-04-23 06:14:59 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-21",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824899/",
            "reporter": "BlinkzSec"
        }
    ],
    "3824900": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://85.11.167.21/mips",
            "url_status": "offline",
            "last_online": "2026-04-23 06:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-21",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824900/",
            "reporter": "BlinkzSec"
        }
    ],
    "3824901": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://156.229.165.225/alyssaappc",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824901/",
            "reporter": "botnetkiller"
        }
    ],
    "3824902": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://156.229.165.225/alyssaamips",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824902/",
            "reporter": "botnetkiller"
        }
    ],
    "3824903": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://156.229.165.225/alyssaai686",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824903/",
            "reporter": "botnetkiller"
        }
    ],
    "3824904": [
        {
            "dateadded": "2026-04-18 04:17:13 UTC",
            "url": "http://156.229.165.225/alyssaaarm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824904/",
            "reporter": "botnetkiller"
        }
    ],
    "3824892": [
        {
            "dateadded": "2026-04-18 04:17:09 UTC",
            "url": "http://156.229.165.225/alyssaampsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824892/",
            "reporter": "botnetkiller"
        }
    ],
    "3824893": [
        {
            "dateadded": "2026-04-18 04:17:09 UTC",
            "url": "http://42.224.82.204:38990/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:12:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824893/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824894": [
        {
            "dateadded": "2026-04-18 04:17:09 UTC",
            "url": "http://156.229.165.225/alyssaam68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824894/",
            "reporter": "botnetkiller"
        }
    ],
    "3824895": [
        {
            "dateadded": "2026-04-18 04:17:09 UTC",
            "url": "http://156.229.165.225/alyssaai486",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824895/",
            "reporter": "botnetkiller"
        }
    ],
    "3824890": [
        {
            "dateadded": "2026-04-18 04:17:08 UTC",
            "url": "http://156.229.165.225/alyssaai586",
            "url_status": "online",
            "last_online": "2026-04-27 14:04:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824890/",
            "reporter": "botnetkiller"
        }
    ],
    "3824891": [
        {
            "dateadded": "2026-04-18 04:17:08 UTC",
            "url": "http://156.229.165.225/alyssaaarm",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824891/",
            "reporter": "botnetkiller"
        }
    ],
    "3824889": [
        {
            "dateadded": "2026-04-18 04:14:18 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/arm",
            "url_status": "offline",
            "last_online": "2026-04-19 12:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824889/",
            "reporter": "botnetkiller"
        }
    ],
    "3824888": [
        {
            "dateadded": "2026-04-18 04:14:16 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/mips",
            "url_status": "offline",
            "last_online": "2026-04-19 12:17:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824888/",
            "reporter": "botnetkiller"
        }
    ],
    "3824887": [
        {
            "dateadded": "2026-04-18 04:14:13 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/arm6",
            "url_status": "offline",
            "last_online": "2026-04-19 11:44:55 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824887/",
            "reporter": "botnetkiller"
        }
    ],
    "3824884": [
        {
            "dateadded": "2026-04-18 04:14:09 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/x86",
            "url_status": "offline",
            "last_online": "2026-04-19 12:51:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824884/",
            "reporter": "botnetkiller"
        }
    ],
    "3824885": [
        {
            "dateadded": "2026-04-18 04:14:09 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/sh4",
            "url_status": "offline",
            "last_online": "2026-04-19 10:50:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824885/",
            "reporter": "botnetkiller"
        }
    ],
    "3824886": [
        {
            "dateadded": "2026-04-18 04:14:09 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/spc",
            "url_status": "offline",
            "last_online": "2026-04-19 11:44:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824886/",
            "reporter": "botnetkiller"
        }
    ],
    "3824883": [
        {
            "dateadded": "2026-04-18 04:14:08 UTC",
            "url": "https://apple-pie2.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824883/",
            "reporter": "anonymous"
        }
    ],
    "3824879": [
        {
            "dateadded": "2026-04-18 04:13:17 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/x.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824879/",
            "reporter": "botnetkiller"
        }
    ],
    "3824880": [
        {
            "dateadded": "2026-04-18 04:13:17 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/ppc",
            "url_status": "offline",
            "last_online": "2026-04-19 12:19:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824880/",
            "reporter": "botnetkiller"
        }
    ],
    "3824881": [
        {
            "dateadded": "2026-04-18 04:13:17 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/arc",
            "url_status": "offline",
            "last_online": "2026-04-19 11:16:05 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824881/",
            "reporter": "botnetkiller"
        }
    ],
    "3824882": [
        {
            "dateadded": "2026-04-18 04:13:17 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 12:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824882/",
            "reporter": "botnetkiller"
        }
    ],
    "3824877": [
        {
            "dateadded": "2026-04-18 04:13:08 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 12:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824877/",
            "reporter": "botnetkiller"
        }
    ],
    "3824878": [
        {
            "dateadded": "2026-04-18 04:13:08 UTC",
            "url": "http://176.65.148.173.ptr.pfcloud.network/m68k",
            "url_status": "offline",
            "last_online": "2026-04-19 12:43:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824878/",
            "reporter": "botnetkiller"
        }
    ],
    "3824876": [
        {
            "dateadded": "2026-04-18 04:13:07 UTC",
            "url": "http://176.65.148.173/x.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824876/",
            "reporter": "botnetkiller"
        }
    ],
    "3824875": [
        {
            "dateadded": "2026-04-18 04:12:15 UTC",
            "url": "http://115.56.128.196:34465/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:52:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824875/",
            "reporter": "geenensp"
        }
    ],
    "3824874": [
        {
            "dateadded": "2026-04-18 04:07:07 UTC",
            "url": "http://113.230.93.100:50346/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:45:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824874/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824873": [
        {
            "dateadded": "2026-04-18 04:05:14 UTC",
            "url": "https://fruit-box1.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 04:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824873/",
            "reporter": "anonymous"
        }
    ],
    "3824872": [
        {
            "dateadded": "2026-04-18 04:02:15 UTC",
            "url": "http://176.118.209.172:57426/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824872/",
            "reporter": "geenensp"
        }
    ],
    "3824871": [
        {
            "dateadded": "2026-04-18 03:58:13 UTC",
            "url": "https://cloud-node6.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824871/",
            "reporter": "anonymous"
        }
    ],
    "3824870": [
        {
            "dateadded": "2026-04-18 03:57:15 UTC",
            "url": "http://110.37.86.252:37966/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824870/",
            "reporter": "geenensp"
        }
    ],
    "3824869": [
        {
            "dateadded": "2026-04-18 03:51:15 UTC",
            "url": "http://196.188.135.20:39138/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824869/",
            "reporter": "geenensp"
        }
    ],
    "3824868": [
        {
            "dateadded": "2026-04-18 03:50:16 UTC",
            "url": "http://123.7.154.130:36406/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:53:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824868/",
            "reporter": "geenensp"
        }
    ],
    "3824867": [
        {
            "dateadded": "2026-04-18 03:49:08 UTC",
            "url": "https://data-base5.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824867/",
            "reporter": "anonymous"
        }
    ],
    "3824866": [
        {
            "dateadded": "2026-04-18 03:47:16 UTC",
            "url": "http://196.188.135.20:39138/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:17:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824866/",
            "reporter": "geenensp"
        }
    ],
    "3824864": [
        {
            "dateadded": "2026-04-18 03:47:09 UTC",
            "url": "http://39.83.2.247:50833/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824864/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824865": [
        {
            "dateadded": "2026-04-18 03:47:09 UTC",
            "url": "http://222.140.184.36:39972/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824865/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824863": [
        {
            "dateadded": "2026-04-18 03:47:07 UTC",
            "url": "http://27.215.120.208:53084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:54:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824863/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824862": [
        {
            "dateadded": "2026-04-18 03:46:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.arm",
            "url_status": "offline",
            "last_online": "2026-04-18 04:56:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824862/",
            "reporter": "tolisec"
        }
    ],
    "3824852": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.mips",
            "url_status": "offline",
            "last_online": "2026-04-18 04:56:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824852/",
            "reporter": "tolisec"
        }
    ],
    "3824853": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-18 05:09:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824853/",
            "reporter": "tolisec"
        }
    ],
    "3824854": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 04:51:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824854/",
            "reporter": "tolisec"
        }
    ],
    "3824855": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.spc",
            "url_status": "offline",
            "last_online": "2026-04-18 04:50:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824855/",
            "reporter": "tolisec"
        }
    ],
    "3824856": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.arm7",
            "url_status": "offline",
            "last_online": "2026-04-18 05:46:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824856/",
            "reporter": "tolisec"
        }
    ],
    "3824857": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.x86",
            "url_status": "offline",
            "last_online": "2026-04-18 04:29:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824857/",
            "reporter": "tolisec"
        }
    ],
    "3824858": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 04:46:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824858/",
            "reporter": "tolisec"
        }
    ],
    "3824859": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.ppc",
            "url_status": "offline",
            "last_online": "2026-04-18 09:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824859/",
            "reporter": "tolisec"
        }
    ],
    "3824860": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.m68k",
            "url_status": "offline",
            "last_online": "2026-04-18 09:27:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824860/",
            "reporter": "tolisec"
        }
    ],
    "3824861": [
        {
            "dateadded": "2026-04-18 03:45:11 UTC",
            "url": "http://94.103.188.207/AB4g5/Josho.sh4",
            "url_status": "offline",
            "last_online": "2026-04-18 05:00:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824861/",
            "reporter": "tolisec"
        }
    ],
    "3824851": [
        {
            "dateadded": "2026-04-18 03:43:12 UTC",
            "url": "http://110.36.65.9:54680/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824851/",
            "reporter": "geenensp"
        }
    ],
    "3824850": [
        {
            "dateadded": "2026-04-18 03:42:10 UTC",
            "url": "https://fast-code4.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824850/",
            "reporter": "anonymous"
        }
    ],
    "3824849": [
        {
            "dateadded": "2026-04-18 03:39:07 UTC",
            "url": "https://web-site3.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824849/",
            "reporter": "anonymous"
        }
    ],
    "3824848": [
        {
            "dateadded": "2026-04-18 03:34:06 UTC",
            "url": "http://176.118.209.172:57426/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824848/",
            "reporter": "geenensp"
        }
    ],
    "3824847": [
        {
            "dateadded": "2026-04-18 03:31:13 UTC",
            "url": "https://smart-app2.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824847/",
            "reporter": "anonymous"
        }
    ],
    "3824846": [
        {
            "dateadded": "2026-04-18 03:23:14 UTC",
            "url": "http://110.37.27.164:60118/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824846/",
            "reporter": "geenensp"
        }
    ],
    "3824845": [
        {
            "dateadded": "2026-04-18 03:22:14 UTC",
            "url": "http://110.36.65.9:54680/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 00:00:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824845/",
            "reporter": "geenensp"
        }
    ],
    "3824844": [
        {
            "dateadded": "2026-04-18 03:22:05 UTC",
            "url": "http://42.178.147.200:44176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 03:22:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824844/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824843": [
        {
            "dateadded": "2026-04-18 03:20:12 UTC",
            "url": "https://tech-tool1.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824843/",
            "reporter": "anonymous"
        }
    ],
    "3824842": [
        {
            "dateadded": "2026-04-18 03:19:08 UTC",
            "url": "http://39.74.60.13:46446/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:39:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824842/",
            "reporter": "geenensp"
        }
    ],
    "3824841": [
        {
            "dateadded": "2026-04-18 03:17:18 UTC",
            "url": "http://42.225.68.198:35382/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:28:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824841/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824840": [
        {
            "dateadded": "2026-04-18 03:13:08 UTC",
            "url": "https://wind-speed6.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824840/",
            "reporter": "anonymous"
        }
    ],
    "3824839": [
        {
            "dateadded": "2026-04-18 03:13:07 UTC",
            "url": "http://219.156.18.152:50225/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:46:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824839/",
            "reporter": "geenensp"
        }
    ],
    "3824838": [
        {
            "dateadded": "2026-04-18 03:10:12 UTC",
            "url": "http://61.53.126.233:43434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:54:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824838/",
            "reporter": "geenensp"
        }
    ],
    "3824837": [
        {
            "dateadded": "2026-04-18 03:05:10 UTC",
            "url": "https://snow-fall5.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 03:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824837/",
            "reporter": "anonymous"
        }
    ],
    "3824835": [
        {
            "dateadded": "2026-04-18 03:02:07 UTC",
            "url": "http://125.46.134.141:58243/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824835/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824836": [
        {
            "dateadded": "2026-04-18 03:02:07 UTC",
            "url": "http://175.30.79.99:54509/i",
            "url_status": "offline",
            "last_online": "2026-04-27 04:59:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824836/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824834": [
        {
            "dateadded": "2026-04-18 03:01:16 UTC",
            "url": "http://39.74.60.13:46446/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:55:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824834/",
            "reporter": "geenensp"
        }
    ],
    "3824833": [
        {
            "dateadded": "2026-04-18 03:00:16 UTC",
            "url": "http://175.165.166.104:36784/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824833/",
            "reporter": "geenensp"
        }
    ],
    "3824832": [
        {
            "dateadded": "2026-04-18 02:59:12 UTC",
            "url": "http://218.248.44.253:54683/i",
            "url_status": "offline",
            "last_online": "2026-04-18 02:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824832/",
            "reporter": "geenensp"
        }
    ],
    "3824830": [
        {
            "dateadded": "2026-04-18 02:57:06 UTC",
            "url": "http://219.157.59.9:44224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:48:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824830/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824831": [
        {
            "dateadded": "2026-04-18 02:57:06 UTC",
            "url": "http://110.37.27.164:60118/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824831/",
            "reporter": "geenensp"
        }
    ],
    "3824829": [
        {
            "dateadded": "2026-04-18 02:56:07 UTC",
            "url": "https://rain-drop4.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824829/",
            "reporter": "anonymous"
        }
    ],
    "3824828": [
        {
            "dateadded": "2026-04-18 02:54:16 UTC",
            "url": "http://110.38.215.152:40329/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824828/",
            "reporter": "geenensp"
        }
    ],
    "3824827": [
        {
            "dateadded": "2026-04-18 02:49:09 UTC",
            "url": "https://sun-light3.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824827/",
            "reporter": "anonymous"
        }
    ],
    "3824826": [
        {
            "dateadded": "2026-04-18 02:47:07 UTC",
            "url": "http://123.4.253.209:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824826/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824825": [
        {
            "dateadded": "2026-04-18 02:46:07 UTC",
            "url": "http://219.155.111.60:54152/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:21:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824825/",
            "reporter": "geenensp"
        }
    ],
    "3824824": [
        {
            "dateadded": "2026-04-18 02:45:12 UTC",
            "url": "http://218.248.44.253:54683/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 02:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824824/",
            "reporter": "geenensp"
        }
    ],
    "3824823": [
        {
            "dateadded": "2026-04-18 02:41:05 UTC",
            "url": "https://blue-cloud2.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:41:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824823/",
            "reporter": "anonymous"
        }
    ],
    "3824822": [
        {
            "dateadded": "2026-04-18 02:35:15 UTC",
            "url": "http://105.226.10.165:44977/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:25:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824822/",
            "reporter": "geenensp"
        }
    ],
    "3824821": [
        {
            "dateadded": "2026-04-18 02:33:08 UTC",
            "url": "https://sky-view1.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824821/",
            "reporter": "anonymous"
        }
    ],
    "3824820": [
        {
            "dateadded": "2026-04-18 02:31:15 UTC",
            "url": "http://27.202.246.71:50610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:41:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824820/",
            "reporter": "geenensp"
        }
    ],
    "3824817": [
        {
            "dateadded": "2026-04-18 02:27:05 UTC",
            "url": "http://79.106.45.20:46120/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:55:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824817/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824818": [
        {
            "dateadded": "2026-04-18 02:27:05 UTC",
            "url": "http://37.26.86.218:57084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 02:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824818/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824819": [
        {
            "dateadded": "2026-04-18 02:27:05 UTC",
            "url": "http://110.37.114.50:60945/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824819/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824816": [
        {
            "dateadded": "2026-04-18 02:26:09 UTC",
            "url": "https://road-trip6.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824816/",
            "reporter": "anonymous"
        }
    ],
    "3824815": [
        {
            "dateadded": "2026-04-18 02:24:07 UTC",
            "url": "http://222.137.145.199:43109/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:24:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824815/",
            "reporter": "geenensp"
        }
    ],
    "3824814": [
        {
            "dateadded": "2026-04-18 02:23:08 UTC",
            "url": "https://fast-drive5.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824814/",
            "reporter": "anonymous"
        }
    ],
    "3824813": [
        {
            "dateadded": "2026-04-18 02:16:16 UTC",
            "url": "http://60.23.193.181:53299/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824813/",
            "reporter": "geenensp"
        }
    ],
    "3824812": [
        {
            "dateadded": "2026-04-18 02:12:07 UTC",
            "url": "http://221.15.22.180:43362/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824812/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824811": [
        {
            "dateadded": "2026-04-18 02:12:06 UTC",
            "url": "http://221.15.22.180:43362/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824811/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824810": [
        {
            "dateadded": "2026-04-18 02:11:09 UTC",
            "url": "https://car-wash4.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824810/",
            "reporter": "anonymous"
        }
    ],
    "3824808": [
        {
            "dateadded": "2026-04-18 02:07:07 UTC",
            "url": "http://61.52.219.85:36906/i",
            "url_status": "offline",
            "last_online": "2026-04-18 02:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824808/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824809": [
        {
            "dateadded": "2026-04-18 02:07:07 UTC",
            "url": "http://113.238.105.172:36974/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:43:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824809/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824807": [
        {
            "dateadded": "2026-04-18 02:03:08 UTC",
            "url": "https://new-tires3.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 02:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824807/",
            "reporter": "anonymous"
        }
    ],
    "3824804": [
        {
            "dateadded": "2026-04-18 02:02:07 UTC",
            "url": "http://113.238.105.172:36974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:33:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824804/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824805": [
        {
            "dateadded": "2026-04-18 02:02:07 UTC",
            "url": "http://111.249.211.72:41906/i",
            "url_status": "offline",
            "last_online": "2026-04-18 02:02:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824805/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824806": [
        {
            "dateadded": "2026-04-18 02:02:07 UTC",
            "url": "http://61.52.219.85:36906/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:20:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824806/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824803": [
        {
            "dateadded": "2026-04-18 01:56:15 UTC",
            "url": "http://222.137.145.199:43109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:53:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824803/",
            "reporter": "geenensp"
        }
    ],
    "3824802": [
        {
            "dateadded": "2026-04-18 01:56:07 UTC",
            "url": "https://oil-change2.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824802/",
            "reporter": "anonymous"
        }
    ],
    "3824801": [
        {
            "dateadded": "2026-04-18 01:53:08 UTC",
            "url": "http://125.40.122.251:55207/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:52:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824801/",
            "reporter": "geenensp"
        }
    ],
    "3824800": [
        {
            "dateadded": "2026-04-18 01:52:08 UTC",
            "url": "http://111.249.211.72:41906/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 01:52:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824800/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824799": [
        {
            "dateadded": "2026-04-18 01:49:09 UTC",
            "url": "http://42.235.80.79:39470/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824799/",
            "reporter": "geenensp"
        }
    ],
    "3824798": [
        {
            "dateadded": "2026-04-18 01:47:09 UTC",
            "url": "https://auto-care1.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824798/",
            "reporter": "anonymous"
        }
    ],
    "3824797": [
        {
            "dateadded": "2026-04-18 01:47:07 UTC",
            "url": "http://115.55.198.133:57529/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:38:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824797/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824796": [
        {
            "dateadded": "2026-04-18 01:47:06 UTC",
            "url": "http://213.67.213.82:38200/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824796/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824795": [
        {
            "dateadded": "2026-04-18 01:42:14 UTC",
            "url": "http://115.48.162.0:53130/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824795/",
            "reporter": "geenensp"
        }
    ],
    "3824794": [
        {
            "dateadded": "2026-04-18 01:42:07 UTC",
            "url": "http://213.67.213.82:38200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:50:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824794/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824793": [
        {
            "dateadded": "2026-04-18 01:40:12 UTC",
            "url": "http://110.37.95.117:41147/i",
            "url_status": "offline",
            "last_online": "2026-04-22 00:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824793/",
            "reporter": "geenensp"
        }
    ],
    "3824792": [
        {
            "dateadded": "2026-04-18 01:39:13 UTC",
            "url": "https://open-window6.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824792/",
            "reporter": "anonymous"
        }
    ],
    "3824791": [
        {
            "dateadded": "2026-04-18 01:39:06 UTC",
            "url": "http://85.11.167.21/m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 06:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824791/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824784": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/arm61",
            "url_status": "offline",
            "last_online": "2026-04-23 05:52:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824784/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824785": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/586",
            "url_status": "offline",
            "last_online": "2026-04-23 06:07:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824785/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824786": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/dss",
            "url_status": "offline",
            "last_online": "2026-04-23 06:05:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824786/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824787": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/sh4",
            "url_status": "offline",
            "last_online": "2026-04-23 06:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824787/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824788": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-23 07:21:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824788/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824789": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/ppc",
            "url_status": "offline",
            "last_online": "2026-04-23 06:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824789/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824790": [
        {
            "dateadded": "2026-04-18 01:38:16 UTC",
            "url": "http://85.11.167.21/co",
            "url_status": "offline",
            "last_online": "2026-04-23 06:13:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824790/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824782": [
        {
            "dateadded": "2026-04-18 01:37:14 UTC",
            "url": "http://85.11.167.21/i686",
            "url_status": "offline",
            "last_online": "2026-04-23 04:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824782/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824783": [
        {
            "dateadded": "2026-04-18 01:37:14 UTC",
            "url": "http://115.57.49.83:49912/i",
            "url_status": "offline",
            "last_online": "2026-04-19 18:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824783/",
            "reporter": "geenensp"
        }
    ],
    "3824781": [
        {
            "dateadded": "2026-04-18 01:32:11 UTC",
            "url": "https://green-plant5.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824781/",
            "reporter": "anonymous"
        }
    ],
    "3824779": [
        {
            "dateadded": "2026-04-18 01:32:07 UTC",
            "url": "http://118.248.37.80:48482/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:55:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824779/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824780": [
        {
            "dateadded": "2026-04-18 01:32:07 UTC",
            "url": "http://118.248.37.80:48482/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824780/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824778": [
        {
            "dateadded": "2026-04-18 01:31:16 UTC",
            "url": "http://219.155.252.99:33257/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:36:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824778/",
            "reporter": "geenensp"
        }
    ],
    "3824777": [
        {
            "dateadded": "2026-04-18 01:27:14 UTC",
            "url": "http://125.41.0.219:37531/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:39:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824777/",
            "reporter": "geenensp"
        }
    ],
    "3824776": [
        {
            "dateadded": "2026-04-18 01:27:08 UTC",
            "url": "http://42.58.119.20:43018/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:42:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824776/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824774": [
        {
            "dateadded": "2026-04-18 01:27:07 UTC",
            "url": "http://79.106.45.20:46120/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:31:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824774/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824775": [
        {
            "dateadded": "2026-04-18 01:27:07 UTC",
            "url": "http://175.146.159.211:33151/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:32:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824775/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824773": [
        {
            "dateadded": "2026-04-18 01:27:06 UTC",
            "url": "http://123.14.221.192:37406/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 01:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824773/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824772": [
        {
            "dateadded": "2026-04-18 01:24:15 UTC",
            "url": "http://42.235.80.79:39470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824772/",
            "reporter": "geenensp"
        }
    ],
    "3824771": [
        {
            "dateadded": "2026-04-18 01:24:07 UTC",
            "url": "https://warm-light4.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:24:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824771/",
            "reporter": "anonymous"
        }
    ],
    "3824770": [
        {
            "dateadded": "2026-04-18 01:22:08 UTC",
            "url": "http://42.58.119.20:43018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:37:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824770/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824769": [
        {
            "dateadded": "2026-04-18 01:17:08 UTC",
            "url": "https://soft-sofa3.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824769/",
            "reporter": "anonymous"
        }
    ],
    "3824768": [
        {
            "dateadded": "2026-04-18 01:16:14 UTC",
            "url": "http://110.37.95.117:41147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 22:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824768/",
            "reporter": "geenensp"
        }
    ],
    "3824767": [
        {
            "dateadded": "2026-04-18 01:12:06 UTC",
            "url": "http://42.227.186.26:52909/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:29:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824767/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824766": [
        {
            "dateadded": "2026-04-18 01:10:11 UTC",
            "url": "https://modern-room2.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824766/",
            "reporter": "anonymous"
        }
    ],
    "3824765": [
        {
            "dateadded": "2026-04-18 01:10:08 UTC",
            "url": "http://124.131.119.117:45117/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 01:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824765/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824764": [
        {
            "dateadded": "2026-04-18 01:07:06 UTC",
            "url": "http://42.227.186.26:52909/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824764/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824763": [
        {
            "dateadded": "2026-04-18 01:02:07 UTC",
            "url": "http://175.30.79.99:54509/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824763/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824762": [
        {
            "dateadded": "2026-04-18 01:01:10 UTC",
            "url": "https://home-style1.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 01:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824762/",
            "reporter": "anonymous"
        }
    ],
    "3824761": [
        {
            "dateadded": "2026-04-18 00:59:09 UTC",
            "url": "http://125.41.0.219:37531/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824761/",
            "reporter": "geenensp"
        }
    ],
    "3824759": [
        {
            "dateadded": "2026-04-18 00:57:09 UTC",
            "url": "http://60.215.17.250:40895/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824759/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824760": [
        {
            "dateadded": "2026-04-18 00:57:09 UTC",
            "url": "http://106.7.234.255:42783/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:04:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824760/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824754": [
        {
            "dateadded": "2026-04-18 00:57:08 UTC",
            "url": "http://220.202.89.244:60868/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824754/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824755": [
        {
            "dateadded": "2026-04-18 00:57:08 UTC",
            "url": "http://219.157.59.9:44224/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824755/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824756": [
        {
            "dateadded": "2026-04-18 00:57:08 UTC",
            "url": "http://123.11.12.187:35702/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:12:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824756/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824757": [
        {
            "dateadded": "2026-04-18 00:57:08 UTC",
            "url": "http://175.147.18.219:57547/i",
            "url_status": "offline",
            "last_online": "2026-04-22 06:10:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824757/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824758": [
        {
            "dateadded": "2026-04-18 00:57:08 UTC",
            "url": "http://123.7.154.130:36406/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:49:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824758/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824753": [
        {
            "dateadded": "2026-04-18 00:57:07 UTC",
            "url": "http://222.142.253.68:54634/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824753/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3824752": [
        {
            "dateadded": "2026-04-18 00:54:07 UTC",
            "url": "https://hobby-time6.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824752/",
            "reporter": "anonymous"
        }
    ],
    "3824751": [
        {
            "dateadded": "2026-04-18 00:47:11 UTC",
            "url": "https://book-shelf5.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824751/",
            "reporter": "anonymous"
        }
    ],
    "3824750": [
        {
            "dateadded": "2026-04-18 00:39:06 UTC",
            "url": "https://cinema-club4.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824750/",
            "reporter": "anonymous"
        }
    ],
    "3824749": [
        {
            "dateadded": "2026-04-18 00:31:07 UTC",
            "url": "https://dance-floor3.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824749/",
            "reporter": "anonymous"
        }
    ],
    "3824748": [
        {
            "dateadded": "2026-04-18 00:28:06 UTC",
            "url": "https://music-band2.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824748/",
            "reporter": "anonymous"
        }
    ],
    "3824747": [
        {
            "dateadded": "2026-04-18 00:16:09 UTC",
            "url": "https://art-studio1.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824747/",
            "reporter": "anonymous"
        }
    ],
    "3824746": [
        {
            "dateadded": "2026-04-18 00:08:10 UTC",
            "url": "https://global-tax6.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824746/",
            "reporter": "anonymous"
        }
    ],
    "3824745": [
        {
            "dateadded": "2026-04-18 00:06:15 UTC",
            "url": "http://125.40.122.251:55207/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:57:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824745/",
            "reporter": "geenensp"
        }
    ],
    "3824744": [
        {
            "dateadded": "2026-04-18 00:05:15 UTC",
            "url": "http://194.54.161.214:49444/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824744/",
            "reporter": "geenensp"
        }
    ],
    "3824743": [
        {
            "dateadded": "2026-04-18 00:00:13 UTC",
            "url": "https://safe-invest5.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-18 00:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824743/",
            "reporter": "anonymous"
        }
    ],
    "3824742": [
        {
            "dateadded": "2026-04-17 23:58:17 UTC",
            "url": "http://111.220.29.136:57794/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824742/",
            "reporter": "geenensp"
        }
    ],
    "3824741": [
        {
            "dateadded": "2026-04-17 23:54:06 UTC",
            "url": "https://credit-card4.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824741/",
            "reporter": "anonymous"
        }
    ],
    "3824740": [
        {
            "dateadded": "2026-04-17 23:50:19 UTC",
            "url": "http://175.165.85.86:32974/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:21:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824740/",
            "reporter": "geenensp"
        }
    ],
    "3824739": [
        {
            "dateadded": "2026-04-17 23:46:14 UTC",
            "url": "https://cash-flow3.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824739/",
            "reporter": "anonymous"
        }
    ],
    "3824738": [
        {
            "dateadded": "2026-04-17 23:40:11 UTC",
            "url": "http://222.137.133.139:41679/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824738/",
            "reporter": "geenensp"
        }
    ],
    "3824737": [
        {
            "dateadded": "2026-04-17 23:38:12 UTC",
            "url": "http://194.54.161.214:49444/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:42:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824737/",
            "reporter": "geenensp"
        }
    ],
    "3824736": [
        {
            "dateadded": "2026-04-17 23:37:14 UTC",
            "url": "https://money-save2.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824736/",
            "reporter": "anonymous"
        }
    ],
    "3824735": [
        {
            "dateadded": "2026-04-17 23:33:17 UTC",
            "url": "http://222.136.146.119:50655/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:40:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824735/",
            "reporter": "geenensp"
        }
    ],
    "3824734": [
        {
            "dateadded": "2026-04-17 23:30:09 UTC",
            "url": "https://bank-report1.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824734/",
            "reporter": "anonymous"
        }
    ],
    "3824733": [
        {
            "dateadded": "2026-04-17 23:22:11 UTC",
            "url": "https://best-player6.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824733/",
            "reporter": "anonymous"
        }
    ],
    "3824732": [
        {
            "dateadded": "2026-04-17 23:19:15 UTC",
            "url": "http://175.165.85.86:32974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:31:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824732/",
            "reporter": "geenensp"
        }
    ],
    "3824731": [
        {
            "dateadded": "2026-04-17 23:16:08 UTC",
            "url": "http://223.151.254.103:47220/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:23:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824731/",
            "reporter": "geenensp"
        }
    ],
    "3824730": [
        {
            "dateadded": "2026-04-17 23:15:11 UTC",
            "url": "https://sport-news5.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824730/",
            "reporter": "anonymous"
        }
    ],
    "3824729": [
        {
            "dateadded": "2026-04-17 23:10:16 UTC",
            "url": "http://110.36.26.86:49109/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:43:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824729/",
            "reporter": "geenensp"
        }
    ],
    "3824728": [
        {
            "dateadded": "2026-04-17 23:07:14 UTC",
            "url": "https://final-game4.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 23:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824728/",
            "reporter": "anonymous"
        }
    ],
    "3824727": [
        {
            "dateadded": "2026-04-17 22:59:11 UTC",
            "url": "https://gold-medal3.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824727/",
            "reporter": "anonymous"
        }
    ],
    "3824726": [
        {
            "dateadded": "2026-04-17 22:51:16 UTC",
            "url": "https://team-score2.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824726/",
            "reporter": "anonymous"
        }
    ],
    "3824724": [
        {
            "dateadded": "2026-04-17 22:45:20 UTC",
            "url": "http://222.136.146.119:50655/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:53:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824724/",
            "reporter": "geenensp"
        }
    ],
    "3824725": [
        {
            "dateadded": "2026-04-17 22:45:20 UTC",
            "url": "http://223.151.254.103:47220/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 18:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824725/",
            "reporter": "geenensp"
        }
    ],
    "3824723": [
        {
            "dateadded": "2026-04-17 22:44:13 UTC",
            "url": "https://fast-match1.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824723/",
            "reporter": "anonymous"
        }
    ],
    "3824722": [
        {
            "dateadded": "2026-04-17 22:37:12 UTC",
            "url": "https://strong-mind6.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824722/",
            "reporter": "anonymous"
        }
    ],
    "3824721": [
        {
            "dateadded": "2026-04-17 22:33:18 UTC",
            "url": "http://115.55.145.57:41209/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:46:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824721/",
            "reporter": "geenensp"
        }
    ],
    "3824720": [
        {
            "dateadded": "2026-04-17 22:29:13 UTC",
            "url": "https://body-fit5.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824720/",
            "reporter": "anonymous"
        }
    ],
    "3824719": [
        {
            "dateadded": "2026-04-17 22:24:24 UTC",
            "url": "http://111.220.29.136:57794/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:24:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824719/",
            "reporter": "geenensp"
        }
    ],
    "3824718": [
        {
            "dateadded": "2026-04-17 22:21:08 UTC",
            "url": "https://power-gym4.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824718/",
            "reporter": "anonymous"
        }
    ],
    "3824717": [
        {
            "dateadded": "2026-04-17 22:17:17 UTC",
            "url": "http://42.4.253.120:48853/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824717/",
            "reporter": "geenensp"
        }
    ],
    "3824716": [
        {
            "dateadded": "2026-04-17 22:14:07 UTC",
            "url": "https://fresh-juice3.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824716/",
            "reporter": "anonymous"
        }
    ],
    "3824715": [
        {
            "dateadded": "2026-04-17 22:05:12 UTC",
            "url": "https://yoga-class2.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824715/",
            "reporter": "anonymous"
        }
    ],
    "3824714": [
        {
            "dateadded": "2026-04-17 22:00:10 UTC",
            "url": "https://daily-health1.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 22:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824714/",
            "reporter": "anonymous"
        }
    ],
    "3824713": [
        {
            "dateadded": "2026-04-17 21:56:18 UTC",
            "url": "http://42.233.107.162:56321/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:56:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824713/",
            "reporter": "geenensp"
        }
    ],
    "3824712": [
        {
            "dateadded": "2026-04-17 21:52:07 UTC",
            "url": "https://wolfcoupo.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 21:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824712/",
            "reporter": "anonymous"
        }
    ],
    "3824711": [
        {
            "dateadded": "2026-04-17 21:48:16 UTC",
            "url": "http://42.4.253.120:48853/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:40:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824711/",
            "reporter": "geenensp"
        }
    ],
    "3824710": [
        {
            "dateadded": "2026-04-17 21:45:08 UTC",
            "url": "https://3qui-crest.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 21:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824710/",
            "reporter": "anonymous"
        }
    ],
    "3824709": [
        {
            "dateadded": "2026-04-17 21:39:11 UTC",
            "url": "http://27.37.120.16:48949/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824709/",
            "reporter": "geenensp"
        }
    ],
    "3824708": [
        {
            "dateadded": "2026-04-17 21:37:07 UTC",
            "url": "https://gzvsfzls.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 21:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824708/",
            "reporter": "anonymous"
        }
    ],
    "3824707": [
        {
            "dateadded": "2026-04-17 21:36:22 UTC",
            "url": "http://180.158.39.24:44054/i",
            "url_status": "online",
            "last_online": "2026-04-27 13:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824707/",
            "reporter": "geenensp"
        }
    ],
    "3824706": [
        {
            "dateadded": "2026-04-17 21:33:10 UTC",
            "url": "http://42.233.107.162:56321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824706/",
            "reporter": "geenensp"
        }
    ],
    "3824705": [
        {
            "dateadded": "2026-04-17 21:31:09 UTC",
            "url": "http://42.6.251.86:44369/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824705/",
            "reporter": "geenensp"
        }
    ],
    "3824704": [
        {
            "dateadded": "2026-04-17 21:30:14 UTC",
            "url": "https://spark0-mesh.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 21:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824704/",
            "reporter": "anonymous"
        }
    ],
    "3824703": [
        {
            "dateadded": "2026-04-17 21:28:18 UTC",
            "url": "http://115.55.145.57:41209/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824703/",
            "reporter": "geenensp"
        }
    ],
    "3824702": [
        {
            "dateadded": "2026-04-17 21:28:17 UTC",
            "url": "http://123.10.138.70:41218/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 11:48:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824702/",
            "reporter": "geenensp"
        }
    ],
    "3824701": [
        {
            "dateadded": "2026-04-17 21:28:16 UTC",
            "url": "http://123.10.138.70:41218/i",
            "url_status": "offline",
            "last_online": "2026-04-23 12:27:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824701/",
            "reporter": "geenensp"
        }
    ],
    "3824700": [
        {
            "dateadded": "2026-04-17 21:08:21 UTC",
            "url": "http://180.158.39.24:44054/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824700/",
            "reporter": "geenensp"
        }
    ],
    "3824699": [
        {
            "dateadded": "2026-04-17 21:04:21 UTC",
            "url": "http://115.55.56.212:33306/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824699/",
            "reporter": "geenensp"
        }
    ],
    "3824698": [
        {
            "dateadded": "2026-04-17 21:00:14 UTC",
            "url": "https://clipvale.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 21:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824698/",
            "reporter": "anonymous"
        }
    ],
    "3824697": [
        {
            "dateadded": "2026-04-17 20:50:19 UTC",
            "url": "http://115.55.58.251:60744/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:25:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824697/",
            "reporter": "geenensp"
        }
    ],
    "3824696": [
        {
            "dateadded": "2026-04-17 20:31:17 UTC",
            "url": "http://42.6.251.86:44369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:29:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824696/",
            "reporter": "geenensp"
        }
    ],
    "3824695": [
        {
            "dateadded": "2026-04-17 20:30:13 UTC",
            "url": "https://a4lp.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 20:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824695/",
            "reporter": "anonymous"
        }
    ],
    "3824678": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824678/",
            "reporter": "botnetkiller"
        }
    ],
    "3824679": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/cat.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824679/",
            "reporter": "botnetkiller"
        }
    ],
    "3824680": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824680/",
            "reporter": "botnetkiller"
        }
    ],
    "3824681": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.ppc440",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824681/",
            "reporter": "botnetkiller"
        }
    ],
    "3824682": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824682/",
            "reporter": "botnetkiller"
        }
    ],
    "3824683": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.x64",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824683/",
            "reporter": "botnetkiller"
        }
    ],
    "3824684": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824684/",
            "reporter": "botnetkiller"
        }
    ],
    "3824685": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824685/",
            "reporter": "botnetkiller"
        }
    ],
    "3824686": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824686/",
            "reporter": "botnetkiller"
        }
    ],
    "3824687": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.arm4",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824687/",
            "reporter": "botnetkiller"
        }
    ],
    "3824688": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824688/",
            "reporter": "botnetkiller"
        }
    ],
    "3824689": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824689/",
            "reporter": "botnetkiller"
        }
    ],
    "3824690": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824690/",
            "reporter": "botnetkiller"
        }
    ],
    "3824691": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824691/",
            "reporter": "botnetkiller"
        }
    ],
    "3824692": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824692/",
            "reporter": "botnetkiller"
        }
    ],
    "3824693": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.apk",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824693/",
            "reporter": "botnetkiller"
        }
    ],
    "3824694": [
        {
            "dateadded": "2026-04-17 20:27:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.dbg",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824694/",
            "reporter": "botnetkiller"
        }
    ],
    "3824677": [
        {
            "dateadded": "2026-04-17 20:15:23 UTC",
            "url": "http://85.11.167.101/arm64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824677/",
            "reporter": "NDA0E"
        }
    ],
    "3824676": [
        {
            "dateadded": "2026-04-17 20:15:10 UTC",
            "url": "http://50.83.204.239:26166/.i",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "hajime",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824676/",
            "reporter": "NDA0E"
        }
    ],
    "3824675": [
        {
            "dateadded": "2026-04-17 20:15:07 UTC",
            "url": "https://44kg.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 20:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824675/",
            "reporter": "anonymous"
        }
    ],
    "3824674": [
        {
            "dateadded": "2026-04-17 20:11:09 UTC",
            "url": "http://125.45.64.44:46312/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824674/",
            "reporter": "geenensp"
        }
    ],
    "3824673": [
        {
            "dateadded": "2026-04-17 20:07:09 UTC",
            "url": "http://42.236.221.151:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-17 20:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824673/",
            "reporter": "geenensp"
        }
    ],
    "3824672": [
        {
            "dateadded": "2026-04-17 20:05:12 UTC",
            "url": "http://176.65.139.253:1212/zyre.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824672/",
            "reporter": "botnetkiller"
        }
    ],
    "3824671": [
        {
            "dateadded": "2026-04-17 19:59:17 UTC",
            "url": "http://115.60.253.126:60563/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:16:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824671/",
            "reporter": "geenensp"
        }
    ],
    "3824670": [
        {
            "dateadded": "2026-04-17 19:58:07 UTC",
            "url": "https://easy-life6.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824670/",
            "reporter": "anonymous"
        }
    ],
    "3824669": [
        {
            "dateadded": "2026-04-17 19:56:17 UTC",
            "url": "http://125.47.234.58:56046/i",
            "url_status": "offline",
            "last_online": "2026-04-17 19:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824669/",
            "reporter": "geenensp"
        }
    ],
    "3824668": [
        {
            "dateadded": "2026-04-17 19:54:11 UTC",
            "url": "http://www.vame.be/cup/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824668/",
            "reporter": "abuse_ch"
        }
    ],
    "3824667": [
        {
            "dateadded": "2026-04-17 19:53:07 UTC",
            "url": "https://solar-sanat.net/imagedan73.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824667/",
            "reporter": "abuse_ch"
        }
    ],
    "3824666": [
        {
            "dateadded": "2026-04-17 19:52:08 UTC",
            "url": "https://corwineagles.com/desk.png",
            "url_status": "offline",
            "last_online": "2026-04-18 17:10:40 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824666/",
            "reporter": "abuse_ch"
        }
    ],
    "3824665": [
        {
            "dateadded": "2026-04-17 19:51:05 UTC",
            "url": "https://zorvex.life/Ao/images.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824665/",
            "reporter": "abuse_ch"
        }
    ],
    "3824664": [
        {
            "dateadded": "2026-04-17 19:50:08 UTC",
            "url": "https://allsydevs.com/wp-admin/image.png",
            "url_status": "offline",
            "last_online": "2026-04-23 06:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824664/",
            "reporter": "abuse_ch"
        }
    ],
    "3824663": [
        {
            "dateadded": "2026-04-17 19:49:09 UTC",
            "url": "https://hard-work5.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824663/",
            "reporter": "anonymous"
        }
    ],
    "3824662": [
        {
            "dateadded": "2026-04-17 19:49:07 UTC",
            "url": "https://www.shcgroup-vn.com/image.png",
            "url_status": "offline",
            "last_online": "2026-04-18 10:56:48 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824662/",
            "reporter": "abuse_ch"
        }
    ],
    "3824650": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/pentagon",
            "url_status": "offline",
            "last_online": "2026-04-17 23:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824650/",
            "reporter": "botnetkiller"
        }
    ],
    "3824651": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/i686",
            "url_status": "offline",
            "last_online": "2026-04-17 23:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824651/",
            "reporter": "botnetkiller"
        }
    ],
    "3824652": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/hik/h.mra",
            "url_status": "offline",
            "last_online": "2026-04-17 19:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824652/",
            "reporter": "botnetkiller"
        }
    ],
    "3824653": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/hik/h.4hs",
            "url_status": "offline",
            "last_online": "2026-04-17 19:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824653/",
            "reporter": "botnetkiller"
        }
    ],
    "3824654": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/arc",
            "url_status": "offline",
            "last_online": "2026-04-17 23:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824654/",
            "reporter": "botnetkiller"
        }
    ],
    "3824655": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/hik/h.7mra",
            "url_status": "offline",
            "last_online": "2026-04-17 19:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824655/",
            "reporter": "botnetkiller"
        }
    ],
    "3824656": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/hik/h.spim",
            "url_status": "offline",
            "last_online": "2026-04-17 19:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824656/",
            "reporter": "botnetkiller"
        }
    ],
    "3824657": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/i586",
            "url_status": "offline",
            "last_online": "2026-04-17 22:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824657/",
            "reporter": "botnetkiller"
        }
    ],
    "3824658": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/star",
            "url_status": "offline",
            "last_online": "2026-04-17 22:23:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824658/",
            "reporter": "botnetkiller"
        }
    ],
    "3824659": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/hik/h.685i",
            "url_status": "offline",
            "last_online": "2026-04-17 19:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824659/",
            "reporter": "botnetkiller"
        }
    ],
    "3824660": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/diamond",
            "url_status": "offline",
            "last_online": "2026-04-17 22:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824660/",
            "reporter": "botnetkiller"
        }
    ],
    "3824661": [
        {
            "dateadded": "2026-04-17 19:48:11 UTC",
            "url": "http://65.87.7.5/rhombus",
            "url_status": "offline",
            "last_online": "2026-04-17 23:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824661/",
            "reporter": "botnetkiller"
        }
    ],
    "3824628": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/sparc",
            "url_status": "offline",
            "last_online": "2026-04-17 22:51:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824628/",
            "reporter": "botnetkiller"
        }
    ],
    "3824629": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5///arm5",
            "url_status": "offline",
            "last_online": "2026-04-17 23:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824629/",
            "reporter": "botnetkiller"
        }
    ],
    "3824630": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hik/h.5mra",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824630/",
            "reporter": "botnetkiller"
        }
    ],
    "3824631": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/mips",
            "url_status": "offline",
            "last_online": "2026-04-17 23:01:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824631/",
            "reporter": "botnetkiller"
        }
    ],
    "3824632": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/arm5",
            "url_status": "offline",
            "last_online": "2026-04-17 22:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824632/",
            "reporter": "botnetkiller"
        }
    ],
    "3824633": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/octagon",
            "url_status": "offline",
            "last_online": "2026-04-17 23:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824633/",
            "reporter": "botnetkiller"
        }
    ],
    "3824634": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/arm7",
            "url_status": "offline",
            "last_online": "2026-04-17 22:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824634/",
            "reporter": "botnetkiller"
        }
    ],
    "3824635": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/ohshith.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:00:44 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824635/",
            "reporter": "botnetkiller"
        }
    ],
    "3824636": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-17 22:48:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824636/",
            "reporter": "botnetkiller"
        }
    ],
    "3824637": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-17 23:45:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824637/",
            "reporter": "botnetkiller"
        }
    ],
    "3824638": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hik/h.cra",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824638/",
            "reporter": "botnetkiller"
        }
    ],
    "3824639": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/triangle",
            "url_status": "offline",
            "last_online": "2026-04-17 22:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824639/",
            "reporter": "botnetkiller"
        }
    ],
    "3824640": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hik/h.46_68x",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824640/",
            "reporter": "botnetkiller"
        }
    ],
    "3824641": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hik/h.686i",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824641/",
            "reporter": "botnetkiller"
        }
    ],
    "3824642": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hexagon",
            "url_status": "offline",
            "last_online": "2026-04-17 22:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824642/",
            "reporter": "botnetkiller"
        }
    ],
    "3824643": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hik/h.lspm",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824643/",
            "reporter": "botnetkiller"
        }
    ],
    "3824644": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/hik/h.craps",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824644/",
            "reporter": "botnetkiller"
        }
    ],
    "3824645": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/heptagon",
            "url_status": "offline",
            "last_online": "2026-04-17 22:52:59 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824645/",
            "reporter": "botnetkiller"
        }
    ],
    "3824646": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/circle",
            "url_status": "offline",
            "last_online": "2026-04-17 22:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824646/",
            "reporter": "botnetkiller"
        }
    ],
    "3824647": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/square",
            "url_status": "offline",
            "last_online": "2026-04-17 23:51:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824647/",
            "reporter": "botnetkiller"
        }
    ],
    "3824648": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/arm",
            "url_status": "offline",
            "last_online": "2026-04-17 23:45:26 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824648/",
            "reporter": "botnetkiller"
        }
    ],
    "3824649": [
        {
            "dateadded": "2026-04-17 19:47:16 UTC",
            "url": "http://65.87.7.5/sh4",
            "url_status": "offline",
            "last_online": "2026-04-17 19:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824649/",
            "reporter": "botnetkiller"
        }
    ],
    "3824627": [
        {
            "dateadded": "2026-04-17 19:45:08 UTC",
            "url": "https://pub-f629f9eff5c742ab9493f73c421a617a.r2.dev/Installer.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824627/",
            "reporter": "abuse_ch"
        }
    ],
    "3824626": [
        {
            "dateadded": "2026-04-17 19:42:09 UTC",
            "url": "https://short-cut4.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824626/",
            "reporter": "anonymous"
        }
    ],
    "3824625": [
        {
            "dateadded": "2026-04-17 19:38:07 UTC",
            "url": "http://ministrew.info/",
            "url_status": "offline",
            "last_online": "2026-04-21 12:00:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824625/",
            "reporter": "abuse_ch"
        }
    ],
    "3824624": [
        {
            "dateadded": "2026-04-17 19:36:17 UTC",
            "url": "http://115.61.116.164:57651/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824624/",
            "reporter": "geenensp"
        }
    ],
    "3824623": [
        {
            "dateadded": "2026-04-17 19:35:13 UTC",
            "url": "https://banglabillboard.com/assets/images/iFmkhdg.txt",
            "url_status": "offline",
            "last_online": "2026-04-19 05:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824623/",
            "reporter": "abuse_ch"
        }
    ],
    "3824622": [
        {
            "dateadded": "2026-04-17 19:35:11 UTC",
            "url": "https://walnuthillcounseling.com/wp-admin/network/wp-includes/pol/assets/css/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomStealer",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824622/",
            "reporter": "abuse_ch"
        }
    ],
    "3824621": [
        {
            "dateadded": "2026-04-17 19:34:10 UTC",
            "url": "https://long-road3.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824621/",
            "reporter": "anonymous"
        }
    ],
    "3824620": [
        {
            "dateadded": "2026-04-17 19:32:06 UTC",
            "url": "http://www.vame.be/csi/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Formbook",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824620/",
            "reporter": "abuse_ch"
        }
    ],
    "3824619": [
        {
            "dateadded": "2026-04-17 19:31:09 UTC",
            "url": "https://mailshare.it/newuismart/download?uid=@1.aWpTRmtHa1JGQ3NxTjI5MGdvakVwV1pacnRtQml1STFyQ1dneUV1L2hWOHNUZkVjeVZKL1ZiZzYxNGlBc2p6Rw==",
            "url_status": "offline",
            "last_online": "2026-04-22 13:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomGate",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824619/",
            "reporter": "abuse_ch"
        }
    ],
    "3824618": [
        {
            "dateadded": "2026-04-17 19:27:23 UTC",
            "url": "http://115.60.253.126:60563/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824618/",
            "reporter": "geenensp"
        }
    ],
    "3824617": [
        {
            "dateadded": "2026-04-17 19:26:15 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1SKZ87dlJWm7OLk5LJ85pxGqHPJmYtPJA",
            "url_status": "offline",
            "last_online": "2026-04-18 11:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824617/",
            "reporter": "abuse_ch"
        }
    ],
    "3824616": [
        {
            "dateadded": "2026-04-17 19:26:11 UTC",
            "url": "https://drive.google.com/uc?export=download&id=17YjPoBo5JPv0meXJKqqFpi8wUvuGP9jo",
            "url_status": "offline",
            "last_online": "2026-04-18 12:06:01 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824616/",
            "reporter": "abuse_ch"
        }
    ],
    "3824615": [
        {
            "dateadded": "2026-04-17 19:26:08 UTC",
            "url": "https://slow-walk2.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824615/",
            "reporter": "anonymous"
        }
    ],
    "3824614": [
        {
            "dateadded": "2026-04-17 19:20:12 UTC",
            "url": "http://144.172.95.54/wem/fmhdAkc.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 17:57:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824614/",
            "reporter": "abuse_ch"
        }
    ],
    "3824613": [
        {
            "dateadded": "2026-04-17 19:19:12 UTC",
            "url": "https://fast-track1.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824613/",
            "reporter": "anonymous"
        }
    ],
    "3824612": [
        {
            "dateadded": "2026-04-17 19:19:10 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1TbkfEq5rysNx_UDp-RONCcH_h3MboK7E",
            "url_status": "offline",
            "last_online": "2026-04-18 10:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824612/",
            "reporter": "abuse_ch"
        }
    ],
    "3824611": [
        {
            "dateadded": "2026-04-17 19:19:05 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1XftElet35rssC0Cgx-rhXeVRnzdYFbzj",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824611/",
            "reporter": "abuse_ch"
        }
    ],
    "3824610": [
        {
            "dateadded": "2026-04-17 19:12:06 UTC",
            "url": "https://purple-rain6.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824610/",
            "reporter": "anonymous"
        }
    ],
    "3824609": [
        {
            "dateadded": "2026-04-17 19:10:28 UTC",
            "url": "https://banglabillboard.com/assets/images/frostcoder.txt",
            "url_status": "offline",
            "last_online": "2026-04-19 05:35:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomGate"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824609/",
            "reporter": "abuse_ch"
        }
    ],
    "3824608": [
        {
            "dateadded": "2026-04-17 19:09:11 UTC",
            "url": "https://pastefy.app/mNnljRzR/raw",
            "url_status": "offline",
            "last_online": "2026-04-17 19:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomGate"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824608/",
            "reporter": "abuse_ch"
        }
    ],
    "3824607": [
        {
            "dateadded": "2026-04-17 19:08:08 UTC",
            "url": "https://vault88x.secure-efficient2.su/img_071936.png",
            "url_status": "offline",
            "last_online": "2026-04-21 11:27:26 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824607/",
            "reporter": "abuse_ch"
        }
    ],
    "3824606": [
        {
            "dateadded": "2026-04-17 19:06:26 UTC",
            "url": "http://42.4.116.196:40715/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824606/",
            "reporter": "geenensp"
        }
    ],
    "3824605": [
        {
            "dateadded": "2026-04-17 19:04:20 UTC",
            "url": "http://66.63.170.76/89/img_211914.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824605/",
            "reporter": "abuse_ch"
        }
    ],
    "3824604": [
        {
            "dateadded": "2026-04-17 19:04:10 UTC",
            "url": "https://white-cloud5.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 19:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824604/",
            "reporter": "anonymous"
        }
    ],
    "3824603": [
        {
            "dateadded": "2026-04-17 19:04:08 UTC",
            "url": "http://104.238.189.239/img/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-17 19:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824603/",
            "reporter": "abuse_ch"
        }
    ],
    "3824602": [
        {
            "dateadded": "2026-04-17 19:03:21 UTC",
            "url": "https://screenshot.finance/MSI_131810.png",
            "url_status": "offline",
            "last_online": "2026-04-19 19:46:44 UTC",
            "threat": "malware_download",
            "tags": [
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824602/",
            "reporter": "abuse_ch"
        }
    ],
    "3824601": [
        {
            "dateadded": "2026-04-17 19:02:09 UTC",
            "url": "https://pub-78a0a6b6bcb04ed486fae205ee734af2.r2.dev/quxera.png",
            "url_status": "offline",
            "last_online": "2026-04-17 19:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824601/",
            "reporter": "abuse_ch"
        }
    ],
    "3824600": [
        {
            "dateadded": "2026-04-17 19:01:15 UTC",
            "url": "https://pub-9c47b1bd45604a82bb27d7c7000ef589.r2.dev/preeuy.msi",
            "url_status": "offline",
            "last_online": "2026-04-17 19:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824600/",
            "reporter": "abuse_ch"
        }
    ],
    "3824599": [
        {
            "dateadded": "2026-04-17 19:00:20 UTC",
            "url": "http://42.5.8.35:38376/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:10:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824599/",
            "reporter": "geenensp"
        }
    ],
    "3824598": [
        {
            "dateadded": "2026-04-17 18:56:08 UTC",
            "url": "https://yellow-sun4.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824598/",
            "reporter": "anonymous"
        }
    ],
    "3824597": [
        {
            "dateadded": "2026-04-17 18:53:08 UTC",
            "url": "http://172.245.95.30/12/img_175349.png",
            "url_status": "offline",
            "last_online": "2026-04-19 22:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824597/",
            "reporter": "abuse_ch"
        }
    ],
    "3824596": [
        {
            "dateadded": "2026-04-17 18:53:07 UTC",
            "url": "http://172.245.95.30/12/metrokingsformebetter.hta",
            "url_status": "offline",
            "last_online": "2026-04-19 23:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824596/",
            "reporter": "abuse_ch"
        }
    ],
    "3824595": [
        {
            "dateadded": "2026-04-17 18:52:11 UTC",
            "url": "https://genghis.yzz.me/MSI_095825.png",
            "url_status": "offline",
            "last_online": "2026-04-17 18:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824595/",
            "reporter": "abuse_ch"
        }
    ],
    "3824594": [
        {
            "dateadded": "2026-04-17 18:51:13 UTC",
            "url": "https://sfunited.club/rrliha.vmp.msi",
            "url_status": "offline",
            "last_online": "2026-04-18 11:27:38 UTC",
            "threat": "malware_download",
            "tags": [
                "LodaRAT",
                "msi",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824594/",
            "reporter": "abuse_ch"
        }
    ],
    "3824589": [
        {
            "dateadded": "2026-04-17 18:48:19 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:48:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824589/",
            "reporter": "abuse_ch"
        }
    ],
    "3824590": [
        {
            "dateadded": "2026-04-17 18:48:19 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:01:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824590/",
            "reporter": "abuse_ch"
        }
    ],
    "3824591": [
        {
            "dateadded": "2026-04-17 18:48:19 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnarmv7lxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 10:54:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824591/",
            "reporter": "abuse_ch"
        }
    ],
    "3824592": [
        {
            "dateadded": "2026-04-17 18:48:19 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:58:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824592/",
            "reporter": "abuse_ch"
        }
    ],
    "3824593": [
        {
            "dateadded": "2026-04-17 18:48:19 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:03:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824593/",
            "reporter": "abuse_ch"
        }
    ],
    "3824580": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824580/",
            "reporter": "abuse_ch"
        }
    ],
    "3824581": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824581/",
            "reporter": "abuse_ch"
        }
    ],
    "3824582": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824582/",
            "reporter": "abuse_ch"
        }
    ],
    "3824583": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 12:00:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824583/",
            "reporter": "abuse_ch"
        }
    ],
    "3824584": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 10:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824584/",
            "reporter": "abuse_ch"
        }
    ],
    "3824585": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824585/",
            "reporter": "abuse_ch"
        }
    ],
    "3824586": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824586/",
            "reporter": "abuse_ch"
        }
    ],
    "3824587": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 11:57:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824587/",
            "reporter": "abuse_ch"
        }
    ],
    "3824588": [
        {
            "dateadded": "2026-04-17 18:48:17 UTC",
            "url": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-19 10:51:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824588/",
            "reporter": "abuse_ch"
        }
    ],
    "3824579": [
        {
            "dateadded": "2026-04-17 18:48:10 UTC",
            "url": "https://green-leaf3.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824579/",
            "reporter": "anonymous"
        }
    ],
    "3824578": [
        {
            "dateadded": "2026-04-17 18:46:13 UTC",
            "url": "https://banglabillboard.com/assets/images/knSkgpc.txt",
            "url_status": "offline",
            "last_online": "2026-04-19 05:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824578/",
            "reporter": "abuse_ch"
        }
    ],
    "3824577": [
        {
            "dateadded": "2026-04-17 18:46:07 UTC",
            "url": "https://officials.ink/image.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:58 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824577/",
            "reporter": "abuse_ch"
        }
    ],
    "3824576": [
        {
            "dateadded": "2026-04-17 18:42:12 UTC",
            "url": "https://vault88x.secure-efficient2.su/MSI_133213.png",
            "url_status": "offline",
            "last_online": "2026-04-21 10:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824576/",
            "reporter": "abuse_ch"
        }
    ],
    "3824575": [
        {
            "dateadded": "2026-04-17 18:42:08 UTC",
            "url": "https://vault88x.secure-efficient2.su/img_151624.png",
            "url_status": "offline",
            "last_online": "2026-04-21 15:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824575/",
            "reporter": "abuse_ch"
        }
    ],
    "3824574": [
        {
            "dateadded": "2026-04-17 18:41:18 UTC",
            "url": "http://42.4.116.196:40715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:41:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824574/",
            "reporter": "geenensp"
        }
    ],
    "3824573": [
        {
            "dateadded": "2026-04-17 18:41:07 UTC",
            "url": "https://krikadoo.com/wordpress/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomStealer",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824573/",
            "reporter": "abuse_ch"
        }
    ],
    "3824572": [
        {
            "dateadded": "2026-04-17 18:41:06 UTC",
            "url": "https://red-rose2.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:41:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824572/",
            "reporter": "anonymous"
        }
    ],
    "3824571": [
        {
            "dateadded": "2026-04-17 18:37:18 UTC",
            "url": "http://42.229.221.130:41284/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824571/",
            "reporter": "geenensp"
        }
    ],
    "3824570": [
        {
            "dateadded": "2026-04-17 18:37:10 UTC",
            "url": "http://overly.dinergysolutions.org/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta",
                "ua-mshta",
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824570/",
            "reporter": "abuse_ch"
        }
    ],
    "3824569": [
        {
            "dateadded": "2026-04-17 18:36:17 UTC",
            "url": "http://182.120.142.223:35382/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824569/",
            "reporter": "geenensp"
        }
    ],
    "3824568": [
        {
            "dateadded": "2026-04-17 18:33:12 UTC",
            "url": "https://blue-sky1.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824568/",
            "reporter": "anonymous"
        }
    ],
    "3824567": [
        {
            "dateadded": "2026-04-17 18:26:08 UTC",
            "url": "https://job-offer6.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824567/",
            "reporter": "anonymous"
        }
    ],
    "3824566": [
        {
            "dateadded": "2026-04-17 18:18:08 UTC",
            "url": "https://lunch-break5.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824566/",
            "reporter": "anonymous"
        }
    ],
    "3824565": [
        {
            "dateadded": "2026-04-17 18:15:17 UTC",
            "url": "http://42.229.221.130:41284/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:33:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824565/",
            "reporter": "geenensp"
        }
    ],
    "3824564": [
        {
            "dateadded": "2026-04-17 18:11:08 UTC",
            "url": "https://office-desk4.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824564/",
            "reporter": "anonymous"
        }
    ],
    "3824563": [
        {
            "dateadded": "2026-04-17 18:02:20 UTC",
            "url": "http://113.58.210.243:48989/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:24:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824563/",
            "reporter": "geenensp"
        }
    ],
    "3824562": [
        {
            "dateadded": "2026-04-17 18:02:12 UTC",
            "url": "https://staff-room3.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 18:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824562/",
            "reporter": "anonymous"
        }
    ],
    "3824561": [
        {
            "dateadded": "2026-04-17 17:59:15 UTC",
            "url": "https://work-group2.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824561/",
            "reporter": "anonymous"
        }
    ],
    "3824560": [
        {
            "dateadded": "2026-04-17 17:58:10 UTC",
            "url": "http://182.119.198.222:51903/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824560/",
            "reporter": "geenensp"
        }
    ],
    "3824559": [
        {
            "dateadded": "2026-04-17 17:49:20 UTC",
            "url": "http://42.224.126.218:36416/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:59:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824559/",
            "reporter": "geenensp"
        }
    ],
    "3824558": [
        {
            "dateadded": "2026-04-17 17:47:10 UTC",
            "url": "https://team-spirit1.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824558/",
            "reporter": "anonymous"
        }
    ],
    "3824557": [
        {
            "dateadded": "2026-04-17 17:46:21 UTC",
            "url": "http://42.234.221.95:43671/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:46:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824557/",
            "reporter": "geenensp"
        }
    ],
    "3824556": [
        {
            "dateadded": "2026-04-17 17:40:08 UTC",
            "url": "https://world-tour6.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824556/",
            "reporter": "anonymous"
        }
    ],
    "3824555": [
        {
            "dateadded": "2026-04-17 17:36:26 UTC",
            "url": "http://182.120.142.223:35382/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824555/",
            "reporter": "geenensp"
        }
    ],
    "3824554": [
        {
            "dateadded": "2026-04-17 17:36:18 UTC",
            "url": "http://113.58.210.243:48989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:15:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824554/",
            "reporter": "geenensp"
        }
    ],
    "3824553": [
        {
            "dateadded": "2026-04-17 17:36:11 UTC",
            "url": "https://travel-bag5.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824553/",
            "reporter": "anonymous"
        }
    ],
    "3824552": [
        {
            "dateadded": "2026-04-17 17:25:19 UTC",
            "url": "http://42.224.126.218:36416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824552/",
            "reporter": "geenensp"
        }
    ],
    "3824551": [
        {
            "dateadded": "2026-04-17 17:25:13 UTC",
            "url": "https://ski-resort4.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824551/",
            "reporter": "anonymous"
        }
    ],
    "3824550": [
        {
            "dateadded": "2026-04-17 17:17:23 UTC",
            "url": "https://beach-party3.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824550/",
            "reporter": "anonymous"
        }
    ],
    "3824549": [
        {
            "dateadded": "2026-04-17 17:17:22 UTC",
            "url": "http://175.165.238.15:46035/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:42:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824549/",
            "reporter": "geenensp"
        }
    ],
    "3824548": [
        {
            "dateadded": "2026-04-17 17:15:13 UTC",
            "url": "http://200.115.102.14:33789/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:47:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824548/",
            "reporter": "geenensp"
        }
    ],
    "3824547": [
        {
            "dateadded": "2026-04-17 17:09:16 UTC",
            "url": "https://winter-stay2.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824547/",
            "reporter": "anonymous"
        }
    ],
    "3824546": [
        {
            "dateadded": "2026-04-17 17:08:05 UTC",
            "url": "http://85.239.147.6/files/8717422379/HLSs5Qb.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824546/",
            "reporter": "c2hunter"
        }
    ],
    "3824545": [
        {
            "dateadded": "2026-04-17 17:01:09 UTC",
            "url": "https://summer-trip1.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824545/",
            "reporter": "anonymous"
        }
    ],
    "3824544": [
        {
            "dateadded": "2026-04-17 17:00:23 UTC",
            "url": "http://118.174.171.155:41130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:06:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824544/",
            "reporter": "geenensp"
        }
    ],
    "3824543": [
        {
            "dateadded": "2026-04-17 16:54:15 UTC",
            "url": "https://file-save6.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 16:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824543/",
            "reporter": "anonymous"
        }
    ],
    "3824542": [
        {
            "dateadded": "2026-04-17 16:45:24 UTC",
            "url": "http://175.165.238.15:46035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824542/",
            "reporter": "geenensp"
        }
    ],
    "3824541": [
        {
            "dateadded": "2026-04-17 16:45:23 UTC",
            "url": "http://200.115.102.14:33789/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:44:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824541/",
            "reporter": "geenensp"
        }
    ],
    "3824540": [
        {
            "dateadded": "2026-04-17 16:45:15 UTC",
            "url": "https://send-mail5.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 16:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824540/",
            "reporter": "anonymous"
        }
    ],
    "3824539": [
        {
            "dateadded": "2026-04-17 16:40:21 UTC",
            "url": "http://42.239.189.145:35513/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824539/",
            "reporter": "geenensp"
        }
    ],
    "3824538": [
        {
            "dateadded": "2026-04-17 16:39:15 UTC",
            "url": "https://call-back4.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 16:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824538/",
            "reporter": "anonymous"
        }
    ],
    "3824537": [
        {
            "dateadded": "2026-04-17 16:35:18 UTC",
            "url": "https://meet-time3.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 16:35:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824537/",
            "reporter": "anonymous"
        }
    ],
    "3824536": [
        {
            "dateadded": "2026-04-17 16:27:27 UTC",
            "url": "http://42.239.189.145:35513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:20:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824536/",
            "reporter": "geenensp"
        }
    ],
    "3824535": [
        {
            "dateadded": "2026-04-17 16:25:19 UTC",
            "url": "https://work-task2.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 16:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824535/",
            "reporter": "anonymous"
        }
    ],
    "3824534": [
        {
            "dateadded": "2026-04-17 16:22:13 UTC",
            "url": "https://daily-plan1.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 16:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824534/",
            "reporter": "anonymous"
        }
    ],
    "3824533": [
        {
            "dateadded": "2026-04-17 15:52:19 UTC",
            "url": "http://94.233.4.0:15391/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824533/",
            "reporter": "geenensp"
        }
    ],
    "3824532": [
        {
            "dateadded": "2026-04-17 15:50:21 UTC",
            "url": "http://182.126.127.186:54786/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 15:50:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824532/",
            "reporter": "geenensp"
        }
    ],
    "3824531": [
        {
            "dateadded": "2026-04-17 15:48:18 UTC",
            "url": "http://182.112.237.166:44860/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824531/",
            "reporter": "geenensp"
        }
    ],
    "3824530": [
        {
            "dateadded": "2026-04-17 15:46:16 UTC",
            "url": "http://27.215.239.240:48753/i",
            "url_status": "offline",
            "last_online": "2026-04-22 04:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824530/",
            "reporter": "geenensp"
        }
    ],
    "3824529": [
        {
            "dateadded": "2026-04-17 15:45:10 UTC",
            "url": "https://power-cable6.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 15:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824529/",
            "reporter": "anonymous"
        }
    ],
    "3824528": [
        {
            "dateadded": "2026-04-17 15:36:09 UTC",
            "url": "https://video-screen5.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 15:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824528/",
            "reporter": "anonymous"
        }
    ],
    "3824527": [
        {
            "dateadded": "2026-04-17 15:35:12 UTC",
            "url": "http://39.65.159.56:52425/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824527/",
            "reporter": "geenensp"
        }
    ],
    "3824526": [
        {
            "dateadded": "2026-04-17 15:31:10 UTC",
            "url": "http://27.215.239.240:48753/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 06:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824526/",
            "reporter": "geenensp"
        }
    ],
    "3824525": [
        {
            "dateadded": "2026-04-17 15:29:09 UTC",
            "url": "https://music-radio4.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 15:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824525/",
            "reporter": "anonymous"
        }
    ],
    "3824524": [
        {
            "dateadded": "2026-04-17 15:27:13 UTC",
            "url": "http://60.23.75.111:55169/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 12:48:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824524/",
            "reporter": "geenensp"
        }
    ],
    "3824518": [
        {
            "dateadded": "2026-04-17 15:26:20 UTC",
            "url": "http://176.65.148.173/mips",
            "url_status": "offline",
            "last_online": "2026-04-19 12:29:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824518/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824519": [
        {
            "dateadded": "2026-04-17 15:26:20 UTC",
            "url": "http://176.65.148.173/arm6",
            "url_status": "offline",
            "last_online": "2026-04-19 11:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824519/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824520": [
        {
            "dateadded": "2026-04-17 15:26:20 UTC",
            "url": "http://176.65.148.173/spc",
            "url_status": "offline",
            "last_online": "2026-04-19 11:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824520/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824521": [
        {
            "dateadded": "2026-04-17 15:26:20 UTC",
            "url": "http://176.65.148.173/m68k",
            "url_status": "offline",
            "last_online": "2026-04-19 12:25:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824521/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824522": [
        {
            "dateadded": "2026-04-17 15:26:20 UTC",
            "url": "http://176.65.148.173/ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 21:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824522/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824523": [
        {
            "dateadded": "2026-04-17 15:26:20 UTC",
            "url": "http://176.65.148.173/arc",
            "url_status": "offline",
            "last_online": "2026-04-19 12:03:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824523/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824517": [
        {
            "dateadded": "2026-04-17 15:26:15 UTC",
            "url": "http://176.65.148.173/arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 12:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824517/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824513": [
        {
            "dateadded": "2026-04-17 15:26:14 UTC",
            "url": "http://176.65.148.173/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 12:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824513/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824514": [
        {
            "dateadded": "2026-04-17 15:26:14 UTC",
            "url": "http://176.65.148.173/x86",
            "url_status": "offline",
            "last_online": "2026-04-19 11:56:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824514/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824515": [
        {
            "dateadded": "2026-04-17 15:26:14 UTC",
            "url": "http://176.65.148.173/sh4",
            "url_status": "offline",
            "last_online": "2026-04-19 12:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824515/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824516": [
        {
            "dateadded": "2026-04-17 15:26:14 UTC",
            "url": "http://39.79.144.166:43917/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824516/",
            "reporter": "geenensp"
        }
    ],
    "3824512": [
        {
            "dateadded": "2026-04-17 15:25:12 UTC",
            "url": "http://176.65.148.173/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 11:56:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824512/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824511": [
        {
            "dateadded": "2026-04-17 15:25:10 UTC",
            "url": "http://176.65.148.173/arm",
            "url_status": "offline",
            "last_online": "2026-04-19 11:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824511/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824510": [
        {
            "dateadded": "2026-04-17 15:24:22 UTC",
            "url": "http://222.138.227.182:42377/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824510/",
            "reporter": "geenensp"
        }
    ],
    "3824509": [
        {
            "dateadded": "2026-04-17 15:23:25 UTC",
            "url": "http://182.112.237.166:44860/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:26:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824509/",
            "reporter": "geenensp"
        }
    ],
    "3824508": [
        {
            "dateadded": "2026-04-17 15:21:10 UTC",
            "url": "https://photo-camera3.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 15:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824508/",
            "reporter": "anonymous"
        }
    ],
    "3824507": [
        {
            "dateadded": "2026-04-17 15:17:17 UTC",
            "url": "http://39.65.159.56:52425/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824507/",
            "reporter": "geenensp"
        }
    ],
    "3824506": [
        {
            "dateadded": "2026-04-17 15:17:16 UTC",
            "url": "http://201.149.107.54:41481/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:00:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824506/",
            "reporter": "geenensp"
        }
    ],
    "3824505": [
        {
            "dateadded": "2026-04-17 15:16:18 UTC",
            "url": "http://201.149.107.54:41481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824505/",
            "reporter": "geenensp"
        }
    ],
    "3824504": [
        {
            "dateadded": "2026-04-17 15:14:09 UTC",
            "url": "https://glass-lens2.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 15:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824504/",
            "reporter": "anonymous"
        }
    ],
    "3824503": [
        {
            "dateadded": "2026-04-17 15:09:10 UTC",
            "url": "https://everycarebd.com/imagepoiuy0.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824503/",
            "reporter": "abuse_ch"
        }
    ],
    "3824502": [
        {
            "dateadded": "2026-04-17 15:09:09 UTC",
            "url": "https://smart-watch1.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 15:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824502/",
            "reporter": "anonymous"
        }
    ],
    "3824501": [
        {
            "dateadded": "2026-04-17 15:08:23 UTC",
            "url": "https://everycarebd.com/imageiuyre99.png",
            "url_status": "offline",
            "last_online": "2026-04-26 19:03:00 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824501/",
            "reporter": "abuse_ch"
        }
    ],
    "3824500": [
        {
            "dateadded": "2026-04-17 15:00:11 UTC",
            "url": "https://everycarebd.com/imageven098.png",
            "url_status": "offline",
            "last_online": "2026-04-27 00:43:25 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824500/",
            "reporter": "abuse_ch"
        }
    ],
    "3824499": [
        {
            "dateadded": "2026-04-17 15:00:09 UTC",
            "url": "http://176.65.148.203/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:46:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824499/",
            "reporter": "geenensp"
        }
    ],
    "3824498": [
        {
            "dateadded": "2026-04-17 14:59:10 UTC",
            "url": "https://everycarebd.com/imagesddff00.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824498/",
            "reporter": "abuse_ch"
        }
    ],
    "3824497": [
        {
            "dateadded": "2026-04-17 14:59:07 UTC",
            "url": "https://everycarebd.com/imagehola21.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:58 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824497/",
            "reporter": "abuse_ch"
        }
    ],
    "3824496": [
        {
            "dateadded": "2026-04-17 14:58:20 UTC",
            "url": "https://everycarebd.com/imageYYYY1.png",
            "url_status": "offline",
            "last_online": "2026-04-26 23:58:52 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824496/",
            "reporter": "abuse_ch"
        }
    ],
    "3824495": [
        {
            "dateadded": "2026-04-17 14:58:13 UTC",
            "url": "https://everycarebd.com/imagelokoko222.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824495/",
            "reporter": "abuse_ch"
        }
    ],
    "3824494": [
        {
            "dateadded": "2026-04-17 14:57:20 UTC",
            "url": "https://everycarebd.com/imagefresk090.png",
            "url_status": "offline",
            "last_online": "2026-04-27 06:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824494/",
            "reporter": "abuse_ch"
        }
    ],
    "3824493": [
        {
            "dateadded": "2026-04-17 14:57:08 UTC",
            "url": "http://222.142.241.193:48944/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824493/",
            "reporter": "geenensp"
        }
    ],
    "3824492": [
        {
            "dateadded": "2026-04-17 14:55:27 UTC",
            "url": "https://everycarebd.com/image77490p.png",
            "url_status": "offline",
            "last_online": "2026-04-27 05:24:46 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824492/",
            "reporter": "abuse_ch"
        }
    ],
    "3824491": [
        {
            "dateadded": "2026-04-17 14:55:07 UTC",
            "url": "http://85.239.147.6/files/8356237953/JDgf7L9.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824491/",
            "reporter": "c2hunter"
        }
    ],
    "3824490": [
        {
            "dateadded": "2026-04-17 14:54:23 UTC",
            "url": "https://everycarebd.com/imagecdg09.png",
            "url_status": "offline",
            "last_online": "2026-04-27 10:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824490/",
            "reporter": "abuse_ch"
        }
    ],
    "3824489": [
        {
            "dateadded": "2026-04-17 14:53:22 UTC",
            "url": "https://everycarebd.com/image09iug0.png",
            "url_status": "offline",
            "last_online": "2026-04-27 06:00:56 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824489/",
            "reporter": "abuse_ch"
        }
    ],
    "3824488": [
        {
            "dateadded": "2026-04-17 14:43:22 UTC",
            "url": "http://110.39.233.38:40766/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 07:26:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824488/",
            "reporter": "geenensp"
        }
    ],
    "3824487": [
        {
            "dateadded": "2026-04-17 14:31:13 UTC",
            "url": "https://www.mediafire.com/file_premium/2a9ugis6zfmrh4g/0BRK22Z336890ESNQO_Arb748491G1F8Vougrn.iso/file",
            "url_status": "offline",
            "last_online": "2026-04-18 11:50:24 UTC",
            "threat": "malware_download",
            "tags": [
                "iso"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824487/",
            "reporter": "abuse_ch"
        }
    ],
    "3824486": [
        {
            "dateadded": "2026-04-17 14:24:25 UTC",
            "url": "https://merchant-gateway.live/update.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824486/",
            "reporter": "abus3reports"
        }
    ],
    "3824485": [
        {
            "dateadded": "2026-04-17 14:22:20 UTC",
            "url": "http://222.142.243.51:34729/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824485/",
            "reporter": "geenensp"
        }
    ],
    "3824483": [
        {
            "dateadded": "2026-04-17 14:20:19 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_MSBuild.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 17:58:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824483/",
            "reporter": "abuse_ch"
        }
    ],
    "3824484": [
        {
            "dateadded": "2026-04-17 14:20:19 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_jsc.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 11:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824484/",
            "reporter": "abuse_ch"
        }
    ],
    "3824481": [
        {
            "dateadded": "2026-04-17 14:20:18 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/31agosto.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 10:39:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomGate",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824481/",
            "reporter": "abuse_ch"
        }
    ],
    "3824482": [
        {
            "dateadded": "2026-04-17 14:20:18 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_aspnet_compiler.txt",
            "url_status": "offline",
            "last_online": "2026-04-20 06:50:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824482/",
            "reporter": "abuse_ch"
        }
    ],
    "3824480": [
        {
            "dateadded": "2026-04-17 14:20:15 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/class.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 11:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824480/",
            "reporter": "abuse_ch"
        }
    ],
    "3824478": [
        {
            "dateadded": "2026-04-17 14:20:14 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_InstallUtil.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 11:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824478/",
            "reporter": "abuse_ch"
        }
    ],
    "3824479": [
        {
            "dateadded": "2026-04-17 14:20:14 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_RegSvcs.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 10:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824479/",
            "reporter": "abuse_ch"
        }
    ],
    "3824477": [
        {
            "dateadded": "2026-04-17 14:20:12 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_RegAsm.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 16:27:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824477/",
            "reporter": "abuse_ch"
        }
    ],
    "3824476": [
        {
            "dateadded": "2026-04-17 14:20:11 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_AppLaunch.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 11:05:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824476/",
            "reporter": "abuse_ch"
        }
    ],
    "3824475": [
        {
            "dateadded": "2026-04-17 14:20:10 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_cvtres.txt",
            "url_status": "offline",
            "last_online": "2026-04-20 07:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824475/",
            "reporter": "abuse_ch"
        }
    ],
    "3824474": [
        {
            "dateadded": "2026-04-17 14:19:17 UTC",
            "url": "http://42.226.67.48:43722/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:53:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824474/",
            "reporter": "geenensp"
        }
    ],
    "3824472": [
        {
            "dateadded": "2026-04-17 14:19:10 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/tumfuf.txt?ref_type=heads",
            "url_status": "offline",
            "last_online": "2026-04-18 17:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824472/",
            "reporter": "abuse_ch"
        }
    ],
    "3824473": [
        {
            "dateadded": "2026-04-17 14:19:10 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/31ago.txt",
            "url_status": "offline",
            "last_online": "2026-04-20 07:35:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomGate",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824473/",
            "reporter": "abuse_ch"
        }
    ],
    "3824471": [
        {
            "dateadded": "2026-04-17 14:18:11 UTC",
            "url": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_AddInProcess32.txt",
            "url_status": "offline",
            "last_online": "2026-04-18 10:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824471/",
            "reporter": "abuse_ch"
        }
    ],
    "3824470": [
        {
            "dateadded": "2026-04-17 14:17:19 UTC",
            "url": "http://valfanto.com/rumpshitnew.png",
            "url_status": "offline",
            "last_online": "2026-04-19 17:18:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824470/",
            "reporter": "abuse_ch"
        }
    ],
    "3824469": [
        {
            "dateadded": "2026-04-17 14:17:10 UTC",
            "url": "https://vxugfeari7.ufs.sh/f/I7IEyUJ1BHQRUeruOIYwg1RASFWI5zfwOZtLkXBx0Ehuq42v",
            "url_status": "offline",
            "last_online": "2026-04-17 14:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824469/",
            "reporter": "abuse_ch"
        }
    ],
    "3824468": [
        {
            "dateadded": "2026-04-17 14:17:06 UTC",
            "url": "http://valfanto.com/xyupaid.png",
            "url_status": "offline",
            "last_online": "2026-04-19 21:06:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824468/",
            "reporter": "abuse_ch"
        }
    ],
    "3824467": [
        {
            "dateadded": "2026-04-17 14:16:12 UTC",
            "url": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fdll%20newaaaaaaaaa.txt?alt=media&token=92418096-85c5-4090-a574-5c807c304562",
            "url_status": "offline",
            "last_online": "2026-04-20 10:57:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824467/",
            "reporter": "abuse_ch"
        }
    ],
    "3824466": [
        {
            "dateadded": "2026-04-17 14:16:08 UTC",
            "url": "https://pastebin.com/raw/DXknkBUr",
            "url_status": "offline",
            "last_online": "2026-04-17 14:16:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824466/",
            "reporter": "abuse_ch"
        }
    ],
    "3824465": [
        {
            "dateadded": "2026-04-17 14:15:08 UTC",
            "url": "http://172.245.95.24/rumpnew.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824465/",
            "reporter": "abuse_ch"
        }
    ],
    "3824464": [
        {
            "dateadded": "2026-04-17 14:13:10 UTC",
            "url": "https://corwineagles.com/masse.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824464/",
            "reporter": "abuse_ch"
        }
    ],
    "3824463": [
        {
            "dateadded": "2026-04-17 14:12:07 UTC",
            "url": "https://ocean-wave6.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 14:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824463/",
            "reporter": "anonymous"
        }
    ],
    "3824462": [
        {
            "dateadded": "2026-04-17 14:11:10 UTC",
            "url": "http://66.63.170.76/89/givemebestthingswithbetterwithgreat.hta",
            "url_status": "offline",
            "last_online": "2026-04-17 14:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824462/",
            "reporter": "abuse_ch"
        }
    ],
    "3824461": [
        {
            "dateadded": "2026-04-17 14:09:10 UTC",
            "url": "https://desert-sand5.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 14:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824461/",
            "reporter": "anonymous"
        }
    ],
    "3824460": [
        {
            "dateadded": "2026-04-17 14:06:18 UTC",
            "url": "http://222.142.243.51:34729/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:47:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824460/",
            "reporter": "geenensp"
        }
    ],
    "3824459": [
        {
            "dateadded": "2026-04-17 14:04:21 UTC",
            "url": "http://111.220.135.39:49209/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:22:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824459/",
            "reporter": "geenensp"
        }
    ],
    "3824458": [
        {
            "dateadded": "2026-04-17 14:04:07 UTC",
            "url": "http://158.94.211.95:7777/158.94.211.95/leoo/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824458/",
            "reporter": "abuse_ch"
        }
    ],
    "3824457": [
        {
            "dateadded": "2026-04-17 14:03:16 UTC",
            "url": "http://42.226.67.48:43722/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:26:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824457/",
            "reporter": "geenensp"
        }
    ],
    "3824456": [
        {
            "dateadded": "2026-04-17 13:57:09 UTC",
            "url": "https://lake-view4.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824456/",
            "reporter": "anonymous"
        }
    ],
    "3824455": [
        {
            "dateadded": "2026-04-17 13:55:15 UTC",
            "url": "http://115.58.90.210:52857/i",
            "url_status": "offline",
            "last_online": "2026-04-18 23:19:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824455/",
            "reporter": "geenensp"
        }
    ],
    "3824454": [
        {
            "dateadded": "2026-04-17 13:54:17 UTC",
            "url": "http://182.116.33.91:57739/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824454/",
            "reporter": "geenensp"
        }
    ],
    "3824453": [
        {
            "dateadded": "2026-04-17 13:53:10 UTC",
            "url": "http://111.220.135.39:49209/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:58:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824453/",
            "reporter": "geenensp"
        }
    ],
    "3824452": [
        {
            "dateadded": "2026-04-17 13:52:23 UTC",
            "url": "http://105.225.135.20:60119/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:47:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824452/",
            "reporter": "geenensp"
        }
    ],
    "3824451": [
        {
            "dateadded": "2026-04-17 13:49:18 UTC",
            "url": "http://125.45.10.193:43192/i",
            "url_status": "offline",
            "last_online": "2026-04-19 03:20:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824451/",
            "reporter": "geenensp"
        }
    ],
    "3824450": [
        {
            "dateadded": "2026-04-17 13:49:09 UTC",
            "url": "https://river-bank3.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824450/",
            "reporter": "anonymous"
        }
    ],
    "3824449": [
        {
            "dateadded": "2026-04-17 13:46:09 UTC",
            "url": "http://112.113.204.187:40649/i",
            "url_status": "offline",
            "last_online": "2026-04-20 18:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824449/",
            "reporter": "geenensp"
        }
    ],
    "3824448": [
        {
            "dateadded": "2026-04-17 13:41:13 UTC",
            "url": "https://mountain-top2.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824448/",
            "reporter": "anonymous"
        }
    ],
    "3824447": [
        {
            "dateadded": "2026-04-17 13:39:06 UTC",
            "url": "http://overly.dinergysolutions.org",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta",
                "ua-mshta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824447/",
            "reporter": "abuse_ch"
        }
    ],
    "3824445": [
        {
            "dateadded": "2026-04-17 13:38:07 UTC",
            "url": "https://bandgarms.com/NDZMNEMHUSRREHRJFWSB",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824445/",
            "reporter": "abuse_ch"
        }
    ],
    "3824446": [
        {
            "dateadded": "2026-04-17 13:38:07 UTC",
            "url": "https://bandgarms.com/DGSOAFYJKXROATIQSWNZ",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824446/",
            "reporter": "abuse_ch"
        }
    ],
    "3824444": [
        {
            "dateadded": "2026-04-17 13:35:16 UTC",
            "url": "https://forest-walk1.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824444/",
            "reporter": "anonymous"
        }
    ],
    "3824443": [
        {
            "dateadded": "2026-04-17 13:32:15 UTC",
            "url": "http://59.94.76.71:55889/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824443/",
            "reporter": "geenensp"
        }
    ],
    "3824442": [
        {
            "dateadded": "2026-04-17 13:32:10 UTC",
            "url": "https://cold-water6.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824442/",
            "reporter": "anonymous"
        }
    ],
    "3824441": [
        {
            "dateadded": "2026-04-17 13:31:19 UTC",
            "url": "http://115.58.90.210:52857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824441/",
            "reporter": "geenensp"
        }
    ],
    "3824440": [
        {
            "dateadded": "2026-04-17 13:23:14 UTC",
            "url": "https://gitlab.com/amvefrray/triageisusck/-/raw/main/L7XH7UR9695U.exe",
            "url_status": "offline",
            "last_online": "2026-04-18 10:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824440/",
            "reporter": "abuse_ch"
        }
    ],
    "3824439": [
        {
            "dateadded": "2026-04-17 13:19:14 UTC",
            "url": "https://hot-coffee5.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824439/",
            "reporter": "anonymous"
        }
    ],
    "3824438": [
        {
            "dateadded": "2026-04-17 13:16:25 UTC",
            "url": "https://everycarebd.com/image222.png",
            "url_status": "offline",
            "last_online": "2026-04-26 23:45:28 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824438/",
            "reporter": "abuse_ch"
        }
    ],
    "3824437": [
        {
            "dateadded": "2026-04-17 13:11:09 UTC",
            "url": "http://125.45.10.193:43192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:51:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824437/",
            "reporter": "geenensp"
        }
    ],
    "3824436": [
        {
            "dateadded": "2026-04-17 13:10:19 UTC",
            "url": "http://202.1.26.13:37310/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:28:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824436/",
            "reporter": "geenensp"
        }
    ],
    "3824435": [
        {
            "dateadded": "2026-04-17 13:10:13 UTC",
            "url": "https://baked-pizza4.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824435/",
            "reporter": "anonymous"
        }
    ],
    "3824434": [
        {
            "dateadded": "2026-04-17 13:07:22 UTC",
            "url": "http://112.113.204.187:40649/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824434/",
            "reporter": "geenensp"
        }
    ],
    "3824433": [
        {
            "dateadded": "2026-04-17 13:06:05 UTC",
            "url": "http://91.92.241.242/ycl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2",
                "d",
                "dropped-by-GCleaner"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824433/",
            "reporter": "Bitsight"
        }
    ],
    "3824432": [
        {
            "dateadded": "2026-04-17 13:05:09 UTC",
            "url": "http://59.94.76.71:55889/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824432/",
            "reporter": "geenensp"
        }
    ],
    "3824430": [
        {
            "dateadded": "2026-04-17 13:04:05 UTC",
            "url": "http://91.92.241.242/service",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "B",
                "c2",
                "dropped-by-GCleaner"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824430/",
            "reporter": "Bitsight"
        }
    ],
    "3824431": [
        {
            "dateadded": "2026-04-17 13:04:05 UTC",
            "url": "http://91.92.241.242/update",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "1",
                "c2",
                "dropped-by-GCleaner"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824431/",
            "reporter": "Bitsight"
        }
    ],
    "3824429": [
        {
            "dateadded": "2026-04-17 13:03:08 UTC",
            "url": "https://green-salad3.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 13:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824429/",
            "reporter": "anonymous"
        }
    ],
    "3824428": [
        {
            "dateadded": "2026-04-17 13:00:17 UTC",
            "url": "http://42.224.25.4:43914/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824428/",
            "reporter": "geenensp"
        }
    ],
    "3824427": [
        {
            "dateadded": "2026-04-17 12:56:06 UTC",
            "url": "https://sweet-potato2.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:56:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824427/",
            "reporter": "anonymous"
        }
    ],
    "3824426": [
        {
            "dateadded": "2026-04-17 12:48:11 UTC",
            "url": "https://fresh-tomato1.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824426/",
            "reporter": "anonymous"
        }
    ],
    "3824425": [
        {
            "dateadded": "2026-04-17 12:40:08 UTC",
            "url": "https://done-task6.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824425/",
            "reporter": "anonymous"
        }
    ],
    "3824424": [
        {
            "dateadded": "2026-04-17 12:39:06 UTC",
            "url": "http://85.239.147.6/files/8028208931/cT38Lcc.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824424/",
            "reporter": "Bitsight"
        }
    ],
    "3824423": [
        {
            "dateadded": "2026-04-17 12:38:06 UTC",
            "url": "http://85.239.147.6/files/8757285646/4hzDW0t.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824423/",
            "reporter": "c2hunter"
        }
    ],
    "3824422": [
        {
            "dateadded": "2026-04-17 12:35:18 UTC",
            "url": "http://42.224.25.4:43914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:03:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824422/",
            "reporter": "geenensp"
        }
    ],
    "3824421": [
        {
            "dateadded": "2026-04-17 12:35:11 UTC",
            "url": "https://long-way5.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824421/",
            "reporter": "anonymous"
        }
    ],
    "3824420": [
        {
            "dateadded": "2026-04-17 12:32:20 UTC",
            "url": "http://60.18.49.22:45515/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824420/",
            "reporter": "geenensp"
        }
    ],
    "3824419": [
        {
            "dateadded": "2026-04-17 12:31:17 UTC",
            "url": "http://125.41.8.2:37503/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:17:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824419/",
            "reporter": "geenensp"
        }
    ],
    "3824418": [
        {
            "dateadded": "2026-04-17 12:29:11 UTC",
            "url": "https://pack-unit4.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824418/",
            "reporter": "anonymous"
        }
    ],
    "3824417": [
        {
            "dateadded": "2026-04-17 12:26:19 UTC",
            "url": "http://179.43.182.70/atomic/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-18 17:21:44 UTC",
            "threat": "malware_download",
            "tags": [
                "64-bit",
                "elf",
                "mirai",
                "x86-64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824417/",
            "reporter": "geenensp"
        }
    ],
    "3824416": [
        {
            "dateadded": "2026-04-17 12:26:08 UTC",
            "url": "https://fast-ship3.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824416/",
            "reporter": "anonymous"
        }
    ],
    "3824415": [
        {
            "dateadded": "2026-04-17 12:22:16 UTC",
            "url": "https://mail-box2.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824415/",
            "reporter": "anonymous"
        }
    ],
    "3824414": [
        {
            "dateadded": "2026-04-17 12:12:11 UTC",
            "url": "https://post-card1.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824414/",
            "reporter": "anonymous"
        }
    ],
    "3824413": [
        {
            "dateadded": "2026-04-17 12:11:13 UTC",
            "url": "http://60.23.75.111:55169/i",
            "url_status": "offline",
            "last_online": "2026-04-21 14:53:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824413/",
            "reporter": "geenensp"
        }
    ],
    "3824411": [
        {
            "dateadded": "2026-04-17 12:10:09 UTC",
            "url": "http://41.32.249.165:57203/mozi.m",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:33 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824411/",
            "reporter": "adliwahid"
        }
    ],
    "3824412": [
        {
            "dateadded": "2026-04-17 12:10:09 UTC",
            "url": "http://41.32.249.165:57203/Mozi.a",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:36 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824412/",
            "reporter": "adliwahid"
        }
    ],
    "3824410": [
        {
            "dateadded": "2026-04-17 12:07:10 UTC",
            "url": "https://green-tree6.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824410/",
            "reporter": "anonymous"
        }
    ],
    "3824409": [
        {
            "dateadded": "2026-04-17 12:03:10 UTC",
            "url": "https://248bestmoon.click/api/index.php?q=spd6tEJQ1n0nrmnkxaQ",
            "url_status": "offline",
            "last_online": "2026-04-17 12:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824409/",
            "reporter": "abus3reports"
        }
    ],
    "3824408": [
        {
            "dateadded": "2026-04-17 12:02:20 UTC",
            "url": "http://42.55.43.82:49208/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:28:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824408/",
            "reporter": "geenensp"
        }
    ],
    "3824407": [
        {
            "dateadded": "2026-04-17 12:01:13 UTC",
            "url": "https://cool-wind5.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 12:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824407/",
            "reporter": "anonymous"
        }
    ],
    "3824405": [
        {
            "dateadded": "2026-04-17 12:01:05 UTC",
            "url": "http://13.60.36.54/bot",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824405/",
            "reporter": "adliwahid"
        }
    ],
    "3824406": [
        {
            "dateadded": "2026-04-17 12:01:05 UTC",
            "url": "http://125.47.12.51:49907/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824406/",
            "reporter": "adliwahid"
        }
    ],
    "3824404": [
        {
            "dateadded": "2026-04-17 12:01:04 UTC",
            "url": "http://2.27.12.6/bins/loader.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824404/",
            "reporter": "adliwahid"
        }
    ],
    "3824403": [
        {
            "dateadded": "2026-04-17 12:00:09 UTC",
            "url": "http://31.57.243.129/bot.pl",
            "url_status": "offline",
            "last_online": "2026-04-18 10:42:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824403/",
            "reporter": "adliwahid"
        }
    ],
    "3824402": [
        {
            "dateadded": "2026-04-17 12:00:07 UTC",
            "url": "http://192.241.155.246/m-i.p-s.Sakura",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824402/",
            "reporter": "adliwahid"
        }
    ],
    "3824401": [
        {
            "dateadded": "2026-04-17 11:56:21 UTC",
            "url": "http://60.18.49.22:45515/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 07:21:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824401/",
            "reporter": "geenensp"
        }
    ],
    "3824400": [
        {
            "dateadded": "2026-04-17 11:56:11 UTC",
            "url": "https://warm-sun4.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824400/",
            "reporter": "anonymous"
        }
    ],
    "3824397": [
        {
            "dateadded": "2026-04-17 11:53:23 UTC",
            "url": "https://bigblograin.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824397/",
            "reporter": "anonymous"
        }
    ],
    "3824398": [
        {
            "dateadded": "2026-04-17 11:53:23 UTC",
            "url": "https://mygoodblog.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824398/",
            "reporter": "anonymous"
        }
    ],
    "3824399": [
        {
            "dateadded": "2026-04-17 11:53:23 UTC",
            "url": "https://mygoodblog.cyou/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824399/",
            "reporter": "anonymous"
        }
    ],
    "3824396": [
        {
            "dateadded": "2026-04-17 11:53:22 UTC",
            "url": "http://190.109.227.76:40149/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824396/",
            "reporter": "geenensp"
        }
    ],
    "3824395": [
        {
            "dateadded": "2026-04-17 11:53:11 UTC",
            "url": "https://beacon-mysummitfcu.org/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": "2026-04-17 11:53:11 UTC",
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824395/",
            "reporter": "anonymous"
        }
    ],
    "3824393": [
        {
            "dateadded": "2026-04-17 11:53:10 UTC",
            "url": "https://productionmaza.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824393/",
            "reporter": "anonymous"
        }
    ],
    "3824394": [
        {
            "dateadded": "2026-04-17 11:53:10 UTC",
            "url": "http://158.94.210.248/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": "2026-04-17 17:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824394/",
            "reporter": "anonymous"
        }
    ],
    "3824386": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "https://goodgoodmoon.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824386/",
            "reporter": "anonymous"
        }
    ],
    "3824387": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "http://mygoodblog.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824387/",
            "reporter": "anonymous"
        }
    ],
    "3824388": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "https://biggestchlen.xyz/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824388/",
            "reporter": "anonymous"
        }
    ],
    "3824389": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "https://krempie.xyz/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824389/",
            "reporter": "anonymous"
        }
    ],
    "3824390": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "https://bigbadwolf.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824390/",
            "reporter": "anonymous"
        }
    ],
    "3824391": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "http://brukva.shop/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824391/",
            "reporter": "anonymous"
        }
    ],
    "3824392": [
        {
            "dateadded": "2026-04-17 11:53:09 UTC",
            "url": "https://bestwebchlen.cyou/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824392/",
            "reporter": "anonymous"
        }
    ],
    "3824370": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://microblob.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824370/",
            "reporter": "anonymous"
        }
    ],
    "3824371": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://mygoodblog.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824371/",
            "reporter": "anonymous"
        }
    ],
    "3824372": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://sirata.asia/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824372/",
            "reporter": "anonymous"
        }
    ],
    "3824373": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "http://myverifhouse.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824373/",
            "reporter": "anonymous"
        }
    ],
    "3824374": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "http://allplanetssame.cfd/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824374/",
            "reporter": "anonymous"
        }
    ],
    "3824375": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://mrazotalog.lol/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824375/",
            "reporter": "anonymous"
        }
    ],
    "3824376": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://myverifhouse.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824376/",
            "reporter": "anonymous"
        }
    ],
    "3824377": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://brukva.shop/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824377/",
            "reporter": "anonymous"
        }
    ],
    "3824378": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://productionmaza.cyou/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824378/",
            "reporter": "anonymous"
        }
    ],
    "3824379": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://antongandon.club/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824379/",
            "reporter": "anonymous"
        }
    ],
    "3824380": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://allplanetssame.cfd/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824380/",
            "reporter": "anonymous"
        }
    ],
    "3824381": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "http://bigboysclub.cyou/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824381/",
            "reporter": "anonymous"
        }
    ],
    "3824382": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://productionmaza.cfd/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824382/",
            "reporter": "anonymous"
        }
    ],
    "3824383": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "http://cloudflare-check.cfd/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824383/",
            "reporter": "anonymous"
        }
    ],
    "3824384": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "http://myverifyblog.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824384/",
            "reporter": "anonymous"
        }
    ],
    "3824385": [
        {
            "dateadded": "2026-04-17 11:53:08 UTC",
            "url": "https://158.94.210.248/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824385/",
            "reporter": "anonymous"
        }
    ],
    "3824349": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://mybiggestjoy.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824349/",
            "reporter": "anonymous"
        }
    ],
    "3824350": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://mymicroblog.lat/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824350/",
            "reporter": "anonymous"
        }
    ],
    "3824351": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://cloudflare-check.cfd/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824351/",
            "reporter": "anonymous"
        }
    ],
    "3824352": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://mybiggestjoy.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824352/",
            "reporter": "anonymous"
        }
    ],
    "3824353": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://mrazotalog.lol/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824353/",
            "reporter": "anonymous"
        }
    ],
    "3824354": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://denegnet.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824354/",
            "reporter": "anonymous"
        }
    ],
    "3824355": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://blatnoitovar.xyz/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824355/",
            "reporter": "anonymous"
        }
    ],
    "3824356": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://mymicroblog.lat/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824356/",
            "reporter": "anonymous"
        }
    ],
    "3824357": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://diddyparty.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824357/",
            "reporter": "anonymous"
        }
    ],
    "3824358": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://etokrol.lol/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824358/",
            "reporter": "anonymous"
        }
    ],
    "3824359": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://bigboysclub.cyou/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824359/",
            "reporter": "anonymous"
        }
    ],
    "3824360": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://blatnoitovar.xyz/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824360/",
            "reporter": "anonymous"
        }
    ],
    "3824361": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://merengagoi.bond/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824361/",
            "reporter": "anonymous"
        }
    ],
    "3824362": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://myverifyblog.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824362/",
            "reporter": "anonymous"
        }
    ],
    "3824363": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://productionmaza.cyou/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824363/",
            "reporter": "anonymous"
        }
    ],
    "3824364": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://etokrol.lol/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824364/",
            "reporter": "anonymous"
        }
    ],
    "3824365": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://gooddogshop.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824365/",
            "reporter": "anonymous"
        }
    ],
    "3824366": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://diddyparty.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824366/",
            "reporter": "anonymous"
        }
    ],
    "3824367": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://denegnet.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824367/",
            "reporter": "anonymous"
        }
    ],
    "3824368": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "http://productionmaza.cfd/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824368/",
            "reporter": "anonymous"
        }
    ],
    "3824369": [
        {
            "dateadded": "2026-04-17 11:53:07 UTC",
            "url": "https://blobtop.sbs/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stealer",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824369/",
            "reporter": "anonymous"
        }
    ],
    "3824348": [
        {
            "dateadded": "2026-04-17 11:49:13 UTC",
            "url": "https://soft-rain3.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824348/",
            "reporter": "anonymous"
        }
    ],
    "3824347": [
        {
            "dateadded": "2026-04-17 11:46:20 UTC",
            "url": "http://43.252.159.79:39580/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824347/",
            "reporter": "adliwahid"
        }
    ],
    "3824346": [
        {
            "dateadded": "2026-04-17 11:46:08 UTC",
            "url": "http://123.14.221.192:37406/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824346/",
            "reporter": "adliwahid"
        }
    ],
    "3824342": [
        {
            "dateadded": "2026-04-17 11:46:07 UTC",
            "url": "http://179.42.111.45:51609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:00:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824342/",
            "reporter": "adliwahid"
        }
    ],
    "3824343": [
        {
            "dateadded": "2026-04-17 11:46:07 UTC",
            "url": "http://113.128.64.41:45269/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824343/",
            "reporter": "adliwahid"
        }
    ],
    "3824344": [
        {
            "dateadded": "2026-04-17 11:46:07 UTC",
            "url": "http://42.233.94.163:54609/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:21:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824344/",
            "reporter": "adliwahid"
        }
    ],
    "3824345": [
        {
            "dateadded": "2026-04-17 11:46:07 UTC",
            "url": "http://124.235.251.38:47347/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:26:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824345/",
            "reporter": "adliwahid"
        }
    ],
    "3824340": [
        {
            "dateadded": "2026-04-17 11:46:06 UTC",
            "url": "http://193.163.187.213:60651/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824340/",
            "reporter": "adliwahid"
        }
    ],
    "3824341": [
        {
            "dateadded": "2026-04-17 11:46:06 UTC",
            "url": "http://125.45.64.44:46312/i",
            "url_status": "offline",
            "last_online": "2026-04-19 10:53:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824341/",
            "reporter": "adliwahid"
        }
    ],
    "3824338": [
        {
            "dateadded": "2026-04-17 11:45:14 UTC",
            "url": "http://114.139.213.64:46092/i",
            "url_status": "offline",
            "last_online": "2026-04-22 19:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824338/",
            "reporter": "adliwahid"
        }
    ],
    "3824339": [
        {
            "dateadded": "2026-04-17 11:45:14 UTC",
            "url": "https://clear-sky2.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824339/",
            "reporter": "anonymous"
        }
    ],
    "3824337": [
        {
            "dateadded": "2026-04-17 11:45:11 UTC",
            "url": "http://222.219.74.93:58121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 16:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824337/",
            "reporter": "adliwahid"
        }
    ],
    "3824327": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://36.70.232.2:45636/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824327/",
            "reporter": "adliwahid"
        }
    ],
    "3824328": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://42.230.27.237:56619/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:41:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824328/",
            "reporter": "adliwahid"
        }
    ],
    "3824329": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://175.149.94.220:40202/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:29:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824329/",
            "reporter": "adliwahid"
        }
    ],
    "3824330": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://182.117.31.202:44828/i",
            "url_status": "offline",
            "last_online": "2026-04-18 12:04:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824330/",
            "reporter": "adliwahid"
        }
    ],
    "3824331": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://113.237.101.224:36752/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 23:08:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824331/",
            "reporter": "adliwahid"
        }
    ],
    "3824332": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://39.79.144.166:43917/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824332/",
            "reporter": "adliwahid"
        }
    ],
    "3824333": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://222.137.7.76:48097/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:46:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824333/",
            "reporter": "adliwahid"
        }
    ],
    "3824334": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://179.42.111.45:51609/i",
            "url_status": "offline",
            "last_online": "2026-04-21 06:06:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824334/",
            "reporter": "adliwahid"
        }
    ],
    "3824335": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://115.49.225.75:51201/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824335/",
            "reporter": "adliwahid"
        }
    ],
    "3824336": [
        {
            "dateadded": "2026-04-17 11:45:10 UTC",
            "url": "http://124.235.251.38:47347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:51:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824336/",
            "reporter": "adliwahid"
        }
    ],
    "3824326": [
        {
            "dateadded": "2026-04-17 11:44:33 UTC",
            "url": "http://112.239.99.220:40474/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824326/",
            "reporter": "adliwahid"
        }
    ],
    "3824325": [
        {
            "dateadded": "2026-04-17 11:44:21 UTC",
            "url": "http://114.226.83.46:55613/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 18:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824325/",
            "reporter": "adliwahid"
        }
    ],
    "3824324": [
        {
            "dateadded": "2026-04-17 11:44:09 UTC",
            "url": "http://115.52.191.122:52368/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:44:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824324/",
            "reporter": "adliwahid"
        }
    ],
    "3824317": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://112.248.113.169:46344/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:08:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824317/",
            "reporter": "adliwahid"
        }
    ],
    "3824318": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://113.200.237.170:45286/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:25:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824318/",
            "reporter": "adliwahid"
        }
    ],
    "3824319": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://125.43.39.77:32770/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824319/",
            "reporter": "adliwahid"
        }
    ],
    "3824320": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://218.60.176.21:55770/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:45:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824320/",
            "reporter": "adliwahid"
        }
    ],
    "3824321": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://42.55.33.212:49390/i",
            "url_status": "offline",
            "last_online": "2026-04-26 12:32:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824321/",
            "reporter": "adliwahid"
        }
    ],
    "3824322": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://180.157.47.152:56511/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824322/",
            "reporter": "adliwahid"
        }
    ],
    "3824323": [
        {
            "dateadded": "2026-04-17 11:44:08 UTC",
            "url": "http://124.94.172.180:51494/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:15:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824323/",
            "reporter": "adliwahid"
        }
    ],
    "3824316": [
        {
            "dateadded": "2026-04-17 11:44:07 UTC",
            "url": "http://42.87.171.118:54237/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:03:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824316/",
            "reporter": "adliwahid"
        }
    ],
    "3824315": [
        {
            "dateadded": "2026-04-17 11:43:13 UTC",
            "url": "http://42.238.241.151:58007/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:59:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824315/",
            "reporter": "adliwahid"
        }
    ],
    "3824311": [
        {
            "dateadded": "2026-04-17 11:43:11 UTC",
            "url": "http://182.126.248.72:48002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:29:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824311/",
            "reporter": "adliwahid"
        }
    ],
    "3824312": [
        {
            "dateadded": "2026-04-17 11:43:11 UTC",
            "url": "http://125.43.39.77:32770/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824312/",
            "reporter": "adliwahid"
        }
    ],
    "3824313": [
        {
            "dateadded": "2026-04-17 11:43:11 UTC",
            "url": "http://182.126.248.72:48002/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824313/",
            "reporter": "adliwahid"
        }
    ],
    "3824314": [
        {
            "dateadded": "2026-04-17 11:43:11 UTC",
            "url": "http://122.150.107.222:43071/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824314/",
            "reporter": "adliwahid"
        }
    ],
    "3824299": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://45.164.179.97:11709/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824299/",
            "reporter": "adliwahid"
        }
    ],
    "3824300": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://42.179.7.35:41054/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:22:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824300/",
            "reporter": "adliwahid"
        }
    ],
    "3824301": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://112.234.154.89:47455/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824301/",
            "reporter": "adliwahid"
        }
    ],
    "3824302": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://115.50.5.19:46960/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:28:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824302/",
            "reporter": "adliwahid"
        }
    ],
    "3824303": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://42.86.34.90:52380/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 23:29:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824303/",
            "reporter": "adliwahid"
        }
    ],
    "3824304": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://42.239.255.218:60226/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:18:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824304/",
            "reporter": "adliwahid"
        }
    ],
    "3824305": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://27.202.246.71:50610/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:49:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824305/",
            "reporter": "adliwahid"
        }
    ],
    "3824306": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://113.237.101.224:36752/i",
            "url_status": "offline",
            "last_online": "2026-04-24 23:05:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824306/",
            "reporter": "adliwahid"
        }
    ],
    "3824307": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://42.5.247.200:58322/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:03:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824307/",
            "reporter": "adliwahid"
        }
    ],
    "3824308": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://222.136.169.136:53911/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:31:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824308/",
            "reporter": "adliwahid"
        }
    ],
    "3824309": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://42.233.94.163:54609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 19:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824309/",
            "reporter": "adliwahid"
        }
    ],
    "3824310": [
        {
            "dateadded": "2026-04-17 11:43:10 UTC",
            "url": "http://218.60.176.21:55770/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:21:02 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824310/",
            "reporter": "adliwahid"
        }
    ],
    "3824298": [
        {
            "dateadded": "2026-04-17 11:43:07 UTC",
            "url": "http://91.130.24.183:50835/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824298/",
            "reporter": "adliwahid"
        }
    ],
    "3824297": [
        {
            "dateadded": "2026-04-17 11:42:16 UTC",
            "url": "http://110.37.38.88:50560/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:19:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824297/",
            "reporter": "adliwahid"
        }
    ],
    "3824296": [
        {
            "dateadded": "2026-04-17 11:42:11 UTC",
            "url": "http://113.128.64.41:45269/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824296/",
            "reporter": "adliwahid"
        }
    ],
    "3824292": [
        {
            "dateadded": "2026-04-17 11:42:09 UTC",
            "url": "http://222.142.241.193:48944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:50:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824292/",
            "reporter": "adliwahid"
        }
    ],
    "3824293": [
        {
            "dateadded": "2026-04-17 11:42:09 UTC",
            "url": "http://219.155.252.99:33257/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 15:19:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824293/",
            "reporter": "adliwahid"
        }
    ],
    "3824294": [
        {
            "dateadded": "2026-04-17 11:42:09 UTC",
            "url": "http://122.244.223.22:45208/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824294/",
            "reporter": "adliwahid"
        }
    ],
    "3824295": [
        {
            "dateadded": "2026-04-17 11:42:09 UTC",
            "url": "http://36.70.232.2:45636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824295/",
            "reporter": "adliwahid"
        }
    ],
    "3824285": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://42.230.27.237:56619/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:55:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824285/",
            "reporter": "adliwahid"
        }
    ],
    "3824286": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://110.36.80.173:48142/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:23:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824286/",
            "reporter": "adliwahid"
        }
    ],
    "3824287": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://222.138.102.0:56547/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824287/",
            "reporter": "adliwahid"
        }
    ],
    "3824288": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://42.53.245.189:49060/i",
            "url_status": "offline",
            "last_online": "2026-04-18 12:02:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824288/",
            "reporter": "adliwahid"
        }
    ],
    "3824289": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://45.164.179.97:11709/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824289/",
            "reporter": "adliwahid"
        }
    ],
    "3824290": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://110.174.246.101:39962/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:02:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824290/",
            "reporter": "adliwahid"
        }
    ],
    "3824291": [
        {
            "dateadded": "2026-04-17 11:42:08 UTC",
            "url": "http://113.239.217.13:40757/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:43:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824291/",
            "reporter": "adliwahid"
        }
    ],
    "3824283": [
        {
            "dateadded": "2026-04-17 11:41:09 UTC",
            "url": "http://175.149.94.220:40202/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:52:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824283/",
            "reporter": "adliwahid"
        }
    ],
    "3824284": [
        {
            "dateadded": "2026-04-17 11:41:09 UTC",
            "url": "http://124.131.119.117:45117/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:47:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824284/",
            "reporter": "adliwahid"
        }
    ],
    "3824276": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://219.155.210.18:47466/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:52:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824276/",
            "reporter": "adliwahid"
        }
    ],
    "3824277": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://196.190.69.149:51083/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824277/",
            "reporter": "adliwahid"
        }
    ],
    "3824278": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://115.58.175.166:45571/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824278/",
            "reporter": "adliwahid"
        }
    ],
    "3824279": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://98.167.107.155:44344/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824279/",
            "reporter": "adliwahid"
        }
    ],
    "3824280": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://182.117.31.202:44828/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:32:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824280/",
            "reporter": "adliwahid"
        }
    ],
    "3824281": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://125.40.83.224:49826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824281/",
            "reporter": "adliwahid"
        }
    ],
    "3824282": [
        {
            "dateadded": "2026-04-17 11:41:08 UTC",
            "url": "http://103.172.186.155:39086/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824282/",
            "reporter": "adliwahid"
        }
    ],
    "3824274": [
        {
            "dateadded": "2026-04-17 11:41:07 UTC",
            "url": "http://112.242.227.107:56216/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:58:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824274/",
            "reporter": "adliwahid"
        }
    ],
    "3824275": [
        {
            "dateadded": "2026-04-17 11:41:07 UTC",
            "url": "http://112.239.103.138:58882/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:47:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824275/",
            "reporter": "adliwahid"
        }
    ],
    "3824273": [
        {
            "dateadded": "2026-04-17 11:40:35 UTC",
            "url": "http://112.242.227.107:56216/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824273/",
            "reporter": "adliwahid"
        }
    ],
    "3824269": [
        {
            "dateadded": "2026-04-17 11:40:12 UTC",
            "url": "http://175.146.159.211:33151/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:34:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824269/",
            "reporter": "adliwahid"
        }
    ],
    "3824270": [
        {
            "dateadded": "2026-04-17 11:40:12 UTC",
            "url": "http://115.55.48.79:51782/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:25:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824270/",
            "reporter": "adliwahid"
        }
    ],
    "3824271": [
        {
            "dateadded": "2026-04-17 11:40:12 UTC",
            "url": "http://182.113.203.84:53522/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:27:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824271/",
            "reporter": "adliwahid"
        }
    ],
    "3824272": [
        {
            "dateadded": "2026-04-17 11:40:12 UTC",
            "url": "http://123.183.196.223:57863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:02:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824272/",
            "reporter": "adliwahid"
        }
    ],
    "3824265": [
        {
            "dateadded": "2026-04-17 11:40:11 UTC",
            "url": "http://42.230.70.27:49366/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824265/",
            "reporter": "adliwahid"
        }
    ],
    "3824266": [
        {
            "dateadded": "2026-04-17 11:40:11 UTC",
            "url": "http://112.239.103.138:58882/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824266/",
            "reporter": "adliwahid"
        }
    ],
    "3824267": [
        {
            "dateadded": "2026-04-17 11:40:11 UTC",
            "url": "http://138.204.196.136:38329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824267/",
            "reporter": "adliwahid"
        }
    ],
    "3824268": [
        {
            "dateadded": "2026-04-17 11:40:11 UTC",
            "url": "http://175.146.153.184:48539/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 20:41:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824268/",
            "reporter": "adliwahid"
        }
    ],
    "3824264": [
        {
            "dateadded": "2026-04-17 11:39:21 UTC",
            "url": "http://42.5.8.35:38376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:40:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824264/",
            "reporter": "adliwahid"
        }
    ],
    "3824262": [
        {
            "dateadded": "2026-04-17 11:39:11 UTC",
            "url": "https://pure-water1.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824262/",
            "reporter": "anonymous"
        }
    ],
    "3824263": [
        {
            "dateadded": "2026-04-17 11:39:11 UTC",
            "url": "http://175.148.206.118:33124/i",
            "url_status": "offline",
            "last_online": "2026-04-22 17:48:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824263/",
            "reporter": "adliwahid"
        }
    ],
    "3824261": [
        {
            "dateadded": "2026-04-17 11:39:10 UTC",
            "url": "http://61.53.125.53:33301/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824261/",
            "reporter": "adliwahid"
        }
    ],
    "3824259": [
        {
            "dateadded": "2026-04-17 11:39:09 UTC",
            "url": "http://119.119.164.207:48407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 04:54:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824259/",
            "reporter": "adliwahid"
        }
    ],
    "3824260": [
        {
            "dateadded": "2026-04-17 11:39:09 UTC",
            "url": "http://114.226.83.46:55613/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:52:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824260/",
            "reporter": "adliwahid"
        }
    ],
    "3824257": [
        {
            "dateadded": "2026-04-17 11:39:08 UTC",
            "url": "http://219.155.210.18:47466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824257/",
            "reporter": "adliwahid"
        }
    ],
    "3824258": [
        {
            "dateadded": "2026-04-17 11:39:08 UTC",
            "url": "http://110.36.80.173:48142/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824258/",
            "reporter": "adliwahid"
        }
    ],
    "3824256": [
        {
            "dateadded": "2026-04-17 11:36:22 UTC",
            "url": "http://124.129.153.74:52107/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824256/",
            "reporter": "geenensp"
        }
    ],
    "3824255": [
        {
            "dateadded": "2026-04-17 11:35:23 UTC",
            "url": "http://190.109.227.76:40149/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824255/",
            "reporter": "geenensp"
        }
    ],
    "3824254": [
        {
            "dateadded": "2026-04-17 11:34:16 UTC",
            "url": "https://join-list6.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824254/",
            "reporter": "anonymous"
        }
    ],
    "3824253": [
        {
            "dateadded": "2026-04-17 11:33:14 UTC",
            "url": "http://42.55.43.82:49208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824253/",
            "reporter": "geenensp"
        }
    ],
    "3824252": [
        {
            "dateadded": "2026-04-17 11:28:08 UTC",
            "url": "https://meet-point5.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824252/",
            "reporter": "anonymous"
        }
    ],
    "3824251": [
        {
            "dateadded": "2026-04-17 11:22:12 UTC",
            "url": "https://office-hour4.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824251/",
            "reporter": "anonymous"
        }
    ],
    "3824250": [
        {
            "dateadded": "2026-04-17 11:22:06 UTC",
            "url": "http://85.239.147.6/files/6493278841/kglQns8.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824250/",
            "reporter": "c2hunter"
        }
    ],
    "3824249": [
        {
            "dateadded": "2026-04-17 11:18:25 UTC",
            "url": "http://115.58.91.178:50532/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:21:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824249/",
            "reporter": "geenensp"
        }
    ],
    "3824248": [
        {
            "dateadded": "2026-04-17 11:17:14 UTC",
            "url": "https://staff-only3.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824248/",
            "reporter": "anonymous"
        }
    ],
    "3824247": [
        {
            "dateadded": "2026-04-17 11:15:19 UTC",
            "url": "http://111.220.58.125:44720/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824247/",
            "reporter": "geenensp"
        }
    ],
    "3824246": [
        {
            "dateadded": "2026-04-17 11:15:18 UTC",
            "url": "http://61.52.76.45:37154/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824246/",
            "reporter": "geenensp"
        }
    ],
    "3824245": [
        {
            "dateadded": "2026-04-17 11:11:09 UTC",
            "url": "https://group-chat2.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824245/",
            "reporter": "anonymous"
        }
    ],
    "3824244": [
        {
            "dateadded": "2026-04-17 11:09:24 UTC",
            "url": "http://182.126.105.71:39727/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824244/",
            "reporter": "geenensp"
        }
    ],
    "3824243": [
        {
            "dateadded": "2026-04-17 11:04:12 UTC",
            "url": "https://team-work1.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824243/",
            "reporter": "anonymous"
        }
    ],
    "3824242": [
        {
            "dateadded": "2026-04-17 11:03:21 UTC",
            "url": "http://124.129.153.74:52107/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:55:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824242/",
            "reporter": "geenensp"
        }
    ],
    "3824241": [
        {
            "dateadded": "2026-04-17 11:02:13 UTC",
            "url": "http://42.230.70.27:49366/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824241/",
            "reporter": "geenensp"
        }
    ],
    "3824240": [
        {
            "dateadded": "2026-04-17 11:00:25 UTC",
            "url": "http://42.224.122.75:44241/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824240/",
            "reporter": "geenensp"
        }
    ],
    "3824239": [
        {
            "dateadded": "2026-04-17 11:00:15 UTC",
            "url": "https://free-card6.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 11:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824239/",
            "reporter": "anonymous"
        }
    ],
    "3824238": [
        {
            "dateadded": "2026-04-17 10:56:23 UTC",
            "url": "http://115.58.91.178:50532/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:42:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824238/",
            "reporter": "geenensp"
        }
    ],
    "3824237": [
        {
            "dateadded": "2026-04-17 10:56:06 UTC",
            "url": "http://85.239.147.6/files/oblivora/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824237/",
            "reporter": "c2hunter"
        }
    ],
    "3824236": [
        {
            "dateadded": "2026-04-17 10:55:17 UTC",
            "url": "http://222.139.80.74:55119/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:37:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824236/",
            "reporter": "geenensp"
        }
    ],
    "3824235": [
        {
            "dateadded": "2026-04-17 10:55:15 UTC",
            "url": "https://stock-item5.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824235/",
            "reporter": "anonymous"
        }
    ],
    "3824234": [
        {
            "dateadded": "2026-04-17 10:53:23 UTC",
            "url": "http://61.52.76.45:37154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:58:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824234/",
            "reporter": "geenensp"
        }
    ],
    "3824233": [
        {
            "dateadded": "2026-04-17 10:52:15 UTC",
            "url": "https://best-price4.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824233/",
            "reporter": "anonymous"
        }
    ],
    "3824232": [
        {
            "dateadded": "2026-04-17 10:49:28 UTC",
            "url": "http://115.56.157.55:46743/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:22:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824232/",
            "reporter": "geenensp"
        }
    ],
    "3824231": [
        {
            "dateadded": "2026-04-17 10:49:18 UTC",
            "url": "https://thecowardlydog.com/courageme/mailbox-agent.exe",
            "url_status": "offline",
            "last_online": "2026-04-17 10:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824231/",
            "reporter": "c2hunter"
        }
    ],
    "3824230": [
        {
            "dateadded": "2026-04-17 10:46:26 UTC",
            "url": "http://110.36.31.247:59281/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824230/",
            "reporter": "geenensp"
        }
    ],
    "3824229": [
        {
            "dateadded": "2026-04-17 10:42:21 UTC",
            "url": "http://111.220.58.125:44720/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:01:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824229/",
            "reporter": "geenensp"
        }
    ],
    "3824228": [
        {
            "dateadded": "2026-04-17 10:42:14 UTC",
            "url": "https://promo-code3.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824228/",
            "reporter": "anonymous"
        }
    ],
    "3824227": [
        {
            "dateadded": "2026-04-17 10:39:23 UTC",
            "url": "http://182.126.105.71:39727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824227/",
            "reporter": "geenensp"
        }
    ],
    "3824226": [
        {
            "dateadded": "2026-04-17 10:38:19 UTC",
            "url": "http://222.139.80.74:55119/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:52:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824226/",
            "reporter": "geenensp"
        }
    ],
    "3824225": [
        {
            "dateadded": "2026-04-17 10:37:09 UTC",
            "url": "https://super-sale2.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824225/",
            "reporter": "anonymous"
        }
    ],
    "3824224": [
        {
            "dateadded": "2026-04-17 10:31:14 UTC",
            "url": "https://gift-shop1.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824224/",
            "reporter": "anonymous"
        }
    ],
    "3824223": [
        {
            "dateadded": "2026-04-17 10:30:23 UTC",
            "url": "http://115.49.241.19:51449/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:13:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824223/",
            "reporter": "geenensp"
        }
    ],
    "3824222": [
        {
            "dateadded": "2026-04-17 10:27:14 UTC",
            "url": "http://182.127.153.144:55285/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:50:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824222/",
            "reporter": "geenensp"
        }
    ],
    "3824221": [
        {
            "dateadded": "2026-04-17 10:26:09 UTC",
            "url": "https://safe-place6.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824221/",
            "reporter": "anonymous"
        }
    ],
    "3824220": [
        {
            "dateadded": "2026-04-17 10:20:11 UTC",
            "url": "https://guest-room5.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824220/",
            "reporter": "anonymous"
        }
    ],
    "3824219": [
        {
            "dateadded": "2026-04-17 10:14:20 UTC",
            "url": "https://side-door4.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824219/",
            "reporter": "anonymous"
        }
    ],
    "3824218": [
        {
            "dateadded": "2026-04-17 10:09:08 UTC",
            "url": "https://top-floor3.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824218/",
            "reporter": "anonymous"
        }
    ],
    "3824217": [
        {
            "dateadded": "2026-04-17 10:04:09 UTC",
            "url": "https://back-yard2.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824217/",
            "reporter": "anonymous"
        }
    ],
    "3824216": [
        {
            "dateadded": "2026-04-17 10:01:15 UTC",
            "url": "http://115.49.241.19:51449/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824216/",
            "reporter": "geenensp"
        }
    ],
    "3824215": [
        {
            "dateadded": "2026-04-17 10:01:10 UTC",
            "url": "http://182.127.153.144:55285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 12:05:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824215/",
            "reporter": "geenensp"
        }
    ],
    "3824214": [
        {
            "dateadded": "2026-04-17 09:57:09 UTC",
            "url": "https://main-hall1.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824214/",
            "reporter": "anonymous"
        }
    ],
    "3824213": [
        {
            "dateadded": "2026-04-17 09:53:19 UTC",
            "url": "http://39.73.15.227:52036/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 09:53:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824213/",
            "reporter": "geenensp"
        }
    ],
    "3824212": [
        {
            "dateadded": "2026-04-17 09:53:10 UTC",
            "url": "https://old-library6.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824212/",
            "reporter": "anonymous"
        }
    ],
    "3824211": [
        {
            "dateadded": "2026-04-17 09:50:15 UTC",
            "url": "http://115.49.28.13:58215/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:44:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824211/",
            "reporter": "geenensp"
        }
    ],
    "3824210": [
        {
            "dateadded": "2026-04-17 09:46:08 UTC",
            "url": "https://new-author5.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824210/",
            "reporter": "anonymous"
        }
    ],
    "3824209": [
        {
            "dateadded": "2026-04-17 09:41:11 UTC",
            "url": "https://best-seller4.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824209/",
            "reporter": "anonymous"
        }
    ],
    "3824208": [
        {
            "dateadded": "2026-04-17 09:40:22 UTC",
            "url": "http://180.150.21.18:41322/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824208/",
            "reporter": "geenensp"
        }
    ],
    "3824207": [
        {
            "dateadded": "2026-04-17 09:36:07 UTC",
            "url": "https://page-number3.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824207/",
            "reporter": "anonymous"
        }
    ],
    "3824206": [
        {
            "dateadded": "2026-04-17 09:29:07 UTC",
            "url": "https://read-more2.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824206/",
            "reporter": "anonymous"
        }
    ],
    "3824205": [
        {
            "dateadded": "2026-04-17 09:27:17 UTC",
            "url": "http://123.12.234.121:58938/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:38:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824205/",
            "reporter": "geenensp"
        }
    ],
    "3824204": [
        {
            "dateadded": "2026-04-17 09:25:10 UTC",
            "url": "http://222.127.169.111:45647/i",
            "url_status": "offline",
            "last_online": "2026-04-17 09:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824204/",
            "reporter": "geenensp"
        }
    ],
    "3824203": [
        {
            "dateadded": "2026-04-17 09:24:19 UTC",
            "url": "http://123.12.234.121:58938/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:07:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824203/",
            "reporter": "geenensp"
        }
    ],
    "3824202": [
        {
            "dateadded": "2026-04-17 09:23:10 UTC",
            "url": "https://open-book1.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824202/",
            "reporter": "anonymous"
        }
    ],
    "3824201": [
        {
            "dateadded": "2026-04-17 09:18:11 UTC",
            "url": "https://cool-drink6.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824201/",
            "reporter": "anonymous"
        }
    ],
    "3824200": [
        {
            "dateadded": "2026-04-17 09:13:21 UTC",
            "url": "http://180.252.211.71:51994/i",
            "url_status": "offline",
            "last_online": "2026-04-17 09:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824200/",
            "reporter": "geenensp"
        }
    ],
    "3824199": [
        {
            "dateadded": "2026-04-17 09:12:11 UTC",
            "url": "https://fresh-juice5.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824199/",
            "reporter": "anonymous"
        }
    ],
    "3824198": [
        {
            "dateadded": "2026-04-17 09:11:17 UTC",
            "url": "http://115.58.161.68:34121/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:51:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824198/",
            "reporter": "geenensp"
        }
    ],
    "3824197": [
        {
            "dateadded": "2026-04-17 09:08:15 UTC",
            "url": "http://115.55.9.222:44336/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824197/",
            "reporter": "geenensp"
        }
    ],
    "3824196": [
        {
            "dateadded": "2026-04-17 09:08:07 UTC",
            "url": "https://sweet-cake4.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824196/",
            "reporter": "anonymous"
        }
    ],
    "3824195": [
        {
            "dateadded": "2026-04-17 09:03:09 UTC",
            "url": "http://115.54.125.14:45999/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:15:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824195/",
            "reporter": "geenensp"
        }
    ],
    "3824194": [
        {
            "dateadded": "2026-04-17 09:01:08 UTC",
            "url": "https://tasty-dish3.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 09:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824194/",
            "reporter": "anonymous"
        }
    ],
    "3824193": [
        {
            "dateadded": "2026-04-17 08:56:08 UTC",
            "url": "https://good-meal2.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824193/",
            "reporter": "anonymous"
        }
    ],
    "3824192": [
        {
            "dateadded": "2026-04-17 08:52:16 UTC",
            "url": "http://103.172.186.157:33684/i",
            "url_status": "offline",
            "last_online": "2026-04-24 06:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824192/",
            "reporter": "geenensp"
        }
    ],
    "3824191": [
        {
            "dateadded": "2026-04-17 08:50:10 UTC",
            "url": "https://fast-food1.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824191/",
            "reporter": "anonymous"
        }
    ],
    "3824190": [
        {
            "dateadded": "2026-04-17 08:45:09 UTC",
            "url": "https://live-stream6.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824190/",
            "reporter": "anonymous"
        }
    ],
    "3824189": [
        {
            "dateadded": "2026-04-17 08:43:22 UTC",
            "url": "http://115.55.9.222:44336/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:52:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824189/",
            "reporter": "geenensp"
        }
    ],
    "3824188": [
        {
            "dateadded": "2026-04-17 08:42:15 UTC",
            "url": "http://180.252.211.71:51994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 08:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824188/",
            "reporter": "geenensp"
        }
    ],
    "3824187": [
        {
            "dateadded": "2026-04-17 08:39:07 UTC",
            "url": "https://hot-topic5.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824187/",
            "reporter": "anonymous"
        }
    ],
    "3824186": [
        {
            "dateadded": "2026-04-17 08:35:21 UTC",
            "url": "http://103.172.186.157:33684/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 04:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824186/",
            "reporter": "geenensp"
        }
    ],
    "3824185": [
        {
            "dateadded": "2026-04-17 08:33:09 UTC",
            "url": "https://weather-post4.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824185/",
            "reporter": "anonymous"
        }
    ],
    "3824184": [
        {
            "dateadded": "2026-04-17 08:30:10 UTC",
            "url": "https://sport-match3.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824184/",
            "reporter": "anonymous"
        }
    ],
    "3824183": [
        {
            "dateadded": "2026-04-17 08:27:08 UTC",
            "url": "https://world-press2.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824183/",
            "reporter": "anonymous"
        }
    ],
    "3824182": [
        {
            "dateadded": "2026-04-17 08:26:19 UTC",
            "url": "http://182.114.254.132:47366/i",
            "url_status": "offline",
            "last_online": "2026-04-17 08:26:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824182/",
            "reporter": "geenensp"
        }
    ],
    "3824181": [
        {
            "dateadded": "2026-04-17 08:20:38 UTC",
            "url": "http://222.127.169.111:45647/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 08:20:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824181/",
            "reporter": "geenensp"
        }
    ],
    "3824180": [
        {
            "dateadded": "2026-04-17 08:19:07 UTC",
            "url": "https://daily-news1.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 08:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824180/",
            "reporter": "anonymous"
        }
    ],
    "3824179": [
        {
            "dateadded": "2026-04-17 08:16:21 UTC",
            "url": "http://182.124.129.33:38778/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824179/",
            "reporter": "geenensp"
        }
    ],
    "3824178": [
        {
            "dateadded": "2026-04-17 08:15:08 UTC",
            "url": "http://105.184.179.161:43331/i",
            "url_status": "offline",
            "last_online": "2026-04-18 19:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824178/",
            "reporter": "geenensp"
        }
    ],
    "3824177": [
        {
            "dateadded": "2026-04-17 08:14:08 UTC",
            "url": "http://192.3.122.144/img/hb/img_193055.png",
            "url_status": "offline",
            "last_online": "2026-04-20 22:51:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824177/",
            "reporter": "abuse_ch"
        }
    ],
    "3824176": [
        {
            "dateadded": "2026-04-17 08:01:17 UTC",
            "url": "http://182.121.153.123:50902/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 22:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824176/",
            "reporter": "geenensp"
        }
    ],
    "3824174": [
        {
            "dateadded": "2026-04-17 07:59:10 UTC",
            "url": "http://42.239.188.6:58845/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:58:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824174/",
            "reporter": "geenensp"
        }
    ],
    "3824175": [
        {
            "dateadded": "2026-04-17 07:59:10 UTC",
            "url": "http://36.69.84.241:56956/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824175/",
            "reporter": "geenensp"
        }
    ],
    "3824173": [
        {
            "dateadded": "2026-04-17 07:52:17 UTC",
            "url": "http://182.124.129.33:38778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:25:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824173/",
            "reporter": "geenensp"
        }
    ],
    "3824172": [
        {
            "dateadded": "2026-04-17 07:51:23 UTC",
            "url": "http://105.184.179.161:43331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824172/",
            "reporter": "geenensp"
        }
    ],
    "3824171": [
        {
            "dateadded": "2026-04-17 07:41:23 UTC",
            "url": "http://171.212.150.196:39749/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824171/",
            "reporter": "geenensp"
        }
    ],
    "3824170": [
        {
            "dateadded": "2026-04-17 07:40:24 UTC",
            "url": "http://14.157.83.132:54022/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:59:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824170/",
            "reporter": "geenensp"
        }
    ],
    "3824169": [
        {
            "dateadded": "2026-04-17 07:37:08 UTC",
            "url": "https://city-park6.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824169/",
            "reporter": "anonymous"
        }
    ],
    "3824168": [
        {
            "dateadded": "2026-04-17 07:33:21 UTC",
            "url": "http://222.127.154.48:51949/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824168/",
            "reporter": "geenensp"
        }
    ],
    "3824167": [
        {
            "dateadded": "2026-04-17 07:32:17 UTC",
            "url": "http://14.157.83.132:54022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:51:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824167/",
            "reporter": "geenensp"
        }
    ],
    "3824166": [
        {
            "dateadded": "2026-04-17 07:31:07 UTC",
            "url": "https://gas-station5.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824166/",
            "reporter": "anonymous"
        }
    ],
    "3824164": [
        {
            "dateadded": "2026-04-17 07:30:18 UTC",
            "url": "http://27.207.140.19:58527/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824164/",
            "reporter": "geenensp"
        }
    ],
    "3824165": [
        {
            "dateadded": "2026-04-17 07:30:18 UTC",
            "url": "http://42.239.188.6:58845/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:51:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824165/",
            "reporter": "geenensp"
        }
    ],
    "3824163": [
        {
            "dateadded": "2026-04-17 07:26:28 UTC",
            "url": "http://36.69.84.241:56956/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824163/",
            "reporter": "geenensp"
        }
    ],
    "3824162": [
        {
            "dateadded": "2026-04-17 07:26:10 UTC",
            "url": "https://auto-parts4.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824162/",
            "reporter": "anonymous"
        }
    ],
    "3824161": [
        {
            "dateadded": "2026-04-17 07:21:13 UTC",
            "url": "https://road-trip3.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824161/",
            "reporter": "anonymous"
        }
    ],
    "3824159": [
        {
            "dateadded": "2026-04-17 07:19:24 UTC",
            "url": "http://42.228.245.139:33722/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824159/",
            "reporter": "geenensp"
        }
    ],
    "3824160": [
        {
            "dateadded": "2026-04-17 07:19:24 UTC",
            "url": "http://115.59.34.70:35711/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:23:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824160/",
            "reporter": "geenensp"
        }
    ],
    "3824158": [
        {
            "dateadded": "2026-04-17 07:17:21 UTC",
            "url": "http://42.230.18.228:37422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824158/",
            "reporter": "geenensp"
        }
    ],
    "3824157": [
        {
            "dateadded": "2026-04-17 07:17:07 UTC",
            "url": "https://fast-drive2.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824157/",
            "reporter": "anonymous"
        }
    ],
    "3824156": [
        {
            "dateadded": "2026-04-17 07:14:13 UTC",
            "url": "https://car-rental1.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824156/",
            "reporter": "anonymous"
        }
    ],
    "3824155": [
        {
            "dateadded": "2026-04-17 07:09:25 UTC",
            "url": "http://222.127.154.48:51949/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824155/",
            "reporter": "geenensp"
        }
    ],
    "3824154": [
        {
            "dateadded": "2026-04-17 07:04:07 UTC",
            "url": "https://media-player6.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 07:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824154/",
            "reporter": "anonymous"
        }
    ],
    "3824153": [
        {
            "dateadded": "2026-04-17 06:58:13 UTC",
            "url": "https://sound-track5.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824153/",
            "reporter": "anonymous"
        }
    ],
    "3824152": [
        {
            "dateadded": "2026-04-17 06:58:07 UTC",
            "url": "http://85.215.159.4:11029/stub.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824152/",
            "reporter": "vxvault"
        }
    ],
    "3824151": [
        {
            "dateadded": "2026-04-17 06:56:16 UTC",
            "url": "http://123.129.135.1:54465/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:49:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824151/",
            "reporter": "geenensp"
        }
    ],
    "3824150": [
        {
            "dateadded": "2026-04-17 06:52:34 UTC",
            "url": "http://42.228.245.139:33722/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:52:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824150/",
            "reporter": "geenensp"
        }
    ],
    "3824149": [
        {
            "dateadded": "2026-04-17 06:52:07 UTC",
            "url": "https://video-clip4.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824149/",
            "reporter": "anonymous"
        }
    ],
    "3824148": [
        {
            "dateadded": "2026-04-17 06:47:13 UTC",
            "url": "https://picture-book3.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824148/",
            "reporter": "anonymous"
        }
    ],
    "3824147": [
        {
            "dateadded": "2026-04-17 06:42:21 UTC",
            "url": "http://115.49.28.13:58215/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:33:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824147/",
            "reporter": "geenensp"
        }
    ],
    "3824146": [
        {
            "dateadded": "2026-04-17 06:41:09 UTC",
            "url": "https://image-zoom2.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824146/",
            "reporter": "anonymous"
        }
    ],
    "3824145": [
        {
            "dateadded": "2026-04-17 06:36:21 UTC",
            "url": "http://123.10.230.129:39176/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824145/",
            "reporter": "geenensp"
        }
    ],
    "3824144": [
        {
            "dateadded": "2026-04-17 06:35:11 UTC",
            "url": "https://photo-frame1.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824144/",
            "reporter": "anonymous"
        }
    ],
    "3824143": [
        {
            "dateadded": "2026-04-17 06:31:25 UTC",
            "url": "http://123.129.135.1:54465/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:08:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824143/",
            "reporter": "geenensp"
        }
    ],
    "3824142": [
        {
            "dateadded": "2026-04-17 06:31:07 UTC",
            "url": "http://64.89.163.230/Ventrilo.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "ZigClipper"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824142/",
            "reporter": "abuse_ch"
        }
    ],
    "3824141": [
        {
            "dateadded": "2026-04-17 06:30:14 UTC",
            "url": "https://smart-door6.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824141/",
            "reporter": "anonymous"
        }
    ],
    "3824140": [
        {
            "dateadded": "2026-04-17 06:25:15 UTC",
            "url": "https://water-pipe5.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824140/",
            "reporter": "anonymous"
        }
    ],
    "3824139": [
        {
            "dateadded": "2026-04-17 06:23:28 UTC",
            "url": "http://182.117.50.21:58129/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:54:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824139/",
            "reporter": "geenensp"
        }
    ],
    "3824138": [
        {
            "dateadded": "2026-04-17 06:19:12 UTC",
            "url": "https://garden-view4.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824138/",
            "reporter": "anonymous"
        }
    ],
    "3824136": [
        {
            "dateadded": "2026-04-17 06:16:28 UTC",
            "url": "https://gemini-console.com/install.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824136/",
            "reporter": "ninjacatcher"
        }
    ],
    "3824137": [
        {
            "dateadded": "2026-04-17 06:16:28 UTC",
            "url": "https://install-claude.com/install.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824137/",
            "reporter": "ninjacatcher"
        }
    ],
    "3824135": [
        {
            "dateadded": "2026-04-17 06:16:12 UTC",
            "url": "http://115.56.12.227:60768/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:10:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824135/",
            "reporter": "geenensp"
        }
    ],
    "3824134": [
        {
            "dateadded": "2026-04-17 06:15:27 UTC",
            "url": "https://everycarebd.com/imagefre9003.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824134/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3824133": [
        {
            "dateadded": "2026-04-17 06:15:14 UTC",
            "url": "https://connect.kexlore.cfd/ScreenConnect.ClientSetup.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824133/",
            "reporter": "anonymous"
        }
    ],
    "3824132": [
        {
            "dateadded": "2026-04-17 06:14:13 UTC",
            "url": "https://repair-work3.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824132/",
            "reporter": "anonymous"
        }
    ],
    "3824131": [
        {
            "dateadded": "2026-04-17 06:10:20 UTC",
            "url": "http://123.10.230.129:39176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824131/",
            "reporter": "geenensp"
        }
    ],
    "3824130": [
        {
            "dateadded": "2026-04-17 06:09:18 UTC",
            "url": "http://42.227.39.66:34917/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:43:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824130/",
            "reporter": "geenensp"
        }
    ],
    "3824129": [
        {
            "dateadded": "2026-04-17 06:08:07 UTC",
            "url": "https://clean-house2.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824129/",
            "reporter": "anonymous"
        }
    ],
    "3824128": [
        {
            "dateadded": "2026-04-17 06:02:16 UTC",
            "url": "http://42.227.39.66:34917/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824128/",
            "reporter": "geenensp"
        }
    ],
    "3824127": [
        {
            "dateadded": "2026-04-17 06:02:15 UTC",
            "url": "https://home-service1.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824127/",
            "reporter": "anonymous"
        }
    ],
    "3824126": [
        {
            "dateadded": "2026-04-17 06:01:16 UTC",
            "url": "http://115.59.34.70:35711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824126/",
            "reporter": "geenensp"
        }
    ],
    "3824125": [
        {
            "dateadded": "2026-04-17 05:57:12 UTC",
            "url": "https://desk-folder6.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824125/",
            "reporter": "anonymous"
        }
    ],
    "3824124": [
        {
            "dateadded": "2026-04-17 05:51:20 UTC",
            "url": "http://115.56.12.227:60768/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 12:04:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824124/",
            "reporter": "geenensp"
        }
    ],
    "3824123": [
        {
            "dateadded": "2026-04-17 05:51:11 UTC",
            "url": "https://glue-stick5.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824123/",
            "reporter": "anonymous"
        }
    ],
    "3824122": [
        {
            "dateadded": "2026-04-17 05:46:11 UTC",
            "url": "https://white-board4.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824122/",
            "reporter": "anonymous"
        }
    ],
    "3824121": [
        {
            "dateadded": "2026-04-17 05:40:09 UTC",
            "url": "https://black-marker3.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824121/",
            "reporter": "anonymous"
        }
    ],
    "3824120": [
        {
            "dateadded": "2026-04-17 05:34:14 UTC",
            "url": "https://pencil-case2.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824120/",
            "reporter": "anonymous"
        }
    ],
    "3824119": [
        {
            "dateadded": "2026-04-17 05:33:17 UTC",
            "url": "http://123.11.78.92:60415/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824119/",
            "reporter": "geenensp"
        }
    ],
    "3824118": [
        {
            "dateadded": "2026-04-17 05:28:13 UTC",
            "url": "https://office-paper1.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824118/",
            "reporter": "anonymous"
        }
    ],
    "3824117": [
        {
            "dateadded": "2026-04-17 05:28:06 UTC",
            "url": "http://182.117.50.97:40062/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:46:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824117/",
            "reporter": "geenensp"
        }
    ],
    "3824116": [
        {
            "dateadded": "2026-04-17 05:24:11 UTC",
            "url": "https://local-event6.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824116/",
            "reporter": "anonymous"
        }
    ],
    "3824115": [
        {
            "dateadded": "2026-04-17 05:18:12 UTC",
            "url": "https://trip-advisor5.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824115/",
            "reporter": "anonymous"
        }
    ],
    "3824114": [
        {
            "dateadded": "2026-04-17 05:12:14 UTC",
            "url": "https://beach-resort4.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824114/",
            "reporter": "anonymous"
        }
    ],
    "3824113": [
        {
            "dateadded": "2026-04-17 05:06:15 UTC",
            "url": "https://tourist-map3.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:06:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824113/",
            "reporter": "anonymous"
        }
    ],
    "3824111": [
        {
            "dateadded": "2026-04-17 05:05:23 UTC",
            "url": "http://222.220.145.182:46710/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:53:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824111/",
            "reporter": "geenensp"
        }
    ],
    "3824112": [
        {
            "dateadded": "2026-04-17 05:05:23 UTC",
            "url": "http://222.220.145.182:46710/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:54:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824112/",
            "reporter": "geenensp"
        }
    ],
    "3824110": [
        {
            "dateadded": "2026-04-17 05:03:20 UTC",
            "url": "http://182.117.50.97:40062/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 18:04:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824110/",
            "reporter": "geenensp"
        }
    ],
    "3824109": [
        {
            "dateadded": "2026-04-17 05:00:11 UTC",
            "url": "https://hotel-booking2.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 05:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824109/",
            "reporter": "anonymous"
        }
    ],
    "3824108": [
        {
            "dateadded": "2026-04-17 04:54:16 UTC",
            "url": "https://travel-guide1.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:54:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824108/",
            "reporter": "anonymous"
        }
    ],
    "3824107": [
        {
            "dateadded": "2026-04-17 04:50:12 UTC",
            "url": "https://final-grade6.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824107/",
            "reporter": "anonymous"
        }
    ],
    "3824106": [
        {
            "dateadded": "2026-04-17 04:49:20 UTC",
            "url": "http://70.31.230.2:36830/i",
            "url_status": "offline",
            "last_online": "2026-04-20 18:03:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824106/",
            "reporter": "geenensp"
        }
    ],
    "3824105": [
        {
            "dateadded": "2026-04-17 04:44:17 UTC",
            "url": "http://130.0.45.163:50787/i",
            "url_status": "offline",
            "last_online": "2026-04-24 11:50:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824105/",
            "reporter": "geenensp"
        }
    ],
    "3824104": [
        {
            "dateadded": "2026-04-17 04:44:13 UTC",
            "url": "https://class-report5.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824104/",
            "reporter": "anonymous"
        }
    ],
    "3824103": [
        {
            "dateadded": "2026-04-17 04:38:10 UTC",
            "url": "https://study-material4.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824103/",
            "reporter": "anonymous"
        }
    ],
    "3824102": [
        {
            "dateadded": "2026-04-17 04:33:12 UTC",
            "url": "https://online-course3.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824102/",
            "reporter": "anonymous"
        }
    ],
    "3824101": [
        {
            "dateadded": "2026-04-17 04:32:20 UTC",
            "url": "http://182.121.153.123:50902/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824101/",
            "reporter": "geenensp"
        }
    ],
    "3824100": [
        {
            "dateadded": "2026-04-17 04:29:13 UTC",
            "url": "http://42.179.11.151:39937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824100/",
            "reporter": "geenensp"
        }
    ],
    "3824099": [
        {
            "dateadded": "2026-04-17 04:27:15 UTC",
            "url": "https://student-form2.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824099/",
            "reporter": "anonymous"
        }
    ],
    "3824098": [
        {
            "dateadded": "2026-04-17 04:21:11 UTC",
            "url": "https://public-lesson1.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824098/",
            "reporter": "anonymous"
        }
    ],
    "3824097": [
        {
            "dateadded": "2026-04-17 04:16:08 UTC",
            "url": "https://byteash.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824097/",
            "reporter": "anonymous"
        }
    ],
    "3824096": [
        {
            "dateadded": "2026-04-17 04:15:20 UTC",
            "url": "http://130.0.45.163:50787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824096/",
            "reporter": "geenensp"
        }
    ],
    "3824095": [
        {
            "dateadded": "2026-04-17 04:11:06 UTC",
            "url": "https://qu4nt-panel.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824095/",
            "reporter": "anonymous"
        }
    ],
    "3824094": [
        {
            "dateadded": "2026-04-17 04:10:11 UTC",
            "url": "http://123.189.192.153:49373/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:38:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824094/",
            "reporter": "geenensp"
        }
    ],
    "3824093": [
        {
            "dateadded": "2026-04-17 04:06:12 UTC",
            "url": "http://221.202.19.0:59578/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:50:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824093/",
            "reporter": "geenensp"
        }
    ],
    "3824092": [
        {
            "dateadded": "2026-04-17 04:05:10 UTC",
            "url": "https://arraynotifier.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824092/",
            "reporter": "anonymous"
        }
    ],
    "3824091": [
        {
            "dateadded": "2026-04-17 04:00:11 UTC",
            "url": "https://28mp.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 04:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824091/",
            "reporter": "anonymous"
        }
    ],
    "3824090": [
        {
            "dateadded": "2026-04-17 03:59:19 UTC",
            "url": "http://27.204.230.251:52904/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:59:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824090/",
            "reporter": "geenensp"
        }
    ],
    "3824089": [
        {
            "dateadded": "2026-04-17 03:54:09 UTC",
            "url": "https://jhknytxr.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824089/",
            "reporter": "anonymous"
        }
    ],
    "3824088": [
        {
            "dateadded": "2026-04-17 03:51:13 UTC",
            "url": "http://123.5.169.164:45106/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:06:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824088/",
            "reporter": "geenensp"
        }
    ],
    "3824087": [
        {
            "dateadded": "2026-04-17 03:47:09 UTC",
            "url": "https://densefro.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824087/",
            "reporter": "anonymous"
        }
    ],
    "3824086": [
        {
            "dateadded": "2026-04-17 03:43:21 UTC",
            "url": "http://60.19.222.68:60666/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:52:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824086/",
            "reporter": "geenensp"
        }
    ],
    "3824085": [
        {
            "dateadded": "2026-04-17 03:42:08 UTC",
            "url": "https://167lo.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824085/",
            "reporter": "anonymous"
        }
    ],
    "3824084": [
        {
            "dateadded": "2026-04-17 03:38:19 UTC",
            "url": "http://123.8.24.231:43022/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824084/",
            "reporter": "geenensp"
        }
    ],
    "3824083": [
        {
            "dateadded": "2026-04-17 03:36:06 UTC",
            "url": "https://qpp9.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824083/",
            "reporter": "anonymous"
        }
    ],
    "3824082": [
        {
            "dateadded": "2026-04-17 03:35:14 UTC",
            "url": "http://221.202.19.0:59578/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:20:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824082/",
            "reporter": "geenensp"
        }
    ],
    "3824081": [
        {
            "dateadded": "2026-04-17 03:30:13 UTC",
            "url": "https://torr3nt-layer.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824081/",
            "reporter": "anonymous"
        }
    ],
    "3824080": [
        {
            "dateadded": "2026-04-17 03:30:12 UTC",
            "url": "http://123.14.99.250:42926/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824080/",
            "reporter": "geenensp"
        }
    ],
    "3824079": [
        {
            "dateadded": "2026-04-17 03:27:18 UTC",
            "url": "http://115.56.156.165:37041/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824079/",
            "reporter": "geenensp"
        }
    ],
    "3824078": [
        {
            "dateadded": "2026-04-17 03:25:15 UTC",
            "url": "https://star-ring.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824078/",
            "reporter": "anonymous"
        }
    ],
    "3824077": [
        {
            "dateadded": "2026-04-17 03:24:20 UTC",
            "url": "http://27.204.230.251:52904/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824077/",
            "reporter": "geenensp"
        }
    ],
    "3824076": [
        {
            "dateadded": "2026-04-17 03:20:14 UTC",
            "url": "https://soft-cov.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824076/",
            "reporter": "anonymous"
        }
    ],
    "3824075": [
        {
            "dateadded": "2026-04-17 03:19:17 UTC",
            "url": "http://60.19.222.68:60666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824075/",
            "reporter": "geenensp"
        }
    ],
    "3824074": [
        {
            "dateadded": "2026-04-17 03:18:17 UTC",
            "url": "http://39.64.242.58:34765/i",
            "url_status": "offline",
            "last_online": "2026-04-19 10:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824074/",
            "reporter": "geenensp"
        }
    ],
    "3824073": [
        {
            "dateadded": "2026-04-17 03:13:11 UTC",
            "url": "http://123.8.24.231:43022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824073/",
            "reporter": "geenensp"
        }
    ],
    "3824072": [
        {
            "dateadded": "2026-04-17 03:13:09 UTC",
            "url": "https://spedus.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824072/",
            "reporter": "anonymous"
        }
    ],
    "3824071": [
        {
            "dateadded": "2026-04-17 03:08:08 UTC",
            "url": "https://vvood-forge.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824071/",
            "reporter": "anonymous"
        }
    ],
    "3824070": [
        {
            "dateadded": "2026-04-17 03:02:07 UTC",
            "url": "https://393llqb.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 03:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824070/",
            "reporter": "anonymous"
        }
    ],
    "3824069": [
        {
            "dateadded": "2026-04-17 02:57:08 UTC",
            "url": "https://kel-venor.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824069/",
            "reporter": "anonymous"
        }
    ],
    "3824068": [
        {
            "dateadded": "2026-04-17 02:54:07 UTC",
            "url": "https://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 07:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824068/",
            "reporter": "anonymous"
        }
    ],
    "3824067": [
        {
            "dateadded": "2026-04-17 02:50:11 UTC",
            "url": "https://geo-4uth.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824067/",
            "reporter": "anonymous"
        }
    ],
    "3824066": [
        {
            "dateadded": "2026-04-17 02:42:22 UTC",
            "url": "http://175.107.205.156:59443/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824066/",
            "reporter": "botnetkiller"
        }
    ],
    "3824065": [
        {
            "dateadded": "2026-04-17 02:41:08 UTC",
            "url": "https://norlithix3.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824065/",
            "reporter": "anonymous"
        }
    ],
    "3824064": [
        {
            "dateadded": "2026-04-17 02:35:08 UTC",
            "url": "https://491ptjh.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824064/",
            "reporter": "anonymous"
        }
    ],
    "3824063": [
        {
            "dateadded": "2026-04-17 02:30:19 UTC",
            "url": "http://110.39.226.242:37872/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824063/",
            "reporter": "geenensp"
        }
    ],
    "3824062": [
        {
            "dateadded": "2026-04-17 02:29:07 UTC",
            "url": "https://pa5tu-drive.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824062/",
            "reporter": "anonymous"
        }
    ],
    "3824061": [
        {
            "dateadded": "2026-04-17 02:25:10 UTC",
            "url": "http://221.15.246.161:51320/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824061/",
            "reporter": "geenensp"
        }
    ],
    "3824060": [
        {
            "dateadded": "2026-04-17 02:23:15 UTC",
            "url": "https://fernretai.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824060/",
            "reporter": "anonymous"
        }
    ],
    "3824059": [
        {
            "dateadded": "2026-04-17 02:21:15 UTC",
            "url": "http://45.135.193.114/bins/zswap_shrinkd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824059/",
            "reporter": "botnetkiller"
        }
    ],
    "3824049": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/jbd2_sda1d",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824049/",
            "reporter": "botnetkiller"
        }
    ],
    "3824050": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/ksoftirqd0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824050/",
            "reporter": "botnetkiller"
        }
    ],
    "3824051": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/ecryptfsd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824051/",
            "reporter": "botnetkiller"
        }
    ],
    "3824052": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/cfg80211d",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824052/",
            "reporter": "botnetkiller"
        }
    ],
    "3824053": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/devfreq_wq",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824053/",
            "reporter": "botnetkiller"
        }
    ],
    "3824054": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/edac_polyd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824054/",
            "reporter": "botnetkiller"
        }
    ],
    "3824055": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/kswapd0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824055/",
            "reporter": "botnetkiller"
        }
    ],
    "3824056": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/xfsaild_sda",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824056/",
            "reporter": "botnetkiller"
        }
    ],
    "3824057": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/kblockd0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824057/",
            "reporter": "botnetkiller"
        }
    ],
    "3824058": [
        {
            "dateadded": "2026-04-17 02:21:05 UTC",
            "url": "http://45.135.193.114/bins/scsi_tmf_0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824058/",
            "reporter": "botnetkiller"
        }
    ],
    "3824046": [
        {
            "dateadded": "2026-04-17 02:21:04 UTC",
            "url": "http://45.135.193.114/bins/rcuop_0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824046/",
            "reporter": "botnetkiller"
        }
    ],
    "3824047": [
        {
            "dateadded": "2026-04-17 02:21:04 UTC",
            "url": "http://45.135.193.114/bins/bioset0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824047/",
            "reporter": "botnetkiller"
        }
    ],
    "3824048": [
        {
            "dateadded": "2026-04-17 02:21:04 UTC",
            "url": "http://45.135.193.114/bins/kworker_u8",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824048/",
            "reporter": "botnetkiller"
        }
    ],
    "3824045": [
        {
            "dateadded": "2026-04-17 02:18:07 UTC",
            "url": "https://sharpsummit.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824045/",
            "reporter": "anonymous"
        }
    ],
    "3824044": [
        {
            "dateadded": "2026-04-17 02:12:16 UTC",
            "url": "http://182.126.127.186:54786/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:46:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824044/",
            "reporter": "geenensp"
        }
    ],
    "3824043": [
        {
            "dateadded": "2026-04-17 02:12:06 UTC",
            "url": "https://9waxfs6b.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824043/",
            "reporter": "anonymous"
        }
    ],
    "3824041": [
        {
            "dateadded": "2026-04-17 02:07:21 UTC",
            "url": "http://45.9.156.250/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 21:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824041/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824042": [
        {
            "dateadded": "2026-04-17 02:07:21 UTC",
            "url": "http://45.9.156.250/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-22 18:27:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824042/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824036": [
        {
            "dateadded": "2026-04-17 02:07:19 UTC",
            "url": "http://45.9.156.250/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-22 17:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824036/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824037": [
        {
            "dateadded": "2026-04-17 02:07:19 UTC",
            "url": "http://45.9.156.250/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-22 17:31:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824037/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824038": [
        {
            "dateadded": "2026-04-17 02:07:19 UTC",
            "url": "http://45.9.156.250/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-22 17:59:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824038/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824039": [
        {
            "dateadded": "2026-04-17 02:07:19 UTC",
            "url": "http://45.9.156.250/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-22 17:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824039/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824040": [
        {
            "dateadded": "2026-04-17 02:07:19 UTC",
            "url": "http://45.9.156.250/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-22 16:44:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824040/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824034": [
        {
            "dateadded": "2026-04-17 02:07:18 UTC",
            "url": "http://45.9.156.250/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-22 18:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824034/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824035": [
        {
            "dateadded": "2026-04-17 02:07:18 UTC",
            "url": "http://45.9.156.250/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-22 17:48:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824035/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824033": [
        {
            "dateadded": "2026-04-17 02:07:14 UTC",
            "url": "http://45.9.156.250/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-22 17:58:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824033/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3824032": [
        {
            "dateadded": "2026-04-17 02:06:07 UTC",
            "url": "https://sketc-gate.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824032/",
            "reporter": "anonymous"
        }
    ],
    "3824031": [
        {
            "dateadded": "2026-04-17 02:05:24 UTC",
            "url": "http://118.253.80.63:48921/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824031/",
            "reporter": "geenensp"
        }
    ],
    "3824030": [
        {
            "dateadded": "2026-04-17 02:02:08 UTC",
            "url": "https://velvenor9.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 02:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824030/",
            "reporter": "anonymous"
        }
    ],
    "3824029": [
        {
            "dateadded": "2026-04-17 01:59:10 UTC",
            "url": "http://27.215.181.173:41732/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824029/",
            "reporter": "geenensp"
        }
    ],
    "3824028": [
        {
            "dateadded": "2026-04-17 01:55:11 UTC",
            "url": "https://zme1roui.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824028/",
            "reporter": "anonymous"
        }
    ],
    "3824027": [
        {
            "dateadded": "2026-04-17 01:50:09 UTC",
            "url": "https://solcore0ix.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824027/",
            "reporter": "anonymous"
        }
    ],
    "3824026": [
        {
            "dateadded": "2026-04-17 01:44:07 UTC",
            "url": "https://velspire3on.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824026/",
            "reporter": "anonymous"
        }
    ],
    "3824025": [
        {
            "dateadded": "2026-04-17 01:42:19 UTC",
            "url": "http://115.59.90.38:41123/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:24:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824025/",
            "reporter": "geenensp"
        }
    ],
    "3824024": [
        {
            "dateadded": "2026-04-17 01:40:10 UTC",
            "url": "https://fsefumza.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824024/",
            "reporter": "anonymous"
        }
    ],
    "3824023": [
        {
            "dateadded": "2026-04-17 01:39:12 UTC",
            "url": "http://118.253.80.63:48921/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:12:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824023/",
            "reporter": "geenensp"
        }
    ],
    "3824022": [
        {
            "dateadded": "2026-04-17 01:37:09 UTC",
            "url": "http://42.228.247.124:44677/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:42:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824022/",
            "reporter": "geenensp"
        }
    ],
    "3824021": [
        {
            "dateadded": "2026-04-17 01:33:15 UTC",
            "url": "http://123.12.23.184:58755/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824021/",
            "reporter": "geenensp"
        }
    ],
    "3824020": [
        {
            "dateadded": "2026-04-17 01:33:09 UTC",
            "url": "https://labeltheory.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824020/",
            "reporter": "anonymous"
        }
    ],
    "3824019": [
        {
            "dateadded": "2026-04-17 01:28:07 UTC",
            "url": "https://solcorear.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824019/",
            "reporter": "anonymous"
        }
    ],
    "3824018": [
        {
            "dateadded": "2026-04-17 01:22:08 UTC",
            "url": "https://zen-nexos.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824018/",
            "reporter": "anonymous"
        }
    ],
    "3824017": [
        {
            "dateadded": "2026-04-17 01:20:16 UTC",
            "url": "http://115.50.190.220:36078/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:02:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824017/",
            "reporter": "geenensp"
        }
    ],
    "3824016": [
        {
            "dateadded": "2026-04-17 01:18:18 UTC",
            "url": "http://115.52.23.125:53054/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:52:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824016/",
            "reporter": "geenensp"
        }
    ],
    "3824015": [
        {
            "dateadded": "2026-04-17 01:16:09 UTC",
            "url": "http://110.37.123.237:38811/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824015/",
            "reporter": "geenensp"
        }
    ],
    "3824014": [
        {
            "dateadded": "2026-04-17 01:16:08 UTC",
            "url": "https://rtrr.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824014/",
            "reporter": "anonymous"
        }
    ],
    "3824013": [
        {
            "dateadded": "2026-04-17 01:10:19 UTC",
            "url": "http://183.214.149.164:39548/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:29:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824013/",
            "reporter": "geenensp"
        }
    ],
    "3824012": [
        {
            "dateadded": "2026-04-17 01:10:10 UTC",
            "url": "https://d43mon-field.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824012/",
            "reporter": "anonymous"
        }
    ],
    "3824011": [
        {
            "dateadded": "2026-04-17 01:06:22 UTC",
            "url": "http://115.59.90.38:41123/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824011/",
            "reporter": "geenensp"
        }
    ],
    "3824010": [
        {
            "dateadded": "2026-04-17 01:05:09 UTC",
            "url": "https://mnwgjp.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 01:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824010/",
            "reporter": "anonymous"
        }
    ],
    "3824009": [
        {
            "dateadded": "2026-04-17 00:59:07 UTC",
            "url": "https://alt-nirnbl.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824009/",
            "reporter": "anonymous"
        }
    ],
    "3824008": [
        {
            "dateadded": "2026-04-17 00:54:08 UTC",
            "url": "https://listeshap.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824008/",
            "reporter": "anonymous"
        }
    ],
    "3824007": [
        {
            "dateadded": "2026-04-17 00:48:08 UTC",
            "url": "https://ae5z56.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824007/",
            "reporter": "anonymous"
        }
    ],
    "3824006": [
        {
            "dateadded": "2026-04-17 00:47:21 UTC",
            "url": "http://42.230.18.228:37422/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:14:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824006/",
            "reporter": "geenensp"
        }
    ],
    "3824005": [
        {
            "dateadded": "2026-04-17 00:43:07 UTC",
            "url": "https://castexport.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824005/",
            "reporter": "anonymous"
        }
    ],
    "3824004": [
        {
            "dateadded": "2026-04-17 00:37:07 UTC",
            "url": "https://echoblend.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824004/",
            "reporter": "anonymous"
        }
    ],
    "3824003": [
        {
            "dateadded": "2026-04-17 00:36:06 UTC",
            "url": "http://182.124.211.136:40481/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824003/",
            "reporter": "geenensp"
        }
    ],
    "3824002": [
        {
            "dateadded": "2026-04-17 00:32:07 UTC",
            "url": "https://dynamicsoun.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824002/",
            "reporter": "anonymous"
        }
    ],
    "3824001": [
        {
            "dateadded": "2026-04-17 00:26:08 UTC",
            "url": "https://vaq4sdju.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824001/",
            "reporter": "anonymous"
        }
    ],
    "3824000": [
        {
            "dateadded": "2026-04-17 00:24:09 UTC",
            "url": "https://github.com/hellenkamau197-gif/185/raw/refs/heads/main/4/9.json",
            "url_status": "offline",
            "last_online": "2026-04-17 06:46:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3824000/",
            "reporter": "tcains1"
        }
    ],
    "3823999": [
        {
            "dateadded": "2026-04-17 00:24:08 UTC",
            "url": "https://raw.githubusercontent.com/hellenkamau197-gif/185/refs/heads/main/4/9.json",
            "url_status": "offline",
            "last_online": "2026-04-17 10:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823999/",
            "reporter": "tcains1"
        }
    ],
    "3823998": [
        {
            "dateadded": "2026-04-17 00:22:20 UTC",
            "url": "http://174.34.242.49:40798/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:28:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823998/",
            "reporter": "geenensp"
        }
    ],
    "3823997": [
        {
            "dateadded": "2026-04-17 00:21:18 UTC",
            "url": "http://123.9.78.29:59508/i",
            "url_status": "offline",
            "last_online": "2026-04-17 00:21:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823997/",
            "reporter": "geenensp"
        }
    ],
    "3823996": [
        {
            "dateadded": "2026-04-17 00:20:13 UTC",
            "url": "http://123.173.90.30:52537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:28:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823996/",
            "reporter": "geenensp"
        }
    ],
    "3823995": [
        {
            "dateadded": "2026-04-17 00:20:09 UTC",
            "url": "https://peakree.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823995/",
            "reporter": "anonymous"
        }
    ],
    "3823994": [
        {
            "dateadded": "2026-04-17 00:19:16 UTC",
            "url": "http://27.223.252.123:55034/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:47:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823994/",
            "reporter": "geenensp"
        }
    ],
    "3823993": [
        {
            "dateadded": "2026-04-17 00:19:15 UTC",
            "url": "http://185.9.139.117:56264/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823993/",
            "reporter": "geenensp"
        }
    ],
    "3823992": [
        {
            "dateadded": "2026-04-17 00:15:22 UTC",
            "url": "http://182.124.211.136:40481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:19:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823992/",
            "reporter": "geenensp"
        }
    ],
    "3823991": [
        {
            "dateadded": "2026-04-17 00:14:08 UTC",
            "url": "https://roughengine.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823991/",
            "reporter": "anonymous"
        }
    ],
    "3823990": [
        {
            "dateadded": "2026-04-17 00:09:10 UTC",
            "url": "https://valu-span.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823990/",
            "reporter": "anonymous"
        }
    ],
    "3823988": [
        {
            "dateadded": "2026-04-17 00:07:07 UTC",
            "url": "https://github.com/hellenkamau197-gif/3/raw/refs/heads/main/4/8.log",
            "url_status": "offline",
            "last_online": "2026-04-17 10:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823988/",
            "reporter": "tcains1"
        }
    ],
    "3823989": [
        {
            "dateadded": "2026-04-17 00:07:07 UTC",
            "url": "https://raw.githubusercontent.com/hellenkamau197-gif/3/refs/heads/main/4/7.log",
            "url_status": "offline",
            "last_online": "2026-04-17 06:55:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823989/",
            "reporter": "tcains1"
        }
    ],
    "3823986": [
        {
            "dateadded": "2026-04-17 00:07:06 UTC",
            "url": "https://github.com/hellenkamau197-gif/3/raw/refs/heads/main/4/7.log",
            "url_status": "offline",
            "last_online": "2026-04-17 10:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823986/",
            "reporter": "tcains1"
        }
    ],
    "3823987": [
        {
            "dateadded": "2026-04-17 00:07:06 UTC",
            "url": "https://raw.githubusercontent.com/hellenkamau197-gif/3/refs/heads/main/4/8.log",
            "url_status": "offline",
            "last_online": "2026-04-17 06:16:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823987/",
            "reporter": "tcains1"
        }
    ],
    "3823985": [
        {
            "dateadded": "2026-04-17 00:04:13 UTC",
            "url": "https://lummesh8or.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823985/",
            "reporter": "anonymous"
        }
    ],
    "3823984": [
        {
            "dateadded": "2026-04-17 00:01:18 UTC",
            "url": "https://github.com/alinaitweshalifu28-netizen/2/raw/refs/heads/main/1/4.log",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823984/",
            "reporter": "tcains1"
        }
    ],
    "3823983": [
        {
            "dateadded": "2026-04-17 00:01:17 UTC",
            "url": "https://raw.githubusercontent.com/alinaitweshalifu28-netizen/2/refs/heads/main/1/4.log",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823983/",
            "reporter": "tcains1"
        }
    ],
    "3823982": [
        {
            "dateadded": "2026-04-17 00:01:16 UTC",
            "url": "https://raw.githubusercontent.com/alinaitweshalifu28-netizen/2/refs/heads/main/1/3.log",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823982/",
            "reporter": "tcains1"
        }
    ],
    "3823981": [
        {
            "dateadded": "2026-04-17 00:01:06 UTC",
            "url": "https://github.com/alinaitweshalifu28-netizen/2/raw/refs/heads/main/1/3.log",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823981/",
            "reporter": "tcains1"
        }
    ],
    "3823980": [
        {
            "dateadded": "2026-04-16 23:57:12 UTC",
            "url": "https://driv3-array.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823980/",
            "reporter": "anonymous"
        }
    ],
    "3823977": [
        {
            "dateadded": "2026-04-16 23:56:14 UTC",
            "url": "https://github.com/Tursin-xD/TheDiscordbot/raw/refs/heads/main/dressmakery/Discordbot-The-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823977/",
            "reporter": "tcains1"
        }
    ],
    "3823978": [
        {
            "dateadded": "2026-04-16 23:56:14 UTC",
            "url": "https://github.com/Tursin-xD/DontbeTerm/raw/refs/heads/main/renderer/Term_Dontbe_3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823978/",
            "reporter": "tcains1"
        }
    ],
    "3823979": [
        {
            "dateadded": "2026-04-16 23:56:14 UTC",
            "url": "https://github.com/Itzmesultan01/eventpipe/raw/refs/heads/main/src/formats/Software_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823979/",
            "reporter": "tcains1"
        }
    ],
    "3823974": [
        {
            "dateadded": "2026-04-16 23:56:13 UTC",
            "url": "https://raw.githubusercontent.com/Naveenkm007/restaurant-management-saas/refs/heads/main/frontend/src/lib/management-restaurant-saas-superinnocent.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823974/",
            "reporter": "tcains1"
        }
    ],
    "3823975": [
        {
            "dateadded": "2026-04-16 23:56:13 UTC",
            "url": "https://raw.githubusercontent.com/Naveenkm007/Secure-Vault/refs/heads/main/node_modules/%40supabase/auth-ui-shared/dist/Vault_Secure_1.8-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823975/",
            "reporter": "tcains1"
        }
    ],
    "3823976": [
        {
            "dateadded": "2026-04-16 23:56:13 UTC",
            "url": "https://raw.githubusercontent.com/Tursin-xD/TheDiscordbot/refs/heads/main/dressmakery/Discordbot-The-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823976/",
            "reporter": "tcains1"
        }
    ],
    "3823972": [
        {
            "dateadded": "2026-04-16 23:56:12 UTC",
            "url": "https://github.com/Naveenkm007/SecureVault-Password-Manager/raw/refs/heads/main/node_modules/typescript/lib/tr/Password-Manager-Secure-Vault-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823972/",
            "reporter": "tcains1"
        }
    ],
    "3823973": [
        {
            "dateadded": "2026-04-16 23:56:12 UTC",
            "url": "https://raw.githubusercontent.com/Naveenkm007/SecureVault-Password-Manager/refs/heads/main/node_modules/typescript/lib/tr/Password-Manager-Secure-Vault-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823973/",
            "reporter": "tcains1"
        }
    ],
    "3823967": [
        {
            "dateadded": "2026-04-16 23:56:11 UTC",
            "url": "https://github.com/Naveenkm007/Secure-Vault/raw/refs/heads/main/node_modules/@supabase/auth-ui-shared/dist/Vault_Secure_1.8-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:57:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823967/",
            "reporter": "tcains1"
        }
    ],
    "3823968": [
        {
            "dateadded": "2026-04-16 23:56:11 UTC",
            "url": "https://github.com/Metasoftia/PortForwarder/raw/refs/heads/main/x64/Forwarder-Port-1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823968/",
            "reporter": "tcains1"
        }
    ],
    "3823969": [
        {
            "dateadded": "2026-04-16 23:56:11 UTC",
            "url": "https://raw.githubusercontent.com/dxdag5/gproxy-tool/refs/heads/main/bin/gproxy-tool-v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823969/",
            "reporter": "tcains1"
        }
    ],
    "3823970": [
        {
            "dateadded": "2026-04-16 23:56:11 UTC",
            "url": "https://raw.githubusercontent.com/Naveenkm007/spaceship-mcp/refs/heads/main/src/tools/mcp-spaceship-2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823970/",
            "reporter": "tcains1"
        }
    ],
    "3823971": [
        {
            "dateadded": "2026-04-16 23:56:11 UTC",
            "url": "https://raw.githubusercontent.com/Metasoftia/PortForwarder/refs/heads/main/x64/Forwarder-Port-1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823971/",
            "reporter": "tcains1"
        }
    ],
    "3823966": [
        {
            "dateadded": "2026-04-16 23:56:10 UTC",
            "url": "https://raw.githubusercontent.com/Tursin-xD/DontbeTerm/refs/heads/main/renderer/Term_Dontbe_3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823966/",
            "reporter": "tcains1"
        }
    ],
    "3823961": [
        {
            "dateadded": "2026-04-16 23:56:09 UTC",
            "url": "https://raw.githubusercontent.com/Tursin-xD/Thescriptstoroblox/refs/heads/main/gaiter/Software-v3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823961/",
            "reporter": "tcains1"
        }
    ],
    "3823962": [
        {
            "dateadded": "2026-04-16 23:56:09 UTC",
            "url": "https://github.com/dxdag5/gproxy-tool/raw/refs/heads/main/bin/gproxy-tool-v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823962/",
            "reporter": "tcains1"
        }
    ],
    "3823963": [
        {
            "dateadded": "2026-04-16 23:56:09 UTC",
            "url": "https://github.com/Tursin-xD/Thescriptstoroblox/raw/refs/heads/main/gaiter/Software-v3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823963/",
            "reporter": "tcains1"
        }
    ],
    "3823964": [
        {
            "dateadded": "2026-04-16 23:56:09 UTC",
            "url": "https://github.com/Naveenkm007/spaceship-mcp/raw/refs/heads/main/src/tools/mcp-spaceship-2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823964/",
            "reporter": "tcains1"
        }
    ],
    "3823965": [
        {
            "dateadded": "2026-04-16 23:56:09 UTC",
            "url": "https://github.com/Naveenkm007/restaurant-management-saas/raw/refs/heads/main/frontend/src/lib/management-restaurant-saas-superinnocent.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823965/",
            "reporter": "tcains1"
        }
    ],
    "3823958": [
        {
            "dateadded": "2026-04-16 23:56:08 UTC",
            "url": "https://raw.githubusercontent.com/Itzmesultan01/eventpipe/refs/heads/main/src/formats/Software_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823958/",
            "reporter": "tcains1"
        }
    ],
    "3823959": [
        {
            "dateadded": "2026-04-16 23:56:08 UTC",
            "url": "https://raw.githubusercontent.com/Naveenkm007/smart-tutor/refs/heads/main/src/contexts/tutor_smart_v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823959/",
            "reporter": "tcains1"
        }
    ],
    "3823960": [
        {
            "dateadded": "2026-04-16 23:56:08 UTC",
            "url": "https://github.com/Naveenkm007/smart-tutor/raw/refs/heads/main/src/contexts/tutor_smart_v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823960/",
            "reporter": "tcains1"
        }
    ],
    "3823957": [
        {
            "dateadded": "2026-04-16 23:54:25 UTC",
            "url": "http://123.9.78.29:59508/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823957/",
            "reporter": "geenensp"
        }
    ],
    "3823956": [
        {
            "dateadded": "2026-04-16 23:54:23 UTC",
            "url": "http://115.49.6.82:45474/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:03:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823956/",
            "reporter": "geenensp"
        }
    ],
    "3823954": [
        {
            "dateadded": "2026-04-16 23:54:21 UTC",
            "url": "http://123.11.207.106:54017/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:58:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823954/",
            "reporter": "geenensp"
        }
    ],
    "3823955": [
        {
            "dateadded": "2026-04-16 23:54:21 UTC",
            "url": "http://115.49.6.82:45474/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823955/",
            "reporter": "geenensp"
        }
    ],
    "3823953": [
        {
            "dateadded": "2026-04-16 23:54:20 UTC",
            "url": "http://174.34.242.49:40798/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823953/",
            "reporter": "geenensp"
        }
    ],
    "3823950": [
        {
            "dateadded": "2026-04-16 23:54:14 UTC",
            "url": "https://va11-route.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823950/",
            "reporter": "anonymous"
        }
    ],
    "3823951": [
        {
            "dateadded": "2026-04-16 23:54:14 UTC",
            "url": "https://github.com/JackFalan/WAS/raw/refs/heads/master/augurship/Software-v1.3-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823951/",
            "reporter": "tcains1"
        }
    ],
    "3823952": [
        {
            "dateadded": "2026-04-16 23:54:14 UTC",
            "url": "https://opt1-phase.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823952/",
            "reporter": "anonymous"
        }
    ],
    "3823949": [
        {
            "dateadded": "2026-04-16 23:54:09 UTC",
            "url": "https://30urtlmu.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823949/",
            "reporter": "anonymous"
        }
    ],
    "3823947": [
        {
            "dateadded": "2026-04-16 23:39:19 UTC",
            "url": "http://221.11.172.25:46543/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:36:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823947/",
            "reporter": "geenensp"
        }
    ],
    "3823948": [
        {
            "dateadded": "2026-04-16 23:39:19 UTC",
            "url": "http://182.119.198.222:51903/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:52:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823948/",
            "reporter": "geenensp"
        }
    ],
    "3823936": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://github.com/wndaalol/AssSlapBattle/raw/refs/heads/main/ontosophy/Battle_Ass_Slap_v2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823936/",
            "reporter": "tcains1"
        }
    ],
    "3823937": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://github.com/sandro-beep/Discord-Message-Forwarder/raw/refs/heads/main/septuplication/Discord-Forwarder-Message-v2.8-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823937/",
            "reporter": "tcains1"
        }
    ],
    "3823938": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://raw.githubusercontent.com/Jesusnnc/MTProxy/refs/heads/main/angiosporous/Proxy_MT_v2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823938/",
            "reporter": "tcains1"
        }
    ],
    "3823939": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://meta-5har.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823939/",
            "reporter": "anonymous"
        }
    ],
    "3823940": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://raw.githubusercontent.com/wndaalol/SlapBattlesGlove/refs/heads/main/backsword/Glove_Battles_Slap_v3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823940/",
            "reporter": "tcains1"
        }
    ],
    "3823941": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://github.com/wndaalol/lara-weeb/raw/refs/heads/main/bootstrap/cache/lara_weeb_3.9-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823941/",
            "reporter": "tcains1"
        }
    ],
    "3823942": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://github.com/Jesusnnc/MTProxy/raw/refs/heads/main/angiosporous/Proxy_MT_v2.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823942/",
            "reporter": "tcains1"
        }
    ],
    "3823943": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://tal-forgeal.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823943/",
            "reporter": "anonymous"
        }
    ],
    "3823944": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://raw.githubusercontent.com/wndaalol/AssSlapBattle/refs/heads/main/ontosophy/Battle_Ass_Slap_v2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823944/",
            "reporter": "tcains1"
        }
    ],
    "3823945": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://raw.githubusercontent.com/sandro-beep/Discord-Message-Forwarder/refs/heads/main/septuplication/Discord-Forwarder-Message-v2.8-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823945/",
            "reporter": "tcains1"
        }
    ],
    "3823946": [
        {
            "dateadded": "2026-04-16 23:39:18 UTC",
            "url": "https://raw.githubusercontent.com/wndaalol/lara-weeb/refs/heads/main/bootstrap/cache/lara_weeb_3.9-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823946/",
            "reporter": "tcains1"
        }
    ],
    "3823932": [
        {
            "dateadded": "2026-04-16 23:39:17 UTC",
            "url": "https://raw.githubusercontent.com/JackFalan/happyview/refs/heads/master/yow/Software_v2.0-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823932/",
            "reporter": "tcains1"
        }
    ],
    "3823933": [
        {
            "dateadded": "2026-04-16 23:39:17 UTC",
            "url": "https://github.com/saramc89mc/personal-website-template/raw/refs/heads/main/src/components/sections/About/personal_template_website_2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823933/",
            "reporter": "tcains1"
        }
    ],
    "3823934": [
        {
            "dateadded": "2026-04-16 23:39:17 UTC",
            "url": "https://github.com/XianLeeX/claude-api/raw/refs/heads/feat/manga-translator-mvp/ui/claude-api-Vespertiliones.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 14:49:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823934/",
            "reporter": "tcains1"
        }
    ],
    "3823935": [
        {
            "dateadded": "2026-04-16 23:39:17 UTC",
            "url": "https://raw.githubusercontent.com/billydagreat/vps-git/refs/heads/main/ansible/roles/watchdog/templates/git_vps_3.0-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823935/",
            "reporter": "tcains1"
        }
    ],
    "3823930": [
        {
            "dateadded": "2026-04-16 23:39:16 UTC",
            "url": "https://raw.githubusercontent.com/alecyi/cache-components-granular/refs/heads/main/components/layout/notebook/page/components-cache-granular-v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823930/",
            "reporter": "tcains1"
        }
    ],
    "3823931": [
        {
            "dateadded": "2026-04-16 23:39:16 UTC",
            "url": "https://raw.githubusercontent.com/wndaalol/DandyWorldHubUpdate/refs/heads/main/duodenocholecystostomy/Dandy_World_Hub_Update_3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823931/",
            "reporter": "tcains1"
        }
    ],
    "3823929": [
        {
            "dateadded": "2026-04-16 23:39:15 UTC",
            "url": "https://raw.githubusercontent.com/wndaalol/reflectshaders/refs/heads/main/ambulomancy/Software_3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823929/",
            "reporter": "tcains1"
        }
    ],
    "3823927": [
        {
            "dateadded": "2026-04-16 23:39:14 UTC",
            "url": "https://github.com/wndaalol/SlapBattlesGlove/raw/refs/heads/main/backsword/Glove_Battles_Slap_v3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823927/",
            "reporter": "tcains1"
        }
    ],
    "3823928": [
        {
            "dateadded": "2026-04-16 23:39:14 UTC",
            "url": "https://github.com/wndaalol/DandyWorldHubUpdate/raw/refs/heads/main/duodenocholecystostomy/Dandy_World_Hub_Update_3.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823928/",
            "reporter": "tcains1"
        }
    ],
    "3823926": [
        {
            "dateadded": "2026-04-16 23:39:13 UTC",
            "url": "https://raw.githubusercontent.com/invertebratekinanesthesia779/aios-core/refs/heads/main/tests/unit/squad/fixtures/invalid-squad/core-aios-1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823926/",
            "reporter": "tcains1"
        }
    ],
    "3823924": [
        {
            "dateadded": "2026-04-16 23:39:12 UTC",
            "url": "https://github.com/JackFalan/happyview/raw/refs/heads/master/yow/Software_v2.0-beta.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823924/",
            "reporter": "tcains1"
        }
    ],
    "3823925": [
        {
            "dateadded": "2026-04-16 23:39:12 UTC",
            "url": "https://github.com/billydagreat/vps-git/raw/refs/heads/main/ansible/roles/watchdog/templates/git_vps_3.0-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823925/",
            "reporter": "tcains1"
        }
    ],
    "3823922": [
        {
            "dateadded": "2026-04-16 23:39:11 UTC",
            "url": "https://github.com/alecyi/cache-components-granular/raw/refs/heads/main/components/layout/notebook/page/components-cache-granular-v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823922/",
            "reporter": "tcains1"
        }
    ],
    "3823923": [
        {
            "dateadded": "2026-04-16 23:39:11 UTC",
            "url": "https://github.com/GTA509FX/scrappe-tout/raw/refs/heads/main/tests/e2e/scrappe-tout-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823923/",
            "reporter": "tcains1"
        }
    ],
    "3823921": [
        {
            "dateadded": "2026-04-16 23:39:10 UTC",
            "url": "https://raw.githubusercontent.com/JackFalan/WAS/refs/heads/master/augurship/Software-v1.3-beta.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823921/",
            "reporter": "tcains1"
        }
    ],
    "3823919": [
        {
            "dateadded": "2026-04-16 23:39:09 UTC",
            "url": "https://github.com/invertebratekinanesthesia779/aios-core/raw/refs/heads/main/tests/unit/squad/fixtures/invalid-squad/core-aios-1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:00:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823919/",
            "reporter": "tcains1"
        }
    ],
    "3823920": [
        {
            "dateadded": "2026-04-16 23:39:09 UTC",
            "url": "https://github.com/wndaalol/reflectshaders/raw/refs/heads/main/ambulomancy/Software_3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823920/",
            "reporter": "tcains1"
        }
    ],
    "3823914": [
        {
            "dateadded": "2026-04-16 23:39:08 UTC",
            "url": "https://raw.githubusercontent.com/wndaalol/DoorsScript/refs/heads/main/counterfessed/Script-Doors-v1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823914/",
            "reporter": "tcains1"
        }
    ],
    "3823915": [
        {
            "dateadded": "2026-04-16 23:39:08 UTC",
            "url": "https://github.com/wndaalol/DoorsScript/raw/refs/heads/main/counterfessed/Script-Doors-v1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823915/",
            "reporter": "tcains1"
        }
    ],
    "3823916": [
        {
            "dateadded": "2026-04-16 23:39:08 UTC",
            "url": "https://raw.githubusercontent.com/GTA509FX/scrappe-tout/refs/heads/main/tests/e2e/scrappe-tout-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823916/",
            "reporter": "tcains1"
        }
    ],
    "3823917": [
        {
            "dateadded": "2026-04-16 23:39:08 UTC",
            "url": "https://livel-sou.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823917/",
            "reporter": "anonymous"
        }
    ],
    "3823918": [
        {
            "dateadded": "2026-04-16 23:39:08 UTC",
            "url": "https://raw.githubusercontent.com/XianLeeX/claude-api/refs/heads/feat/manga-translator-mvp/ui/claude-api-Vespertiliones.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 16:00:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823918/",
            "reporter": "tcains1"
        }
    ],
    "3823912": [
        {
            "dateadded": "2026-04-16 23:24:14 UTC",
            "url": "https://raw.githubusercontent.com/industrialintelligence/willywarriorportfolio/refs/heads/master/fonts/font-awesome-4.7.0/fonts/Software-3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823912/",
            "reporter": "tcains1"
        }
    ],
    "3823913": [
        {
            "dateadded": "2026-04-16 23:24:14 UTC",
            "url": "https://github.com/industrialintelligence/willywarriorportfolio/raw/refs/heads/master/fonts/font-awesome-4.7.0/fonts/Software-3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823913/",
            "reporter": "tcains1"
        }
    ],
    "3823911": [
        {
            "dateadded": "2026-04-16 23:24:13 UTC",
            "url": "https://github.com/industrialintelligence/homestead_new_backend/raw/refs/heads/master/validator/backend_homestead_new_v1.9-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823911/",
            "reporter": "tcains1"
        }
    ],
    "3823909": [
        {
            "dateadded": "2026-04-16 23:24:12 UTC",
            "url": "https://raw.githubusercontent.com/industrialintelligence/homestead_new_backend/refs/heads/master/validator/backend_homestead_new_v1.9-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823909/",
            "reporter": "tcains1"
        }
    ],
    "3823910": [
        {
            "dateadded": "2026-04-16 23:24:12 UTC",
            "url": "https://github.com/industrialintelligence/homestead/raw/refs/heads/master/images/funitture_icon/Software-3.2-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823910/",
            "reporter": "tcains1"
        }
    ],
    "3823908": [
        {
            "dateadded": "2026-04-16 23:24:10 UTC",
            "url": "https://github.com/45d5r/databricks-mcp-server/raw/refs/heads/main/databricks_mcp/resources/server_databricks_mcp_1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823908/",
            "reporter": "tcains1"
        }
    ],
    "3823907": [
        {
            "dateadded": "2026-04-16 23:24:09 UTC",
            "url": "https://raw.githubusercontent.com/saramc89mc/personal-website-template/refs/heads/main/src/components/sections/About/personal_template_website_2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823907/",
            "reporter": "tcains1"
        }
    ],
    "3823905": [
        {
            "dateadded": "2026-04-16 23:24:08 UTC",
            "url": "https://raw.githubusercontent.com/45d5r/databricks-mcp-server/refs/heads/main/databricks_mcp/resources/server_databricks_mcp_1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823905/",
            "reporter": "tcains1"
        }
    ],
    "3823906": [
        {
            "dateadded": "2026-04-16 23:24:08 UTC",
            "url": "https://raw.githubusercontent.com/industrialintelligence/homestead/refs/heads/master/images/funitture_icon/Software-3.2-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823906/",
            "reporter": "tcains1"
        }
    ],
    "3823904": [
        {
            "dateadded": "2026-04-16 23:23:13 UTC",
            "url": "https://hub0-hinge.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823904/",
            "reporter": "anonymous"
        }
    ],
    "3823903": [
        {
            "dateadded": "2026-04-16 23:20:22 UTC",
            "url": "http://123.14.99.250:42926/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:36:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823903/",
            "reporter": "geenensp"
        }
    ],
    "3823902": [
        {
            "dateadded": "2026-04-16 23:20:08 UTC",
            "url": "http://85.239.147.6/files/7774214998/qHmB2YG.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823902/",
            "reporter": "Bitsight"
        }
    ],
    "3823901": [
        {
            "dateadded": "2026-04-16 23:18:20 UTC",
            "url": "http://123.11.207.106:54017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823901/",
            "reporter": "geenensp"
        }
    ],
    "3823900": [
        {
            "dateadded": "2026-04-16 23:12:13 UTC",
            "url": "https://abzxcp.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823900/",
            "reporter": "anonymous"
        }
    ],
    "3823899": [
        {
            "dateadded": "2026-04-16 23:07:13 UTC",
            "url": "https://jdqn.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823899/",
            "reporter": "anonymous"
        }
    ],
    "3823898": [
        {
            "dateadded": "2026-04-16 23:02:13 UTC",
            "url": "https://arkcoreet9.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 23:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823898/",
            "reporter": "anonymous"
        }
    ],
    "3823897": [
        {
            "dateadded": "2026-04-16 22:58:12 UTC",
            "url": "http://62.60.226.159/spd.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 18:07:36 UTC",
            "threat": "malware_download",
            "tags": [
                "BlankGrabber",
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823897/",
            "reporter": "c2hunter"
        }
    ],
    "3823896": [
        {
            "dateadded": "2026-04-16 22:56:12 UTC",
            "url": "https://tridraix5.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823896/",
            "reporter": "anonymous"
        }
    ],
    "3823895": [
        {
            "dateadded": "2026-04-16 22:55:24 UTC",
            "url": "http://221.11.172.25:46543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823895/",
            "reporter": "geenensp"
        }
    ],
    "3823894": [
        {
            "dateadded": "2026-04-16 22:51:07 UTC",
            "url": "https://01rx.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823894/",
            "reporter": "anonymous"
        }
    ],
    "3823893": [
        {
            "dateadded": "2026-04-16 22:47:20 UTC",
            "url": "http://222.137.145.70:59506/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823893/",
            "reporter": "geenensp"
        }
    ],
    "3823892": [
        {
            "dateadded": "2026-04-16 22:45:15 UTC",
            "url": "https://mernexen6.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823892/",
            "reporter": "anonymous"
        }
    ],
    "3823891": [
        {
            "dateadded": "2026-04-16 22:39:34 UTC",
            "url": "http://45.135.193.114/mips",
            "url_status": "offline",
            "last_online": "2026-04-16 22:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823891/",
            "reporter": "botnetkiller"
        }
    ],
    "3823889": [
        {
            "dateadded": "2026-04-16 22:39:31 UTC",
            "url": "http://45.135.193.114/x86",
            "url_status": "offline",
            "last_online": "2026-04-16 22:43:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823889/",
            "reporter": "botnetkiller"
        }
    ],
    "3823890": [
        {
            "dateadded": "2026-04-16 22:39:31 UTC",
            "url": "http://45.135.193.114/mipsle",
            "url_status": "offline",
            "last_online": "2026-04-16 22:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823890/",
            "reporter": "botnetkiller"
        }
    ],
    "3823888": [
        {
            "dateadded": "2026-04-16 22:39:28 UTC",
            "url": "http://45.135.193.114/bot.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 22:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823888/",
            "reporter": "botnetkiller"
        }
    ],
    "3823887": [
        {
            "dateadded": "2026-04-16 22:39:23 UTC",
            "url": "http://45.135.193.114/bot_x86.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 22:43:43 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "LummaStealer",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823887/",
            "reporter": "botnetkiller"
        }
    ],
    "3823886": [
        {
            "dateadded": "2026-04-16 22:39:10 UTC",
            "url": "https://echo-span.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823886/",
            "reporter": "anonymous"
        }
    ],
    "3823885": [
        {
            "dateadded": "2026-04-16 22:38:19 UTC",
            "url": "http://222.137.145.70:59506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823885/",
            "reporter": "geenensp"
        }
    ],
    "3823884": [
        {
            "dateadded": "2026-04-16 22:38:11 UTC",
            "url": "https://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "ua-empty",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823884/",
            "reporter": "tcains1"
        }
    ],
    "3823883": [
        {
            "dateadded": "2026-04-16 22:33:15 UTC",
            "url": "https://ancientwav.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823883/",
            "reporter": "anonymous"
        }
    ],
    "3823882": [
        {
            "dateadded": "2026-04-16 22:28:20 UTC",
            "url": "https://breezscrip.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:28:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823882/",
            "reporter": "anonymous"
        }
    ],
    "3823881": [
        {
            "dateadded": "2026-04-16 22:22:14 UTC",
            "url": "https://ch3ckp-route.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823881/",
            "reporter": "anonymous"
        }
    ],
    "3823880": [
        {
            "dateadded": "2026-04-16 22:19:22 UTC",
            "url": "http://115.61.45.79:47982/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:10:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823880/",
            "reporter": "geenensp"
        }
    ],
    "3823879": [
        {
            "dateadded": "2026-04-16 22:16:12 UTC",
            "url": "https://plasm-spool.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823879/",
            "reporter": "anonymous"
        }
    ],
    "3823878": [
        {
            "dateadded": "2026-04-16 22:11:06 UTC",
            "url": "https://civillabel.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823878/",
            "reporter": "anonymous"
        }
    ],
    "3823877": [
        {
            "dateadded": "2026-04-16 22:05:12 UTC",
            "url": "https://lvqpbk.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 22:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823877/",
            "reporter": "anonymous"
        }
    ],
    "3823876": [
        {
            "dateadded": "2026-04-16 21:59:17 UTC",
            "url": "http://182.119.15.169:58470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:29:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823876/",
            "reporter": "geenensp"
        }
    ],
    "3823875": [
        {
            "dateadded": "2026-04-16 21:59:08 UTC",
            "url": "https://mer-corea.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823875/",
            "reporter": "anonymous"
        }
    ],
    "3823874": [
        {
            "dateadded": "2026-04-16 21:56:16 UTC",
            "url": "http://115.61.45.79:47982/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:48:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823874/",
            "reporter": "geenensp"
        }
    ],
    "3823873": [
        {
            "dateadded": "2026-04-16 21:54:08 UTC",
            "url": "https://sdkconve.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823873/",
            "reporter": "anonymous"
        }
    ],
    "3823872": [
        {
            "dateadded": "2026-04-16 21:49:08 UTC",
            "url": "https://2vb5.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823872/",
            "reporter": "anonymous"
        }
    ],
    "3823871": [
        {
            "dateadded": "2026-04-16 21:44:18 UTC",
            "url": "http://42.225.206.215:51491/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823871/",
            "reporter": "geenensp"
        }
    ],
    "3823870": [
        {
            "dateadded": "2026-04-16 21:43:11 UTC",
            "url": "https://retailmicro.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823870/",
            "reporter": "anonymous"
        }
    ],
    "3823869": [
        {
            "dateadded": "2026-04-16 21:37:09 UTC",
            "url": "https://grandalign.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823869/",
            "reporter": "anonymous"
        }
    ],
    "3823868": [
        {
            "dateadded": "2026-04-16 21:31:09 UTC",
            "url": "https://cacpulse.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823868/",
            "reporter": "anonymous"
        }
    ],
    "3823867": [
        {
            "dateadded": "2026-04-16 21:27:14 UTC",
            "url": "https://hesq.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823867/",
            "reporter": "anonymous"
        }
    ],
    "3823866": [
        {
            "dateadded": "2026-04-16 21:21:12 UTC",
            "url": "https://d6armypp.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823866/",
            "reporter": "anonymous"
        }
    ],
    "3823865": [
        {
            "dateadded": "2026-04-16 21:20:13 UTC",
            "url": "http://182.122.253.145:56653/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823865/",
            "reporter": "geenensp"
        }
    ],
    "3823864": [
        {
            "dateadded": "2026-04-16 21:20:12 UTC",
            "url": "http://42.225.206.215:51491/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823864/",
            "reporter": "geenensp"
        }
    ],
    "3823863": [
        {
            "dateadded": "2026-04-16 21:16:09 UTC",
            "url": "https://dynmeshex6.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823863/",
            "reporter": "anonymous"
        }
    ],
    "3823862": [
        {
            "dateadded": "2026-04-16 21:12:07 UTC",
            "url": "https://pastefy.app/RuQcMwxX/raw",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823862/",
            "reporter": "tcains1"
        }
    ],
    "3823861": [
        {
            "dateadded": "2026-04-16 21:11:06 UTC",
            "url": "http://62.60.226.159/nk.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:01 UTC",
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey",
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823861/",
            "reporter": "c2hunter"
        }
    ],
    "3823860": [
        {
            "dateadded": "2026-04-16 21:09:07 UTC",
            "url": "https://c3dar-sync.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823860/",
            "reporter": "anonymous"
        }
    ],
    "3823859": [
        {
            "dateadded": "2026-04-16 21:05:18 UTC",
            "url": "http://36.70.96.99:34271/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:47:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823859/",
            "reporter": "geenensp"
        }
    ],
    "3823858": [
        {
            "dateadded": "2026-04-16 21:05:08 UTC",
            "url": "https://gitlab.com/solingpass/rolly/-/raw/main/4J8576A0E8V3.exe",
            "url_status": "offline",
            "last_online": "2026-04-17 06:20:18 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823858/",
            "reporter": "tcains1"
        }
    ],
    "3823857": [
        {
            "dateadded": "2026-04-16 21:04:11 UTC",
            "url": "https://lv32.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 21:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823857/",
            "reporter": "anonymous"
        }
    ],
    "3823856": [
        {
            "dateadded": "2026-04-16 20:58:08 UTC",
            "url": "https://hyper-ch3c.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823856/",
            "reporter": "anonymous"
        }
    ],
    "3823855": [
        {
            "dateadded": "2026-04-16 20:53:07 UTC",
            "url": "https://fabricpayload.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823855/",
            "reporter": "anonymous"
        }
    ],
    "3823854": [
        {
            "dateadded": "2026-04-16 20:47:07 UTC",
            "url": "https://qt774.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823854/",
            "reporter": "anonymous"
        }
    ],
    "3823853": [
        {
            "dateadded": "2026-04-16 20:45:17 UTC",
            "url": "http://220.161.100.140:56557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:44:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823853/",
            "reporter": "geenensp"
        }
    ],
    "3823852": [
        {
            "dateadded": "2026-04-16 20:41:11 UTC",
            "url": "https://tdjgv.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823852/",
            "reporter": "anonymous"
        }
    ],
    "3823851": [
        {
            "dateadded": "2026-04-16 20:38:17 UTC",
            "url": "http://94.156.152.67:83/manji.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-22 19:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823851/",
            "reporter": "botnetkiller"
        }
    ],
    "3823850": [
        {
            "dateadded": "2026-04-16 20:36:18 UTC",
            "url": "http://42.233.137.25:33356/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823850/",
            "reporter": "geenensp"
        }
    ],
    "3823849": [
        {
            "dateadded": "2026-04-16 20:35:08 UTC",
            "url": "https://njf8.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823849/",
            "reporter": "anonymous"
        }
    ],
    "3823848": [
        {
            "dateadded": "2026-04-16 20:33:21 UTC",
            "url": "http://42.231.89.3:35959/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823848/",
            "reporter": "geenensp"
        }
    ],
    "3823847": [
        {
            "dateadded": "2026-04-16 20:31:18 UTC",
            "url": "http://115.56.148.234:33970/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823847/",
            "reporter": "geenensp"
        }
    ],
    "3823846": [
        {
            "dateadded": "2026-04-16 20:30:07 UTC",
            "url": "https://nbfkdj.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:30:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823846/",
            "reporter": "anonymous"
        }
    ],
    "3823845": [
        {
            "dateadded": "2026-04-16 20:29:18 UTC",
            "url": "http://115.56.148.234:33970/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823845/",
            "reporter": "geenensp"
        }
    ],
    "3823844": [
        {
            "dateadded": "2026-04-16 20:24:11 UTC",
            "url": "https://winterwind.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823844/",
            "reporter": "anonymous"
        }
    ],
    "3823843": [
        {
            "dateadded": "2026-04-16 20:21:08 UTC",
            "url": "http://182.118.240.155:36509/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:34:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823843/",
            "reporter": "geenensp"
        }
    ],
    "3823842": [
        {
            "dateadded": "2026-04-16 20:19:09 UTC",
            "url": "https://nh48qkv.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823842/",
            "reporter": "anonymous"
        }
    ],
    "3823840": [
        {
            "dateadded": "2026-04-16 20:13:07 UTC",
            "url": "https://c299jq.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823840/",
            "reporter": "anonymous"
        }
    ],
    "3823839": [
        {
            "dateadded": "2026-04-16 20:12:18 UTC",
            "url": "http://110.137.155.177:60650/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:41:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823839/",
            "reporter": "geenensp"
        }
    ],
    "3823837": [
        {
            "dateadded": "2026-04-16 20:12:11 UTC",
            "url": "http://42.231.89.3:35959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823837/",
            "reporter": "geenensp"
        }
    ],
    "3823838": [
        {
            "dateadded": "2026-04-16 20:12:11 UTC",
            "url": "http://42.233.137.25:33356/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823838/",
            "reporter": "geenensp"
        }
    ],
    "3823836": [
        {
            "dateadded": "2026-04-16 20:11:19 UTC",
            "url": "http://115.48.160.29:55419/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:00:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823836/",
            "reporter": "geenensp"
        }
    ],
    "3823835": [
        {
            "dateadded": "2026-04-16 20:08:12 UTC",
            "url": "https://shapemoral.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823835/",
            "reporter": "anonymous"
        }
    ],
    "3823834": [
        {
            "dateadded": "2026-04-16 20:04:19 UTC",
            "url": "http://182.127.69.241:58099/i",
            "url_status": "offline",
            "last_online": "2026-04-16 20:04:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823834/",
            "reporter": "geenensp"
        }
    ],
    "3823833": [
        {
            "dateadded": "2026-04-16 20:02:34 UTC",
            "url": "https://ubft6.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 20:02:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823833/",
            "reporter": "anonymous"
        }
    ],
    "3823831": [
        {
            "dateadded": "2026-04-16 19:58:19 UTC",
            "url": "http://45.8.118.17:42657/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:43:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823831/",
            "reporter": "geenensp"
        }
    ],
    "3823830": [
        {
            "dateadded": "2026-04-16 19:56:26 UTC",
            "url": "http://36.70.96.99:34271/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:06:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823830/",
            "reporter": "geenensp"
        }
    ],
    "3823829": [
        {
            "dateadded": "2026-04-16 19:56:14 UTC",
            "url": "https://fyxfe.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823829/",
            "reporter": "anonymous"
        }
    ],
    "3823828": [
        {
            "dateadded": "2026-04-16 19:51:16 UTC",
            "url": "http://125.41.5.182:57651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 19:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823828/",
            "reporter": "geenensp"
        }
    ],
    "3823827": [
        {
            "dateadded": "2026-04-16 19:51:08 UTC",
            "url": "https://curi7-bridge.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823827/",
            "reporter": "anonymous"
        }
    ],
    "3823826": [
        {
            "dateadded": "2026-04-16 19:46:12 UTC",
            "url": "https://gsl4.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823826/",
            "reporter": "anonymous"
        }
    ],
    "3823825": [
        {
            "dateadded": "2026-04-16 19:41:08 UTC",
            "url": "https://xa20yx.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823825/",
            "reporter": "anonymous"
        }
    ],
    "3823823": [
        {
            "dateadded": "2026-04-16 19:39:13 UTC",
            "url": "http://92.112.127.184/x64",
            "url_status": "offline",
            "last_online": "2026-04-18 11:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "92-112-127-184",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823823/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823824": [
        {
            "dateadded": "2026-04-16 19:39:13 UTC",
            "url": "http://92.112.127.184/arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 06:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "92-112-127-184",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823824/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823822": [
        {
            "dateadded": "2026-04-16 19:38:09 UTC",
            "url": "https://pastureurban.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823822/",
            "reporter": "anonymous"
        }
    ],
    "3823821": [
        {
            "dateadded": "2026-04-16 19:36:18 UTC",
            "url": "http://115.48.160.29:55419/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:29:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823821/",
            "reporter": "geenensp"
        }
    ],
    "3823820": [
        {
            "dateadded": "2026-04-16 19:32:15 UTC",
            "url": "http://45.8.118.17:42657/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:09:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823820/",
            "reporter": "geenensp"
        }
    ],
    "3823819": [
        {
            "dateadded": "2026-04-16 19:31:12 UTC",
            "url": "http://182.127.69.241:58099/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 19:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823819/",
            "reporter": "geenensp"
        }
    ],
    "3823818": [
        {
            "dateadded": "2026-04-16 19:29:09 UTC",
            "url": "https://trucarr.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823818/",
            "reporter": "anonymous"
        }
    ],
    "3823817": [
        {
            "dateadded": "2026-04-16 19:23:15 UTC",
            "url": "https://auditgate.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823817/",
            "reporter": "anonymous"
        }
    ],
    "3823816": [
        {
            "dateadded": "2026-04-16 19:18:07 UTC",
            "url": "https://exposeatom.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823816/",
            "reporter": "anonymous"
        }
    ],
    "3823815": [
        {
            "dateadded": "2026-04-16 19:15:12 UTC",
            "url": "https://quordraex5.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823815/",
            "reporter": "anonymous"
        }
    ],
    "3823814": [
        {
            "dateadded": "2026-04-16 19:04:19 UTC",
            "url": "http://42.224.126.96:59275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:49:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823814/",
            "reporter": "geenensp"
        }
    ],
    "3823813": [
        {
            "dateadded": "2026-04-16 19:04:11 UTC",
            "url": "https://outdock.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 19:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823813/",
            "reporter": "anonymous"
        }
    ],
    "3823812": [
        {
            "dateadded": "2026-04-16 19:02:16 UTC",
            "url": "http://123.13.1.74:46636/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:02:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823812/",
            "reporter": "geenensp"
        }
    ],
    "3823811": [
        {
            "dateadded": "2026-04-16 18:59:08 UTC",
            "url": "https://fyd10k.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823811/",
            "reporter": "anonymous"
        }
    ],
    "3823810": [
        {
            "dateadded": "2026-04-16 18:53:11 UTC",
            "url": "https://mruyas.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:53:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823810/",
            "reporter": "anonymous"
        }
    ],
    "3823809": [
        {
            "dateadded": "2026-04-16 18:49:22 UTC",
            "url": "http://182.113.2.247:49444/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:40:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823809/",
            "reporter": "geenensp"
        }
    ],
    "3823808": [
        {
            "dateadded": "2026-04-16 18:48:17 UTC",
            "url": "http://182.121.162.191:47432/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:30:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823808/",
            "reporter": "geenensp"
        }
    ],
    "3823807": [
        {
            "dateadded": "2026-04-16 18:47:12 UTC",
            "url": "https://gathe-tri.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823807/",
            "reporter": "anonymous"
        }
    ],
    "3823806": [
        {
            "dateadded": "2026-04-16 18:45:21 UTC",
            "url": "http://219.155.111.60:54152/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:48:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823806/",
            "reporter": "geenensp"
        }
    ],
    "3823805": [
        {
            "dateadded": "2026-04-16 18:44:09 UTC",
            "url": "https://5ton0-vault.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823805/",
            "reporter": "anonymous"
        }
    ],
    "3823804": [
        {
            "dateadded": "2026-04-16 18:40:12 UTC",
            "url": "https://binarymod.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823804/",
            "reporter": "anonymous"
        }
    ],
    "3823803": [
        {
            "dateadded": "2026-04-16 18:38:19 UTC",
            "url": "http://110.37.52.120:43283/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823803/",
            "reporter": "geenensp"
        }
    ],
    "3823802": [
        {
            "dateadded": "2026-04-16 18:37:09 UTC",
            "url": "http://61.52.156.114:48489/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:57:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823802/",
            "reporter": "geenensp"
        }
    ],
    "3823801": [
        {
            "dateadded": "2026-04-16 18:33:21 UTC",
            "url": "http://182.121.162.191:47432/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:59:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823801/",
            "reporter": "geenensp"
        }
    ],
    "3823800": [
        {
            "dateadded": "2026-04-16 18:32:15 UTC",
            "url": "http://110.36.80.169:48759/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823800/",
            "reporter": "geenensp"
        }
    ],
    "3823799": [
        {
            "dateadded": "2026-04-16 18:30:09 UTC",
            "url": "https://oshwcrk.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823799/",
            "reporter": "anonymous"
        }
    ],
    "3823798": [
        {
            "dateadded": "2026-04-16 18:25:19 UTC",
            "url": "http://42.86.55.13:38168/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:53:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823798/",
            "reporter": "geenensp"
        }
    ],
    "3823797": [
        {
            "dateadded": "2026-04-16 18:24:13 UTC",
            "url": "https://birch2-pulse.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823797/",
            "reporter": "anonymous"
        }
    ],
    "3823796": [
        {
            "dateadded": "2026-04-16 18:19:07 UTC",
            "url": "https://qpmerz.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823796/",
            "reporter": "anonymous"
        }
    ],
    "3823795": [
        {
            "dateadded": "2026-04-16 18:14:09 UTC",
            "url": "https://snow-ass.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823795/",
            "reporter": "anonymous"
        }
    ],
    "3823794": [
        {
            "dateadded": "2026-04-16 18:09:15 UTC",
            "url": "http://182.114.248.141:46120/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:14:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823794/",
            "reporter": "geenensp"
        }
    ],
    "3823793": [
        {
            "dateadded": "2026-04-16 18:08:18 UTC",
            "url": "http://110.36.80.169:48759/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823793/",
            "reporter": "geenensp"
        }
    ],
    "3823792": [
        {
            "dateadded": "2026-04-16 18:08:13 UTC",
            "url": "https://metriccivil.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823792/",
            "reporter": "anonymous"
        }
    ],
    "3823791": [
        {
            "dateadded": "2026-04-16 18:03:15 UTC",
            "url": "https://irpd79.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 18:03:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823791/",
            "reporter": "anonymous"
        }
    ],
    "3823790": [
        {
            "dateadded": "2026-04-16 17:57:13 UTC",
            "url": "https://mpfpni4.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823790/",
            "reporter": "anonymous"
        }
    ],
    "3823789": [
        {
            "dateadded": "2026-04-16 17:52:13 UTC",
            "url": "https://merven6ex.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823789/",
            "reporter": "anonymous"
        }
    ],
    "3823788": [
        {
            "dateadded": "2026-04-16 17:48:09 UTC",
            "url": "http://61.53.133.230:34461/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823788/",
            "reporter": "geenensp"
        }
    ],
    "3823786": [
        {
            "dateadded": "2026-04-16 17:45:21 UTC",
            "url": "http://42.238.169.6:33017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:42:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823786/",
            "reporter": "geenensp"
        }
    ],
    "3823787": [
        {
            "dateadded": "2026-04-16 17:45:21 UTC",
            "url": "http://27.216.250.235:52036/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823787/",
            "reporter": "geenensp"
        }
    ],
    "3823785": [
        {
            "dateadded": "2026-04-16 17:45:13 UTC",
            "url": "https://iciqx71.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823785/",
            "reporter": "anonymous"
        }
    ],
    "3823784": [
        {
            "dateadded": "2026-04-16 17:40:13 UTC",
            "url": "https://b1rd-panel.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823784/",
            "reporter": "anonymous"
        }
    ],
    "3823783": [
        {
            "dateadded": "2026-04-16 17:34:14 UTC",
            "url": "https://fix7-cast.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823783/",
            "reporter": "anonymous"
        }
    ],
    "3823782": [
        {
            "dateadded": "2026-04-16 17:29:08 UTC",
            "url": "https://wrwr.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823782/",
            "reporter": "anonymous"
        }
    ],
    "3823781": [
        {
            "dateadded": "2026-04-16 17:25:23 UTC",
            "url": "http://42.86.55.13:38168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:22:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823781/",
            "reporter": "geenensp"
        }
    ],
    "3823780": [
        {
            "dateadded": "2026-04-16 17:24:25 UTC",
            "url": "http://27.216.250.235:52036/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:25:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823780/",
            "reporter": "geenensp"
        }
    ],
    "3823779": [
        {
            "dateadded": "2026-04-16 17:23:07 UTC",
            "url": "https://targetpasture.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823779/",
            "reporter": "anonymous"
        }
    ],
    "3823778": [
        {
            "dateadded": "2026-04-16 17:20:26 UTC",
            "url": "http://113.233.232.44:60693/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823778/",
            "reporter": "geenensp"
        }
    ],
    "3823777": [
        {
            "dateadded": "2026-04-16 17:18:12 UTC",
            "url": "https://keltide4al.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823777/",
            "reporter": "anonymous"
        }
    ],
    "3823776": [
        {
            "dateadded": "2026-04-16 17:12:13 UTC",
            "url": "https://tnkjrebh.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823776/",
            "reporter": "anonymous"
        }
    ],
    "3823775": [
        {
            "dateadded": "2026-04-16 17:06:13 UTC",
            "url": "https://spli1-watch.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823775/",
            "reporter": "anonymous"
        }
    ],
    "3823774": [
        {
            "dateadded": "2026-04-16 17:00:15 UTC",
            "url": "https://bran-build.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 17:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823774/",
            "reporter": "anonymous"
        }
    ],
    "3823773": [
        {
            "dateadded": "2026-04-16 16:56:14 UTC",
            "url": "https://afrqcy.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823773/",
            "reporter": "anonymous"
        }
    ],
    "3823772": [
        {
            "dateadded": "2026-04-16 16:49:13 UTC",
            "url": "https://ravenpalet.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823772/",
            "reporter": "anonymous"
        }
    ],
    "3823771": [
        {
            "dateadded": "2026-04-16 16:44:15 UTC",
            "url": "https://3776.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:44:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823771/",
            "reporter": "anonymous"
        }
    ],
    "3823770": [
        {
            "dateadded": "2026-04-16 16:38:17 UTC",
            "url": "https://genomecomp.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:38:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823770/",
            "reporter": "anonymous"
        }
    ],
    "3823769": [
        {
            "dateadded": "2026-04-16 16:37:09 UTC",
            "url": "http://182.114.248.141:46120/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:51:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823769/",
            "reporter": "geenensp"
        }
    ],
    "3823768": [
        {
            "dateadded": "2026-04-16 16:32:27 UTC",
            "url": "http://92.112.127.184/mips",
            "url_status": "offline",
            "last_online": "2026-04-19 05:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823768/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823767": [
        {
            "dateadded": "2026-04-16 16:32:25 UTC",
            "url": "http://92.112.127.184/ppc",
            "url_status": "offline",
            "last_online": "2026-04-18 11:57:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823767/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823766": [
        {
            "dateadded": "2026-04-16 16:32:13 UTC",
            "url": "https://meta-w1ld.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823766/",
            "reporter": "anonymous"
        }
    ],
    "3823765": [
        {
            "dateadded": "2026-04-16 16:31:23 UTC",
            "url": "http://92.112.127.184/x86",
            "url_status": "offline",
            "last_online": "2026-04-19 06:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823765/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823762": [
        {
            "dateadded": "2026-04-16 16:31:22 UTC",
            "url": "http://92.112.127.184/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-18 10:33:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823762/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823763": [
        {
            "dateadded": "2026-04-16 16:31:22 UTC",
            "url": "http://92.112.127.184/arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 11:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823763/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823764": [
        {
            "dateadded": "2026-04-16 16:31:22 UTC",
            "url": "http://92.112.127.184/arm4",
            "url_status": "offline",
            "last_online": "2026-04-18 11:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823764/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823761": [
        {
            "dateadded": "2026-04-16 16:31:19 UTC",
            "url": "http://92.112.127.184/arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 11:44:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823761/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823760": [
        {
            "dateadded": "2026-04-16 16:26:18 UTC",
            "url": "https://hidd3n-spark.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823760/",
            "reporter": "anonymous"
        }
    ],
    "3823759": [
        {
            "dateadded": "2026-04-16 16:24:22 UTC",
            "url": "http://42.239.252.150:46026/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823759/",
            "reporter": "geenensp"
        }
    ],
    "3823758": [
        {
            "dateadded": "2026-04-16 16:22:14 UTC",
            "url": "https://padaj0.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823758/",
            "reporter": "anonymous"
        }
    ],
    "3823757": [
        {
            "dateadded": "2026-04-16 16:21:10 UTC",
            "url": "http://111.35.78.2:23117/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823757/",
            "reporter": "geenensp"
        }
    ],
    "3823756": [
        {
            "dateadded": "2026-04-16 16:15:12 UTC",
            "url": "https://assetinvoice.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823756/",
            "reporter": "anonymous"
        }
    ],
    "3823755": [
        {
            "dateadded": "2026-04-16 16:10:10 UTC",
            "url": "https://pwlmc.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823755/",
            "reporter": "anonymous"
        }
    ],
    "3823754": [
        {
            "dateadded": "2026-04-16 16:08:10 UTC",
            "url": "http://123.13.1.74:46636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823754/",
            "reporter": "geenensp"
        }
    ],
    "3823753": [
        {
            "dateadded": "2026-04-16 16:04:07 UTC",
            "url": "https://sgwua7.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 16:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823753/",
            "reporter": "anonymous"
        }
    ],
    "3823752": [
        {
            "dateadded": "2026-04-16 16:01:19 UTC",
            "url": "http://61.53.133.230:34461/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:22:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823752/",
            "reporter": "geenensp"
        }
    ],
    "3823750": [
        {
            "dateadded": "2026-04-16 15:59:17 UTC",
            "url": "http://37.55.198.100:41095/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:44:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823750/",
            "reporter": "geenensp"
        }
    ],
    "3823751": [
        {
            "dateadded": "2026-04-16 15:59:17 UTC",
            "url": "http://42.239.252.150:46026/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823751/",
            "reporter": "geenensp"
        }
    ],
    "3823749": [
        {
            "dateadded": "2026-04-16 15:59:09 UTC",
            "url": "https://s7sb939.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823749/",
            "reporter": "anonymous"
        }
    ],
    "3823748": [
        {
            "dateadded": "2026-04-16 15:55:16 UTC",
            "url": "http://78.165.236.95:40735/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:24:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823748/",
            "reporter": "geenensp"
        }
    ],
    "3823747": [
        {
            "dateadded": "2026-04-16 15:53:33 UTC",
            "url": "http://27.207.145.175:38749/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823747/",
            "reporter": "geenensp"
        }
    ],
    "3823746": [
        {
            "dateadded": "2026-04-16 15:53:08 UTC",
            "url": "https://go1d-leaf.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823746/",
            "reporter": "anonymous"
        }
    ],
    "3823744": [
        {
            "dateadded": "2026-04-16 15:51:11 UTC",
            "url": "http://61.52.46.160:44856/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:49:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823744/",
            "reporter": "geenensp"
        }
    ],
    "3823745": [
        {
            "dateadded": "2026-04-16 15:51:11 UTC",
            "url": "http://42.57.183.231:46154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:45:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823745/",
            "reporter": "geenensp"
        }
    ],
    "3823743": [
        {
            "dateadded": "2026-04-16 15:50:19 UTC",
            "url": "http://218.13.149.41:34742/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823743/",
            "reporter": "geenensp"
        }
    ],
    "3823742": [
        {
            "dateadded": "2026-04-16 15:49:11 UTC",
            "url": "https://form-plate.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823742/",
            "reporter": "anonymous"
        }
    ],
    "3823741": [
        {
            "dateadded": "2026-04-16 15:48:19 UTC",
            "url": "http://219.157.235.231:35134/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823741/",
            "reporter": "geenensp"
        }
    ],
    "3823740": [
        {
            "dateadded": "2026-04-16 15:46:08 UTC",
            "url": "https://ysrykt.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823740/",
            "reporter": "anonymous"
        }
    ],
    "3823739": [
        {
            "dateadded": "2026-04-16 15:45:11 UTC",
            "url": "http://123.10.36.176:53534/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:53:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823739/",
            "reporter": "geenensp"
        }
    ],
    "3823738": [
        {
            "dateadded": "2026-04-16 15:36:09 UTC",
            "url": "https://handlerspool.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823738/",
            "reporter": "anonymous"
        }
    ],
    "3823737": [
        {
            "dateadded": "2026-04-16 15:29:22 UTC",
            "url": "http://78.165.236.95:40735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 05:55:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823737/",
            "reporter": "geenensp"
        }
    ],
    "3823735": [
        {
            "dateadded": "2026-04-16 15:29:21 UTC",
            "url": "http://125.45.42.21:53307/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823735/",
            "reporter": "geenensp"
        }
    ],
    "3823736": [
        {
            "dateadded": "2026-04-16 15:29:21 UTC",
            "url": "http://219.157.235.231:35134/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:17:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823736/",
            "reporter": "geenensp"
        }
    ],
    "3823734": [
        {
            "dateadded": "2026-04-16 15:28:17 UTC",
            "url": "http://27.207.145.175:38749/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 06:22:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823734/",
            "reporter": "geenensp"
        }
    ],
    "3823733": [
        {
            "dateadded": "2026-04-16 15:28:13 UTC",
            "url": "https://dcfn606z.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823733/",
            "reporter": "anonymous"
        }
    ],
    "3823732": [
        {
            "dateadded": "2026-04-16 15:24:13 UTC",
            "url": "https://gran7-lab.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823732/",
            "reporter": "anonymous"
        }
    ],
    "3823731": [
        {
            "dateadded": "2026-04-16 15:19:16 UTC",
            "url": "http://218.13.149.41:34742/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823731/",
            "reporter": "geenensp"
        }
    ],
    "3823730": [
        {
            "dateadded": "2026-04-16 15:18:19 UTC",
            "url": "http://115.53.219.119:51321/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823730/",
            "reporter": "geenensp"
        }
    ],
    "3823729": [
        {
            "dateadded": "2026-04-16 15:18:10 UTC",
            "url": "https://oblg.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823729/",
            "reporter": "anonymous"
        }
    ],
    "3823728": [
        {
            "dateadded": "2026-04-16 15:13:09 UTC",
            "url": "https://nszftsfl.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823728/",
            "reporter": "anonymous"
        }
    ],
    "3823727": [
        {
            "dateadded": "2026-04-16 15:07:07 UTC",
            "url": "https://r0uter-sheet.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823727/",
            "reporter": "anonymous"
        }
    ],
    "3823726": [
        {
            "dateadded": "2026-04-16 15:00:10 UTC",
            "url": "https://dyn-markix.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 15:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823726/",
            "reporter": "anonymous"
        }
    ],
    "3823725": [
        {
            "dateadded": "2026-04-16 14:58:21 UTC",
            "url": "http://115.53.219.119:51321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823725/",
            "reporter": "geenensp"
        }
    ],
    "3823724": [
        {
            "dateadded": "2026-04-16 14:55:08 UTC",
            "url": "https://zenforgeos2.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823724/",
            "reporter": "anonymous"
        }
    ],
    "3823723": [
        {
            "dateadded": "2026-04-16 14:54:19 UTC",
            "url": "http://147.45.209.42:47048/i",
            "url_status": "offline",
            "last_online": "2026-04-24 18:08:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823723/",
            "reporter": "geenensp"
        }
    ],
    "3823722": [
        {
            "dateadded": "2026-04-16 14:51:22 UTC",
            "url": "http://58.37.139.218:55337/i",
            "url_status": "offline",
            "last_online": "2026-04-23 23:06:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823722/",
            "reporter": "geenensp"
        }
    ],
    "3823721": [
        {
            "dateadded": "2026-04-16 14:50:09 UTC",
            "url": "https://glyph-prai.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823721/",
            "reporter": "anonymous"
        }
    ],
    "3823720": [
        {
            "dateadded": "2026-04-16 14:48:18 UTC",
            "url": "http://115.46.74.31:46295/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823720/",
            "reporter": "geenensp"
        }
    ],
    "3823719": [
        {
            "dateadded": "2026-04-16 14:47:08 UTC",
            "url": "http://123.13.83.194:38331/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823719/",
            "reporter": "geenensp"
        }
    ],
    "3823718": [
        {
            "dateadded": "2026-04-16 14:44:08 UTC",
            "url": "https://fjzpcljo.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823718/",
            "reporter": "anonymous"
        }
    ],
    "3823717": [
        {
            "dateadded": "2026-04-16 14:37:12 UTC",
            "url": "http://77.247.93.65:49840/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823717/",
            "reporter": "geenensp"
        }
    ],
    "3823716": [
        {
            "dateadded": "2026-04-16 14:37:08 UTC",
            "url": "https://oxrv.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823716/",
            "reporter": "anonymous"
        }
    ],
    "3823715": [
        {
            "dateadded": "2026-04-16 14:35:10 UTC",
            "url": "https://arkmesh0ar.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823715/",
            "reporter": "anonymous"
        }
    ],
    "3823714": [
        {
            "dateadded": "2026-04-16 14:31:08 UTC",
            "url": "https://solvaleet3.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823714/",
            "reporter": "anonymous"
        }
    ],
    "3823713": [
        {
            "dateadded": "2026-04-16 14:29:12 UTC",
            "url": "http://147.45.209.42:47048/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:01:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823713/",
            "reporter": "geenensp"
        }
    ],
    "3823712": [
        {
            "dateadded": "2026-04-16 14:23:15 UTC",
            "url": "http://115.46.74.31:46295/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823712/",
            "reporter": "geenensp"
        }
    ],
    "3823711": [
        {
            "dateadded": "2026-04-16 14:21:11 UTC",
            "url": "http://123.13.83.194:38331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:26:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823711/",
            "reporter": "geenensp"
        }
    ],
    "3823710": [
        {
            "dateadded": "2026-04-16 14:21:08 UTC",
            "url": "https://samplehidden.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823710/",
            "reporter": "anonymous"
        }
    ],
    "3823709": [
        {
            "dateadded": "2026-04-16 14:17:19 UTC",
            "url": "http://93.157.253.209:45483/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:20:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823709/",
            "reporter": "geenensp"
        }
    ],
    "3823708": [
        {
            "dateadded": "2026-04-16 14:16:10 UTC",
            "url": "http://221.15.13.84:39624/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:26:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823708/",
            "reporter": "geenensp"
        }
    ],
    "3823707": [
        {
            "dateadded": "2026-04-16 14:15:16 UTC",
            "url": "http://42.230.212.144:41959/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823707/",
            "reporter": "geenensp"
        }
    ],
    "3823706": [
        {
            "dateadded": "2026-04-16 14:15:12 UTC",
            "url": "https://skbeju.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823706/",
            "reporter": "anonymous"
        }
    ],
    "3823705": [
        {
            "dateadded": "2026-04-16 14:10:11 UTC",
            "url": "https://28lk.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823705/",
            "reporter": "anonymous"
        }
    ],
    "3823704": [
        {
            "dateadded": "2026-04-16 14:06:10 UTC",
            "url": "http://192.3.122.144/img/hid/img_205037.png",
            "url_status": "offline",
            "last_online": "2026-04-20 23:32:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823704/",
            "reporter": "abuse_ch"
        }
    ],
    "3823703": [
        {
            "dateadded": "2026-04-16 14:04:11 UTC",
            "url": "https://st0r3-scope.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 14:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823703/",
            "reporter": "anonymous"
        }
    ],
    "3823702": [
        {
            "dateadded": "2026-04-16 14:02:17 UTC",
            "url": "http://2.27.12.6/Okami.i586",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823702/",
            "reporter": "abuse_ch"
        }
    ],
    "3823697": [
        {
            "dateadded": "2026-04-16 14:02:16 UTC",
            "url": "http://2.27.12.6/Okami.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823697/",
            "reporter": "abuse_ch"
        }
    ],
    "3823698": [
        {
            "dateadded": "2026-04-16 14:02:16 UTC",
            "url": "http://2.27.12.6/Okami.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823698/",
            "reporter": "abuse_ch"
        }
    ],
    "3823699": [
        {
            "dateadded": "2026-04-16 14:02:16 UTC",
            "url": "http://2.27.12.6/Okami.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823699/",
            "reporter": "abuse_ch"
        }
    ],
    "3823700": [
        {
            "dateadded": "2026-04-16 14:02:16 UTC",
            "url": "http://2.27.12.6/Okami.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823700/",
            "reporter": "abuse_ch"
        }
    ],
    "3823701": [
        {
            "dateadded": "2026-04-16 14:02:16 UTC",
            "url": "http://2.27.12.6/Okami.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823701/",
            "reporter": "abuse_ch"
        }
    ],
    "3823696": [
        {
            "dateadded": "2026-04-16 13:59:11 UTC",
            "url": "http://221.15.13.84:39624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:22:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823696/",
            "reporter": "geenensp"
        }
    ],
    "3823695": [
        {
            "dateadded": "2026-04-16 13:58:07 UTC",
            "url": "https://l0qq.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823695/",
            "reporter": "anonymous"
        }
    ],
    "3823694": [
        {
            "dateadded": "2026-04-16 13:56:09 UTC",
            "url": "http://125.46.197.2:35752/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:11:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823694/",
            "reporter": "geenensp"
        }
    ],
    "3823693": [
        {
            "dateadded": "2026-04-16 13:54:14 UTC",
            "url": "http://183.23.131.194:35197/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823693/",
            "reporter": "geenensp"
        }
    ],
    "3823692": [
        {
            "dateadded": "2026-04-16 13:53:08 UTC",
            "url": "https://ucelrko.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823692/",
            "reporter": "anonymous"
        }
    ],
    "3823691": [
        {
            "dateadded": "2026-04-16 13:51:15 UTC",
            "url": "http://115.56.148.211:48943/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:44:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823691/",
            "reporter": "geenensp"
        }
    ],
    "3823690": [
        {
            "dateadded": "2026-04-16 13:48:08 UTC",
            "url": "https://d4wn-hinge.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823690/",
            "reporter": "anonymous"
        }
    ],
    "3823689": [
        {
            "dateadded": "2026-04-16 13:43:24 UTC",
            "url": "http://61.52.156.114:48489/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823689/",
            "reporter": "geenensp"
        }
    ],
    "3823688": [
        {
            "dateadded": "2026-04-16 13:43:09 UTC",
            "url": "http://123.12.47.194:50609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:27:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823688/",
            "reporter": "geenensp"
        }
    ],
    "3823687": [
        {
            "dateadded": "2026-04-16 13:42:07 UTC",
            "url": "https://lettedust.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823687/",
            "reporter": "anonymous"
        }
    ],
    "3823686": [
        {
            "dateadded": "2026-04-16 13:41:25 UTC",
            "url": "http://115.56.148.211:48943/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 05:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823686/",
            "reporter": "geenensp"
        }
    ],
    "3823685": [
        {
            "dateadded": "2026-04-16 13:39:16 UTC",
            "url": "http://115.55.58.160:39367/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:35:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823685/",
            "reporter": "geenensp"
        }
    ],
    "3823684": [
        {
            "dateadded": "2026-04-16 13:36:11 UTC",
            "url": "https://quorvaleis.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823684/",
            "reporter": "anonymous"
        }
    ],
    "3823683": [
        {
            "dateadded": "2026-04-16 13:34:20 UTC",
            "url": "http://36.49.26.178:44714/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823683/",
            "reporter": "geenensp"
        }
    ],
    "3823682": [
        {
            "dateadded": "2026-04-16 13:30:16 UTC",
            "url": "http://182.117.50.21:58129/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:34:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823682/",
            "reporter": "geenensp"
        }
    ],
    "3823681": [
        {
            "dateadded": "2026-04-16 13:30:09 UTC",
            "url": "https://y3acxztp.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823681/",
            "reporter": "anonymous"
        }
    ],
    "3823680": [
        {
            "dateadded": "2026-04-16 13:28:10 UTC",
            "url": "http://125.46.197.2:35752/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:08:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823680/",
            "reporter": "geenensp"
        }
    ],
    "3823679": [
        {
            "dateadded": "2026-04-16 13:25:09 UTC",
            "url": "https://servaleon.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823679/",
            "reporter": "anonymous"
        }
    ],
    "3823678": [
        {
            "dateadded": "2026-04-16 13:20:19 UTC",
            "url": "http://115.55.58.160:39367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:50:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823678/",
            "reporter": "geenensp"
        }
    ],
    "3823677": [
        {
            "dateadded": "2026-04-16 13:19:09 UTC",
            "url": "https://tran5it-array.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823677/",
            "reporter": "anonymous"
        }
    ],
    "3823676": [
        {
            "dateadded": "2026-04-16 13:18:12 UTC",
            "url": "http://110.36.28.183:34655/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823676/",
            "reporter": "geenensp"
        }
    ],
    "3823675": [
        {
            "dateadded": "2026-04-16 13:14:08 UTC",
            "url": "https://61rplpi.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823675/",
            "reporter": "anonymous"
        }
    ],
    "3823674": [
        {
            "dateadded": "2026-04-16 13:13:17 UTC",
            "url": "http://39.68.43.217:34887/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823674/",
            "reporter": "geenensp"
        }
    ],
    "3823673": [
        {
            "dateadded": "2026-04-16 13:09:07 UTC",
            "url": "https://ser-coreen.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823673/",
            "reporter": "anonymous"
        }
    ],
    "3823672": [
        {
            "dateadded": "2026-04-16 13:03:08 UTC",
            "url": "https://geo-r3por.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 13:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823672/",
            "reporter": "anonymous"
        }
    ],
    "3823671": [
        {
            "dateadded": "2026-04-16 13:00:16 UTC",
            "url": "https://github.com/cblootah/test/raw/refs/heads/main/crypted.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 18:04:20 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "exe",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823671/",
            "reporter": "burger"
        }
    ],
    "3823670": [
        {
            "dateadded": "2026-04-16 12:58:10 UTC",
            "url": "https://tinloos.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823670/",
            "reporter": "anonymous"
        }
    ],
    "3823669": [
        {
            "dateadded": "2026-04-16 12:52:22 UTC",
            "url": "http://222.134.162.139:44733/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:29:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823669/",
            "reporter": "geenensp"
        }
    ],
    "3823668": [
        {
            "dateadded": "2026-04-16 12:52:14 UTC",
            "url": "https://ueuwt.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823668/",
            "reporter": "anonymous"
        }
    ],
    "3823667": [
        {
            "dateadded": "2026-04-16 12:51:11 UTC",
            "url": "http://119.178.165.188:36451/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:45:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823667/",
            "reporter": "geenensp"
        }
    ],
    "3823666": [
        {
            "dateadded": "2026-04-16 12:50:20 UTC",
            "url": "http://110.36.28.183:34655/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:59:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823666/",
            "reporter": "geenensp"
        }
    ],
    "3823665": [
        {
            "dateadded": "2026-04-16 12:46:25 UTC",
            "url": "http://182.113.36.145:33561/i",
            "url_status": "offline",
            "last_online": "2026-04-16 12:46:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823665/",
            "reporter": "geenensp"
        }
    ],
    "3823664": [
        {
            "dateadded": "2026-04-16 12:45:10 UTC",
            "url": "https://bytecolum.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823664/",
            "reporter": "anonymous"
        }
    ],
    "3823663": [
        {
            "dateadded": "2026-04-16 12:41:20 UTC",
            "url": "http://61.53.91.133:46743/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:52:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823663/",
            "reporter": "geenensp"
        }
    ],
    "3823662": [
        {
            "dateadded": "2026-04-16 12:40:11 UTC",
            "url": "https://vorven3um.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823662/",
            "reporter": "anonymous"
        }
    ],
    "3823661": [
        {
            "dateadded": "2026-04-16 12:35:20 UTC",
            "url": "http://123.11.9.131:35702/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:26:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823661/",
            "reporter": "geenensp"
        }
    ],
    "3823660": [
        {
            "dateadded": "2026-04-16 12:35:09 UTC",
            "url": "https://wild-snaps.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823660/",
            "reporter": "anonymous"
        }
    ],
    "3823659": [
        {
            "dateadded": "2026-04-16 12:30:07 UTC",
            "url": "https://deploy2-vector.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:30:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823659/",
            "reporter": "anonymous"
        }
    ],
    "3823658": [
        {
            "dateadded": "2026-04-16 12:28:09 UTC",
            "url": "http://182.118.240.155:36509/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:43:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823658/",
            "reporter": "geenensp"
        }
    ],
    "3823657": [
        {
            "dateadded": "2026-04-16 12:28:08 UTC",
            "url": "https://easgold.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823657/",
            "reporter": "anonymous"
        }
    ],
    "3823656": [
        {
            "dateadded": "2026-04-16 12:22:09 UTC",
            "url": "http://193.163.187.213:60651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:00:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823656/",
            "reporter": "geenensp"
        }
    ],
    "3823655": [
        {
            "dateadded": "2026-04-16 12:21:07 UTC",
            "url": "https://tw1f5ruc.ebensen-timent.digital/?ublib=rDAEypPWBuYSRyWT",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823655/",
            "reporter": "anonymous"
        }
    ],
    "3823654": [
        {
            "dateadded": "2026-04-16 12:19:18 UTC",
            "url": "http://119.178.165.188:36451/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823654/",
            "reporter": "geenensp"
        }
    ],
    "3823653": [
        {
            "dateadded": "2026-04-16 12:19:17 UTC",
            "url": "http://219.155.123.23:41679/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823653/",
            "reporter": "geenensp"
        }
    ],
    "3823652": [
        {
            "dateadded": "2026-04-16 12:17:08 UTC",
            "url": "https://frkoakq.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823652/",
            "reporter": "anonymous"
        }
    ],
    "3823651": [
        {
            "dateadded": "2026-04-16 12:13:07 UTC",
            "url": "https://kern-zone.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823651/",
            "reporter": "anonymous"
        }
    ],
    "3823650": [
        {
            "dateadded": "2026-04-16 12:12:21 UTC",
            "url": "http://123.11.9.131:35702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823650/",
            "reporter": "geenensp"
        }
    ],
    "3823649": [
        {
            "dateadded": "2026-04-16 12:06:07 UTC",
            "url": "https://workerwar.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823649/",
            "reporter": "anonymous"
        }
    ],
    "3823648": [
        {
            "dateadded": "2026-04-16 12:05:18 UTC",
            "url": "http://182.126.126.199:43014/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823648/",
            "reporter": "geenensp"
        }
    ],
    "3823647": [
        {
            "dateadded": "2026-04-16 12:02:20 UTC",
            "url": "http://115.49.218.180:35364/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:41:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823647/",
            "reporter": "geenensp"
        }
    ],
    "3823646": [
        {
            "dateadded": "2026-04-16 12:01:14 UTC",
            "url": "http://89.189.181.54:51682/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 12:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823646/",
            "reporter": "geenensp"
        }
    ],
    "3823645": [
        {
            "dateadded": "2026-04-16 12:01:10 UTC",
            "url": "https://18qr.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 12:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823645/",
            "reporter": "anonymous"
        }
    ],
    "3823644": [
        {
            "dateadded": "2026-04-16 11:55:14 UTC",
            "url": "https://snapshotcrawler.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823644/",
            "reporter": "anonymous"
        }
    ],
    "3823643": [
        {
            "dateadded": "2026-04-16 11:51:25 UTC",
            "url": "http://182.114.34.178:41872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:51:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823643/",
            "reporter": "geenensp"
        }
    ],
    "3823642": [
        {
            "dateadded": "2026-04-16 11:51:13 UTC",
            "url": "https://runvv4y4-reach.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823642/",
            "reporter": "anonymous"
        }
    ],
    "3823641": [
        {
            "dateadded": "2026-04-16 11:51:08 UTC",
            "url": "http://219.155.123.23:41679/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:58:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823641/",
            "reporter": "geenensp"
        }
    ],
    "3823637": [
        {
            "dateadded": "2026-04-16 11:46:07 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823637/",
            "reporter": "adliwahid"
        }
    ],
    "3823638": [
        {
            "dateadded": "2026-04-16 11:46:07 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823638/",
            "reporter": "adliwahid"
        }
    ],
    "3823639": [
        {
            "dateadded": "2026-04-16 11:46:07 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823639/",
            "reporter": "adliwahid"
        }
    ],
    "3823640": [
        {
            "dateadded": "2026-04-16 11:46:07 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823640/",
            "reporter": "adliwahid"
        }
    ],
    "3823636": [
        {
            "dateadded": "2026-04-16 11:45:43 UTC",
            "url": "http://83.142.209.75:751/download",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:26 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "RapidStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823636/",
            "reporter": "burger"
        }
    ],
    "3823635": [
        {
            "dateadded": "2026-04-16 11:45:25 UTC",
            "url": "http://182.120.162.185:43971/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823635/",
            "reporter": "geenensp"
        }
    ],
    "3823634": [
        {
            "dateadded": "2026-04-16 11:45:20 UTC",
            "url": "https://friendlydomain.ru/files/jar/component",
            "url_status": "offline",
            "last_online": "2026-04-26 17:06:37 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823634/",
            "reporter": "burger"
        }
    ],
    "3823631": [
        {
            "dateadded": "2026-04-16 11:45:18 UTC",
            "url": "https://friendlydomain.ru/files/jar/module2",
            "url_status": "offline",
            "last_online": "2026-04-26 18:05:06 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823631/",
            "reporter": "burger"
        }
    ],
    "3823632": [
        {
            "dateadded": "2026-04-16 11:45:18 UTC",
            "url": "https://friendlydomain.ru/files/jar/RuntimeBroker.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 17:47:26 UTC",
            "threat": "malware_download",
            "tags": [
                "rustystealer",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823632/",
            "reporter": "burger"
        }
    ],
    "3823633": [
        {
            "dateadded": "2026-04-16 11:45:18 UTC",
            "url": "https://friendlydomain.ru/files/jar/security",
            "url_status": "offline",
            "last_online": "2026-04-26 17:47:18 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823633/",
            "reporter": "burger"
        }
    ],
    "3823630": [
        {
            "dateadded": "2026-04-16 11:45:17 UTC",
            "url": "https://friendlydomain.ru/files/jar/elevator",
            "url_status": "offline",
            "last_online": "2026-04-26 18:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823630/",
            "reporter": "burger"
        }
    ],
    "3823628": [
        {
            "dateadded": "2026-04-16 11:45:16 UTC",
            "url": "https://friendlydomain.ru/files/jar/Pjibf.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 18:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823628/",
            "reporter": "burger"
        }
    ],
    "3823629": [
        {
            "dateadded": "2026-04-16 11:45:16 UTC",
            "url": "https://friendlydomain.ru/files/jar/module",
            "url_status": "offline",
            "last_online": "2026-04-26 17:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823629/",
            "reporter": "burger"
        }
    ],
    "3823627": [
        {
            "dateadded": "2026-04-16 11:45:14 UTC",
            "url": "http://rapidinc.lol/api/ps",
            "url_status": "offline",
            "last_online": "2026-04-16 23:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ps1",
                "RapidStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823627/",
            "reporter": "burger"
        }
    ],
    "3823626": [
        {
            "dateadded": "2026-04-16 11:45:13 UTC",
            "url": "http://94.156.152.67:83/p.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:51:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823626/",
            "reporter": "adliwahid"
        }
    ],
    "3823612": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://94.189.222.143:13639/mozi.a",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:23 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823612/",
            "reporter": "adliwahid"
        }
    ],
    "3823613": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://145.255.196.49:44985/mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-20 11:52:25 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823613/",
            "reporter": "adliwahid"
        }
    ],
    "3823614": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://145.255.196.49:44985/mozi.a",
            "url_status": "offline",
            "last_online": "2026-04-20 22:41:50 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823614/",
            "reporter": "adliwahid"
        }
    ],
    "3823615": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823615/",
            "reporter": "adliwahid"
        }
    ],
    "3823616": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823616/",
            "reporter": "adliwahid"
        }
    ],
    "3823617": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823617/",
            "reporter": "adliwahid"
        }
    ],
    "3823618": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823618/",
            "reporter": "adliwahid"
        }
    ],
    "3823619": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823619/",
            "reporter": "adliwahid"
        }
    ],
    "3823620": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823620/",
            "reporter": "adliwahid"
        }
    ],
    "3823621": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823621/",
            "reporter": "adliwahid"
        }
    ],
    "3823622": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823622/",
            "reporter": "adliwahid"
        }
    ],
    "3823623": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823623/",
            "reporter": "adliwahid"
        }
    ],
    "3823624": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823624/",
            "reporter": "adliwahid"
        }
    ],
    "3823625": [
        {
            "dateadded": "2026-04-16 11:45:12 UTC",
            "url": "http://2.26.98.67/hiddenbin/boatnet.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823625/",
            "reporter": "adliwahid"
        }
    ],
    "3823610": [
        {
            "dateadded": "2026-04-16 11:45:11 UTC",
            "url": "http://2.27.12.6/Okami.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823610/",
            "reporter": "adliwahid"
        }
    ],
    "3823611": [
        {
            "dateadded": "2026-04-16 11:45:11 UTC",
            "url": "http://94.189.222.143:13639/mozi.m",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:16 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823611/",
            "reporter": "adliwahid"
        }
    ],
    "3823608": [
        {
            "dateadded": "2026-04-16 11:45:10 UTC",
            "url": "http://2.27.12.6/Okami.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823608/",
            "reporter": "adliwahid"
        }
    ],
    "3823609": [
        {
            "dateadded": "2026-04-16 11:45:10 UTC",
            "url": "http://2.27.12.6/bins.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823609/",
            "reporter": "adliwahid"
        }
    ],
    "3823601": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/Okami.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823601/",
            "reporter": "adliwahid"
        }
    ],
    "3823602": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/Okami.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823602/",
            "reporter": "adliwahid"
        }
    ],
    "3823603": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/payload.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823603/",
            "reporter": "adliwahid"
        }
    ],
    "3823604": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/bins/bot.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823604/",
            "reporter": "adliwahid"
        }
    ],
    "3823605": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/Okami.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823605/",
            "reporter": "adliwahid"
        }
    ],
    "3823606": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/Okami.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823606/",
            "reporter": "adliwahid"
        }
    ],
    "3823607": [
        {
            "dateadded": "2026-04-16 11:45:09 UTC",
            "url": "http://2.27.12.6/Okami.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823607/",
            "reporter": "adliwahid"
        }
    ],
    "3823600": [
        {
            "dateadded": "2026-04-16 11:44:13 UTC",
            "url": "https://buffer4-port.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823600/",
            "reporter": "anonymous"
        }
    ],
    "3823599": [
        {
            "dateadded": "2026-04-16 11:43:22 UTC",
            "url": "http://115.49.218.180:35364/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823599/",
            "reporter": "geenensp"
        }
    ],
    "3823598": [
        {
            "dateadded": "2026-04-16 11:43:21 UTC",
            "url": "http://182.126.124.140:36133/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823598/",
            "reporter": "geenensp"
        }
    ],
    "3823597": [
        {
            "dateadded": "2026-04-16 11:42:21 UTC",
            "url": "http://42.7.240.122:48517/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:48:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823597/",
            "reporter": "adliwahid"
        }
    ],
    "3823596": [
        {
            "dateadded": "2026-04-16 11:42:12 UTC",
            "url": "http://106.7.234.255:42783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 06:04:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823596/",
            "reporter": "adliwahid"
        }
    ],
    "3823593": [
        {
            "dateadded": "2026-04-16 11:42:11 UTC",
            "url": "http://185.89.157.150:58859/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823593/",
            "reporter": "adliwahid"
        }
    ],
    "3823594": [
        {
            "dateadded": "2026-04-16 11:42:11 UTC",
            "url": "http://42.224.102.253:49819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:07:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823594/",
            "reporter": "adliwahid"
        }
    ],
    "3823595": [
        {
            "dateadded": "2026-04-16 11:42:11 UTC",
            "url": "http://123.14.155.36:40022/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:46:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823595/",
            "reporter": "adliwahid"
        }
    ],
    "3823592": [
        {
            "dateadded": "2026-04-16 11:42:08 UTC",
            "url": "http://182.117.50.26:40062/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:32:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823592/",
            "reporter": "adliwahid"
        }
    ],
    "3823590": [
        {
            "dateadded": "2026-04-16 11:42:07 UTC",
            "url": "http://123.12.47.194:50609/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:08:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823590/",
            "reporter": "adliwahid"
        }
    ],
    "3823591": [
        {
            "dateadded": "2026-04-16 11:42:07 UTC",
            "url": "http://222.137.182.174:34826/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:42:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823591/",
            "reporter": "adliwahid"
        }
    ],
    "3823589": [
        {
            "dateadded": "2026-04-16 11:41:26 UTC",
            "url": "http://106.58.110.62:33480/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:39:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823589/",
            "reporter": "adliwahid"
        }
    ],
    "3823588": [
        {
            "dateadded": "2026-04-16 11:41:21 UTC",
            "url": "http://175.165.123.156:39363/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:49:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823588/",
            "reporter": "adliwahid"
        }
    ],
    "3823587": [
        {
            "dateadded": "2026-04-16 11:41:12 UTC",
            "url": "http://123.189.192.153:49373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:49:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823587/",
            "reporter": "adliwahid"
        }
    ],
    "3823585": [
        {
            "dateadded": "2026-04-16 11:41:10 UTC",
            "url": "http://114.229.20.10:34801/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823585/",
            "reporter": "adliwahid"
        }
    ],
    "3823586": [
        {
            "dateadded": "2026-04-16 11:41:10 UTC",
            "url": "http://60.177.138.61:34459/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 14:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823586/",
            "reporter": "adliwahid"
        }
    ],
    "3823574": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://112.248.104.145:34189/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823574/",
            "reporter": "adliwahid"
        }
    ],
    "3823575": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://27.223.252.123:55034/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823575/",
            "reporter": "adliwahid"
        }
    ],
    "3823576": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://42.227.237.131:40238/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:23:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823576/",
            "reporter": "adliwahid"
        }
    ],
    "3823577": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://182.121.45.72:41057/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:21:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823577/",
            "reporter": "adliwahid"
        }
    ],
    "3823578": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://115.55.248.187:49309/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823578/",
            "reporter": "adliwahid"
        }
    ],
    "3823579": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://39.82.182.90:39381/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:36:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823579/",
            "reporter": "adliwahid"
        }
    ],
    "3823580": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://110.37.38.88:50560/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:49:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823580/",
            "reporter": "adliwahid"
        }
    ],
    "3823581": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://200.115.102.16:33210/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823581/",
            "reporter": "adliwahid"
        }
    ],
    "3823582": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://42.224.78.240:56843/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:23:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823582/",
            "reporter": "adliwahid"
        }
    ],
    "3823583": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://115.50.5.19:46960/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:47:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823583/",
            "reporter": "adliwahid"
        }
    ],
    "3823584": [
        {
            "dateadded": "2026-04-16 11:41:09 UTC",
            "url": "http://116.139.140.86:38710/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823584/",
            "reporter": "adliwahid"
        }
    ],
    "3823573": [
        {
            "dateadded": "2026-04-16 11:41:07 UTC",
            "url": "http://38.21.70.189:49079/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823573/",
            "reporter": "adliwahid"
        }
    ],
    "3823572": [
        {
            "dateadded": "2026-04-16 11:41:04 UTC",
            "url": "http://182.121.45.72:41057/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:49:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823572/",
            "reporter": "adliwahid"
        }
    ],
    "3823570": [
        {
            "dateadded": "2026-04-16 11:40:14 UTC",
            "url": "http://42.224.126.96:59275/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:58:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823570/",
            "reporter": "adliwahid"
        }
    ],
    "3823571": [
        {
            "dateadded": "2026-04-16 11:40:14 UTC",
            "url": "http://61.52.46.160:44856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823571/",
            "reporter": "adliwahid"
        }
    ],
    "3823555": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://113.229.37.108:47652/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823555/",
            "reporter": "adliwahid"
        }
    ],
    "3823556": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://61.52.47.179:46179/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:22:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823556/",
            "reporter": "adliwahid"
        }
    ],
    "3823557": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://119.187.239.144:48842/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:58:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823557/",
            "reporter": "adliwahid"
        }
    ],
    "3823558": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://200.6.91.43:57730/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823558/",
            "reporter": "adliwahid"
        }
    ],
    "3823559": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://110.37.52.120:43283/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:03:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823559/",
            "reporter": "adliwahid"
        }
    ],
    "3823560": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://115.51.1.204:52457/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823560/",
            "reporter": "adliwahid"
        }
    ],
    "3823561": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://42.236.212.224:60035/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823561/",
            "reporter": "adliwahid"
        }
    ],
    "3823562": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://170.83.13.37:3569/i",
            "url_status": "offline",
            "last_online": "2026-04-25 14:29:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823562/",
            "reporter": "adliwahid"
        }
    ],
    "3823563": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://113.200.237.170:45286/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:35:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823563/",
            "reporter": "adliwahid"
        }
    ],
    "3823564": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://110.137.155.177:60650/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:57:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823564/",
            "reporter": "adliwahid"
        }
    ],
    "3823565": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://115.58.90.196:57451/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823565/",
            "reporter": "adliwahid"
        }
    ],
    "3823566": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://117.245.84.41:53626/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823566/",
            "reporter": "adliwahid"
        }
    ],
    "3823567": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://118.174.171.155:41130/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823567/",
            "reporter": "adliwahid"
        }
    ],
    "3823568": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://115.55.248.187:49309/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823568/",
            "reporter": "adliwahid"
        }
    ],
    "3823569": [
        {
            "dateadded": "2026-04-16 11:40:13 UTC",
            "url": "http://42.237.14.131:34018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823569/",
            "reporter": "adliwahid"
        }
    ],
    "3823552": [
        {
            "dateadded": "2026-04-16 11:39:10 UTC",
            "url": "http://113.229.37.108:47652/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:00:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823552/",
            "reporter": "adliwahid"
        }
    ],
    "3823553": [
        {
            "dateadded": "2026-04-16 11:39:10 UTC",
            "url": "http://115.57.234.10:60868/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823553/",
            "reporter": "adliwahid"
        }
    ],
    "3823554": [
        {
            "dateadded": "2026-04-16 11:39:10 UTC",
            "url": "http://61.53.92.162:55660/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823554/",
            "reporter": "adliwahid"
        }
    ],
    "3823541": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://113.239.214.132:37112/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:37:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823541/",
            "reporter": "adliwahid"
        }
    ],
    "3823542": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://200.115.102.16:33210/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823542/",
            "reporter": "adliwahid"
        }
    ],
    "3823543": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://36.69.92.51:37658/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823543/",
            "reporter": "adliwahid"
        }
    ],
    "3823544": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://125.46.245.44:37452/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823544/",
            "reporter": "adliwahid"
        }
    ],
    "3823545": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://117.247.109.76:40625/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823545/",
            "reporter": "adliwahid"
        }
    ],
    "3823546": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://115.62.15.184:34786/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:31:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823546/",
            "reporter": "adliwahid"
        }
    ],
    "3823547": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://42.179.7.35:41054/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:07:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823547/",
            "reporter": "adliwahid"
        }
    ],
    "3823548": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://110.39.233.38:40766/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823548/",
            "reporter": "adliwahid"
        }
    ],
    "3823549": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://116.139.26.71:60683/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:56:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823549/",
            "reporter": "adliwahid"
        }
    ],
    "3823550": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://182.113.9.117:56211/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:23:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823550/",
            "reporter": "adliwahid"
        }
    ],
    "3823551": [
        {
            "dateadded": "2026-04-16 11:39:09 UTC",
            "url": "http://42.178.147.200:44176/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:53:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823551/",
            "reporter": "adliwahid"
        }
    ],
    "3823540": [
        {
            "dateadded": "2026-04-16 11:39:07 UTC",
            "url": "http://185.89.157.150:58859/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823540/",
            "reporter": "adliwahid"
        }
    ],
    "3823539": [
        {
            "dateadded": "2026-04-16 11:38:18 UTC",
            "url": "http://182.47.201.7:52455/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823539/",
            "reporter": "adliwahid"
        }
    ],
    "3823536": [
        {
            "dateadded": "2026-04-16 11:38:11 UTC",
            "url": "http://222.139.40.110:38900/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:22:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823536/",
            "reporter": "adliwahid"
        }
    ],
    "3823537": [
        {
            "dateadded": "2026-04-16 11:38:11 UTC",
            "url": "http://125.46.245.44:37452/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823537/",
            "reporter": "adliwahid"
        }
    ],
    "3823538": [
        {
            "dateadded": "2026-04-16 11:38:11 UTC",
            "url": "http://123.190.96.170:36747/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:38:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823538/",
            "reporter": "adliwahid"
        }
    ],
    "3823529": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "http://115.50.31.179:51513/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823529/",
            "reporter": "adliwahid"
        }
    ],
    "3823530": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "http://145.255.196.49:44985/.i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823530/",
            "reporter": "adliwahid"
        }
    ],
    "3823531": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "http://216.249.4.20:39013/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823531/",
            "reporter": "adliwahid"
        }
    ],
    "3823532": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "http://115.50.31.179:51513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:49:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823532/",
            "reporter": "adliwahid"
        }
    ],
    "3823533": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "http://42.55.225.241:53561/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:50:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823533/",
            "reporter": "adliwahid"
        }
    ],
    "3823534": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "https://decoderill.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823534/",
            "reporter": "anonymous"
        }
    ],
    "3823535": [
        {
            "dateadded": "2026-04-16 11:38:10 UTC",
            "url": "http://123.14.155.36:40022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 18:02:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823535/",
            "reporter": "adliwahid"
        }
    ],
    "3823528": [
        {
            "dateadded": "2026-04-16 11:37:22 UTC",
            "url": "http://58.249.152.211:55115/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823528/",
            "reporter": "adliwahid"
        }
    ],
    "3823527": [
        {
            "dateadded": "2026-04-16 11:37:16 UTC",
            "url": "http://42.227.156.12:50875/i",
            "url_status": "offline",
            "last_online": "2026-04-17 00:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823527/",
            "reporter": "adliwahid"
        }
    ],
    "3823520": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://175.146.153.59:55164/i",
            "url_status": "offline",
            "last_online": "2026-04-17 21:29:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823520/",
            "reporter": "adliwahid"
        }
    ],
    "3823521": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://182.114.34.178:41872/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823521/",
            "reporter": "adliwahid"
        }
    ],
    "3823522": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://115.56.97.165:36849/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:50:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823522/",
            "reporter": "adliwahid"
        }
    ],
    "3823523": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://42.226.75.20:54035/i",
            "url_status": "offline",
            "last_online": "2026-04-19 06:03:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823523/",
            "reporter": "adliwahid"
        }
    ],
    "3823524": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://61.52.45.65:43109/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:05:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823524/",
            "reporter": "adliwahid"
        }
    ],
    "3823525": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://115.51.1.204:52457/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823525/",
            "reporter": "adliwahid"
        }
    ],
    "3823526": [
        {
            "dateadded": "2026-04-16 11:37:11 UTC",
            "url": "http://58.37.81.41:55749/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:03:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823526/",
            "reporter": "adliwahid"
        }
    ],
    "3823513": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://39.82.182.90:39381/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823513/",
            "reporter": "adliwahid"
        }
    ],
    "3823514": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://61.176.30.107:46688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:21:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823514/",
            "reporter": "adliwahid"
        }
    ],
    "3823515": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://182.113.235.127:40429/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823515/",
            "reporter": "adliwahid"
        }
    ],
    "3823516": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://116.139.26.71:60683/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:37:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823516/",
            "reporter": "adliwahid"
        }
    ],
    "3823517": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://59.98.68.61:35291/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:39:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823517/",
            "reporter": "adliwahid"
        }
    ],
    "3823518": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://27.215.181.173:41732/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:26:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823518/",
            "reporter": "adliwahid"
        }
    ],
    "3823519": [
        {
            "dateadded": "2026-04-16 11:37:10 UTC",
            "url": "http://113.239.214.132:37112/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:21:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823519/",
            "reporter": "adliwahid"
        }
    ],
    "3823510": [
        {
            "dateadded": "2026-04-16 11:37:06 UTC",
            "url": "http://219.156.83.9:59140/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:43:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823510/",
            "reporter": "adliwahid"
        }
    ],
    "3823511": [
        {
            "dateadded": "2026-04-16 11:37:06 UTC",
            "url": "http://94.189.222.143:13639/.i",
            "url_status": "offline",
            "last_online": "2026-04-27 07:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823511/",
            "reporter": "adliwahid"
        }
    ],
    "3823512": [
        {
            "dateadded": "2026-04-16 11:37:06 UTC",
            "url": "http://77.247.88.72:60515/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823512/",
            "reporter": "adliwahid"
        }
    ],
    "3823507": [
        {
            "dateadded": "2026-04-16 11:37:05 UTC",
            "url": "http://110.186.230.74:54569/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:47:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823507/",
            "reporter": "adliwahid"
        }
    ],
    "3823508": [
        {
            "dateadded": "2026-04-16 11:37:05 UTC",
            "url": "http://219.156.91.202:42546/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:32:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823508/",
            "reporter": "adliwahid"
        }
    ],
    "3823509": [
        {
            "dateadded": "2026-04-16 11:37:05 UTC",
            "url": "http://42.235.18.54:48200/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:26:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823509/",
            "reporter": "adliwahid"
        }
    ],
    "3823506": [
        {
            "dateadded": "2026-04-16 11:33:12 UTC",
            "url": "https://4cnluiv.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823506/",
            "reporter": "anonymous"
        }
    ],
    "3823505": [
        {
            "dateadded": "2026-04-16 11:28:14 UTC",
            "url": "https://arkspireor.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823505/",
            "reporter": "anonymous"
        }
    ],
    "3823504": [
        {
            "dateadded": "2026-04-16 11:24:32 UTC",
            "url": "http://222.138.103.130:43025/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823504/",
            "reporter": "geenensp"
        }
    ],
    "3823503": [
        {
            "dateadded": "2026-04-16 11:19:19 UTC",
            "url": "http://110.39.231.61:39151/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:08:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823503/",
            "reporter": "geenensp"
        }
    ],
    "3823502": [
        {
            "dateadded": "2026-04-16 11:18:13 UTC",
            "url": "https://work-done6.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823502/",
            "reporter": "anonymous"
        }
    ],
    "3823501": [
        {
            "dateadded": "2026-04-16 11:17:26 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-16 11:17:26 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823501/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823500": [
        {
            "dateadded": "2026-04-16 11:17:22 UTC",
            "url": "http://123.14.38.184:47338/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823500/",
            "reporter": "geenensp"
        }
    ],
    "3823498": [
        {
            "dateadded": "2026-04-16 11:17:21 UTC",
            "url": "http://125.41.0.135:48337/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:06:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823498/",
            "reporter": "geenensp"
        }
    ],
    "3823499": [
        {
            "dateadded": "2026-04-16 11:17:21 UTC",
            "url": "http://42.238.143.170:47852/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823499/",
            "reporter": "geenensp"
        }
    ],
    "3823497": [
        {
            "dateadded": "2026-04-16 11:17:20 UTC",
            "url": "http://156.229.118.144:47229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:53:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823497/",
            "reporter": "geenensp"
        }
    ],
    "3823496": [
        {
            "dateadded": "2026-04-16 11:17:15 UTC",
            "url": "https://doome.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823496/",
            "reporter": "anonymous"
        }
    ],
    "3823495": [
        {
            "dateadded": "2026-04-16 11:01:35 UTC",
            "url": "http://125.40.1.83:54799/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823495/",
            "reporter": "geenensp"
        }
    ],
    "3823493": [
        {
            "dateadded": "2026-04-16 11:01:33 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823493/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823494": [
        {
            "dateadded": "2026-04-16 11:01:33 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823494/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823492": [
        {
            "dateadded": "2026-04-16 11:01:27 UTC",
            "url": "http://42.238.143.170:47852/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823492/",
            "reporter": "geenensp"
        }
    ],
    "3823490": [
        {
            "dateadded": "2026-04-16 11:01:26 UTC",
            "url": "http://110.39.228.163:42944/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823490/",
            "reporter": "geenensp"
        }
    ],
    "3823491": [
        {
            "dateadded": "2026-04-16 11:01:26 UTC",
            "url": "http://mail.atlcpatax.com/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823491/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823489": [
        {
            "dateadded": "2026-04-16 11:01:25 UTC",
            "url": "http://221.14.106.221:38624/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823489/",
            "reporter": "geenensp"
        }
    ],
    "3823487": [
        {
            "dateadded": "2026-04-16 11:01:24 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823487/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823488": [
        {
            "dateadded": "2026-04-16 11:01:24 UTC",
            "url": "http://mail.atlcpatax.com/bins/px86_64",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823488/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823486": [
        {
            "dateadded": "2026-04-16 11:01:19 UTC",
            "url": "https://heavy-pack5.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823486/",
            "reporter": "anonymous"
        }
    ],
    "3823484": [
        {
            "dateadded": "2026-04-16 11:01:15 UTC",
            "url": "https://short-word4.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823484/",
            "reporter": "anonymous"
        }
    ],
    "3823485": [
        {
            "dateadded": "2026-04-16 11:01:15 UTC",
            "url": "https://sticky-note3.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 11:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823485/",
            "reporter": "anonymous"
        }
    ],
    "3823479": [
        {
            "dateadded": "2026-04-16 10:45:33 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823479/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823480": [
        {
            "dateadded": "2026-04-16 10:45:33 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823480/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823481": [
        {
            "dateadded": "2026-04-16 10:45:33 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823481/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823482": [
        {
            "dateadded": "2026-04-16 10:45:33 UTC",
            "url": "http://mail.atlcpatax.com/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823482/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823483": [
        {
            "dateadded": "2026-04-16 10:45:33 UTC",
            "url": "http://mail.atlcpatax.com/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823483/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823469": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823469/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823470": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823470/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823471": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://mail.atlcpatax.com/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823471/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823472": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://mail.atlcpatax.com/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823472/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823473": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://mail.atlcpatax.com/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823473/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823474": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823474/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823475": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://mail.atlcpatax.com/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823475/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823476": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823476/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823477": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://mail.atlcpatax.com/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823477/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823478": [
        {
            "dateadded": "2026-04-16 10:45:31 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823478/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823466": [
        {
            "dateadded": "2026-04-16 10:45:24 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:24 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823466/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823467": [
        {
            "dateadded": "2026-04-16 10:45:24 UTC",
            "url": "http://mail.atlcpatax.com/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:24 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823467/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823468": [
        {
            "dateadded": "2026-04-16 10:45:24 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/px86_64",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:24 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823468/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823457": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823457/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823458": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823458/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823459": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823459/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823460": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823460/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823461": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://mail.atlcpatax.com/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "mail-atlcpatax-com",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823461/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823462": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823462/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823463": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823463/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823464": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autodiscover.atlcpatax.com/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autodiscover-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823464/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823465": [
        {
            "dateadded": "2026-04-16 10:45:23 UTC",
            "url": "http://autoconfig.atlcpatax.com/bins/px86_64",
            "url_status": "offline",
            "last_online": "2026-04-16 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "autoconfig-atlcpatax-com",
                "botnetdomain",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823465/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823456": [
        {
            "dateadded": "2026-04-16 10:44:10 UTC",
            "url": "https://direct-send2.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823456/",
            "reporter": "anonymous"
        }
    ],
    "3823455": [
        {
            "dateadded": "2026-04-16 10:39:12 UTC",
            "url": "https://express-mail1.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823455/",
            "reporter": "anonymous"
        }
    ],
    "3823454": [
        {
            "dateadded": "2026-04-16 10:36:15 UTC",
            "url": "http://27.215.120.208:53084/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:57:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823454/",
            "reporter": "geenensp"
        }
    ],
    "3823453": [
        {
            "dateadded": "2026-04-16 10:32:21 UTC",
            "url": "http://221.14.106.221:38624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:53:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823453/",
            "reporter": "geenensp"
        }
    ],
    "3823452": [
        {
            "dateadded": "2026-04-16 10:32:14 UTC",
            "url": "https://solid-base6.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823452/",
            "reporter": "anonymous"
        }
    ],
    "3823450": [
        {
            "dateadded": "2026-04-16 10:30:12 UTC",
            "url": "http://85.208.9.62/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-16 10:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "85-208-9-62",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823450/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823451": [
        {
            "dateadded": "2026-04-16 10:30:12 UTC",
            "url": "http://85.208.9.62/bins/px86_64",
            "url_status": "offline",
            "last_online": "2026-04-16 10:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "85-208-9-62",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823451/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823449": [
        {
            "dateadded": "2026-04-16 10:27:16 UTC",
            "url": "https://rain-drop5.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823449/",
            "reporter": "anonymous"
        }
    ],
    "3823448": [
        {
            "dateadded": "2026-04-16 10:23:25 UTC",
            "url": "http://110.39.231.61:39151/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:20:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823448/",
            "reporter": "geenensp"
        }
    ],
    "3823447": [
        {
            "dateadded": "2026-04-16 10:21:12 UTC",
            "url": "https://deep-well4.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823447/",
            "reporter": "anonymous"
        }
    ],
    "3823446": [
        {
            "dateadded": "2026-04-16 10:16:09 UTC",
            "url": "https://river-flow3.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823446/",
            "reporter": "anonymous"
        }
    ],
    "3823445": [
        {
            "dateadded": "2026-04-16 10:11:10 UTC",
            "url": "http://110.39.228.163:42944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:43:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823445/",
            "reporter": "geenensp"
        }
    ],
    "3823444": [
        {
            "dateadded": "2026-04-16 10:11:07 UTC",
            "url": "https://ocean-blue2.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823444/",
            "reporter": "anonymous"
        }
    ],
    "3823443": [
        {
            "dateadded": "2026-04-16 10:05:20 UTC",
            "url": "http://42.57.189.216:60389/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:48:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823443/",
            "reporter": "geenensp"
        }
    ],
    "3823442": [
        {
            "dateadded": "2026-04-16 10:04:10 UTC",
            "url": "https://clear-water1.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823442/",
            "reporter": "anonymous"
        }
    ],
    "3823441": [
        {
            "dateadded": "2026-04-16 10:03:19 UTC",
            "url": "http://222.137.182.174:34826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823441/",
            "reporter": "geenensp"
        }
    ],
    "3823440": [
        {
            "dateadded": "2026-04-16 10:00:10 UTC",
            "url": "https://group-join6.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 10:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823440/",
            "reporter": "anonymous"
        }
    ],
    "3823438": [
        {
            "dateadded": "2026-04-16 09:54:13 UTC",
            "url": "http://113.221.77.62:47220/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:58:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823438/",
            "reporter": "geenensp"
        }
    ],
    "3823439": [
        {
            "dateadded": "2026-04-16 09:54:13 UTC",
            "url": "https://brief-meet5.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823439/",
            "reporter": "anonymous"
        }
    ],
    "3823437": [
        {
            "dateadded": "2026-04-16 09:52:22 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_093212_ffmpeg-8.1-essentials_build.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 09:52:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823437/",
            "reporter": "abus3reports"
        }
    ],
    "3823436": [
        {
            "dateadded": "2026-04-16 09:52:21 UTC",
            "url": "http://61.53.216.119:33156/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823436/",
            "reporter": "geenensp"
        }
    ],
    "3823434": [
        {
            "dateadded": "2026-04-16 09:52:20 UTC",
            "url": "http://59.96.138.65:55715/i",
            "url_status": "offline",
            "last_online": "2026-04-16 09:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823434/",
            "reporter": "geenensp"
        }
    ],
    "3823435": [
        {
            "dateadded": "2026-04-16 09:52:20 UTC",
            "url": "http://42.57.189.216:60389/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823435/",
            "reporter": "geenensp"
        }
    ],
    "3823433": [
        {
            "dateadded": "2026-04-16 09:52:18 UTC",
            "url": "https://phone-call3.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:52:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823433/",
            "reporter": "anonymous"
        }
    ],
    "3823431": [
        {
            "dateadded": "2026-04-16 09:52:11 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_074824_backgroundTaskHost.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823431/",
            "reporter": "abus3reports"
        }
    ],
    "3823432": [
        {
            "dateadded": "2026-04-16 09:52:11 UTC",
            "url": "https://simple-form4.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823432/",
            "reporter": "anonymous"
        }
    ],
    "3823430": [
        {
            "dateadded": "2026-04-16 09:37:57 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_095904_ffmpeg.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823430/",
            "reporter": "abus3reports"
        }
    ],
    "3823429": [
        {
            "dateadded": "2026-04-16 09:37:51 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_094108_ffmpeg.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823429/",
            "reporter": "abus3reports"
        }
    ],
    "3823428": [
        {
            "dateadded": "2026-04-16 09:37:46 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_074921_CKeyboardH.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823428/",
            "reporter": "abus3reports"
        }
    ],
    "3823426": [
        {
            "dateadded": "2026-04-16 09:37:42 UTC",
            "url": "https://248bestmoon.click/files/netinfo.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823426/",
            "reporter": "abus3reports"
        }
    ],
    "3823427": [
        {
            "dateadded": "2026-04-16 09:37:42 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_104113_ffmpeg.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823427/",
            "reporter": "abus3reports"
        }
    ],
    "3823425": [
        {
            "dateadded": "2026-04-16 09:37:41 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_062339_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823425/",
            "reporter": "abus3reports"
        }
    ],
    "3823421": [
        {
            "dateadded": "2026-04-16 09:37:39 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_101715_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823421/",
            "reporter": "abus3reports"
        }
    ],
    "3823422": [
        {
            "dateadded": "2026-04-16 09:37:39 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_061303_nView64.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823422/",
            "reporter": "abus3reports"
        }
    ],
    "3823423": [
        {
            "dateadded": "2026-04-16 09:37:39 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_061240_nView.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823423/",
            "reporter": "abus3reports"
        }
    ],
    "3823424": [
        {
            "dateadded": "2026-04-16 09:37:39 UTC",
            "url": "https://248bestmoon.click/files/stil.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823424/",
            "reporter": "abus3reports"
        }
    ],
    "3823420": [
        {
            "dateadded": "2026-04-16 09:37:37 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_134016_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823420/",
            "reporter": "abus3reports"
        }
    ],
    "3823416": [
        {
            "dateadded": "2026-04-16 09:37:36 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_094958_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823416/",
            "reporter": "abus3reports"
        }
    ],
    "3823417": [
        {
            "dateadded": "2026-04-16 09:37:36 UTC",
            "url": "https://248bestmoon.click/files/vnc.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823417/",
            "reporter": "abus3reports"
        }
    ],
    "3823418": [
        {
            "dateadded": "2026-04-16 09:37:36 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_103614_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823418/",
            "reporter": "abus3reports"
        }
    ],
    "3823419": [
        {
            "dateadded": "2026-04-16 09:37:36 UTC",
            "url": "https://248bestmoon.click/files/havan.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823419/",
            "reporter": "abus3reports"
        }
    ],
    "3823408": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_121642_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823408/",
            "reporter": "abus3reports"
        }
    ],
    "3823409": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_054745_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823409/",
            "reporter": "abus3reports"
        }
    ],
    "3823410": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_074901_backgroundTaskHost.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823410/",
            "reporter": "abus3reports"
        }
    ],
    "3823411": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_234412_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823411/",
            "reporter": "abus3reports"
        }
    ],
    "3823412": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/runtime.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "CoinMiner",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823412/",
            "reporter": "abus3reports"
        }
    ],
    "3823413": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_100744_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823413/",
            "reporter": "abus3reports"
        }
    ],
    "3823414": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_112803_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823414/",
            "reporter": "abus3reports"
        }
    ],
    "3823415": [
        {
            "dateadded": "2026-04-16 09:37:35 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_074157_KwpsOffice.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823415/",
            "reporter": "abus3reports"
        }
    ],
    "3823405": [
        {
            "dateadded": "2026-04-16 09:37:34 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_065159_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823405/",
            "reporter": "abus3reports"
        }
    ],
    "3823406": [
        {
            "dateadded": "2026-04-16 09:37:34 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_095404_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823406/",
            "reporter": "abus3reports"
        }
    ],
    "3823407": [
        {
            "dateadded": "2026-04-16 09:37:34 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_080409_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823407/",
            "reporter": "abus3reports"
        }
    ],
    "3823402": [
        {
            "dateadded": "2026-04-16 09:37:33 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_063425_fixenroll.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823402/",
            "reporter": "abus3reports"
        }
    ],
    "3823403": [
        {
            "dateadded": "2026-04-16 09:37:33 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_055856_KwpsOffice.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823403/",
            "reporter": "abus3reports"
        }
    ],
    "3823404": [
        {
            "dateadded": "2026-04-16 09:37:33 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_113305_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823404/",
            "reporter": "abus3reports"
        }
    ],
    "3823394": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260408_113354_log_11675_Files.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823394/",
            "reporter": "abus3reports"
        }
    ],
    "3823395": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_072851_KwpsOffice.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823395/",
            "reporter": "abus3reports"
        }
    ],
    "3823396": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_074604_KwpsOffice.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823396/",
            "reporter": "abus3reports"
        }
    ],
    "3823397": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_160048_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823397/",
            "reporter": "abus3reports"
        }
    ],
    "3823398": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_073119_KwpsOffice.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823398/",
            "reporter": "abus3reports"
        }
    ],
    "3823399": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_063919_fixenroll.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823399/",
            "reporter": "abus3reports"
        }
    ],
    "3823400": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_114010_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823400/",
            "reporter": "abus3reports"
        }
    ],
    "3823401": [
        {
            "dateadded": "2026-04-16 09:37:32 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_073100_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823401/",
            "reporter": "abus3reports"
        }
    ],
    "3823392": [
        {
            "dateadded": "2026-04-16 09:37:31 UTC",
            "url": "https://248bestmoon.click/files/test_payload.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823392/",
            "reporter": "abus3reports"
        }
    ],
    "3823393": [
        {
            "dateadded": "2026-04-16 09:37:31 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_071319_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823393/",
            "reporter": "abus3reports"
        }
    ],
    "3823387": [
        {
            "dateadded": "2026-04-16 09:37:30 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_071454_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823387/",
            "reporter": "abus3reports"
        }
    ],
    "3823388": [
        {
            "dateadded": "2026-04-16 09:37:30 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_110618_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823388/",
            "reporter": "abus3reports"
        }
    ],
    "3823389": [
        {
            "dateadded": "2026-04-16 09:37:30 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_131142_enroll.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823389/",
            "reporter": "abus3reports"
        }
    ],
    "3823390": [
        {
            "dateadded": "2026-04-16 09:37:30 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_054903_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823390/",
            "reporter": "abus3reports"
        }
    ],
    "3823391": [
        {
            "dateadded": "2026-04-16 09:37:30 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_215520_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823391/",
            "reporter": "abus3reports"
        }
    ],
    "3823385": [
        {
            "dateadded": "2026-04-16 09:37:29 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_235032_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823385/",
            "reporter": "abus3reports"
        }
    ],
    "3823386": [
        {
            "dateadded": "2026-04-16 09:37:29 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_094023_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823386/",
            "reporter": "abus3reports"
        }
    ],
    "3823375": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_000355_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823375/",
            "reporter": "abus3reports"
        }
    ],
    "3823376": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_072738_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823376/",
            "reporter": "abus3reports"
        }
    ],
    "3823377": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_004127_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823377/",
            "reporter": "abus3reports"
        }
    ],
    "3823378": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_125003_litewebcam.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823378/",
            "reporter": "abus3reports"
        }
    ],
    "3823379": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_105947_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823379/",
            "reporter": "abus3reports"
        }
    ],
    "3823380": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_080215_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823380/",
            "reporter": "abus3reports"
        }
    ],
    "3823381": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_060321_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823381/",
            "reporter": "abus3reports"
        }
    ],
    "3823382": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_001230_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823382/",
            "reporter": "abus3reports"
        }
    ],
    "3823383": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://senior-staff2.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823383/",
            "reporter": "anonymous"
        }
    ],
    "3823384": [
        {
            "dateadded": "2026-04-16 09:37:28 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_102136_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823384/",
            "reporter": "abus3reports"
        }
    ],
    "3823371": [
        {
            "dateadded": "2026-04-16 09:37:27 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_220111_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823371/",
            "reporter": "abus3reports"
        }
    ],
    "3823372": [
        {
            "dateadded": "2026-04-16 09:37:27 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_104940_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823372/",
            "reporter": "abus3reports"
        }
    ],
    "3823373": [
        {
            "dateadded": "2026-04-16 09:37:27 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_055201_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823373/",
            "reporter": "abus3reports"
        }
    ],
    "3823374": [
        {
            "dateadded": "2026-04-16 09:37:27 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_120148_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823374/",
            "reporter": "abus3reports"
        }
    ],
    "3823367": [
        {
            "dateadded": "2026-04-16 09:37:26 UTC",
            "url": "https://248bestmoon.click/files/chisel.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823367/",
            "reporter": "abus3reports"
        }
    ],
    "3823368": [
        {
            "dateadded": "2026-04-16 09:37:26 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_065342_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823368/",
            "reporter": "abus3reports"
        }
    ],
    "3823369": [
        {
            "dateadded": "2026-04-16 09:37:26 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_062116_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823369/",
            "reporter": "abus3reports"
        }
    ],
    "3823370": [
        {
            "dateadded": "2026-04-16 09:37:26 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_061213_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823370/",
            "reporter": "abus3reports"
        }
    ],
    "3823366": [
        {
            "dateadded": "2026-04-16 09:37:25 UTC",
            "url": "https://248bestmoon.click/files/output.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823366/",
            "reporter": "abus3reports"
        }
    ],
    "3823356": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_110300_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823356/",
            "reporter": "abus3reports"
        }
    ],
    "3823357": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_233545_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823357/",
            "reporter": "abus3reports"
        }
    ],
    "3823358": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/outputold.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823358/",
            "reporter": "abus3reports"
        }
    ],
    "3823359": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/test_update.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823359/",
            "reporter": "abus3reports"
        }
    ],
    "3823360": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_000429_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823360/",
            "reporter": "abus3reports"
        }
    ],
    "3823361": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_052527_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823361/",
            "reporter": "abus3reports"
        }
    ],
    "3823362": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260410_090604_start-socks5.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823362/",
            "reporter": "abus3reports"
        }
    ],
    "3823363": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_072912_Microsoft.WindowsAppRuntime.Bootstrap.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823363/",
            "reporter": "abus3reports"
        }
    ],
    "3823364": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_071702_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823364/",
            "reporter": "abus3reports"
        }
    ],
    "3823365": [
        {
            "dateadded": "2026-04-16 09:37:24 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_101209_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823365/",
            "reporter": "abus3reports"
        }
    ],
    "3823343": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_071549_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823343/",
            "reporter": "abus3reports"
        }
    ],
    "3823344": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_235330_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823344/",
            "reporter": "abus3reports"
        }
    ],
    "3823345": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_072542_CKeyboardH.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823345/",
            "reporter": "abus3reports"
        }
    ],
    "3823346": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_113856_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823346/",
            "reporter": "abus3reports"
        }
    ],
    "3823347": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_232854_findadm.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823347/",
            "reporter": "abus3reports"
        }
    ],
    "3823348": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/chelevat.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ChromElevator",
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823348/",
            "reporter": "abus3reports"
        }
    ],
    "3823349": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_062231_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823349/",
            "reporter": "abus3reports"
        }
    ],
    "3823350": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/rsocx.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823350/",
            "reporter": "abus3reports"
        }
    ],
    "3823351": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_120957_enroll.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823351/",
            "reporter": "abus3reports"
        }
    ],
    "3823352": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_130244_litewebcam.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823352/",
            "reporter": "abus3reports"
        }
    ],
    "3823353": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/webcam.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823353/",
            "reporter": "abus3reports"
        }
    ],
    "3823354": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_101517_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823354/",
            "reporter": "abus3reports"
        }
    ],
    "3823355": [
        {
            "dateadded": "2026-04-16 09:37:23 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_074222_Microsoft.WindowsAppRuntime.Bootstrap.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823355/",
            "reporter": "abus3reports"
        }
    ],
    "3823339": [
        {
            "dateadded": "2026-04-16 09:37:22 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_071232_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823339/",
            "reporter": "abus3reports"
        }
    ],
    "3823340": [
        {
            "dateadded": "2026-04-16 09:37:22 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_123915_litewebcam.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823340/",
            "reporter": "abus3reports"
        }
    ],
    "3823341": [
        {
            "dateadded": "2026-04-16 09:37:22 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_102219_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823341/",
            "reporter": "abus3reports"
        }
    ],
    "3823342": [
        {
            "dateadded": "2026-04-16 09:37:22 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_135339_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823342/",
            "reporter": "abus3reports"
        }
    ],
    "3823334": [
        {
            "dateadded": "2026-04-16 09:37:21 UTC",
            "url": "https://248bestmoon.click/files/kluch.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823334/",
            "reporter": "abus3reports"
        }
    ],
    "3823335": [
        {
            "dateadded": "2026-04-16 09:37:21 UTC",
            "url": "http://85.239.147.6/files/7782139129/HG8WXRg.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823335/",
            "reporter": "Bitsight"
        }
    ],
    "3823336": [
        {
            "dateadded": "2026-04-16 09:37:21 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_130456_litewebcam.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823336/",
            "reporter": "abus3reports"
        }
    ],
    "3823337": [
        {
            "dateadded": "2026-04-16 09:37:21 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_124307_litewebcam.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823337/",
            "reporter": "abus3reports"
        }
    ],
    "3823338": [
        {
            "dateadded": "2026-04-16 09:37:21 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_105029_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823338/",
            "reporter": "abus3reports"
        }
    ],
    "3823331": [
        {
            "dateadded": "2026-04-16 09:37:20 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_113541_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823331/",
            "reporter": "abus3reports"
        }
    ],
    "3823332": [
        {
            "dateadded": "2026-04-16 09:37:20 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_094741_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823332/",
            "reporter": "abus3reports"
        }
    ],
    "3823333": [
        {
            "dateadded": "2026-04-16 09:37:20 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_113750_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823333/",
            "reporter": "abus3reports"
        }
    ],
    "3823326": [
        {
            "dateadded": "2026-04-16 09:37:18 UTC",
            "url": "https://248bestmoon.click/files/malwar.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823326/",
            "reporter": "abus3reports"
        }
    ],
    "3823327": [
        {
            "dateadded": "2026-04-16 09:37:18 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_105133_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823327/",
            "reporter": "abus3reports"
        }
    ],
    "3823328": [
        {
            "dateadded": "2026-04-16 09:37:18 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_101234_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823328/",
            "reporter": "abus3reports"
        }
    ],
    "3823329": [
        {
            "dateadded": "2026-04-16 09:37:18 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_230643_output.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823329/",
            "reporter": "abus3reports"
        }
    ],
    "3823330": [
        {
            "dateadded": "2026-04-16 09:37:18 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_095241_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823330/",
            "reporter": "abus3reports"
        }
    ],
    "3823325": [
        {
            "dateadded": "2026-04-16 09:37:17 UTC",
            "url": "https://248bestmoon.click/files/Ledger",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823325/",
            "reporter": "abus3reports"
        }
    ],
    "3823322": [
        {
            "dateadded": "2026-04-16 09:37:16 UTC",
            "url": "https://248bestmoon.click/files/FAvFf4V3.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823322/",
            "reporter": "abus3reports"
        }
    ],
    "3823323": [
        {
            "dateadded": "2026-04-16 09:37:16 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_100633_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823323/",
            "reporter": "abus3reports"
        }
    ],
    "3823324": [
        {
            "dateadded": "2026-04-16 09:37:16 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_010245_cbcheck.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823324/",
            "reporter": "abus3reports"
        }
    ],
    "3823319": [
        {
            "dateadded": "2026-04-16 09:37:15 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_105658_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823319/",
            "reporter": "abus3reports"
        }
    ],
    "3823320": [
        {
            "dateadded": "2026-04-16 09:37:15 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_103850_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823320/",
            "reporter": "abus3reports"
        }
    ],
    "3823321": [
        {
            "dateadded": "2026-04-16 09:37:15 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_132157_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823321/",
            "reporter": "abus3reports"
        }
    ],
    "3823310": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_120802_enroll.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823310/",
            "reporter": "abus3reports"
        }
    ],
    "3823311": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_133701_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823311/",
            "reporter": "abus3reports"
        }
    ],
    "3823312": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_102542_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823312/",
            "reporter": "abus3reports"
        }
    ],
    "3823313": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/stealer.bin",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823313/",
            "reporter": "abus3reports"
        }
    ],
    "3823314": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/version_proxy.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823314/",
            "reporter": "abus3reports"
        }
    ],
    "3823315": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260414_133641_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823315/",
            "reporter": "abus3reports"
        }
    ],
    "3823316": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_055951_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823316/",
            "reporter": "abus3reports"
        }
    ],
    "3823317": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_003937_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823317/",
            "reporter": "abus3reports"
        }
    ],
    "3823318": [
        {
            "dateadded": "2026-04-16 09:37:13 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_100232_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823318/",
            "reporter": "abus3reports"
        }
    ],
    "3823303": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_004008_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823303/",
            "reporter": "abus3reports"
        }
    ],
    "3823304": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_105538_vns.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823304/",
            "reporter": "abus3reports"
        }
    ],
    "3823305": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260410_090505_socks5.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823305/",
            "reporter": "abus3reports"
        }
    ],
    "3823306": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_080249_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823306/",
            "reporter": "abus3reports"
        }
    ],
    "3823307": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_094226_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823307/",
            "reporter": "abus3reports"
        }
    ],
    "3823308": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_051105_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823308/",
            "reporter": "abus3reports"
        }
    ],
    "3823309": [
        {
            "dateadded": "2026-04-16 09:37:12 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_124628_litewebcam.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823309/",
            "reporter": "abus3reports"
        }
    ],
    "3823300": [
        {
            "dateadded": "2026-04-16 09:37:10 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_060421_Microsoft.WindowsAppRuntime.Bootstrap.dll",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823300/",
            "reporter": "abus3reports"
        }
    ],
    "3823301": [
        {
            "dateadded": "2026-04-16 09:37:10 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_072449_Win32.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823301/",
            "reporter": "abus3reports"
        }
    ],
    "3823302": [
        {
            "dateadded": "2026-04-16 09:37:10 UTC",
            "url": "https://248bestmoon.click/files/fm_20260415_080459_backgroundTaskHost.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823302/",
            "reporter": "abus3reports"
        }
    ],
    "3823293": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_223446_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823293/",
            "reporter": "abus3reports"
        }
    ],
    "3823294": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_060657_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823294/",
            "reporter": "abus3reports"
        }
    ],
    "3823295": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_104151_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823295/",
            "reporter": "abus3reports"
        }
    ],
    "3823296": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_120214_clicknext.ps1",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823296/",
            "reporter": "abus3reports"
        }
    ],
    "3823297": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_224710_scan.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823297/",
            "reporter": "abus3reports"
        }
    ],
    "3823298": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_100811_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823298/",
            "reporter": "abus3reports"
        }
    ],
    "3823299": [
        {
            "dateadded": "2026-04-16 09:37:09 UTC",
            "url": "https://248bestmoon.click/files/debug.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823299/",
            "reporter": "abus3reports"
        }
    ],
    "3823292": [
        {
            "dateadded": "2026-04-16 09:37:08 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_220402_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823292/",
            "reporter": "abus3reports"
        }
    ],
    "3823285": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_002801_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823285/",
            "reporter": "abus3reports"
        }
    ],
    "3823286": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_121420_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823286/",
            "reporter": "abus3reports"
        }
    ],
    "3823287": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260411_132508_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823287/",
            "reporter": "abus3reports"
        }
    ],
    "3823288": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_053842_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823288/",
            "reporter": "abus3reports"
        }
    ],
    "3823289": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_105235_webcam.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823289/",
            "reporter": "abus3reports"
        }
    ],
    "3823290": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260413_125232_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823290/",
            "reporter": "abus3reports"
        }
    ],
    "3823291": [
        {
            "dateadded": "2026-04-16 09:37:07 UTC",
            "url": "https://248bestmoon.click/files/fm_20260412_002019_enroll.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "domain"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823291/",
            "reporter": "abus3reports"
        }
    ],
    "3823284": [
        {
            "dateadded": "2026-04-16 09:35:11 UTC",
            "url": "http://105.224.27.246:60149/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:23:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823284/",
            "reporter": "geenensp"
        }
    ],
    "3823283": [
        {
            "dateadded": "2026-04-16 09:34:11 UTC",
            "url": "http://219.157.39.106:54517/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:51:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823283/",
            "reporter": "geenensp"
        }
    ],
    "3823282": [
        {
            "dateadded": "2026-04-16 09:32:08 UTC",
            "url": "https://small-team1.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823282/",
            "reporter": "anonymous"
        }
    ],
    "3823281": [
        {
            "dateadded": "2026-04-16 09:29:23 UTC",
            "url": "http://123.5.159.130:49733/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823281/",
            "reporter": "geenensp"
        }
    ],
    "3823280": [
        {
            "dateadded": "2026-04-16 09:28:06 UTC",
            "url": "https://brand-mark6.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823280/",
            "reporter": "anonymous"
        }
    ],
    "3823279": [
        {
            "dateadded": "2026-04-16 09:24:17 UTC",
            "url": "http://175.173.68.153:33929/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 18:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823279/",
            "reporter": "geenensp"
        }
    ],
    "3823278": [
        {
            "dateadded": "2026-04-16 09:24:10 UTC",
            "url": "https://quick-cash5.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823278/",
            "reporter": "anonymous"
        }
    ],
    "3823277": [
        {
            "dateadded": "2026-04-16 09:21:16 UTC",
            "url": "http://59.96.138.65:55715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 09:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823277/",
            "reporter": "geenensp"
        }
    ],
    "3823276": [
        {
            "dateadded": "2026-04-16 09:19:14 UTC",
            "url": "http://60.22.244.216:60093/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823276/",
            "reporter": "geenensp"
        }
    ],
    "3823275": [
        {
            "dateadded": "2026-04-16 09:18:18 UTC",
            "url": "http://60.18.56.238:47199/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823275/",
            "reporter": "geenensp"
        }
    ],
    "3823274": [
        {
            "dateadded": "2026-04-16 09:15:13 UTC",
            "url": "https://info-desk4.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823274/",
            "reporter": "anonymous"
        }
    ],
    "3823273": [
        {
            "dateadded": "2026-04-16 09:08:09 UTC",
            "url": "https://empty-cart3.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823273/",
            "reporter": "anonymous"
        }
    ],
    "3823272": [
        {
            "dateadded": "2026-04-16 09:03:07 UTC",
            "url": "https://summer-sale2.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 09:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823272/",
            "reporter": "anonymous"
        }
    ],
    "3823271": [
        {
            "dateadded": "2026-04-16 08:58:08 UTC",
            "url": "https://fresh-food1.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823271/",
            "reporter": "anonymous"
        }
    ],
    "3823270": [
        {
            "dateadded": "2026-04-16 08:57:23 UTC",
            "url": "http://221.197.241.229:54463/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823270/",
            "reporter": "geenensp"
        }
    ],
    "3823269": [
        {
            "dateadded": "2026-04-16 08:53:10 UTC",
            "url": "http://182.117.113.51:51171/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823269/",
            "reporter": "geenensp"
        }
    ],
    "3823268": [
        {
            "dateadded": "2026-04-16 08:52:09 UTC",
            "url": "https://active-job6.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823268/",
            "reporter": "anonymous"
        }
    ],
    "3823267": [
        {
            "dateadded": "2026-04-16 08:51:19 UTC",
            "url": "http://60.22.244.216:60093/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823267/",
            "reporter": "geenensp"
        }
    ],
    "3823266": [
        {
            "dateadded": "2026-04-16 08:50:27 UTC",
            "url": "http://125.40.1.83:54799/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 08:50:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823266/",
            "reporter": "geenensp"
        }
    ],
    "3823260": [
        {
            "dateadded": "2026-04-16 08:49:10 UTC",
            "url": "https://whtempdomain.com/files/jar/Pjibf.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 09:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823260/",
            "reporter": "burger"
        }
    ],
    "3823261": [
        {
            "dateadded": "2026-04-16 08:49:10 UTC",
            "url": "https://whtempdomain.com/files/jar/RuntimeBroker.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 08:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "rustystealer",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823261/",
            "reporter": "burger"
        }
    ],
    "3823262": [
        {
            "dateadded": "2026-04-16 08:49:10 UTC",
            "url": "https://whtempdomain.com/files/jar/security",
            "url_status": "offline",
            "last_online": "2026-04-16 08:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823262/",
            "reporter": "burger"
        }
    ],
    "3823263": [
        {
            "dateadded": "2026-04-16 08:49:10 UTC",
            "url": "https://whtempdomain.com/files/jar/elevator",
            "url_status": "offline",
            "last_online": "2026-04-16 08:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823263/",
            "reporter": "burger"
        }
    ],
    "3823264": [
        {
            "dateadded": "2026-04-16 08:49:10 UTC",
            "url": "https://whtempdomain.com/files/jar/module",
            "url_status": "offline",
            "last_online": "2026-04-16 08:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823264/",
            "reporter": "burger"
        }
    ],
    "3823265": [
        {
            "dateadded": "2026-04-16 08:49:10 UTC",
            "url": "https://whtempdomain.com/files/jar/module2",
            "url_status": "offline",
            "last_online": "2026-04-16 08:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823265/",
            "reporter": "burger"
        }
    ],
    "3823259": [
        {
            "dateadded": "2026-04-16 08:49:08 UTC",
            "url": "https://whtempdomain.com/files/jar/component",
            "url_status": "offline",
            "last_online": "2026-04-16 08:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823259/",
            "reporter": "burger"
        }
    ],
    "3823258": [
        {
            "dateadded": "2026-04-16 08:46:21 UTC",
            "url": "http://60.18.56.238:47199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:43:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823258/",
            "reporter": "geenensp"
        }
    ],
    "3823257": [
        {
            "dateadded": "2026-04-16 08:46:19 UTC",
            "url": "http://115.50.190.220:36078/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:51:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823257/",
            "reporter": "geenensp"
        }
    ],
    "3823256": [
        {
            "dateadded": "2026-04-16 08:46:07 UTC",
            "url": "https://short-plan5.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823256/",
            "reporter": "anonymous"
        }
    ],
    "3823255": [
        {
            "dateadded": "2026-04-16 08:43:18 UTC",
            "url": "http://37.26.86.218:57084/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:59:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823255/",
            "reporter": "geenensp"
        }
    ],
    "3823254": [
        {
            "dateadded": "2026-04-16 08:40:09 UTC",
            "url": "https://promo-card4.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823254/",
            "reporter": "anonymous"
        }
    ],
    "3823253": [
        {
            "dateadded": "2026-04-16 08:36:14 UTC",
            "url": "http://42.227.237.135:35143/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 08:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823253/",
            "reporter": "geenensp"
        }
    ],
    "3823252": [
        {
            "dateadded": "2026-04-16 08:34:07 UTC",
            "url": "https://extra-coin3.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823252/",
            "reporter": "anonymous"
        }
    ],
    "3823251": [
        {
            "dateadded": "2026-04-16 08:29:10 UTC",
            "url": "https://daily-bonus2.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823251/",
            "reporter": "anonymous"
        }
    ],
    "3823250": [
        {
            "dateadded": "2026-04-16 08:28:09 UTC",
            "url": "http://42.237.59.26:37624/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:07:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823250/",
            "reporter": "geenensp"
        }
    ],
    "3823249": [
        {
            "dateadded": "2026-04-16 08:26:15 UTC",
            "url": "http://221.15.246.161:51320/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:24:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823249/",
            "reporter": "geenensp"
        }
    ],
    "3823248": [
        {
            "dateadded": "2026-04-16 08:26:07 UTC",
            "url": "https://lucky-gift1.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823248/",
            "reporter": "anonymous"
        }
    ],
    "3823247": [
        {
            "dateadded": "2026-04-16 08:22:09 UTC",
            "url": "https://front-gate6.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823247/",
            "reporter": "anonymous"
        }
    ],
    "3823246": [
        {
            "dateadded": "2026-04-16 08:19:24 UTC",
            "url": "http://118.34.109.121:57833/i",
            "url_status": "offline",
            "last_online": "2026-04-16 08:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823246/",
            "reporter": "geenensp"
        }
    ],
    "3823245": [
        {
            "dateadded": "2026-04-16 08:19:16 UTC",
            "url": "http://182.117.113.51:51171/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823245/",
            "reporter": "geenensp"
        }
    ],
    "3823244": [
        {
            "dateadded": "2026-04-16 08:16:15 UTC",
            "url": "http://115.58.91.178:53687/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:08:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823244/",
            "reporter": "geenensp"
        }
    ],
    "3823243": [
        {
            "dateadded": "2026-04-16 08:14:07 UTC",
            "url": "https://user-profile5.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823243/",
            "reporter": "anonymous"
        }
    ],
    "3823242": [
        {
            "dateadded": "2026-04-16 08:11:12 UTC",
            "url": "https://full-table4.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823242/",
            "reporter": "anonymous"
        }
    ],
    "3823241": [
        {
            "dateadded": "2026-04-16 08:02:09 UTC",
            "url": "https://prime-list3.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 08:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823241/",
            "reporter": "anonymous"
        }
    ],
    "3823240": [
        {
            "dateadded": "2026-04-16 07:58:17 UTC",
            "url": "http://42.224.126.26:56751/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:47:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823240/",
            "reporter": "geenensp"
        }
    ],
    "3823239": [
        {
            "dateadded": "2026-04-16 07:55:09 UTC",
            "url": "https://smart-point2.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823239/",
            "reporter": "anonymous"
        }
    ],
    "3823237": [
        {
            "dateadded": "2026-04-16 07:51:10 UTC",
            "url": "https://best-choice1.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823237/",
            "reporter": "anonymous"
        }
    ],
    "3823238": [
        {
            "dateadded": "2026-04-16 07:51:10 UTC",
            "url": "http://118.34.109.121:57833/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 07:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823238/",
            "reporter": "geenensp"
        }
    ],
    "3823232": [
        {
            "dateadded": "2026-04-16 07:49:11 UTC",
            "url": "http://elpolacodelsur2.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur2-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823232/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823233": [
        {
            "dateadded": "2026-04-16 07:49:11 UTC",
            "url": "http://elpolacodelsur2.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur2-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823233/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823234": [
        {
            "dateadded": "2026-04-16 07:49:11 UTC",
            "url": "http://www.dllpluginmsbuild.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-dllpluginmsbuild-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823234/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823235": [
        {
            "dateadded": "2026-04-16 07:49:11 UTC",
            "url": "http://elpolacodelsur1.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur1-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823235/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823236": [
        {
            "dateadded": "2026-04-16 07:49:11 UTC",
            "url": "https://www.elpolacodelsur3.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur3-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823236/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823230": [
        {
            "dateadded": "2026-04-16 07:49:09 UTC",
            "url": "http://elpolacodelsur1.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur1-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823230/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823231": [
        {
            "dateadded": "2026-04-16 07:49:09 UTC",
            "url": "http://dllpluginmsbuild.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dllpluginmsbuild-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823231/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823220": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://www.dllpluginmsbuild.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-dllpluginmsbuild-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823220/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823221": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://www.dllpluginmsbuild.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-dllpluginmsbuild-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823221/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823222": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "https://www.elpolacodelsur3.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur3-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823222/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823223": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://dllpluginmsbuild.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dllpluginmsbuild-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823223/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823224": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "https://www.elpolacodelsur3.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur3-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823224/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823225": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://elpolacodelsur1.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur1-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823225/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823226": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://elpolacodelsur3.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur3-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823226/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823227": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://elpolacodelsur3.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur3-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823227/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823228": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "http://www.dllpluginmsbuild.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-dllpluginmsbuild-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823228/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823229": [
        {
            "dateadded": "2026-04-16 07:49:08 UTC",
            "url": "https://www.elpolacodelsur3.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur3-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823229/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823215": [
        {
            "dateadded": "2026-04-16 07:49:07 UTC",
            "url": "http://dllpluginmsbuild.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dllpluginmsbuild-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823215/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823216": [
        {
            "dateadded": "2026-04-16 07:49:07 UTC",
            "url": "http://elpolacodelsur1.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur1-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823216/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823217": [
        {
            "dateadded": "2026-04-16 07:49:07 UTC",
            "url": "http://elpolacodelsur2.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur2-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823217/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823218": [
        {
            "dateadded": "2026-04-16 07:49:07 UTC",
            "url": "http://elpolacodelsur3.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur3-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823218/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823219": [
        {
            "dateadded": "2026-04-16 07:49:07 UTC",
            "url": "http://elpolacodelsur3.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur3-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823219/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823212": [
        {
            "dateadded": "2026-04-16 07:49:06 UTC",
            "url": "http://sostexampp.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sostexampp-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823212/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823213": [
        {
            "dateadded": "2026-04-16 07:49:06 UTC",
            "url": "http://elpolacodelsur2.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elpolacodelsur2-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823213/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823214": [
        {
            "dateadded": "2026-04-16 07:49:06 UTC",
            "url": "http://dllpluginmsbuild.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dllpluginmsbuild-duckdns-org",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823214/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823211": [
        {
            "dateadded": "2026-04-16 07:46:07 UTC",
            "url": "https://open-source6.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823211/",
            "reporter": "anonymous"
        }
    ],
    "3823210": [
        {
            "dateadded": "2026-04-16 07:43:10 UTC",
            "url": "http://www.elpolacodelsur2.duckdns.org/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur2-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823210/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823209": [
        {
            "dateadded": "2026-04-16 07:43:09 UTC",
            "url": "http://www.elpolacodelsur2.duckdns.org/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur2-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823209/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823208": [
        {
            "dateadded": "2026-04-16 07:43:08 UTC",
            "url": "http://www.elpolacodelsur2.duckdns.org/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur2-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823208/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823206": [
        {
            "dateadded": "2026-04-16 07:43:07 UTC",
            "url": "http://www.elpolacodelsur2.duckdns.org/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget",
                "www-elpolacodelsur2-duckdns-org"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823206/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823207": [
        {
            "dateadded": "2026-04-16 07:43:07 UTC",
            "url": "https://travel-blog5.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823207/",
            "reporter": "anonymous"
        }
    ],
    "3823205": [
        {
            "dateadded": "2026-04-16 07:42:18 UTC",
            "url": "http://115.50.0.79:44241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:51:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823205/",
            "reporter": "geenensp"
        }
    ],
    "3823204": [
        {
            "dateadded": "2026-04-16 07:37:23 UTC",
            "url": "http://27.206.138.8:45268/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823204/",
            "reporter": "geenensp"
        }
    ],
    "3823203": [
        {
            "dateadded": "2026-04-16 07:34:08 UTC",
            "url": "https://small-map4.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823203/",
            "reporter": "anonymous"
        }
    ],
    "3823202": [
        {
            "dateadded": "2026-04-16 07:31:18 UTC",
            "url": "http://182.122.192.4:42557/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:41:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823202/",
            "reporter": "geenensp"
        }
    ],
    "3823201": [
        {
            "dateadded": "2026-04-16 07:31:17 UTC",
            "url": "http://37.52.255.21:54061/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823201/",
            "reporter": "geenensp"
        }
    ],
    "3823200": [
        {
            "dateadded": "2026-04-16 07:28:07 UTC",
            "url": "https://latest-news3.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823200/",
            "reporter": "anonymous"
        }
    ],
    "3823199": [
        {
            "dateadded": "2026-04-16 07:27:15 UTC",
            "url": "http://38.52.142.194:34676/i",
            "url_status": "offline",
            "last_online": "2026-04-16 07:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823199/",
            "reporter": "geenensp"
        }
    ],
    "3823198": [
        {
            "dateadded": "2026-04-16 07:26:22 UTC",
            "url": "http://182.122.192.4:42557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823198/",
            "reporter": "geenensp"
        }
    ],
    "3823197": [
        {
            "dateadded": "2026-04-16 07:26:17 UTC",
            "url": "http://42.235.97.236:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:08:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823197/",
            "reporter": "geenensp"
        }
    ],
    "3823196": [
        {
            "dateadded": "2026-04-16 07:24:11 UTC",
            "url": "https://scenic-spot2.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823196/",
            "reporter": "anonymous"
        }
    ],
    "3823195": [
        {
            "dateadded": "2026-04-16 07:23:14 UTC",
            "url": "http://72.194.227.46:50880/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823195/",
            "reporter": "geenensp"
        }
    ],
    "3823194": [
        {
            "dateadded": "2026-04-16 07:21:16 UTC",
            "url": "http://115.49.240.254:51449/i",
            "url_status": "offline",
            "last_online": "2026-04-16 07:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823194/",
            "reporter": "geenensp"
        }
    ],
    "3823193": [
        {
            "dateadded": "2026-04-16 07:21:09 UTC",
            "url": "https://urban-vision1.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823193/",
            "reporter": "anonymous"
        }
    ],
    "3823192": [
        {
            "dateadded": "2026-04-16 07:20:08 UTC",
            "url": "http://91.92.242.132/opt/adm/lct/m",
            "url_status": "offline",
            "last_online": "2026-04-16 17:03:42 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-242-132",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823192/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823191": [
        {
            "dateadded": "2026-04-16 07:19:12 UTC",
            "url": "http://42.224.126.26:56751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823191/",
            "reporter": "geenensp"
        }
    ],
    "3823190": [
        {
            "dateadded": "2026-04-16 07:19:07 UTC",
            "url": "http://91.92.242.132/opt/adm/lct/shjef2aVFDe.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 17:48:06 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-242-132",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823190/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823189": [
        {
            "dateadded": "2026-04-16 07:18:20 UTC",
            "url": "http://27.206.138.8:45268/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:18:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823189/",
            "reporter": "geenensp"
        }
    ],
    "3823188": [
        {
            "dateadded": "2026-04-16 07:11:10 UTC",
            "url": "https://global-site6.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823188/",
            "reporter": "anonymous"
        }
    ],
    "3823187": [
        {
            "dateadded": "2026-04-16 07:06:12 UTC",
            "url": "https://main-street5.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823187/",
            "reporter": "anonymous"
        }
    ],
    "3823182": [
        {
            "dateadded": "2026-04-16 07:02:29 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823182/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823183": [
        {
            "dateadded": "2026-04-16 07:02:29 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823183/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823184": [
        {
            "dateadded": "2026-04-16 07:02:29 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823184/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823185": [
        {
            "dateadded": "2026-04-16 07:02:29 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823185/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823186": [
        {
            "dateadded": "2026-04-16 07:02:29 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823186/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823179": [
        {
            "dateadded": "2026-04-16 07:02:28 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823179/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823180": [
        {
            "dateadded": "2026-04-16 07:02:28 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823180/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823181": [
        {
            "dateadded": "2026-04-16 07:02:28 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823181/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823178": [
        {
            "dateadded": "2026-04-16 07:02:10 UTC",
            "url": "http://ferwgf4er343.duckdns.org/opt/adm/lct/ssad4edD!4d.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 17:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "DarkVisionRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823178/",
            "reporter": "abuse_ch"
        }
    ],
    "3823177": [
        {
            "dateadded": "2026-04-16 07:02:09 UTC",
            "url": "http://ferwgf4er343.duckdns.org/opt/adm/lct/shjef2aVFDe.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 16:52:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823177/",
            "reporter": "abuse_ch"
        }
    ],
    "3823175": [
        {
            "dateadded": "2026-04-16 07:01:22 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823175/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823176": [
        {
            "dateadded": "2026-04-16 07:01:22 UTC",
            "url": "http://77.221.153.207/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823176/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823174": [
        {
            "dateadded": "2026-04-16 07:00:17 UTC",
            "url": "http://42.235.97.236:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823174/",
            "reporter": "geenensp"
        }
    ],
    "3823173": [
        {
            "dateadded": "2026-04-16 07:00:11 UTC",
            "url": "https://total-summary4.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 07:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823173/",
            "reporter": "anonymous"
        }
    ],
    "3823172": [
        {
            "dateadded": "2026-04-16 06:54:10 UTC",
            "url": "https://local-office3.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823172/",
            "reporter": "anonymous"
        }
    ],
    "3823171": [
        {
            "dateadded": "2026-04-16 06:49:07 UTC",
            "url": "https://large-parcel2.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823171/",
            "reporter": "anonymous"
        }
    ],
    "3823170": [
        {
            "dateadded": "2026-04-16 06:45:20 UTC",
            "url": "http://182.126.125.56:43434/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:12:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823170/",
            "reporter": "geenensp"
        }
    ],
    "3823168": [
        {
            "dateadded": "2026-04-16 06:43:13 UTC",
            "url": "http://182.126.125.56:43434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:08:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823168/",
            "reporter": "geenensp"
        }
    ],
    "3823169": [
        {
            "dateadded": "2026-04-16 06:43:13 UTC",
            "url": "https://order-status1.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823169/",
            "reporter": "anonymous"
        }
    ],
    "3823166": [
        {
            "dateadded": "2026-04-16 06:40:23 UTC",
            "url": "http://38.52.142.194:34676/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:40:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823166/",
            "reporter": "geenensp"
        }
    ],
    "3823167": [
        {
            "dateadded": "2026-04-16 06:40:23 UTC",
            "url": "http://180.191.16.24:51824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 19:08:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823167/",
            "reporter": "geenensp"
        }
    ],
    "3823165": [
        {
            "dateadded": "2026-04-16 06:40:10 UTC",
            "url": "http://147.45.79.74:5001/client.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 06:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "147-45-79-74-5001",
                "exe",
                "QuasarRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823165/",
            "reporter": "BlinkzSec"
        }
    ],
    "3823164": [
        {
            "dateadded": "2026-04-16 06:37:13 UTC",
            "url": "https://home-section6.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823164/",
            "reporter": "anonymous"
        }
    ],
    "3823163": [
        {
            "dateadded": "2026-04-16 06:31:09 UTC",
            "url": "https://public-help5.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823163/",
            "reporter": "anonymous"
        }
    ],
    "3823162": [
        {
            "dateadded": "2026-04-16 06:26:22 UTC",
            "url": "https://item-details4.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:26:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823162/",
            "reporter": "anonymous"
        }
    ],
    "3823161": [
        {
            "dateadded": "2026-04-16 06:25:22 UTC",
            "url": "http://110.36.77.19:60390/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:25:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823161/",
            "reporter": "geenensp"
        }
    ],
    "3823160": [
        {
            "dateadded": "2026-04-16 06:23:10 UTC",
            "url": "http://115.50.67.111:38084/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823160/",
            "reporter": "geenensp"
        }
    ],
    "3823159": [
        {
            "dateadded": "2026-04-16 06:21:12 UTC",
            "url": "https://media-gallery3.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823159/",
            "reporter": "anonymous"
        }
    ],
    "3823158": [
        {
            "dateadded": "2026-04-16 06:19:18 UTC",
            "url": "http://125.161.248.54:47184/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823158/",
            "reporter": "geenensp"
        }
    ],
    "3823157": [
        {
            "dateadded": "2026-04-16 06:15:10 UTC",
            "url": "https://guest-portal2.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823157/",
            "reporter": "anonymous"
        }
    ],
    "3823156": [
        {
            "dateadded": "2026-04-16 06:14:17 UTC",
            "url": "http://196.189.104.106:50618/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823156/",
            "reporter": "geenensp"
        }
    ],
    "3823155": [
        {
            "dateadded": "2026-04-16 06:10:14 UTC",
            "url": "https://central-market1.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823155/",
            "reporter": "anonymous"
        }
    ],
    "3823154": [
        {
            "dateadded": "2026-04-16 06:04:16 UTC",
            "url": "https://street-view6.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 06:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823154/",
            "reporter": "anonymous"
        }
    ],
    "3823153": [
        {
            "dateadded": "2026-04-16 06:02:13 UTC",
            "url": "http://123.190.227.65:41653/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:23:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823153/",
            "reporter": "geenensp"
        }
    ],
    "3823152": [
        {
            "dateadded": "2026-04-16 05:58:14 UTC",
            "url": "https://good-luck5.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823152/",
            "reporter": "anonymous"
        }
    ],
    "3823151": [
        {
            "dateadded": "2026-04-16 05:53:24 UTC",
            "url": "http://112.242.188.194:36596/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823151/",
            "reporter": "geenensp"
        }
    ],
    "3823150": [
        {
            "dateadded": "2026-04-16 05:52:13 UTC",
            "url": "https://sunny-day4.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823150/",
            "reporter": "anonymous"
        }
    ],
    "3823149": [
        {
            "dateadded": "2026-04-16 05:48:24 UTC",
            "url": "http://190.109.228.82:60661/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:48:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823149/",
            "reporter": "geenensp"
        }
    ],
    "3823148": [
        {
            "dateadded": "2026-04-16 05:47:14 UTC",
            "url": "https://bright-sun3.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823148/",
            "reporter": "anonymous"
        }
    ],
    "3823147": [
        {
            "dateadded": "2026-04-16 05:44:13 UTC",
            "url": "https://brukva.shop/files/output.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-vidar",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823147/",
            "reporter": "abuse_ch"
        }
    ],
    "3823146": [
        {
            "dateadded": "2026-04-16 05:41:15 UTC",
            "url": "https://health-care2.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:41:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823146/",
            "reporter": "anonymous"
        }
    ],
    "3823145": [
        {
            "dateadded": "2026-04-16 05:37:33 UTC",
            "url": "http://123.190.227.65:41653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:57:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823145/",
            "reporter": "geenensp"
        }
    ],
    "3823144": [
        {
            "dateadded": "2026-04-16 05:35:14 UTC",
            "url": "https://sweet-home1.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823144/",
            "reporter": "anonymous"
        }
    ],
    "3823143": [
        {
            "dateadded": "2026-04-16 05:30:25 UTC",
            "url": "http://115.61.3.225:32998/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823143/",
            "reporter": "geenensp"
        }
    ],
    "3823142": [
        {
            "dateadded": "2026-04-16 05:30:16 UTC",
            "url": "https://work-done6.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823142/",
            "reporter": "anonymous"
        }
    ],
    "3823140": [
        {
            "dateadded": "2026-04-16 05:29:11 UTC",
            "url": "http://62.60.226.200/public_files/49YyrdI.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:29 UTC",
            "threat": "malware_download",
            "tags": [
                "RemusStealer",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823140/",
            "reporter": "abuse_ch"
        }
    ],
    "3823141": [
        {
            "dateadded": "2026-04-16 05:29:11 UTC",
            "url": "http://62.60.226.200/public_files/G65Chbx.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:23 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823141/",
            "reporter": "abuse_ch"
        }
    ],
    "3823139": [
        {
            "dateadded": "2026-04-16 05:29:09 UTC",
            "url": "http://62.60.226.200/public_files/KGVn4OY.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:48 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823139/",
            "reporter": "abuse_ch"
        }
    ],
    "3823138": [
        {
            "dateadded": "2026-04-16 05:24:15 UTC",
            "url": "https://heavy-pack5.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823138/",
            "reporter": "anonymous"
        }
    ],
    "3823136": [
        {
            "dateadded": "2026-04-16 05:21:32 UTC",
            "url": "http://182.121.230.91:53615/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823136/",
            "reporter": "geenensp"
        }
    ],
    "3823137": [
        {
            "dateadded": "2026-04-16 05:21:32 UTC",
            "url": "http://190.109.228.82:60661/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823137/",
            "reporter": "geenensp"
        }
    ],
    "3823135": [
        {
            "dateadded": "2026-04-16 05:20:24 UTC",
            "url": "http://182.121.230.91:53615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:48:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823135/",
            "reporter": "geenensp"
        }
    ],
    "3823134": [
        {
            "dateadded": "2026-04-16 05:19:43 UTC",
            "url": "http://112.242.188.194:36596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823134/",
            "reporter": "geenensp"
        }
    ],
    "3823133": [
        {
            "dateadded": "2026-04-16 05:19:13 UTC",
            "url": "https://short-word4.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823133/",
            "reporter": "anonymous"
        }
    ],
    "3823132": [
        {
            "dateadded": "2026-04-16 05:13:14 UTC",
            "url": "https://sticky-note3.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823132/",
            "reporter": "anonymous"
        }
    ],
    "3823131": [
        {
            "dateadded": "2026-04-16 05:07:09 UTC",
            "url": "https://direct-send2.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823131/",
            "reporter": "anonymous"
        }
    ],
    "3823130": [
        {
            "dateadded": "2026-04-16 05:02:12 UTC",
            "url": "https://express-mail1.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 05:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823130/",
            "reporter": "anonymous"
        }
    ],
    "3823129": [
        {
            "dateadded": "2026-04-16 04:57:12 UTC",
            "url": "https://solid-base6.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823129/",
            "reporter": "anonymous"
        }
    ],
    "3823128": [
        {
            "dateadded": "2026-04-16 04:53:24 UTC",
            "url": "http://83.177.220.128:33134/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823128/",
            "reporter": "geenensp"
        }
    ],
    "3823127": [
        {
            "dateadded": "2026-04-16 04:51:13 UTC",
            "url": "https://rain-drop5.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823127/",
            "reporter": "anonymous"
        }
    ],
    "3823126": [
        {
            "dateadded": "2026-04-16 04:49:18 UTC",
            "url": "http://113.239.213.15:38968/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823126/",
            "reporter": "geenensp"
        }
    ],
    "3823125": [
        {
            "dateadded": "2026-04-16 04:48:09 UTC",
            "url": "http://115.57.184.176:49912/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:02:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823125/",
            "reporter": "geenensp"
        }
    ],
    "3823124": [
        {
            "dateadded": "2026-04-16 04:45:24 UTC",
            "url": "http://42.230.25.51:56197/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823124/",
            "reporter": "geenensp"
        }
    ],
    "3823123": [
        {
            "dateadded": "2026-04-16 04:44:13 UTC",
            "url": "https://deep-well4.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823123/",
            "reporter": "anonymous"
        }
    ],
    "3823122": [
        {
            "dateadded": "2026-04-16 04:39:07 UTC",
            "url": "https://river-flow3.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823122/",
            "reporter": "anonymous"
        }
    ],
    "3823121": [
        {
            "dateadded": "2026-04-16 04:33:14 UTC",
            "url": "https://ocean-blue2.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823121/",
            "reporter": "anonymous"
        }
    ],
    "3823120": [
        {
            "dateadded": "2026-04-16 04:29:13 UTC",
            "url": "https://clear-water1.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823120/",
            "reporter": "anonymous"
        }
    ],
    "3823119": [
        {
            "dateadded": "2026-04-16 04:25:22 UTC",
            "url": "http://119.184.29.230:60461/i",
            "url_status": "offline",
            "last_online": "2026-04-19 09:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823119/",
            "reporter": "geenensp"
        }
    ],
    "3823118": [
        {
            "dateadded": "2026-04-16 04:23:11 UTC",
            "url": "http://83.177.220.128:33134/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823118/",
            "reporter": "geenensp"
        }
    ],
    "3823117": [
        {
            "dateadded": "2026-04-16 04:22:14 UTC",
            "url": "https://group-join6.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823117/",
            "reporter": "anonymous"
        }
    ],
    "3823116": [
        {
            "dateadded": "2026-04-16 04:22:08 UTC",
            "url": "http://113.239.213.15:38968/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:42:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823116/",
            "reporter": "geenensp"
        }
    ],
    "3823115": [
        {
            "dateadded": "2026-04-16 04:17:12 UTC",
            "url": "https://brief-meet5.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823115/",
            "reporter": "anonymous"
        }
    ],
    "3823114": [
        {
            "dateadded": "2026-04-16 04:13:09 UTC",
            "url": "https://simple-form4.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823114/",
            "reporter": "anonymous"
        }
    ],
    "3823113": [
        {
            "dateadded": "2026-04-16 04:10:09 UTC",
            "url": "https://phone-call3.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823113/",
            "reporter": "anonymous"
        }
    ],
    "3823112": [
        {
            "dateadded": "2026-04-16 04:00:09 UTC",
            "url": "https://senior-staff2.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 04:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823112/",
            "reporter": "anonymous"
        }
    ],
    "3823111": [
        {
            "dateadded": "2026-04-16 03:55:17 UTC",
            "url": "http://119.184.29.230:60461/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:29:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823111/",
            "reporter": "geenensp"
        }
    ],
    "3823110": [
        {
            "dateadded": "2026-04-16 03:55:13 UTC",
            "url": "https://small-team1.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823110/",
            "reporter": "anonymous"
        }
    ],
    "3823109": [
        {
            "dateadded": "2026-04-16 03:51:17 UTC",
            "url": "http://115.57.184.176:49912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823109/",
            "reporter": "geenensp"
        }
    ],
    "3823108": [
        {
            "dateadded": "2026-04-16 03:49:13 UTC",
            "url": "https://brand-mark6.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823108/",
            "reporter": "anonymous"
        }
    ],
    "3823107": [
        {
            "dateadded": "2026-04-16 03:44:06 UTC",
            "url": "https://quick-cash5.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823107/",
            "reporter": "anonymous"
        }
    ],
    "3823106": [
        {
            "dateadded": "2026-04-16 03:43:19 UTC",
            "url": "http://42.239.142.157:48587/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823106/",
            "reporter": "geenensp"
        }
    ],
    "3823105": [
        {
            "dateadded": "2026-04-16 03:39:12 UTC",
            "url": "http://42.239.142.157:48587/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:50:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823105/",
            "reporter": "geenensp"
        }
    ],
    "3823104": [
        {
            "dateadded": "2026-04-16 03:38:08 UTC",
            "url": "https://info-desk4.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823104/",
            "reporter": "anonymous"
        }
    ],
    "3823103": [
        {
            "dateadded": "2026-04-16 03:32:09 UTC",
            "url": "https://empty-cart3.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823103/",
            "reporter": "anonymous"
        }
    ],
    "3823102": [
        {
            "dateadded": "2026-04-16 03:27:18 UTC",
            "url": "http://219.157.185.79:44068/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:47:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823102/",
            "reporter": "geenensp"
        }
    ],
    "3823101": [
        {
            "dateadded": "2026-04-16 03:27:07 UTC",
            "url": "https://summer-sale2.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823101/",
            "reporter": "anonymous"
        }
    ],
    "3823100": [
        {
            "dateadded": "2026-04-16 03:22:08 UTC",
            "url": "https://fresh-food1.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823100/",
            "reporter": "anonymous"
        }
    ],
    "3823099": [
        {
            "dateadded": "2026-04-16 03:21:20 UTC",
            "url": "http://42.232.224.113:39360/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:23:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823099/",
            "reporter": "geenensp"
        }
    ],
    "3823098": [
        {
            "dateadded": "2026-04-16 03:19:17 UTC",
            "url": "http://110.36.89.246:41998/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823098/",
            "reporter": "geenensp"
        }
    ],
    "3823097": [
        {
            "dateadded": "2026-04-16 03:15:08 UTC",
            "url": "https://active-job6.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823097/",
            "reporter": "anonymous"
        }
    ],
    "3823096": [
        {
            "dateadded": "2026-04-16 03:10:12 UTC",
            "url": "https://short-plan5.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823096/",
            "reporter": "anonymous"
        }
    ],
    "3823095": [
        {
            "dateadded": "2026-04-16 03:08:18 UTC",
            "url": "http://115.59.27.175:54653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:11:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823095/",
            "reporter": "geenensp"
        }
    ],
    "3823094": [
        {
            "dateadded": "2026-04-16 03:05:11 UTC",
            "url": "http://42.233.105.41:39772/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823094/",
            "reporter": "geenensp"
        }
    ],
    "3823093": [
        {
            "dateadded": "2026-04-16 03:04:07 UTC",
            "url": "https://promo-card4.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 03:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823093/",
            "reporter": "anonymous"
        }
    ],
    "3823092": [
        {
            "dateadded": "2026-04-16 03:02:18 UTC",
            "url": "http://85.208.9.62/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-16 10:51:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823092/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823090": [
        {
            "dateadded": "2026-04-16 03:01:10 UTC",
            "url": "http://85.208.9.62/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-16 14:17:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823090/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823091": [
        {
            "dateadded": "2026-04-16 03:01:10 UTC",
            "url": "http://85.208.9.62/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-16 11:41:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823091/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823089": [
        {
            "dateadded": "2026-04-16 03:00:23 UTC",
            "url": "http://85.208.9.62/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-16 10:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823089/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823082": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://42.233.105.41:39772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:29:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823082/",
            "reporter": "geenensp"
        }
    ],
    "3823083": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://156.229.118.144:47229/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:27:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823083/",
            "reporter": "geenensp"
        }
    ],
    "3823084": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://85.208.9.62/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-16 10:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823084/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823085": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://85.208.9.62/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-16 10:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823085/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823086": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://85.208.9.62/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-16 10:33:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823086/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823087": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://85.208.9.62/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-16 11:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823087/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823088": [
        {
            "dateadded": "2026-04-16 03:00:22 UTC",
            "url": "http://85.208.9.62/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-16 11:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823088/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3823081": [
        {
            "dateadded": "2026-04-16 02:59:09 UTC",
            "url": "https://extra-coin3.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823081/",
            "reporter": "anonymous"
        }
    ],
    "3823080": [
        {
            "dateadded": "2026-04-16 02:56:19 UTC",
            "url": "http://182.121.250.11:41341/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823080/",
            "reporter": "geenensp"
        }
    ],
    "3823079": [
        {
            "dateadded": "2026-04-16 02:53:10 UTC",
            "url": "https://daily-bonus2.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823079/",
            "reporter": "anonymous"
        }
    ],
    "3823078": [
        {
            "dateadded": "2026-04-16 02:51:12 UTC",
            "url": "http://110.36.89.246:41998/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:59:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823078/",
            "reporter": "geenensp"
        }
    ],
    "3823076": [
        {
            "dateadded": "2026-04-16 02:49:15 UTC",
            "url": "http://61.52.7.168:34470/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823076/",
            "reporter": "geenensp"
        }
    ],
    "3823077": [
        {
            "dateadded": "2026-04-16 02:49:15 UTC",
            "url": "http://125.41.0.135:48337/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:39:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823077/",
            "reporter": "geenensp"
        }
    ],
    "3823075": [
        {
            "dateadded": "2026-04-16 02:48:07 UTC",
            "url": "https://lucky-gift1.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823075/",
            "reporter": "anonymous"
        }
    ],
    "3823074": [
        {
            "dateadded": "2026-04-16 02:47:07 UTC",
            "url": "http://115.48.149.123:54393/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:02:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823074/",
            "reporter": "geenensp"
        }
    ],
    "3823073": [
        {
            "dateadded": "2026-04-16 02:43:06 UTC",
            "url": "https://front-gate6.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823073/",
            "reporter": "anonymous"
        }
    ],
    "3823072": [
        {
            "dateadded": "2026-04-16 02:41:11 UTC",
            "url": "https://user-profile5.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823072/",
            "reporter": "anonymous"
        }
    ],
    "3823071": [
        {
            "dateadded": "2026-04-16 02:38:21 UTC",
            "url": "http://183.35.50.73:47727/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823071/",
            "reporter": "geenensp"
        }
    ],
    "3823070": [
        {
            "dateadded": "2026-04-16 02:31:19 UTC",
            "url": "http://182.121.250.11:41341/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823070/",
            "reporter": "geenensp"
        }
    ],
    "3823069": [
        {
            "dateadded": "2026-04-16 02:31:08 UTC",
            "url": "https://full-table4.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823069/",
            "reporter": "anonymous"
        }
    ],
    "3823068": [
        {
            "dateadded": "2026-04-16 02:27:11 UTC",
            "url": "http://113.239.70.25:55329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:10:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823068/",
            "reporter": "geenensp"
        }
    ],
    "3823067": [
        {
            "dateadded": "2026-04-16 02:25:09 UTC",
            "url": "https://prime-list3.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823067/",
            "reporter": "anonymous"
        }
    ],
    "3823066": [
        {
            "dateadded": "2026-04-16 02:19:13 UTC",
            "url": "https://smart-point2.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823066/",
            "reporter": "anonymous"
        }
    ],
    "3823065": [
        {
            "dateadded": "2026-04-16 02:18:17 UTC",
            "url": "http://115.48.149.123:54393/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:26:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823065/",
            "reporter": "geenensp"
        }
    ],
    "3823064": [
        {
            "dateadded": "2026-04-16 02:17:17 UTC",
            "url": "http://115.55.140.67:41209/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823064/",
            "reporter": "geenensp"
        }
    ],
    "3823063": [
        {
            "dateadded": "2026-04-16 02:14:06 UTC",
            "url": "https://best-choice1.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823063/",
            "reporter": "anonymous"
        }
    ],
    "3823062": [
        {
            "dateadded": "2026-04-16 02:08:07 UTC",
            "url": "https://open-source6.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823062/",
            "reporter": "anonymous"
        }
    ],
    "3823061": [
        {
            "dateadded": "2026-04-16 02:03:08 UTC",
            "url": "https://travel-blog5.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 02:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823061/",
            "reporter": "anonymous"
        }
    ],
    "3823060": [
        {
            "dateadded": "2026-04-16 01:59:16 UTC",
            "url": "http://42.229.217.59:55697/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823060/",
            "reporter": "geenensp"
        }
    ],
    "3823059": [
        {
            "dateadded": "2026-04-16 01:57:09 UTC",
            "url": "https://small-map4.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823059/",
            "reporter": "anonymous"
        }
    ],
    "3823058": [
        {
            "dateadded": "2026-04-16 01:55:11 UTC",
            "url": "http://115.55.140.67:41209/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:54:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823058/",
            "reporter": "geenensp"
        }
    ],
    "3823057": [
        {
            "dateadded": "2026-04-16 01:53:06 UTC",
            "url": "http://182.121.46.177:44224/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:07:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823057/",
            "reporter": "geenensp"
        }
    ],
    "3823056": [
        {
            "dateadded": "2026-04-16 01:52:12 UTC",
            "url": "http://115.49.124.129:41123/i",
            "url_status": "offline",
            "last_online": "2026-04-16 01:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823056/",
            "reporter": "geenensp"
        }
    ],
    "3823055": [
        {
            "dateadded": "2026-04-16 01:52:07 UTC",
            "url": "https://latest-news3.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823055/",
            "reporter": "anonymous"
        }
    ],
    "3823054": [
        {
            "dateadded": "2026-04-16 01:46:07 UTC",
            "url": "https://scenic-spot2.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823054/",
            "reporter": "anonymous"
        }
    ],
    "3823053": [
        {
            "dateadded": "2026-04-16 01:40:09 UTC",
            "url": "https://urban-vision1.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823053/",
            "reporter": "anonymous"
        }
    ],
    "3823052": [
        {
            "dateadded": "2026-04-16 01:35:08 UTC",
            "url": "https://global-site6.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823052/",
            "reporter": "anonymous"
        }
    ],
    "3823051": [
        {
            "dateadded": "2026-04-16 01:31:08 UTC",
            "url": "https://main-street5.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823051/",
            "reporter": "anonymous"
        }
    ],
    "3823050": [
        {
            "dateadded": "2026-04-16 01:28:10 UTC",
            "url": "https://total-summary4.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823050/",
            "reporter": "anonymous"
        }
    ],
    "3823049": [
        {
            "dateadded": "2026-04-16 01:23:06 UTC",
            "url": "http://123.13.48.231:46174/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:27:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823049/",
            "reporter": "geenensp"
        }
    ],
    "3823048": [
        {
            "dateadded": "2026-04-16 01:22:15 UTC",
            "url": "http://125.38.134.233:57439/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:42:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823048/",
            "reporter": "geenensp"
        }
    ],
    "3823047": [
        {
            "dateadded": "2026-04-16 01:17:22 UTC",
            "url": "http://124.235.249.74:39147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823047/",
            "reporter": "geenensp"
        }
    ],
    "3823046": [
        {
            "dateadded": "2026-04-16 01:17:10 UTC",
            "url": "https://local-office3.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823046/",
            "reporter": "anonymous"
        }
    ],
    "3823045": [
        {
            "dateadded": "2026-04-16 01:14:07 UTC",
            "url": "https://large-parcel2.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823045/",
            "reporter": "anonymous"
        }
    ],
    "3823044": [
        {
            "dateadded": "2026-04-16 01:11:07 UTC",
            "url": "https://order-status1.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823044/",
            "reporter": "anonymous"
        }
    ],
    "3823043": [
        {
            "dateadded": "2026-04-16 01:10:20 UTC",
            "url": "http://42.229.217.59:55697/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:51:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823043/",
            "reporter": "geenensp"
        }
    ],
    "3823042": [
        {
            "dateadded": "2026-04-16 01:01:07 UTC",
            "url": "https://home-section6.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 01:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823042/",
            "reporter": "anonymous"
        }
    ],
    "3823041": [
        {
            "dateadded": "2026-04-16 00:58:18 UTC",
            "url": "http://42.177.238.150:49952/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:57:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823041/",
            "reporter": "geenensp"
        }
    ],
    "3823040": [
        {
            "dateadded": "2026-04-16 00:55:09 UTC",
            "url": "https://public-help5.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823040/",
            "reporter": "anonymous"
        }
    ],
    "3823039": [
        {
            "dateadded": "2026-04-16 00:54:14 UTC",
            "url": "http://123.13.48.231:46174/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823039/",
            "reporter": "geenensp"
        }
    ],
    "3823038": [
        {
            "dateadded": "2026-04-16 00:49:21 UTC",
            "url": "http://39.86.52.95:38095/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823038/",
            "reporter": "geenensp"
        }
    ],
    "3823037": [
        {
            "dateadded": "2026-04-16 00:49:20 UTC",
            "url": "http://125.161.248.54:47184/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 05:12:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823037/",
            "reporter": "geenensp"
        }
    ],
    "3823036": [
        {
            "dateadded": "2026-04-16 00:49:07 UTC",
            "url": "https://item-details4.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823036/",
            "reporter": "anonymous"
        }
    ],
    "3823035": [
        {
            "dateadded": "2026-04-16 00:45:09 UTC",
            "url": "https://media-gallery3.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823035/",
            "reporter": "anonymous"
        }
    ],
    "3823034": [
        {
            "dateadded": "2026-04-16 00:42:19 UTC",
            "url": "http://182.116.122.104:41155/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:00:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823034/",
            "reporter": "geenensp"
        }
    ],
    "3823033": [
        {
            "dateadded": "2026-04-16 00:38:07 UTC",
            "url": "https://guest-portal2.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823033/",
            "reporter": "anonymous"
        }
    ],
    "3823032": [
        {
            "dateadded": "2026-04-16 00:34:17 UTC",
            "url": "http://180.188.138.221:26024/i",
            "url_status": "offline",
            "last_online": "2026-04-26 06:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823032/",
            "reporter": "geenensp"
        }
    ],
    "3823031": [
        {
            "dateadded": "2026-04-16 00:33:07 UTC",
            "url": "https://central-market1.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823031/",
            "reporter": "anonymous"
        }
    ],
    "3823030": [
        {
            "dateadded": "2026-04-16 00:27:07 UTC",
            "url": "https://tri-fluxon.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823030/",
            "reporter": "anonymous"
        }
    ],
    "3823029": [
        {
            "dateadded": "2026-04-16 00:24:12 UTC",
            "url": "http://39.86.52.95:38095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:04:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823029/",
            "reporter": "geenensp"
        }
    ],
    "3823028": [
        {
            "dateadded": "2026-04-16 00:21:11 UTC",
            "url": "https://authsnapshot.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823028/",
            "reporter": "anonymous"
        }
    ],
    "3823027": [
        {
            "dateadded": "2026-04-16 00:19:08 UTC",
            "url": "http://113.221.15.165:55536/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:55:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823027/",
            "reporter": "geenensp"
        }
    ],
    "3823026": [
        {
            "dateadded": "2026-04-16 00:16:08 UTC",
            "url": "https://gutyx.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823026/",
            "reporter": "anonymous"
        }
    ],
    "3823025": [
        {
            "dateadded": "2026-04-16 00:15:23 UTC",
            "url": "http://222.142.254.82:55738/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823025/",
            "reporter": "geenensp"
        }
    ],
    "3823024": [
        {
            "dateadded": "2026-04-16 00:11:06 UTC",
            "url": "https://87phs.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823024/",
            "reporter": "anonymous"
        }
    ],
    "3823023": [
        {
            "dateadded": "2026-04-16 00:05:12 UTC",
            "url": "https://vscoj.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823023/",
            "reporter": "anonymous"
        }
    ],
    "3823022": [
        {
            "dateadded": "2026-04-16 00:00:17 UTC",
            "url": "http://42.224.102.253:49819/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823022/",
            "reporter": "geenensp"
        }
    ],
    "3823021": [
        {
            "dateadded": "2026-04-16 00:00:11 UTC",
            "url": "https://11q31v.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-16 00:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823021/",
            "reporter": "anonymous"
        }
    ],
    "3823020": [
        {
            "dateadded": "2026-04-15 23:54:09 UTC",
            "url": "https://p14sm-grid.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823020/",
            "reporter": "anonymous"
        }
    ],
    "3823019": [
        {
            "dateadded": "2026-04-15 23:51:23 UTC",
            "url": "http://113.221.15.165:55536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:58:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823019/",
            "reporter": "geenensp"
        }
    ],
    "3823018": [
        {
            "dateadded": "2026-04-15 23:48:08 UTC",
            "url": "https://9adl.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823018/",
            "reporter": "anonymous"
        }
    ],
    "3823017": [
        {
            "dateadded": "2026-04-15 23:42:12 UTC",
            "url": "https://specapi.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823017/",
            "reporter": "anonymous"
        }
    ],
    "3823016": [
        {
            "dateadded": "2026-04-15 23:37:09 UTC",
            "url": "https://b1oo9-hold.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823016/",
            "reporter": "anonymous"
        }
    ],
    "3823015": [
        {
            "dateadded": "2026-04-15 23:31:17 UTC",
            "url": "https://ovumpg.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823015/",
            "reporter": "anonymous"
        }
    ],
    "3823014": [
        {
            "dateadded": "2026-04-15 23:25:13 UTC",
            "url": "https://iijbe.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823014/",
            "reporter": "anonymous"
        }
    ],
    "3823013": [
        {
            "dateadded": "2026-04-15 23:22:31 UTC",
            "url": "http://180.188.138.221:26024/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823013/",
            "reporter": "geenensp"
        }
    ],
    "3823012": [
        {
            "dateadded": "2026-04-15 23:20:14 UTC",
            "url": "https://npmx.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823012/",
            "reporter": "anonymous"
        }
    ],
    "3823011": [
        {
            "dateadded": "2026-04-15 23:15:10 UTC",
            "url": "https://sol-tidea.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823011/",
            "reporter": "anonymous"
        }
    ],
    "3823010": [
        {
            "dateadded": "2026-04-15 23:09:07 UTC",
            "url": "https://fbhi02d.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823010/",
            "reporter": "anonymous"
        }
    ],
    "3823009": [
        {
            "dateadded": "2026-04-15 23:05:19 UTC",
            "url": "http://175.165.114.202:32890/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823009/",
            "reporter": "geenensp"
        }
    ],
    "3823008": [
        {
            "dateadded": "2026-04-15 23:03:14 UTC",
            "url": "https://queu-crest.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 23:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823008/",
            "reporter": "anonymous"
        }
    ],
    "3823007": [
        {
            "dateadded": "2026-04-15 23:00:21 UTC",
            "url": "http://175.146.153.184:48539/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:02:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823007/",
            "reporter": "geenensp"
        }
    ],
    "3823006": [
        {
            "dateadded": "2026-04-15 22:57:14 UTC",
            "url": "https://4cti-pulse.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823006/",
            "reporter": "anonymous"
        }
    ],
    "3823005": [
        {
            "dateadded": "2026-04-15 22:56:38 UTC",
            "url": "http://42.231.224.68:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:29:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823005/",
            "reporter": "geenensp"
        }
    ],
    "3823004": [
        {
            "dateadded": "2026-04-15 22:54:21 UTC",
            "url": "http://222.138.239.41:47199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:54:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823004/",
            "reporter": "geenensp"
        }
    ],
    "3823003": [
        {
            "dateadded": "2026-04-15 22:53:13 UTC",
            "url": "https://povv3r3-sheet.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823003/",
            "reporter": "anonymous"
        }
    ],
    "3823002": [
        {
            "dateadded": "2026-04-15 22:46:13 UTC",
            "url": "https://74vjq.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823002/",
            "reporter": "anonymous"
        }
    ],
    "3823001": [
        {
            "dateadded": "2026-04-15 22:40:14 UTC",
            "url": "https://rqwhul1.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823001/",
            "reporter": "anonymous"
        }
    ],
    "3823000": [
        {
            "dateadded": "2026-04-15 22:37:04 UTC",
            "url": "http://85.239.147.6/files/7048186296/ADohoJx.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3823000/",
            "reporter": "c2hunter"
        }
    ],
    "3822999": [
        {
            "dateadded": "2026-04-15 22:35:21 UTC",
            "url": "http://175.165.114.202:32890/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822999/",
            "reporter": "geenensp"
        }
    ],
    "3822998": [
        {
            "dateadded": "2026-04-15 22:35:13 UTC",
            "url": "https://ridgetempo.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822998/",
            "reporter": "anonymous"
        }
    ],
    "3822997": [
        {
            "dateadded": "2026-04-15 22:33:13 UTC",
            "url": "https://solcorea8.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 06:51:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822997/",
            "reporter": "anonymous"
        }
    ],
    "3822986": [
        {
            "dateadded": "2026-04-15 22:26:51 UTC",
            "url": "https://dl.armour-inc-down.net/in/?AdGuardPremiump6",
            "url_status": "offline",
            "last_online": "2026-04-15 22:26:51 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822986/",
            "reporter": "tcains1"
        }
    ],
    "3822985": [
        {
            "dateadded": "2026-04-15 22:24:16 UTC",
            "url": "http://180.244.8.214:55572/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:22:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822985/",
            "reporter": "geenensp"
        }
    ],
    "3822984": [
        {
            "dateadded": "2026-04-15 22:24:12 UTC",
            "url": "https://op3n-cast.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822984/",
            "reporter": "anonymous"
        }
    ],
    "3822983": [
        {
            "dateadded": "2026-04-15 22:19:19 UTC",
            "url": "http://187.45.95.254:55392/i",
            "url_status": "offline",
            "last_online": "2026-04-21 09:41:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822983/",
            "reporter": "geenensp"
        }
    ],
    "3822982": [
        {
            "dateadded": "2026-04-15 22:19:12 UTC",
            "url": "https://hfjivor0.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822982/",
            "reporter": "anonymous"
        }
    ],
    "3822981": [
        {
            "dateadded": "2026-04-15 22:12:19 UTC",
            "url": "http://120.28.138.7:38330/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822981/",
            "reporter": "geenensp"
        }
    ],
    "3822980": [
        {
            "dateadded": "2026-04-15 22:12:06 UTC",
            "url": "https://ser-lineor.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822980/",
            "reporter": "anonymous"
        }
    ],
    "3822979": [
        {
            "dateadded": "2026-04-15 22:07:08 UTC",
            "url": "https://xuymf0.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822979/",
            "reporter": "anonymous"
        }
    ],
    "3822977": [
        {
            "dateadded": "2026-04-15 22:01:11 UTC",
            "url": "https://raw.githubusercontent.com/Jerson78/erduo-skills/refs/heads/main/.claude/skills-erduo-2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 13:22:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822977/",
            "reporter": "tcains1"
        }
    ],
    "3822978": [
        {
            "dateadded": "2026-04-15 22:01:11 UTC",
            "url": "https://github.com/Jerson78/erduo-skills/raw/refs/heads/main/.claude/skills-erduo-2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 12:30:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822978/",
            "reporter": "tcains1"
        }
    ],
    "3822975": [
        {
            "dateadded": "2026-04-15 22:01:09 UTC",
            "url": "https://github.com/Jerson78/jerson78.github.io/raw/refs/heads/main/Discina/io-jerson-github-2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822975/",
            "reporter": "tcains1"
        }
    ],
    "3822976": [
        {
            "dateadded": "2026-04-15 22:01:09 UTC",
            "url": "https://raw.githubusercontent.com/Jerson78/jerson78.github.io/refs/heads/main/Discina/io-jerson-github-2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822976/",
            "reporter": "tcains1"
        }
    ],
    "3822972": [
        {
            "dateadded": "2026-04-15 22:01:08 UTC",
            "url": "https://github.com/V24AZAHER2/github-runners/raw/refs/heads/master/docker/runners-github-mammal.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:58:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822972/",
            "reporter": "tcains1"
        }
    ],
    "3822973": [
        {
            "dateadded": "2026-04-15 22:01:08 UTC",
            "url": "https://github.com/V24AZAHER2/v24azaher2.github.io/raw/refs/heads/main/fenceress/github_io_azaher_v_v3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:26:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822973/",
            "reporter": "tcains1"
        }
    ],
    "3822974": [
        {
            "dateadded": "2026-04-15 22:01:08 UTC",
            "url": "https://raw.githubusercontent.com/V24AZAHER2/github-runners/refs/heads/master/docker/runners-github-mammal.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822974/",
            "reporter": "tcains1"
        }
    ],
    "3822970": [
        {
            "dateadded": "2026-04-15 22:01:07 UTC",
            "url": "https://raw.githubusercontent.com/V24AZAHER2/v24azaher2.github.io/refs/heads/main/fenceress/github_io_azaher_v_v3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822970/",
            "reporter": "tcains1"
        }
    ],
    "3822971": [
        {
            "dateadded": "2026-04-15 22:01:07 UTC",
            "url": "https://tshev.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 22:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822971/",
            "reporter": "anonymous"
        }
    ],
    "3822969": [
        {
            "dateadded": "2026-04-15 21:57:10 UTC",
            "url": "https://312pl.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822969/",
            "reporter": "anonymous"
        }
    ],
    "3822968": [
        {
            "dateadded": "2026-04-15 21:56:16 UTC",
            "url": "http://115.63.146.117:48323/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:56:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822968/",
            "reporter": "geenensp"
        }
    ],
    "3822967": [
        {
            "dateadded": "2026-04-15 21:51:06 UTC",
            "url": "https://f1nal-wave.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822967/",
            "reporter": "anonymous"
        }
    ],
    "3822966": [
        {
            "dateadded": "2026-04-15 21:50:09 UTC",
            "url": "http://115.49.240.254:51449/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:28:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822966/",
            "reporter": "geenensp"
        }
    ],
    "3822965": [
        {
            "dateadded": "2026-04-15 21:47:14 UTC",
            "url": "http://124.131.128.182:53186/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:17:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822965/",
            "reporter": "geenensp"
        }
    ],
    "3822964": [
        {
            "dateadded": "2026-04-15 21:47:08 UTC",
            "url": "https://zzx2x3.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822964/",
            "reporter": "anonymous"
        }
    ],
    "3822963": [
        {
            "dateadded": "2026-04-15 21:43:06 UTC",
            "url": "https://servenum7.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822963/",
            "reporter": "anonymous"
        }
    ],
    "3822962": [
        {
            "dateadded": "2026-04-15 21:34:09 UTC",
            "url": "https://notifycrystal.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822962/",
            "reporter": "anonymous"
        }
    ],
    "3822961": [
        {
            "dateadded": "2026-04-15 21:28:08 UTC",
            "url": "https://zenvale0um.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822961/",
            "reporter": "anonymous"
        }
    ],
    "3822960": [
        {
            "dateadded": "2026-04-15 21:27:09 UTC",
            "url": "http://61.53.73.94:45715/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822960/",
            "reporter": "geenensp"
        }
    ],
    "3822959": [
        {
            "dateadded": "2026-04-15 21:25:17 UTC",
            "url": "http://93.95.115.14/splsh4",
            "url_status": "offline",
            "last_online": "2026-04-15 22:19:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822959/",
            "reporter": "botnetkiller"
        }
    ],
    "3822948": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splmips",
            "url_status": "offline",
            "last_online": "2026-04-15 22:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822948/",
            "reporter": "botnetkiller"
        }
    ],
    "3822949": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splppc",
            "url_status": "offline",
            "last_online": "2026-04-15 22:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822949/",
            "reporter": "botnetkiller"
        }
    ],
    "3822950": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/f",
            "url_status": "offline",
            "last_online": "2026-04-15 22:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822950/",
            "reporter": "botnetkiller"
        }
    ],
    "3822951": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splx86",
            "url_status": "offline",
            "last_online": "2026-04-15 22:51:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822951/",
            "reporter": "botnetkiller"
        }
    ],
    "3822952": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splmpsl",
            "url_status": "offline",
            "last_online": "2026-04-15 22:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822952/",
            "reporter": "botnetkiller"
        }
    ],
    "3822953": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splarm6",
            "url_status": "offline",
            "last_online": "2026-04-15 22:24:43 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822953/",
            "reporter": "botnetkiller"
        }
    ],
    "3822954": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splspc",
            "url_status": "offline",
            "last_online": "2026-04-15 23:17:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822954/",
            "reporter": "botnetkiller"
        }
    ],
    "3822955": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splarm5",
            "url_status": "offline",
            "last_online": "2026-04-15 23:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822955/",
            "reporter": "botnetkiller"
        }
    ],
    "3822956": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splarm",
            "url_status": "offline",
            "last_online": "2026-04-15 22:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822956/",
            "reporter": "botnetkiller"
        }
    ],
    "3822957": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splarm7",
            "url_status": "offline",
            "last_online": "2026-04-15 22:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822957/",
            "reporter": "botnetkiller"
        }
    ],
    "3822958": [
        {
            "dateadded": "2026-04-15 21:25:16 UTC",
            "url": "http://93.95.115.14/splm68k",
            "url_status": "offline",
            "last_online": "2026-04-15 22:20:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822958/",
            "reporter": "botnetkiller"
        }
    ],
    "3822947": [
        {
            "dateadded": "2026-04-15 21:23:16 UTC",
            "url": "http://125.42.121.11:48099/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:23:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822947/",
            "reporter": "geenensp"
        }
    ],
    "3822946": [
        {
            "dateadded": "2026-04-15 21:22:07 UTC",
            "url": "https://5and-stack.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822946/",
            "reporter": "anonymous"
        }
    ],
    "3822945": [
        {
            "dateadded": "2026-04-15 21:18:07 UTC",
            "url": "https://talcore4is.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822945/",
            "reporter": "anonymous"
        }
    ],
    "3822944": [
        {
            "dateadded": "2026-04-15 21:16:17 UTC",
            "url": "http://112.248.0.232:58816/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:28:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822944/",
            "reporter": "geenensp"
        }
    ],
    "3822943": [
        {
            "dateadded": "2026-04-15 21:14:16 UTC",
            "url": "http://42.242.128.126:43145/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:06:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822943/",
            "reporter": "geenensp"
        }
    ],
    "3822942": [
        {
            "dateadded": "2026-04-15 21:12:06 UTC",
            "url": "https://ejwrfoig.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822942/",
            "reporter": "anonymous"
        }
    ],
    "3822941": [
        {
            "dateadded": "2026-04-15 21:06:06 UTC",
            "url": "https://mpjim.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822941/",
            "reporter": "anonymous"
        }
    ],
    "3822940": [
        {
            "dateadded": "2026-04-15 21:02:09 UTC",
            "url": "http://61.53.73.94:45715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:57:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822940/",
            "reporter": "geenensp"
        }
    ],
    "3822939": [
        {
            "dateadded": "2026-04-15 21:00:15 UTC",
            "url": "https://driftvoic.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 21:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822939/",
            "reporter": "anonymous"
        }
    ],
    "3822938": [
        {
            "dateadded": "2026-04-15 20:55:08 UTC",
            "url": "https://m0ti9-route.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822938/",
            "reporter": "anonymous"
        }
    ],
    "3822937": [
        {
            "dateadded": "2026-04-15 20:53:36 UTC",
            "url": "http://112.248.0.232:58816/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:52:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822937/",
            "reporter": "geenensp"
        }
    ],
    "3822936": [
        {
            "dateadded": "2026-04-15 20:51:08 UTC",
            "url": "http://187.45.95.254:55392/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822936/",
            "reporter": "geenensp"
        }
    ],
    "3822935": [
        {
            "dateadded": "2026-04-15 20:48:34 UTC",
            "url": "http://42.242.128.126:43145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:43:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822935/",
            "reporter": "geenensp"
        }
    ],
    "3822934": [
        {
            "dateadded": "2026-04-15 20:48:12 UTC",
            "url": "https://civi1-flow.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822934/",
            "reporter": "anonymous"
        }
    ],
    "3822933": [
        {
            "dateadded": "2026-04-15 20:45:09 UTC",
            "url": "https://un1oad-sync.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 17:07:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822933/",
            "reporter": "anonymous"
        }
    ],
    "3822932": [
        {
            "dateadded": "2026-04-15 20:45:06 UTC",
            "url": "http://85.239.147.6/files/1781548144/tS95sIk.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822932/",
            "reporter": "Bitsight"
        }
    ],
    "3822931": [
        {
            "dateadded": "2026-04-15 20:44:39 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU4",
            "url_status": "offline",
            "last_online": "2026-04-15 20:44:39 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822931/",
            "reporter": "tcains1"
        }
    ],
    "3822929": [
        {
            "dateadded": "2026-04-15 20:44:36 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU3",
            "url_status": "offline",
            "last_online": "2026-04-15 20:44:36 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822929/",
            "reporter": "tcains1"
        }
    ],
    "3822930": [
        {
            "dateadded": "2026-04-15 20:44:36 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU7",
            "url_status": "offline",
            "last_online": "2026-04-15 20:44:36 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822930/",
            "reporter": "tcains1"
        }
    ],
    "3822928": [
        {
            "dateadded": "2026-04-15 20:44:35 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU6",
            "url_status": "offline",
            "last_online": "2026-04-15 20:44:35 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822928/",
            "reporter": "tcains1"
        }
    ],
    "3822927": [
        {
            "dateadded": "2026-04-15 20:44:33 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU9",
            "url_status": "offline",
            "last_online": "2026-04-15 20:44:33 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822927/",
            "reporter": "tcains1"
        }
    ],
    "3822926": [
        {
            "dateadded": "2026-04-15 20:43:34 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU8",
            "url_status": "offline",
            "last_online": "2026-04-15 20:43:34 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822926/",
            "reporter": "tcains1"
        }
    ],
    "3822925": [
        {
            "dateadded": "2026-04-15 20:42:01 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU5",
            "url_status": "offline",
            "last_online": "2026-04-15 20:42:01 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822925/",
            "reporter": "tcains1"
        }
    ],
    "3822923": [
        {
            "dateadded": "2026-04-15 20:40:59 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU2",
            "url_status": "offline",
            "last_online": "2026-04-15 20:40:59 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822923/",
            "reporter": "tcains1"
        }
    ],
    "3822922": [
        {
            "dateadded": "2026-04-15 20:40:58 UTC",
            "url": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU1",
            "url_status": "offline",
            "last_online": "2026-04-15 20:40:58 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "Vidar",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822922/",
            "reporter": "tcains1"
        }
    ],
    "3822921": [
        {
            "dateadded": "2026-04-15 20:38:13 UTC",
            "url": "https://eydfdx4.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822921/",
            "reporter": "anonymous"
        }
    ],
    "3822920": [
        {
            "dateadded": "2026-04-15 20:35:14 UTC",
            "url": "https://raw.githubusercontent.com/TMGYTOFFICIAL/tmgytofficial.github.io/refs/heads/main/alop/github_io_tmgytofficial_1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:36:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822920/",
            "reporter": "tcains1"
        }
    ],
    "3822913": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://github.com/TMGYTOFFICIAL/aio-tvflix-builder/raw/refs/heads/main/metalline/aio_builder_tvflix_overwhisper.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:26:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822913/",
            "reporter": "tcains1"
        }
    ],
    "3822914": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://raw.githubusercontent.com/lavadood6909/mql5-jetbrains/refs/heads/main/scutellae/jetbrains-mql-3.8-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:02:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822914/",
            "reporter": "tcains1"
        }
    ],
    "3822915": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://oassyn.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822915/",
            "reporter": "anonymous"
        }
    ],
    "3822916": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://github.com/lavadood6909/lavadood6909.github.io/raw/refs/heads/main/unsuitably/lavadood_io_github_2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822916/",
            "reporter": "tcains1"
        }
    ],
    "3822917": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://brave-sens.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822917/",
            "reporter": "anonymous"
        }
    ],
    "3822918": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://github.com/TMGYTOFFICIAL/tmgytofficial.github.io/raw/refs/heads/main/alop/github_io_tmgytofficial_1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822918/",
            "reporter": "tcains1"
        }
    ],
    "3822919": [
        {
            "dateadded": "2026-04-15 20:35:13 UTC",
            "url": "https://mer-crestal.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822919/",
            "reporter": "anonymous"
        }
    ],
    "3822909": [
        {
            "dateadded": "2026-04-15 20:35:12 UTC",
            "url": "https://raw.githubusercontent.com/lavadood6909/lavadood6909.github.io/refs/heads/main/unsuitably/lavadood_io_github_2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822909/",
            "reporter": "tcains1"
        }
    ],
    "3822910": [
        {
            "dateadded": "2026-04-15 20:35:12 UTC",
            "url": "https://github.com/lavadood6909/mql5-jetbrains/raw/refs/heads/main/scutellae/jetbrains-mql-3.8-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822910/",
            "reporter": "tcains1"
        }
    ],
    "3822911": [
        {
            "dateadded": "2026-04-15 20:35:12 UTC",
            "url": "https://euwt.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822911/",
            "reporter": "anonymous"
        }
    ],
    "3822912": [
        {
            "dateadded": "2026-04-15 20:35:12 UTC",
            "url": "https://raw.githubusercontent.com/TMGYTOFFICIAL/aio-tvflix-builder/refs/heads/main/metalline/aio_builder_tvflix_overwhisper.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822912/",
            "reporter": "tcains1"
        }
    ],
    "3822908": [
        {
            "dateadded": "2026-04-15 20:35:09 UTC",
            "url": "https://raw.githubusercontent.com/kunalkalia2610/antigravity-proxy/refs/heads/master/unbehaving/antigravity-proxy-3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822908/",
            "reporter": "tcains1"
        }
    ],
    "3822907": [
        {
            "dateadded": "2026-04-15 20:19:25 UTC",
            "url": "https://github.com/adidasyadebiras228/adidasyadebiras228.github.io/raw/refs/heads/main/gangsman/io-github-adidasyadebiras-v3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:49:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822907/",
            "reporter": "tcains1"
        }
    ],
    "3822905": [
        {
            "dateadded": "2026-04-15 20:19:19 UTC",
            "url": "http://182.129.145.2:34181/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:48:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822905/",
            "reporter": "geenensp"
        }
    ],
    "3822906": [
        {
            "dateadded": "2026-04-15 20:19:19 UTC",
            "url": "http://42.238.138.85:37006/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 20:19:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822906/",
            "reporter": "geenensp"
        }
    ],
    "3822904": [
        {
            "dateadded": "2026-04-15 20:19:18 UTC",
            "url": "http://42.224.168.31:45145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822904/",
            "reporter": "geenensp"
        }
    ],
    "3822901": [
        {
            "dateadded": "2026-04-15 20:19:17 UTC",
            "url": "https://github.com/enescoban43/enescoban43.github.io/raw/refs/heads/main/unbastilled/io-github-enescoban-1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:03:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822901/",
            "reporter": "tcains1"
        }
    ],
    "3822902": [
        {
            "dateadded": "2026-04-15 20:19:17 UTC",
            "url": "https://raw.githubusercontent.com/enescoban43/enescoban43.github.io/refs/heads/main/unbastilled/io-github-enescoban-1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822902/",
            "reporter": "tcains1"
        }
    ],
    "3822903": [
        {
            "dateadded": "2026-04-15 20:19:17 UTC",
            "url": "https://xcmw.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822903/",
            "reporter": "anonymous"
        }
    ],
    "3822896": [
        {
            "dateadded": "2026-04-15 20:19:16 UTC",
            "url": "https://github.com/adidasyadebiras228/docker-nvidia-gpu-ml/raw/refs/heads/master/docs/gpu_docker_ml_nvidia_v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:27:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822896/",
            "reporter": "tcains1"
        }
    ],
    "3822897": [
        {
            "dateadded": "2026-04-15 20:19:16 UTC",
            "url": "https://raw.githubusercontent.com/KnigthFrodo/planning-system/refs/heads/main/dev/plans/plugin-conversion/planning_system_v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822897/",
            "reporter": "tcains1"
        }
    ],
    "3822898": [
        {
            "dateadded": "2026-04-15 20:19:16 UTC",
            "url": "https://raw.githubusercontent.com/GGplayerp/ggplayerp.github.io/refs/heads/main/strangury/github_ggplayerp_io_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:32:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822898/",
            "reporter": "tcains1"
        }
    ],
    "3822899": [
        {
            "dateadded": "2026-04-15 20:19:16 UTC",
            "url": "https://github.com/GGplayerp/ggplayerp.github.io/raw/refs/heads/main/strangury/github_ggplayerp_io_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:21:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822899/",
            "reporter": "tcains1"
        }
    ],
    "3822900": [
        {
            "dateadded": "2026-04-15 20:19:16 UTC",
            "url": "https://github.com/kunalkalia2610/antigravity-proxy/raw/refs/heads/master/unbehaving/antigravity-proxy-3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:07:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822900/",
            "reporter": "tcains1"
        }
    ],
    "3822884": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/GGplayerp/amp-contrib/raw/refs/heads/main/.agents/skills/tmux/contrib_amp_Auscultoscope.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822884/",
            "reporter": "tcains1"
        }
    ],
    "3822885": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://raw.githubusercontent.com/Bladerex24/bladerex24.github.io/refs/heads/main/bondwoman/github-bladerex-io-v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822885/",
            "reporter": "tcains1"
        }
    ],
    "3822886": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/KnigthFrodo/RootTH/raw/refs/heads/master/geggery/Root_TH_3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:53:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822886/",
            "reporter": "tcains1"
        }
    ],
    "3822887": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://raw.githubusercontent.com/adidasyadebiras228/adidasyadebiras228.github.io/refs/heads/main/gangsman/io-github-adidasyadebiras-v3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:16:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822887/",
            "reporter": "tcains1"
        }
    ],
    "3822888": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/KnigthFrodo/xmrig/raw/refs/heads/master/src/backend/opencl/runners/Software-2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:29:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822888/",
            "reporter": "tcains1"
        }
    ],
    "3822889": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/Bladerex24/simple-llm/raw/refs/heads/master/model/simple_llm_v3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:27:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822889/",
            "reporter": "tcains1"
        }
    ],
    "3822890": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://raw.githubusercontent.com/kunalkalia2610/kunalkalia2610.github.io/refs/heads/main/Peridineae/io_github_kunalkalia_idosaccharic.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:34:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822890/",
            "reporter": "tcains1"
        }
    ],
    "3822891": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/kunalkalia2610/kunalkalia2610.github.io/raw/refs/heads/main/Peridineae/io_github_kunalkalia_idosaccharic.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:40:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822891/",
            "reporter": "tcains1"
        }
    ],
    "3822892": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/KnigthFrodo/planning-system/raw/refs/heads/main/dev/plans/plugin-conversion/planning_system_v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:08:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822892/",
            "reporter": "tcains1"
        }
    ],
    "3822893": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/enescoban43/System-Constitution/raw/refs/heads/main/schema/System_Constitution_v2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822893/",
            "reporter": "tcains1"
        }
    ],
    "3822894": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/Bladerex24/bladerex24.github.io/raw/refs/heads/main/bondwoman/github-bladerex-io-v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:53:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822894/",
            "reporter": "tcains1"
        }
    ],
    "3822895": [
        {
            "dateadded": "2026-04-15 20:19:15 UTC",
            "url": "https://github.com/rzgarothman/rzgarothman.github.io/raw/refs/heads/main/geological/io-github-rzgarothman-v2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:26:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822895/",
            "reporter": "tcains1"
        }
    ],
    "3822874": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://github.com/kunalkalia2610/pebblecreek-laravel/raw/refs/heads/master/bootstrap/pebblecreek_laravel_v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:44:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822874/",
            "reporter": "tcains1"
        }
    ],
    "3822875": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/KnigthFrodo/RootTH/refs/heads/master/geggery/Root_TH_3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822875/",
            "reporter": "tcains1"
        }
    ],
    "3822876": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/enescoban43/System-Constitution/refs/heads/main/schema/System_Constitution_v2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:14:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822876/",
            "reporter": "tcains1"
        }
    ],
    "3822877": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/adidasyadebiras228/docker-nvidia-gpu-ml/refs/heads/master/docs/gpu_docker_ml_nvidia_v2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822877/",
            "reporter": "tcains1"
        }
    ],
    "3822878": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/kunalkalia2610/pebblecreek-laravel/refs/heads/master/bootstrap/pebblecreek_laravel_v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822878/",
            "reporter": "tcains1"
        }
    ],
    "3822879": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://github.com/KnigthFrodo/knigthfrodo.github.io/raw/refs/heads/main/assigned/github_io_knigthfrodo_disprove.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822879/",
            "reporter": "tcains1"
        }
    ],
    "3822880": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/KnigthFrodo/knigthfrodo.github.io/refs/heads/main/assigned/github_io_knigthfrodo_disprove.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:07:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822880/",
            "reporter": "tcains1"
        }
    ],
    "3822881": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/GGplayerp/amp-contrib/refs/heads/main/.agents/skills/tmux/contrib_amp_Auscultoscope.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:56:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822881/",
            "reporter": "tcains1"
        }
    ],
    "3822882": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/Bladerex24/simple-llm/refs/heads/master/model/simple_llm_v3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822882/",
            "reporter": "tcains1"
        }
    ],
    "3822883": [
        {
            "dateadded": "2026-04-15 20:19:14 UTC",
            "url": "https://raw.githubusercontent.com/KnigthFrodo/xmrig/refs/heads/master/src/backend/opencl/runners/Software-2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:45:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822883/",
            "reporter": "tcains1"
        }
    ],
    "3822870": [
        {
            "dateadded": "2026-04-15 20:04:15 UTC",
            "url": "https://raw.githubusercontent.com/Dophinjet/dophinjet.github.io/refs/heads/main/ruficoccin/dophinjet_io_github_v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822870/",
            "reporter": "tcains1"
        }
    ],
    "3822871": [
        {
            "dateadded": "2026-04-15 20:04:15 UTC",
            "url": "https://raw.githubusercontent.com/nguyenchuong-az/dproxy/refs/heads/main/wheelbarrowful/Software_1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822871/",
            "reporter": "tcains1"
        }
    ],
    "3822872": [
        {
            "dateadded": "2026-04-15 20:04:15 UTC",
            "url": "https://github.com/Rahul-Raj-04/theemclock/raw/refs/heads/main/repressible/Software_2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822872/",
            "reporter": "tcains1"
        }
    ],
    "3822873": [
        {
            "dateadded": "2026-04-15 20:04:15 UTC",
            "url": "https://glashado.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 20:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822873/",
            "reporter": "anonymous"
        }
    ],
    "3822858": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://raw.githubusercontent.com/Dophinjet/lunarlander-dqn-comparison/refs/heads/main/notebook/lunarlander_comparison_dqn_v2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:26:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822858/",
            "reporter": "tcains1"
        }
    ],
    "3822859": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://github.com/itextreme/itextreme.github.io/raw/refs/heads/main/unteasled/io-github-itextreme-v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:43:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822859/",
            "reporter": "tcains1"
        }
    ],
    "3822860": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://github.com/itextreme/PHP-React-Framework/raw/refs/heads/master/src/components/React-PH-Framework-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822860/",
            "reporter": "tcains1"
        }
    ],
    "3822861": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://raw.githubusercontent.com/itextreme/itextreme.github.io/refs/heads/main/unteasled/io-github-itextreme-v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:43:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822861/",
            "reporter": "tcains1"
        }
    ],
    "3822862": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://raw.githubusercontent.com/victorrwyd/EaseUS-Todo-PCTrans-Pro-Repack/refs/heads/main/linguistics/Pro_U_Repack_Ease_PC_Todo_Trans_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822862/",
            "reporter": "tcains1"
        }
    ],
    "3822863": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://github.com/Dophinjet/dophinjet.github.io/raw/refs/heads/main/ruficoccin/dophinjet_io_github_v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 04:58:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822863/",
            "reporter": "tcains1"
        }
    ],
    "3822864": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://github.com/victorrwyd/victorrwyd.github.io/raw/refs/heads/main/winebibber/io-github-victorrwyd-3.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:46:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822864/",
            "reporter": "tcains1"
        }
    ],
    "3822865": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://github.com/Dophinjet/lunarlander-dqn-comparison/raw/refs/heads/main/notebook/lunarlander_comparison_dqn_v2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822865/",
            "reporter": "tcains1"
        }
    ],
    "3822866": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://raw.githubusercontent.com/Rahul-Raj-04/ecommerce/refs/heads/main/src/Component/PageHeader/Software_electrodeless.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:41:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822866/",
            "reporter": "tcains1"
        }
    ],
    "3822867": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://github.com/Rahul-Raj-04/netflix/raw/refs/heads/main/src/components/spinner/Software_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822867/",
            "reporter": "tcains1"
        }
    ],
    "3822868": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://raw.githubusercontent.com/Rahul-Raj-04/theemclock/refs/heads/main/repressible/Software_2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822868/",
            "reporter": "tcains1"
        }
    ],
    "3822869": [
        {
            "dateadded": "2026-04-15 20:04:14 UTC",
            "url": "https://raw.githubusercontent.com/itextreme/PHP-React-Framework/refs/heads/master/src/components/React-PH-Framework-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:23:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822869/",
            "reporter": "tcains1"
        }
    ],
    "3822845": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://raw.githubusercontent.com/rzgarothman/rzgarothman.github.io/refs/heads/main/geological/io-github-rzgarothman-v2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:29:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822845/",
            "reporter": "tcains1"
        }
    ],
    "3822846": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/S11lmi/resume-polish/raw/refs/heads/main/src/resume-polish-3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:07:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822846/",
            "reporter": "tcains1"
        }
    ],
    "3822847": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://raw.githubusercontent.com/nguyenchuong-az/nguyenchuong-az.github.io/refs/heads/main/migration/github-nguyenchuong-io-az-v3.7-beta.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:29:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822847/",
            "reporter": "tcains1"
        }
    ],
    "3822848": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://raw.githubusercontent.com/victorrwyd/victorrwyd.github.io/refs/heads/main/winebibber/io-github-victorrwyd-3.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822848/",
            "reporter": "tcains1"
        }
    ],
    "3822849": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/nguyenchuong-az/dproxy/raw/refs/heads/main/wheelbarrowful/Software_1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822849/",
            "reporter": "tcains1"
        }
    ],
    "3822850": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/S11lmi/s11lmi.github.io/raw/refs/heads/main/bahay/io_s_github_lmi_v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:49:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822850/",
            "reporter": "tcains1"
        }
    ],
    "3822851": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/rzgarothman/nanomlops/raw/refs/heads/master/alibangbang/Software-v1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822851/",
            "reporter": "tcains1"
        }
    ],
    "3822852": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/S11lmi/kbgdlbbdh/raw/refs/heads/main/.github/Software_1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822852/",
            "reporter": "tcains1"
        }
    ],
    "3822853": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/nguyenchuong-az/nguyenchuong-az.github.io/raw/refs/heads/main/migration/github-nguyenchuong-io-az-v3.7-beta.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:44:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822853/",
            "reporter": "tcains1"
        }
    ],
    "3822854": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://raw.githubusercontent.com/Rahul-Raj-04/netflix/refs/heads/main/src/components/spinner/Software_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:45:02 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822854/",
            "reporter": "tcains1"
        }
    ],
    "3822855": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/victorrwyd/EaseUS-Todo-PCTrans-Pro-Repack/raw/refs/heads/main/linguistics/Pro_U_Repack_Ease_PC_Todo_Trans_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822855/",
            "reporter": "tcains1"
        }
    ],
    "3822856": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://raw.githubusercontent.com/S11lmi/kbgdlbbdh/refs/heads/main/.github/Software_1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822856/",
            "reporter": "tcains1"
        }
    ],
    "3822857": [
        {
            "dateadded": "2026-04-15 20:04:13 UTC",
            "url": "https://github.com/Rahul-Raj-04/ecommerce/raw/refs/heads/main/src/Component/PageHeader/Software_electrodeless.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:09:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822857/",
            "reporter": "tcains1"
        }
    ],
    "3822842": [
        {
            "dateadded": "2026-04-15 20:04:12 UTC",
            "url": "https://raw.githubusercontent.com/S11lmi/s11lmi.github.io/refs/heads/main/bahay/io_s_github_lmi_v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822842/",
            "reporter": "tcains1"
        }
    ],
    "3822843": [
        {
            "dateadded": "2026-04-15 20:04:12 UTC",
            "url": "https://raw.githubusercontent.com/rzgarothman/nanomlops/refs/heads/master/alibangbang/Software-v1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822843/",
            "reporter": "tcains1"
        }
    ],
    "3822844": [
        {
            "dateadded": "2026-04-15 20:04:12 UTC",
            "url": "https://raw.githubusercontent.com/S11lmi/resume-polish/refs/heads/main/src/resume-polish-3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:12:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822844/",
            "reporter": "tcains1"
        }
    ],
    "3822841": [
        {
            "dateadded": "2026-04-15 20:03:17 UTC",
            "url": "http://210.10.133.113:42905/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:06:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822841/",
            "reporter": "geenensp"
        }
    ],
    "3822840": [
        {
            "dateadded": "2026-04-15 20:01:21 UTC",
            "url": "http://210.10.133.113:42905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:55:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822840/",
            "reporter": "geenensp"
        }
    ],
    "3822839": [
        {
            "dateadded": "2026-04-15 19:59:09 UTC",
            "url": "https://partn4-bridge.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822839/",
            "reporter": "anonymous"
        }
    ],
    "3822838": [
        {
            "dateadded": "2026-04-15 19:55:34 UTC",
            "url": "http://115.55.132.253:38398/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:13:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822838/",
            "reporter": "geenensp"
        }
    ],
    "3822837": [
        {
            "dateadded": "2026-04-15 19:55:22 UTC",
            "url": "http://182.129.145.2:34181/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:46:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822837/",
            "reporter": "geenensp"
        }
    ],
    "3822836": [
        {
            "dateadded": "2026-04-15 19:55:21 UTC",
            "url": "http://115.62.15.184:34786/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:41:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822836/",
            "reporter": "geenensp"
        }
    ],
    "3822835": [
        {
            "dateadded": "2026-04-15 19:55:20 UTC",
            "url": "http://219.157.14.171:43027/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:31:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822835/",
            "reporter": "geenensp"
        }
    ],
    "3822831": [
        {
            "dateadded": "2026-04-15 19:55:16 UTC",
            "url": "https://raw.githubusercontent.com/Hariprakash2005/CUDABurner/refs/heads/main/utils/CUDA_Burner_v2.9-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:08:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822831/",
            "reporter": "tcains1"
        }
    ],
    "3822832": [
        {
            "dateadded": "2026-04-15 19:55:16 UTC",
            "url": "https://wnokm63.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822832/",
            "reporter": "anonymous"
        }
    ],
    "3822833": [
        {
            "dateadded": "2026-04-15 19:55:16 UTC",
            "url": "https://rave3-layer.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822833/",
            "reporter": "anonymous"
        }
    ],
    "3822834": [
        {
            "dateadded": "2026-04-15 19:55:16 UTC",
            "url": "https://servena.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822834/",
            "reporter": "anonymous"
        }
    ],
    "3822827": [
        {
            "dateadded": "2026-04-15 19:55:15 UTC",
            "url": "https://github.com/Crazy444-yo/bgpsec-falcon512/raw/refs/heads/main/examples/bgpsec-falcon-v3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822827/",
            "reporter": "tcains1"
        }
    ],
    "3822828": [
        {
            "dateadded": "2026-04-15 19:55:15 UTC",
            "url": "https://github.com/ArgyaSR/Auction-App-Data-Processing_AWS-Pipeline/raw/refs/heads/main/sql/Auction_App_AW_Data_Processing_Pipeline_v1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822828/",
            "reporter": "tcains1"
        }
    ],
    "3822829": [
        {
            "dateadded": "2026-04-15 19:55:15 UTC",
            "url": "https://github.com/FacundoNimes/golab-documentation/raw/refs/heads/main/content/golab-documentation-nondocumentary.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822829/",
            "reporter": "tcains1"
        }
    ],
    "3822830": [
        {
            "dateadded": "2026-04-15 19:55:15 UTC",
            "url": "https://github.com/Eggggx/85/raw/refs/heads/main/23/74/14.log",
            "url_status": "offline",
            "last_online": "2026-04-16 05:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822830/",
            "reporter": "tcains1"
        }
    ],
    "3822826": [
        {
            "dateadded": "2026-04-15 19:55:14 UTC",
            "url": "https://raw.githubusercontent.com/FacundoNimes/golab-documentation/refs/heads/main/content/golab-documentation-nondocumentary.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822826/",
            "reporter": "tcains1"
        }
    ],
    "3822823": [
        {
            "dateadded": "2026-04-15 19:55:13 UTC",
            "url": "https://github.com/Eggggx/85/raw/refs/heads/main/23/74/50.txt",
            "url_status": "offline",
            "last_online": "2026-04-16 05:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822823/",
            "reporter": "tcains1"
        }
    ],
    "3822824": [
        {
            "dateadded": "2026-04-15 19:55:13 UTC",
            "url": "https://raw.githubusercontent.com/FacundoNimes/HTML-CSS-JavaScript-projects-for-beginners/refs/heads/main/projects/background-video-project/projects-Script-Java-HTM-CS-for-beginners-1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:48:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822824/",
            "reporter": "tcains1"
        }
    ],
    "3822825": [
        {
            "dateadded": "2026-04-15 19:55:13 UTC",
            "url": "https://github.com/Hariprakash2005/CUDABurner/raw/refs/heads/main/utils/CUDA_Burner_v2.9-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:37:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822825/",
            "reporter": "tcains1"
        }
    ],
    "3822822": [
        {
            "dateadded": "2026-04-15 19:55:12 UTC",
            "url": "https://raw.githubusercontent.com/Eggggx/85/refs/heads/main/23/74/50.txt",
            "url_status": "offline",
            "last_online": "2026-04-16 06:42:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822822/",
            "reporter": "tcains1"
        }
    ],
    "3822819": [
        {
            "dateadded": "2026-04-15 19:55:10 UTC",
            "url": "https://github.com/Sushant6t9/sushant6t9.github.io/raw/refs/heads/main/undigestable/io_github_sushant_t_simiousness.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:59:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822819/",
            "reporter": "tcains1"
        }
    ],
    "3822820": [
        {
            "dateadded": "2026-04-15 19:55:10 UTC",
            "url": "https://raw.githubusercontent.com/Eggggx/85/refs/heads/main/23/74/14.log",
            "url_status": "offline",
            "last_online": "2026-04-16 06:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822820/",
            "reporter": "tcains1"
        }
    ],
    "3822821": [
        {
            "dateadded": "2026-04-15 19:55:10 UTC",
            "url": "https://github.com/nkarthik61/BaxtureProject/raw/refs/heads/main/.vscode/Baxture_Project_v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822821/",
            "reporter": "tcains1"
        }
    ],
    "3822818": [
        {
            "dateadded": "2026-04-15 19:55:08 UTC",
            "url": "https://raw.githubusercontent.com/nkarthik61/BaxtureProject/refs/heads/main/.vscode/Baxture_Project_v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822818/",
            "reporter": "tcains1"
        }
    ],
    "3822817": [
        {
            "dateadded": "2026-04-15 19:42:45 UTC",
            "url": "https://github.com/FacundoNimes/linkedin-playwright-auto-job-application-agent/raw/refs/heads/main/unlassoed/job-application-linkedin-playwright-auto-agent-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:38:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822817/",
            "reporter": "tcains1"
        }
    ],
    "3822816": [
        {
            "dateadded": "2026-04-15 19:42:17 UTC",
            "url": "https://github.com/celin213/FastAPITutorials/raw/refs/heads/main/example_06/domain/API-Tutorials-Fast-v1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822816/",
            "reporter": "tcains1"
        }
    ],
    "3822814": [
        {
            "dateadded": "2026-04-15 19:41:45 UTC",
            "url": "https://raw.githubusercontent.com/ArgyaSR/Auction-App-Data-Processing_AWS-Pipeline/refs/heads/main/sql/Auction_App_AW_Data_Processing_Pipeline_v1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:16:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822814/",
            "reporter": "tcains1"
        }
    ],
    "3822815": [
        {
            "dateadded": "2026-04-15 19:41:45 UTC",
            "url": "https://raw.githubusercontent.com/nkarthik61/nkarthik61.github.io/refs/heads/main/ventripotential/nkarthik-io-github-v1.8-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:31:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822815/",
            "reporter": "tcains1"
        }
    ],
    "3822813": [
        {
            "dateadded": "2026-04-15 19:40:17 UTC",
            "url": "https://raw.githubusercontent.com/Crazy444-yo/bgpsec-falcon512/refs/heads/main/examples/bgpsec-falcon-v3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822813/",
            "reporter": "tcains1"
        }
    ],
    "3822809": [
        {
            "dateadded": "2026-04-15 19:39:15 UTC",
            "url": "https://github.com/Shubham-dds/P2M/raw/refs/heads/main/conda_setup/etc/M_v1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822809/",
            "reporter": "tcains1"
        }
    ],
    "3822810": [
        {
            "dateadded": "2026-04-15 19:39:15 UTC",
            "url": "https://raw.githubusercontent.com/PMEBorromeo/pmeborromeo.github.io/refs/heads/main/acrodont/io_pmeborromeo_github_v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:37:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822810/",
            "reporter": "tcains1"
        }
    ],
    "3822811": [
        {
            "dateadded": "2026-04-15 19:39:15 UTC",
            "url": "https://github.com/nkarthik61/nkarthik61.github.io/raw/refs/heads/main/ventripotential/nkarthik-io-github-v1.8-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:10:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822811/",
            "reporter": "tcains1"
        }
    ],
    "3822812": [
        {
            "dateadded": "2026-04-15 19:39:15 UTC",
            "url": "https://raw.githubusercontent.com/PMEBorromeo/fastapi-microservice-template/refs/heads/main/biographize/template-microservice-fastapi-v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822812/",
            "reporter": "tcains1"
        }
    ],
    "3822802": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Crazy444-yo/crazy444-yo.github.io/refs/heads/main/highlight/crazy-io-github-yo-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:04:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822802/",
            "reporter": "tcains1"
        }
    ],
    "3822803": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Hariprakash2005/hacking/refs/heads/main/screendom/Software-2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822803/",
            "reporter": "tcains1"
        }
    ],
    "3822804": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://github.com/Shubham-dds/shubham-dds.github.io/raw/refs/heads/main/teaman/io_shubham_github_dds_2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822804/",
            "reporter": "tcains1"
        }
    ],
    "3822805": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://github.com/Hariprakash2005/defense/raw/refs/heads/main/Bourignianist/Software_2.7-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:30:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822805/",
            "reporter": "tcains1"
        }
    ],
    "3822806": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://github.com/Sushant6t9/inngest-course/raw/refs/heads/main/chapter02/inngest_course_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822806/",
            "reporter": "tcains1"
        }
    ],
    "3822807": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://raw.githubusercontent.com/Sushant6t9/inngest-course/refs/heads/main/chapter02/inngest_course_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:26:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822807/",
            "reporter": "tcains1"
        }
    ],
    "3822808": [
        {
            "dateadded": "2026-04-15 19:39:14 UTC",
            "url": "https://github.com/PMEBorromeo/pmeborromeo.github.io/raw/refs/heads/main/acrodont/io_pmeborromeo_github_v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:03:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822808/",
            "reporter": "tcains1"
        }
    ],
    "3822793": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://raw.githubusercontent.com/FacundoNimes/vanillawebprojects/refs/heads/master/speech-text-reader/Software-3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:40:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822793/",
            "reporter": "tcains1"
        }
    ],
    "3822794": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://raw.githubusercontent.com/Shubham-dds/P2M/refs/heads/main/conda_setup/etc/M_v1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:10:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822794/",
            "reporter": "tcains1"
        }
    ],
    "3822795": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://github.com/Hariprakash2005/hacking/raw/refs/heads/main/screendom/Software-2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:59:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822795/",
            "reporter": "tcains1"
        }
    ],
    "3822796": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://github.com/FacundoNimes/HTML-CSS-JavaScript-projects-for-beginners/raw/refs/heads/main/projects/background-video-project/projects-Script-Java-HTM-CS-for-beginners-1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:22:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822796/",
            "reporter": "tcains1"
        }
    ],
    "3822797": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://raw.githubusercontent.com/celin213/FastAPITutorials/refs/heads/main/example_06/domain/API-Tutorials-Fast-v1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822797/",
            "reporter": "tcains1"
        }
    ],
    "3822798": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://raw.githubusercontent.com/Hariprakash2005/defense/refs/heads/main/Bourignianist/Software_2.7-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822798/",
            "reporter": "tcains1"
        }
    ],
    "3822799": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://github.com/Crazy444-yo/crazy444-yo.github.io/raw/refs/heads/main/highlight/crazy-io-github-yo-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:42:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822799/",
            "reporter": "tcains1"
        }
    ],
    "3822800": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://raw.githubusercontent.com/Hariprakash2005/phishingAttack/refs/heads/main/undeferentially/phishing_Attack_2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:08:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822800/",
            "reporter": "tcains1"
        }
    ],
    "3822801": [
        {
            "dateadded": "2026-04-15 19:39:13 UTC",
            "url": "https://raw.githubusercontent.com/Sushant6t9/sushant6t9.github.io/refs/heads/main/undigestable/io_github_sushant_t_simiousness.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822801/",
            "reporter": "tcains1"
        }
    ],
    "3822787": [
        {
            "dateadded": "2026-04-15 19:39:12 UTC",
            "url": "https://github.com/FacundoNimes/fullstack-open/raw/refs/heads/master/part1-react/anecdotes/open_fullstack_v3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822787/",
            "reporter": "tcains1"
        }
    ],
    "3822788": [
        {
            "dateadded": "2026-04-15 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/Shubham-dds/shubham-dds.github.io/refs/heads/main/teaman/io_shubham_github_dds_2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822788/",
            "reporter": "tcains1"
        }
    ],
    "3822789": [
        {
            "dateadded": "2026-04-15 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/FacundoNimes/fullstack-open/refs/heads/master/part1-react/anecdotes/open_fullstack_v3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:19:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822789/",
            "reporter": "tcains1"
        }
    ],
    "3822790": [
        {
            "dateadded": "2026-04-15 19:39:12 UTC",
            "url": "https://github.com/Hariprakash2005/phishingAttack/raw/refs/heads/main/undeferentially/phishing_Attack_2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822790/",
            "reporter": "tcains1"
        }
    ],
    "3822791": [
        {
            "dateadded": "2026-04-15 19:39:12 UTC",
            "url": "https://github.com/FacundoNimes/vanillawebprojects/raw/refs/heads/master/speech-text-reader/Software-3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822791/",
            "reporter": "tcains1"
        }
    ],
    "3822792": [
        {
            "dateadded": "2026-04-15 19:39:12 UTC",
            "url": "https://github.com/PMEBorromeo/fastapi-microservice-template/raw/refs/heads/main/biographize/template-microservice-fastapi-v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822792/",
            "reporter": "tcains1"
        }
    ],
    "3822786": [
        {
            "dateadded": "2026-04-15 19:39:10 UTC",
            "url": "https://raw.githubusercontent.com/FacundoNimes/linkedin-playwright-auto-job-application-agent/refs/heads/main/unlassoed/job-application-linkedin-playwright-auto-agent-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822786/",
            "reporter": "tcains1"
        }
    ],
    "3822785": [
        {
            "dateadded": "2026-04-15 19:38:08 UTC",
            "url": "https://2cpd365m.plaque5tucco.digital/?ublib=cYhUuFFcXbMZGTPx",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822785/",
            "reporter": "anonymous"
        }
    ],
    "3822780": [
        {
            "dateadded": "2026-04-15 19:35:27 UTC",
            "url": "http://123.11.183.105:45907/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822780/",
            "reporter": "geenensp"
        }
    ],
    "3822781": [
        {
            "dateadded": "2026-04-15 19:35:27 UTC",
            "url": "http://125.45.65.119:46153/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:16:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822781/",
            "reporter": "geenensp"
        }
    ],
    "3822782": [
        {
            "dateadded": "2026-04-15 19:35:27 UTC",
            "url": "http://61.52.7.168:34470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 08:04:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822782/",
            "reporter": "geenensp"
        }
    ],
    "3822783": [
        {
            "dateadded": "2026-04-15 19:35:27 UTC",
            "url": "http://219.157.14.171:43027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:46:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822783/",
            "reporter": "geenensp"
        }
    ],
    "3822784": [
        {
            "dateadded": "2026-04-15 19:35:27 UTC",
            "url": "http://42.238.134.89:58398/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:05:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822784/",
            "reporter": "geenensp"
        }
    ],
    "3822779": [
        {
            "dateadded": "2026-04-15 19:35:26 UTC",
            "url": "http://193.31.201.20:50854/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822779/",
            "reporter": "geenensp"
        }
    ],
    "3822778": [
        {
            "dateadded": "2026-04-15 19:35:25 UTC",
            "url": "http://77.247.93.65:49840/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822778/",
            "reporter": "geenensp"
        }
    ],
    "3822774": [
        {
            "dateadded": "2026-04-15 19:35:17 UTC",
            "url": "https://dyndraex.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822774/",
            "reporter": "anonymous"
        }
    ],
    "3822775": [
        {
            "dateadded": "2026-04-15 19:35:17 UTC",
            "url": "https://invoicecel.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822775/",
            "reporter": "anonymous"
        }
    ],
    "3822776": [
        {
            "dateadded": "2026-04-15 19:35:17 UTC",
            "url": "https://github.com/etabra098/fdgdfg/raw/refs/heads/main/.github/workflows/Software_v3.3-alpha.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822776/",
            "reporter": "tcains1"
        }
    ],
    "3822777": [
        {
            "dateadded": "2026-04-15 19:35:17 UTC",
            "url": "https://geo-dec0d.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822777/",
            "reporter": "anonymous"
        }
    ],
    "3822769": [
        {
            "dateadded": "2026-04-15 19:35:16 UTC",
            "url": "https://github.com/nikhildaharwal2004/context.nvim/raw/refs/heads/main/lua/nvim_context_2.5-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822769/",
            "reporter": "tcains1"
        }
    ],
    "3822770": [
        {
            "dateadded": "2026-04-15 19:35:16 UTC",
            "url": "https://69cy8114.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822770/",
            "reporter": "anonymous"
        }
    ],
    "3822771": [
        {
            "dateadded": "2026-04-15 19:35:16 UTC",
            "url": "https://github.com/Jonisark/html-portfolioes/raw/refs/heads/main/someone/html_portfolioes_1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822771/",
            "reporter": "tcains1"
        }
    ],
    "3822772": [
        {
            "dateadded": "2026-04-15 19:35:16 UTC",
            "url": "https://raw.githubusercontent.com/etabra098/dark-thema-saas/refs/heads/main/assets/images/people/thema-saas-dark-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822772/",
            "reporter": "tcains1"
        }
    ],
    "3822773": [
        {
            "dateadded": "2026-04-15 19:35:16 UTC",
            "url": "https://raw.githubusercontent.com/nikhildaharwal2004/context.nvim/refs/heads/main/lua/nvim_context_2.5-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822773/",
            "reporter": "tcains1"
        }
    ],
    "3822765": [
        {
            "dateadded": "2026-04-15 19:35:15 UTC",
            "url": "https://github.com/Jonisark/Djast/raw/refs/heads/main/4.3%20HTML%20Porfolio%20Project/Software_2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822765/",
            "reporter": "tcains1"
        }
    ],
    "3822766": [
        {
            "dateadded": "2026-04-15 19:35:15 UTC",
            "url": "https://github.com/etabra098/gma/raw/refs/heads/main/aegrotant/Software-1.3-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822766/",
            "reporter": "tcains1"
        }
    ],
    "3822767": [
        {
            "dateadded": "2026-04-15 19:35:15 UTC",
            "url": "https://github.com/Jonisark/joni/raw/refs/heads/main/epiklesis/Software-1.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822767/",
            "reporter": "tcains1"
        }
    ],
    "3822768": [
        {
            "dateadded": "2026-04-15 19:35:15 UTC",
            "url": "https://github.com/etabra098/dark-thema-saas/raw/refs/heads/main/assets/images/people/thema-saas-dark-v3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822768/",
            "reporter": "tcains1"
        }
    ],
    "3822760": [
        {
            "dateadded": "2026-04-15 19:35:14 UTC",
            "url": "https://raw.githubusercontent.com/etabra098/gma/refs/heads/main/aegrotant/Software-1.3-alpha.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822760/",
            "reporter": "tcains1"
        }
    ],
    "3822761": [
        {
            "dateadded": "2026-04-15 19:35:14 UTC",
            "url": "https://github.com/Jonisark/git-demo/raw/refs/heads/main/unresponsiveness/demo_git_v2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822761/",
            "reporter": "tcains1"
        }
    ],
    "3822762": [
        {
            "dateadded": "2026-04-15 19:35:14 UTC",
            "url": "https://raw.githubusercontent.com/Jonisark/git-demo/refs/heads/main/unresponsiveness/demo_git_v2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822762/",
            "reporter": "tcains1"
        }
    ],
    "3822763": [
        {
            "dateadded": "2026-04-15 19:35:14 UTC",
            "url": "https://raw.githubusercontent.com/etabra098/fdgdfg/refs/heads/main/.github/workflows/Software_v3.3-alpha.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822763/",
            "reporter": "tcains1"
        }
    ],
    "3822764": [
        {
            "dateadded": "2026-04-15 19:35:14 UTC",
            "url": "https://github.com/etabra098/gmmms/raw/refs/heads/main/chegoe/Software_v2.5-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822764/",
            "reporter": "tcains1"
        }
    ],
    "3822755": [
        {
            "dateadded": "2026-04-15 19:35:13 UTC",
            "url": "https://raw.githubusercontent.com/Jonisark/Djast/refs/heads/main/4.3%20HTML%20Porfolio%20Project/Software_2.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822755/",
            "reporter": "tcains1"
        }
    ],
    "3822756": [
        {
            "dateadded": "2026-04-15 19:35:13 UTC",
            "url": "https://github.com/etabra098/kids-drag-drop-game2/raw/refs/heads/main/ethmophysal/kids_drop_game_drag_v3.4-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822756/",
            "reporter": "tcains1"
        }
    ],
    "3822757": [
        {
            "dateadded": "2026-04-15 19:35:13 UTC",
            "url": "https://raw.githubusercontent.com/etabra098/kids-drag-drop-game2/refs/heads/main/ethmophysal/kids_drop_game_drag_v3.4-alpha.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822757/",
            "reporter": "tcains1"
        }
    ],
    "3822758": [
        {
            "dateadded": "2026-04-15 19:35:13 UTC",
            "url": "https://raw.githubusercontent.com/etabra098/gmmms/refs/heads/main/chegoe/Software_v2.5-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822758/",
            "reporter": "tcains1"
        }
    ],
    "3822759": [
        {
            "dateadded": "2026-04-15 19:35:13 UTC",
            "url": "https://raw.githubusercontent.com/Jonisark/html-portfolioes/refs/heads/main/someone/html_portfolioes_1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822759/",
            "reporter": "tcains1"
        }
    ],
    "3822754": [
        {
            "dateadded": "2026-04-15 19:19:30 UTC",
            "url": "http://115.55.132.253:38398/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822754/",
            "reporter": "geenensp"
        }
    ],
    "3822747": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://github.com/Isaac1993-io/KWS-Project/raw/refs/heads/main/Pics/Project_KW_1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822747/",
            "reporter": "tcains1"
        }
    ],
    "3822748": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://raw.githubusercontent.com/Isaac1993-io/Galaxcity-Project/refs/heads/main/submembranaceous/Project_Galaxcity_Chlorococcales.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822748/",
            "reporter": "tcains1"
        }
    ],
    "3822749": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://raw.githubusercontent.com/Isaac1993-io/KWS-Project/refs/heads/main/Pics/Project_KW_1.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822749/",
            "reporter": "tcains1"
        }
    ],
    "3822750": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://raw.githubusercontent.com/Isaac1993-io/JAVA-journey/refs/heads/main/Oracle_JDK-24/journey_JAV_2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822750/",
            "reporter": "tcains1"
        }
    ],
    "3822751": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://github.com/guitupetidutra-ship-it/dr-tulu/raw/refs/heads/main/agent/evaluation/genetic_diseases_eval/tulu-dr-v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822751/",
            "reporter": "tcains1"
        }
    ],
    "3822752": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://39rd.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822752/",
            "reporter": "anonymous"
        }
    ],
    "3822753": [
        {
            "dateadded": "2026-04-15 19:19:12 UTC",
            "url": "https://nv7cx.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822753/",
            "reporter": "anonymous"
        }
    ],
    "3822745": [
        {
            "dateadded": "2026-04-15 19:19:10 UTC",
            "url": "https://github.com/Isaac1993-io/My-Software-Journey/raw/refs/heads/main/HTML%20projects/static%20images/My_Software_Journey_1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822745/",
            "reporter": "tcains1"
        }
    ],
    "3822746": [
        {
            "dateadded": "2026-04-15 19:19:10 UTC",
            "url": "https://github.com/Isaac1993-io/flutter-modern-template/raw/refs/heads/master/android/app/src/main/kotlin/com/example/moderntemplate/modern_flutter_template_troptometer.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822746/",
            "reporter": "tcains1"
        }
    ],
    "3822735": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://github.com/Yawnspe/custom-plugin-devops/raw/refs/heads/master/.github/workflows/plugin-devops-custom-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822735/",
            "reporter": "tcains1"
        }
    ],
    "3822736": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://github.com/Reddinton95/custom-plugin-backend/raw/refs/heads/main/agents/02-database-management/backend-plugin-custom-1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822736/",
            "reporter": "tcains1"
        }
    ],
    "3822737": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/guitupetidutra-ship-it/dr-tulu/refs/heads/main/agent/evaluation/genetic_diseases_eval/tulu-dr-v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822737/",
            "reporter": "tcains1"
        }
    ],
    "3822738": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://github.com/Isaac1993-io/Test-Practice/raw/refs/heads/master/embrail/Test_Practice_1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822738/",
            "reporter": "tcains1"
        }
    ],
    "3822739": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/Reddinton95/custom-plugin-backend/refs/heads/main/agents/02-database-management/backend-plugin-custom-1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822739/",
            "reporter": "tcains1"
        }
    ],
    "3822740": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/Isaac1993-io/flutter-modern-template/refs/heads/master/android/app/src/main/kotlin/com/example/moderntemplate/modern_flutter_template_troptometer.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822740/",
            "reporter": "tcains1"
        }
    ],
    "3822741": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://github.com/Isaac1993-io/Galaxcity-Project/raw/refs/heads/main/submembranaceous/Project_Galaxcity_Chlorococcales.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822741/",
            "reporter": "tcains1"
        }
    ],
    "3822742": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://github.com/Isaac1993-io/JAVA-journey/raw/refs/heads/main/Oracle_JDK-24/journey_JAV_2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:17:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822742/",
            "reporter": "tcains1"
        }
    ],
    "3822743": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/Isaac1993-io/My-Software-Journey/refs/heads/main/HTML%20projects/static%20images/My_Software_Journey_1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822743/",
            "reporter": "tcains1"
        }
    ],
    "3822744": [
        {
            "dateadded": "2026-04-15 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/Isaac1993-io/Test-Practice/refs/heads/master/embrail/Test_Practice_1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822744/",
            "reporter": "tcains1"
        }
    ],
    "3822726": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://raw.githubusercontent.com/Junayedahmedd/assignment-2/refs/heads/main/img/assignment_Shelyak.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822726/",
            "reporter": "tcains1"
        }
    ],
    "3822727": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://github.com/Junayedahmedd/assignment-2/raw/refs/heads/main/img/assignment_Shelyak.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822727/",
            "reporter": "tcains1"
        }
    ],
    "3822728": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://github.com/Junayedahmedd/assignment-1/raw/refs/heads/main/img/assignment-2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:22:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822728/",
            "reporter": "tcains1"
        }
    ],
    "3822729": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://raw.githubusercontent.com/Yawnspe/custom-plugin-devops/refs/heads/master/.github/workflows/plugin-devops-custom-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822729/",
            "reporter": "tcains1"
        }
    ],
    "3822730": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://raw.githubusercontent.com/Junayedahmedd/tailwindProject/refs/heads/main/node_modules/string-width-cjs/node_modules/ansi-regex/tailwind_Project_v2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822730/",
            "reporter": "tcains1"
        }
    ],
    "3822731": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://github.com/Junayedahmedd/gemini_cli_skill/raw/refs/heads/main/mammillation/cli_skill_gemini_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822731/",
            "reporter": "tcains1"
        }
    ],
    "3822732": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://github.com/isaacww/var-lighter-auto-tool/raw/refs/heads/main/turbinatoglobose/tool-lighter-var-auto-v3.6-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822732/",
            "reporter": "tcains1"
        }
    ],
    "3822733": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://github.com/Junayedahmedd/tailwindProject/raw/refs/heads/main/node_modules/string-width-cjs/node_modules/ansi-regex/tailwind_Project_v2.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822733/",
            "reporter": "tcains1"
        }
    ],
    "3822734": [
        {
            "dateadded": "2026-04-15 19:04:09 UTC",
            "url": "https://raw.githubusercontent.com/isaacww/var-lighter-auto-tool/refs/heads/main/turbinatoglobose/tool-lighter-var-auto-v3.6-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822734/",
            "reporter": "tcains1"
        }
    ],
    "3822722": [
        {
            "dateadded": "2026-04-15 19:04:08 UTC",
            "url": "https://github.com/KingFahmee12/AIND-Workshops/raw/refs/heads/main/DevCon25NYC/examples/AIN_Workshops_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822722/",
            "reporter": "tcains1"
        }
    ],
    "3822723": [
        {
            "dateadded": "2026-04-15 19:04:08 UTC",
            "url": "https://raw.githubusercontent.com/KingFahmee12/AIND-Workshops/refs/heads/main/DevCon25NYC/examples/AIN_Workshops_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822723/",
            "reporter": "tcains1"
        }
    ],
    "3822724": [
        {
            "dateadded": "2026-04-15 19:04:08 UTC",
            "url": "https://raw.githubusercontent.com/Junayedahmedd/assignment-1/refs/heads/main/img/assignment-2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822724/",
            "reporter": "tcains1"
        }
    ],
    "3822725": [
        {
            "dateadded": "2026-04-15 19:04:08 UTC",
            "url": "https://raw.githubusercontent.com/Junayedahmedd/gemini_cli_skill/refs/heads/main/mammillation/cli_skill_gemini_v3.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822725/",
            "reporter": "tcains1"
        }
    ],
    "3822721": [
        {
            "dateadded": "2026-04-15 19:02:08 UTC",
            "url": "https://hibcn.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 19:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822721/",
            "reporter": "anonymous"
        }
    ],
    "3822718": [
        {
            "dateadded": "2026-04-15 18:57:11 UTC",
            "url": "https://raw.githubusercontent.com/Flix-ux/powersub-demo-7484/refs/heads/main/transpeer/powersub_demo_v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822718/",
            "reporter": "tcains1"
        }
    ],
    "3822719": [
        {
            "dateadded": "2026-04-15 18:57:11 UTC",
            "url": "https://github.com/evilpratama17/Arweave-Academy/raw/refs/heads/main/submissions/xMevan%202/challenge2/node_modules/kleur/Academy-Arweave-v1.9-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822719/",
            "reporter": "tcains1"
        }
    ],
    "3822720": [
        {
            "dateadded": "2026-04-15 18:57:11 UTC",
            "url": "https://github.com/JallinskyLuca/EntregaFinal/raw/refs/heads/main/css/Final-Entrega-3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822720/",
            "reporter": "tcains1"
        }
    ],
    "3822717": [
        {
            "dateadded": "2026-04-15 18:57:10 UTC",
            "url": "https://github.com/JallinskyLuca/EntregaNumero2/raw/refs/heads/main/sulphohydrate/Numero-Entrega-mandua.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 12:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822717/",
            "reporter": "tcains1"
        }
    ],
    "3822704": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://raw.githubusercontent.com/Godie09/laravel-12-routeserviceprovider-configuration-tutorial/refs/heads/main/database/configuration_laravel_tutorial_routeserviceprovider_v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822704/",
            "reporter": "tcains1"
        }
    ],
    "3822705": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://raw.githubusercontent.com/gseu41/powersub-demo-1000/refs/heads/main/antasphyctic/demo-powersub-v1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822705/",
            "reporter": "tcains1"
        }
    ],
    "3822706": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://raw.githubusercontent.com/evilpratama17/powersub-demo-9758/refs/heads/main/Ericales/demo_powersub_3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822706/",
            "reporter": "tcains1"
        }
    ],
    "3822707": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://raw.githubusercontent.com/JallinskyLuca/EntregaFinal/refs/heads/main/css/Final-Entrega-3.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822707/",
            "reporter": "tcains1"
        }
    ],
    "3822708": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/Godie09/laravel-12-routeserviceprovider-configuration-tutorial/raw/refs/heads/main/database/configuration_laravel_tutorial_routeserviceprovider_v2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822708/",
            "reporter": "tcains1"
        }
    ],
    "3822709": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/JallinskyLuca/Diagrama/raw/refs/heads/main/leptocephalic/Software-1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 10:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822709/",
            "reporter": "tcains1"
        }
    ],
    "3822710": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/evilpratama17/powersub-demo-9758/raw/refs/heads/main/Ericales/demo_powersub_3.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822710/",
            "reporter": "tcains1"
        }
    ],
    "3822711": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/JallinskyLuca/ai-etl-anomaly-detection/raw/refs/heads/main/data/anomaly_etl_ai_detection_2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:07:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822711/",
            "reporter": "tcains1"
        }
    ],
    "3822712": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/gseu41/powersub-demo-1000/raw/refs/heads/main/antasphyctic/demo-powersub-v1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822712/",
            "reporter": "tcains1"
        }
    ],
    "3822713": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/Flix-ux/powersub-demo-7484/raw/refs/heads/main/transpeer/powersub_demo_v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822713/",
            "reporter": "tcains1"
        }
    ],
    "3822714": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://raw.githubusercontent.com/JallinskyLuca/Diagrama/refs/heads/main/leptocephalic/Software-1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 11:14:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822714/",
            "reporter": "tcains1"
        }
    ],
    "3822715": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://github.com/cemanosdesolidao/hedged-rpc-client/raw/refs/heads/main/src/client_hedged_rpc_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822715/",
            "reporter": "tcains1"
        }
    ],
    "3822716": [
        {
            "dateadded": "2026-04-15 18:57:09 UTC",
            "url": "https://raw.githubusercontent.com/JallinskyLuca/ai-etl-anomaly-detection/refs/heads/main/data/anomaly_etl_ai_detection_2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822716/",
            "reporter": "tcains1"
        }
    ],
    "3822701": [
        {
            "dateadded": "2026-04-15 18:57:08 UTC",
            "url": "https://raw.githubusercontent.com/cemanosdesolidao/hedged-rpc-client/refs/heads/main/src/client_hedged_rpc_v2.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:58:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822701/",
            "reporter": "tcains1"
        }
    ],
    "3822702": [
        {
            "dateadded": "2026-04-15 18:57:08 UTC",
            "url": "https://raw.githubusercontent.com/JallinskyLuca/EntregaNumero2/refs/heads/main/sulphohydrate/Numero-Entrega-mandua.zip",
            "url_status": "offline",
            "last_online": "2026-04-25 11:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822702/",
            "reporter": "tcains1"
        }
    ],
    "3822703": [
        {
            "dateadded": "2026-04-15 18:57:08 UTC",
            "url": "https://raw.githubusercontent.com/evilpratama17/Arweave-Academy/refs/heads/main/submissions/xMevan%202/challenge2/node_modules/kleur/Academy-Arweave-v1.9-beta.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822703/",
            "reporter": "tcains1"
        }
    ],
    "3822700": [
        {
            "dateadded": "2026-04-15 18:56:05 UTC",
            "url": "https://dispgua.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:56:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822700/",
            "reporter": "anonymous"
        }
    ],
    "3822699": [
        {
            "dateadded": "2026-04-15 18:52:07 UTC",
            "url": "https://solmeshos.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822699/",
            "reporter": "anonymous"
        }
    ],
    "3822698": [
        {
            "dateadded": "2026-04-15 18:50:12 UTC",
            "url": "https://github.com/rizkiameli/blog-starter-template/raw/refs/heads/main/lib/blog_template_starter_2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822698/",
            "reporter": "tcains1"
        }
    ],
    "3822697": [
        {
            "dateadded": "2026-04-15 18:50:08 UTC",
            "url": "https://raw.githubusercontent.com/rizkiameli/blog-starter-template/refs/heads/main/lib/blog_template_starter_2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822697/",
            "reporter": "tcains1"
        }
    ],
    "3822696": [
        {
            "dateadded": "2026-04-15 18:49:16 UTC",
            "url": "https://raw.githubusercontent.com/Menor1111/iSCSI-Setup-Tutorial-on-Linux-Mint/refs/heads/main/deloul/Linux-on-Tutorial-Mint-i-Setup-SCS-unclosable.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822696/",
            "reporter": "tcains1"
        }
    ],
    "3822678": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/longphamok1323/2025doubao-free-api/refs/heads/master/public/doubao_api_free_inanga.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822678/",
            "reporter": "tcains1"
        }
    ],
    "3822679": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/roseannspastic496/pyspark-etl-automation/raw/refs/heads/main/pridelessly/etl-automation-pyspark-3.4-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822679/",
            "reporter": "tcains1"
        }
    ],
    "3822680": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/Pranavbarskar/pluralsight-aws-data-pipelines-orchestrating-automating/raw/refs/heads/main/module-2/module-2-demo-3-parallel-map/lambdas/generate-datasets/automating_data_pipelines_aws_orchestrating_pluralsight_2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822680/",
            "reporter": "tcains1"
        }
    ],
    "3822681": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/Cocklelaceration337/Simakin/refs/heads/main/app/Software-unshot.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:07:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822681/",
            "reporter": "tcains1"
        }
    ],
    "3822682": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://duskparce.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822682/",
            "reporter": "anonymous"
        }
    ],
    "3822683": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/roseannspastic496/pyspark-etl-automation/refs/heads/main/pridelessly/etl-automation-pyspark-3.4-alpha.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822683/",
            "reporter": "tcains1"
        }
    ],
    "3822684": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/wsbs20/claude-code-aso-skill/raw/refs/heads/main/.claude/skills/code-aso-claude-skill-v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822684/",
            "reporter": "tcains1"
        }
    ],
    "3822685": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/mikexell/react-express-docker/refs/heads/main/client/src/react-express-docker-v1.0-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:10:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822685/",
            "reporter": "tcains1"
        }
    ],
    "3822686": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/123Luka123/k3s-proxmox-terraform/raw/refs/heads/main/docs/terraform-s-k-proxmox-frontierlike.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822686/",
            "reporter": "tcains1"
        }
    ],
    "3822687": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/Hardcore-bioengineering120/think/refs/heads/master/gestative/Software_v1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822687/",
            "reporter": "tcains1"
        }
    ],
    "3822688": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/kartik944/relizy/refs/heads/main/src/core/__tests__/Software_v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822688/",
            "reporter": "tcains1"
        }
    ],
    "3822689": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/Novice-Cloud/workflow/refs/heads/main/packages/world-postgres/src/drizzle/migrations/Software_v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822689/",
            "reporter": "tcains1"
        }
    ],
    "3822690": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/Pranavbarskar/pluralsight-aws-data-pipelines-orchestrating-automating/refs/heads/main/module-2/module-2-demo-3-parallel-map/lambdas/generate-datasets/automating_data_pipelines_aws_orchestrating_pluralsight_2.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822690/",
            "reporter": "tcains1"
        }
    ],
    "3822691": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://raw.githubusercontent.com/wsbs20/claude-code-aso-skill/refs/heads/main/.claude/skills/code-aso-claude-skill-v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822691/",
            "reporter": "tcains1"
        }
    ],
    "3822692": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://subtcav.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822692/",
            "reporter": "anonymous"
        }
    ],
    "3822693": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/Menor1111/iSCSI-Setup-Tutorial-on-Linux-Mint/raw/refs/heads/main/deloul/Linux-on-Tutorial-Mint-i-Setup-SCS-unclosable.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822693/",
            "reporter": "tcains1"
        }
    ],
    "3822694": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/longphamok1323/2025doubao-free-api/raw/refs/heads/master/public/doubao_api_free_inanga.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822694/",
            "reporter": "tcains1"
        }
    ],
    "3822695": [
        {
            "dateadded": "2026-04-15 18:49:15 UTC",
            "url": "https://github.com/SuperDev699/CheatSheet-LLM/raw/refs/heads/main/textbook_create/textbook-pdf/Sheet_Cheat_LLM_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822695/",
            "reporter": "tcains1"
        }
    ],
    "3822675": [
        {
            "dateadded": "2026-04-15 18:49:14 UTC",
            "url": "https://github.com/gustavomnhee/lima/raw/refs/heads/master/pkg/localpathutil/Software_v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822675/",
            "reporter": "tcains1"
        }
    ],
    "3822676": [
        {
            "dateadded": "2026-04-15 18:49:14 UTC",
            "url": "https://raw.githubusercontent.com/gustavomnhee/lima/refs/heads/master/pkg/localpathutil/Software_v2.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822676/",
            "reporter": "tcains1"
        }
    ],
    "3822677": [
        {
            "dateadded": "2026-04-15 18:49:14 UTC",
            "url": "http://42.238.134.89:58398/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822677/",
            "reporter": "geenensp"
        }
    ],
    "3822671": [
        {
            "dateadded": "2026-04-15 18:49:13 UTC",
            "url": "https://github.com/kartik944/relizy/raw/refs/heads/main/src/core/__tests__/Software_v2.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822671/",
            "reporter": "tcains1"
        }
    ],
    "3822672": [
        {
            "dateadded": "2026-04-15 18:49:13 UTC",
            "url": "https://raw.githubusercontent.com/zebulenlithophytic371/algorithmic-trading-platform/refs/heads/main/agents/algorithmic-trading-platform-1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822672/",
            "reporter": "tcains1"
        }
    ],
    "3822673": [
        {
            "dateadded": "2026-04-15 18:49:13 UTC",
            "url": "https://github.com/Novice-Cloud/workflow/raw/refs/heads/main/packages/world-postgres/src/drizzle/migrations/Software_v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822673/",
            "reporter": "tcains1"
        }
    ],
    "3822674": [
        {
            "dateadded": "2026-04-15 18:49:13 UTC",
            "url": "https://github.com/Hardcore-bioengineering120/think/raw/refs/heads/master/gestative/Software_v1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:02 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822674/",
            "reporter": "tcains1"
        }
    ],
    "3822669": [
        {
            "dateadded": "2026-04-15 18:49:12 UTC",
            "url": "https://github.com/zebulenlithophytic371/algorithmic-trading-platform/raw/refs/heads/main/agents/algorithmic-trading-platform-1.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:57:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822669/",
            "reporter": "tcains1"
        }
    ],
    "3822670": [
        {
            "dateadded": "2026-04-15 18:49:12 UTC",
            "url": "https://s0ck-spool.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822670/",
            "reporter": "anonymous"
        }
    ],
    "3822666": [
        {
            "dateadded": "2026-04-15 18:49:11 UTC",
            "url": "https://github.com/mikexell/react-express-docker/raw/refs/heads/main/client/src/react-express-docker-v1.0-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 10:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822666/",
            "reporter": "tcains1"
        }
    ],
    "3822667": [
        {
            "dateadded": "2026-04-15 18:49:11 UTC",
            "url": "https://github.com/Mikelzlll/migraine-solana-pumpfun-aio-bot/raw/refs/heads/main/underconsume/bot-aio-migraine-pumpfun-solana-dinosaurian.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:25:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822667/",
            "reporter": "tcains1"
        }
    ],
    "3822668": [
        {
            "dateadded": "2026-04-15 18:49:11 UTC",
            "url": "http://219.157.62.56:45049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822668/",
            "reporter": "geenensp"
        }
    ],
    "3822665": [
        {
            "dateadded": "2026-04-15 18:49:10 UTC",
            "url": "https://raw.githubusercontent.com/Mikelzlll/migraine-solana-pumpfun-aio-bot/refs/heads/main/underconsume/bot-aio-migraine-pumpfun-solana-dinosaurian.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822665/",
            "reporter": "tcains1"
        }
    ],
    "3822659": [
        {
            "dateadded": "2026-04-15 18:49:09 UTC",
            "url": "https://raw.githubusercontent.com/123Luka123/k3s-proxmox-terraform/refs/heads/main/docs/terraform-s-k-proxmox-frontierlike.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822659/",
            "reporter": "tcains1"
        }
    ],
    "3822660": [
        {
            "dateadded": "2026-04-15 18:49:09 UTC",
            "url": "https://raw.githubusercontent.com/sionetukuafu919-design/MEV-by-JaredFromSubway/refs/heads/main/sussultatory/Subway-Jared-From-ME-by-2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:58:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822660/",
            "reporter": "tcains1"
        }
    ],
    "3822661": [
        {
            "dateadded": "2026-04-15 18:49:09 UTC",
            "url": "https://github.com/sionetukuafu919-design/MEV-by-JaredFromSubway/raw/refs/heads/main/sussultatory/Subway-Jared-From-ME-by-2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:41:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822661/",
            "reporter": "tcains1"
        }
    ],
    "3822662": [
        {
            "dateadded": "2026-04-15 18:49:09 UTC",
            "url": "https://github.com/S2D0N/bnb-copy-trading-bot-go/raw/refs/heads/main/retinula/trading_bot_copy_go_bnb_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822662/",
            "reporter": "tcains1"
        }
    ],
    "3822663": [
        {
            "dateadded": "2026-04-15 18:49:09 UTC",
            "url": "https://github.com/Cocklelaceration337/Simakin/raw/refs/heads/main/app/Software-unshot.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 10:43:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822663/",
            "reporter": "tcains1"
        }
    ],
    "3822664": [
        {
            "dateadded": "2026-04-15 18:49:09 UTC",
            "url": "https://raw.githubusercontent.com/S2D0N/bnb-copy-trading-bot-go/refs/heads/main/retinula/trading_bot_copy_go_bnb_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822664/",
            "reporter": "tcains1"
        }
    ],
    "3822653": [
        {
            "dateadded": "2026-04-15 18:33:16 UTC",
            "url": "https://github.com/notghost634-cyber/RBust/raw/refs/heads/main/src/R_Bust_v3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 10:21:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822653/",
            "reporter": "tcains1"
        }
    ],
    "3822654": [
        {
            "dateadded": "2026-04-15 18:33:16 UTC",
            "url": "https://raw.githubusercontent.com/qwetamoe/sailarr-installer/refs/heads/main/config/autoscan/installer_sailarr_3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 10:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822654/",
            "reporter": "tcains1"
        }
    ],
    "3822655": [
        {
            "dateadded": "2026-04-15 18:33:16 UTC",
            "url": "https://github.com/qwetamoe/sailarr-installer/raw/refs/heads/main/config/autoscan/installer_sailarr_3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:46:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822655/",
            "reporter": "tcains1"
        }
    ],
    "3822656": [
        {
            "dateadded": "2026-04-15 18:33:16 UTC",
            "url": "https://raw.githubusercontent.com/K12trappy/bifrost/refs/heads/main/src/utils/Software_subchondral.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 12:00:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822656/",
            "reporter": "tcains1"
        }
    ],
    "3822657": [
        {
            "dateadded": "2026-04-15 18:33:16 UTC",
            "url": "https://raw.githubusercontent.com/sunxholejabi/bc-game-crash-predictor/refs/heads/main/CrashPredictor.Test/Markup/predictor-crash-game-bc-2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:20:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822657/",
            "reporter": "tcains1"
        }
    ],
    "3822658": [
        {
            "dateadded": "2026-04-15 18:33:16 UTC",
            "url": "https://github.com/K12trappy/bifrost/raw/refs/heads/main/src/utils/Software_subchondral.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 10:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822658/",
            "reporter": "tcains1"
        }
    ],
    "3822641": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://raw.githubusercontent.com/yomyoms/SillyTavern-MoonlitEchoesTheme/refs/heads/main/i18n/Echoes_Silly_Tavern_Moonlit_Theme_3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822641/",
            "reporter": "tcains1"
        }
    ],
    "3822642": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/yomyoms/oai-proxy-mod/raw/refs/heads/main/src/proxy/middleware/request/mutators/mod_oai_proxy_v1.3-beta.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:13:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822642/",
            "reporter": "tcains1"
        }
    ],
    "3822643": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://raw.githubusercontent.com/LightDopper/skill-codex/refs/heads/master/irrationality/skill_codex_sentient.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822643/",
            "reporter": "tcains1"
        }
    ],
    "3822644": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://raw.githubusercontent.com/yomyoms/oai-proxy-mod/refs/heads/main/src/proxy/middleware/request/mutators/mod_oai_proxy_v1.3-beta.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822644/",
            "reporter": "tcains1"
        }
    ],
    "3822645": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://raw.githubusercontent.com/yomyoms/chatgpt_telegram_bot/refs/heads/main/bot/bot-chatgpt-telegram-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822645/",
            "reporter": "tcains1"
        }
    ],
    "3822646": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/sunxholejabi/bc-game-crash-predictor/raw/refs/heads/main/CrashPredictor.Test/Markup/predictor-crash-game-bc-2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:40:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822646/",
            "reporter": "tcains1"
        }
    ],
    "3822647": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://raw.githubusercontent.com/Brazilian-willametteriver232/llama.swift/refs/heads/main/Sources/llama-swift-v2.7-beta.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822647/",
            "reporter": "tcains1"
        }
    ],
    "3822648": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/LightDopper/skill-codex/raw/refs/heads/master/irrationality/skill_codex_sentient.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822648/",
            "reporter": "tcains1"
        }
    ],
    "3822649": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/ittaloakk/cursor/raw/refs/heads/main/heterotaxic/Software_v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822649/",
            "reporter": "tcains1"
        }
    ],
    "3822650": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/yomyoms/SillyTavern-MoonlitEchoesTheme/raw/refs/heads/main/i18n/Echoes_Silly_Tavern_Moonlit_Theme_3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:03:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822650/",
            "reporter": "tcains1"
        }
    ],
    "3822651": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/ESKIBABBLE/Tensr/raw/refs/heads/main/src/io/Software-1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822651/",
            "reporter": "tcains1"
        }
    ],
    "3822652": [
        {
            "dateadded": "2026-04-15 18:33:15 UTC",
            "url": "https://github.com/yomyoms/chatgpt_telegram_bot/raw/refs/heads/main/bot/bot-chatgpt-telegram-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:40:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822652/",
            "reporter": "tcains1"
        }
    ],
    "3822635": [
        {
            "dateadded": "2026-04-15 18:33:14 UTC",
            "url": "https://raw.githubusercontent.com/vnx12/Zetian/refs/heads/develop/src/Zetian/Models/EventArgs/Software_v1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:26:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822635/",
            "reporter": "tcains1"
        }
    ],
    "3822636": [
        {
            "dateadded": "2026-04-15 18:33:14 UTC",
            "url": "https://raw.githubusercontent.com/Hymieincorrupt440/Ideate/refs/heads/main/packages/eslint-config/Software-v1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:40:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822636/",
            "reporter": "tcains1"
        }
    ],
    "3822637": [
        {
            "dateadded": "2026-04-15 18:33:14 UTC",
            "url": "https://github.com/Hymieincorrupt440/Ideate/raw/refs/heads/main/packages/eslint-config/Software-v1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:48:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822637/",
            "reporter": "tcains1"
        }
    ],
    "3822638": [
        {
            "dateadded": "2026-04-15 18:33:14 UTC",
            "url": "https://raw.githubusercontent.com/Luizin507/fourmeme-trading-bot/refs/heads/main/img/fourmeme-trading-bot-v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:01:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822638/",
            "reporter": "tcains1"
        }
    ],
    "3822639": [
        {
            "dateadded": "2026-04-15 18:33:14 UTC",
            "url": "https://github.com/yomyoms/SillyTavern-Docker/raw/refs/heads/main/maidenhair/Silly-Docker-Tavern-midtap.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822639/",
            "reporter": "tcains1"
        }
    ],
    "3822640": [
        {
            "dateadded": "2026-04-15 18:33:14 UTC",
            "url": "https://github.com/nottvixn/devops-journey/raw/refs/heads/main/PROJECTS/journey-devops-1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:48:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822640/",
            "reporter": "tcains1"
        }
    ],
    "3822633": [
        {
            "dateadded": "2026-04-15 18:33:13 UTC",
            "url": "https://github.com/Brazilian-willametteriver232/llama.swift/raw/refs/heads/main/Sources/llama-swift-v2.7-beta.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 11:13:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822633/",
            "reporter": "tcains1"
        }
    ],
    "3822634": [
        {
            "dateadded": "2026-04-15 18:33:13 UTC",
            "url": "https://github.com/Luizin507/fourmeme-trading-bot/raw/refs/heads/main/img/fourmeme-trading-bot-v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 09:42:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822634/",
            "reporter": "tcains1"
        }
    ],
    "3822625": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://raw.githubusercontent.com/notghost634-cyber/RBust/refs/heads/main/src/R_Bust_v3.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 11:40:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822625/",
            "reporter": "tcains1"
        }
    ],
    "3822626": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "http://222.137.26.251:42222/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:47:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822626/",
            "reporter": "geenensp"
        }
    ],
    "3822627": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://github.com/apothegmatic-whiskfern276/autosteer/raw/refs/heads/main/src/stores/__tests__/Software-2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822627/",
            "reporter": "tcains1"
        }
    ],
    "3822628": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://raw.githubusercontent.com/apothegmatic-whiskfern276/autosteer/refs/heads/main/src/stores/__tests__/Software-2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:38:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822628/",
            "reporter": "tcains1"
        }
    ],
    "3822629": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://github.com/vnx12/Zetian/raw/refs/heads/develop/src/Zetian/Models/EventArgs/Software_v1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:55:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822629/",
            "reporter": "tcains1"
        }
    ],
    "3822630": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://github.com/yomyoms/claude-proxy-flask/raw/refs/heads/main/api/flask_claude_proxy_2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 07:17:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822630/",
            "reporter": "tcains1"
        }
    ],
    "3822631": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://raw.githubusercontent.com/yomyoms/SillyTavern-Docker/refs/heads/main/maidenhair/Silly-Docker-Tavern-midtap.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:21:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822631/",
            "reporter": "tcains1"
        }
    ],
    "3822632": [
        {
            "dateadded": "2026-04-15 18:33:12 UTC",
            "url": "https://raw.githubusercontent.com/nottvixn/devops-journey/refs/heads/main/PROJECTS/journey-devops-1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822632/",
            "reporter": "tcains1"
        }
    ],
    "3822621": [
        {
            "dateadded": "2026-04-15 18:33:11 UTC",
            "url": "https://raw.githubusercontent.com/yomyoms/Netflix-N-Hack/refs/heads/main/payloads/Hack_Netflix_3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822621/",
            "reporter": "tcains1"
        }
    ],
    "3822622": [
        {
            "dateadded": "2026-04-15 18:33:11 UTC",
            "url": "https://raw.githubusercontent.com/ittaloakk/cursor/refs/heads/main/heterotaxic/Software_v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:27:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822622/",
            "reporter": "tcains1"
        }
    ],
    "3822623": [
        {
            "dateadded": "2026-04-15 18:33:11 UTC",
            "url": "https://raw.githubusercontent.com/yomyoms/claude-proxy-flask/refs/heads/main/api/flask_claude_proxy_2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:53:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822623/",
            "reporter": "tcains1"
        }
    ],
    "3822624": [
        {
            "dateadded": "2026-04-15 18:33:11 UTC",
            "url": "https://github.com/yomyoms/Netflix-N-Hack/raw/refs/heads/main/payloads/Hack_Netflix_3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 10:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822624/",
            "reporter": "tcains1"
        }
    ],
    "3822619": [
        {
            "dateadded": "2026-04-15 18:33:10 UTC",
            "url": "https://raw.githubusercontent.com/ESKIBABBLE/Tensr/refs/heads/main/src/io/Software-1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-17 06:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822619/",
            "reporter": "tcains1"
        }
    ],
    "3822620": [
        {
            "dateadded": "2026-04-15 18:33:10 UTC",
            "url": "https://raw.githubusercontent.com/SuperDev699/CheatSheet-LLM/refs/heads/main/textbook_create/textbook-pdf/Sheet_Cheat_LLM_2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822620/",
            "reporter": "tcains1"
        }
    ],
    "3822618": [
        {
            "dateadded": "2026-04-15 18:32:26 UTC",
            "url": "http://182.113.235.127:40429/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:01:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822618/",
            "reporter": "geenensp"
        }
    ],
    "3822617": [
        {
            "dateadded": "2026-04-15 18:32:25 UTC",
            "url": "http://115.55.217.180:48512/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:18:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822617/",
            "reporter": "geenensp"
        }
    ],
    "3822616": [
        {
            "dateadded": "2026-04-15 18:28:11 UTC",
            "url": "https://unitecres.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822616/",
            "reporter": "anonymous"
        }
    ],
    "3822615": [
        {
            "dateadded": "2026-04-15 18:23:15 UTC",
            "url": "https://planslow.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822615/",
            "reporter": "anonymous"
        }
    ],
    "3822614": [
        {
            "dateadded": "2026-04-15 18:20:16 UTC",
            "url": "http://39.87.29.232:59399/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822614/",
            "reporter": "geenensp"
        }
    ],
    "3822613": [
        {
            "dateadded": "2026-04-15 18:19:15 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm",
            "url_status": "offline",
            "last_online": "2026-04-18 11:04:43 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "bot",
                "ddos",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822613/",
            "reporter": "DeatWtf"
        }
    ],
    "3822612": [
        {
            "dateadded": "2026-04-15 18:19:12 UTC",
            "url": "https://photgridyelow.site/duck/modulo/foto.jpg",
            "url_status": "offline",
            "last_online": "2026-04-15 18:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "VENON"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822612/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822611": [
        {
            "dateadded": "2026-04-15 18:19:10 UTC",
            "url": "https://vel-spireex.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822611/",
            "reporter": "anonymous"
        }
    ],
    "3822602": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.sh4",
            "url_status": "offline",
            "last_online": "2026-04-18 10:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "mirai",
                "qbot",
                "sh4"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822602/",
            "reporter": "DeatWtf"
        }
    ],
    "3822603": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.spc",
            "url_status": "offline",
            "last_online": "2026-04-18 10:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "mirai",
                "qbot",
                "spc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822603/",
            "reporter": "DeatWtf"
        }
    ],
    "3822604": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm7",
            "url_status": "offline",
            "last_online": "2026-04-18 10:26:30 UTC",
            "threat": "malware_download",
            "tags": [
                "arm7",
                "botnet",
                "ddos",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822604/",
            "reporter": "DeatWtf"
        }
    ],
    "3822605": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-18 11:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "botnet",
                "mirai",
                "qbot",
                "x86_64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822605/",
            "reporter": "DeatWtf"
        }
    ],
    "3822606": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-18 09:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "mirai",
                "mpsl",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822606/",
            "reporter": "DeatWtf"
        }
    ],
    "3822607": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.m68k",
            "url_status": "offline",
            "last_online": "2026-04-18 04:23:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "m68k",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822607/",
            "reporter": "DeatWtf"
        }
    ],
    "3822608": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.ppc",
            "url_status": "offline",
            "last_online": "2026-04-18 05:46:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "mirai",
                "ppc",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822608/",
            "reporter": "DeatWtf"
        }
    ],
    "3822609": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 10:50:36 UTC",
            "threat": "malware_download",
            "tags": [
                "arm5",
                "botnet",
                "ddos",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822609/",
            "reporter": "DeatWtf"
        }
    ],
    "3822610": [
        {
            "dateadded": "2026-04-15 18:19:09 UTC",
            "url": "https://weedhack.xyz/files/jar/Pjibf.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 18:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822610/",
            "reporter": "burger"
        }
    ],
    "3822601": [
        {
            "dateadded": "2026-04-15 18:19:08 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 04:53:55 UTC",
            "threat": "malware_download",
            "tags": [
                "arm6",
                "ddos",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822601/",
            "reporter": "DeatWtf"
        }
    ],
    "3822599": [
        {
            "dateadded": "2026-04-15 18:18:11 UTC",
            "url": "https://www.dropbox.com/scl/fi/owz3sdy6gmyni1jlhrsdw/mugiwara_installer.exe?rlkey=3ohsmwu2wd3mqxrnpjdti27et&st=awdrtify&dl=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822599/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822597": [
        {
            "dateadded": "2026-04-15 18:18:10 UTC",
            "url": "http://187.77.255.35/std.txt",
            "url_status": "offline",
            "last_online": "2026-04-17 23:19:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822597/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822598": [
        {
            "dateadded": "2026-04-15 18:18:10 UTC",
            "url": "http://187.77.255.35/script.php",
            "url_status": "offline",
            "last_online": "2026-04-17 23:02:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822598/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822590": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "https://uc9b6922e6f1f1bf6572fc66063e.dl.dropboxusercontent.com/cd/0/get/C-pqOuyr-PJAO-1qFleTZQk8lgaoVRLonPDrE7Fi4IwabdWg1Kog5zZjJ7cVJ7vg-Du_IM6tSgkcvzzG1ug5ih3EQLzmjaKuCfD4qJOeG9rw7tIk0-jonICTFxK-1oI0Hx8w-dlOq6ao1agEh2CpgQ15/file?dl=1#",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822590/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822591": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arc",
            "url_status": "offline",
            "last_online": "2026-04-18 09:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "botnet",
                "ddos",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822591/",
            "reporter": "DeatWtf"
        }
    ],
    "3822592": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.mips",
            "url_status": "offline",
            "last_online": "2026-04-18 10:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Boatnet",
                "botnet",
                "mips.",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822592/",
            "reporter": "DeatWtf"
        }
    ],
    "3822593": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "http://196.199.55.11/XKcNhY4G8rcYpb.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:35:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Boatnet",
                "cnc",
                "ddos",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822593/",
            "reporter": "DeatWtf"
        }
    ],
    "3822594": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.x86",
            "url_status": "offline",
            "last_online": "2026-04-18 04:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Boatnet",
                "botnet",
                "mirai",
                "qbot",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822594/",
            "reporter": "DeatWtf"
        }
    ],
    "3822595": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "https://uc11ec97a00822a6a1724fc7f4c0.dl.dropboxusercontent.com/cd/0/get/C-kRZDlkn33pXVucpo4-Fj7Dbpl86LGc1HykI6H6kSfS9o30PfFfTEGcekVgy9wAntb5RIdRoRXgJIe71LeNl07vSqdSqdwRjSOZVlB-eqzxtWUWUQp3qdYUsO5099btB8fqbOF5xGmQwQr6KcqUrd9o/file?dl=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822595/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822596": [
        {
            "dateadded": "2026-04-15 18:18:07 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.i686",
            "url_status": "offline",
            "last_online": "2026-04-18 11:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "i686",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822596/",
            "reporter": "DeatWtf"
        }
    ],
    "3822589": [
        {
            "dateadded": "2026-04-15 18:18:06 UTC",
            "url": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "botnet",
                "ddos",
                "i468",
                "mirai",
                "qbot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822589/",
            "reporter": "DeatWtf"
        }
    ],
    "3822588": [
        {
            "dateadded": "2026-04-15 18:16:07 UTC",
            "url": "https://t1ny-point.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822588/",
            "reporter": "anonymous"
        }
    ],
    "3822587": [
        {
            "dateadded": "2026-04-15 18:06:09 UTC",
            "url": "https://tal-forgear.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822587/",
            "reporter": "anonymous"
        }
    ],
    "3822586": [
        {
            "dateadded": "2026-04-15 18:01:24 UTC",
            "url": "http://125.41.170.101:51903/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 18:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822586/",
            "reporter": "geenensp"
        }
    ],
    "3822585": [
        {
            "dateadded": "2026-04-15 18:01:11 UTC",
            "url": "http://222.137.26.251:42222/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:45:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822585/",
            "reporter": "geenensp"
        }
    ],
    "3822584": [
        {
            "dateadded": "2026-04-15 18:00:13 UTC",
            "url": "https://qhbvndc7.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 18:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822584/",
            "reporter": "anonymous"
        }
    ],
    "3822583": [
        {
            "dateadded": "2026-04-15 17:55:08 UTC",
            "url": "https://2ffmg.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822583/",
            "reporter": "anonymous"
        }
    ],
    "3822582": [
        {
            "dateadded": "2026-04-15 17:53:08 UTC",
            "url": "http://115.55.217.180:48512/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822582/",
            "reporter": "geenensp"
        }
    ],
    "3822581": [
        {
            "dateadded": "2026-04-15 17:51:23 UTC",
            "url": "http://61.52.75.73:40184/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:06:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822581/",
            "reporter": "geenensp"
        }
    ],
    "3822580": [
        {
            "dateadded": "2026-04-15 17:51:08 UTC",
            "url": "http://42.230.25.51:56197/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:54:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822580/",
            "reporter": "geenensp"
        }
    ],
    "3822579": [
        {
            "dateadded": "2026-04-15 17:50:15 UTC",
            "url": "https://ioncove.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822579/",
            "reporter": "anonymous"
        }
    ],
    "3822577": [
        {
            "dateadded": "2026-04-15 17:50:13 UTC",
            "url": "http://115.61.17.175:60838/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822577/",
            "reporter": "geenensp"
        }
    ],
    "3822578": [
        {
            "dateadded": "2026-04-15 17:50:13 UTC",
            "url": "http://112.254.8.106:47404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:49:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822578/",
            "reporter": "geenensp"
        }
    ],
    "3822576": [
        {
            "dateadded": "2026-04-15 17:48:14 UTC",
            "url": "http://115.61.17.175:60838/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822576/",
            "reporter": "geenensp"
        }
    ],
    "3822575": [
        {
            "dateadded": "2026-04-15 17:46:10 UTC",
            "url": "https://github.com/camm1ls/deviloff/raw/refs/heads/main/4J8576A0E8V3.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822575/",
            "reporter": "tcains1"
        }
    ],
    "3822574": [
        {
            "dateadded": "2026-04-15 17:45:15 UTC",
            "url": "https://raw.githubusercontent.com/camm1ls/deviloff/refs/heads/main/4J8576A0E8V3.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:45 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822574/",
            "reporter": "tcains1"
        }
    ],
    "3822573": [
        {
            "dateadded": "2026-04-15 17:44:10 UTC",
            "url": "https://shallo-uni.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822573/",
            "reporter": "anonymous"
        }
    ],
    "3822572": [
        {
            "dateadded": "2026-04-15 17:43:10 UTC",
            "url": "https://pastebin.com/raw/cM1g9kdE",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822572/",
            "reporter": "tcains1"
        }
    ],
    "3822571": [
        {
            "dateadded": "2026-04-15 17:38:09 UTC",
            "url": "https://ihrydwg.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822571/",
            "reporter": "anonymous"
        }
    ],
    "3822570": [
        {
            "dateadded": "2026-04-15 17:37:24 UTC",
            "url": "http://222.142.240.187:55276/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:34:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822570/",
            "reporter": "geenensp"
        }
    ],
    "3822569": [
        {
            "dateadded": "2026-04-15 17:34:23 UTC",
            "url": "http://112.194.122.39:38327/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:25:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822569/",
            "reporter": "geenensp"
        }
    ],
    "3822568": [
        {
            "dateadded": "2026-04-15 17:33:12 UTC",
            "url": "https://011kep.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822568/",
            "reporter": "anonymous"
        }
    ],
    "3822567": [
        {
            "dateadded": "2026-04-15 17:30:15 UTC",
            "url": "https://gitlab.com/flyretths/heavenlis/-/raw/main/4J8576A0E8V3.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 11:13:50 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822567/",
            "reporter": "tcains1"
        }
    ],
    "3822566": [
        {
            "dateadded": "2026-04-15 17:28:08 UTC",
            "url": "http://182.117.27.197:40257/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822566/",
            "reporter": "geenensp"
        }
    ],
    "3822565": [
        {
            "dateadded": "2026-04-15 17:27:27 UTC",
            "url": "http://42.224.78.240:56843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:22:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822565/",
            "reporter": "geenensp"
        }
    ],
    "3822564": [
        {
            "dateadded": "2026-04-15 17:27:23 UTC",
            "url": "http://182.116.120.85:39543/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822564/",
            "reporter": "geenensp"
        }
    ],
    "3822563": [
        {
            "dateadded": "2026-04-15 17:26:13 UTC",
            "url": "https://fr0st-branch.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822563/",
            "reporter": "anonymous"
        }
    ],
    "3822562": [
        {
            "dateadded": "2026-04-15 17:26:10 UTC",
            "url": "http://182.117.27.197:40257/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822562/",
            "reporter": "geenensp"
        }
    ],
    "3822561": [
        {
            "dateadded": "2026-04-15 17:26:09 UTC",
            "url": "http://27.207.211.54:46717/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:19:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822561/",
            "reporter": "geenensp"
        }
    ],
    "3822560": [
        {
            "dateadded": "2026-04-15 17:25:19 UTC",
            "url": "http://42.224.80.157:38990/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:19:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822560/",
            "reporter": "geenensp"
        }
    ],
    "3822557": [
        {
            "dateadded": "2026-04-15 17:22:13 UTC",
            "url": "https://raw.githubusercontent.com/fornessa/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822557/",
            "reporter": "tcains1"
        }
    ],
    "3822558": [
        {
            "dateadded": "2026-04-15 17:22:13 UTC",
            "url": "https://github.com/landeliur/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:36 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822558/",
            "reporter": "tcains1"
        }
    ],
    "3822559": [
        {
            "dateadded": "2026-04-15 17:22:13 UTC",
            "url": "https://github.com/hopeinfully/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:47 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822559/",
            "reporter": "tcains1"
        }
    ],
    "3822555": [
        {
            "dateadded": "2026-04-15 17:22:12 UTC",
            "url": "https://raw.githubusercontent.com/hopeinfully/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:58 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822555/",
            "reporter": "tcains1"
        }
    ],
    "3822556": [
        {
            "dateadded": "2026-04-15 17:22:12 UTC",
            "url": "https://raw.githubusercontent.com/landeliur/FiveM-Spoofer/refs/heads/main/CFXBypass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822556/",
            "reporter": "tcains1"
        }
    ],
    "3822554": [
        {
            "dateadded": "2026-04-15 17:22:09 UTC",
            "url": "https://github.com/fornessa/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:33 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822554/",
            "reporter": "tcains1"
        }
    ],
    "3822553": [
        {
            "dateadded": "2026-04-15 17:21:13 UTC",
            "url": "https://trimarket.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822553/",
            "reporter": "anonymous"
        }
    ],
    "3822552": [
        {
            "dateadded": "2026-04-15 17:20:29 UTC",
            "url": "http://222.142.254.82:55738/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822552/",
            "reporter": "geenensp"
        }
    ],
    "3822550": [
        {
            "dateadded": "2026-04-15 17:19:14 UTC",
            "url": "http://185.23.104.28:53587/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822550/",
            "reporter": "geenensp"
        }
    ],
    "3822551": [
        {
            "dateadded": "2026-04-15 17:19:14 UTC",
            "url": "http://110.37.39.88:56139/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822551/",
            "reporter": "geenensp"
        }
    ],
    "3822549": [
        {
            "dateadded": "2026-04-15 17:15:15 UTC",
            "url": "https://jjfcpkvh.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822549/",
            "reporter": "anonymous"
        }
    ],
    "3822548": [
        {
            "dateadded": "2026-04-15 17:09:11 UTC",
            "url": "https://tlnsb.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822548/",
            "reporter": "anonymous"
        }
    ],
    "3822547": [
        {
            "dateadded": "2026-04-15 17:08:19 UTC",
            "url": "http://182.126.115.143:43465/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:48:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822547/",
            "reporter": "geenensp"
        }
    ],
    "3822546": [
        {
            "dateadded": "2026-04-15 17:06:26 UTC",
            "url": "http://219.155.211.180:39386/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:43:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822546/",
            "reporter": "geenensp"
        }
    ],
    "3822545": [
        {
            "dateadded": "2026-04-15 17:04:11 UTC",
            "url": "https://lps08.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 17:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822545/",
            "reporter": "anonymous"
        }
    ],
    "3822544": [
        {
            "dateadded": "2026-04-15 16:59:16 UTC",
            "url": "https://proxyeas.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822544/",
            "reporter": "anonymous"
        }
    ],
    "3822542": [
        {
            "dateadded": "2026-04-15 16:58:21 UTC",
            "url": "http://110.37.39.88:56139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822542/",
            "reporter": "geenensp"
        }
    ],
    "3822543": [
        {
            "dateadded": "2026-04-15 16:58:21 UTC",
            "url": "http://27.207.211.54:46717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:42:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822543/",
            "reporter": "geenensp"
        }
    ],
    "3822541": [
        {
            "dateadded": "2026-04-15 16:56:17 UTC",
            "url": "http://42.224.80.157:38990/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:57:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822541/",
            "reporter": "geenensp"
        }
    ],
    "3822540": [
        {
            "dateadded": "2026-04-15 16:54:14 UTC",
            "url": "https://h4rve5-loop.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822540/",
            "reporter": "anonymous"
        }
    ],
    "3822539": [
        {
            "dateadded": "2026-04-15 16:54:13 UTC",
            "url": "http://110.36.27.186:39096/i",
            "url_status": "offline",
            "last_online": "2026-04-19 00:02:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822539/",
            "reporter": "geenensp"
        }
    ],
    "3822538": [
        {
            "dateadded": "2026-04-15 16:51:18 UTC",
            "url": "http://219.156.91.202:42546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822538/",
            "reporter": "geenensp"
        }
    ],
    "3822537": [
        {
            "dateadded": "2026-04-15 16:49:21 UTC",
            "url": "http://42.225.203.48:53522/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:12:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822537/",
            "reporter": "geenensp"
        }
    ],
    "3822536": [
        {
            "dateadded": "2026-04-15 16:48:14 UTC",
            "url": "https://bm1rtmr.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822536/",
            "reporter": "anonymous"
        }
    ],
    "3822535": [
        {
            "dateadded": "2026-04-15 16:42:12 UTC",
            "url": "https://xxvxsk4x.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822535/",
            "reporter": "anonymous"
        }
    ],
    "3822534": [
        {
            "dateadded": "2026-04-15 16:41:24 UTC",
            "url": "http://222.137.95.141:38054/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:25:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822534/",
            "reporter": "geenensp"
        }
    ],
    "3822533": [
        {
            "dateadded": "2026-04-15 16:38:23 UTC",
            "url": "http://219.155.211.180:39386/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822533/",
            "reporter": "geenensp"
        }
    ],
    "3822532": [
        {
            "dateadded": "2026-04-15 16:38:21 UTC",
            "url": "https://mervaleon1.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822532/",
            "reporter": "anonymous"
        }
    ],
    "3822531": [
        {
            "dateadded": "2026-04-15 16:35:15 UTC",
            "url": "https://vialstr.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822531/",
            "reporter": "anonymous"
        }
    ],
    "3822530": [
        {
            "dateadded": "2026-04-15 16:31:24 UTC",
            "url": "http://110.36.27.186:39096/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822530/",
            "reporter": "geenensp"
        }
    ],
    "3822529": [
        {
            "dateadded": "2026-04-15 16:27:07 UTC",
            "url": "http://182.126.115.143:43465/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:08:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822529/",
            "reporter": "geenensp"
        }
    ],
    "3822528": [
        {
            "dateadded": "2026-04-15 16:24:08 UTC",
            "url": "https://lnrjp.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822528/",
            "reporter": "anonymous"
        }
    ],
    "3822527": [
        {
            "dateadded": "2026-04-15 16:19:14 UTC",
            "url": "https://par5e-array.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822527/",
            "reporter": "anonymous"
        }
    ],
    "3822526": [
        {
            "dateadded": "2026-04-15 16:13:13 UTC",
            "url": "https://arrayshore.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822526/",
            "reporter": "anonymous"
        }
    ],
    "3822525": [
        {
            "dateadded": "2026-04-15 16:08:07 UTC",
            "url": "https://nnid.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822525/",
            "reporter": "anonymous"
        }
    ],
    "3822524": [
        {
            "dateadded": "2026-04-15 16:02:12 UTC",
            "url": "https://freshstorage.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 16:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822524/",
            "reporter": "anonymous"
        }
    ],
    "3822523": [
        {
            "dateadded": "2026-04-15 15:58:23 UTC",
            "url": "http://39.87.29.232:59399/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822523/",
            "reporter": "geenensp"
        }
    ],
    "3822522": [
        {
            "dateadded": "2026-04-15 15:58:09 UTC",
            "url": "https://neo-tok3.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822522/",
            "reporter": "anonymous"
        }
    ],
    "3822521": [
        {
            "dateadded": "2026-04-15 15:51:08 UTC",
            "url": "https://proto-dynam1.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822521/",
            "reporter": "anonymous"
        }
    ],
    "3822520": [
        {
            "dateadded": "2026-04-15 15:49:16 UTC",
            "url": "http://122.193.144.146:34187/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:52:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822520/",
            "reporter": "geenensp"
        }
    ],
    "3822519": [
        {
            "dateadded": "2026-04-15 15:45:10 UTC",
            "url": "https://massivespectra.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822519/",
            "reporter": "anonymous"
        }
    ],
    "3822518": [
        {
            "dateadded": "2026-04-15 15:41:07 UTC",
            "url": "https://solnex0ex.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822518/",
            "reporter": "anonymous"
        }
    ],
    "3822517": [
        {
            "dateadded": "2026-04-15 15:35:11 UTC",
            "url": "https://registryfaithful.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822517/",
            "reporter": "anonymous"
        }
    ],
    "3822516": [
        {
            "dateadded": "2026-04-15 15:35:08 UTC",
            "url": "http://119.187.202.59:35563/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:01:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822516/",
            "reporter": "geenensp"
        }
    ],
    "3822515": [
        {
            "dateadded": "2026-04-15 15:29:07 UTC",
            "url": "https://wilpol.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822515/",
            "reporter": "anonymous"
        }
    ],
    "3822514": [
        {
            "dateadded": "2026-04-15 15:25:33 UTC",
            "url": "http://122.193.144.146:34187/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822514/",
            "reporter": "geenensp"
        }
    ],
    "3822513": [
        {
            "dateadded": "2026-04-15 15:24:12 UTC",
            "url": "https://birdout.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:26:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822513/",
            "reporter": "anonymous"
        }
    ],
    "3822512": [
        {
            "dateadded": "2026-04-15 15:21:16 UTC",
            "url": "http://110.36.15.18:33075/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 07:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822512/",
            "reporter": "geenensp"
        }
    ],
    "3822511": [
        {
            "dateadded": "2026-04-15 15:18:11 UTC",
            "url": "https://queryguard.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:27:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822511/",
            "reporter": "anonymous"
        }
    ],
    "3822510": [
        {
            "dateadded": "2026-04-15 15:16:19 UTC",
            "url": "http://182.119.15.169:58470/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:30:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822510/",
            "reporter": "geenensp"
        }
    ],
    "3822509": [
        {
            "dateadded": "2026-04-15 15:14:20 UTC",
            "url": "http://119.187.202.59:35563/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822509/",
            "reporter": "geenensp"
        }
    ],
    "3822508": [
        {
            "dateadded": "2026-04-15 15:12:07 UTC",
            "url": "https://bay-banne.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822508/",
            "reporter": "anonymous"
        }
    ],
    "3822507": [
        {
            "dateadded": "2026-04-15 15:10:10 UTC",
            "url": "https://sercore2or.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822507/",
            "reporter": "anonymous"
        }
    ],
    "3822506": [
        {
            "dateadded": "2026-04-15 15:02:18 UTC",
            "url": "http://115.60.249.5:55895/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:20:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822506/",
            "reporter": "geenensp"
        }
    ],
    "3822505": [
        {
            "dateadded": "2026-04-15 14:59:11 UTC",
            "url": "https://5ync-lab.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 15:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822505/",
            "reporter": "anonymous"
        }
    ],
    "3822504": [
        {
            "dateadded": "2026-04-15 14:53:06 UTC",
            "url": "https://encodersensor.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822504/",
            "reporter": "anonymous"
        }
    ],
    "3822503": [
        {
            "dateadded": "2026-04-15 14:47:06 UTC",
            "url": "https://shiftcascade.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:47:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822503/",
            "reporter": "anonymous"
        }
    ],
    "3822502": [
        {
            "dateadded": "2026-04-15 14:46:16 UTC",
            "url": "http://113.236.158.22:37929/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822502/",
            "reporter": "geenensp"
        }
    ],
    "3822501": [
        {
            "dateadded": "2026-04-15 14:42:08 UTC",
            "url": "https://flovv-chain.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822501/",
            "reporter": "anonymous"
        }
    ],
    "3822500": [
        {
            "dateadded": "2026-04-15 14:40:21 UTC",
            "url": "http://115.60.249.5:55895/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822500/",
            "reporter": "geenensp"
        }
    ],
    "3822499": [
        {
            "dateadded": "2026-04-15 14:38:10 UTC",
            "url": "https://ychgg.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822499/",
            "reporter": "anonymous"
        }
    ],
    "3822498": [
        {
            "dateadded": "2026-04-15 14:38:05 UTC",
            "url": "https://pastefy.app/1blfqyva/raw",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822498/",
            "reporter": "abuse_ch"
        }
    ],
    "3822497": [
        {
            "dateadded": "2026-04-15 14:35:09 UTC",
            "url": "https://streambreeze.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822497/",
            "reporter": "anonymous"
        }
    ],
    "3822496": [
        {
            "dateadded": "2026-04-15 14:33:37 UTC",
            "url": "http://113.233.58.128:49872/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:57:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822496/",
            "reporter": "geenensp"
        }
    ],
    "3822495": [
        {
            "dateadded": "2026-04-15 14:33:26 UTC",
            "url": "http://196.189.111.43:54726/i",
            "url_status": "offline",
            "last_online": "2026-04-15 14:33:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822495/",
            "reporter": "geenensp"
        }
    ],
    "3822494": [
        {
            "dateadded": "2026-04-15 14:26:22 UTC",
            "url": "http://113.233.58.128:49872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822494/",
            "reporter": "geenensp"
        }
    ],
    "3822493": [
        {
            "dateadded": "2026-04-15 14:26:09 UTC",
            "url": "https://velline0os.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822493/",
            "reporter": "anonymous"
        }
    ],
    "3822492": [
        {
            "dateadded": "2026-04-15 14:20:11 UTC",
            "url": "https://zdjine7o.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822492/",
            "reporter": "anonymous"
        }
    ],
    "3822491": [
        {
            "dateadded": "2026-04-15 14:16:10 UTC",
            "url": "http://113.236.158.22:37929/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822491/",
            "reporter": "geenensp"
        }
    ],
    "3822490": [
        {
            "dateadded": "2026-04-15 14:14:08 UTC",
            "url": "https://syxnh65t.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822490/",
            "reporter": "anonymous"
        }
    ],
    "3822489": [
        {
            "dateadded": "2026-04-15 14:09:12 UTC",
            "url": "https://talfluxen3.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822489/",
            "reporter": "anonymous"
        }
    ],
    "3822488": [
        {
            "dateadded": "2026-04-15 14:06:15 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/%E6%96%87%E6%A1%A382524.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 04:56:50 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "exe",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822488/",
            "reporter": "burger"
        }
    ],
    "3822487": [
        {
            "dateadded": "2026-04-15 14:04:18 UTC",
            "url": "http://196.189.111.43:54726/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 14:04:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822487/",
            "reporter": "geenensp"
        }
    ],
    "3822486": [
        {
            "dateadded": "2026-04-15 14:03:12 UTC",
            "url": "https://sketchneuron.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 14:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822486/",
            "reporter": "anonymous"
        }
    ],
    "3822485": [
        {
            "dateadded": "2026-04-15 13:57:09 UTC",
            "url": "https://fi3rce7-watch.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822485/",
            "reporter": "anonymous"
        }
    ],
    "3822484": [
        {
            "dateadded": "2026-04-15 13:53:07 UTC",
            "url": "http://115.55.57.41:51491/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822484/",
            "reporter": "geenensp"
        }
    ],
    "3822483": [
        {
            "dateadded": "2026-04-15 13:51:14 UTC",
            "url": "https://valleydispatcher.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822483/",
            "reporter": "anonymous"
        }
    ],
    "3822482": [
        {
            "dateadded": "2026-04-15 13:49:21 UTC",
            "url": "http://221.3.70.107:49607/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:39:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822482/",
            "reporter": "geenensp"
        }
    ],
    "3822481": [
        {
            "dateadded": "2026-04-15 13:45:09 UTC",
            "url": "https://t0mbk.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822481/",
            "reporter": "anonymous"
        }
    ],
    "3822480": [
        {
            "dateadded": "2026-04-15 13:41:09 UTC",
            "url": "https://gtps4change.org//wp-admin/maint/image.png",
            "url_status": "offline",
            "last_online": "2026-04-22 22:58:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822480/",
            "reporter": "abuse_ch"
        }
    ],
    "3822479": [
        {
            "dateadded": "2026-04-15 13:40:13 UTC",
            "url": "https://corwineagles.com/deskes.png",
            "url_status": "offline",
            "last_online": "2026-04-18 16:57:48 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822479/",
            "reporter": "abuse_ch"
        }
    ],
    "3822478": [
        {
            "dateadded": "2026-04-15 13:40:09 UTC",
            "url": "https://vor-coreum.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822478/",
            "reporter": "anonymous"
        }
    ],
    "3822477": [
        {
            "dateadded": "2026-04-15 13:37:17 UTC",
            "url": "http://42.239.227.35:42997/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:59:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822477/",
            "reporter": "geenensp"
        }
    ],
    "3822476": [
        {
            "dateadded": "2026-04-15 13:37:07 UTC",
            "url": "https://stylegeneration.ma/sirdee.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Formbook",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822476/",
            "reporter": "abuse_ch"
        }
    ],
    "3822475": [
        {
            "dateadded": "2026-04-15 13:34:07 UTC",
            "url": "https://motmolecu.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822475/",
            "reporter": "anonymous"
        }
    ],
    "3822474": [
        {
            "dateadded": "2026-04-15 13:30:16 UTC",
            "url": "http://115.55.173.192:40682/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822474/",
            "reporter": "geenensp"
        }
    ],
    "3822473": [
        {
            "dateadded": "2026-04-15 13:29:16 UTC",
            "url": "http://182.124.40.151:38778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822473/",
            "reporter": "geenensp"
        }
    ],
    "3822472": [
        {
            "dateadded": "2026-04-15 13:29:07 UTC",
            "url": "https://fundoasis.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822472/",
            "reporter": "anonymous"
        }
    ],
    "3822471": [
        {
            "dateadded": "2026-04-15 13:27:27 UTC",
            "url": "http://117.193.107.251:46114/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822471/",
            "reporter": "geenensp"
        }
    ],
    "3822470": [
        {
            "dateadded": "2026-04-15 13:27:10 UTC",
            "url": "https://files.catbox.moe/qrexf0.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822470/",
            "reporter": "abuse_ch"
        }
    ],
    "3822468": [
        {
            "dateadded": "2026-04-15 13:25:10 UTC",
            "url": "http://172.245.95.9/aGYAyzKwCah149.bin",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822468/",
            "reporter": "abuse_ch"
        }
    ],
    "3822469": [
        {
            "dateadded": "2026-04-15 13:25:10 UTC",
            "url": "http://172.245.95.9/Gonio.dwp",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:51 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822469/",
            "reporter": "abuse_ch"
        }
    ],
    "3822467": [
        {
            "dateadded": "2026-04-15 13:24:10 UTC",
            "url": "https://ice-mark.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822467/",
            "reporter": "anonymous"
        }
    ],
    "3822466": [
        {
            "dateadded": "2026-04-15 13:19:07 UTC",
            "url": "https://dump.win/cqr69.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822466/",
            "reporter": "abuse_ch"
        }
    ],
    "3822465": [
        {
            "dateadded": "2026-04-15 13:18:14 UTC",
            "url": "http://42.239.227.35:42997/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:18:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822465/",
            "reporter": "geenensp"
        }
    ],
    "3822464": [
        {
            "dateadded": "2026-04-15 13:18:08 UTC",
            "url": "https://dynflux6al.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822464/",
            "reporter": "anonymous"
        }
    ],
    "3822463": [
        {
            "dateadded": "2026-04-15 13:15:10 UTC",
            "url": "https://next.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822463/",
            "reporter": "anonymous"
        }
    ],
    "3822462": [
        {
            "dateadded": "2026-04-15 13:14:10 UTC",
            "url": "https://pastebin.com/3R1v7Cs1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "memz"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822462/",
            "reporter": "seventeam"
        }
    ],
    "3822461": [
        {
            "dateadded": "2026-04-15 13:13:20 UTC",
            "url": "http://172.245.95.28/11/img_015451.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822461/",
            "reporter": "abuse_ch"
        }
    ],
    "3822460": [
        {
            "dateadded": "2026-04-15 13:09:08 UTC",
            "url": "https://vera.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822460/",
            "reporter": "anonymous"
        }
    ],
    "3822459": [
        {
            "dateadded": "2026-04-15 13:06:07 UTC",
            "url": "https://saqo.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 13:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822459/",
            "reporter": "anonymous"
        }
    ],
    "3822457": [
        {
            "dateadded": "2026-04-15 13:05:19 UTC",
            "url": "http://115.55.173.192:40682/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:57:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822457/",
            "reporter": "geenensp"
        }
    ],
    "3822458": [
        {
            "dateadded": "2026-04-15 13:05:19 UTC",
            "url": "https://github.com/cblootah/test/raw/refs/heads/main/payload.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 16:56:27 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "exe",
                "github",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822458/",
            "reporter": "burger"
        }
    ],
    "3822452": [
        {
            "dateadded": "2026-04-15 13:05:18 UTC",
            "url": "https://github.com/kemo828/test/raw/refs/heads/main/ConnectWiseControl.ClientSetup%20(6).msi",
            "url_status": "offline",
            "last_online": "2026-04-16 05:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822452/",
            "reporter": "burger"
        }
    ],
    "3822453": [
        {
            "dateadded": "2026-04-15 13:05:18 UTC",
            "url": "https://github.com/kemo828/screen/raw/refs/heads/main/ragap.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 05:20:54 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822453/",
            "reporter": "burger"
        }
    ],
    "3822454": [
        {
            "dateadded": "2026-04-15 13:05:18 UTC",
            "url": "https://github.com/kemo828/test/raw/refs/heads/main/ClientSetup.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 06:12:52 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822454/",
            "reporter": "burger"
        }
    ],
    "3822455": [
        {
            "dateadded": "2026-04-15 13:05:18 UTC",
            "url": "https://github.com/kemo828/screen/raw/refs/heads/main/ConnectWiseControl.ClientSetup.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 05:57:04 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822455/",
            "reporter": "burger"
        }
    ],
    "3822456": [
        {
            "dateadded": "2026-04-15 13:05:18 UTC",
            "url": "https://github.com/kemo828/screen/raw/refs/heads/main/ragap.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 05:59:36 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822456/",
            "reporter": "burger"
        }
    ],
    "3822451": [
        {
            "dateadded": "2026-04-15 13:05:17 UTC",
            "url": "https://github.com/kemo828/screen/raw/refs/heads/main/setup.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 05:20:03 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822451/",
            "reporter": "burger"
        }
    ],
    "3822450": [
        {
            "dateadded": "2026-04-15 13:05:16 UTC",
            "url": "https://github.com/kemo828/screen/raw/refs/heads/main/panel82.vbs",
            "url_status": "offline",
            "last_online": "2026-04-15 23:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822450/",
            "reporter": "burger"
        }
    ],
    "3822449": [
        {
            "dateadded": "2026-04-15 13:05:14 UTC",
            "url": "https://github.com/kemo828/screen/raw/refs/heads/main/RMM.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822449/",
            "reporter": "burger"
        }
    ],
    "3822448": [
        {
            "dateadded": "2026-04-15 13:05:12 UTC",
            "url": "https://github.com/kemo828/test/raw/refs/heads/main/setup.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 06:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822448/",
            "reporter": "burger"
        }
    ],
    "3822447": [
        {
            "dateadded": "2026-04-15 13:05:11 UTC",
            "url": "https://github.com/kemo828/kr/raw/refs/heads/main/ClientSetup.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 06:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822447/",
            "reporter": "burger"
        }
    ],
    "3822445": [
        {
            "dateadded": "2026-04-15 13:05:10 UTC",
            "url": "https://github.com/kemo828/test/raw/refs/heads/main/ssa.vbs",
            "url_status": "offline",
            "last_online": "2026-04-16 05:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822445/",
            "reporter": "burger"
        }
    ],
    "3822446": [
        {
            "dateadded": "2026-04-15 13:05:10 UTC",
            "url": "https://github.com/kemo828/test/raw/refs/heads/main/TruckController.ClientSetup.msi",
            "url_status": "offline",
            "last_online": "2026-04-16 05:19:04 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "github",
                "kemo828"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822446/",
            "reporter": "burger"
        }
    ],
    "3822444": [
        {
            "dateadded": "2026-04-15 12:47:18 UTC",
            "url": "http://182.119.93.113:58335/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822444/",
            "reporter": "geenensp"
        }
    ],
    "3822443": [
        {
            "dateadded": "2026-04-15 12:44:13 UTC",
            "url": "http://182.113.34.11:51635/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822443/",
            "reporter": "geenensp"
        }
    ],
    "3822442": [
        {
            "dateadded": "2026-04-15 12:44:12 UTC",
            "url": "http://222.142.242.213:60501/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:19:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822442/",
            "reporter": "geenensp"
        }
    ],
    "3822441": [
        {
            "dateadded": "2026-04-15 12:40:17 UTC",
            "url": "http://175.107.16.92:41467/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822441/",
            "reporter": "geenensp"
        }
    ],
    "3822440": [
        {
            "dateadded": "2026-04-15 12:39:14 UTC",
            "url": "http://112.194.122.39:38327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:22:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822440/",
            "reporter": "geenensp"
        }
    ],
    "3822439": [
        {
            "dateadded": "2026-04-15 12:35:09 UTC",
            "url": "http://42.177.238.150:49952/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:57:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822439/",
            "reporter": "geenensp"
        }
    ],
    "3822438": [
        {
            "dateadded": "2026-04-15 12:34:21 UTC",
            "url": "http://42.55.8.231:50785/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822438/",
            "reporter": "geenensp"
        }
    ],
    "3822437": [
        {
            "dateadded": "2026-04-15 12:28:09 UTC",
            "url": "https://zsj7xqo.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 12:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822437/",
            "reporter": "anonymous"
        }
    ],
    "3822436": [
        {
            "dateadded": "2026-04-15 12:25:23 UTC",
            "url": "http://182.119.93.113:58335/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822436/",
            "reporter": "geenensp"
        }
    ],
    "3822435": [
        {
            "dateadded": "2026-04-15 12:25:15 UTC",
            "url": "https://sxbrp.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 12:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822435/",
            "reporter": "anonymous"
        }
    ],
    "3822434": [
        {
            "dateadded": "2026-04-15 12:23:16 UTC",
            "url": "https://weedhack.xyz/files/jar/security",
            "url_status": "offline",
            "last_online": "2026-04-15 17:55:49 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822434/",
            "reporter": "burger"
        }
    ],
    "3822433": [
        {
            "dateadded": "2026-04-15 12:23:15 UTC",
            "url": "https://weedhack.xyz/files/jar/module",
            "url_status": "offline",
            "last_online": "2026-04-15 17:04:56 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822433/",
            "reporter": "burger"
        }
    ],
    "3822431": [
        {
            "dateadded": "2026-04-15 12:23:14 UTC",
            "url": "https://weedhack.xyz/files/jar/RuntimeBroker.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 16:50:25 UTC",
            "threat": "malware_download",
            "tags": [
                "rustystealer",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822431/",
            "reporter": "burger"
        }
    ],
    "3822432": [
        {
            "dateadded": "2026-04-15 12:23:14 UTC",
            "url": "https://weedhack.xyz/files/jar/elevator",
            "url_status": "offline",
            "last_online": "2026-04-15 17:00:41 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822432/",
            "reporter": "burger"
        }
    ],
    "3822430": [
        {
            "dateadded": "2026-04-15 12:23:13 UTC",
            "url": "https://weedhack.xyz/files/jar/module2",
            "url_status": "offline",
            "last_online": "2026-04-15 17:36:35 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822430/",
            "reporter": "burger"
        }
    ],
    "3822429": [
        {
            "dateadded": "2026-04-15 12:23:11 UTC",
            "url": "https://weedhack.xyz/files/jar/component",
            "url_status": "offline",
            "last_online": "2026-04-15 16:29:23 UTC",
            "threat": "malware_download",
            "tags": [
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822429/",
            "reporter": "burger"
        }
    ],
    "3822428": [
        {
            "dateadded": "2026-04-15 12:22:09 UTC",
            "url": "https://columnapi.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 12:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822428/",
            "reporter": "anonymous"
        }
    ],
    "3822427": [
        {
            "dateadded": "2026-04-15 12:17:12 UTC",
            "url": "http://222.142.242.213:60501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822427/",
            "reporter": "geenensp"
        }
    ],
    "3822426": [
        {
            "dateadded": "2026-04-15 12:12:09 UTC",
            "url": "https://nimblehon.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 12:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822426/",
            "reporter": "anonymous"
        }
    ],
    "3822425": [
        {
            "dateadded": "2026-04-15 12:10:12 UTC",
            "url": "http://175.107.16.92:41467/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822425/",
            "reporter": "geenensp"
        }
    ],
    "3822424": [
        {
            "dateadded": "2026-04-15 12:06:09 UTC",
            "url": "https://gp0zfju.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 12:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822424/",
            "reporter": "anonymous"
        }
    ],
    "3822423": [
        {
            "dateadded": "2026-04-15 12:03:20 UTC",
            "url": "http://175.165.9.20:47396/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:58:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822423/",
            "reporter": "geenensp"
        }
    ],
    "3822422": [
        {
            "dateadded": "2026-04-15 12:01:09 UTC",
            "url": "https://neo-f0rge.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 12:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822422/",
            "reporter": "anonymous"
        }
    ],
    "3822421": [
        {
            "dateadded": "2026-04-15 12:00:15 UTC",
            "url": "http://61.176.30.107:46688/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:21:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822421/",
            "reporter": "geenensp"
        }
    ],
    "3822420": [
        {
            "dateadded": "2026-04-15 11:56:13 UTC",
            "url": "https://routerwago.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822420/",
            "reporter": "anonymous"
        }
    ],
    "3822419": [
        {
            "dateadded": "2026-04-15 11:51:07 UTC",
            "url": "http://172.245.95.28/11/goodthingswithbestspeakforme.hta",
            "url_status": "offline",
            "last_online": "2026-04-15 11:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822419/",
            "reporter": "abuse_ch"
        }
    ],
    "3822418": [
        {
            "dateadded": "2026-04-15 11:49:09 UTC",
            "url": "https://il2l4822.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822418/",
            "reporter": "anonymous"
        }
    ],
    "3822417": [
        {
            "dateadded": "2026-04-15 11:44:24 UTC",
            "url": "http://175.150.200.235:40944/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:54:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822417/",
            "reporter": "geenensp"
        }
    ],
    "3822416": [
        {
            "dateadded": "2026-04-15 11:44:21 UTC",
            "url": "http://138.124.61.210:9999/svchost-update.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:45:31 UTC",
            "threat": "malware_download",
            "tags": [
                "138-124-61-210-9999",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822416/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822415": [
        {
            "dateadded": "2026-04-15 11:44:15 UTC",
            "url": "https://m0ss5-watch.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:44:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822415/",
            "reporter": "anonymous"
        }
    ],
    "3822414": [
        {
            "dateadded": "2026-04-15 11:44:06 UTC",
            "url": "http://85.239.147.6/files/8717422379/PHu1YkL.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822414/",
            "reporter": "Bitsight"
        }
    ],
    "3822413": [
        {
            "dateadded": "2026-04-15 11:43:13 UTC",
            "url": "https://dwkch.ru/meshagents?id=3&meshid=g3qQmGuuQeuKcWATXQJ2kFRNAVgYUYMIbGileCXMMUiSABwlmUBigllxjAOCx30b&installflags=3",
            "url_status": "offline",
            "last_online": "2026-04-15 11:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "dwkch-ru",
                "MeshAgent",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822413/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822412": [
        {
            "dateadded": "2026-04-15 11:42:08 UTC",
            "url": "http://138.124.61.210:9999/setup.ps1",
            "url_status": "offline",
            "last_online": "2026-04-15 11:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "138-124-61-210-9999",
                "MeshAgent",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822412/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822411": [
        {
            "dateadded": "2026-04-15 11:38:22 UTC",
            "url": "http://42.227.236.223:44027/i",
            "url_status": "offline",
            "last_online": "2026-04-16 04:58:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822411/",
            "reporter": "geenensp"
        }
    ],
    "3822410": [
        {
            "dateadded": "2026-04-15 11:38:09 UTC",
            "url": "https://ind3-spool.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822410/",
            "reporter": "anonymous"
        }
    ],
    "3822409": [
        {
            "dateadded": "2026-04-15 11:35:27 UTC",
            "url": "http://222.142.246.207:50326/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:35:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822409/",
            "reporter": "geenensp"
        }
    ],
    "3822408": [
        {
            "dateadded": "2026-04-15 11:34:21 UTC",
            "url": "http://175.165.9.20:47396/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822408/",
            "reporter": "geenensp"
        }
    ],
    "3822407": [
        {
            "dateadded": "2026-04-15 11:33:14 UTC",
            "url": "https://dr1ve-trail.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822407/",
            "reporter": "anonymous"
        }
    ],
    "3822406": [
        {
            "dateadded": "2026-04-15 11:29:21 UTC",
            "url": "http://110.36.15.18:33075/i",
            "url_status": "offline",
            "last_online": "2026-04-20 07:44:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822406/",
            "reporter": "geenensp"
        }
    ],
    "3822405": [
        {
            "dateadded": "2026-04-15 11:27:25 UTC",
            "url": "http://115.61.3.225:32998/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822405/",
            "reporter": "geenensp"
        }
    ],
    "3822404": [
        {
            "dateadded": "2026-04-15 11:27:15 UTC",
            "url": "https://emuwa.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822404/",
            "reporter": "anonymous"
        }
    ],
    "3822403": [
        {
            "dateadded": "2026-04-15 11:22:17 UTC",
            "url": "https://normarkis2.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822403/",
            "reporter": "anonymous"
        }
    ],
    "3822402": [
        {
            "dateadded": "2026-04-15 11:16:13 UTC",
            "url": "https://quordraa.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822402/",
            "reporter": "anonymous"
        }
    ],
    "3822401": [
        {
            "dateadded": "2026-04-15 11:15:21 UTC",
            "url": "http://125.47.219.212:55537/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822401/",
            "reporter": "geenensp"
        }
    ],
    "3822400": [
        {
            "dateadded": "2026-04-15 11:14:09 UTC",
            "url": "http://185.125.102.244:8081/CORTEX_Setup.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "185-125-102-244-8081",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822400/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822399": [
        {
            "dateadded": "2026-04-15 11:14:08 UTC",
            "url": "http://185.125.102.244:8081/CORTEX_DEMO_Setup.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "185-125-102-244-8081",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822399/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822398": [
        {
            "dateadded": "2026-04-15 11:12:22 UTC",
            "url": "http://182.124.232.52:45999/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:29:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822398/",
            "reporter": "geenensp"
        }
    ],
    "3822397": [
        {
            "dateadded": "2026-04-15 11:11:14 UTC",
            "url": "http://182.124.232.52:45999/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:46:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822397/",
            "reporter": "geenensp"
        }
    ],
    "3822396": [
        {
            "dateadded": "2026-04-15 11:11:05 UTC",
            "url": "http://85.239.147.6/files/7048186296/tYX9ODo.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822396/",
            "reporter": "Bitsight"
        }
    ],
    "3822395": [
        {
            "dateadded": "2026-04-15 11:10:21 UTC",
            "url": "http://42.227.236.223:44027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822395/",
            "reporter": "geenensp"
        }
    ],
    "3822394": [
        {
            "dateadded": "2026-04-15 11:10:14 UTC",
            "url": "https://clusterbright.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822394/",
            "reporter": "anonymous"
        }
    ],
    "3822393": [
        {
            "dateadded": "2026-04-15 11:09:20 UTC",
            "url": "http://222.141.245.186:38392/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822393/",
            "reporter": "geenensp"
        }
    ],
    "3822392": [
        {
            "dateadded": "2026-04-15 11:07:20 UTC",
            "url": "http://222.142.246.207:50326/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:07:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822392/",
            "reporter": "geenensp"
        }
    ],
    "3822391": [
        {
            "dateadded": "2026-04-15 11:06:23 UTC",
            "url": "http://61.137.140.188:40277/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:54:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822391/",
            "reporter": "geenensp"
        }
    ],
    "3822390": [
        {
            "dateadded": "2026-04-15 11:06:09 UTC",
            "url": "http://172.245.95.9/fibulae.afm",
            "url_status": "offline",
            "last_online": "2026-04-21 05:06:15 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822390/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822389": [
        {
            "dateadded": "2026-04-15 11:06:08 UTC",
            "url": "http://172.245.95.9/NRtjBsNChHKAhi148.bin",
            "url_status": "online",
            "last_online": "2026-04-27 12:53:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822389/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822388": [
        {
            "dateadded": "2026-04-15 11:05:19 UTC",
            "url": "http://124.89.54.21:54243/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822388/",
            "reporter": "geenensp"
        }
    ],
    "3822387": [
        {
            "dateadded": "2026-04-15 11:05:15 UTC",
            "url": "https://opt13-mesh.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822387/",
            "reporter": "anonymous"
        }
    ],
    "3822386": [
        {
            "dateadded": "2026-04-15 11:02:22 UTC",
            "url": "http://42.227.239.110:55225/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:50:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822386/",
            "reporter": "geenensp"
        }
    ],
    "3822385": [
        {
            "dateadded": "2026-04-15 11:00:11 UTC",
            "url": "https://zenmark1a.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 11:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822385/",
            "reporter": "anonymous"
        }
    ],
    "3822384": [
        {
            "dateadded": "2026-04-15 10:59:30 UTC",
            "url": "http://42.177.20.212:59988/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822384/",
            "reporter": "geenensp"
        }
    ],
    "3822383": [
        {
            "dateadded": "2026-04-15 10:55:12 UTC",
            "url": "http://123.189.150.68:42660/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:57:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822383/",
            "reporter": "geenensp"
        }
    ],
    "3822382": [
        {
            "dateadded": "2026-04-15 10:53:22 UTC",
            "url": "http://60.23.234.141:51923/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:53:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822382/",
            "reporter": "geenensp"
        }
    ],
    "3822381": [
        {
            "dateadded": "2026-04-15 10:53:08 UTC",
            "url": "https://lumnex7os.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822381/",
            "reporter": "anonymous"
        }
    ],
    "3822380": [
        {
            "dateadded": "2026-04-15 10:51:25 UTC",
            "url": "http://42.227.237.131:40238/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 18:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822380/",
            "reporter": "geenensp"
        }
    ],
    "3822379": [
        {
            "dateadded": "2026-04-15 10:51:24 UTC",
            "url": "http://125.45.65.119:46153/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:10:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822379/",
            "reporter": "geenensp"
        }
    ],
    "3822378": [
        {
            "dateadded": "2026-04-15 10:50:22 UTC",
            "url": "http://175.151.167.27:43387/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822378/",
            "reporter": "geenensp"
        }
    ],
    "3822377": [
        {
            "dateadded": "2026-04-15 10:50:21 UTC",
            "url": "http://182.117.6.62:58047/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:40:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822377/",
            "reporter": "geenensp"
        }
    ],
    "3822376": [
        {
            "dateadded": "2026-04-15 10:48:14 UTC",
            "url": "https://zecyxfgt.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822376/",
            "reporter": "anonymous"
        }
    ],
    "3822375": [
        {
            "dateadded": "2026-04-15 10:45:25 UTC",
            "url": "http://222.141.245.186:38392/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:09:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822375/",
            "reporter": "geenensp"
        }
    ],
    "3822374": [
        {
            "dateadded": "2026-04-15 10:43:21 UTC",
            "url": "http://61.137.140.188:40277/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 12:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822374/",
            "reporter": "geenensp"
        }
    ],
    "3822373": [
        {
            "dateadded": "2026-04-15 10:42:13 UTC",
            "url": "https://k3rne-signal.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822373/",
            "reporter": "anonymous"
        }
    ],
    "3822372": [
        {
            "dateadded": "2026-04-15 10:42:11 UTC",
            "url": "http://77.247.88.82:60262/i",
            "url_status": "offline",
            "last_online": "2026-04-27 00:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822372/",
            "reporter": "geenensp"
        }
    ],
    "3822371": [
        {
            "dateadded": "2026-04-15 10:41:22 UTC",
            "url": "http://124.89.54.21:54243/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:06:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822371/",
            "reporter": "geenensp"
        }
    ],
    "3822370": [
        {
            "dateadded": "2026-04-15 10:36:14 UTC",
            "url": "https://1ndex2-gate.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822370/",
            "reporter": "anonymous"
        }
    ],
    "3822369": [
        {
            "dateadded": "2026-04-15 10:32:24 UTC",
            "url": "http://125.43.126.217:34806/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:57:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822369/",
            "reporter": "geenensp"
        }
    ],
    "3822368": [
        {
            "dateadded": "2026-04-15 10:31:13 UTC",
            "url": "https://ar2ymo.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822368/",
            "reporter": "anonymous"
        }
    ],
    "3822365": [
        {
            "dateadded": "2026-04-15 10:28:19 UTC",
            "url": "http://175.166.114.173:58513/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822365/",
            "reporter": "geenensp"
        }
    ],
    "3822366": [
        {
            "dateadded": "2026-04-15 10:28:19 UTC",
            "url": "http://42.227.239.110:55225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:43:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822366/",
            "reporter": "geenensp"
        }
    ],
    "3822367": [
        {
            "dateadded": "2026-04-15 10:28:19 UTC",
            "url": "http://125.43.126.217:34806/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822367/",
            "reporter": "geenensp"
        }
    ],
    "3822364": [
        {
            "dateadded": "2026-04-15 10:26:14 UTC",
            "url": "https://tenquarr.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822364/",
            "reporter": "anonymous"
        }
    ],
    "3822363": [
        {
            "dateadded": "2026-04-15 10:23:20 UTC",
            "url": "http://123.189.150.68:42660/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:27:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822363/",
            "reporter": "geenensp"
        }
    ],
    "3822362": [
        {
            "dateadded": "2026-04-15 10:23:06 UTC",
            "url": "http://77.247.88.82:60262/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 00:28:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822362/",
            "reporter": "geenensp"
        }
    ],
    "3822361": [
        {
            "dateadded": "2026-04-15 10:22:15 UTC",
            "url": "http://125.47.219.212:55537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:26:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822361/",
            "reporter": "geenensp"
        }
    ],
    "3822360": [
        {
            "dateadded": "2026-04-15 10:20:17 UTC",
            "url": "http://175.151.167.27:43387/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822360/",
            "reporter": "geenensp"
        }
    ],
    "3822359": [
        {
            "dateadded": "2026-04-15 10:19:13 UTC",
            "url": "https://lively-obser.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822359/",
            "reporter": "anonymous"
        }
    ],
    "3822358": [
        {
            "dateadded": "2026-04-15 10:17:20 UTC",
            "url": "http://125.41.140.238:43524/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822358/",
            "reporter": "geenensp"
        }
    ],
    "3822357": [
        {
            "dateadded": "2026-04-15 10:14:14 UTC",
            "url": "https://qu4r9-scope.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822357/",
            "reporter": "anonymous"
        }
    ],
    "3822356": [
        {
            "dateadded": "2026-04-15 10:09:08 UTC",
            "url": "https://g4th2-mount.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822356/",
            "reporter": "anonymous"
        }
    ],
    "3822355": [
        {
            "dateadded": "2026-04-15 10:05:07 UTC",
            "url": "http://85.239.147.6/files/8468794285/TRcuArC.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822355/",
            "reporter": "Bitsight"
        }
    ],
    "3822354": [
        {
            "dateadded": "2026-04-15 10:04:14 UTC",
            "url": "http://175.166.114.173:58513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:35:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822354/",
            "reporter": "geenensp"
        }
    ],
    "3822353": [
        {
            "dateadded": "2026-04-15 10:03:11 UTC",
            "url": "http://123.12.33.244:33964/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:24:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822353/",
            "reporter": "geenensp"
        }
    ],
    "3822352": [
        {
            "dateadded": "2026-04-15 10:03:07 UTC",
            "url": "https://hpryikjw.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 10:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822352/",
            "reporter": "anonymous"
        }
    ],
    "3822351": [
        {
            "dateadded": "2026-04-15 09:58:09 UTC",
            "url": "https://hardscript.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822351/",
            "reporter": "anonymous"
        }
    ],
    "3822350": [
        {
            "dateadded": "2026-04-15 09:51:15 UTC",
            "url": "http://182.117.107.89:44805/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822350/",
            "reporter": "geenensp"
        }
    ],
    "3822349": [
        {
            "dateadded": "2026-04-15 09:51:07 UTC",
            "url": "https://xoqairj.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822349/",
            "reporter": "anonymous"
        }
    ],
    "3822348": [
        {
            "dateadded": "2026-04-15 09:49:16 UTC",
            "url": "http://125.41.140.238:43524/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:21:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822348/",
            "reporter": "geenensp"
        }
    ],
    "3822347": [
        {
            "dateadded": "2026-04-15 09:46:09 UTC",
            "url": "https://pwmyu.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822347/",
            "reporter": "anonymous"
        }
    ],
    "3822346": [
        {
            "dateadded": "2026-04-15 09:44:19 UTC",
            "url": "http://221.15.196.20:43172/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:40:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822346/",
            "reporter": "geenensp"
        }
    ],
    "3822345": [
        {
            "dateadded": "2026-04-15 09:41:10 UTC",
            "url": "https://compre-node.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822345/",
            "reporter": "anonymous"
        }
    ],
    "3822344": [
        {
            "dateadded": "2026-04-15 09:40:21 UTC",
            "url": "http://42.229.145.175:38494/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822344/",
            "reporter": "geenensp"
        }
    ],
    "3822343": [
        {
            "dateadded": "2026-04-15 09:34:10 UTC",
            "url": "https://c0rnpute-stream.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822343/",
            "reporter": "anonymous"
        }
    ],
    "3822341": [
        {
            "dateadded": "2026-04-15 09:31:09 UTC",
            "url": "http://110.37.78.200:41934/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:43:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822341/",
            "reporter": "geenensp"
        }
    ],
    "3822342": [
        {
            "dateadded": "2026-04-15 09:31:09 UTC",
            "url": "http://115.60.252.86:60563/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:50:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822342/",
            "reporter": "geenensp"
        }
    ],
    "3822340": [
        {
            "dateadded": "2026-04-15 09:29:12 UTC",
            "url": "https://wygb7.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822340/",
            "reporter": "anonymous"
        }
    ],
    "3822338": [
        {
            "dateadded": "2026-04-15 09:24:12 UTC",
            "url": "http://110.37.68.195:43548/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:52:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822338/",
            "reporter": "geenensp"
        }
    ],
    "3822339": [
        {
            "dateadded": "2026-04-15 09:24:12 UTC",
            "url": "https://5pro4-vector.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822339/",
            "reporter": "anonymous"
        }
    ],
    "3822337": [
        {
            "dateadded": "2026-04-15 09:19:08 UTC",
            "url": "https://tfovt.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822337/",
            "reporter": "anonymous"
        }
    ],
    "3822336": [
        {
            "dateadded": "2026-04-15 09:18:11 UTC",
            "url": "http://27.215.137.40:59014/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:53:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822336/",
            "reporter": "geenensp"
        }
    ],
    "3822335": [
        {
            "dateadded": "2026-04-15 09:17:12 UTC",
            "url": "http://221.15.196.20:43172/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822335/",
            "reporter": "geenensp"
        }
    ],
    "3822334": [
        {
            "dateadded": "2026-04-15 09:17:09 UTC",
            "url": "https://sprbridg.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822334/",
            "reporter": "anonymous"
        }
    ],
    "3822333": [
        {
            "dateadded": "2026-04-15 09:08:10 UTC",
            "url": "https://bridge0-crest.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822333/",
            "reporter": "anonymous"
        }
    ],
    "3822332": [
        {
            "dateadded": "2026-04-15 09:06:21 UTC",
            "url": "http://115.60.252.86:60563/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822332/",
            "reporter": "geenensp"
        }
    ],
    "3822331": [
        {
            "dateadded": "2026-04-15 09:01:07 UTC",
            "url": "https://trimark4or.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 09:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822331/",
            "reporter": "anonymous"
        }
    ],
    "3822330": [
        {
            "dateadded": "2026-04-15 08:58:09 UTC",
            "url": "https://observ-phase.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822330/",
            "reporter": "anonymous"
        }
    ],
    "3822329": [
        {
            "dateadded": "2026-04-15 08:56:16 UTC",
            "url": "http://27.215.137.40:59014/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822329/",
            "reporter": "geenensp"
        }
    ],
    "3822328": [
        {
            "dateadded": "2026-04-15 08:54:06 UTC",
            "url": "https://server-vall.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822328/",
            "reporter": "anonymous"
        }
    ],
    "3822327": [
        {
            "dateadded": "2026-04-15 08:54:05 UTC",
            "url": "https://store9.gofile.io/download/direct/cad2b711-6299-4806-9b5a-c439bf6b2e5d/LogMeInResolve_Unattended.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "GoToResolve",
                "msi",
                "rmm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822327/",
            "reporter": "abuse_ch"
        }
    ],
    "3822326": [
        {
            "dateadded": "2026-04-15 08:52:16 UTC",
            "url": "https://pub-fc10525f25d247e4a38787b5b64673ec.r2.dev/AdobeInstaller.msi",
            "url_status": "offline",
            "last_online": "2026-04-15 08:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822326/",
            "reporter": "abuse_ch"
        }
    ],
    "3822325": [
        {
            "dateadded": "2026-04-15 08:50:10 UTC",
            "url": "https://pastefy.app/HDpHYVg6/raw",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822325/",
            "reporter": "abuse_ch"
        }
    ],
    "3822324": [
        {
            "dateadded": "2026-04-15 08:50:08 UTC",
            "url": "https://gtps4change.org/wp-includes/images/crystal/Image/image.png",
            "url_status": "offline",
            "last_online": "2026-04-22 23:52:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822324/",
            "reporter": "abuse_ch"
        }
    ],
    "3822323": [
        {
            "dateadded": "2026-04-15 08:48:09 UTC",
            "url": "http://115.57.232.4:49639/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:07:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822323/",
            "reporter": "geenensp"
        }
    ],
    "3822322": [
        {
            "dateadded": "2026-04-15 08:47:11 UTC",
            "url": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto//01.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822322/",
            "reporter": "abuse_ch"
        }
    ],
    "3822321": [
        {
            "dateadded": "2026-04-15 08:47:10 UTC",
            "url": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto//03.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822321/",
            "reporter": "abuse_ch"
        }
    ],
    "3822319": [
        {
            "dateadded": "2026-04-15 08:47:05 UTC",
            "url": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto//02.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822319/",
            "reporter": "abuse_ch"
        }
    ],
    "3822320": [
        {
            "dateadded": "2026-04-15 08:47:05 UTC",
            "url": "https://catalogo.castrouria.com/bl.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822320/",
            "reporter": "abuse_ch"
        }
    ],
    "3822318": [
        {
            "dateadded": "2026-04-15 08:46:06 UTC",
            "url": "https://i.postimg.cc/MpTPrKVq/luisscore.png",
            "url_status": "offline",
            "last_online": "2026-04-15 08:46:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822318/",
            "reporter": "abuse_ch"
        }
    ],
    "3822317": [
        {
            "dateadded": "2026-04-15 08:45:18 UTC",
            "url": "https://frostcrypt.org/putty2.txt",
            "url_status": "offline",
            "last_online": "2026-04-15 08:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822317/",
            "reporter": "abuse_ch"
        }
    ],
    "3822316": [
        {
            "dateadded": "2026-04-15 08:45:15 UTC",
            "url": "https://vel-markon.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822316/",
            "reporter": "anonymous"
        }
    ],
    "3822315": [
        {
            "dateadded": "2026-04-15 08:44:15 UTC",
            "url": "https://zorvex.life/enter/image.png",
            "url_status": "offline",
            "last_online": "2026-04-15 11:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822315/",
            "reporter": "abuse_ch"
        }
    ],
    "3822314": [
        {
            "dateadded": "2026-04-15 08:43:16 UTC",
            "url": "http://222.141.79.173:52857/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822314/",
            "reporter": "geenensp"
        }
    ],
    "3822313": [
        {
            "dateadded": "2026-04-15 08:39:10 UTC",
            "url": "http://58.47.121.91:55536/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:13:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822313/",
            "reporter": "geenensp"
        }
    ],
    "3822312": [
        {
            "dateadded": "2026-04-15 08:38:12 UTC",
            "url": "https://hasteb.in/A3YoN6yQ8YuR914",
            "url_status": "offline",
            "last_online": "2026-04-15 08:38:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822312/",
            "reporter": "abuse_ch"
        }
    ],
    "3822311": [
        {
            "dateadded": "2026-04-15 08:38:11 UTC",
            "url": "https://pastefy.app/dEelcT2f/raw",
            "url_status": "offline",
            "last_online": "2026-04-15 08:38:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822311/",
            "reporter": "abuse_ch"
        }
    ],
    "3822310": [
        {
            "dateadded": "2026-04-15 08:38:10 UTC",
            "url": "https://pastefy.app/DIIv4cCL/raw",
            "url_status": "offline",
            "last_online": "2026-04-15 08:38:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822310/",
            "reporter": "abuse_ch"
        }
    ],
    "3822309": [
        {
            "dateadded": "2026-04-15 08:38:07 UTC",
            "url": "https://engine-switch.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 10:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822309/",
            "reporter": "anonymous"
        }
    ],
    "3822308": [
        {
            "dateadded": "2026-04-15 08:37:11 UTC",
            "url": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fdllnew.txt?alt=media&token=630e2807-b89c-4645-b3dc-dc407ccae141",
            "url_status": "offline",
            "last_online": "2026-04-15 11:03:17 UTC",
            "threat": "malware_download",
            "tags": [
                "base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822308/",
            "reporter": "abuse_ch"
        }
    ],
    "3822307": [
        {
            "dateadded": "2026-04-15 08:37:08 UTC",
            "url": "https://pastebin.com/raw/nsRc9G6c",
            "url_status": "offline",
            "last_online": "2026-04-15 10:35:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822307/",
            "reporter": "abuse_ch"
        }
    ],
    "3822306": [
        {
            "dateadded": "2026-04-15 08:37:06 UTC",
            "url": "https://pastebin.com/raw/Y4vF6WVi",
            "url_status": "offline",
            "last_online": "2026-04-15 11:32:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822306/",
            "reporter": "abuse_ch"
        }
    ],
    "3822305": [
        {
            "dateadded": "2026-04-15 08:36:07 UTC",
            "url": "http://172.245.155.94/27/greatattitudeforme.hta",
            "url_status": "offline",
            "last_online": "2026-04-19 04:52:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Formbook",
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822305/",
            "reporter": "abuse_ch"
        }
    ],
    "3822303": [
        {
            "dateadded": "2026-04-15 08:35:09 UTC",
            "url": "http://175.149.87.163:46674/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 08:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822303/",
            "reporter": "geenensp"
        }
    ],
    "3822304": [
        {
            "dateadded": "2026-04-15 08:35:09 UTC",
            "url": "https://pc24.app/InITkj",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822304/",
            "reporter": "abuse_ch"
        }
    ],
    "3822302": [
        {
            "dateadded": "2026-04-15 08:34:09 UTC",
            "url": "https://dubaitechnicalservice.ae/prood/kolodial.dat",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822302/",
            "reporter": "abuse_ch"
        }
    ],
    "3822301": [
        {
            "dateadded": "2026-04-15 08:34:07 UTC",
            "url": "http://66.63.170.9/129/goodthingsforbetterforme.hta",
            "url_status": "offline",
            "last_online": "2026-04-16 10:52:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Formbook",
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822301/",
            "reporter": "abuse_ch"
        }
    ],
    "3822300": [
        {
            "dateadded": "2026-04-15 08:33:08 UTC",
            "url": "https://t1de-vault.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822300/",
            "reporter": "anonymous"
        }
    ],
    "3822299": [
        {
            "dateadded": "2026-04-15 08:30:15 UTC",
            "url": "https://list4.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822299/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822298": [
        {
            "dateadded": "2026-04-15 08:30:10 UTC",
            "url": "https://sailbreeze.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822298/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822289": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://c87x.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 12:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822289/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822290": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://link1-wire.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 23:48:18 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822290/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822291": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://zone3-view.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 10:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822291/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822292": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://gate6.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 23:16:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822292/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822293": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://sort3-item.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 23:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822293/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822294": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://top3.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-21 04:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822294/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822295": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://best2.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 22:50:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822295/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822296": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://blog3.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-21 08:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822296/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822297": [
        {
            "dateadded": "2026-04-15 08:29:27 UTC",
            "url": "https://event2-log.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 23:47:01 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822297/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822287": [
        {
            "dateadded": "2026-04-15 08:29:25 UTC",
            "url": "https://topic3-base.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 23:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822287/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822288": [
        {
            "dateadded": "2026-04-15 08:29:25 UTC",
            "url": "https://darkspark.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 10:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822288/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822284": [
        {
            "dateadded": "2026-04-15 08:29:24 UTC",
            "url": "https://base6-door.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 11:24:49 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822284/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822285": [
        {
            "dateadded": "2026-04-15 08:29:24 UTC",
            "url": "https://news1-wire.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 23:38:49 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822285/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822286": [
        {
            "dateadded": "2026-04-15 08:29:24 UTC",
            "url": "https://serlineos8.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 11:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822286/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822283": [
        {
            "dateadded": "2026-04-15 08:29:23 UTC",
            "url": "https://user5.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-20 22:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822283/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822282": [
        {
            "dateadded": "2026-04-15 08:29:22 UTC",
            "url": "https://gift1.daily-bonus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 22:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822282/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822280": [
        {
            "dateadded": "2026-04-15 08:29:21 UTC",
            "url": "https://front6-gate.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 23:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822280/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822281": [
        {
            "dateadded": "2026-04-15 08:29:21 UTC",
            "url": "https://cover6-link.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 23:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822281/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822279": [
        {
            "dateadded": "2026-04-15 08:29:15 UTC",
            "url": "https://area2-find.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 11:20:53 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822279/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822277": [
        {
            "dateadded": "2026-04-15 08:29:14 UTC",
            "url": "https://upzr.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 11:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822277/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822278": [
        {
            "dateadded": "2026-04-15 08:29:14 UTC",
            "url": "https://order1-list.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 05:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822278/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822273": [
        {
            "dateadded": "2026-04-15 08:29:13 UTC",
            "url": "https://map4.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-21 05:46:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822273/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822274": [
        {
            "dateadded": "2026-04-15 08:29:13 UTC",
            "url": "https://open6.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-21 05:55:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822274/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822275": [
        {
            "dateadded": "2026-04-15 08:29:13 UTC",
            "url": "https://news5.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-21 05:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822275/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822276": [
        {
            "dateadded": "2026-04-15 08:29:13 UTC",
            "url": "https://sheet5-view.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-16 22:48:37 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822276/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822271": [
        {
            "dateadded": "2026-04-15 08:29:12 UTC",
            "url": "http://42.53.134.194:47895/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822271/",
            "reporter": "geenensp"
        }
    ],
    "3822272": [
        {
            "dateadded": "2026-04-15 08:29:12 UTC",
            "url": "https://site4-info.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-17 10:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822272/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822269": [
        {
            "dateadded": "2026-04-15 08:28:27 UTC",
            "url": "https://time1-out.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:27 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822269/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822270": [
        {
            "dateadded": "2026-04-15 08:28:27 UTC",
            "url": "https://itncq.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:27 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822270/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822262": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://client1-zone.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822262/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822263": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://table4-data.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822263/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822264": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://sandsto.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822264/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822265": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://node2-ssh.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822265/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822266": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://note3-base.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822266/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822267": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://auth7-core.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822267/",
            "reporter": "anonymous"
        }
    ],
    "3822268": [
        {
            "dateadded": "2026-04-15 08:28:26 UTC",
            "url": "https://plan3-item.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822268/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822261": [
        {
            "dateadded": "2026-04-15 08:28:25 UTC",
            "url": "https://work6-host.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:25 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822261/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822260": [
        {
            "dateadded": "2026-04-15 08:28:24 UTC",
            "url": "https://task1-core.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:24 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822260/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822259": [
        {
            "dateadded": "2026-04-15 08:28:23 UTC",
            "url": "https://mark5-logo.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:23 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822259/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822257": [
        {
            "dateadded": "2026-04-15 08:28:19 UTC",
            "url": "https://cinem-graph.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:19 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822257/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822258": [
        {
            "dateadded": "2026-04-15 08:28:19 UTC",
            "url": "https://vor-nexal.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:19 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822258/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822256": [
        {
            "dateadded": "2026-04-15 08:28:18 UTC",
            "url": "https://card2-fast.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:18 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822256/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822255": [
        {
            "dateadded": "2026-04-15 08:28:17 UTC",
            "url": "https://city1-spot.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822255/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822252": [
        {
            "dateadded": "2026-04-15 08:28:16 UTC",
            "url": "https://step2-flow.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822252/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822253": [
        {
            "dateadded": "2026-04-15 08:28:16 UTC",
            "url": "https://genome2-line.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822253/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822254": [
        {
            "dateadded": "2026-04-15 08:28:16 UTC",
            "url": "https://tun1-pipe.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822254/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822250": [
        {
            "dateadded": "2026-04-15 08:28:15 UTC",
            "url": "https://29mpmnz7.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822250/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822251": [
        {
            "dateadded": "2026-04-15 08:28:15 UTC",
            "url": "https://view2-data.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-15 08:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822251/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822249": [
        {
            "dateadded": "2026-04-15 08:28:07 UTC",
            "url": "https://file1-raw.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822249/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3822248": [
        {
            "dateadded": "2026-04-15 08:23:16 UTC",
            "url": "http://check.nid-log.com/pc/bootservice.php?tag=2136&query=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Kimsuky",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822248/",
            "reporter": "abuse_ch"
        }
    ],
    "3822247": [
        {
            "dateadded": "2026-04-15 08:23:10 UTC",
            "url": "https://aumri.ae/img_053925.png",
            "url_status": "offline",
            "last_online": "2026-04-15 08:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822247/",
            "reporter": "abuse_ch"
        }
    ],
    "3822246": [
        {
            "dateadded": "2026-04-15 08:23:07 UTC",
            "url": "https://vtdlwy.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822246/",
            "reporter": "anonymous"
        }
    ],
    "3822245": [
        {
            "dateadded": "2026-04-15 08:22:10 UTC",
            "url": "https://aumri.ae/rump1_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-15 10:55:45 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822245/",
            "reporter": "abuse_ch"
        }
    ],
    "3822244": [
        {
            "dateadded": "2026-04-15 08:19:19 UTC",
            "url": "http://125.45.42.21:53307/i",
            "url_status": "offline",
            "last_online": "2026-04-18 10:52:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822244/",
            "reporter": "geenensp"
        }
    ],
    "3822243": [
        {
            "dateadded": "2026-04-15 08:19:17 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/JT-0635.scr",
            "url_status": "offline",
            "last_online": "2026-04-16 06:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "MassLogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822243/",
            "reporter": "abuse_ch"
        }
    ],
    "3822236": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/FD-830-0054.pif",
            "url_status": "offline",
            "last_online": "2026-04-16 05:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822236/",
            "reporter": "abuse_ch"
        }
    ],
    "3822237": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/xe.js",
            "url_status": "offline",
            "last_online": "2026-04-16 05:25:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822237/",
            "reporter": "abuse_ch"
        }
    ],
    "3822238": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/XWormClient44.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 06:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822238/",
            "reporter": "abuse_ch"
        }
    ],
    "3822239": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/robin_harker@btconnect.com.rar",
            "url_status": "offline",
            "last_online": "2026-04-16 05:12:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822239/",
            "reporter": "abuse_ch"
        }
    ],
    "3822240": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/AU2025-0097.7z",
            "url_status": "offline",
            "last_online": "2026-04-16 06:32:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822240/",
            "reporter": "abuse_ch"
        }
    ],
    "3822241": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/FT3763PDF.scr",
            "url_status": "offline",
            "last_online": "2026-04-16 06:26:00 UTC",
            "threat": "malware_download",
            "tags": [
                "PureCrypter"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822241/",
            "reporter": "abuse_ch"
        }
    ],
    "3822242": [
        {
            "dateadded": "2026-04-15 08:19:16 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-0037.scr",
            "url_status": "offline",
            "last_online": "2026-04-16 06:15:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822242/",
            "reporter": "abuse_ch"
        }
    ],
    "3822234": [
        {
            "dateadded": "2026-04-15 08:19:15 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/FT-26436DU(2).pif",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822234/",
            "reporter": "abuse_ch"
        }
    ],
    "3822235": [
        {
            "dateadded": "2026-04-15 08:19:15 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT02528_8w77.js",
            "url_status": "offline",
            "last_online": "2026-04-16 05:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822235/",
            "reporter": "abuse_ch"
        }
    ],
    "3822224": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/SMTB-73443.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:22:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822224/",
            "reporter": "abuse_ch"
        }
    ],
    "3822225": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822225/",
            "reporter": "abuse_ch"
        }
    ],
    "3822226": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/robin_harker@btconnect.com.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822226/",
            "reporter": "abuse_ch"
        }
    ],
    "3822227": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/AT-35560.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "MassLogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822227/",
            "reporter": "abuse_ch"
        }
    ],
    "3822228": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/bin.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:33:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822228/",
            "reporter": "abuse_ch"
        }
    ],
    "3822229": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/update1.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822229/",
            "reporter": "abuse_ch"
        }
    ],
    "3822230": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/client.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 06:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822230/",
            "reporter": "abuse_ch"
        }
    ],
    "3822231": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/A-2025-03545.7z",
            "url_status": "offline",
            "last_online": "2026-04-16 05:11:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822231/",
            "reporter": "abuse_ch"
        }
    ],
    "3822232": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/AT5423.7z",
            "url_status": "offline",
            "last_online": "2026-04-16 06:14:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822232/",
            "reporter": "abuse_ch"
        }
    ],
    "3822233": [
        {
            "dateadded": "2026-04-15 08:19:13 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/ST982.rar",
            "url_status": "offline",
            "last_online": "2026-04-16 06:18:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822233/",
            "reporter": "abuse_ch"
        }
    ],
    "3822218": [
        {
            "dateadded": "2026-04-15 08:19:12 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/CerealisorderSV#2023-007.rar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822218/",
            "reporter": "abuse_ch"
        }
    ],
    "3822219": [
        {
            "dateadded": "2026-04-15 08:19:12 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-0035.scr",
            "url_status": "offline",
            "last_online": "2026-04-16 05:49:41 UTC",
            "threat": "malware_download",
            "tags": [
                "PureCrypter"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822219/",
            "reporter": "abuse_ch"
        }
    ],
    "3822220": [
        {
            "dateadded": "2026-04-15 08:19:12 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Bosshyperaw(1).zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822220/",
            "reporter": "abuse_ch"
        }
    ],
    "3822221": [
        {
            "dateadded": "2026-04-15 08:19:12 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Bosshyperaw.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 06:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "MassLogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822221/",
            "reporter": "abuse_ch"
        }
    ],
    "3822222": [
        {
            "dateadded": "2026-04-15 08:19:12 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Bosshyperaw.exe.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:39:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822222/",
            "reporter": "abuse_ch"
        }
    ],
    "3822223": [
        {
            "dateadded": "2026-04-15 08:19:12 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/BOLICFILE.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:44:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822223/",
            "reporter": "abuse_ch"
        }
    ],
    "3822215": [
        {
            "dateadded": "2026-04-15 08:19:11 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Dxxqbzem.scr",
            "url_status": "offline",
            "last_online": "2026-04-16 05:24:19 UTC",
            "threat": "malware_download",
            "tags": [
                "PureCrypter"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822215/",
            "reporter": "abuse_ch"
        }
    ],
    "3822216": [
        {
            "dateadded": "2026-04-15 08:19:11 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-2725.rar",
            "url_status": "offline",
            "last_online": "2026-04-16 06:04:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822216/",
            "reporter": "abuse_ch"
        }
    ],
    "3822217": [
        {
            "dateadded": "2026-04-15 08:19:11 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/JT-0635.rar",
            "url_status": "offline",
            "last_online": "2026-04-16 04:55:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822217/",
            "reporter": "abuse_ch"
        }
    ],
    "3822213": [
        {
            "dateadded": "2026-04-15 08:19:10 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/a89667.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 05:37:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822213/",
            "reporter": "abuse_ch"
        }
    ],
    "3822214": [
        {
            "dateadded": "2026-04-15 08:19:10 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/bvx1TflM4CXqqX8.pif",
            "url_status": "offline",
            "last_online": "2026-04-16 05:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822214/",
            "reporter": "abuse_ch"
        }
    ],
    "3822210": [
        {
            "dateadded": "2026-04-15 08:19:09 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/A-739PCS.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822210/",
            "reporter": "abuse_ch"
        }
    ],
    "3822211": [
        {
            "dateadded": "2026-04-15 08:19:09 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Lanpb.scr",
            "url_status": "offline",
            "last_online": "2026-04-16 06:37:49 UTC",
            "threat": "malware_download",
            "tags": [
                "PureCrypter"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822211/",
            "reporter": "abuse_ch"
        }
    ],
    "3822212": [
        {
            "dateadded": "2026-04-15 08:19:09 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT9262.zip",
            "url_status": "offline",
            "last_online": "2026-04-16 06:37:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822212/",
            "reporter": "abuse_ch"
        }
    ],
    "3822206": [
        {
            "dateadded": "2026-04-15 08:19:08 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/SV#2025-006.scr",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822206/",
            "reporter": "abuse_ch"
        }
    ],
    "3822207": [
        {
            "dateadded": "2026-04-15 08:19:08 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/PO#2025-435.scr",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822207/",
            "reporter": "abuse_ch"
        }
    ],
    "3822208": [
        {
            "dateadded": "2026-04-15 08:19:08 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Doc#2025-0053.pif",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822208/",
            "reporter": "abuse_ch"
        }
    ],
    "3822209": [
        {
            "dateadded": "2026-04-15 08:19:08 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Con#64525.exe.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822209/",
            "reporter": "abuse_ch"
        }
    ],
    "3822205": [
        {
            "dateadded": "2026-04-15 08:19:07 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-8272.rar",
            "url_status": "offline",
            "last_online": "2026-04-16 05:42:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822205/",
            "reporter": "abuse_ch"
        }
    ],
    "3822202": [
        {
            "dateadded": "2026-04-15 08:19:06 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/A-835PCS.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822202/",
            "reporter": "abuse_ch"
        }
    ],
    "3822203": [
        {
            "dateadded": "2026-04-15 08:19:06 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/ST#2025-0073.scr",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822203/",
            "reporter": "abuse_ch"
        }
    ],
    "3822204": [
        {
            "dateadded": "2026-04-15 08:19:06 UTC",
            "url": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/SV#202503.scr",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822204/",
            "reporter": "abuse_ch"
        }
    ],
    "3822201": [
        {
            "dateadded": "2026-04-15 08:18:12 UTC",
            "url": "https://geo-r0ut.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822201/",
            "reporter": "anonymous"
        }
    ],
    "3822200": [
        {
            "dateadded": "2026-04-15 08:17:21 UTC",
            "url": "http://222.141.79.173:52857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822200/",
            "reporter": "geenensp"
        }
    ],
    "3822199": [
        {
            "dateadded": "2026-04-15 08:17:09 UTC",
            "url": "https://raw.githubusercontent.com/Hyperbolic531/Makethen/refs/heads/main/miahdoo.txt",
            "url_status": "offline",
            "last_online": "2026-04-16 06:25:25 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822199/",
            "reporter": "abuse_ch"
        }
    ],
    "3822198": [
        {
            "dateadded": "2026-04-15 08:16:08 UTC",
            "url": "https://i.postimg.cc/R01gW6zd/snake.png",
            "url_status": "offline",
            "last_online": "2026-04-15 08:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822198/",
            "reporter": "abuse_ch"
        }
    ],
    "3822197": [
        {
            "dateadded": "2026-04-15 08:15:09 UTC",
            "url": "https://inn35-dock.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822197/",
            "reporter": "anonymous"
        }
    ],
    "3822196": [
        {
            "dateadded": "2026-04-15 08:14:12 UTC",
            "url": "https://krikadoo.com/478469/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomStealer",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822196/",
            "reporter": "abuse_ch"
        }
    ],
    "3822195": [
        {
            "dateadded": "2026-04-15 08:12:11 UTC",
            "url": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fjs.txt?alt=media&token=09ada575-efa9-4dc8-b331-404723b5997a",
            "url_status": "offline",
            "last_online": "2026-04-15 11:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "base64-loader",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822195/",
            "reporter": "abuse_ch"
        }
    ],
    "3822194": [
        {
            "dateadded": "2026-04-15 08:10:19 UTC",
            "url": "https://bitcoins.homes/zwoxeq.vmp.msi",
            "url_status": "offline",
            "last_online": "2026-04-18 10:44:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Loda",
                "LodaRAT",
                "msi",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822194/",
            "reporter": "abuse_ch"
        }
    ],
    "3822193": [
        {
            "dateadded": "2026-04-15 08:10:15 UTC",
            "url": "https://sfunited.club/kwdhur.vmp.msi",
            "url_status": "offline",
            "last_online": "2026-04-18 10:59:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Loda",
                "LodaRAT",
                "msi",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822193/",
            "reporter": "abuse_ch"
        }
    ],
    "3822192": [
        {
            "dateadded": "2026-04-15 08:08:09 UTC",
            "url": "https://krikadoo.com/wp-admin/network/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "PhantomStealer",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822192/",
            "reporter": "abuse_ch"
        }
    ],
    "3822191": [
        {
            "dateadded": "2026-04-15 08:07:07 UTC",
            "url": "http://107.173.143.118/nesrmp.png",
            "url_status": "offline",
            "last_online": "2026-04-15 08:07:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822191/",
            "reporter": "abuse_ch"
        }
    ],
    "3822190": [
        {
            "dateadded": "2026-04-15 08:07:06 UTC",
            "url": "https://dump.win/bLRkm.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822190/",
            "reporter": "abuse_ch"
        }
    ],
    "3822189": [
        {
            "dateadded": "2026-04-15 08:04:18 UTC",
            "url": "http://110.186.230.74:54569/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:29:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822189/",
            "reporter": "geenensp"
        }
    ],
    "3822188": [
        {
            "dateadded": "2026-04-15 08:04:17 UTC",
            "url": "http://58.47.121.91:55536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:26:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822188/",
            "reporter": "geenensp"
        }
    ],
    "3822187": [
        {
            "dateadded": "2026-04-15 08:04:16 UTC",
            "url": "http://125.47.84.143:50168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822187/",
            "reporter": "geenensp"
        }
    ],
    "3822186": [
        {
            "dateadded": "2026-04-15 08:04:10 UTC",
            "url": "https://reagent-publ.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 08:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822186/",
            "reporter": "anonymous"
        }
    ],
    "3822185": [
        {
            "dateadded": "2026-04-15 08:00:13 UTC",
            "url": "http://112.98.97.193:34651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:52:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822185/",
            "reporter": "geenensp"
        }
    ],
    "3822184": [
        {
            "dateadded": "2026-04-15 07:59:07 UTC",
            "url": "https://yil5.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822184/",
            "reporter": "anonymous"
        }
    ],
    "3822183": [
        {
            "dateadded": "2026-04-15 07:56:09 UTC",
            "url": "http://valfanto.com/oboapril.png",
            "url_status": "offline",
            "last_online": "2026-04-15 23:41:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822183/",
            "reporter": "abuse_ch"
        }
    ],
    "3822182": [
        {
            "dateadded": "2026-04-15 07:56:08 UTC",
            "url": "http://84.38.130.143/rumpdbkfire.png",
            "url_status": "offline",
            "last_online": "2026-04-16 05:16:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822182/",
            "reporter": "abuse_ch"
        }
    ],
    "3822181": [
        {
            "dateadded": "2026-04-15 07:56:07 UTC",
            "url": "http://84.38.130.143/optimized_MSI.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822181/",
            "reporter": "abuse_ch"
        }
    ],
    "3822180": [
        {
            "dateadded": "2026-04-15 07:54:07 UTC",
            "url": "https://njt8hire.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822180/",
            "reporter": "anonymous"
        }
    ],
    "3822179": [
        {
            "dateadded": "2026-04-15 07:51:25 UTC",
            "url": "https://thomphon.com/payload/update.mso?tk=862f0dc11e2f77a809083b3bc818b6a5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822179/",
            "reporter": "Lenard"
        }
    ],
    "3822177": [
        {
            "dateadded": "2026-04-15 07:51:20 UTC",
            "url": "http://182.118.245.97:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822177/",
            "reporter": "geenensp"
        }
    ],
    "3822178": [
        {
            "dateadded": "2026-04-15 07:51:20 UTC",
            "url": "http://5.175.223.249/c.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822178/",
            "reporter": "adliwahid"
        }
    ],
    "3822175": [
        {
            "dateadded": "2026-04-15 07:51:19 UTC",
            "url": "http://110.36.89.2:55241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 11:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822175/",
            "reporter": "geenensp"
        }
    ],
    "3822176": [
        {
            "dateadded": "2026-04-15 07:51:19 UTC",
            "url": "http://45.171.177.193:57036/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:23:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822176/",
            "reporter": "geenensp"
        }
    ],
    "3822174": [
        {
            "dateadded": "2026-04-15 07:51:17 UTC",
            "url": "https://ersesytuhbo.it.com/Dokumen-perusahaan.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 07:51:17 UTC",
            "threat": "malware_download",
            "tags": [
                "backdoor",
                "CobaltStrike",
                "golang",
                "Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822174/",
            "reporter": "ilyasmini"
        }
    ],
    "3822173": [
        {
            "dateadded": "2026-04-15 07:51:10 UTC",
            "url": "http://149.248.79.33/Dvizhok.zip",
            "url_status": "offline",
            "last_online": "2026-04-15 07:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "CastleRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822173/",
            "reporter": "anonymous"
        }
    ],
    "3822172": [
        {
            "dateadded": "2026-04-15 07:51:09 UTC",
            "url": "http://172.245.95.24/rump222.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822172/",
            "reporter": "abuse_ch"
        }
    ],
    "3822171": [
        {
            "dateadded": "2026-04-15 07:51:08 UTC",
            "url": "http://5.182.87.118/bot-x86_64",
            "url_status": "offline",
            "last_online": "2026-04-15 07:51:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822171/",
            "reporter": "adliwahid"
        }
    ],
    "3822170": [
        {
            "dateadded": "2026-04-15 07:47:10 UTC",
            "url": "https://lbkonz.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822170/",
            "reporter": "anonymous"
        }
    ],
    "3822169": [
        {
            "dateadded": "2026-04-15 07:45:13 UTC",
            "url": "http://203.203.86.117:16670/.i",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:37 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822169/",
            "reporter": "geenensp"
        }
    ],
    "3822168": [
        {
            "dateadded": "2026-04-15 07:43:10 UTC",
            "url": "https://zencresten5.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822168/",
            "reporter": "anonymous"
        }
    ],
    "3822167": [
        {
            "dateadded": "2026-04-15 07:41:10 UTC",
            "url": "http://60.23.223.141:46488/i",
            "url_status": "offline",
            "last_online": "2026-04-19 22:37:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822167/",
            "reporter": "geenensp"
        }
    ],
    "3822166": [
        {
            "dateadded": "2026-04-15 07:37:08 UTC",
            "url": "https://nky0.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822166/",
            "reporter": "anonymous"
        }
    ],
    "3822165": [
        {
            "dateadded": "2026-04-15 07:34:10 UTC",
            "url": "http://42.53.134.194:47895/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822165/",
            "reporter": "geenensp"
        }
    ],
    "3822164": [
        {
            "dateadded": "2026-04-15 07:33:08 UTC",
            "url": "https://mcfupmvl.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822164/",
            "reporter": "anonymous"
        }
    ],
    "3822163": [
        {
            "dateadded": "2026-04-15 07:30:10 UTC",
            "url": "https://xlknp.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822163/",
            "reporter": "anonymous"
        }
    ],
    "3822161": [
        {
            "dateadded": "2026-04-15 07:23:19 UTC",
            "url": "http://45.171.177.193:57036/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:54:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822161/",
            "reporter": "geenensp"
        }
    ],
    "3822162": [
        {
            "dateadded": "2026-04-15 07:23:19 UTC",
            "url": "http://182.121.46.177:44224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:57:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822162/",
            "reporter": "geenensp"
        }
    ],
    "3822160": [
        {
            "dateadded": "2026-04-15 07:22:20 UTC",
            "url": "http://45.92.1.242:8000/winreg.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "45-92-1-242-8000",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822160/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822159": [
        {
            "dateadded": "2026-04-15 07:20:15 UTC",
            "url": "https://ofhbm4.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822159/",
            "reporter": "anonymous"
        }
    ],
    "3822158": [
        {
            "dateadded": "2026-04-15 07:18:17 UTC",
            "url": "http://59.47.190.105:45324/i",
            "url_status": "offline",
            "last_online": "2026-04-19 16:53:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822158/",
            "reporter": "geenensp"
        }
    ],
    "3822157": [
        {
            "dateadded": "2026-04-15 07:18:05 UTC",
            "url": "http://84.21.189.150:5000/kla.bin",
            "url_status": "offline",
            "last_online": "2026-04-15 11:02:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822157/",
            "reporter": "abuse_ch"
        }
    ],
    "3822156": [
        {
            "dateadded": "2026-04-15 07:17:14 UTC",
            "url": "http://115.59.27.175:54653/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:28:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822156/",
            "reporter": "geenensp"
        }
    ],
    "3822149": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/sorna.bin",
            "url_status": "offline",
            "last_online": "2026-04-15 11:13:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822149/",
            "reporter": "abuse_ch"
        }
    ],
    "3822150": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/simpo.png",
            "url_status": "offline",
            "last_online": "2026-04-15 10:36:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822150/",
            "reporter": "abuse_ch"
        }
    ],
    "3822151": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/javav.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:52:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SalatStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822151/",
            "reporter": "abuse_ch"
        }
    ],
    "3822152": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/rena.bin",
            "url_status": "offline",
            "last_online": "2026-04-15 11:04:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822152/",
            "reporter": "abuse_ch"
        }
    ],
    "3822153": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/srapert.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SalatStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822153/",
            "reporter": "abuse_ch"
        }
    ],
    "3822154": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/abrams.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SalatStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822154/",
            "reporter": "abuse_ch"
        }
    ],
    "3822155": [
        {
            "dateadded": "2026-04-15 07:17:09 UTC",
            "url": "http://84.21.189.150:5000/cputr.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 11:49:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SalatStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822155/",
            "reporter": "abuse_ch"
        }
    ],
    "3822147": [
        {
            "dateadded": "2026-04-15 07:17:08 UTC",
            "url": "http://84.21.189.150:5000/samso.png",
            "url_status": "offline",
            "last_online": "2026-04-15 11:40:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822147/",
            "reporter": "abuse_ch"
        }
    ],
    "3822148": [
        {
            "dateadded": "2026-04-15 07:17:08 UTC",
            "url": "http://84.21.189.150:5000/open.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 10:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SalatStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822148/",
            "reporter": "abuse_ch"
        }
    ],
    "3822145": [
        {
            "dateadded": "2026-04-15 07:17:06 UTC",
            "url": "http://84.21.189.150:5000/leas.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822145/",
            "reporter": "abuse_ch"
        }
    ],
    "3822146": [
        {
            "dateadded": "2026-04-15 07:17:06 UTC",
            "url": "http://84.21.189.150:5000/jasdo.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822146/",
            "reporter": "abuse_ch"
        }
    ],
    "3822144": [
        {
            "dateadded": "2026-04-15 07:17:05 UTC",
            "url": "http://84.21.189.150:5000/savaw.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822144/",
            "reporter": "abuse_ch"
        }
    ],
    "3822143": [
        {
            "dateadded": "2026-04-15 07:15:14 UTC",
            "url": "https://lcr1.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822143/",
            "reporter": "anonymous"
        }
    ],
    "3822142": [
        {
            "dateadded": "2026-04-15 07:10:23 UTC",
            "url": "http://60.23.223.141:46488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:59:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822142/",
            "reporter": "geenensp"
        }
    ],
    "3822141": [
        {
            "dateadded": "2026-04-15 07:08:09 UTC",
            "url": "https://casualquant.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822141/",
            "reporter": "anonymous"
        }
    ],
    "3822140": [
        {
            "dateadded": "2026-04-15 07:05:24 UTC",
            "url": "http://119.187.239.144:48842/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:24:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822140/",
            "reporter": "geenensp"
        }
    ],
    "3822139": [
        {
            "dateadded": "2026-04-15 07:03:08 UTC",
            "url": "https://sol-draet.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 07:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822139/",
            "reporter": "anonymous"
        }
    ],
    "3822138": [
        {
            "dateadded": "2026-04-15 07:02:17 UTC",
            "url": "http://115.50.89.11:41095/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:50:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822138/",
            "reporter": "geenensp"
        }
    ],
    "3822137": [
        {
            "dateadded": "2026-04-15 06:58:09 UTC",
            "url": "https://globalotter.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822137/",
            "reporter": "anonymous"
        }
    ],
    "3822136": [
        {
            "dateadded": "2026-04-15 06:54:18 UTC",
            "url": "http://221.14.168.156:37154/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:41:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822136/",
            "reporter": "geenensp"
        }
    ],
    "3822135": [
        {
            "dateadded": "2026-04-15 06:52:08 UTC",
            "url": "https://serlinear.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822135/",
            "reporter": "anonymous"
        }
    ],
    "3822134": [
        {
            "dateadded": "2026-04-15 06:47:18 UTC",
            "url": "http://219.156.51.105:57343/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822134/",
            "reporter": "geenensp"
        }
    ],
    "3822133": [
        {
            "dateadded": "2026-04-15 06:47:12 UTC",
            "url": "https://b4rk-panel.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822133/",
            "reporter": "anonymous"
        }
    ],
    "3822132": [
        {
            "dateadded": "2026-04-15 06:41:11 UTC",
            "url": "https://trailerbinary.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822132/",
            "reporter": "anonymous"
        }
    ],
    "3822131": [
        {
            "dateadded": "2026-04-15 06:40:17 UTC",
            "url": "http://115.50.89.11:41095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:21:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822131/",
            "reporter": "geenensp"
        }
    ],
    "3822130": [
        {
            "dateadded": "2026-04-15 06:38:21 UTC",
            "url": "http://45.92.1.242:8080/winreg.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 06:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "45-92-1-242-8080",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822130/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822129": [
        {
            "dateadded": "2026-04-15 06:37:07 UTC",
            "url": "http://45.92.1.242:8000/adobe.js",
            "url_status": "offline",
            "last_online": "2026-04-15 06:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "45-92-1-242-8000",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822129/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822128": [
        {
            "dateadded": "2026-04-15 06:36:11 UTC",
            "url": "https://pebcpxb.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822128/",
            "reporter": "anonymous"
        }
    ],
    "3822127": [
        {
            "dateadded": "2026-04-15 06:30:20 UTC",
            "url": "http://115.58.173.223:45571/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822127/",
            "reporter": "geenensp"
        }
    ],
    "3822126": [
        {
            "dateadded": "2026-04-15 06:30:11 UTC",
            "url": "https://sharpreel.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822126/",
            "reporter": "anonymous"
        }
    ],
    "3822124": [
        {
            "dateadded": "2026-04-15 06:23:12 UTC",
            "url": "http://115.58.173.223:45571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:24:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822124/",
            "reporter": "geenensp"
        }
    ],
    "3822125": [
        {
            "dateadded": "2026-04-15 06:23:12 UTC",
            "url": "https://du5t3-forge.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822125/",
            "reporter": "anonymous"
        }
    ],
    "3822123": [
        {
            "dateadded": "2026-04-15 06:22:12 UTC",
            "url": "http://219.156.51.105:57343/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:31:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822123/",
            "reporter": "geenensp"
        }
    ],
    "3822122": [
        {
            "dateadded": "2026-04-15 06:19:17 UTC",
            "url": "http://42.180.38.47:51568/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822122/",
            "reporter": "geenensp"
        }
    ],
    "3822121": [
        {
            "dateadded": "2026-04-15 06:18:12 UTC",
            "url": "https://icematrix.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822121/",
            "reporter": "anonymous"
        }
    ],
    "3822120": [
        {
            "dateadded": "2026-04-15 06:13:07 UTC",
            "url": "https://serlineos8.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822120/",
            "reporter": "anonymous"
        }
    ],
    "3822119": [
        {
            "dateadded": "2026-04-15 06:08:08 UTC",
            "url": "https://sailbreeze.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822119/",
            "reporter": "anonymous"
        }
    ],
    "3822118": [
        {
            "dateadded": "2026-04-15 06:03:07 UTC",
            "url": "https://c87x.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822118/",
            "reporter": "anonymous"
        }
    ],
    "3822117": [
        {
            "dateadded": "2026-04-15 06:00:10 UTC",
            "url": "https://gift1.daily-bonus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 06:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822117/",
            "reporter": "anonymous"
        }
    ],
    "3822116": [
        {
            "dateadded": "2026-04-15 05:59:08 UTC",
            "url": "https://124.198.131.88/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:20 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-131-88",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822116/",
            "reporter": "BlinkzSec"
        }
    ],
    "3822115": [
        {
            "dateadded": "2026-04-15 05:53:07 UTC",
            "url": "https://gate6.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822115/",
            "reporter": "anonymous"
        }
    ],
    "3822114": [
        {
            "dateadded": "2026-04-15 05:52:10 UTC",
            "url": "http://125.42.33.158:35473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:15:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822114/",
            "reporter": "geenensp"
        }
    ],
    "3822113": [
        {
            "dateadded": "2026-04-15 05:51:16 UTC",
            "url": "http://42.180.38.47:51568/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:45:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822113/",
            "reporter": "geenensp"
        }
    ],
    "3822112": [
        {
            "dateadded": "2026-04-15 05:49:07 UTC",
            "url": "https://user5.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822112/",
            "reporter": "anonymous"
        }
    ],
    "3822111": [
        {
            "dateadded": "2026-04-15 05:43:12 UTC",
            "url": "https://list4.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822111/",
            "reporter": "anonymous"
        }
    ],
    "3822110": [
        {
            "dateadded": "2026-04-15 05:36:10 UTC",
            "url": "https://top3.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822110/",
            "reporter": "anonymous"
        }
    ],
    "3822109": [
        {
            "dateadded": "2026-04-15 05:34:16 UTC",
            "url": "http://61.3.19.106:40715/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822109/",
            "reporter": "geenensp"
        }
    ],
    "3822108": [
        {
            "dateadded": "2026-04-15 05:34:13 UTC",
            "url": "http://115.62.154.202:39308/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:45:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822108/",
            "reporter": "geenensp"
        }
    ],
    "3822107": [
        {
            "dateadded": "2026-04-15 05:31:12 UTC",
            "url": "https://best2.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822107/",
            "reporter": "anonymous"
        }
    ],
    "3822106": [
        {
            "dateadded": "2026-04-15 05:25:17 UTC",
            "url": "http://110.37.39.234:43281/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822106/",
            "reporter": "geenensp"
        }
    ],
    "3822105": [
        {
            "dateadded": "2026-04-15 05:25:13 UTC",
            "url": "https://good1.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822105/",
            "reporter": "anonymous"
        }
    ],
    "3822104": [
        {
            "dateadded": "2026-04-15 05:23:07 UTC",
            "url": "http://110.37.39.234:43281/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:34:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822104/",
            "reporter": "geenensp"
        }
    ],
    "3822103": [
        {
            "dateadded": "2026-04-15 05:21:08 UTC",
            "url": "https://open6.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822103/",
            "reporter": "anonymous"
        }
    ],
    "3822102": [
        {
            "dateadded": "2026-04-15 05:19:07 UTC",
            "url": "http://113.239.69.72:59775/i",
            "url_status": "offline",
            "last_online": "2026-04-21 22:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822102/",
            "reporter": "geenensp"
        }
    ],
    "3822101": [
        {
            "dateadded": "2026-04-15 05:15:15 UTC",
            "url": "https://news5.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822101/",
            "reporter": "anonymous"
        }
    ],
    "3822100": [
        {
            "dateadded": "2026-04-15 05:08:08 UTC",
            "url": "https://map4.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822100/",
            "reporter": "anonymous"
        }
    ],
    "3822098": [
        {
            "dateadded": "2026-04-15 05:07:14 UTC",
            "url": "http://115.62.154.202:39308/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:42:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822098/",
            "reporter": "geenensp"
        }
    ],
    "3822099": [
        {
            "dateadded": "2026-04-15 05:07:14 UTC",
            "url": "http://61.3.19.106:40715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822099/",
            "reporter": "geenensp"
        }
    ],
    "3822097": [
        {
            "dateadded": "2026-04-15 05:06:10 UTC",
            "url": "https://blog3.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 05:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822097/",
            "reporter": "anonymous"
        }
    ],
    "3822096": [
        {
            "dateadded": "2026-04-15 05:04:06 UTC",
            "url": "http://123.10.36.176:53534/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:56:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822096/",
            "reporter": "geenensp"
        }
    ],
    "3822095": [
        {
            "dateadded": "2026-04-15 05:02:08 UTC",
            "url": "http://123.12.23.184:58755/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822095/",
            "reporter": "geenensp"
        }
    ],
    "3822094": [
        {
            "dateadded": "2026-04-15 04:58:16 UTC",
            "url": "http://42.231.90.217:41945/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:09:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822094/",
            "reporter": "geenensp"
        }
    ],
    "3822093": [
        {
            "dateadded": "2026-04-15 04:57:14 UTC",
            "url": "https://spot2.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822093/",
            "reporter": "anonymous"
        }
    ],
    "3822092": [
        {
            "dateadded": "2026-04-15 04:53:14 UTC",
            "url": "http://182.114.254.132:47366/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:29:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822092/",
            "reporter": "geenensp"
        }
    ],
    "3822091": [
        {
            "dateadded": "2026-04-15 04:53:08 UTC",
            "url": "https://area1.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822091/",
            "reporter": "anonymous"
        }
    ],
    "3822090": [
        {
            "dateadded": "2026-04-15 04:46:12 UTC",
            "url": "https://site6.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822090/",
            "reporter": "anonymous"
        }
    ],
    "3822089": [
        {
            "dateadded": "2026-04-15 04:46:08 UTC",
            "url": "http://113.239.69.72:59775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822089/",
            "reporter": "geenensp"
        }
    ],
    "3822088": [
        {
            "dateadded": "2026-04-15 04:42:12 UTC",
            "url": "https://city5.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822088/",
            "reporter": "anonymous"
        }
    ],
    "3822087": [
        {
            "dateadded": "2026-04-15 04:37:12 UTC",
            "url": "http://219.157.185.79:44068/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:26:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822087/",
            "reporter": "geenensp"
        }
    ],
    "3822086": [
        {
            "dateadded": "2026-04-15 04:36:11 UTC",
            "url": "https://total4.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822086/",
            "reporter": "anonymous"
        }
    ],
    "3822085": [
        {
            "dateadded": "2026-04-15 04:33:15 UTC",
            "url": "http://112.242.135.153:35729/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822085/",
            "reporter": "geenensp"
        }
    ],
    "3822084": [
        {
            "dateadded": "2026-04-15 04:31:12 UTC",
            "url": "https://post3.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822084/",
            "reporter": "anonymous"
        }
    ],
    "3822083": [
        {
            "dateadded": "2026-04-15 04:24:15 UTC",
            "url": "http://219.155.250.221:53608/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:11:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822083/",
            "reporter": "geenensp"
        }
    ],
    "3822082": [
        {
            "dateadded": "2026-04-15 04:24:13 UTC",
            "url": "https://box2.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822082/",
            "reporter": "anonymous"
        }
    ],
    "3822081": [
        {
            "dateadded": "2026-04-15 04:19:16 UTC",
            "url": "http://45.248.33.200:42318/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822081/",
            "reporter": "geenensp"
        }
    ],
    "3822080": [
        {
            "dateadded": "2026-04-15 04:19:15 UTC",
            "url": "http://60.18.9.150:35060/i",
            "url_status": "offline",
            "last_online": "2026-04-20 04:42:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822080/",
            "reporter": "geenensp"
        }
    ],
    "3822079": [
        {
            "dateadded": "2026-04-15 04:18:17 UTC",
            "url": "https://order1.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822079/",
            "reporter": "anonymous"
        }
    ],
    "3822078": [
        {
            "dateadded": "2026-04-15 04:17:13 UTC",
            "url": "http://60.18.9.150:35060/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 05:56:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822078/",
            "reporter": "geenensp"
        }
    ],
    "3822077": [
        {
            "dateadded": "2026-04-15 04:14:07 UTC",
            "url": "http://110.37.53.25:44290/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:51:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822077/",
            "reporter": "geenensp"
        }
    ],
    "3822076": [
        {
            "dateadded": "2026-04-15 04:14:06 UTC",
            "url": "http://110.37.53.25:44290/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 22:51:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822076/",
            "reporter": "geenensp"
        }
    ],
    "3822075": [
        {
            "dateadded": "2026-04-15 04:13:13 UTC",
            "url": "https://main6.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822075/",
            "reporter": "anonymous"
        }
    ],
    "3822074": [
        {
            "dateadded": "2026-04-15 04:11:13 UTC",
            "url": "http://123.5.31.111:41312/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:11:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822074/",
            "reporter": "geenensp"
        }
    ],
    "3822073": [
        {
            "dateadded": "2026-04-15 04:10:12 UTC",
            "url": "http://175.149.219.62:32919/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:34:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822073/",
            "reporter": "adliwahid"
        }
    ],
    "3822070": [
        {
            "dateadded": "2026-04-15 04:10:10 UTC",
            "url": "http://222.138.219.201:54137/i",
            "url_status": "offline",
            "last_online": "2026-04-16 18:31:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822070/",
            "reporter": "adliwahid"
        }
    ],
    "3822071": [
        {
            "dateadded": "2026-04-15 04:10:10 UTC",
            "url": "http://182.117.6.62:58047/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:11:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822071/",
            "reporter": "adliwahid"
        }
    ],
    "3822072": [
        {
            "dateadded": "2026-04-15 04:10:10 UTC",
            "url": "http://60.23.237.189:32862/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:28:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822072/",
            "reporter": "adliwahid"
        }
    ],
    "3822061": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://219.154.175.25:45537/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822061/",
            "reporter": "adliwahid"
        }
    ],
    "3822062": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://42.85.209.249:54465/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:11:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822062/",
            "reporter": "adliwahid"
        }
    ],
    "3822063": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://123.13.108.229:34610/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822063/",
            "reporter": "adliwahid"
        }
    ],
    "3822064": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://115.50.0.79:44241/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:05:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822064/",
            "reporter": "adliwahid"
        }
    ],
    "3822065": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://120.28.193.143:44022/i",
            "url_status": "offline",
            "last_online": "2026-04-22 23:35:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822065/",
            "reporter": "adliwahid"
        }
    ],
    "3822066": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://177.84.28.131:39962/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822066/",
            "reporter": "adliwahid"
        }
    ],
    "3822067": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://39.89.254.194:50243/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:15:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822067/",
            "reporter": "adliwahid"
        }
    ],
    "3822068": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://123.5.31.111:41312/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:50:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822068/",
            "reporter": "adliwahid"
        }
    ],
    "3822069": [
        {
            "dateadded": "2026-04-15 04:10:09 UTC",
            "url": "http://27.37.127.126:35855/i",
            "url_status": "offline",
            "last_online": "2026-04-19 06:04:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822069/",
            "reporter": "adliwahid"
        }
    ],
    "3822055": [
        {
            "dateadded": "2026-04-15 04:10:08 UTC",
            "url": "http://91.130.24.183:50835/i",
            "url_status": "offline",
            "last_online": "2026-04-19 23:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822055/",
            "reporter": "adliwahid"
        }
    ],
    "3822056": [
        {
            "dateadded": "2026-04-15 04:10:08 UTC",
            "url": "http://110.36.89.2:55241/i",
            "url_status": "offline",
            "last_online": "2026-04-22 12:11:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822056/",
            "reporter": "adliwahid"
        }
    ],
    "3822057": [
        {
            "dateadded": "2026-04-15 04:10:08 UTC",
            "url": "http://113.138.135.65:60830/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822057/",
            "reporter": "adliwahid"
        }
    ],
    "3822058": [
        {
            "dateadded": "2026-04-15 04:10:08 UTC",
            "url": "http://115.50.29.181:43425/i",
            "url_status": "offline",
            "last_online": "2026-04-15 07:15:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822058/",
            "reporter": "adliwahid"
        }
    ],
    "3822059": [
        {
            "dateadded": "2026-04-15 04:10:08 UTC",
            "url": "http://119.116.155.243:49935/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:12:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822059/",
            "reporter": "adliwahid"
        }
    ],
    "3822060": [
        {
            "dateadded": "2026-04-15 04:10:08 UTC",
            "url": "http://42.224.64.20:43097/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:34:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822060/",
            "reporter": "adliwahid"
        }
    ],
    "3822054": [
        {
            "dateadded": "2026-04-15 04:10:07 UTC",
            "url": "http://182.127.86.10:57739/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822054/",
            "reporter": "adliwahid"
        }
    ],
    "3822053": [
        {
            "dateadded": "2026-04-15 04:10:06 UTC",
            "url": "http://91.225.163.226:39631/i",
            "url_status": "offline",
            "last_online": "2026-04-20 06:30:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822053/",
            "reporter": "adliwahid"
        }
    ],
    "3822052": [
        {
            "dateadded": "2026-04-15 04:09:21 UTC",
            "url": "http://27.207.140.19:58527/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822052/",
            "reporter": "adliwahid"
        }
    ],
    "3822051": [
        {
            "dateadded": "2026-04-15 04:09:15 UTC",
            "url": "http://153.37.227.89:42330/.i",
            "url_status": "online",
            "last_online": "2026-04-27 13:51:45 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822051/",
            "reporter": "adliwahid"
        }
    ],
    "3822045": [
        {
            "dateadded": "2026-04-15 04:09:11 UTC",
            "url": "http://115.63.10.205:56570/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:48:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822045/",
            "reporter": "adliwahid"
        }
    ],
    "3822046": [
        {
            "dateadded": "2026-04-15 04:09:11 UTC",
            "url": "http://182.120.133.165:60833/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822046/",
            "reporter": "adliwahid"
        }
    ],
    "3822047": [
        {
            "dateadded": "2026-04-15 04:09:11 UTC",
            "url": "http://61.52.221.47:40876/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:27:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822047/",
            "reporter": "adliwahid"
        }
    ],
    "3822048": [
        {
            "dateadded": "2026-04-15 04:09:11 UTC",
            "url": "http://115.63.32.159:45654/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:00:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822048/",
            "reporter": "adliwahid"
        }
    ],
    "3822049": [
        {
            "dateadded": "2026-04-15 04:09:11 UTC",
            "url": "http://110.174.246.101:39962/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822049/",
            "reporter": "adliwahid"
        }
    ],
    "3822050": [
        {
            "dateadded": "2026-04-15 04:09:11 UTC",
            "url": "https://help5.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822050/",
            "reporter": "anonymous"
        }
    ],
    "3822033": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://27.215.41.189:49085/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 04:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822033/",
            "reporter": "adliwahid"
        }
    ],
    "3822034": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://115.63.204.71:34994/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:26:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822034/",
            "reporter": "adliwahid"
        }
    ],
    "3822035": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://182.116.32.195:34932/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:55:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822035/",
            "reporter": "adliwahid"
        }
    ],
    "3822036": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://163.142.95.127:60780/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:41:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822036/",
            "reporter": "adliwahid"
        }
    ],
    "3822037": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://124.130.121.88:46941/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:58:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822037/",
            "reporter": "adliwahid"
        }
    ],
    "3822038": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://183.214.149.164:39548/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:21:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822038/",
            "reporter": "adliwahid"
        }
    ],
    "3822039": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://115.55.243.240:47765/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:38:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822039/",
            "reporter": "adliwahid"
        }
    ],
    "3822040": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://182.116.120.39:54836/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:40:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822040/",
            "reporter": "adliwahid"
        }
    ],
    "3822041": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://61.52.221.47:40876/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:17:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822041/",
            "reporter": "adliwahid"
        }
    ],
    "3822042": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://37.54.29.225:37047/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822042/",
            "reporter": "adliwahid"
        }
    ],
    "3822043": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://123.173.90.30:52537/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:43:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822043/",
            "reporter": "adliwahid"
        }
    ],
    "3822044": [
        {
            "dateadded": "2026-04-15 04:09:10 UTC",
            "url": "http://27.213.219.78:43957/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 18:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822044/",
            "reporter": "adliwahid"
        }
    ],
    "3822032": [
        {
            "dateadded": "2026-04-15 04:09:09 UTC",
            "url": "http://219.157.61.70:45049/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822032/",
            "reporter": "adliwahid"
        }
    ],
    "3822031": [
        {
            "dateadded": "2026-04-15 04:09:06 UTC",
            "url": "http://193.187.101.68:55242/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822031/",
            "reporter": "adliwahid"
        }
    ],
    "3822030": [
        {
            "dateadded": "2026-04-15 04:08:39 UTC",
            "url": "http://112.254.8.106:47404/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822030/",
            "reporter": "adliwahid"
        }
    ],
    "3822029": [
        {
            "dateadded": "2026-04-15 04:08:28 UTC",
            "url": "http://112.242.135.153:35729/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:11:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822029/",
            "reporter": "geenensp"
        }
    ],
    "3822028": [
        {
            "dateadded": "2026-04-15 04:08:19 UTC",
            "url": "http://42.176.250.75:58181/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:32:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822028/",
            "reporter": "adliwahid"
        }
    ],
    "3822021": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://219.154.175.25:45537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822021/",
            "reporter": "adliwahid"
        }
    ],
    "3822022": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://115.56.128.196:34465/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822022/",
            "reporter": "adliwahid"
        }
    ],
    "3822023": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://115.55.57.41:51491/i",
            "url_status": "offline",
            "last_online": "2026-04-15 21:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822023/",
            "reporter": "adliwahid"
        }
    ],
    "3822024": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://221.15.184.224:45987/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:20:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822024/",
            "reporter": "adliwahid"
        }
    ],
    "3822025": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://221.15.184.224:45987/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:58:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822025/",
            "reporter": "adliwahid"
        }
    ],
    "3822026": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://115.56.151.75:34148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822026/",
            "reporter": "adliwahid"
        }
    ],
    "3822027": [
        {
            "dateadded": "2026-04-15 04:08:12 UTC",
            "url": "http://123.12.189.104:34917/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:22:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822027/",
            "reporter": "adliwahid"
        }
    ],
    "3821999": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://182.116.120.39:54836/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:44:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821999/",
            "reporter": "adliwahid"
        }
    ],
    "3822000": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://125.45.65.217:39176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822000/",
            "reporter": "adliwahid"
        }
    ],
    "3822001": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://110.36.86.83:52355/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822001/",
            "reporter": "adliwahid"
        }
    ],
    "3822002": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://36.249.194.99:58270/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822002/",
            "reporter": "adliwahid"
        }
    ],
    "3822003": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://60.18.26.173:45402/i",
            "url_status": "offline",
            "last_online": "2026-04-19 01:22:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822003/",
            "reporter": "adliwahid"
        }
    ],
    "3822004": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://110.37.78.200:41934/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822004/",
            "reporter": "adliwahid"
        }
    ],
    "3822005": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://37.52.255.21:54061/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822005/",
            "reporter": "adliwahid"
        }
    ],
    "3822006": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://125.42.121.11:48099/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:29:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822006/",
            "reporter": "adliwahid"
        }
    ],
    "3822007": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://45.177.33.169:59174/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822007/",
            "reporter": "adliwahid"
        }
    ],
    "3822008": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://42.7.240.132:41606/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:08:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822008/",
            "reporter": "adliwahid"
        }
    ],
    "3822009": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://119.114.134.146:36487/i",
            "url_status": "offline",
            "last_online": "2026-04-22 05:45:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822009/",
            "reporter": "adliwahid"
        }
    ],
    "3822010": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://42.85.209.249:54465/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:06:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822010/",
            "reporter": "adliwahid"
        }
    ],
    "3822011": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://27.215.41.189:49085/i",
            "url_status": "offline",
            "last_online": "2026-04-16 04:59:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822011/",
            "reporter": "adliwahid"
        }
    ],
    "3822012": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://183.48.166.162:54022/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822012/",
            "reporter": "adliwahid"
        }
    ],
    "3822013": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://113.138.135.65:60830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 10:26:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822013/",
            "reporter": "adliwahid"
        }
    ],
    "3822014": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://113.233.232.44:60693/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:18:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822014/",
            "reporter": "adliwahid"
        }
    ],
    "3822015": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://27.220.241.79:40570/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822015/",
            "reporter": "adliwahid"
        }
    ],
    "3822016": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://124.131.128.182:53186/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822016/",
            "reporter": "adliwahid"
        }
    ],
    "3822017": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://36.69.92.51:37658/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:30:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822017/",
            "reporter": "adliwahid"
        }
    ],
    "3822018": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://221.15.11.150:45003/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:28:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822018/",
            "reporter": "adliwahid"
        }
    ],
    "3822019": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://115.56.151.75:34148/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:18:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822019/",
            "reporter": "adliwahid"
        }
    ],
    "3822020": [
        {
            "dateadded": "2026-04-15 04:08:11 UTC",
            "url": "http://182.127.86.10:57739/i",
            "url_status": "offline",
            "last_online": "2026-04-16 12:26:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3822020/",
            "reporter": "adliwahid"
        }
    ],
    "3821996": [
        {
            "dateadded": "2026-04-15 04:08:10 UTC",
            "url": "http://46.163.134.250:55499/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:32:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821996/",
            "reporter": "adliwahid"
        }
    ],
    "3821997": [
        {
            "dateadded": "2026-04-15 04:08:10 UTC",
            "url": "http://46.10.44.142:64613/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821997/",
            "reporter": "adliwahid"
        }
    ],
    "3821998": [
        {
            "dateadded": "2026-04-15 04:08:10 UTC",
            "url": "http://108.170.136.155:54968/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:31:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821998/",
            "reporter": "adliwahid"
        }
    ],
    "3821995": [
        {
            "dateadded": "2026-04-15 04:07:15 UTC",
            "url": "http://110.139.35.87:49199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:27:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821995/",
            "reporter": "geenensp"
        }
    ],
    "3821994": [
        {
            "dateadded": "2026-04-15 04:06:07 UTC",
            "url": "https://item4.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 04:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821994/",
            "reporter": "anonymous"
        }
    ],
    "3821993": [
        {
            "dateadded": "2026-04-15 04:00:10 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-16 17:20:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821993/",
            "reporter": "botnetkiller"
        }
    ],
    "3821992": [
        {
            "dateadded": "2026-04-15 03:58:16 UTC",
            "url": "http://46.101.46.29/Sassy-Cats.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821992/",
            "reporter": "botnetkiller"
        }
    ],
    "3821989": [
        {
            "dateadded": "2026-04-15 03:56:26 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821989/",
            "reporter": "botnetkiller"
        }
    ],
    "3821990": [
        {
            "dateadded": "2026-04-15 03:56:26 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821990/",
            "reporter": "botnetkiller"
        }
    ],
    "3821991": [
        {
            "dateadded": "2026-04-15 03:56:26 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-16 17:16:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821991/",
            "reporter": "botnetkiller"
        }
    ],
    "3821988": [
        {
            "dateadded": "2026-04-15 03:56:22 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-16 10:18:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821988/",
            "reporter": "botnetkiller"
        }
    ],
    "3821987": [
        {
            "dateadded": "2026-04-15 03:56:20 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.sparc",
            "url_status": "offline",
            "last_online": "2026-04-16 17:13:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821987/",
            "reporter": "botnetkiller"
        }
    ],
    "3821985": [
        {
            "dateadded": "2026-04-15 03:56:19 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.mips",
            "url_status": "offline",
            "last_online": "2026-04-16 17:02:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821985/",
            "reporter": "botnetkiller"
        }
    ],
    "3821986": [
        {
            "dateadded": "2026-04-15 03:56:19 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821986/",
            "reporter": "botnetkiller"
        }
    ],
    "3821982": [
        {
            "dateadded": "2026-04-15 03:56:18 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-16 16:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821982/",
            "reporter": "botnetkiller"
        }
    ],
    "3821983": [
        {
            "dateadded": "2026-04-15 03:56:18 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-16 11:12:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821983/",
            "reporter": "botnetkiller"
        }
    ],
    "3821984": [
        {
            "dateadded": "2026-04-15 03:56:18 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.i486",
            "url_status": "offline",
            "last_online": "2026-04-16 11:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821984/",
            "reporter": "botnetkiller"
        }
    ],
    "3821979": [
        {
            "dateadded": "2026-04-15 03:56:17 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821979/",
            "reporter": "botnetkiller"
        }
    ],
    "3821980": [
        {
            "dateadded": "2026-04-15 03:56:17 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821980/",
            "reporter": "botnetkiller"
        }
    ],
    "3821981": [
        {
            "dateadded": "2026-04-15 03:56:17 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.mipsel",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821981/",
            "reporter": "botnetkiller"
        }
    ],
    "3821969": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-16 10:18:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821969/",
            "reporter": "botnetkiller"
        }
    ],
    "3821970": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.armv5l",
            "url_status": "offline",
            "last_online": "2026-04-16 16:28:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821970/",
            "reporter": "botnetkiller"
        }
    ],
    "3821971": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.sh4",
            "url_status": "offline",
            "last_online": "2026-04-16 16:28:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821971/",
            "reporter": "botnetkiller"
        }
    ],
    "3821972": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-16 16:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821972/",
            "reporter": "botnetkiller"
        }
    ],
    "3821973": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy.aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821973/",
            "reporter": "botnetkiller"
        }
    ],
    "3821974": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.armv7l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821974/",
            "reporter": "botnetkiller"
        }
    ],
    "3821975": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.armv5l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821975/",
            "reporter": "botnetkiller"
        }
    ],
    "3821976": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821976/",
            "reporter": "botnetkiller"
        }
    ],
    "3821977": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.m68k",
            "url_status": "offline",
            "last_online": "2026-04-16 16:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821977/",
            "reporter": "botnetkiller"
        }
    ],
    "3821978": [
        {
            "dateadded": "2026-04-15 03:56:16 UTC",
            "url": "http://46.101.46.29/.Sassy/.Sassy.arc",
            "url_status": "offline",
            "last_online": "2026-04-16 16:31:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821978/",
            "reporter": "botnetkiller"
        }
    ],
    "3821964": [
        {
            "dateadded": "2026-04-15 03:56:15 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821964/",
            "reporter": "botnetkiller"
        }
    ],
    "3821965": [
        {
            "dateadded": "2026-04-15 03:56:15 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821965/",
            "reporter": "botnetkiller"
        }
    ],
    "3821966": [
        {
            "dateadded": "2026-04-15 03:56:15 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821966/",
            "reporter": "botnetkiller"
        }
    ],
    "3821967": [
        {
            "dateadded": "2026-04-15 03:56:15 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821967/",
            "reporter": "botnetkiller"
        }
    ],
    "3821968": [
        {
            "dateadded": "2026-04-15 03:56:15 UTC",
            "url": "http://46.101.46.29/.Sassy/Sassy.powerpc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821968/",
            "reporter": "botnetkiller"
        }
    ],
    "3821963": [
        {
            "dateadded": "2026-04-15 03:56:10 UTC",
            "url": "https://media3.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-20 06:48:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport",
                "ScarfaceStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821963/",
            "reporter": "anonymous"
        }
    ],
    "3821962": [
        {
            "dateadded": "2026-04-15 03:54:09 UTC",
            "url": "http://45.248.33.200:42318/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:15:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821962/",
            "reporter": "geenensp"
        }
    ],
    "3821961": [
        {
            "dateadded": "2026-04-15 03:52:09 UTC",
            "url": "http://219.155.250.221:53608/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:27:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821961/",
            "reporter": "geenensp"
        }
    ],
    "3821960": [
        {
            "dateadded": "2026-04-15 03:51:11 UTC",
            "url": "https://guest2.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821960/",
            "reporter": "anonymous"
        }
    ],
    "3821959": [
        {
            "dateadded": "2026-04-15 03:45:08 UTC",
            "url": "https://shop1.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821959/",
            "reporter": "anonymous"
        }
    ],
    "3821958": [
        {
            "dateadded": "2026-04-15 03:44:14 UTC",
            "url": "http://119.116.149.172:56691/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:26:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821958/",
            "reporter": "geenensp"
        }
    ],
    "3821957": [
        {
            "dateadded": "2026-04-15 03:41:05 UTC",
            "url": "http://24.54.95.49:51162/i",
            "url_status": "offline",
            "last_online": "2026-04-17 00:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821957/",
            "reporter": "geenensp"
        }
    ],
    "3821956": [
        {
            "dateadded": "2026-04-15 03:39:10 UTC",
            "url": "https://gate6-link.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-17 00:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821956/",
            "reporter": "anonymous"
        }
    ],
    "3821955": [
        {
            "dateadded": "2026-04-15 03:38:15 UTC",
            "url": "http://222.140.236.167:60113/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:28:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821955/",
            "reporter": "geenensp"
        }
    ],
    "3821954": [
        {
            "dateadded": "2026-04-15 03:34:11 UTC",
            "url": "https://push5-sync.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821954/",
            "reporter": "anonymous"
        }
    ],
    "3821953": [
        {
            "dateadded": "2026-04-15 03:28:06 UTC",
            "url": "https://file4-path.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821953/",
            "reporter": "anonymous"
        }
    ],
    "3821952": [
        {
            "dateadded": "2026-04-15 03:22:07 UTC",
            "url": "https://sort3-item.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821952/",
            "reporter": "anonymous"
        }
    ],
    "3821951": [
        {
            "dateadded": "2026-04-15 03:21:16 UTC",
            "url": "http://221.3.70.107:49607/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:43:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821951/",
            "reporter": "geenensp"
        }
    ],
    "3821950": [
        {
            "dateadded": "2026-04-15 03:21:15 UTC",
            "url": "http://117.63.140.218:51956/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:55:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821950/",
            "reporter": "geenensp"
        }
    ],
    "3821949": [
        {
            "dateadded": "2026-04-15 03:19:15 UTC",
            "url": "http://182.126.201.173:54017/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:41:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821949/",
            "reporter": "geenensp"
        }
    ],
    "3821948": [
        {
            "dateadded": "2026-04-15 03:17:17 UTC",
            "url": "http://222.140.236.167:60113/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:27:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821948/",
            "reporter": "geenensp"
        }
    ],
    "3821947": [
        {
            "dateadded": "2026-04-15 03:17:10 UTC",
            "url": "https://view2-data.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821947/",
            "reporter": "anonymous"
        }
    ],
    "3821946": [
        {
            "dateadded": "2026-04-15 03:12:11 UTC",
            "url": "http://176.65.139.64/x2gv5tlkca",
            "url_status": "offline",
            "last_online": "2026-04-17 11:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "64-bit",
                "elf",
                "x86-64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821946/",
            "reporter": "geenensp"
        }
    ],
    "3821945": [
        {
            "dateadded": "2026-04-15 03:11:25 UTC",
            "url": "http://119.116.149.172:56691/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:56:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821945/",
            "reporter": "geenensp"
        }
    ],
    "3821944": [
        {
            "dateadded": "2026-04-15 03:11:06 UTC",
            "url": "https://flow1-open.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821944/",
            "reporter": "anonymous"
        }
    ],
    "3821943": [
        {
            "dateadded": "2026-04-15 03:05:12 UTC",
            "url": "https://drop6-main.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821943/",
            "reporter": "anonymous"
        }
    ],
    "3821942": [
        {
            "dateadded": "2026-04-15 03:04:11 UTC",
            "url": "http://118.253.80.93:48921/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821942/",
            "reporter": "geenensp"
        }
    ],
    "3821941": [
        {
            "dateadded": "2026-04-15 03:00:11 UTC",
            "url": "https://pack5-unit.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 03:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821941/",
            "reporter": "anonymous"
        }
    ],
    "3821940": [
        {
            "dateadded": "2026-04-15 02:54:05 UTC",
            "url": "https://load4-byte.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:54:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821940/",
            "reporter": "anonymous"
        }
    ],
    "3821939": [
        {
            "dateadded": "2026-04-15 02:51:14 UTC",
            "url": "http://117.63.140.218:51956/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:34:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821939/",
            "reporter": "geenensp"
        }
    ],
    "3821938": [
        {
            "dateadded": "2026-04-15 02:49:07 UTC",
            "url": "https://park3-area.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821938/",
            "reporter": "anonymous"
        }
    ],
    "3821937": [
        {
            "dateadded": "2026-04-15 02:47:06 UTC",
            "url": "http://202.110.17.152:44361/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821937/",
            "reporter": "geenensp"
        }
    ],
    "3821936": [
        {
            "dateadded": "2026-04-15 02:43:07 UTC",
            "url": "https://ship2-move.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821936/",
            "reporter": "anonymous"
        }
    ],
    "3821935": [
        {
            "dateadded": "2026-04-15 02:38:07 UTC",
            "url": "https://trip1-road.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821935/",
            "reporter": "anonymous"
        }
    ],
    "3821934": [
        {
            "dateadded": "2026-04-15 02:32:09 UTC",
            "url": "https://call6-root.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821934/",
            "reporter": "anonymous"
        }
    ],
    "3821933": [
        {
            "dateadded": "2026-04-15 02:31:09 UTC",
            "url": "http://42.234.232.239:37505/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:00:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821933/",
            "reporter": "geenensp"
        }
    ],
    "3821932": [
        {
            "dateadded": "2026-04-15 02:30:16 UTC",
            "url": "http://118.253.80.93:48921/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821932/",
            "reporter": "geenensp"
        }
    ],
    "3821931": [
        {
            "dateadded": "2026-04-15 02:27:09 UTC",
            "url": "http://182.116.54.58:38302/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:58:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821931/",
            "reporter": "geenensp"
        }
    ],
    "3821930": [
        {
            "dateadded": "2026-04-15 02:27:07 UTC",
            "url": "https://mail5-send.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821930/",
            "reporter": "anonymous"
        }
    ],
    "3821929": [
        {
            "dateadded": "2026-04-15 02:22:15 UTC",
            "url": "http://42.234.232.239:37505/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821929/",
            "reporter": "geenensp"
        }
    ],
    "3821928": [
        {
            "dateadded": "2026-04-15 02:21:06 UTC",
            "url": "https://sign4-icon.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:21:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821928/",
            "reporter": "anonymous"
        }
    ],
    "3821927": [
        {
            "dateadded": "2026-04-15 02:20:06 UTC",
            "url": "http://85.239.147.6/files/7556497175/QKLiJhU.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821927/",
            "reporter": "Bitsight"
        }
    ],
    "3821926": [
        {
            "dateadded": "2026-04-15 02:15:09 UTC",
            "url": "https://note3-base.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821926/",
            "reporter": "anonymous"
        }
    ],
    "3821925": [
        {
            "dateadded": "2026-04-15 02:12:11 UTC",
            "url": "http://222.127.226.53:49648/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821925/",
            "reporter": "geenensp"
        }
    ],
    "3821924": [
        {
            "dateadded": "2026-04-15 02:10:10 UTC",
            "url": "https://card2-fast.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821924/",
            "reporter": "anonymous"
        }
    ],
    "3821923": [
        {
            "dateadded": "2026-04-15 02:07:14 UTC",
            "url": "http://59.88.232.3:36413/Mozi.a",
            "url_status": "offline",
            "last_online": "2026-04-15 02:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821923/",
            "reporter": "botnetkiller"
        }
    ],
    "3821922": [
        {
            "dateadded": "2026-04-15 02:06:06 UTC",
            "url": "http://182.126.201.173:54017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:51:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821922/",
            "reporter": "geenensp"
        }
    ],
    "3821921": [
        {
            "dateadded": "2026-04-15 02:03:12 UTC",
            "url": "http://182.116.54.58:38302/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:45:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821921/",
            "reporter": "geenensp"
        }
    ],
    "3821920": [
        {
            "dateadded": "2026-04-15 02:03:08 UTC",
            "url": "https://link1-wire.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821920/",
            "reporter": "anonymous"
        }
    ],
    "3821919": [
        {
            "dateadded": "2026-04-15 02:00:08 UTC",
            "url": "https://base6-door.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 02:00:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821919/",
            "reporter": "anonymous"
        }
    ],
    "3821918": [
        {
            "dateadded": "2026-04-15 01:57:11 UTC",
            "url": "https://mark5-logo.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:57:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821918/",
            "reporter": "anonymous"
        }
    ],
    "3821917": [
        {
            "dateadded": "2026-04-15 01:53:12 UTC",
            "url": "http://219.154.175.32:46120/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 07:52:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821917/",
            "reporter": "geenensp"
        }
    ],
    "3821916": [
        {
            "dateadded": "2026-04-15 01:51:05 UTC",
            "url": "http://182.124.141.151:57623/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 01:51:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821916/",
            "reporter": "geenensp"
        }
    ],
    "3821915": [
        {
            "dateadded": "2026-04-15 01:48:16 UTC",
            "url": "http://117.200.218.64:56531/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821915/",
            "reporter": "geenensp"
        }
    ],
    "3821914": [
        {
            "dateadded": "2026-04-15 01:46:13 UTC",
            "url": "https://site4-info.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821914/",
            "reporter": "anonymous"
        }
    ],
    "3821913": [
        {
            "dateadded": "2026-04-15 01:41:08 UTC",
            "url": "https://zone3-view.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821913/",
            "reporter": "anonymous"
        }
    ],
    "3821912": [
        {
            "dateadded": "2026-04-15 01:36:13 UTC",
            "url": "https://area2-find.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821912/",
            "reporter": "anonymous"
        }
    ],
    "3821911": [
        {
            "dateadded": "2026-04-15 01:29:07 UTC",
            "url": "https://city1-spot.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821911/",
            "reporter": "anonymous"
        }
    ],
    "3821910": [
        {
            "dateadded": "2026-04-15 01:28:15 UTC",
            "url": "http://125.47.84.143:50168/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821910/",
            "reporter": "geenensp"
        }
    ],
    "3821909": [
        {
            "dateadded": "2026-04-15 01:27:15 UTC",
            "url": "http://39.87.30.56:38233/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:46:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821909/",
            "reporter": "geenensp"
        }
    ],
    "3821908": [
        {
            "dateadded": "2026-04-15 01:26:13 UTC",
            "url": "http://115.55.243.240:47765/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 07:44:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821908/",
            "reporter": "geenensp"
        }
    ],
    "3821907": [
        {
            "dateadded": "2026-04-15 01:24:15 UTC",
            "url": "http://117.200.218.64:56531/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:31:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821907/",
            "reporter": "geenensp"
        }
    ],
    "3821906": [
        {
            "dateadded": "2026-04-15 01:24:08 UTC",
            "url": "https://work6-host.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821906/",
            "reporter": "anonymous"
        }
    ],
    "3821905": [
        {
            "dateadded": "2026-04-15 01:22:12 UTC",
            "url": "http://42.228.235.42:47732/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821905/",
            "reporter": "geenensp"
        }
    ],
    "3821904": [
        {
            "dateadded": "2026-04-15 01:20:14 UTC",
            "url": "http://42.228.235.42:47732/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821904/",
            "reporter": "geenensp"
        }
    ],
    "3821903": [
        {
            "dateadded": "2026-04-15 01:18:08 UTC",
            "url": "https://goal5-list.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821903/",
            "reporter": "anonymous"
        }
    ],
    "3821902": [
        {
            "dateadded": "2026-04-15 01:13:12 UTC",
            "url": "https://term4-text.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821902/",
            "reporter": "anonymous"
        }
    ],
    "3821901": [
        {
            "dateadded": "2026-04-15 01:08:06 UTC",
            "url": "https://plan3-item.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821901/",
            "reporter": "anonymous"
        }
    ],
    "3821900": [
        {
            "dateadded": "2026-04-15 01:03:10 UTC",
            "url": "http://175.166.118.42:59890/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:38:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821900/",
            "reporter": "geenensp"
        }
    ],
    "3821899": [
        {
            "dateadded": "2026-04-15 01:02:09 UTC",
            "url": "https://step2-flow.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 01:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821899/",
            "reporter": "anonymous"
        }
    ],
    "3821898": [
        {
            "dateadded": "2026-04-15 00:56:10 UTC",
            "url": "https://task1-core.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821898/",
            "reporter": "anonymous"
        }
    ],
    "3821897": [
        {
            "dateadded": "2026-04-15 00:50:09 UTC",
            "url": "https://cover6-link.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821897/",
            "reporter": "anonymous"
        }
    ],
    "3821896": [
        {
            "dateadded": "2026-04-15 00:47:10 UTC",
            "url": "http://115.203.169.15:59482/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821896/",
            "reporter": "geenensp"
        }
    ],
    "3821895": [
        {
            "dateadded": "2026-04-15 00:46:06 UTC",
            "url": "http://27.215.86.214:42488/i",
            "url_status": "offline",
            "last_online": "2026-04-15 00:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821895/",
            "reporter": "geenensp"
        }
    ],
    "3821894": [
        {
            "dateadded": "2026-04-15 00:45:08 UTC",
            "url": "https://sheet5-view.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821894/",
            "reporter": "anonymous"
        }
    ],
    "3821893": [
        {
            "dateadded": "2026-04-15 00:40:08 UTC",
            "url": "https://table4-data.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821893/",
            "reporter": "anonymous"
        }
    ],
    "3821892": [
        {
            "dateadded": "2026-04-15 00:38:13 UTC",
            "url": "http://27.215.86.214:42488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 00:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821892/",
            "reporter": "geenensp"
        }
    ],
    "3821891": [
        {
            "dateadded": "2026-04-15 00:36:15 UTC",
            "url": "http://103.245.195.38:52709/i",
            "url_status": "offline",
            "last_online": "2026-04-15 00:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821891/",
            "reporter": "geenensp"
        }
    ],
    "3821890": [
        {
            "dateadded": "2026-04-15 00:36:09 UTC",
            "url": "https://topic3-base.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821890/",
            "reporter": "anonymous"
        }
    ],
    "3821889": [
        {
            "dateadded": "2026-04-15 00:33:08 UTC",
            "url": "http://124.94.168.196:55366/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821889/",
            "reporter": "geenensp"
        }
    ],
    "3821888": [
        {
            "dateadded": "2026-04-15 00:32:06 UTC",
            "url": "https://event2-log.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821888/",
            "reporter": "anonymous"
        }
    ],
    "3821887": [
        {
            "dateadded": "2026-04-15 00:31:22 UTC",
            "url": "http://175.166.118.42:59890/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821887/",
            "reporter": "geenensp"
        }
    ],
    "3821886": [
        {
            "dateadded": "2026-04-15 00:22:19 UTC",
            "url": "http://115.203.169.15:59482/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:29:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821886/",
            "reporter": "geenensp"
        }
    ],
    "3821885": [
        {
            "dateadded": "2026-04-15 00:22:10 UTC",
            "url": "https://news1-wire.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821885/",
            "reporter": "anonymous"
        }
    ],
    "3821884": [
        {
            "dateadded": "2026-04-15 00:17:09 UTC",
            "url": "https://front6-gate.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821884/",
            "reporter": "anonymous"
        }
    ],
    "3821883": [
        {
            "dateadded": "2026-04-15 00:14:07 UTC",
            "url": "https://piece5-load.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821883/",
            "reporter": "anonymous"
        }
    ],
    "3821882": [
        {
            "dateadded": "2026-04-15 00:10:10 UTC",
            "url": "https://layer4-show.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821882/",
            "reporter": "anonymous"
        }
    ],
    "3821881": [
        {
            "dateadded": "2026-04-15 00:02:16 UTC",
            "url": "http://123.11.183.105:45907/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 14:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821881/",
            "reporter": "geenensp"
        }
    ],
    "3821880": [
        {
            "dateadded": "2026-04-15 00:01:09 UTC",
            "url": "https://frame3-work.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-15 00:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821880/",
            "reporter": "anonymous"
        }
    ],
    "3821879": [
        {
            "dateadded": "2026-04-14 23:54:17 UTC",
            "url": "http://61.53.102.136:57042/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821879/",
            "reporter": "geenensp"
        }
    ],
    "3821878": [
        {
            "dateadded": "2026-04-14 23:54:16 UTC",
            "url": "http://211.158.212.205:54405/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 18:04:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821878/",
            "reporter": "geenensp"
        }
    ],
    "3821877": [
        {
            "dateadded": "2026-04-14 23:54:09 UTC",
            "url": "https://block2-text.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821877/",
            "reporter": "anonymous"
        }
    ],
    "3821876": [
        {
            "dateadded": "2026-04-14 23:49:12 UTC",
            "url": "http://42.53.245.189:49060/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821876/",
            "reporter": "geenensp"
        }
    ],
    "3821875": [
        {
            "dateadded": "2026-04-14 23:48:13 UTC",
            "url": "https://place6-hub.urban-motion-app.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821875/",
            "reporter": "anonymous"
        }
    ],
    "3821874": [
        {
            "dateadded": "2026-04-14 23:43:22 UTC",
            "url": "http://216.129.184.213:49620/i",
            "url_status": "offline",
            "last_online": "2026-04-17 23:00:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821874/",
            "reporter": "geenensp"
        }
    ],
    "3821873": [
        {
            "dateadded": "2026-04-14 23:43:09 UTC",
            "url": "https://cycle5-time.urban-motion-app.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821873/",
            "reporter": "anonymous"
        }
    ],
    "3821872": [
        {
            "dateadded": "2026-04-14 23:37:24 UTC",
            "url": "http://216.129.184.213:49620/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821872/",
            "reporter": "geenensp"
        }
    ],
    "3821871": [
        {
            "dateadded": "2026-04-14 23:37:14 UTC",
            "url": "https://store4-data.urban-motion-app.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821871/",
            "reporter": "anonymous"
        }
    ],
    "3821870": [
        {
            "dateadded": "2026-04-14 23:37:07 UTC",
            "url": "http://85.239.147.6/files/8424601462/PU9pBUI.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821870/",
            "reporter": "c2hunter"
        }
    ],
    "3821869": [
        {
            "dateadded": "2026-04-14 23:30:22 UTC",
            "url": "http://60.215.246.182:34035/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821869/",
            "reporter": "geenensp"
        }
    ],
    "3821868": [
        {
            "dateadded": "2026-04-14 23:30:15 UTC",
            "url": "https://track3-info.urban-motion-app.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821868/",
            "reporter": "anonymous"
        }
    ],
    "3821867": [
        {
            "dateadded": "2026-04-14 23:25:13 UTC",
            "url": "https://point2-map.urban-motion-app.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821867/",
            "reporter": "anonymous"
        }
    ],
    "3821866": [
        {
            "dateadded": "2026-04-14 23:20:13 UTC",
            "url": "https://route1-path.urban-motion-app.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821866/",
            "reporter": "anonymous"
        }
    ],
    "3821865": [
        {
            "dateadded": "2026-04-14 23:17:16 UTC",
            "url": "http://175.43.135.133:38267/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821865/",
            "reporter": "geenensp"
        }
    ],
    "3821864": [
        {
            "dateadded": "2026-04-14 23:14:10 UTC",
            "url": "https://stage6-main.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821864/",
            "reporter": "anonymous"
        }
    ],
    "3821863": [
        {
            "dateadded": "2026-04-14 23:09:15 UTC",
            "url": "http://60.215.246.182:34035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 12:02:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821863/",
            "reporter": "geenensp"
        }
    ],
    "3821862": [
        {
            "dateadded": "2026-04-14 23:08:12 UTC",
            "url": "https://brand5-post.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821862/",
            "reporter": "anonymous"
        }
    ],
    "3821861": [
        {
            "dateadded": "2026-04-14 23:03:13 UTC",
            "url": "https://total4-view.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 23:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821861/",
            "reporter": "anonymous"
        }
    ],
    "3821860": [
        {
            "dateadded": "2026-04-14 22:58:12 UTC",
            "url": "https://brief3-form.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821860/",
            "reporter": "anonymous"
        }
    ],
    "3821859": [
        {
            "dateadded": "2026-04-14 22:52:12 UTC",
            "url": "https://stock2-item.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821859/",
            "reporter": "anonymous"
        }
    ],
    "3821858": [
        {
            "dateadded": "2026-04-14 22:49:43 UTC",
            "url": "http://110.39.226.242:37872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821858/",
            "reporter": "geenensp"
        }
    ],
    "3821857": [
        {
            "dateadded": "2026-04-14 22:48:11 UTC",
            "url": "http://105.186.202.159:55701/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821857/",
            "reporter": "geenensp"
        }
    ],
    "3821856": [
        {
            "dateadded": "2026-04-14 22:47:08 UTC",
            "url": "https://order1-list.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821856/",
            "reporter": "anonymous"
        }
    ],
    "3821855": [
        {
            "dateadded": "2026-04-14 22:45:15 UTC",
            "url": "https://entry6-site.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821855/",
            "reporter": "anonymous"
        }
    ],
    "3821854": [
        {
            "dateadded": "2026-04-14 22:39:24 UTC",
            "url": "http://115.55.53.133:33306/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:21:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821854/",
            "reporter": "geenensp"
        }
    ],
    "3821853": [
        {
            "dateadded": "2026-04-14 22:35:09 UTC",
            "url": "https://staff5-help.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821853/",
            "reporter": "anonymous"
        }
    ],
    "3821852": [
        {
            "dateadded": "2026-04-14 22:34:20 UTC",
            "url": "http://112.248.114.12:47154/i",
            "url_status": "offline",
            "last_online": "2026-04-16 21:04:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821852/",
            "reporter": "geenensp"
        }
    ],
    "3821851": [
        {
            "dateadded": "2026-04-14 22:30:12 UTC",
            "url": "https://media4-file.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821851/",
            "reporter": "anonymous"
        }
    ],
    "3821850": [
        {
            "dateadded": "2026-04-14 22:25:24 UTC",
            "url": "http://115.55.53.133:33306/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:56:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821850/",
            "reporter": "geenensp"
        }
    ],
    "3821849": [
        {
            "dateadded": "2026-04-14 22:24:12 UTC",
            "url": "http://119.166.39.137:51626/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821849/",
            "reporter": "geenensp"
        }
    ],
    "3821848": [
        {
            "dateadded": "2026-04-14 22:23:17 UTC",
            "url": "http://123.146.185.201:34707/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:02:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821848/",
            "reporter": "geenensp"
        }
    ],
    "3821847": [
        {
            "dateadded": "2026-04-14 22:23:10 UTC",
            "url": "https://index3-page.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821847/",
            "reporter": "anonymous"
        }
    ],
    "3821846": [
        {
            "dateadded": "2026-04-14 22:20:15 UTC",
            "url": "https://guest2-area.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821846/",
            "reporter": "anonymous"
        }
    ],
    "3821845": [
        {
            "dateadded": "2026-04-14 22:17:15 UTC",
            "url": "https://client1-zone.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 22:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821845/",
            "reporter": "anonymous"
        }
    ],
    "3821844": [
        {
            "dateadded": "2026-04-14 22:11:29 UTC",
            "url": "http://105.186.202.159:55701/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821844/",
            "reporter": "geenensp"
        }
    ],
    "3821843": [
        {
            "dateadded": "2026-04-14 22:06:16 UTC",
            "url": "http://202.1.26.13:37310/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:24:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821843/",
            "reporter": "geenensp"
        }
    ],
    "3821842": [
        {
            "dateadded": "2026-04-14 22:05:16 UTC",
            "url": "http://112.248.114.12:47154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:25:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821842/",
            "reporter": "geenensp"
        }
    ],
    "3821841": [
        {
            "dateadded": "2026-04-14 21:55:17 UTC",
            "url": "http://175.173.92.181:56204/i",
            "url_status": "offline",
            "last_online": "2026-04-20 15:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821841/",
            "reporter": "geenensp"
        }
    ],
    "3821840": [
        {
            "dateadded": "2026-04-14 21:50:19 UTC",
            "url": "http://70.31.230.2:36830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821840/",
            "reporter": "geenensp"
        }
    ],
    "3821839": [
        {
            "dateadded": "2026-04-14 21:49:15 UTC",
            "url": "http://125.115.221.243:45208/i",
            "url_status": "offline",
            "last_online": "2026-04-14 21:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821839/",
            "reporter": "geenensp"
        }
    ],
    "3821838": [
        {
            "dateadded": "2026-04-14 21:46:33 UTC",
            "url": "http://112.246.146.140:38106/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821838/",
            "reporter": "geenensp"
        }
    ],
    "3821837": [
        {
            "dateadded": "2026-04-14 21:38:17 UTC",
            "url": "http://103.245.195.38:52709/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821837/",
            "reporter": "geenensp"
        }
    ],
    "3821836": [
        {
            "dateadded": "2026-04-14 21:35:06 UTC",
            "url": "http://85.239.147.6/files/6730435251/fyXPxPD.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821836/",
            "reporter": "c2hunter"
        }
    ],
    "3821835": [
        {
            "dateadded": "2026-04-14 21:31:20 UTC",
            "url": "http://39.88.123.85:60363/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821835/",
            "reporter": "geenensp"
        }
    ],
    "3821834": [
        {
            "dateadded": "2026-04-14 21:29:15 UTC",
            "url": "http://112.239.102.182:56994/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821834/",
            "reporter": "geenensp"
        }
    ],
    "3821833": [
        {
            "dateadded": "2026-04-14 21:25:09 UTC",
            "url": "http://125.115.221.243:45208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821833/",
            "reporter": "geenensp"
        }
    ],
    "3821832": [
        {
            "dateadded": "2026-04-14 21:23:11 UTC",
            "url": "http://61.53.127.208:37041/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:12:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821832/",
            "reporter": "geenensp"
        }
    ],
    "3821831": [
        {
            "dateadded": "2026-04-14 21:12:34 UTC",
            "url": "http://112.239.102.182:56994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:17:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821831/",
            "reporter": "geenensp"
        }
    ],
    "3821830": [
        {
            "dateadded": "2026-04-14 20:50:19 UTC",
            "url": "http://221.14.122.107:40257/i",
            "url_status": "offline",
            "last_online": "2026-04-14 20:50:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821830/",
            "reporter": "geenensp"
        }
    ],
    "3821829": [
        {
            "dateadded": "2026-04-14 20:48:17 UTC",
            "url": "http://36.88.136.194:46589/i",
            "url_status": "offline",
            "last_online": "2026-04-14 20:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821829/",
            "reporter": "geenensp"
        }
    ],
    "3821828": [
        {
            "dateadded": "2026-04-14 20:46:17 UTC",
            "url": "http://175.169.115.9:40537/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821828/",
            "reporter": "geenensp"
        }
    ],
    "3821827": [
        {
            "dateadded": "2026-04-14 20:35:18 UTC",
            "url": "http://175.151.122.16:47418/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:12:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821827/",
            "reporter": "geenensp"
        }
    ],
    "3821826": [
        {
            "dateadded": "2026-04-14 20:24:15 UTC",
            "url": "http://36.88.136.194:46589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 20:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821826/",
            "reporter": "geenensp"
        }
    ],
    "3821825": [
        {
            "dateadded": "2026-04-14 20:22:40 UTC",
            "url": "http://101.43.204.194:8080/fscan",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821825/",
            "reporter": "botnetkiller"
        }
    ],
    "3821821": [
        {
            "dateadded": "2026-04-14 20:22:25 UTC",
            "url": "http://101.43.204.194:8080/lucifer.elf",
            "url_status": "online",
            "last_online": "2026-04-27 13:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ConnectBack",
                "elf",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821821/",
            "reporter": "botnetkiller"
        }
    ],
    "3821822": [
        {
            "dateadded": "2026-04-14 20:22:25 UTC",
            "url": "http://101.43.204.194:8080/g64.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:23 UTC",
            "threat": "malware_download",
            "tags": [
                "emotet",
                "exe",
                "heodo",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821822/",
            "reporter": "botnetkiller"
        }
    ],
    "3821823": [
        {
            "dateadded": "2026-04-14 20:22:25 UTC",
            "url": "http://221.14.122.107:40257/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 20:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821823/",
            "reporter": "geenensp"
        }
    ],
    "3821824": [
        {
            "dateadded": "2026-04-14 20:22:25 UTC",
            "url": "http://175.169.115.9:40537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821824/",
            "reporter": "geenensp"
        }
    ],
    "3821820": [
        {
            "dateadded": "2026-04-14 20:20:18 UTC",
            "url": "http://182.113.30.131:49373/i",
            "url_status": "offline",
            "last_online": "2026-04-16 04:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821820/",
            "reporter": "geenensp"
        }
    ],
    "3821819": [
        {
            "dateadded": "2026-04-14 20:19:04 UTC",
            "url": "http://85.239.147.6/files/7640890992/KU5Ujka.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821819/",
            "reporter": "c2hunter"
        }
    ],
    "3821818": [
        {
            "dateadded": "2026-04-14 20:06:22 UTC",
            "url": "http://115.50.24.21:51321/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:34:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821818/",
            "reporter": "geenensp"
        }
    ],
    "3821816": [
        {
            "dateadded": "2026-04-14 20:05:24 UTC",
            "url": "http://72.255.32.137:50270/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821816/",
            "reporter": "botnetkiller"
        }
    ],
    "3821817": [
        {
            "dateadded": "2026-04-14 20:05:24 UTC",
            "url": "http://srv1471368.hstgr.cloud/nullnet_bin_dir/nullnet_load.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821817/",
            "reporter": "botnetkiller"
        }
    ],
    "3821814": [
        {
            "dateadded": "2026-04-14 20:05:22 UTC",
            "url": "http://83.168.95.235/bins/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821814/",
            "reporter": "botnetkiller"
        }
    ],
    "3821815": [
        {
            "dateadded": "2026-04-14 20:05:22 UTC",
            "url": "http://187.77.144.216/nullnet_bin_dir/nullnet_load.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821815/",
            "reporter": "botnetkiller"
        }
    ],
    "3821813": [
        {
            "dateadded": "2026-04-14 20:05:08 UTC",
            "url": "http://42.235.49.88:57256/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821813/",
            "reporter": "botnetkiller"
        }
    ],
    "3821812": [
        {
            "dateadded": "2026-04-14 20:05:07 UTC",
            "url": "http://46.151.182.73/oxpdxnaob113/assets/js/qauask2ad8",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821812/",
            "reporter": "botnetkiller"
        }
    ],
    "3821811": [
        {
            "dateadded": "2026-04-14 20:04:33 UTC",
            "url": "http://103.160.197.181:33245/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821811/",
            "reporter": "botnetkiller"
        }
    ],
    "3821809": [
        {
            "dateadded": "2026-04-14 20:04:29 UTC",
            "url": "http://117.221.175.245:56912/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821809/",
            "reporter": "botnetkiller"
        }
    ],
    "3821810": [
        {
            "dateadded": "2026-04-14 20:04:29 UTC",
            "url": "http://static-103-160-197-181.unpl.net/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821810/",
            "reporter": "botnetkiller"
        }
    ],
    "3821808": [
        {
            "dateadded": "2026-04-14 20:04:27 UTC",
            "url": "http://103.213.112.118:44749/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821808/",
            "reporter": "botnetkiller"
        }
    ],
    "3821807": [
        {
            "dateadded": "2026-04-14 20:04:21 UTC",
            "url": "http://85.11.167.125//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821807/",
            "reporter": "botnetkiller"
        }
    ],
    "3821806": [
        {
            "dateadded": "2026-04-14 20:04:15 UTC",
            "url": "http://115.55.229.148:47991/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821806/",
            "reporter": "geenensp"
        }
    ],
    "3821804": [
        {
            "dateadded": "2026-04-14 20:04:06 UTC",
            "url": "http://171.25.158.78/bins/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821804/",
            "reporter": "botnetkiller"
        }
    ],
    "3821805": [
        {
            "dateadded": "2026-04-14 20:04:06 UTC",
            "url": "http://176.65.139.42/bins/arm64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821805/",
            "reporter": "botnetkiller"
        }
    ],
    "3821803": [
        {
            "dateadded": "2026-04-14 20:03:30 UTC",
            "url": "http://46.107.230.43.in-addr.arpa/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821803/",
            "reporter": "botnetkiller"
        }
    ],
    "3821802": [
        {
            "dateadded": "2026-04-14 20:03:27 UTC",
            "url": "http://ip-2422.proline.net.ua/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821802/",
            "reporter": "botnetkiller"
        }
    ],
    "3821792": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://45.141.26.129/lll",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821792/",
            "reporter": "botnetkiller"
        }
    ],
    "3821793": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://142.248.228.197/bins/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821793/",
            "reporter": "botnetkiller"
        }
    ],
    "3821794": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://120.61.15.113:53890/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821794/",
            "reporter": "botnetkiller"
        }
    ],
    "3821795": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://223.123.73.238:45921/Mozi.7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821795/",
            "reporter": "botnetkiller"
        }
    ],
    "3821796": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://179.43.175.148/sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821796/",
            "reporter": "botnetkiller"
        }
    ],
    "3821797": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://31.134.16.97:40061/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821797/",
            "reporter": "botnetkiller"
        }
    ],
    "3821798": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://85.11.167.125/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821798/",
            "reporter": "botnetkiller"
        }
    ],
    "3821799": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://85.11.167.125/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821799/",
            "reporter": "botnetkiller"
        }
    ],
    "3821800": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://85.11.167.125/arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821800/",
            "reporter": "botnetkiller"
        }
    ],
    "3821801": [
        {
            "dateadded": "2026-04-14 20:03:19 UTC",
            "url": "http://66.167.147.95:42460/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821801/",
            "reporter": "botnetkiller"
        }
    ],
    "3821791": [
        {
            "dateadded": "2026-04-14 20:03:14 UTC",
            "url": "http://202.141.43.153:35543/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821791/",
            "reporter": "botnetkiller"
        }
    ],
    "3821790": [
        {
            "dateadded": "2026-04-14 20:03:10 UTC",
            "url": "http://43.230.107.46:60321/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821790/",
            "reporter": "botnetkiller"
        }
    ],
    "3821788": [
        {
            "dateadded": "2026-04-14 20:03:04 UTC",
            "url": "http://176.65.139.20///arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821788/",
            "reporter": "botnetkiller"
        }
    ],
    "3821789": [
        {
            "dateadded": "2026-04-14 20:03:04 UTC",
            "url": "http://176.65.139.20/lll",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821789/",
            "reporter": "botnetkiller"
        }
    ],
    "3821787": [
        {
            "dateadded": "2026-04-14 20:02:20 UTC",
            "url": "http://58.74.6.14/bins/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821787/",
            "reporter": "botnetkiller"
        }
    ],
    "3821786": [
        {
            "dateadded": "2026-04-14 20:02:06 UTC",
            "url": "http://182.119.62.86:59313/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821786/",
            "reporter": "botnetkiller"
        }
    ],
    "3821783": [
        {
            "dateadded": "2026-04-14 20:02:05 UTC",
            "url": "http://91.218.66.241/bins/nullpointer.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821783/",
            "reporter": "botnetkiller"
        }
    ],
    "3821784": [
        {
            "dateadded": "2026-04-14 20:02:05 UTC",
            "url": "http://157.245.158.45:8080/payload.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821784/",
            "reporter": "botnetkiller"
        }
    ],
    "3821785": [
        {
            "dateadded": "2026-04-14 20:02:05 UTC",
            "url": "http://130.12.180.124/fit075kmyvo3/assets/js/3tipr96698",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821785/",
            "reporter": "botnetkiller"
        }
    ],
    "3821779": [
        {
            "dateadded": "2026-04-14 20:01:20 UTC",
            "url": "http://103.186.147.155/bins/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821779/",
            "reporter": "botnetkiller"
        }
    ],
    "3821780": [
        {
            "dateadded": "2026-04-14 20:01:20 UTC",
            "url": "http://223.123.43.4:35003/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821780/",
            "reporter": "botnetkiller"
        }
    ],
    "3821781": [
        {
            "dateadded": "2026-04-14 20:01:20 UTC",
            "url": "http://223.123.43.5:46597/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821781/",
            "reporter": "botnetkiller"
        }
    ],
    "3821782": [
        {
            "dateadded": "2026-04-14 20:01:20 UTC",
            "url": "http://223.123.43.71:47597/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821782/",
            "reporter": "botnetkiller"
        }
    ],
    "3821778": [
        {
            "dateadded": "2026-04-14 20:01:10 UTC",
            "url": "http://192so3245.vybrelease.cn.com/r.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821778/",
            "reporter": "botnetkiller"
        }
    ],
    "3821777": [
        {
            "dateadded": "2026-04-14 20:01:08 UTC",
            "url": "http://5.175.223.91/nad.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821777/",
            "reporter": "botnetkiller"
        }
    ],
    "3821776": [
        {
            "dateadded": "2026-04-14 20:00:30 UTC",
            "url": "http://56.63.32.95.dsl-dynamic.vsi.ru/Mozi.7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821776/",
            "reporter": "botnetkiller"
        }
    ],
    "3821775": [
        {
            "dateadded": "2026-04-14 20:00:17 UTC",
            "url": "http://176.65.148.189.ptr.pfcloud.network/HideChaotic/sora.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821775/",
            "reporter": "botnetkiller"
        }
    ],
    "3821773": [
        {
            "dateadded": "2026-04-14 20:00:12 UTC",
            "url": "http://176.65.148.189.ptr.pfcloud.network/HideChaotic/sora.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821773/",
            "reporter": "botnetkiller"
        }
    ],
    "3821774": [
        {
            "dateadded": "2026-04-14 20:00:12 UTC",
            "url": "https://gate6-way.bri7tanon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 20:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821774/",
            "reporter": "anonymous"
        }
    ],
    "3821771": [
        {
            "dateadded": "2026-04-14 20:00:10 UTC",
            "url": "http://176.65.148.189.ptr.pfcloud.network/HideChaotic/sora.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821771/",
            "reporter": "botnetkiller"
        }
    ],
    "3821772": [
        {
            "dateadded": "2026-04-14 20:00:10 UTC",
            "url": "http://176.65.148.189.ptr.pfcloud.network/HideChaotic/sora.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821772/",
            "reporter": "botnetkiller"
        }
    ],
    "3821770": [
        {
            "dateadded": "2026-04-14 20:00:08 UTC",
            "url": "http://176.65.148.189.ptr.pfcloud.network/HideChaotic/sora.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821770/",
            "reporter": "botnetkiller"
        }
    ],
    "3821768": [
        {
            "dateadded": "2026-04-14 20:00:07 UTC",
            "url": "http://158.94.208.69//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821768/",
            "reporter": "botnetkiller"
        }
    ],
    "3821769": [
        {
            "dateadded": "2026-04-14 20:00:07 UTC",
            "url": "http://152.42.183.1:8080/payload.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821769/",
            "reporter": "botnetkiller"
        }
    ],
    "3821765": [
        {
            "dateadded": "2026-04-14 19:59:30 UTC",
            "url": "http://maro033.identifypls.us.com/manji.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821765/",
            "reporter": "botnetkiller"
        }
    ],
    "3821766": [
        {
            "dateadded": "2026-04-14 19:59:30 UTC",
            "url": "http://maro033.identifypls.us.com/manji.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821766/",
            "reporter": "botnetkiller"
        }
    ],
    "3821767": [
        {
            "dateadded": "2026-04-14 19:59:30 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821767/",
            "reporter": "botnetkiller"
        }
    ],
    "3821763": [
        {
            "dateadded": "2026-04-14 19:59:27 UTC",
            "url": "http://maro033.identifypls.us.com/manji.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821763/",
            "reporter": "botnetkiller"
        }
    ],
    "3821764": [
        {
            "dateadded": "2026-04-14 19:59:27 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821764/",
            "reporter": "botnetkiller"
        }
    ],
    "3821761": [
        {
            "dateadded": "2026-04-14 19:59:25 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821761/",
            "reporter": "botnetkiller"
        }
    ],
    "3821762": [
        {
            "dateadded": "2026-04-14 19:59:25 UTC",
            "url": "http://maro033.identifypls.us.com/manji.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821762/",
            "reporter": "botnetkiller"
        }
    ],
    "3821760": [
        {
            "dateadded": "2026-04-14 19:59:24 UTC",
            "url": "http://maro033.identifypls.us.com/manji.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821760/",
            "reporter": "botnetkiller"
        }
    ],
    "3821742": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821742/",
            "reporter": "botnetkiller"
        }
    ],
    "3821743": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821743/",
            "reporter": "botnetkiller"
        }
    ],
    "3821744": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821744/",
            "reporter": "botnetkiller"
        }
    ],
    "3821745": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.amd64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821745/",
            "reporter": "botnetkiller"
        }
    ],
    "3821746": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821746/",
            "reporter": "botnetkiller"
        }
    ],
    "3821747": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821747/",
            "reporter": "botnetkiller"
        }
    ],
    "3821748": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821748/",
            "reporter": "botnetkiller"
        }
    ],
    "3821749": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821749/",
            "reporter": "botnetkiller"
        }
    ],
    "3821750": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3777/manji.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821750/",
            "reporter": "botnetkiller"
        }
    ],
    "3821751": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821751/",
            "reporter": "botnetkiller"
        }
    ],
    "3821752": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821752/",
            "reporter": "botnetkiller"
        }
    ],
    "3821753": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3775/manji.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821753/",
            "reporter": "botnetkiller"
        }
    ],
    "3821754": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3777/manji.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821754/",
            "reporter": "botnetkiller"
        }
    ],
    "3821755": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821755/",
            "reporter": "botnetkiller"
        }
    ],
    "3821756": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821756/",
            "reporter": "botnetkiller"
        }
    ],
    "3821757": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821757/",
            "reporter": "botnetkiller"
        }
    ],
    "3821758": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821758/",
            "reporter": "botnetkiller"
        }
    ],
    "3821759": [
        {
            "dateadded": "2026-04-14 19:59:20 UTC",
            "url": "http://223.123.43.6:56014/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821759/",
            "reporter": "botnetkiller"
        }
    ],
    "3821740": [
        {
            "dateadded": "2026-04-14 19:59:06 UTC",
            "url": "http://94.156.152.67/xd.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821740/",
            "reporter": "botnetkiller"
        }
    ],
    "3821739": [
        {
            "dateadded": "2026-04-14 19:58:30 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821739/",
            "reporter": "botnetkiller"
        }
    ],
    "3821737": [
        {
            "dateadded": "2026-04-14 19:58:28 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821737/",
            "reporter": "botnetkiller"
        }
    ],
    "3821738": [
        {
            "dateadded": "2026-04-14 19:58:28 UTC",
            "url": "http://maro033.identifypls.us.com/manji.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821738/",
            "reporter": "botnetkiller"
        }
    ],
    "3821736": [
        {
            "dateadded": "2026-04-14 19:58:27 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821736/",
            "reporter": "botnetkiller"
        }
    ],
    "3821733": [
        {
            "dateadded": "2026-04-14 19:58:22 UTC",
            "url": "http://maro033.identifypls.us.com/manji.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821733/",
            "reporter": "botnetkiller"
        }
    ],
    "3821734": [
        {
            "dateadded": "2026-04-14 19:58:22 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821734/",
            "reporter": "botnetkiller"
        }
    ],
    "3821735": [
        {
            "dateadded": "2026-04-14 19:58:22 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821735/",
            "reporter": "botnetkiller"
        }
    ],
    "3821719": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821719/",
            "reporter": "botnetkiller"
        }
    ],
    "3821720": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3775/manji.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821720/",
            "reporter": "botnetkiller"
        }
    ],
    "3821721": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821721/",
            "reporter": "botnetkiller"
        }
    ],
    "3821722": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3775/manji.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821722/",
            "reporter": "botnetkiller"
        }
    ],
    "3821723": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3777/manji.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821723/",
            "reporter": "botnetkiller"
        }
    ],
    "3821724": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821724/",
            "reporter": "botnetkiller"
        }
    ],
    "3821725": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821725/",
            "reporter": "botnetkiller"
        }
    ],
    "3821726": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821726/",
            "reporter": "botnetkiller"
        }
    ],
    "3821727": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3775/manji.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821727/",
            "reporter": "botnetkiller"
        }
    ],
    "3821728": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821728/",
            "reporter": "botnetkiller"
        }
    ],
    "3821729": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3775/manji.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821729/",
            "reporter": "botnetkiller"
        }
    ],
    "3821730": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://188.214.30.136:3775/manji.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821730/",
            "reporter": "botnetkiller"
        }
    ],
    "3821731": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://maro033.identifypls.us.com/manji.amd64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821731/",
            "reporter": "botnetkiller"
        }
    ],
    "3821732": [
        {
            "dateadded": "2026-04-14 19:58:20 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821732/",
            "reporter": "botnetkiller"
        }
    ],
    "3821718": [
        {
            "dateadded": "2026-04-14 19:57:31 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821718/",
            "reporter": "botnetkiller"
        }
    ],
    "3821717": [
        {
            "dateadded": "2026-04-14 19:57:30 UTC",
            "url": "http://maro033.identifypls.us.com/manji.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821717/",
            "reporter": "botnetkiller"
        }
    ],
    "3821716": [
        {
            "dateadded": "2026-04-14 19:57:29 UTC",
            "url": "http://maro033.identifypls.us.com/manji.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821716/",
            "reporter": "botnetkiller"
        }
    ],
    "3821715": [
        {
            "dateadded": "2026-04-14 19:57:28 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821715/",
            "reporter": "botnetkiller"
        }
    ],
    "3821713": [
        {
            "dateadded": "2026-04-14 19:57:26 UTC",
            "url": "http://maro033.identifypls.us.com/manji.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821713/",
            "reporter": "botnetkiller"
        }
    ],
    "3821714": [
        {
            "dateadded": "2026-04-14 19:57:26 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821714/",
            "reporter": "botnetkiller"
        }
    ],
    "3821711": [
        {
            "dateadded": "2026-04-14 19:57:25 UTC",
            "url": "http://maro033.identifypls.us.com/manji.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821711/",
            "reporter": "botnetkiller"
        }
    ],
    "3821712": [
        {
            "dateadded": "2026-04-14 19:57:25 UTC",
            "url": "http://maro033.identifypls.us.com/manji.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821712/",
            "reporter": "botnetkiller"
        }
    ],
    "3821703": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3775/manji.amd64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821703/",
            "reporter": "botnetkiller"
        }
    ],
    "3821704": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3777/manji.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821704/",
            "reporter": "botnetkiller"
        }
    ],
    "3821705": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3775/manji.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821705/",
            "reporter": "botnetkiller"
        }
    ],
    "3821706": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3775/manji.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821706/",
            "reporter": "botnetkiller"
        }
    ],
    "3821707": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3779/download/manji.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821707/",
            "reporter": "botnetkiller"
        }
    ],
    "3821708": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3777/manji.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821708/",
            "reporter": "botnetkiller"
        }
    ],
    "3821709": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3775/manji.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821709/",
            "reporter": "botnetkiller"
        }
    ],
    "3821710": [
        {
            "dateadded": "2026-04-14 19:57:21 UTC",
            "url": "http://188.214.30.136:3779/download/manji.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821710/",
            "reporter": "botnetkiller"
        }
    ],
    "3821690": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3775/manji.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821690/",
            "reporter": "botnetkiller"
        }
    ],
    "3821691": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3777/manji.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821691/",
            "reporter": "botnetkiller"
        }
    ],
    "3821692": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3777/manji.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821692/",
            "reporter": "botnetkiller"
        }
    ],
    "3821693": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821693/",
            "reporter": "botnetkiller"
        }
    ],
    "3821694": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821694/",
            "reporter": "botnetkiller"
        }
    ],
    "3821695": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821695/",
            "reporter": "botnetkiller"
        }
    ],
    "3821696": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821696/",
            "reporter": "botnetkiller"
        }
    ],
    "3821697": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3777/manji.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821697/",
            "reporter": "botnetkiller"
        }
    ],
    "3821698": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3777/manji.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821698/",
            "reporter": "botnetkiller"
        }
    ],
    "3821699": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3777/manji.ppc440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821699/",
            "reporter": "botnetkiller"
        }
    ],
    "3821700": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://45.83.207.188/bins/kwari.mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821700/",
            "reporter": "botnetkiller"
        }
    ],
    "3821701": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3775/manji.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821701/",
            "reporter": "botnetkiller"
        }
    ],
    "3821702": [
        {
            "dateadded": "2026-04-14 19:57:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821702/",
            "reporter": "botnetkiller"
        }
    ],
    "3821689": [
        {
            "dateadded": "2026-04-14 19:56:31 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.amd64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821689/",
            "reporter": "botnetkiller"
        }
    ],
    "3821688": [
        {
            "dateadded": "2026-04-14 19:56:28 UTC",
            "url": "http://maro033.identifypls.us.com/download/manji.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821688/",
            "reporter": "botnetkiller"
        }
    ],
    "3821685": [
        {
            "dateadded": "2026-04-14 19:56:25 UTC",
            "url": "http://maro033.identifypls.us.com/manji.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821685/",
            "reporter": "botnetkiller"
        }
    ],
    "3821686": [
        {
            "dateadded": "2026-04-14 19:56:25 UTC",
            "url": "http://maro033.identifypls.us.com/manji.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821686/",
            "reporter": "botnetkiller"
        }
    ],
    "3821681": [
        {
            "dateadded": "2026-04-14 19:56:21 UTC",
            "url": "http://188.214.30.136:3777/manji.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821681/",
            "reporter": "botnetkiller"
        }
    ],
    "3821682": [
        {
            "dateadded": "2026-04-14 19:56:21 UTC",
            "url": "http://45.83.207.188/bins/kwari.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821682/",
            "reporter": "botnetkiller"
        }
    ],
    "3821683": [
        {
            "dateadded": "2026-04-14 19:56:21 UTC",
            "url": "http://188.214.30.136:3777/manji.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821683/",
            "reporter": "botnetkiller"
        }
    ],
    "3821684": [
        {
            "dateadded": "2026-04-14 19:56:21 UTC",
            "url": "http://45.83.207.188/bins/kwari.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821684/",
            "reporter": "botnetkiller"
        }
    ],
    "3821675": [
        {
            "dateadded": "2026-04-14 19:56:20 UTC",
            "url": "http://45.83.207.188/bins/kwari.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821675/",
            "reporter": "botnetkiller"
        }
    ],
    "3821676": [
        {
            "dateadded": "2026-04-14 19:56:20 UTC",
            "url": "http://45.83.207.188/bins/kwari.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821676/",
            "reporter": "botnetkiller"
        }
    ],
    "3821677": [
        {
            "dateadded": "2026-04-14 19:56:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821677/",
            "reporter": "botnetkiller"
        }
    ],
    "3821678": [
        {
            "dateadded": "2026-04-14 19:56:20 UTC",
            "url": "http://188.214.30.136:3779/download/manji.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821678/",
            "reporter": "botnetkiller"
        }
    ],
    "3821679": [
        {
            "dateadded": "2026-04-14 19:56:20 UTC",
            "url": "http://188.214.30.136:3778/download/manji.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821679/",
            "reporter": "botnetkiller"
        }
    ],
    "3821680": [
        {
            "dateadded": "2026-04-14 19:56:20 UTC",
            "url": "http://188.214.30.136:3777/manji.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821680/",
            "reporter": "botnetkiller"
        }
    ],
    "3821674": [
        {
            "dateadded": "2026-04-14 19:54:20 UTC",
            "url": "http://42.224.54.166:36078/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821674/",
            "reporter": "geenensp"
        }
    ],
    "3821673": [
        {
            "dateadded": "2026-04-14 19:53:18 UTC",
            "url": "https://svc5-task.bri7tanon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:53:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821673/",
            "reporter": "anonymous"
        }
    ],
    "3821672": [
        {
            "dateadded": "2026-04-14 19:52:07 UTC",
            "url": "https://nenkines-attachments.top/download",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "rmm",
                "screenconnect",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821672/",
            "reporter": "abuse_ch"
        }
    ],
    "3821671": [
        {
            "dateadded": "2026-04-14 19:50:17 UTC",
            "url": "https://box4-file.bri7tanon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:50:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821671/",
            "reporter": "anonymous"
        }
    ],
    "3821670": [
        {
            "dateadded": "2026-04-14 19:49:23 UTC",
            "url": "http://103.26.86.158:37629/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821670/",
            "reporter": "botnetkiller"
        }
    ],
    "3821669": [
        {
            "dateadded": "2026-04-14 19:49:22 UTC",
            "url": "http://175.107.233.121:49233/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821669/",
            "reporter": "botnetkiller"
        }
    ],
    "3821667": [
        {
            "dateadded": "2026-04-14 19:49:21 UTC",
            "url": "http://103.196.163.37:43462/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821667/",
            "reporter": "botnetkiller"
        }
    ],
    "3821668": [
        {
            "dateadded": "2026-04-14 19:49:21 UTC",
            "url": "http://103.13.138.227:46205/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821668/",
            "reporter": "botnetkiller"
        }
    ],
    "3821666": [
        {
            "dateadded": "2026-04-14 19:49:20 UTC",
            "url": "http://31.57.201.154//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821666/",
            "reporter": "botnetkiller"
        }
    ],
    "3821660": [
        {
            "dateadded": "2026-04-14 19:49:06 UTC",
            "url": "http://91.92.241.94//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821660/",
            "reporter": "botnetkiller"
        }
    ],
    "3821661": [
        {
            "dateadded": "2026-04-14 19:49:06 UTC",
            "url": "http://104.248.151.98/arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821661/",
            "reporter": "botnetkiller"
        }
    ],
    "3821662": [
        {
            "dateadded": "2026-04-14 19:49:06 UTC",
            "url": "http://104.248.151.98/lol.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821662/",
            "reporter": "botnetkiller"
        }
    ],
    "3821663": [
        {
            "dateadded": "2026-04-14 19:49:06 UTC",
            "url": "http://104.248.151.98/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821663/",
            "reporter": "botnetkiller"
        }
    ],
    "3821664": [
        {
            "dateadded": "2026-04-14 19:49:06 UTC",
            "url": "http://104.248.151.98/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821664/",
            "reporter": "botnetkiller"
        }
    ],
    "3821665": [
        {
            "dateadded": "2026-04-14 19:49:06 UTC",
            "url": "http://104.248.151.98//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821665/",
            "reporter": "botnetkiller"
        }
    ],
    "3821659": [
        {
            "dateadded": "2026-04-14 19:48:25 UTC",
            "url": "http://175.151.122.16:47418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821659/",
            "reporter": "geenensp"
        }
    ],
    "3821658": [
        {
            "dateadded": "2026-04-14 19:48:24 UTC",
            "url": "http://182.113.30.131:49373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 04:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821658/",
            "reporter": "geenensp"
        }
    ],
    "3821657": [
        {
            "dateadded": "2026-04-14 19:48:23 UTC",
            "url": "http://206.168.201.42:45771/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821657/",
            "reporter": "botnetkiller"
        }
    ],
    "3821652": [
        {
            "dateadded": "2026-04-14 19:48:21 UTC",
            "url": "http://178.16.54.73/OREVmx.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821652/",
            "reporter": "botnetkiller"
        }
    ],
    "3821653": [
        {
            "dateadded": "2026-04-14 19:48:21 UTC",
            "url": "http://139.135.41.119:50353/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821653/",
            "reporter": "botnetkiller"
        }
    ],
    "3821654": [
        {
            "dateadded": "2026-04-14 19:48:21 UTC",
            "url": "http://102.53.48.0:33749/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821654/",
            "reporter": "botnetkiller"
        }
    ],
    "3821655": [
        {
            "dateadded": "2026-04-14 19:48:21 UTC",
            "url": "http://196.188.57.32:39266/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821655/",
            "reporter": "botnetkiller"
        }
    ],
    "3821656": [
        {
            "dateadded": "2026-04-14 19:48:21 UTC",
            "url": "http://103.253.21.136/MMaaRRiiOisecTanee.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821656/",
            "reporter": "botnetkiller"
        }
    ],
    "3821650": [
        {
            "dateadded": "2026-04-14 19:48:20 UTC",
            "url": "http://87.120.191.32/giga.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821650/",
            "reporter": "botnetkiller"
        }
    ],
    "3821651": [
        {
            "dateadded": "2026-04-14 19:48:20 UTC",
            "url": "http://87.120.191.32///arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821651/",
            "reporter": "botnetkiller"
        }
    ],
    "3821649": [
        {
            "dateadded": "2026-04-14 19:48:11 UTC",
            "url": "http://45.230.66.118:11412/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821649/",
            "reporter": "botnetkiller"
        }
    ],
    "3821648": [
        {
            "dateadded": "2026-04-14 19:48:07 UTC",
            "url": "http://219.157.20.108:41637/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821648/",
            "reporter": "botnetkiller"
        }
    ],
    "3821645": [
        {
            "dateadded": "2026-04-14 19:48:06 UTC",
            "url": "http://167.71.7.162//arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821645/",
            "reporter": "botnetkiller"
        }
    ],
    "3821646": [
        {
            "dateadded": "2026-04-14 19:48:06 UTC",
            "url": "http://176.65.139.34/fish.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821646/",
            "reporter": "botnetkiller"
        }
    ],
    "3821647": [
        {
            "dateadded": "2026-04-14 19:48:06 UTC",
            "url": "http://182.190.248.155:59650/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821647/",
            "reporter": "botnetkiller"
        }
    ],
    "3821644": [
        {
            "dateadded": "2026-04-14 19:47:20 UTC",
            "url": "http://66.167.169.155:48820/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821644/",
            "reporter": "botnetkiller"
        }
    ],
    "3821643": [
        {
            "dateadded": "2026-04-14 19:45:19 UTC",
            "url": "http://118.232.137.101:59149/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821643/",
            "reporter": "geenensp"
        }
    ],
    "3821642": [
        {
            "dateadded": "2026-04-14 19:43:15 UTC",
            "url": "https://node3-list.bri7tanon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:43:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821642/",
            "reporter": "anonymous"
        }
    ],
    "3821641": [
        {
            "dateadded": "2026-04-14 19:41:15 UTC",
            "url": "http://m29058.contaboserver.net/zyre.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821641/",
            "reporter": "botnetkiller"
        }
    ],
    "3821640": [
        {
            "dateadded": "2026-04-14 19:41:06 UTC",
            "url": "http://176.65.139.52/adb2.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 10:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821640/",
            "reporter": "botnetkiller"
        }
    ],
    "3821639": [
        {
            "dateadded": "2026-04-14 19:40:31 UTC",
            "url": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821639/",
            "reporter": "botnetkiller"
        }
    ],
    "3821638": [
        {
            "dateadded": "2026-04-14 19:40:24 UTC",
            "url": "http://static-119-15-248-43.dnt.net.pk/Mozi.7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821638/",
            "reporter": "botnetkiller"
        }
    ],
    "3821637": [
        {
            "dateadded": "2026-04-14 19:40:21 UTC",
            "url": "http://115.50.24.21:51321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821637/",
            "reporter": "geenensp"
        }
    ],
    "3821636": [
        {
            "dateadded": "2026-04-14 19:40:20 UTC",
            "url": "http://115.55.229.148:47991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821636/",
            "reporter": "geenensp"
        }
    ],
    "3821632": [
        {
            "dateadded": "2026-04-14 19:40:07 UTC",
            "url": "http://45.83.207.105/lll",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821632/",
            "reporter": "botnetkiller"
        }
    ],
    "3821634": [
        {
            "dateadded": "2026-04-14 19:40:07 UTC",
            "url": "http://103.177.110.202/bot_x64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821634/",
            "reporter": "botnetkiller"
        }
    ],
    "3821635": [
        {
            "dateadded": "2026-04-14 19:40:07 UTC",
            "url": "http://176.65.139.52/adb.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821635/",
            "reporter": "botnetkiller"
        }
    ],
    "3821630": [
        {
            "dateadded": "2026-04-14 19:39:27 UTC",
            "url": "http://36.255.33.183:58489/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821630/",
            "reporter": "botnetkiller"
        }
    ],
    "3821628": [
        {
            "dateadded": "2026-04-14 19:39:22 UTC",
            "url": "http://72.255.19.110:38754/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821628/",
            "reporter": "botnetkiller"
        }
    ],
    "3821629": [
        {
            "dateadded": "2026-04-14 19:39:22 UTC",
            "url": "http://72.255.32.188:36639/Mozi.a",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821629/",
            "reporter": "botnetkiller"
        }
    ],
    "3821625": [
        {
            "dateadded": "2026-04-14 19:39:20 UTC",
            "url": "http://193.32.162.27/manji.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821625/",
            "reporter": "botnetkiller"
        }
    ],
    "3821626": [
        {
            "dateadded": "2026-04-14 19:39:20 UTC",
            "url": "http://103.26.82.163:46135/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821626/",
            "reporter": "botnetkiller"
        }
    ],
    "3821627": [
        {
            "dateadded": "2026-04-14 19:39:20 UTC",
            "url": "http://94.156.152.67/bins/manji.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821627/",
            "reporter": "botnetkiller"
        }
    ],
    "3821623": [
        {
            "dateadded": "2026-04-14 19:39:06 UTC",
            "url": "http://179.43.182.70/pvd9lva3vy",
            "url_status": "offline",
            "last_online": "2026-04-16 10:59:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821623/",
            "reporter": "botnetkiller"
        }
    ],
    "3821624": [
        {
            "dateadded": "2026-04-14 19:39:06 UTC",
            "url": "http://94.156.152.67/bins/manji.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821624/",
            "reporter": "botnetkiller"
        }
    ],
    "3821622": [
        {
            "dateadded": "2026-04-14 19:39:05 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/k17nel4yr5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821622/",
            "reporter": "botnetkiller"
        }
    ],
    "3821619": [
        {
            "dateadded": "2026-04-14 19:38:20 UTC",
            "url": "http://87.121.84.45/o.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821619/",
            "reporter": "botnetkiller"
        }
    ],
    "3821620": [
        {
            "dateadded": "2026-04-14 19:38:20 UTC",
            "url": "http://139.135.40.198:55690/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821620/",
            "reporter": "botnetkiller"
        }
    ],
    "3821621": [
        {
            "dateadded": "2026-04-14 19:38:20 UTC",
            "url": "http://64.118.132.72/d.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821621/",
            "reporter": "botnetkiller"
        }
    ],
    "3821616": [
        {
            "dateadded": "2026-04-14 19:38:06 UTC",
            "url": "http://91.244.71.53/x86_32",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821616/",
            "reporter": "botnetkiller"
        }
    ],
    "3821617": [
        {
            "dateadded": "2026-04-14 19:38:06 UTC",
            "url": "http://91.244.71.53/x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821617/",
            "reporter": "botnetkiller"
        }
    ],
    "3821618": [
        {
            "dateadded": "2026-04-14 19:38:06 UTC",
            "url": "http://91.244.71.53/lll",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821618/",
            "reporter": "botnetkiller"
        }
    ],
    "3821614": [
        {
            "dateadded": "2026-04-14 19:38:05 UTC",
            "url": "http://176.65.139.64/bins/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821614/",
            "reporter": "botnetkiller"
        }
    ],
    "3821615": [
        {
            "dateadded": "2026-04-14 19:38:05 UTC",
            "url": "http://179.43.182.70/k17nel4yr5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821615/",
            "reporter": "botnetkiller"
        }
    ],
    "3821613": [
        {
            "dateadded": "2026-04-14 19:37:18 UTC",
            "url": "https://api2-cert.bri7tanon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821613/",
            "reporter": "anonymous"
        }
    ],
    "3821612": [
        {
            "dateadded": "2026-04-14 19:37:10 UTC",
            "url": "http://legitserver.theworkpc.com:5443/OneDriveServer.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "rmm",
                "screenconnect",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821612/",
            "reporter": "abuse_ch"
        }
    ],
    "3821611": [
        {
            "dateadded": "2026-04-14 19:34:17 UTC",
            "url": "http://118.232.137.101:59149/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821611/",
            "reporter": "geenensp"
        }
    ],
    "3821610": [
        {
            "dateadded": "2026-04-14 19:31:07 UTC",
            "url": "https://web1-host.bri7tanon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821610/",
            "reporter": "anonymous"
        }
    ],
    "3821609": [
        {
            "dateadded": "2026-04-14 19:28:18 UTC",
            "url": "http://184.174.20.150:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=bat&c=&c=&c=&c=&c=&c=&c=",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:42 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821609/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821608": [
        {
            "dateadded": "2026-04-14 19:28:15 UTC",
            "url": "https://yy.kak.is/1.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821608/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821607": [
        {
            "dateadded": "2026-04-14 19:28:14 UTC",
            "url": "https://yy.kak.is/2.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821607/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821605": [
        {
            "dateadded": "2026-04-14 19:28:12 UTC",
            "url": "https://xx.kak.is/jj.js",
            "url_status": "offline",
            "last_online": "2026-04-14 19:28:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821605/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821606": [
        {
            "dateadded": "2026-04-14 19:28:12 UTC",
            "url": "https://bkngextranetreservcontrolpanel.com/booking.com_files/r8QxLm4Wn7pVs2.html",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821606/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821602": [
        {
            "dateadded": "2026-04-14 19:28:05 UTC",
            "url": "https://willbeanfeddeals.shop/Bin/ScreenConnect.ClientSetup.msi?e=Access",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821602/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821603": [
        {
            "dateadded": "2026-04-14 19:28:05 UTC",
            "url": "https://willbeanfeddeals.shop/Bin/ScreenConnect.ClientSetup.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821603/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821604": [
        {
            "dateadded": "2026-04-14 19:28:05 UTC",
            "url": "http://195.177.94.94/1.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821604/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821601": [
        {
            "dateadded": "2026-04-14 19:27:15 UTC",
            "url": "https://gate6-area.nor4vexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821601/",
            "reporter": "anonymous"
        }
    ],
    "3821600": [
        {
            "dateadded": "2026-04-14 19:27:11 UTC",
            "url": "https://dump.win/3QTlJ.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821600/",
            "reporter": "burger"
        }
    ],
    "3821594": [
        {
            "dateadded": "2026-04-14 19:27:07 UTC",
            "url": "http://81.163.111.127:8000/81ip.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:36:35 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821594/",
            "reporter": "abuse_ch"
        }
    ],
    "3821595": [
        {
            "dateadded": "2026-04-14 19:27:07 UTC",
            "url": "http://81.163.111.127:8000/workin.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 06:12:04 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821595/",
            "reporter": "abuse_ch"
        }
    ],
    "3821596": [
        {
            "dateadded": "2026-04-14 19:27:07 UTC",
            "url": "http://81.163.111.127:8000/swchost.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 10:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821596/",
            "reporter": "abuse_ch"
        }
    ],
    "3821597": [
        {
            "dateadded": "2026-04-14 19:27:07 UTC",
            "url": "http://81.163.111.127:8000/eww.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:06:42 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821597/",
            "reporter": "abuse_ch"
        }
    ],
    "3821598": [
        {
            "dateadded": "2026-04-14 19:27:07 UTC",
            "url": "http://81.163.111.127:8000/install3.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 10:19:33 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821598/",
            "reporter": "abuse_ch"
        }
    ],
    "3821599": [
        {
            "dateadded": "2026-04-14 19:27:07 UTC",
            "url": "http://81.163.111.127:8000/swchost2.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 05:34:29 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "exe",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821599/",
            "reporter": "abuse_ch"
        }
    ],
    "3821593": [
        {
            "dateadded": "2026-04-14 19:24:17 UTC",
            "url": "https://svc5-edge.nor4vexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821593/",
            "reporter": "anonymous"
        }
    ],
    "3821592": [
        {
            "dateadded": "2026-04-14 19:20:21 UTC",
            "url": "http://112.249.89.236:59545/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:20:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821592/",
            "reporter": "geenensp"
        }
    ],
    "3821591": [
        {
            "dateadded": "2026-04-14 19:19:23 UTC",
            "url": "http://119.116.155.243:49935/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 05:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821591/",
            "reporter": "geenensp"
        }
    ],
    "3821582": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/femboy.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821582/",
            "reporter": "botnetkiller"
        }
    ],
    "3821583": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.i586",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821583/",
            "reporter": "botnetkiller"
        }
    ],
    "3821584": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821584/",
            "reporter": "botnetkiller"
        }
    ],
    "3821585": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.sparc",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821585/",
            "reporter": "botnetkiller"
        }
    ],
    "3821586": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821586/",
            "reporter": "botnetkiller"
        }
    ],
    "3821587": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821587/",
            "reporter": "botnetkiller"
        }
    ],
    "3821588": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821588/",
            "reporter": "botnetkiller"
        }
    ],
    "3821589": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.armv6l",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821589/",
            "reporter": "botnetkiller"
        }
    ],
    "3821590": [
        {
            "dateadded": "2026-04-14 19:16:23 UTC",
            "url": "http://46.8.78.55/systemctl/bin.powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821590/",
            "reporter": "botnetkiller"
        }
    ],
    "3821578": [
        {
            "dateadded": "2026-04-14 19:16:13 UTC",
            "url": "http://46.8.78.55/systemctl/bin.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821578/",
            "reporter": "botnetkiller"
        }
    ],
    "3821579": [
        {
            "dateadded": "2026-04-14 19:16:13 UTC",
            "url": "http://46.8.78.55/systemctl/bin.armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 13:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821579/",
            "reporter": "botnetkiller"
        }
    ],
    "3821580": [
        {
            "dateadded": "2026-04-14 19:16:13 UTC",
            "url": "http://46.8.78.55/systemctl/bin.armv7l",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821580/",
            "reporter": "botnetkiller"
        }
    ],
    "3821581": [
        {
            "dateadded": "2026-04-14 19:16:13 UTC",
            "url": "http://46.8.78.55/systemctl/bin.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821581/",
            "reporter": "botnetkiller"
        }
    ],
    "3821577": [
        {
            "dateadded": "2026-04-14 19:16:12 UTC",
            "url": "http://112.248.140.131:35523/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 11:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821577/",
            "reporter": "geenensp"
        }
    ],
    "3821576": [
        {
            "dateadded": "2026-04-14 19:15:15 UTC",
            "url": "https://salt4-byte.nor4vexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821576/",
            "reporter": "anonymous"
        }
    ],
    "3821574": [
        {
            "dateadded": "2026-04-14 19:14:24 UTC",
            "url": "http://46.227.184.199:54469/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821574/",
            "reporter": "botnetkiller"
        }
    ],
    "3821575": [
        {
            "dateadded": "2026-04-14 19:14:24 UTC",
            "url": "http://43.248.15.119:33356/Mozi.7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821575/",
            "reporter": "botnetkiller"
        }
    ],
    "3821573": [
        {
            "dateadded": "2026-04-14 19:14:11 UTC",
            "url": "http://125.160.135.94:38141/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821573/",
            "reporter": "geenensp"
        }
    ],
    "3821572": [
        {
            "dateadded": "2026-04-14 19:12:22 UTC",
            "url": "http://115.50.220.84:41057/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:12:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821572/",
            "reporter": "geenensp"
        }
    ],
    "3821571": [
        {
            "dateadded": "2026-04-14 19:08:22 UTC",
            "url": "https://node3-view.nor4vexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:08:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821571/",
            "reporter": "anonymous"
        }
    ],
    "3821570": [
        {
            "dateadded": "2026-04-14 19:04:22 UTC",
            "url": "http://110.138.131.72:60632/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:10:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821570/",
            "reporter": "geenensp"
        }
    ],
    "3821569": [
        {
            "dateadded": "2026-04-14 19:03:15 UTC",
            "url": "https://api2-test.nor4vexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:03:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821569/",
            "reporter": "anonymous"
        }
    ],
    "3821568": [
        {
            "dateadded": "2026-04-14 19:01:18 UTC",
            "url": "http://182.124.40.151:38778/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821568/",
            "reporter": "geenensp"
        }
    ],
    "3821566": [
        {
            "dateadded": "2026-04-14 18:59:16 UTC",
            "url": "https://gitlab.com/sudo_mom/sostsenrer2/-/raw/main/hold.txt",
            "url_status": "offline",
            "last_online": "2026-04-15 08:09:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "RemcosRAT",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821566/",
            "reporter": "abuse_ch"
        }
    ],
    "3821567": [
        {
            "dateadded": "2026-04-14 18:59:16 UTC",
            "url": "https://gitlab.com/sudo_mom/sostsenrer2/-/raw/main/sostener25.txt",
            "url_status": "offline",
            "last_online": "2026-04-15 05:08:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821567/",
            "reporter": "abuse_ch"
        }
    ],
    "3821562": [
        {
            "dateadded": "2026-04-14 18:59:15 UTC",
            "url": "https://gitlab.com/sudo_mom/sostsenrer2/-/raw/main/sostener2502",
            "url_status": "offline",
            "last_online": "2026-04-15 04:41:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821562/",
            "reporter": "abuse_ch"
        }
    ],
    "3821563": [
        {
            "dateadded": "2026-04-14 18:59:15 UTC",
            "url": "https://gitlab.com/sudo_mom/sostsenrer2/-/raw/main/enviar.txt",
            "url_status": "offline",
            "last_online": "2026-04-15 05:07:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821563/",
            "reporter": "abuse_ch"
        }
    ],
    "3821564": [
        {
            "dateadded": "2026-04-14 18:59:15 UTC",
            "url": "https://gitlab.com/sudo_mom/sostsenrer2/-/raw/main/sostener14.txt",
            "url_status": "offline",
            "last_online": "2026-04-15 04:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821564/",
            "reporter": "abuse_ch"
        }
    ],
    "3821565": [
        {
            "dateadded": "2026-04-14 18:59:15 UTC",
            "url": "https://gitlab.com/sudo_mom/sostsenrer2/-/raw/main/sostener17.txt",
            "url_status": "offline",
            "last_online": "2026-04-15 04:56:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821565/",
            "reporter": "abuse_ch"
        }
    ],
    "3821561": [
        {
            "dateadded": "2026-04-14 18:58:21 UTC",
            "url": "http://42.224.168.31:45145/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:00:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821561/",
            "reporter": "geenensp"
        }
    ],
    "3821560": [
        {
            "dateadded": "2026-04-14 18:58:12 UTC",
            "url": "https://auth1-user.nor4vexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821560/",
            "reporter": "anonymous"
        }
    ],
    "3821559": [
        {
            "dateadded": "2026-04-14 18:55:20 UTC",
            "url": "https://gtps4change.org/our-team/image.png",
            "url_status": "offline",
            "last_online": "2026-04-19 05:03:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821559/",
            "reporter": "abuse_ch"
        }
    ],
    "3821558": [
        {
            "dateadded": "2026-04-14 18:55:15 UTC",
            "url": "https://hasteb.in/O9Qrt3I7dq2L7pa",
            "url_status": "offline",
            "last_online": "2026-04-15 11:20:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821558/",
            "reporter": "abuse_ch"
        }
    ],
    "3821557": [
        {
            "dateadded": "2026-04-14 18:53:23 UTC",
            "url": "http://112.249.89.236:59545/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:53:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821557/",
            "reporter": "geenensp"
        }
    ],
    "3821556": [
        {
            "dateadded": "2026-04-14 18:51:13 UTC",
            "url": "https://gate6-zone.dru9laxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821556/",
            "reporter": "anonymous"
        }
    ],
    "3821555": [
        {
            "dateadded": "2026-04-14 18:46:13 UTC",
            "url": "https://svc5-info.dru9laxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821555/",
            "reporter": "anonymous"
        }
    ],
    "3821554": [
        {
            "dateadded": "2026-04-14 18:45:13 UTC",
            "url": "http://115.63.188.1:41421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821554/",
            "reporter": "geenensp"
        }
    ],
    "3821553": [
        {
            "dateadded": "2026-04-14 18:43:15 UTC",
            "url": "https://tmp4-root.dru9laxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:43:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821553/",
            "reporter": "anonymous"
        }
    ],
    "3821552": [
        {
            "dateadded": "2026-04-14 18:39:09 UTC",
            "url": "https://node3-pack.dru9laxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821552/",
            "reporter": "anonymous"
        }
    ],
    "3821551": [
        {
            "dateadded": "2026-04-14 18:30:10 UTC",
            "url": "https://api2-stat.dru9laxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821551/",
            "reporter": "anonymous"
        }
    ],
    "3821550": [
        {
            "dateadded": "2026-04-14 18:24:13 UTC",
            "url": "https://tcp1-join.dru9laxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821550/",
            "reporter": "anonymous"
        }
    ],
    "3821549": [
        {
            "dateadded": "2026-04-14 18:24:09 UTC",
            "url": "http://219.155.63.138:59071/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:12:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821549/",
            "reporter": "geenensp"
        }
    ],
    "3821548": [
        {
            "dateadded": "2026-04-14 18:22:19 UTC",
            "url": "http://222.138.206.249:54276/i",
            "url_status": "offline",
            "last_online": "2026-04-14 18:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821548/",
            "reporter": "geenensp"
        }
    ],
    "3821547": [
        {
            "dateadded": "2026-04-14 18:20:09 UTC",
            "url": "http://222.138.206.249:54276/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821547/",
            "reporter": "geenensp"
        }
    ],
    "3821546": [
        {
            "dateadded": "2026-04-14 18:18:15 UTC",
            "url": "https://gate6-link.xel2mavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821546/",
            "reporter": "anonymous"
        }
    ],
    "3821545": [
        {
            "dateadded": "2026-04-14 18:13:14 UTC",
            "url": "https://svc5-base.xel2mavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821545/",
            "reporter": "anonymous"
        }
    ],
    "3821544": [
        {
            "dateadded": "2026-04-14 18:11:19 UTC",
            "url": "http://125.166.201.116:56446/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:41:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821544/",
            "reporter": "geenensp"
        }
    ],
    "3821543": [
        {
            "dateadded": "2026-04-14 18:09:15 UTC",
            "url": "https://git4-repo.xel2mavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:09:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821543/",
            "reporter": "anonymous"
        }
    ],
    "3821542": [
        {
            "dateadded": "2026-04-14 18:06:17 UTC",
            "url": "https://node3-flag.xel2mavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821542/",
            "reporter": "anonymous"
        }
    ],
    "3821541": [
        {
            "dateadded": "2026-04-14 18:02:22 UTC",
            "url": "http://112.240.250.145:42402/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821541/",
            "reporter": "geenensp"
        }
    ],
    "3821540": [
        {
            "dateadded": "2026-04-14 17:59:11 UTC",
            "url": "http://61.53.239.45:50006/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:20:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821540/",
            "reporter": "geenensp"
        }
    ],
    "3821539": [
        {
            "dateadded": "2026-04-14 17:57:12 UTC",
            "url": "https://api2-path.xel2mavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821539/",
            "reporter": "anonymous"
        }
    ],
    "3821538": [
        {
            "dateadded": "2026-04-14 17:56:06 UTC",
            "url": "http://119.179.250.240:38610/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:28:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821538/",
            "reporter": "geenensp"
        }
    ],
    "3821537": [
        {
            "dateadded": "2026-04-14 17:52:06 UTC",
            "url": "http://115.50.28.175:58891/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:54:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821537/",
            "reporter": "geenensp"
        }
    ],
    "3821536": [
        {
            "dateadded": "2026-04-14 17:50:15 UTC",
            "url": "https://ops1-view.xel2mavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821536/",
            "reporter": "anonymous"
        }
    ],
    "3821535": [
        {
            "dateadded": "2026-04-14 17:49:24 UTC",
            "url": "http://61.53.239.45:50006/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 07:01:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821535/",
            "reporter": "geenensp"
        }
    ],
    "3821534": [
        {
            "dateadded": "2026-04-14 17:46:24 UTC",
            "url": "http://115.56.112.254:33269/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821534/",
            "reporter": "geenensp"
        }
    ],
    "3821533": [
        {
            "dateadded": "2026-04-14 17:44:25 UTC",
            "url": "http://125.166.201.116:56446/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821533/",
            "reporter": "geenensp"
        }
    ],
    "3821532": [
        {
            "dateadded": "2026-04-14 17:44:18 UTC",
            "url": "https://gate6-hub.prax6tolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:44:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821532/",
            "reporter": "anonymous"
        }
    ],
    "3821531": [
        {
            "dateadded": "2026-04-14 17:40:14 UTC",
            "url": "https://svc5-mesh.prax6tolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821531/",
            "reporter": "anonymous"
        }
    ],
    "3821530": [
        {
            "dateadded": "2026-04-14 17:38:20 UTC",
            "url": "http://103.213.235.26:42468/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 05:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821530/",
            "reporter": "geenensp"
        }
    ],
    "3821529": [
        {
            "dateadded": "2026-04-14 17:34:11 UTC",
            "url": "https://db4-cache.prax6tolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821529/",
            "reporter": "anonymous"
        }
    ],
    "3821528": [
        {
            "dateadded": "2026-04-14 17:28:42 UTC",
            "url": "http://112.240.250.145:42402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:34:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821528/",
            "reporter": "geenensp"
        }
    ],
    "3821527": [
        {
            "dateadded": "2026-04-14 17:28:16 UTC",
            "url": "https://node3-fast.prax6tolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821527/",
            "reporter": "anonymous"
        }
    ],
    "3821526": [
        {
            "dateadded": "2026-04-14 17:26:25 UTC",
            "url": "http://175.150.131.195:37771/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:44:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821526/",
            "reporter": "geenensp"
        }
    ],
    "3821525": [
        {
            "dateadded": "2026-04-14 17:26:13 UTC",
            "url": "http://115.50.28.175:58891/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:43:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821525/",
            "reporter": "geenensp"
        }
    ],
    "3821524": [
        {
            "dateadded": "2026-04-14 17:24:24 UTC",
            "url": "http://115.56.112.254:33269/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:26:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821524/",
            "reporter": "geenensp"
        }
    ],
    "3821523": [
        {
            "dateadded": "2026-04-14 17:22:12 UTC",
            "url": "https://api2-meta.prax6tolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821523/",
            "reporter": "anonymous"
        }
    ],
    "3821522": [
        {
            "dateadded": "2026-04-14 17:17:16 UTC",
            "url": "https://run1-task.prax6tolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821522/",
            "reporter": "anonymous"
        }
    ],
    "3821521": [
        {
            "dateadded": "2026-04-14 17:11:23 UTC",
            "url": "http://42.177.23.149:48269/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:46:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821521/",
            "reporter": "geenensp"
        }
    ],
    "3821520": [
        {
            "dateadded": "2026-04-14 17:11:13 UTC",
            "url": "https://gate6-site.kry8navel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821520/",
            "reporter": "anonymous"
        }
    ],
    "3821519": [
        {
            "dateadded": "2026-04-14 17:05:17 UTC",
            "url": "https://svc5-relay.kry8navel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821519/",
            "reporter": "anonymous"
        }
    ],
    "3821517": [
        {
            "dateadded": "2026-04-14 17:04:19 UTC",
            "url": "http://115.63.23.255:44828/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:31:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821517/",
            "reporter": "geenensp"
        }
    ],
    "3821518": [
        {
            "dateadded": "2026-04-14 17:04:19 UTC",
            "url": "http://115.54.114.114:56296/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821518/",
            "reporter": "geenensp"
        }
    ],
    "3821516": [
        {
            "dateadded": "2026-04-14 17:01:26 UTC",
            "url": "http://59.184.241.122:36992/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821516/",
            "reporter": "geenensp"
        }
    ],
    "3821515": [
        {
            "dateadded": "2026-04-14 17:00:14 UTC",
            "url": "https://bin4-swap.kry8navel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 17:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821515/",
            "reporter": "anonymous"
        }
    ],
    "3821514": [
        {
            "dateadded": "2026-04-14 16:58:18 UTC",
            "url": "http://115.63.147.53:47276/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821514/",
            "reporter": "geenensp"
        }
    ],
    "3821513": [
        {
            "dateadded": "2026-04-14 16:53:14 UTC",
            "url": "https://node3-read.kry8navel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821513/",
            "reporter": "anonymous"
        }
    ],
    "3821512": [
        {
            "dateadded": "2026-04-14 16:52:23 UTC",
            "url": "http://115.54.114.114:56296/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821512/",
            "reporter": "geenensp"
        }
    ],
    "3821511": [
        {
            "dateadded": "2026-04-14 16:50:16 UTC",
            "url": "https://api2-port.kry8navel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821511/",
            "reporter": "anonymous"
        }
    ],
    "3821510": [
        {
            "dateadded": "2026-04-14 16:48:14 UTC",
            "url": "https://mon1-audit.kry8navel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821510/",
            "reporter": "anonymous"
        }
    ],
    "3821509": [
        {
            "dateadded": "2026-04-14 16:44:21 UTC",
            "url": "http://115.63.23.255:44828/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:23:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821509/",
            "reporter": "geenensp"
        }
    ],
    "3821508": [
        {
            "dateadded": "2026-04-14 16:37:11 UTC",
            "url": "https://gate6-pipe.vex3litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821508/",
            "reporter": "anonymous"
        }
    ],
    "3821507": [
        {
            "dateadded": "2026-04-14 16:32:12 UTC",
            "url": "https://svc5-send.vex3litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821507/",
            "reporter": "anonymous"
        }
    ],
    "3821506": [
        {
            "dateadded": "2026-04-14 16:29:28 UTC",
            "url": "http://168.195.7.78:58234/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821506/",
            "reporter": "geenensp"
        }
    ],
    "3821505": [
        {
            "dateadded": "2026-04-14 16:28:23 UTC",
            "url": "http://115.50.220.84:41057/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 20:06:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821505/",
            "reporter": "geenensp"
        }
    ],
    "3821504": [
        {
            "dateadded": "2026-04-14 16:26:18 UTC",
            "url": "http://115.49.67.104:52417/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:38:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821504/",
            "reporter": "geenensp"
        }
    ],
    "3821503": [
        {
            "dateadded": "2026-04-14 16:25:15 UTC",
            "url": "https://file4-path.vex3litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821503/",
            "reporter": "anonymous"
        }
    ],
    "3821502": [
        {
            "dateadded": "2026-04-14 16:21:14 UTC",
            "url": "https://node3-unit.vex3litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821502/",
            "reporter": "anonymous"
        }
    ],
    "3821501": [
        {
            "dateadded": "2026-04-14 16:15:15 UTC",
            "url": "https://api2-info.vex3litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821501/",
            "reporter": "anonymous"
        }
    ],
    "3821500": [
        {
            "dateadded": "2026-04-14 16:11:20 UTC",
            "url": "http://110.37.86.252:50568/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821500/",
            "reporter": "geenensp"
        }
    ],
    "3821499": [
        {
            "dateadded": "2026-04-14 16:11:15 UTC",
            "url": "https://net1-flow.vex3litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821499/",
            "reporter": "anonymous"
        }
    ],
    "3821498": [
        {
            "dateadded": "2026-04-14 16:08:10 UTC",
            "url": "https://gate6-root.tul7moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 16:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821498/",
            "reporter": "anonymous"
        }
    ],
    "3821497": [
        {
            "dateadded": "2026-04-14 16:02:21 UTC",
            "url": "http://92.38.51.65:35152/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:15:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821497/",
            "reporter": "geenensp"
        }
    ],
    "3821496": [
        {
            "dateadded": "2026-04-14 16:02:19 UTC",
            "url": "http://115.49.67.104:52417/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:48:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821496/",
            "reporter": "geenensp"
        }
    ],
    "3821495": [
        {
            "dateadded": "2026-04-14 16:00:19 UTC",
            "url": "http://60.18.26.173:45402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:15:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821495/",
            "reporter": "geenensp"
        }
    ],
    "3821494": [
        {
            "dateadded": "2026-04-14 15:58:06 UTC",
            "url": "https://svc5-site.tul7moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:58:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821494/",
            "reporter": "anonymous"
        }
    ],
    "3821493": [
        {
            "dateadded": "2026-04-14 15:57:11 UTC",
            "url": "http://168.195.7.78:58234/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821493/",
            "reporter": "geenensp"
        }
    ],
    "3821492": [
        {
            "dateadded": "2026-04-14 15:56:16 UTC",
            "url": "http://115.63.147.53:47276/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:40:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821492/",
            "reporter": "geenensp"
        }
    ],
    "3821491": [
        {
            "dateadded": "2026-04-14 15:52:09 UTC",
            "url": "https://blob4-host.tul7moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821491/",
            "reporter": "anonymous"
        }
    ],
    "3821490": [
        {
            "dateadded": "2026-04-14 15:51:10 UTC",
            "url": "http://61.52.80.141:52238/i",
            "url_status": "offline",
            "last_online": "2026-04-16 00:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821490/",
            "reporter": "geenensp"
        }
    ],
    "3821489": [
        {
            "dateadded": "2026-04-14 15:49:07 UTC",
            "url": "http://110.37.118.66:36050/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821489/",
            "reporter": "geenensp"
        }
    ],
    "3821488": [
        {
            "dateadded": "2026-04-14 15:47:10 UTC",
            "url": "https://node3-core.tul7moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821488/",
            "reporter": "anonymous"
        }
    ],
    "3821487": [
        {
            "dateadded": "2026-04-14 15:43:16 UTC",
            "url": "http://110.37.86.252:50568/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821487/",
            "reporter": "geenensp"
        }
    ],
    "3821486": [
        {
            "dateadded": "2026-04-14 15:42:07 UTC",
            "url": "https://api2-call.tul7moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821486/",
            "reporter": "anonymous"
        }
    ],
    "3821485": [
        {
            "dateadded": "2026-04-14 15:39:07 UTC",
            "url": "http://219.155.12.125:54799/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:43:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821485/",
            "reporter": "geenensp"
        }
    ],
    "3821484": [
        {
            "dateadded": "2026-04-14 15:35:15 UTC",
            "url": "https://lb1-state.tul7moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821484/",
            "reporter": "anonymous"
        }
    ],
    "3821483": [
        {
            "dateadded": "2026-04-14 15:32:13 UTC",
            "url": "https://gate6-main.qen4varix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821483/",
            "reporter": "anonymous"
        }
    ],
    "3821482": [
        {
            "dateadded": "2026-04-14 15:29:12 UTC",
            "url": "https://svc5-step.qen4varix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821482/",
            "reporter": "anonymous"
        }
    ],
    "3821481": [
        {
            "dateadded": "2026-04-14 15:25:19 UTC",
            "url": "http://110.37.118.66:36050/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821481/",
            "reporter": "geenensp"
        }
    ],
    "3821480": [
        {
            "dateadded": "2026-04-14 15:22:18 UTC",
            "url": "http://61.52.80.141:52238/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:51:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821480/",
            "reporter": "geenensp"
        }
    ],
    "3821479": [
        {
            "dateadded": "2026-04-14 15:19:06 UTC",
            "url": "https://disk4-data.qen4varix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821479/",
            "reporter": "anonymous"
        }
    ],
    "3821478": [
        {
            "dateadded": "2026-04-14 15:13:11 UTC",
            "url": "https://node3-peer.qen4varix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821478/",
            "reporter": "anonymous"
        }
    ],
    "3821477": [
        {
            "dateadded": "2026-04-14 15:12:19 UTC",
            "url": "http://42.86.34.90:52380/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821477/",
            "reporter": "geenensp"
        }
    ],
    "3821476": [
        {
            "dateadded": "2026-04-14 15:07:08 UTC",
            "url": "https://api2-dns.qen4varix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821476/",
            "reporter": "anonymous"
        }
    ],
    "3821475": [
        {
            "dateadded": "2026-04-14 15:05:16 UTC",
            "url": "http://119.185.130.132:36776/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:38:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821475/",
            "reporter": "geenensp"
        }
    ],
    "3821474": [
        {
            "dateadded": "2026-04-14 15:03:14 UTC",
            "url": "https://cdn1-fast.qen4varix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 15:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821474/",
            "reporter": "anonymous"
        }
    ],
    "3821473": [
        {
            "dateadded": "2026-04-14 14:58:19 UTC",
            "url": "http://42.235.145.69:59257/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821473/",
            "reporter": "geenensp"
        }
    ],
    "3821472": [
        {
            "dateadded": "2026-04-14 14:57:09 UTC",
            "url": "https://gate6-post.zor5liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821472/",
            "reporter": "anonymous"
        }
    ],
    "3821471": [
        {
            "dateadded": "2026-04-14 14:50:08 UTC",
            "url": "https://svc5-rule.zor5liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821471/",
            "reporter": "anonymous"
        }
    ],
    "3821470": [
        {
            "dateadded": "2026-04-14 14:49:20 UTC",
            "url": "http://60.22.174.100:46174/i",
            "url_status": "offline",
            "last_online": "2026-04-20 16:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821470/",
            "reporter": "geenensp"
        }
    ],
    "3821469": [
        {
            "dateadded": "2026-04-14 14:48:19 UTC",
            "url": "http://1.2.185.116:56553/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821469/",
            "reporter": "geenensp"
        }
    ],
    "3821468": [
        {
            "dateadded": "2026-04-14 14:45:09 UTC",
            "url": "https://vault4-key.zor5liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821468/",
            "reporter": "anonymous"
        }
    ],
    "3821467": [
        {
            "dateadded": "2026-04-14 14:40:27 UTC",
            "url": "http://119.185.130.132:36776/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821467/",
            "reporter": "geenensp"
        }
    ],
    "3821466": [
        {
            "dateadded": "2026-04-14 14:39:11 UTC",
            "url": "https://host3-link.zor5liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821466/",
            "reporter": "anonymous"
        }
    ],
    "3821465": [
        {
            "dateadded": "2026-04-14 14:35:35 UTC",
            "url": "http://112.239.97.107:43327/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821465/",
            "reporter": "geenensp"
        }
    ],
    "3821464": [
        {
            "dateadded": "2026-04-14 14:35:23 UTC",
            "url": "http://108.168.10.70:35639/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:42:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821464/",
            "reporter": "geenensp"
        }
    ],
    "3821463": [
        {
            "dateadded": "2026-04-14 14:34:14 UTC",
            "url": "https://api2-node.zor5liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821463/",
            "reporter": "anonymous"
        }
    ],
    "3821462": [
        {
            "dateadded": "2026-04-14 14:28:21 UTC",
            "url": "http://115.48.163.251:53130/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:08:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821462/",
            "reporter": "geenensp"
        }
    ],
    "3821461": [
        {
            "dateadded": "2026-04-14 14:28:16 UTC",
            "url": "https://pop1-edge.zor5liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821461/",
            "reporter": "anonymous"
        }
    ],
    "3821460": [
        {
            "dateadded": "2026-04-14 14:27:17 UTC",
            "url": "http://175.173.92.181:56204/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 23:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821460/",
            "reporter": "geenensp"
        }
    ],
    "3821459": [
        {
            "dateadded": "2026-04-14 14:26:09 UTC",
            "url": "http://123.13.138.190:53134/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:04:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821459/",
            "reporter": "geenensp"
        }
    ],
    "3821458": [
        {
            "dateadded": "2026-04-14 14:25:22 UTC",
            "url": "http://60.22.174.100:46174/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821458/",
            "reporter": "geenensp"
        }
    ],
    "3821457": [
        {
            "dateadded": "2026-04-14 14:19:18 UTC",
            "url": "http://115.56.153.152:59261/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821457/",
            "reporter": "geenensp"
        }
    ],
    "3821454": [
        {
            "dateadded": "2026-04-14 14:10:12 UTC",
            "url": "http://132.243.173.111:3000/aIg.exe.88",
            "url_status": "offline",
            "last_online": "2026-04-14 14:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "132-243-173-111-3000",
                "QuasarRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821454/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821455": [
        {
            "dateadded": "2026-04-14 14:10:12 UTC",
            "url": "http://132.243.173.111:3000/aIg_173_55.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 14:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "132-243-173-111-3000",
                "QuasarRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821455/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821456": [
        {
            "dateadded": "2026-04-14 14:10:12 UTC",
            "url": "http://132.243.173.111:3000/aIg.exe",
            "url_status": "offline",
            "last_online": "2026-04-14 14:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "132-243-173-111-3000",
                "QuasarRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821456/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821452": [
        {
            "dateadded": "2026-04-14 14:10:11 UTC",
            "url": "http://132.243.173.111:3000/aIg_173_55_2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 14:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "132-243-173-111-3000",
                "QuasarRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821452/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821453": [
        {
            "dateadded": "2026-04-14 14:10:11 UTC",
            "url": "http://132.243.173.111:3000/start_qsr.ps1",
            "url_status": "offline",
            "last_online": "2026-04-14 14:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "132-243-173-111-3000",
                "QuasarRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821453/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821450": [
        {
            "dateadded": "2026-04-14 14:07:10 UTC",
            "url": "http://108.168.10.70:35639/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:26:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821450/",
            "reporter": "geenensp"
        }
    ],
    "3821451": [
        {
            "dateadded": "2026-04-14 14:07:10 UTC",
            "url": "https://hyper-a5h.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821451/",
            "reporter": "anonymous"
        }
    ],
    "3821449": [
        {
            "dateadded": "2026-04-14 14:06:11 UTC",
            "url": "http://116.248.80.90:32906/i",
            "url_status": "offline",
            "last_online": "2026-04-20 22:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821449/",
            "reporter": "geenensp"
        }
    ],
    "3821448": [
        {
            "dateadded": "2026-04-14 14:01:10 UTC",
            "url": "https://dynmarka2.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 14:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821448/",
            "reporter": "anonymous"
        }
    ],
    "3821447": [
        {
            "dateadded": "2026-04-14 13:55:11 UTC",
            "url": "https://soft3-ring.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821447/",
            "reporter": "anonymous"
        }
    ],
    "3821445": [
        {
            "dateadded": "2026-04-14 13:52:18 UTC",
            "url": "http://185.204.154.82:59407/i",
            "url_status": "offline",
            "last_online": "2026-04-21 05:51:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821445/",
            "reporter": "geenensp"
        }
    ],
    "3821446": [
        {
            "dateadded": "2026-04-14 13:52:18 UTC",
            "url": "http://23.92.130.154:52900/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:31:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821446/",
            "reporter": "geenensp"
        }
    ],
    "3821443": [
        {
            "dateadded": "2026-04-14 13:49:12 UTC",
            "url": "https://darkspark.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821443/",
            "reporter": "anonymous"
        }
    ],
    "3821444": [
        {
            "dateadded": "2026-04-14 13:49:12 UTC",
            "url": "http://114.227.225.65:38844/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821444/",
            "reporter": "geenensp"
        }
    ],
    "3821442": [
        {
            "dateadded": "2026-04-14 13:49:09 UTC",
            "url": "http://42.231.92.99:60744/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:56:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821442/",
            "reporter": "geenensp"
        }
    ],
    "3821441": [
        {
            "dateadded": "2026-04-14 13:45:13 UTC",
            "url": "https://rai16-track.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821441/",
            "reporter": "anonymous"
        }
    ],
    "3821440": [
        {
            "dateadded": "2026-04-14 13:45:11 UTC",
            "url": "http://115.63.149.31:39902/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:47:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821440/",
            "reporter": "geenensp"
        }
    ],
    "3821439": [
        {
            "dateadded": "2026-04-14 13:44:10 UTC",
            "url": "http://185.204.154.82:59407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:19:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821439/",
            "reporter": "geenensp"
        }
    ],
    "3821438": [
        {
            "dateadded": "2026-04-14 13:39:09 UTC",
            "url": "https://upzr.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821438/",
            "reporter": "anonymous"
        }
    ],
    "3821437": [
        {
            "dateadded": "2026-04-14 13:34:12 UTC",
            "url": "https://cipherengin.mor5laxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821437/",
            "reporter": "anonymous"
        }
    ],
    "3821436": [
        {
            "dateadded": "2026-04-14 13:31:17 UTC",
            "url": "http://182.127.31.207:35364/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821436/",
            "reporter": "geenensp"
        }
    ],
    "3821435": [
        {
            "dateadded": "2026-04-14 13:28:12 UTC",
            "url": "https://vialinn.mor5laxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821435/",
            "reporter": "anonymous"
        }
    ],
    "3821432": [
        {
            "dateadded": "2026-04-14 13:25:18 UTC",
            "url": "http://42.231.92.99:60744/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:34:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821432/",
            "reporter": "geenensp"
        }
    ],
    "3821433": [
        {
            "dateadded": "2026-04-14 13:25:18 UTC",
            "url": "http://115.50.29.181:43425/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821433/",
            "reporter": "geenensp"
        }
    ],
    "3821434": [
        {
            "dateadded": "2026-04-14 13:25:18 UTC",
            "url": "http://116.248.80.90:32906/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821434/",
            "reporter": "geenensp"
        }
    ],
    "3821431": [
        {
            "dateadded": "2026-04-14 13:23:20 UTC",
            "url": "http://115.63.149.31:39902/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 18:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821431/",
            "reporter": "geenensp"
        }
    ],
    "3821430": [
        {
            "dateadded": "2026-04-14 13:23:07 UTC",
            "url": "http://176.65.144.60/Psd8eZaW/Plugins/cred.dll",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Amadey",
                "cred.dll",
                "d854e4",
                "dropped-by-amadey",
                "plugin"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821430/",
            "reporter": "Bitsight"
        }
    ],
    "3821429": [
        {
            "dateadded": "2026-04-14 13:22:08 UTC",
            "url": "https://hz7cbx.mor5laxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821429/",
            "reporter": "anonymous"
        }
    ],
    "3821428": [
        {
            "dateadded": "2026-04-14 13:20:24 UTC",
            "url": "http://42.230.34.136:44284/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821428/",
            "reporter": "geenensp"
        }
    ],
    "3821427": [
        {
            "dateadded": "2026-04-14 13:16:08 UTC",
            "url": "https://rlovrqd.mor5laxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821427/",
            "reporter": "anonymous"
        }
    ],
    "3821426": [
        {
            "dateadded": "2026-04-14 13:14:21 UTC",
            "url": "http://61.53.99.108:33252/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:49:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821426/",
            "reporter": "geenensp"
        }
    ],
    "3821425": [
        {
            "dateadded": "2026-04-14 13:11:09 UTC",
            "url": "https://arkflux7is.mor5laxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821425/",
            "reporter": "anonymous"
        }
    ],
    "3821424": [
        {
            "dateadded": "2026-04-14 13:07:15 UTC",
            "url": "http://64.53.93.93:34703/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821424/",
            "reporter": "geenensp"
        }
    ],
    "3821423": [
        {
            "dateadded": "2026-04-14 13:07:14 UTC",
            "url": "http://176.65.139.20/i486",
            "url_status": "offline",
            "last_online": "2026-04-17 06:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-20",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821423/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821422": [
        {
            "dateadded": "2026-04-14 13:05:20 UTC",
            "url": "http://182.117.107.89:44805/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821422/",
            "reporter": "geenensp"
        }
    ],
    "3821421": [
        {
            "dateadded": "2026-04-14 13:05:12 UTC",
            "url": "https://road5-field.mor5laxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821421/",
            "reporter": "anonymous"
        }
    ],
    "3821420": [
        {
            "dateadded": "2026-04-14 13:00:14 UTC",
            "url": "https://quormeshar.qul4xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 13:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821420/",
            "reporter": "anonymous"
        }
    ],
    "3821419": [
        {
            "dateadded": "2026-04-14 12:56:10 UTC",
            "url": "http://198.12.83.76/29/img_172631.png",
            "url_status": "offline",
            "last_online": "2026-04-27 05:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821419/",
            "reporter": "abuse_ch"
        }
    ],
    "3821418": [
        {
            "dateadded": "2026-04-14 12:55:19 UTC",
            "url": "http://42.235.145.69:59257/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:03:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821418/",
            "reporter": "geenensp"
        }
    ],
    "3821416": [
        {
            "dateadded": "2026-04-14 12:54:12 UTC",
            "url": "http://64.53.93.93:34703/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821416/",
            "reporter": "geenensp"
        }
    ],
    "3821417": [
        {
            "dateadded": "2026-04-14 12:54:12 UTC",
            "url": "http://175.150.200.235:40944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:06:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821417/",
            "reporter": "geenensp"
        }
    ],
    "3821415": [
        {
            "dateadded": "2026-04-14 12:53:12 UTC",
            "url": "https://quor-tidear.qul4xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821415/",
            "reporter": "anonymous"
        }
    ],
    "3821414": [
        {
            "dateadded": "2026-04-14 12:51:17 UTC",
            "url": "http://85.12.205.35:34082/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:33:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821414/",
            "reporter": "geenensp"
        }
    ],
    "3821413": [
        {
            "dateadded": "2026-04-14 12:50:21 UTC",
            "url": "http://59.88.131.37:44336/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821413/",
            "reporter": "geenensp"
        }
    ],
    "3821412": [
        {
            "dateadded": "2026-04-14 12:49:17 UTC",
            "url": "http://61.53.99.108:33252/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:29:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821412/",
            "reporter": "geenensp"
        }
    ],
    "3821411": [
        {
            "dateadded": "2026-04-14 12:49:08 UTC",
            "url": "https://q1tnk.qul4xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821411/",
            "reporter": "anonymous"
        }
    ],
    "3821410": [
        {
            "dateadded": "2026-04-14 12:42:10 UTC",
            "url": "https://triforgea.qul4xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821410/",
            "reporter": "anonymous"
        }
    ],
    "3821408": [
        {
            "dateadded": "2026-04-14 12:41:15 UTC",
            "url": "http://222.137.173.152:49912/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821408/",
            "reporter": "geenensp"
        }
    ],
    "3821409": [
        {
            "dateadded": "2026-04-14 12:41:15 UTC",
            "url": "http://139.218.43.94:50164/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:19:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821409/",
            "reporter": "geenensp"
        }
    ],
    "3821407": [
        {
            "dateadded": "2026-04-14 12:37:10 UTC",
            "url": "https://rc3ba.qul4xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821407/",
            "reporter": "anonymous"
        }
    ],
    "3821406": [
        {
            "dateadded": "2026-04-14 12:32:13 UTC",
            "url": "https://cmvpokng.qul4xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821406/",
            "reporter": "anonymous"
        }
    ],
    "3821405": [
        {
            "dateadded": "2026-04-14 12:28:09 UTC",
            "url": "https://freigoak.norxelav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821405/",
            "reporter": "anonymous"
        }
    ],
    "3821404": [
        {
            "dateadded": "2026-04-14 12:27:38 UTC",
            "url": "http://78.165.125.38:40735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821404/",
            "reporter": "geenensp"
        }
    ],
    "3821403": [
        {
            "dateadded": "2026-04-14 12:27:16 UTC",
            "url": "http://59.88.131.37:44336/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 12:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821403/",
            "reporter": "geenensp"
        }
    ],
    "3821402": [
        {
            "dateadded": "2026-04-14 12:23:19 UTC",
            "url": "http://182.124.33.254:56863/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:25:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821402/",
            "reporter": "geenensp"
        }
    ],
    "3821401": [
        {
            "dateadded": "2026-04-14 12:19:21 UTC",
            "url": "http://105.184.17.141:44741/i",
            "url_status": "offline",
            "last_online": "2026-04-22 08:05:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821401/",
            "reporter": "geenensp"
        }
    ],
    "3821400": [
        {
            "dateadded": "2026-04-14 12:19:12 UTC",
            "url": "https://wx3wxihq.norxelav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821400/",
            "reporter": "anonymous"
        }
    ],
    "3821399": [
        {
            "dateadded": "2026-04-14 12:18:15 UTC",
            "url": "http://123.8.24.59:43022/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:30:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821399/",
            "reporter": "geenensp"
        }
    ],
    "3821398": [
        {
            "dateadded": "2026-04-14 12:13:10 UTC",
            "url": "https://sile-reel.norxelav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821398/",
            "reporter": "anonymous"
        }
    ],
    "3821397": [
        {
            "dateadded": "2026-04-14 12:09:19 UTC",
            "url": "http://182.124.112.31:40481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 17:23:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821397/",
            "reporter": "geenensp"
        }
    ],
    "3821396": [
        {
            "dateadded": "2026-04-14 12:07:09 UTC",
            "url": "https://otpj4gh.norxelav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821396/",
            "reporter": "anonymous"
        }
    ],
    "3821395": [
        {
            "dateadded": "2026-04-14 12:01:06 UTC",
            "url": "https://zbianule.norxelav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 12:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821395/",
            "reporter": "anonymous"
        }
    ],
    "3821394": [
        {
            "dateadded": "2026-04-14 12:00:10 UTC",
            "url": "https://homecaremovers.com/server.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821394/",
            "reporter": "abuse_ch"
        }
    ],
    "3821393": [
        {
            "dateadded": "2026-04-14 12:00:08 UTC",
            "url": "https://corwineagles.com/image.png",
            "url_status": "offline",
            "last_online": "2026-04-26 18:48:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821393/",
            "reporter": "abuse_ch"
        }
    ],
    "3821392": [
        {
            "dateadded": "2026-04-14 11:59:23 UTC",
            "url": "http://65.99.181.12:49304/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821392/",
            "reporter": "geenensp"
        }
    ],
    "3821391": [
        {
            "dateadded": "2026-04-14 11:59:07 UTC",
            "url": "https://solar-sanat.net/imagepixxx011.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:57 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821391/",
            "reporter": "abuse_ch"
        }
    ],
    "3821390": [
        {
            "dateadded": "2026-04-14 11:58:15 UTC",
            "url": "https://allsydevs.com/wp-admin/images/about-texture1.png",
            "url_status": "offline",
            "last_online": "2026-04-16 10:50:23 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821390/",
            "reporter": "abuse_ch"
        }
    ],
    "3821389": [
        {
            "dateadded": "2026-04-14 11:57:26 UTC",
            "url": "http://204.76.203.168/ultron.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821389/",
            "reporter": "abuse_ch"
        }
    ],
    "3821388": [
        {
            "dateadded": "2026-04-14 11:56:14 UTC",
            "url": "https://sp4rr-switch.norxelav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821388/",
            "reporter": "anonymous"
        }
    ],
    "3821387": [
        {
            "dateadded": "2026-04-14 11:55:07 UTC",
            "url": "https://recavaran.com.tr/image.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821387/",
            "reporter": "abuse_ch"
        }
    ],
    "3821386": [
        {
            "dateadded": "2026-04-14 11:54:13 UTC",
            "url": "https://domister.online/woow.dat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821386/",
            "reporter": "abuse_ch"
        }
    ],
    "3821385": [
        {
            "dateadded": "2026-04-14 11:52:22 UTC",
            "url": "http://105.184.17.141:44741/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 08:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821385/",
            "reporter": "geenensp"
        }
    ],
    "3821384": [
        {
            "dateadded": "2026-04-14 11:51:23 UTC",
            "url": "http://123.8.24.59:43022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:24:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821384/",
            "reporter": "geenensp"
        }
    ],
    "3821383": [
        {
            "dateadded": "2026-04-14 11:50:20 UTC",
            "url": "http://119.179.250.240:38610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821383/",
            "reporter": "geenensp"
        }
    ],
    "3821381": [
        {
            "dateadded": "2026-04-14 11:50:09 UTC",
            "url": "https://sermeshos5.bry6moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821381/",
            "reporter": "anonymous"
        }
    ],
    "3821382": [
        {
            "dateadded": "2026-04-14 11:50:09 UTC",
            "url": "https://homecaremovers.com/lilu.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC",
                "PureRAT",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821382/",
            "reporter": "abuse_ch"
        }
    ],
    "3821380": [
        {
            "dateadded": "2026-04-14 11:48:10 UTC",
            "url": "https://everycarebd.com/imagevolume09875987654.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:45 UTC",
            "threat": "malware_download",
            "tags": [
                "PureHVNC"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821380/",
            "reporter": "abuse_ch"
        }
    ],
    "3821379": [
        {
            "dateadded": "2026-04-14 11:47:17 UTC",
            "url": "https://goplanet.digital/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-14 11:47:17 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821379/",
            "reporter": "abuse_ch"
        }
    ],
    "3821377": [
        {
            "dateadded": "2026-04-14 11:47:13 UTC",
            "url": "https://goplanet.digital/img_064042.png",
            "url_status": "offline",
            "last_online": "2026-04-14 11:47:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821377/",
            "reporter": "abuse_ch"
        }
    ],
    "3821378": [
        {
            "dateadded": "2026-04-14 11:47:13 UTC",
            "url": "https://goplanet.digital/domens.hta",
            "url_status": "offline",
            "last_online": "2026-04-14 11:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821378/",
            "reporter": "abuse_ch"
        }
    ],
    "3821376": [
        {
            "dateadded": "2026-04-14 11:45:18 UTC",
            "url": "https://kg9c.bry6moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821376/",
            "reporter": "anonymous"
        }
    ],
    "3821375": [
        {
            "dateadded": "2026-04-14 11:41:10 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/0d1c792fa_ZyroAim-Apex.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821375/",
            "reporter": "burger"
        }
    ],
    "3821372": [
        {
            "dateadded": "2026-04-14 11:41:08 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/e27407567_ZyroAim-Roblox.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821372/",
            "reporter": "burger"
        }
    ],
    "3821373": [
        {
            "dateadded": "2026-04-14 11:41:08 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/b693dcbe9_ZyroAim-R6.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821373/",
            "reporter": "burger"
        }
    ],
    "3821374": [
        {
            "dateadded": "2026-04-14 11:41:08 UTC",
            "url": "https://zyroaim.com/downloads/ZyroAim-Valorant.exe",
            "url_status": "offline",
            "last_online": "2026-04-14 11:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821374/",
            "reporter": "burger"
        }
    ],
    "3821371": [
        {
            "dateadded": "2026-04-14 11:41:07 UTC",
            "url": "https://zyroaim.com/downloads/ZyroAim-Fortnite.exe",
            "url_status": "offline",
            "last_online": "2026-04-14 11:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821371/",
            "reporter": "burger"
        }
    ],
    "3821364": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/edefcd47d_ZyroAim-Fivem.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821364/",
            "reporter": "burger"
        }
    ],
    "3821365": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/88fcb7edf_ZyroAim-Rust.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821365/",
            "reporter": "burger"
        }
    ],
    "3821366": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/3edf558c7_ZyroAim-Fortnite.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821366/",
            "reporter": "burger"
        }
    ],
    "3821367": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://zyroaim.com/downloads/ZyroAim-CS2.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821367/",
            "reporter": "burger"
        }
    ],
    "3821368": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/1a5772b4f_ZyroAim-Spoofer.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821368/",
            "reporter": "burger"
        }
    ],
    "3821369": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/e8d7890c9_ZyroAim-COD.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821369/",
            "reporter": "burger"
        }
    ],
    "3821370": [
        {
            "dateadded": "2026-04-14 11:41:06 UTC",
            "url": "https://base44.app/api/apps/69cb3bb3ac2ef17c570d5fa7/files/mp/public/69cb3bb3ac2ef17c570d5fa7/b20834650_ZyroAim-Valorant.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "rat",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821370/",
            "reporter": "burger"
        }
    ],
    "3821363": [
        {
            "dateadded": "2026-04-14 11:40:11 UTC",
            "url": "https://privat7-wave.bry6moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821363/",
            "reporter": "anonymous"
        }
    ],
    "3821362": [
        {
            "dateadded": "2026-04-14 11:33:13 UTC",
            "url": "https://dev6-sync.bry6moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821362/",
            "reporter": "anonymous"
        }
    ],
    "3821361": [
        {
            "dateadded": "2026-04-14 11:28:14 UTC",
            "url": "https://birchalp.bry6moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821361/",
            "reporter": "anonymous"
        }
    ],
    "3821360": [
        {
            "dateadded": "2026-04-14 11:26:28 UTC",
            "url": "http://182.124.33.254:56863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821360/",
            "reporter": "geenensp"
        }
    ],
    "3821359": [
        {
            "dateadded": "2026-04-14 11:22:15 UTC",
            "url": "https://cravv-bridge.bry6moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821359/",
            "reporter": "anonymous"
        }
    ],
    "3821358": [
        {
            "dateadded": "2026-04-14 11:20:12 UTC",
            "url": "http://42.226.76.90:56197/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821358/",
            "reporter": "geenensp"
        }
    ],
    "3821357": [
        {
            "dateadded": "2026-04-14 11:16:16 UTC",
            "url": "https://zoloedu3.zeq3varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821357/",
            "reporter": "anonymous"
        }
    ],
    "3821356": [
        {
            "dateadded": "2026-04-14 11:12:14 UTC",
            "url": "https://solar-sanat.net/imagehd09.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:29 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "VenomRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821356/",
            "reporter": "abuse_ch"
        }
    ],
    "3821355": [
        {
            "dateadded": "2026-04-14 11:11:14 UTC",
            "url": "https://specimenapi.zeq3varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821355/",
            "reporter": "anonymous"
        }
    ],
    "3821354": [
        {
            "dateadded": "2026-04-14 11:05:14 UTC",
            "url": "https://fr31g2-stream.zeq3varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821354/",
            "reporter": "anonymous"
        }
    ],
    "3821353": [
        {
            "dateadded": "2026-04-14 11:05:08 UTC",
            "url": "http://192.227.128.157/IVLpuMqBYHZyxvngnUuqlF131.bin",
            "url_status": "offline",
            "last_online": "2026-04-15 16:56:46 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821353/",
            "reporter": "abuse_ch"
        }
    ],
    "3821352": [
        {
            "dateadded": "2026-04-14 11:03:19 UTC",
            "url": "http://182.121.184.103:40820/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:03:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821352/",
            "reporter": "geenensp"
        }
    ],
    "3821351": [
        {
            "dateadded": "2026-04-14 11:00:16 UTC",
            "url": "https://prij.zeq3varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 11:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821351/",
            "reporter": "anonymous"
        }
    ],
    "3821350": [
        {
            "dateadded": "2026-04-14 10:59:20 UTC",
            "url": "http://125.160.135.94:38141/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:29:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821350/",
            "reporter": "geenensp"
        }
    ],
    "3821349": [
        {
            "dateadded": "2026-04-14 10:56:29 UTC",
            "url": "http://59.42.88.27:56735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:28:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821349/",
            "reporter": "geenensp"
        }
    ],
    "3821348": [
        {
            "dateadded": "2026-04-14 10:56:23 UTC",
            "url": "http://42.226.76.90:56197/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821348/",
            "reporter": "geenensp"
        }
    ],
    "3821345": [
        {
            "dateadded": "2026-04-14 10:56:17 UTC",
            "url": "https://doc.e-statements.app/Bin/support.ClientSetup.msi?e=Access&y=Guest&c=4-4-2026&c=&c=&c=new&c=&c=&c=&c=",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:28 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821345/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821346": [
        {
            "dateadded": "2026-04-14 10:56:17 UTC",
            "url": "https://ledgermacr.vo8xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821346/",
            "reporter": "anonymous"
        }
    ],
    "3821347": [
        {
            "dateadded": "2026-04-14 10:56:17 UTC",
            "url": "https://dispgol.zeq3varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821347/",
            "reporter": "anonymous"
        }
    ],
    "3821342": [
        {
            "dateadded": "2026-04-14 10:56:12 UTC",
            "url": "http://27.215.81.3:39460/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821342/",
            "reporter": "geenensp"
        }
    ],
    "3821343": [
        {
            "dateadded": "2026-04-14 10:56:12 UTC",
            "url": "http://123.12.187.238:36235/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:20:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821343/",
            "reporter": "geenensp"
        }
    ],
    "3821344": [
        {
            "dateadded": "2026-04-14 10:56:12 UTC",
            "url": "http://123.12.187.238:36235/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:08:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821344/",
            "reporter": "geenensp"
        }
    ],
    "3821341": [
        {
            "dateadded": "2026-04-14 10:56:11 UTC",
            "url": "http://27.215.81.3:39460/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821341/",
            "reporter": "geenensp"
        }
    ],
    "3821340": [
        {
            "dateadded": "2026-04-14 10:56:10 UTC",
            "url": "http://185.224.215.205/2.exe",
            "url_status": "offline",
            "last_online": "2026-04-17 11:20:25 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SnappyClient"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821340/",
            "reporter": "abuse_ch"
        }
    ],
    "3821339": [
        {
            "dateadded": "2026-04-14 10:56:09 UTC",
            "url": "https://wafcif0g.zeq3varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821339/",
            "reporter": "anonymous"
        }
    ],
    "3821338": [
        {
            "dateadded": "2026-04-14 10:41:18 UTC",
            "url": "https://rbcroyalbank-homesd.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-15 10:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "RBC"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821338/",
            "reporter": "HuntTeam"
        }
    ],
    "3821329": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://suncorp-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 11:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Suncorp"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821329/",
            "reporter": "HuntTeam"
        }
    ],
    "3821330": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://anzrewardse-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 11:52:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ANZ",
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821330/",
            "reporter": "HuntTeam"
        }
    ],
    "3821331": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://rbcroyalbank-homesa.cc/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-15 16:37:55 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "RBC"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821331/",
            "reporter": "HuntTeam"
        }
    ],
    "3821332": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://bendigo-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 12:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Bendigo",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821332/",
            "reporter": "HuntTeam"
        }
    ],
    "3821333": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://lloydsbank-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 10:56:32 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "Lloyds",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821333/",
            "reporter": "HuntTeam"
        }
    ],
    "3821334": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://hsbcrewards-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 10:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "HSBC",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821334/",
            "reporter": "HuntTeam"
        }
    ],
    "3821335": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://rbcroyalbank-homesc.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-15 10:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "RBC"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821335/",
            "reporter": "HuntTeam"
        }
    ],
    "3821336": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://qantasrewardsa-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 10:44:25 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Qantas"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821336/",
            "reporter": "HuntTeam"
        }
    ],
    "3821337": [
        {
            "dateadded": "2026-04-14 10:41:17 UTC",
            "url": "https://qantasrewardsb-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 11:55:37 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Qantas"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821337/",
            "reporter": "HuntTeam"
        }
    ],
    "3821328": [
        {
            "dateadded": "2026-04-14 10:41:16 UTC",
            "url": "https://drive.google.com/uc?id=1DoUgV4cj0cxR6iR9JjgXxonvkLHfDt0C&export=download",
            "url_status": "offline",
            "last_online": "2026-04-14 23:25:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821328/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821327": [
        {
            "dateadded": "2026-04-14 10:41:15 UTC",
            "url": "https://drive.google.com/uc?id=18vrgoGx1gd9mWMVRMPRL_lNjGUJa6R8H&export=download",
            "url_status": "offline",
            "last_online": "2026-04-14 23:13:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821327/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821321": [
        {
            "dateadded": "2026-04-14 10:41:14 UTC",
            "url": "https://natwest-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "NatWest",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821321/",
            "reporter": "HuntTeam"
        }
    ],
    "3821322": [
        {
            "dateadded": "2026-04-14 10:41:14 UTC",
            "url": "https://raw.githubusercontent.com/meteorrejects/meteorrejects.github.io/refs/heads/main/meteor-rejects-addon-1.21.11.jar",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821322/",
            "reporter": "burger"
        }
    ],
    "3821323": [
        {
            "dateadded": "2026-04-14 10:41:14 UTC",
            "url": "https://suncorp-homesb.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 11:52:41 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Suncorp"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821323/",
            "reporter": "HuntTeam"
        }
    ],
    "3821324": [
        {
            "dateadded": "2026-04-14 10:41:14 UTC",
            "url": "https://hsbcrewards-homesb.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-17 10:38:02 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "HSBC",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821324/",
            "reporter": "HuntTeam"
        }
    ],
    "3821325": [
        {
            "dateadded": "2026-04-14 10:41:14 UTC",
            "url": "https://raw.githubusercontent.com/meteorrejects/meteorrejects.github.io/refs/heads/main/meteor-rejects-addon-1.21.0.jar",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:48 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821325/",
            "reporter": "burger"
        }
    ],
    "3821326": [
        {
            "dateadded": "2026-04-14 10:41:14 UTC",
            "url": "https://raw.githubusercontent.com/meteorrejects/meteorrejects.github.io/refs/heads/main/meteor-rejects-addon-1.21.4.jar",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821326/",
            "reporter": "burger"
        }
    ],
    "3821318": [
        {
            "dateadded": "2026-04-14 10:41:13 UTC",
            "url": "https://drive.usercontent.google.com/download?id=18vrgoGx1gd9mWMVRMPRL_lNjGUJa6R8H&export=download",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821318/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821319": [
        {
            "dateadded": "2026-04-14 10:41:13 UTC",
            "url": "https://rbcroyalbank-homese.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "RBC"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821319/",
            "reporter": "HuntTeam"
        }
    ],
    "3821320": [
        {
            "dateadded": "2026-04-14 10:41:13 UTC",
            "url": "https://commbank-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "CommBank",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821320/",
            "reporter": "HuntTeam"
        }
    ],
    "3821314": [
        {
            "dateadded": "2026-04-14 10:41:12 UTC",
            "url": "https://pub-0a6599d7d6394e379b6da3d6bfb5354a.r2.dev/nenkin.msi?R&",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821314/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821315": [
        {
            "dateadded": "2026-04-14 10:41:12 UTC",
            "url": "http://23.94.232.76:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:35 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821315/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821316": [
        {
            "dateadded": "2026-04-14 10:41:12 UTC",
            "url": "https://drive.usercontent.google.com/download?id=1DoUgV4cj0cxR6iR9JjgXxonvkLHfDt0C&export=download",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821316/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821317": [
        {
            "dateadded": "2026-04-14 10:41:12 UTC",
            "url": "http://sesdigitalsolutions.com/files/EventVPcardSC_PU1KQZvw_installer.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821317/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821308": [
        {
            "dateadded": "2026-04-14 10:41:07 UTC",
            "url": "https://westpac-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821308/",
            "reporter": "HuntTeam"
        }
    ],
    "3821309": [
        {
            "dateadded": "2026-04-14 10:41:07 UTC",
            "url": "https://commbanka-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "CommBank",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821309/",
            "reporter": "HuntTeam"
        }
    ],
    "3821310": [
        {
            "dateadded": "2026-04-14 10:41:07 UTC",
            "url": "https://hsbcrewardsa-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "HSBC",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821310/",
            "reporter": "HuntTeam"
        }
    ],
    "3821311": [
        {
            "dateadded": "2026-04-14 10:41:07 UTC",
            "url": "https://suncorprewardsn-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Suncorp"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821311/",
            "reporter": "HuntTeam"
        }
    ],
    "3821312": [
        {
            "dateadded": "2026-04-14 10:41:07 UTC",
            "url": "http://46.183.222.116/ZEnECactfUaYZq206.bin",
            "url_status": "offline",
            "last_online": "2026-04-15 23:31:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821312/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821313": [
        {
            "dateadded": "2026-04-14 10:41:07 UTC",
            "url": "https://raiffeisenbbonusprogramma.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Raiffeisen"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821313/",
            "reporter": "HuntTeam"
        }
    ],
    "3821299": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://westpacnzb-home.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821299/",
            "reporter": "HuntTeam"
        }
    ],
    "3821300": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://macquarierewardsa-home.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "Macquarie",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821300/",
            "reporter": "HuntTeam"
        }
    ],
    "3821301": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://westpac-homesd.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821301/",
            "reporter": "HuntTeam"
        }
    ],
    "3821302": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://suncorprewardsq-home.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Suncorp"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821302/",
            "reporter": "HuntTeam"
        }
    ],
    "3821303": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://lloydsbank-homesb.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "Lloyds",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821303/",
            "reporter": "HuntTeam"
        }
    ],
    "3821304": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://hsbcrewardsc-homes.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "HSBC",
                "Jwr",
                "PaaS",
                "phishing"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821304/",
            "reporter": "HuntTeam"
        }
    ],
    "3821305": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://stgeorge-homesd.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "StGeorge"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821305/",
            "reporter": "HuntTeam"
        }
    ],
    "3821306": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://westpacnza-home.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821306/",
            "reporter": "HuntTeam"
        }
    ],
    "3821307": [
        {
            "dateadded": "2026-04-14 10:41:06 UTC",
            "url": "https://westpac-homesb.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821307/",
            "reporter": "HuntTeam"
        }
    ],
    "3821298": [
        {
            "dateadded": "2026-04-14 10:41:05 UTC",
            "url": "https://westpac-homesc.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821298/",
            "reporter": "HuntTeam"
        }
    ],
    "3821297": [
        {
            "dateadded": "2026-04-14 10:40:14 UTC",
            "url": "https://westpacone-homesc.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 07:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821297/",
            "reporter": "HuntTeam"
        }
    ],
    "3821296": [
        {
            "dateadded": "2026-04-14 10:40:12 UTC",
            "url": "https://westpacone-homesg.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": "2026-04-20 12:00:57 UTC",
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821296/",
            "reporter": "HuntTeam"
        }
    ],
    "3821295": [
        {
            "dateadded": "2026-04-14 10:40:09 UTC",
            "url": "https://westpacone-homesb.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821295/",
            "reporter": "HuntTeam"
        }
    ],
    "3821294": [
        {
            "dateadded": "2026-04-14 10:40:08 UTC",
            "url": "https://westpacone-homesz.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821294/",
            "reporter": "HuntTeam"
        }
    ],
    "3821289": [
        {
            "dateadded": "2026-04-14 10:40:07 UTC",
            "url": "https://westpacone-homese.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821289/",
            "reporter": "HuntTeam"
        }
    ],
    "3821290": [
        {
            "dateadded": "2026-04-14 10:40:07 UTC",
            "url": "https://westpacone-homesf.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821290/",
            "reporter": "HuntTeam"
        }
    ],
    "3821291": [
        {
            "dateadded": "2026-04-14 10:40:07 UTC",
            "url": "https://westpacone-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821291/",
            "reporter": "HuntTeam"
        }
    ],
    "3821292": [
        {
            "dateadded": "2026-04-14 10:40:07 UTC",
            "url": "https://westpacrewardshop2025c.click/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821292/",
            "reporter": "HuntTeam"
        }
    ],
    "3821293": [
        {
            "dateadded": "2026-04-14 10:40:07 UTC",
            "url": "https://wpac-homesa.info/com/static/js/main.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "banking-trojan-frontend",
                "Jwr",
                "PaaS",
                "phishing",
                "Westpac"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821293/",
            "reporter": "HuntTeam"
        }
    ],
    "3821288": [
        {
            "dateadded": "2026-04-14 10:38:15 UTC",
            "url": "https://96af.vo8xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:38:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821288/",
            "reporter": "anonymous"
        }
    ],
    "3821287": [
        {
            "dateadded": "2026-04-14 10:31:12 UTC",
            "url": "https://canyonsecu.vo8xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821287/",
            "reporter": "anonymous"
        }
    ],
    "3821286": [
        {
            "dateadded": "2026-04-14 10:26:10 UTC",
            "url": "https://portal-dev.vo8xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821286/",
            "reporter": "anonymous"
        }
    ],
    "3821285": [
        {
            "dateadded": "2026-04-14 10:22:22 UTC",
            "url": "http://125.44.208.181:53574/i",
            "url_status": "offline",
            "last_online": "2026-04-14 18:36:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821285/",
            "reporter": "geenensp"
        }
    ],
    "3821284": [
        {
            "dateadded": "2026-04-14 10:21:19 UTC",
            "url": "https://mosrende.vo8xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:21:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821284/",
            "reporter": "anonymous"
        }
    ],
    "3821283": [
        {
            "dateadded": "2026-04-14 10:16:16 UTC",
            "url": "https://autum-path.vo8xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821283/",
            "reporter": "anonymous"
        }
    ],
    "3821282": [
        {
            "dateadded": "2026-04-14 10:10:15 UTC",
            "url": "https://vor-nexal.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821282/",
            "reporter": "anonymous"
        }
    ],
    "3821281": [
        {
            "dateadded": "2026-04-14 10:07:14 UTC",
            "url": "http://113.221.77.62:47220/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821281/",
            "reporter": "geenensp"
        }
    ],
    "3821279": [
        {
            "dateadded": "2026-04-14 10:04:20 UTC",
            "url": "http://182.119.59.148:36564/i",
            "url_status": "offline",
            "last_online": "2026-04-20 10:35:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821279/",
            "reporter": "geenensp"
        }
    ],
    "3821280": [
        {
            "dateadded": "2026-04-14 10:04:20 UTC",
            "url": "http://182.121.184.103:40820/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 10:21:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821280/",
            "reporter": "geenensp"
        }
    ],
    "3821278": [
        {
            "dateadded": "2026-04-14 10:04:09 UTC",
            "url": "https://loyalshoal.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 10:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821278/",
            "reporter": "anonymous"
        }
    ],
    "3821277": [
        {
            "dateadded": "2026-04-14 10:01:10 UTC",
            "url": "http://42.177.23.149:48269/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:50:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821277/",
            "reporter": "geenensp"
        }
    ],
    "3821276": [
        {
            "dateadded": "2026-04-14 10:00:14 UTC",
            "url": "http://91.130.34.217:52310/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821276/",
            "reporter": "geenensp"
        }
    ],
    "3821275": [
        {
            "dateadded": "2026-04-14 09:58:10 UTC",
            "url": "https://zen-fluxa.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821275/",
            "reporter": "anonymous"
        }
    ],
    "3821274": [
        {
            "dateadded": "2026-04-14 09:53:18 UTC",
            "url": "https://bjemnap.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:53:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821274/",
            "reporter": "anonymous"
        }
    ],
    "3821273": [
        {
            "dateadded": "2026-04-14 09:48:12 UTC",
            "url": "https://repsort.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821273/",
            "reporter": "anonymous"
        }
    ],
    "3821271": [
        {
            "dateadded": "2026-04-14 09:47:16 UTC",
            "url": "http://91.130.34.217:52310/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821271/",
            "reporter": "geenensp"
        }
    ],
    "3821272": [
        {
            "dateadded": "2026-04-14 09:47:16 UTC",
            "url": "http://39.88.123.85:60363/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:40:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821272/",
            "reporter": "geenensp"
        }
    ],
    "3821270": [
        {
            "dateadded": "2026-04-14 09:46:11 UTC",
            "url": "http://104.32.65.48:55075/i",
            "url_status": "offline",
            "last_online": "2026-04-20 23:45:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821270/",
            "reporter": "geenensp"
        }
    ],
    "3821269": [
        {
            "dateadded": "2026-04-14 09:41:08 UTC",
            "url": "https://keldra6ar.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821269/",
            "reporter": "anonymous"
        }
    ],
    "3821268": [
        {
            "dateadded": "2026-04-14 09:39:13 UTC",
            "url": "http://182.119.59.148:36564/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:28:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821268/",
            "reporter": "geenensp"
        }
    ],
    "3821267": [
        {
            "dateadded": "2026-04-14 09:38:08 UTC",
            "url": "http://130.12.180.119:8080/21.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-119-8080",
                "exe",
                "OffLoader",
                "Tofsee",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821267/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821266": [
        {
            "dateadded": "2026-04-14 09:36:07 UTC",
            "url": "https://stone-flow.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821266/",
            "reporter": "anonymous"
        }
    ],
    "3821265": [
        {
            "dateadded": "2026-04-14 09:31:11 UTC",
            "url": "https://sandsto.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821265/",
            "reporter": "anonymous"
        }
    ],
    "3821264": [
        {
            "dateadded": "2026-04-14 09:29:07 UTC",
            "url": "http://91.92.243.242/h",
            "url_status": "offline",
            "last_online": "2026-04-15 16:55:26 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-243-242",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821264/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821261": [
        {
            "dateadded": "2026-04-14 09:28:07 UTC",
            "url": "http://91.92.243.242/m",
            "url_status": "offline",
            "last_online": "2026-04-15 16:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-243-242",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821261/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821262": [
        {
            "dateadded": "2026-04-14 09:28:07 UTC",
            "url": "http://91.92.243.242/l",
            "url_status": "offline",
            "last_online": "2026-04-15 16:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-243-242",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821262/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821263": [
        {
            "dateadded": "2026-04-14 09:28:07 UTC",
            "url": "http://91.92.243.242/fwfdwefd231d.exe",
            "url_status": "offline",
            "last_online": "2026-04-15 16:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "91-92-243-242",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821263/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821260": [
        {
            "dateadded": "2026-04-14 09:26:13 UTC",
            "url": "http://175.167.45.60:54612/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 23:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821260/",
            "reporter": "geenensp"
        }
    ],
    "3821259": [
        {
            "dateadded": "2026-04-14 09:24:11 UTC",
            "url": "https://wraw.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821259/",
            "reporter": "anonymous"
        }
    ],
    "3821258": [
        {
            "dateadded": "2026-04-14 09:23:13 UTC",
            "url": "https://www.mediafire.com/file_premium/w9myf6zlc5ny230/1f86ed90-6b0e-41e4-b4b8-dee23cfba442/file",
            "url_status": "offline",
            "last_online": "2026-04-14 10:22:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821258/",
            "reporter": "abuse_ch"
        }
    ],
    "3821257": [
        {
            "dateadded": "2026-04-14 09:22:14 UTC",
            "url": "http://125.47.34.237:58470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:56:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821257/",
            "reporter": "geenensp"
        }
    ],
    "3821256": [
        {
            "dateadded": "2026-04-14 09:19:09 UTC",
            "url": "https://29mpmnz7.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821256/",
            "reporter": "anonymous"
        }
    ],
    "3821255": [
        {
            "dateadded": "2026-04-14 09:17:12 UTC",
            "url": "http://110.38.211.139:41615/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821255/",
            "reporter": "geenensp"
        }
    ],
    "3821254": [
        {
            "dateadded": "2026-04-14 09:16:09 UTC",
            "url": "http://112.248.106.51:39747/i",
            "url_status": "offline",
            "last_online": "2026-04-16 04:41:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821254/",
            "reporter": "geenensp"
        }
    ],
    "3821253": [
        {
            "dateadded": "2026-04-14 09:15:13 UTC",
            "url": "https://ggzne8.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821253/",
            "reporter": "anonymous"
        }
    ],
    "3821252": [
        {
            "dateadded": "2026-04-14 09:12:11 UTC",
            "url": "https://soltideex2.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821252/",
            "reporter": "anonymous"
        }
    ],
    "3821249": [
        {
            "dateadded": "2026-04-14 09:08:17 UTC",
            "url": "http://176.65.139.42/mipsle",
            "url_status": "offline",
            "last_online": "2026-04-20 23:21:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821249/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821250": [
        {
            "dateadded": "2026-04-14 09:08:17 UTC",
            "url": "http://176.65.139.42/mips",
            "url_status": "offline",
            "last_online": "2026-04-21 16:49:22 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821250/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821251": [
        {
            "dateadded": "2026-04-14 09:08:17 UTC",
            "url": "http://176.65.139.42/x86",
            "url_status": "offline",
            "last_online": "2026-04-21 17:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821251/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821247": [
        {
            "dateadded": "2026-04-14 09:08:11 UTC",
            "url": "http://176.65.139.42/bot.exe",
            "url_status": "offline",
            "last_online": "2026-04-20 23:57:44 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821247/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821248": [
        {
            "dateadded": "2026-04-14 09:08:11 UTC",
            "url": "http://176.65.139.42/bot_x86.exe",
            "url_status": "offline",
            "last_online": "2026-04-21 00:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-42",
                "exe",
                "LummaStealer",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821248/",
            "reporter": "BlinkzSec"
        }
    ],
    "3821246": [
        {
            "dateadded": "2026-04-14 09:05:12 UTC",
            "url": "http://175.165.153.136:47696/i",
            "url_status": "offline",
            "last_online": "2026-04-24 10:56:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821246/",
            "reporter": "geenensp"
        }
    ],
    "3821245": [
        {
            "dateadded": "2026-04-14 09:02:08 UTC",
            "url": "https://inv0i-array.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 09:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821245/",
            "reporter": "anonymous"
        }
    ],
    "3821244": [
        {
            "dateadded": "2026-04-14 09:00:41 UTC",
            "url": "http://112.248.106.51:39747/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:56:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821244/",
            "reporter": "geenensp"
        }
    ],
    "3821243": [
        {
            "dateadded": "2026-04-14 08:57:09 UTC",
            "url": "https://paletteloos.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821243/",
            "reporter": "anonymous"
        }
    ],
    "3821242": [
        {
            "dateadded": "2026-04-14 08:53:17 UTC",
            "url": "http://123.13.72.124:49073/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821242/",
            "reporter": "geenensp"
        }
    ],
    "3821241": [
        {
            "dateadded": "2026-04-14 08:52:16 UTC",
            "url": "http://5.165.92.80:33719/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-26 06:03:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821241/",
            "reporter": "geenensp"
        }
    ],
    "3821240": [
        {
            "dateadded": "2026-04-14 08:52:14 UTC",
            "url": "https://genome2-line.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821240/",
            "reporter": "anonymous"
        }
    ],
    "3821239": [
        {
            "dateadded": "2026-04-14 08:49:12 UTC",
            "url": "http://59.47.190.105:45324/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 16:45:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821239/",
            "reporter": "geenensp"
        }
    ],
    "3821238": [
        {
            "dateadded": "2026-04-14 08:47:25 UTC",
            "url": "http://123.5.153.139:49733/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821238/",
            "reporter": "geenensp"
        }
    ],
    "3821237": [
        {
            "dateadded": "2026-04-14 08:46:19 UTC",
            "url": "http://110.38.211.139:41615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:18:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821237/",
            "reporter": "geenensp"
        }
    ],
    "3821236": [
        {
            "dateadded": "2026-04-14 08:45:11 UTC",
            "url": "https://harvestchanne.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821236/",
            "reporter": "anonymous"
        }
    ],
    "3821235": [
        {
            "dateadded": "2026-04-14 08:42:10 UTC",
            "url": "http://175.165.153.136:47696/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 16:51:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821235/",
            "reporter": "geenensp"
        }
    ],
    "3821234": [
        {
            "dateadded": "2026-04-14 08:39:09 UTC",
            "url": "https://cinem-graph.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821234/",
            "reporter": "anonymous"
        }
    ],
    "3821233": [
        {
            "dateadded": "2026-04-14 08:37:24 UTC",
            "url": "http://27.222.182.243:49845/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:44:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821233/",
            "reporter": "geenensp"
        }
    ],
    "3821232": [
        {
            "dateadded": "2026-04-14 08:37:09 UTC",
            "url": "https://itncq.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821232/",
            "reporter": "anonymous"
        }
    ],
    "3821231": [
        {
            "dateadded": "2026-04-14 08:31:10 UTC",
            "url": "http://42.59.198.79:36986/i",
            "url_status": "offline",
            "last_online": "2026-04-14 18:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821231/",
            "reporter": "geenensp"
        }
    ],
    "3821230": [
        {
            "dateadded": "2026-04-14 08:27:20 UTC",
            "url": "http://123.13.72.124:49073/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821230/",
            "reporter": "geenensp"
        }
    ],
    "3821228": [
        {
            "dateadded": "2026-04-14 08:26:15 UTC",
            "url": "http://27.204.252.54:43744/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821228/",
            "reporter": "geenensp"
        }
    ],
    "3821229": [
        {
            "dateadded": "2026-04-14 08:26:15 UTC",
            "url": "http://123.5.153.139:49733/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 08:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821229/",
            "reporter": "geenensp"
        }
    ],
    "3821227": [
        {
            "dateadded": "2026-04-14 08:26:10 UTC",
            "url": "https://gate6-way.active-service-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821227/",
            "reporter": "anonymous"
        }
    ],
    "3821226": [
        {
            "dateadded": "2026-04-14 08:21:46 UTC",
            "url": "http://112.234.154.89:47455/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821226/",
            "reporter": "geenensp"
        }
    ],
    "3821225": [
        {
            "dateadded": "2026-04-14 08:20:12 UTC",
            "url": "https://svc5-net.active-service-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821225/",
            "reporter": "anonymous"
        }
    ],
    "3821224": [
        {
            "dateadded": "2026-04-14 08:17:10 UTC",
            "url": "https://vault4-doc.active-service-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821224/",
            "reporter": "anonymous"
        }
    ],
    "3821223": [
        {
            "dateadded": "2026-04-14 08:14:12 UTC",
            "url": "http://104.32.65.48:55075/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 22:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821223/",
            "reporter": "geenensp"
        }
    ],
    "3821222": [
        {
            "dateadded": "2026-04-14 08:14:06 UTC",
            "url": "https://api3-ready.active-service-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821222/",
            "reporter": "anonymous"
        }
    ],
    "3821221": [
        {
            "dateadded": "2026-04-14 08:10:31 UTC",
            "url": "https://jzdq.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:31 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821221/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821217": [
        {
            "dateadded": "2026-04-14 08:10:30 UTC",
            "url": "https://dirmod.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:30 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821217/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821218": [
        {
            "dateadded": "2026-04-14 08:10:30 UTC",
            "url": "https://iwiax.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:30 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821218/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821219": [
        {
            "dateadded": "2026-04-14 08:10:30 UTC",
            "url": "https://smar-disc.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:30 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821219/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821220": [
        {
            "dateadded": "2026-04-14 08:10:30 UTC",
            "url": "https://mer-draex.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:30 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821220/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821213": [
        {
            "dateadded": "2026-04-14 08:10:29 UTC",
            "url": "https://caveazure.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:29 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821213/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821214": [
        {
            "dateadded": "2026-04-14 08:10:29 UTC",
            "url": "https://5urv-pulse.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:29 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821214/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821215": [
        {
            "dateadded": "2026-04-14 08:10:29 UTC",
            "url": "https://host1-base.active-service-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821215/",
            "reporter": "anonymous"
        }
    ],
    "3821216": [
        {
            "dateadded": "2026-04-14 08:10:29 UTC",
            "url": "https://meta-trust3d.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:29 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821216/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821210": [
        {
            "dateadded": "2026-04-14 08:10:28 UTC",
            "url": "http://107.175.88.100/img/optimized_MSI.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821210/",
            "reporter": "abuse_ch"
        }
    ],
    "3821211": [
        {
            "dateadded": "2026-04-14 08:10:28 UTC",
            "url": "https://node2-core.active-service-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821211/",
            "reporter": "anonymous"
        }
    ],
    "3821212": [
        {
            "dateadded": "2026-04-14 08:10:28 UTC",
            "url": "http://42.59.198.79:36986/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:51:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821212/",
            "reporter": "geenensp"
        }
    ],
    "3821209": [
        {
            "dateadded": "2026-04-14 08:10:26 UTC",
            "url": "https://nordraex4.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:26 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821209/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821208": [
        {
            "dateadded": "2026-04-14 08:10:24 UTC",
            "url": "https://neo-c0upon.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821208/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821207": [
        {
            "dateadded": "2026-04-14 08:10:18 UTC",
            "url": "https://garde-rave.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:18 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821207/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821206": [
        {
            "dateadded": "2026-04-14 08:10:17 UTC",
            "url": "https://3zpnkdk.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:17 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821206/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821203": [
        {
            "dateadded": "2026-04-14 08:10:16 UTC",
            "url": "http://198.12.83.76/29/goodgirlformygirltobe.hta",
            "url_status": "offline",
            "last_online": "2026-04-27 05:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821203/",
            "reporter": "abuse_ch"
        }
    ],
    "3821204": [
        {
            "dateadded": "2026-04-14 08:10:16 UTC",
            "url": "https://zenforgeix.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821204/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821205": [
        {
            "dateadded": "2026-04-14 08:10:16 UTC",
            "url": "https://94auswsb.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821205/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821201": [
        {
            "dateadded": "2026-04-14 08:10:13 UTC",
            "url": "https://sercrestar.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 08:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821201/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821202": [
        {
            "dateadded": "2026-04-14 08:10:13 UTC",
            "url": "http://27.222.182.243:49845/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:12:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821202/",
            "reporter": "geenensp"
        }
    ],
    "3821194": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://crimso1-vector.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821194/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821195": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://ibpo.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821195/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821196": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://w0rk3-wave.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821196/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821197": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://scanmodel.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821197/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821198": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://solspireum.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821198/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821199": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://kawjhm.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821199/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821200": [
        {
            "dateadded": "2026-04-14 07:54:34 UTC",
            "url": "https://deliver4-mesh.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821200/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821192": [
        {
            "dateadded": "2026-04-14 07:54:33 UTC",
            "url": "https://aliglagoo.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:33 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821192/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821193": [
        {
            "dateadded": "2026-04-14 07:54:33 UTC",
            "url": "https://bandwi-span.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:33 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821193/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821189": [
        {
            "dateadded": "2026-04-14 07:54:32 UTC",
            "url": "http://125.41.170.101:51903/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821189/",
            "reporter": "geenensp"
        }
    ],
    "3821190": [
        {
            "dateadded": "2026-04-14 07:54:32 UTC",
            "url": "https://valeoptic.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:32 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821190/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821191": [
        {
            "dateadded": "2026-04-14 07:54:32 UTC",
            "url": "https://lumnexa.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:32 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821191/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821188": [
        {
            "dateadded": "2026-04-14 07:54:30 UTC",
            "url": "https://nimbl-sheet.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:30 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821188/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821186": [
        {
            "dateadded": "2026-04-14 07:54:29 UTC",
            "url": "https://71wxz.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821186/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821187": [
        {
            "dateadded": "2026-04-14 07:54:29 UTC",
            "url": "https://vivi3-watch.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821187/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821185": [
        {
            "dateadded": "2026-04-14 07:54:28 UTC",
            "url": "https://rende7-beam.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:28 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821185/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821184": [
        {
            "dateadded": "2026-04-14 07:54:27 UTC",
            "url": "https://neo-r0ck.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:27 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821184/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821182": [
        {
            "dateadded": "2026-04-14 07:54:25 UTC",
            "url": "https://tp3gkrx.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821182/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821183": [
        {
            "dateadded": "2026-04-14 07:54:25 UTC",
            "url": "https://freightdat.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821183/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821181": [
        {
            "dateadded": "2026-04-14 07:54:20 UTC",
            "url": "https://sfayxss.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821181/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821180": [
        {
            "dateadded": "2026-04-14 07:54:19 UTC",
            "url": "https://mn4wr.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 18:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821180/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821179": [
        {
            "dateadded": "2026-04-14 07:54:18 UTC",
            "url": "https://quormeshos3.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 20:08:42 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821179/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821178": [
        {
            "dateadded": "2026-04-14 07:54:17 UTC",
            "url": "https://cg892665.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:15:27 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821178/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821176": [
        {
            "dateadded": "2026-04-14 07:54:15 UTC",
            "url": "https://patterndelivery.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821176/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821177": [
        {
            "dateadded": "2026-04-14 07:54:15 UTC",
            "url": "https://cleansensor.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821177/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821174": [
        {
            "dateadded": "2026-04-14 07:54:13 UTC",
            "url": "https://me6z.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:56:54 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821174/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821175": [
        {
            "dateadded": "2026-04-14 07:54:13 UTC",
            "url": "https://flamemanifest.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 18:47:54 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821175/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821173": [
        {
            "dateadded": "2026-04-14 07:54:12 UTC",
            "url": "https://pars-packe.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 18:35:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821173/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821168": [
        {
            "dateadded": "2026-04-14 07:53:16 UTC",
            "url": "https://gate6-hub.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821168/",
            "reporter": "anonymous"
        }
    ],
    "3821169": [
        {
            "dateadded": "2026-04-14 07:53:16 UTC",
            "url": "https://ygxq.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821169/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821170": [
        {
            "dateadded": "2026-04-14 07:53:16 UTC",
            "url": "https://runwspoo.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821170/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821171": [
        {
            "dateadded": "2026-04-14 07:53:16 UTC",
            "url": "https://ptwc.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821171/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821172": [
        {
            "dateadded": "2026-04-14 07:53:16 UTC",
            "url": "https://pxedkzjn.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821172/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821167": [
        {
            "dateadded": "2026-04-14 07:53:14 UTC",
            "url": "https://3zowl.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821167/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821165": [
        {
            "dateadded": "2026-04-14 07:53:13 UTC",
            "url": "https://vmkzuhhq.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821165/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821166": [
        {
            "dateadded": "2026-04-14 07:53:13 UTC",
            "url": "https://15cqw.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 07:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821166/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821163": [
        {
            "dateadded": "2026-04-14 07:53:07 UTC",
            "url": "https://lywetogx.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821163/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821164": [
        {
            "dateadded": "2026-04-14 07:53:07 UTC",
            "url": "https://buffmargi.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821164/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821161": [
        {
            "dateadded": "2026-04-14 07:53:06 UTC",
            "url": "https://did8.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821161/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821162": [
        {
            "dateadded": "2026-04-14 07:53:06 UTC",
            "url": "https://zennexis.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821162/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3821160": [
        {
            "dateadded": "2026-04-14 07:49:23 UTC",
            "url": "http://61.54.42.193:57086/i",
            "url_status": "offline",
            "last_online": "2026-04-14 07:49:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821160/",
            "reporter": "geenensp"
        }
    ],
    "3821159": [
        {
            "dateadded": "2026-04-14 07:48:10 UTC",
            "url": "http://105.186.213.212:46845/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821159/",
            "reporter": "geenensp"
        }
    ],
    "3821158": [
        {
            "dateadded": "2026-04-14 07:47:08 UTC",
            "url": "https://svc5-link.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821158/",
            "reporter": "anonymous"
        }
    ],
    "3821157": [
        {
            "dateadded": "2026-04-14 07:44:08 UTC",
            "url": "https://www.dropbox.com/scl/fi/tpxodftkoenzy8fxnn08z/ScreenConnect.ClientSetup.msi?rlkey=7mkilx20xtmuqv8ts14qkh921&st=wvhdtsir&dl=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821157/",
            "reporter": "abuse_ch"
        }
    ],
    "3821156": [
        {
            "dateadded": "2026-04-14 07:42:11 UTC",
            "url": "https://vault4-on.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821156/",
            "reporter": "anonymous"
        }
    ],
    "3821155": [
        {
            "dateadded": "2026-04-14 07:37:11 UTC",
            "url": "http://110.36.80.173:33533/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821155/",
            "reporter": "geenensp"
        }
    ],
    "3821154": [
        {
            "dateadded": "2026-04-14 07:36:13 UTC",
            "url": "https://api3-site.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821154/",
            "reporter": "anonymous"
        }
    ],
    "3821153": [
        {
            "dateadded": "2026-04-14 07:30:09 UTC",
            "url": "https://node2-port.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821153/",
            "reporter": "anonymous"
        }
    ],
    "3821152": [
        {
            "dateadded": "2026-04-14 07:25:17 UTC",
            "url": "https://tun1-pipe.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821152/",
            "reporter": "anonymous"
        }
    ],
    "3821151": [
        {
            "dateadded": "2026-04-14 07:20:22 UTC",
            "url": "http://182.117.41.179:49897/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:25:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821151/",
            "reporter": "geenensp"
        }
    ],
    "3821150": [
        {
            "dateadded": "2026-04-14 07:19:09 UTC",
            "url": "https://gate6-main.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821150/",
            "reporter": "anonymous"
        }
    ],
    "3821149": [
        {
            "dateadded": "2026-04-14 07:14:11 UTC",
            "url": "https://firebasestorage.googleapis.com/v0/b/jsee-71d18.firebasestorage.app/o/img_170600.png?alt=media&token=0dc575d2-44f3-40b2-ba8e-b397383f766d",
            "url_status": "offline",
            "last_online": "2026-04-17 06:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821149/",
            "reporter": "abuse_ch"
        }
    ],
    "3821145": [
        {
            "dateadded": "2026-04-14 07:14:10 UTC",
            "url": "https://svc5-git.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821145/",
            "reporter": "anonymous"
        }
    ],
    "3821146": [
        {
            "dateadded": "2026-04-14 07:14:10 UTC",
            "url": "https://vault88x.secure-efficient2.su/MSI_102232.png",
            "url_status": "offline",
            "last_online": "2026-04-21 11:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821146/",
            "reporter": "abuse_ch"
        }
    ],
    "3821147": [
        {
            "dateadded": "2026-04-14 07:14:10 UTC",
            "url": "https://governofederal.io/MSI_115403.png",
            "url_status": "offline",
            "last_online": "2026-04-14 10:29:02 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821147/",
            "reporter": "abuse_ch"
        }
    ],
    "3821148": [
        {
            "dateadded": "2026-04-14 07:14:10 UTC",
            "url": "https://vault88x.secure-efficient2.su/img_145858.png",
            "url_status": "offline",
            "last_online": "2026-04-21 12:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821148/",
            "reporter": "abuse_ch"
        }
    ],
    "3821144": [
        {
            "dateadded": "2026-04-14 07:10:10 UTC",
            "url": "https://pastefy.app/xG06xOb9/raw",
            "url_status": "offline",
            "last_online": "2026-04-14 07:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821144/",
            "reporter": "abuse_ch"
        }
    ],
    "3821142": [
        {
            "dateadded": "2026-04-14 07:08:16 UTC",
            "url": "http://222.138.64.12:35787/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:49:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821142/",
            "reporter": "geenensp"
        }
    ],
    "3821143": [
        {
            "dateadded": "2026-04-14 07:08:16 UTC",
            "url": "http://182.117.69.33:53323/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 10:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821143/",
            "reporter": "geenensp"
        }
    ],
    "3821141": [
        {
            "dateadded": "2026-04-14 07:08:14 UTC",
            "url": "https://vault4-id.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821141/",
            "reporter": "anonymous"
        }
    ],
    "3821140": [
        {
            "dateadded": "2026-04-14 07:07:07 UTC",
            "url": "http://85.137.165.145:5000/images/9a14584c1f9442f7.jpg",
            "url_status": "offline",
            "last_online": "2026-04-14 07:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821140/",
            "reporter": "abuse_ch"
        }
    ],
    "3821139": [
        {
            "dateadded": "2026-04-14 07:06:12 UTC",
            "url": "https://innovativesr.com/img_160611.png",
            "url_status": "offline",
            "last_online": "2026-04-14 07:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821139/",
            "reporter": "abuse_ch"
        }
    ],
    "3821138": [
        {
            "dateadded": "2026-04-14 07:06:09 UTC",
            "url": "https://innovativesr.com/MSI_160622.png",
            "url_status": "offline",
            "last_online": "2026-04-14 07:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821138/",
            "reporter": "abuse_ch"
        }
    ],
    "3821137": [
        {
            "dateadded": "2026-04-14 07:02:13 UTC",
            "url": "https://api3-job.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 07:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821137/",
            "reporter": "anonymous"
        }
    ],
    "3821136": [
        {
            "dateadded": "2026-04-14 06:59:22 UTC",
            "url": "http://27.37.110.185:48041/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:57:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821136/",
            "reporter": "geenensp"
        }
    ],
    "3821135": [
        {
            "dateadded": "2026-04-14 06:57:18 UTC",
            "url": "http://222.138.64.12:35787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821135/",
            "reporter": "geenensp"
        }
    ],
    "3821134": [
        {
            "dateadded": "2026-04-14 06:56:21 UTC",
            "url": "http://182.114.252.9:47366/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821134/",
            "reporter": "geenensp"
        }
    ],
    "3821133": [
        {
            "dateadded": "2026-04-14 06:56:11 UTC",
            "url": "https://node2-up.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821133/",
            "reporter": "anonymous"
        }
    ],
    "3821132": [
        {
            "dateadded": "2026-04-14 06:54:19 UTC",
            "url": "http://valfanto.com/rump101.png",
            "url_status": "offline",
            "last_online": "2026-04-19 17:11:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821132/",
            "reporter": "abuse_ch"
        }
    ],
    "3821131": [
        {
            "dateadded": "2026-04-14 06:54:15 UTC",
            "url": "http://valfanto.com/yuphantom.png",
            "url_status": "offline",
            "last_online": "2026-04-19 17:37:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821131/",
            "reporter": "abuse_ch"
        }
    ],
    "3821130": [
        {
            "dateadded": "2026-04-14 06:54:08 UTC",
            "url": "http://valfanto.com/101shit.png",
            "url_status": "offline",
            "last_online": "2026-04-19 16:34:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821130/",
            "reporter": "abuse_ch"
        }
    ],
    "3821129": [
        {
            "dateadded": "2026-04-14 06:52:21 UTC",
            "url": "http://123.13.108.229:34610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:37:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821129/",
            "reporter": "geenensp"
        }
    ],
    "3821128": [
        {
            "dateadded": "2026-04-14 06:51:12 UTC",
            "url": "https://time1-out.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821128/",
            "reporter": "anonymous"
        }
    ],
    "3821127": [
        {
            "dateadded": "2026-04-14 06:46:08 UTC",
            "url": "https://gate6-api.digital-verify-pro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821127/",
            "reporter": "anonymous"
        }
    ],
    "3821126": [
        {
            "dateadded": "2026-04-14 06:44:09 UTC",
            "url": "http://42.5.243.162:34349/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:17:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821126/",
            "reporter": "geenensp"
        }
    ],
    "3821125": [
        {
            "dateadded": "2026-04-14 06:39:24 UTC",
            "url": "http://182.113.195.13:60145/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:29:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821125/",
            "reporter": "geenensp"
        }
    ],
    "3821124": [
        {
            "dateadded": "2026-04-14 06:39:13 UTC",
            "url": "https://svc5-ssl.digital-verify-pro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821124/",
            "reporter": "anonymous"
        }
    ],
    "3821123": [
        {
            "dateadded": "2026-04-14 06:34:13 UTC",
            "url": "https://vault4-db.digital-verify-pro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821123/",
            "reporter": "anonymous"
        }
    ],
    "3821122": [
        {
            "dateadded": "2026-04-14 06:28:14 UTC",
            "url": "https://api3-hash.digital-verify-pro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821122/",
            "reporter": "anonymous"
        }
    ],
    "3821121": [
        {
            "dateadded": "2026-04-14 06:25:19 UTC",
            "url": "https://node2-key.digital-verify-pro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821121/",
            "reporter": "anonymous"
        }
    ],
    "3821120": [
        {
            "dateadded": "2026-04-14 06:25:16 UTC",
            "url": "https://arpausa.com.ec/2MQ7RTNC.CL5",
            "url_status": "offline",
            "last_online": "2026-04-26 23:16:52 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821120/",
            "reporter": "abuse_ch"
        }
    ],
    "3821119": [
        {
            "dateadded": "2026-04-14 06:22:08 UTC",
            "url": "https://safe1-id.digital-verify-pro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821119/",
            "reporter": "anonymous"
        }
    ],
    "3821117": [
        {
            "dateadded": "2026-04-14 06:19:21 UTC",
            "url": "http://182.124.137.90:59088/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821117/",
            "reporter": "geenensp"
        }
    ],
    "3821118": [
        {
            "dateadded": "2026-04-14 06:19:21 UTC",
            "url": "http://123.10.240.255:56046/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821118/",
            "reporter": "geenensp"
        }
    ],
    "3821116": [
        {
            "dateadded": "2026-04-14 06:18:06 UTC",
            "url": "https://lavnixo.cfd/_wildcard_.lavnixo.cfd/SOCIAL-SECURITY-ESTATEMENTVIEWER.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821116/",
            "reporter": "abuse_ch"
        }
    ],
    "3821115": [
        {
            "dateadded": "2026-04-14 06:15:17 UTC",
            "url": "http://123.10.240.255:56046/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:29:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821115/",
            "reporter": "geenensp"
        }
    ],
    "3821114": [
        {
            "dateadded": "2026-04-14 06:11:19 UTC",
            "url": "http://182.113.195.13:60145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821114/",
            "reporter": "geenensp"
        }
    ],
    "3821113": [
        {
            "dateadded": "2026-04-14 06:11:13 UTC",
            "url": "https://gate6-io.web-traffic-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821113/",
            "reporter": "anonymous"
        }
    ],
    "3821112": [
        {
            "dateadded": "2026-04-14 06:06:18 UTC",
            "url": "https://sfunited.club/chxrgp.vmp.msi",
            "url_status": "offline",
            "last_online": "2026-04-18 11:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Loda",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821112/",
            "reporter": "abuse_ch"
        }
    ],
    "3821111": [
        {
            "dateadded": "2026-04-14 06:06:07 UTC",
            "url": "https://svc5-pin.web-traffic-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821111/",
            "reporter": "anonymous"
        }
    ],
    "3821110": [
        {
            "dateadded": "2026-04-14 06:02:20 UTC",
            "url": "https://download1979.mediafire.com/nyelsl7di8fgR-j6Bkej7w313J_849ezhLLIhBEEwrAM85k9cjCq8aNSSdEXuHepCbFO0Q0akBf57hPcBES4m4s_Ygw0wTTxwHXtpI61hvnHe2wTfQKvbX8gV2gHyggwWVmv8nkiF2Ypjd6pxJHkHpiuI7cM69BllWIBZ2asD5e2/35szk915pzn779n/Archive.rar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821110/",
            "reporter": "anonymous"
        }
    ],
    "3821109": [
        {
            "dateadded": "2026-04-14 06:00:18 UTC",
            "url": "https://vault4-tx.web-traffic-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 06:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821109/",
            "reporter": "anonymous"
        }
    ],
    "3821108": [
        {
            "dateadded": "2026-04-14 05:55:13 UTC",
            "url": "https://api3-hop.web-traffic-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821108/",
            "reporter": "anonymous"
        }
    ],
    "3821107": [
        {
            "dateadded": "2026-04-14 05:51:25 UTC",
            "url": "http://147.45.42.251/mipsel",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821107/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821101": [
        {
            "dateadded": "2026-04-14 05:51:24 UTC",
            "url": "http://147.45.42.251/sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821101/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821102": [
        {
            "dateadded": "2026-04-14 05:51:24 UTC",
            "url": "http://147.45.42.251/i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821102/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821103": [
        {
            "dateadded": "2026-04-14 05:51:24 UTC",
            "url": "http://147.45.42.251/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821103/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821104": [
        {
            "dateadded": "2026-04-14 05:51:24 UTC",
            "url": "http://147.45.42.251/m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821104/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821105": [
        {
            "dateadded": "2026-04-14 05:51:24 UTC",
            "url": "http://147.45.42.251/x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821105/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821106": [
        {
            "dateadded": "2026-04-14 05:51:24 UTC",
            "url": "http://147.45.42.251/ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821106/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3821100": [
        {
            "dateadded": "2026-04-14 05:51:14 UTC",
            "url": "http://182.124.137.90:59088/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821100/",
            "reporter": "geenensp"
        }
    ],
    "3821099": [
        {
            "dateadded": "2026-04-14 05:49:15 UTC",
            "url": "https://node2-map.web-traffic-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821099/",
            "reporter": "anonymous"
        }
    ],
    "3821098": [
        {
            "dateadded": "2026-04-14 05:45:17 UTC",
            "url": "http://115.59.30.77:50369/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821098/",
            "reporter": "geenensp"
        }
    ],
    "3821096": [
        {
            "dateadded": "2026-04-14 05:44:09 UTC",
            "url": "http://192.210.229.56/uVgKYZKNG167.bin",
            "url_status": "offline",
            "last_online": "2026-04-20 16:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821096/",
            "reporter": "abuse_ch"
        }
    ],
    "3821097": [
        {
            "dateadded": "2026-04-14 05:44:09 UTC",
            "url": "http://192.210.229.56/Afbrndings.msi",
            "url_status": "offline",
            "last_online": "2026-04-20 17:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821097/",
            "reporter": "abuse_ch"
        }
    ],
    "3821095": [
        {
            "dateadded": "2026-04-14 05:43:14 UTC",
            "url": "https://scan1-url.web-traffic-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:43:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821095/",
            "reporter": "anonymous"
        }
    ],
    "3821093": [
        {
            "dateadded": "2026-04-14 05:41:28 UTC",
            "url": "http://115.49.209.117:56106/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821093/",
            "reporter": "geenensp"
        }
    ],
    "3821094": [
        {
            "dateadded": "2026-04-14 05:41:28 UTC",
            "url": "http://182.116.35.202:43807/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 04:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821094/",
            "reporter": "geenensp"
        }
    ],
    "3821092": [
        {
            "dateadded": "2026-04-14 05:39:25 UTC",
            "url": "http://115.49.27.126:58215/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:43:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821092/",
            "reporter": "geenensp"
        }
    ],
    "3821091": [
        {
            "dateadded": "2026-04-14 05:39:15 UTC",
            "url": "https://gate6-cmd.smart-system-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821091/",
            "reporter": "anonymous"
        }
    ],
    "3821090": [
        {
            "dateadded": "2026-04-14 05:34:30 UTC",
            "url": "http://110.37.119.14:35648/i",
            "url_status": "offline",
            "last_online": "2026-04-14 15:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821090/",
            "reporter": "geenensp"
        }
    ],
    "3821084": [
        {
            "dateadded": "2026-04-14 05:34:09 UTC",
            "url": "http://87.121.112.57/isex86",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821084/",
            "reporter": "adliwahid"
        }
    ],
    "3821085": [
        {
            "dateadded": "2026-04-14 05:34:09 UTC",
            "url": "http://87.121.112.57/kkk.arm5k",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821085/",
            "reporter": "adliwahid"
        }
    ],
    "3821086": [
        {
            "dateadded": "2026-04-14 05:34:09 UTC",
            "url": "http://87.121.112.57/kkk.arm4k",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821086/",
            "reporter": "adliwahid"
        }
    ],
    "3821087": [
        {
            "dateadded": "2026-04-14 05:34:09 UTC",
            "url": "http://87.121.112.57/kkk.arm6k",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:42 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821087/",
            "reporter": "adliwahid"
        }
    ],
    "3821088": [
        {
            "dateadded": "2026-04-14 05:34:09 UTC",
            "url": "http://87.121.112.57/kkk.arm7k",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821088/",
            "reporter": "adliwahid"
        }
    ],
    "3821089": [
        {
            "dateadded": "2026-04-14 05:34:09 UTC",
            "url": "http://87.121.112.57/Josho.ppck",
            "url_status": "online",
            "last_online": "2026-04-27 14:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821089/",
            "reporter": "adliwahid"
        }
    ],
    "3821083": [
        {
            "dateadded": "2026-04-14 05:33:28 UTC",
            "url": "https://dindong.tos-cn-hongkong.volces.com/chronmwin.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SilverFox"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821083/",
            "reporter": "Ling"
        }
    ],
    "3821082": [
        {
            "dateadded": "2026-04-14 05:33:12 UTC",
            "url": "https://raw.githubusercontent.com/Digital2026001/securssa001/refs/heads/main/Docs_Social_SecurityAdmin.vbs",
            "url_status": "offline",
            "last_online": "2026-04-14 05:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "fake_ssa"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821082/",
            "reporter": "anonymous"
        }
    ],
    "3821081": [
        {
            "dateadded": "2026-04-14 05:33:08 UTC",
            "url": "http://2.27.28.167/2281/runn.exe",
            "url_status": "offline",
            "last_online": "2026-04-14 11:04:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ChromeElevator",
                "ChromElevator",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821081/",
            "reporter": "burger"
        }
    ],
    "3821079": [
        {
            "dateadded": "2026-04-14 05:33:07 UTC",
            "url": "http://87.121.112.57/Josho.sh4k",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821079/",
            "reporter": "adliwahid"
        }
    ],
    "3821080": [
        {
            "dateadded": "2026-04-14 05:33:07 UTC",
            "url": "http://87.121.112.57/dipsk",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821080/",
            "reporter": "adliwahid"
        }
    ],
    "3821077": [
        {
            "dateadded": "2026-04-14 05:33:06 UTC",
            "url": "http://93.152.224.39:6600/rn2ip9fu/BIKZWTHO.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "msi",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821077/",
            "reporter": "DonPasci"
        }
    ],
    "3821078": [
        {
            "dateadded": "2026-04-14 05:33:06 UTC",
            "url": "http://93.152.224.39:6600/rn2ip9fu/KSQXKMGH.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "msi",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821078/",
            "reporter": "DonPasci"
        }
    ],
    "3821075": [
        {
            "dateadded": "2026-04-14 05:32:20 UTC",
            "url": "http://182.113.37.185:53913/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821075/",
            "reporter": "geenensp"
        }
    ],
    "3821076": [
        {
            "dateadded": "2026-04-14 05:32:20 UTC",
            "url": "http://182.121.21.186:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821076/",
            "reporter": "geenensp"
        }
    ],
    "3821074": [
        {
            "dateadded": "2026-04-14 05:32:15 UTC",
            "url": "https://aumri.ae/apr13image.png",
            "url_status": "offline",
            "last_online": "2026-04-15 10:12:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821074/",
            "reporter": "abuse_ch"
        }
    ],
    "3821073": [
        {
            "dateadded": "2026-04-14 05:32:12 UTC",
            "url": "https://svc5-pid.smart-system-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821073/",
            "reporter": "anonymous"
        }
    ],
    "3821071": [
        {
            "dateadded": "2026-04-14 05:32:11 UTC",
            "url": "http://pdfplugout.com/baseCD81/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821071/",
            "reporter": "abuse_ch"
        }
    ],
    "3821072": [
        {
            "dateadded": "2026-04-14 05:32:11 UTC",
            "url": "https://pdfplugout.com/baseCD81/luXP.doc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821072/",
            "reporter": "abuse_ch"
        }
    ],
    "3821070": [
        {
            "dateadded": "2026-04-14 05:30:26 UTC",
            "url": "http://110.37.119.14:35648/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821070/",
            "reporter": "geenensp"
        }
    ],
    "3821069": [
        {
            "dateadded": "2026-04-14 05:27:16 UTC",
            "url": "https://vault4-ex.smart-system-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821069/",
            "reporter": "anonymous"
        }
    ],
    "3821068": [
        {
            "dateadded": "2026-04-14 05:23:28 UTC",
            "url": "http://115.59.30.77:50369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:23:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821068/",
            "reporter": "geenensp"
        }
    ],
    "3821067": [
        {
            "dateadded": "2026-04-14 05:22:16 UTC",
            "url": "https://api3-log.smart-system-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821067/",
            "reporter": "anonymous"
        }
    ],
    "3821066": [
        {
            "dateadded": "2026-04-14 05:17:32 UTC",
            "url": "http://182.113.37.185:53913/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:17:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821066/",
            "reporter": "geenensp"
        }
    ],
    "3821065": [
        {
            "dateadded": "2026-04-14 05:16:26 UTC",
            "url": "http://42.235.94.212:33667/i",
            "url_status": "offline",
            "last_online": "2026-04-15 18:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821065/",
            "reporter": "geenensp"
        }
    ],
    "3821064": [
        {
            "dateadded": "2026-04-14 05:15:14 UTC",
            "url": "https://node2-top.smart-system-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821064/",
            "reporter": "anonymous"
        }
    ],
    "3821063": [
        {
            "dateadded": "2026-04-14 05:09:07 UTC",
            "url": "https://test1-run.smart-system-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821063/",
            "reporter": "anonymous"
        }
    ],
    "3821062": [
        {
            "dateadded": "2026-04-14 05:05:14 UTC",
            "url": "https://gate6-ip.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 05:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821062/",
            "reporter": "anonymous"
        }
    ],
    "3821061": [
        {
            "dateadded": "2026-04-14 05:02:32 UTC",
            "url": "http://123.14.247.19:42926/i",
            "url_status": "offline",
            "last_online": "2026-04-14 16:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821061/",
            "reporter": "geenensp"
        }
    ],
    "3821060": [
        {
            "dateadded": "2026-04-14 05:01:09 UTC",
            "url": "http://201.149.107.54:38508/i",
            "url_status": "offline",
            "last_online": "2026-04-15 11:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821060/",
            "reporter": "geenensp"
        }
    ],
    "3821059": [
        {
            "dateadded": "2026-04-14 04:58:15 UTC",
            "url": "https://svc5-dns.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821059/",
            "reporter": "anonymous"
        }
    ],
    "3821057": [
        {
            "dateadded": "2026-04-14 04:55:25 UTC",
            "url": "http://42.232.229.152:49928/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821057/",
            "reporter": "geenensp"
        }
    ],
    "3821058": [
        {
            "dateadded": "2026-04-14 04:55:25 UTC",
            "url": "http://110.138.131.72:60632/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:52:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821058/",
            "reporter": "geenensp"
        }
    ],
    "3821056": [
        {
            "dateadded": "2026-04-14 04:53:10 UTC",
            "url": "https://vault4-sh.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821056/",
            "reporter": "anonymous"
        }
    ],
    "3821054": [
        {
            "dateadded": "2026-04-14 04:52:23 UTC",
            "url": "http://42.235.94.212:33667/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:52:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821054/",
            "reporter": "geenensp"
        }
    ],
    "3821055": [
        {
            "dateadded": "2026-04-14 04:52:23 UTC",
            "url": "http://182.119.141.2:51320/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821055/",
            "reporter": "geenensp"
        }
    ],
    "3821053": [
        {
            "dateadded": "2026-04-14 04:51:14 UTC",
            "url": "http://123.12.65.53:57773/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821053/",
            "reporter": "geenensp"
        }
    ],
    "3821052": [
        {
            "dateadded": "2026-04-14 04:47:10 UTC",
            "url": "https://api3-tls.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821052/",
            "reporter": "anonymous"
        }
    ],
    "3821051": [
        {
            "dateadded": "2026-04-14 04:46:26 UTC",
            "url": "http://115.52.118.22:44471/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:46:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821051/",
            "reporter": "geenensp"
        }
    ],
    "3821050": [
        {
            "dateadded": "2026-04-14 04:45:22 UTC",
            "url": "http://103.172.186.154:44344/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821050/",
            "reporter": "geenensp"
        }
    ],
    "3821049": [
        {
            "dateadded": "2026-04-14 04:44:22 UTC",
            "url": "http://219.157.185.79:35358/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821049/",
            "reporter": "geenensp"
        }
    ],
    "3821048": [
        {
            "dateadded": "2026-04-14 04:43:19 UTC",
            "url": "http://182.112.31.94:46691/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:21:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821048/",
            "reporter": "geenensp"
        }
    ],
    "3821047": [
        {
            "dateadded": "2026-04-14 04:42:15 UTC",
            "url": "https://node2-ssh.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821047/",
            "reporter": "anonymous"
        }
    ],
    "3821045": [
        {
            "dateadded": "2026-04-14 04:37:17 UTC",
            "url": "https://work1-vpn.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821045/",
            "reporter": "anonymous"
        }
    ],
    "3821046": [
        {
            "dateadded": "2026-04-14 04:37:17 UTC",
            "url": "http://27.202.116.129:56767/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821046/",
            "reporter": "geenensp"
        }
    ],
    "3821044": [
        {
            "dateadded": "2026-04-14 04:34:22 UTC",
            "url": "http://123.14.247.19:42926/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:55:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821044/",
            "reporter": "geenensp"
        }
    ],
    "3821043": [
        {
            "dateadded": "2026-04-14 04:32:12 UTC",
            "url": "https://gate6-box.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821043/",
            "reporter": "anonymous"
        }
    ],
    "3821042": [
        {
            "dateadded": "2026-04-14 04:31:21 UTC",
            "url": "http://125.41.1.133:48547/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821042/",
            "reporter": "geenensp"
        }
    ],
    "3821041": [
        {
            "dateadded": "2026-04-14 04:25:16 UTC",
            "url": "https://svc5-cdn.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821041/",
            "reporter": "anonymous"
        }
    ],
    "3821040": [
        {
            "dateadded": "2026-04-14 04:24:17 UTC",
            "url": "http://27.207.145.175:41155/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821040/",
            "reporter": "geenensp"
        }
    ],
    "3821039": [
        {
            "dateadded": "2026-04-14 04:23:23 UTC",
            "url": "http://221.14.110.133:46766/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:21:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821039/",
            "reporter": "geenensp"
        }
    ],
    "3821038": [
        {
            "dateadded": "2026-04-14 04:21:15 UTC",
            "url": "https://vault4-io.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821038/",
            "reporter": "anonymous"
        }
    ],
    "3821037": [
        {
            "dateadded": "2026-04-14 04:20:15 UTC",
            "url": "http://124.130.121.88:46941/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821037/",
            "reporter": "geenensp"
        }
    ],
    "3821036": [
        {
            "dateadded": "2026-04-14 04:20:14 UTC",
            "url": "http://91.237.109.186:11425/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 10:09:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821036/",
            "reporter": "geenensp"
        }
    ],
    "3821035": [
        {
            "dateadded": "2026-04-14 04:18:15 UTC",
            "url": "https://api3-dir.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821035/",
            "reporter": "anonymous"
        }
    ],
    "3821034": [
        {
            "dateadded": "2026-04-14 04:18:13 UTC",
            "url": "http://103.172.186.154:44344/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821034/",
            "reporter": "geenensp"
        }
    ],
    "3821033": [
        {
            "dateadded": "2026-04-14 04:16:27 UTC",
            "url": "http://123.179.229.94:40046/i",
            "url_status": "offline",
            "last_online": "2026-04-14 16:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821033/",
            "reporter": "geenensp"
        }
    ],
    "3821032": [
        {
            "dateadded": "2026-04-14 04:09:19 UTC",
            "url": "http://182.112.31.94:46691/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:35:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821032/",
            "reporter": "geenensp"
        }
    ],
    "3821031": [
        {
            "dateadded": "2026-04-14 04:08:12 UTC",
            "url": "https://node2-obj.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821031/",
            "reporter": "anonymous"
        }
    ],
    "3821030": [
        {
            "dateadded": "2026-04-14 04:03:08 UTC",
            "url": "https://file1-raw.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 04:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821030/",
            "reporter": "anonymous"
        }
    ],
    "3821029": [
        {
            "dateadded": "2026-04-14 03:57:09 UTC",
            "url": "https://gate6-app.data-metric-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821029/",
            "reporter": "anonymous"
        }
    ],
    "3821028": [
        {
            "dateadded": "2026-04-14 03:52:11 UTC",
            "url": "http://42.59.229.26:49600/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821028/",
            "reporter": "geenensp"
        }
    ],
    "3821027": [
        {
            "dateadded": "2026-04-14 03:51:16 UTC",
            "url": "http://123.179.229.94:40046/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:50:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821027/",
            "reporter": "geenensp"
        }
    ],
    "3821026": [
        {
            "dateadded": "2026-04-14 03:51:09 UTC",
            "url": "https://svc5-row.data-metric-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821026/",
            "reporter": "anonymous"
        }
    ],
    "3821025": [
        {
            "dateadded": "2026-04-14 03:46:09 UTC",
            "url": "https://vault4-db.data-metric-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821025/",
            "reporter": "anonymous"
        }
    ],
    "3821024": [
        {
            "dateadded": "2026-04-14 03:41:18 UTC",
            "url": "http://221.14.110.133:46766/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:01:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821024/",
            "reporter": "geenensp"
        }
    ],
    "3821023": [
        {
            "dateadded": "2026-04-14 03:40:10 UTC",
            "url": "https://api3-bit.data-metric-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821023/",
            "reporter": "anonymous"
        }
    ],
    "3821022": [
        {
            "dateadded": "2026-04-14 03:38:19 UTC",
            "url": "http://222.139.125.60:34637/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:59:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821022/",
            "reporter": "geenensp"
        }
    ],
    "3821021": [
        {
            "dateadded": "2026-04-14 03:34:10 UTC",
            "url": "https://node2-tab.data-metric-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821021/",
            "reporter": "anonymous"
        }
    ],
    "3821020": [
        {
            "dateadded": "2026-04-14 03:33:18 UTC",
            "url": "http://222.134.172.170:54669/i",
            "url_status": "offline",
            "last_online": "2026-04-14 03:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821020/",
            "reporter": "geenensp"
        }
    ],
    "3821019": [
        {
            "dateadded": "2026-04-14 03:30:14 UTC",
            "url": "https://stat1-set.data-metric-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821019/",
            "reporter": "anonymous"
        }
    ],
    "3821018": [
        {
            "dateadded": "2026-04-14 03:27:13 UTC",
            "url": "http://39.74.86.126:59399/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:18:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821018/",
            "reporter": "geenensp"
        }
    ],
    "3821017": [
        {
            "dateadded": "2026-04-14 03:26:33 UTC",
            "url": "http://112.248.125.252:52670/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821017/",
            "reporter": "geenensp"
        }
    ],
    "3821016": [
        {
            "dateadded": "2026-04-14 03:24:13 UTC",
            "url": "https://gate6-web.tech-support-desk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821016/",
            "reporter": "anonymous"
        }
    ],
    "3821015": [
        {
            "dateadded": "2026-04-14 03:18:14 UTC",
            "url": "http://222.139.125.60:34637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821015/",
            "reporter": "geenensp"
        }
    ],
    "3821014": [
        {
            "dateadded": "2026-04-14 03:18:12 UTC",
            "url": "http://39.87.229.208:36574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821014/",
            "reporter": "geenensp"
        }
    ],
    "3821013": [
        {
            "dateadded": "2026-04-14 03:17:10 UTC",
            "url": "https://svc5-auth.tech-support-desk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821013/",
            "reporter": "anonymous"
        }
    ],
    "3821012": [
        {
            "dateadded": "2026-04-14 03:16:20 UTC",
            "url": "http://42.59.229.26:49600/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821012/",
            "reporter": "geenensp"
        }
    ],
    "3821011": [
        {
            "dateadded": "2026-04-14 03:13:08 UTC",
            "url": "https://vault4-id.tech-support-desk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821011/",
            "reporter": "anonymous"
        }
    ],
    "3821010": [
        {
            "dateadded": "2026-04-14 03:12:17 UTC",
            "url": "http://115.55.52.175:56596/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821010/",
            "reporter": "geenensp"
        }
    ],
    "3821009": [
        {
            "dateadded": "2026-04-14 03:08:20 UTC",
            "url": "http://222.127.251.23:46701/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821009/",
            "reporter": "geenensp"
        }
    ],
    "3821008": [
        {
            "dateadded": "2026-04-14 03:06:14 UTC",
            "url": "http://37.78.98.60:49749/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:27:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821008/",
            "reporter": "geenensp"
        }
    ],
    "3821007": [
        {
            "dateadded": "2026-04-14 03:06:10 UTC",
            "url": "https://api3-call.tech-support-desk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821007/",
            "reporter": "anonymous"
        }
    ],
    "3821006": [
        {
            "dateadded": "2026-04-14 03:01:08 UTC",
            "url": "https://node2-info.tech-support-desk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 03:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821006/",
            "reporter": "anonymous"
        }
    ],
    "3821004": [
        {
            "dateadded": "2026-04-14 02:59:19 UTC",
            "url": "http://110.85.109.232:41787/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821004/",
            "reporter": "geenensp"
        }
    ],
    "3821005": [
        {
            "dateadded": "2026-04-14 02:59:19 UTC",
            "url": "http://222.137.146.132:40963/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:40:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821005/",
            "reporter": "geenensp"
        }
    ],
    "3821003": [
        {
            "dateadded": "2026-04-14 02:58:22 UTC",
            "url": "http://39.74.86.126:59399/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:12:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821003/",
            "reporter": "geenensp"
        }
    ],
    "3821002": [
        {
            "dateadded": "2026-04-14 02:55:10 UTC",
            "url": "https://help1-desk.tech-support-desk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821002/",
            "reporter": "anonymous"
        }
    ],
    "3821001": [
        {
            "dateadded": "2026-04-14 02:51:07 UTC",
            "url": "http://105.224.38.58:34115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821001/",
            "reporter": "geenensp"
        }
    ],
    "3821000": [
        {
            "dateadded": "2026-04-14 02:50:19 UTC",
            "url": "http://105.186.213.212:46845/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3821000/",
            "reporter": "geenensp"
        }
    ],
    "3820999": [
        {
            "dateadded": "2026-04-14 02:50:12 UTC",
            "url": "https://gate6-site.qul9merox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820999/",
            "reporter": "anonymous"
        }
    ],
    "3820998": [
        {
            "dateadded": "2026-04-14 02:45:10 UTC",
            "url": "https://svc5-step.qul9merox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820998/",
            "reporter": "anonymous"
        }
    ],
    "3820997": [
        {
            "dateadded": "2026-04-14 02:42:19 UTC",
            "url": "http://42.232.229.152:49928/i",
            "url_status": "offline",
            "last_online": "2026-04-14 18:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820997/",
            "reporter": "geenensp"
        }
    ],
    "3820996": [
        {
            "dateadded": "2026-04-14 02:39:09 UTC",
            "url": "https://bin4-data.qul9merox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820996/",
            "reporter": "anonymous"
        }
    ],
    "3820995": [
        {
            "dateadded": "2026-04-14 02:38:15 UTC",
            "url": "http://110.36.25.33:37393/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:50:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820995/",
            "reporter": "geenensp"
        }
    ],
    "3820994": [
        {
            "dateadded": "2026-04-14 02:38:13 UTC",
            "url": "http://37.78.98.60:49749/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820994/",
            "reporter": "geenensp"
        }
    ],
    "3820993": [
        {
            "dateadded": "2026-04-14 02:38:12 UTC",
            "url": "http://222.127.251.23:46701/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 00:00:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820993/",
            "reporter": "geenensp"
        }
    ],
    "3820991": [
        {
            "dateadded": "2026-04-14 02:37:21 UTC",
            "url": "http://94.156.152.67:83/o.xml",
            "url_status": "offline",
            "last_online": "2026-04-14 19:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget",
                "xml"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820991/",
            "reporter": "botnetkiller"
        }
    ],
    "3820992": [
        {
            "dateadded": "2026-04-14 02:37:21 UTC",
            "url": "http://110.36.80.166:51792/i",
            "url_status": "offline",
            "last_online": "2026-04-16 04:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820992/",
            "reporter": "geenensp"
        }
    ],
    "3820990": [
        {
            "dateadded": "2026-04-14 02:31:17 UTC",
            "url": "http://110.85.109.232:41787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 10:23:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820990/",
            "reporter": "geenensp"
        }
    ],
    "3820989": [
        {
            "dateadded": "2026-04-14 02:31:15 UTC",
            "url": "http://61.53.121.57:45715/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:31:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820989/",
            "reporter": "geenensp"
        }
    ],
    "3820988": [
        {
            "dateadded": "2026-04-14 02:30:20 UTC",
            "url": "http://61.53.121.57:45715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:19:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820988/",
            "reporter": "geenensp"
        }
    ],
    "3820987": [
        {
            "dateadded": "2026-04-14 02:30:13 UTC",
            "url": "https://node3-read.qul9merox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820987/",
            "reporter": "anonymous"
        }
    ],
    "3820986": [
        {
            "dateadded": "2026-04-14 02:27:17 UTC",
            "url": "http://112.239.127.191:54503/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:31:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820986/",
            "reporter": "geenensp"
        }
    ],
    "3820985": [
        {
            "dateadded": "2026-04-14 02:26:06 UTC",
            "url": "https://api2-stat.qul9merox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:26:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820985/",
            "reporter": "anonymous"
        }
    ],
    "3820984": [
        {
            "dateadded": "2026-04-14 02:21:16 UTC",
            "url": "http://115.55.52.175:56596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 18:24:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820984/",
            "reporter": "geenensp"
        }
    ],
    "3820983": [
        {
            "dateadded": "2026-04-14 02:21:09 UTC",
            "url": "https://cmd1-task.qul9merox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820983/",
            "reporter": "anonymous"
        }
    ],
    "3820982": [
        {
            "dateadded": "2026-04-14 02:14:13 UTC",
            "url": "https://gate6-area.norxavin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820982/",
            "reporter": "anonymous"
        }
    ],
    "3820981": [
        {
            "dateadded": "2026-04-14 02:13:18 UTC",
            "url": "http://182.121.83.21:56751/i",
            "url_status": "offline",
            "last_online": "2026-04-15 02:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820981/",
            "reporter": "geenensp"
        }
    ],
    "3820980": [
        {
            "dateadded": "2026-04-14 02:11:19 UTC",
            "url": "http://110.36.80.166:51792/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:57:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820980/",
            "reporter": "geenensp"
        }
    ],
    "3820979": [
        {
            "dateadded": "2026-04-14 02:09:19 UTC",
            "url": "http://123.12.65.53:57773/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820979/",
            "reporter": "geenensp"
        }
    ],
    "3820978": [
        {
            "dateadded": "2026-04-14 02:09:08 UTC",
            "url": "https://svc5-edge.norxavin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820978/",
            "reporter": "anonymous"
        }
    ],
    "3820977": [
        {
            "dateadded": "2026-04-14 02:08:21 UTC",
            "url": "http://176.65.134.19/o",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820977/",
            "reporter": "geenensp"
        }
    ],
    "3820976": [
        {
            "dateadded": "2026-04-14 02:03:14 UTC",
            "url": "https://tmp4-root.norxavin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 02:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820976/",
            "reporter": "anonymous"
        }
    ],
    "3820975": [
        {
            "dateadded": "2026-04-14 01:59:14 UTC",
            "url": "http://182.121.83.21:56751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820975/",
            "reporter": "geenensp"
        }
    ],
    "3820974": [
        {
            "dateadded": "2026-04-14 01:57:08 UTC",
            "url": "https://node3-link.norxavin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820974/",
            "reporter": "anonymous"
        }
    ],
    "3820973": [
        {
            "dateadded": "2026-04-14 01:51:12 UTC",
            "url": "https://api2-info.norxavin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820973/",
            "reporter": "anonymous"
        }
    ],
    "3820972": [
        {
            "dateadded": "2026-04-14 01:48:21 UTC",
            "url": "http://123.129.132.93:41732/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:31:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820972/",
            "reporter": "geenensp"
        }
    ],
    "3820971": [
        {
            "dateadded": "2026-04-14 01:46:07 UTC",
            "url": "https://web1-host.norxavin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820971/",
            "reporter": "anonymous"
        }
    ],
    "3820970": [
        {
            "dateadded": "2026-04-14 01:41:20 UTC",
            "url": "http://42.235.99.98:33569/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:06:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820970/",
            "reporter": "geenensp"
        }
    ],
    "3820969": [
        {
            "dateadded": "2026-04-14 01:40:10 UTC",
            "url": "https://gate6-post.bry3loxan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820969/",
            "reporter": "anonymous"
        }
    ],
    "3820968": [
        {
            "dateadded": "2026-04-14 01:39:29 UTC",
            "url": "http://110.36.86.83:52355/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:23:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820968/",
            "reporter": "geenensp"
        }
    ],
    "3820967": [
        {
            "dateadded": "2026-04-14 01:37:18 UTC",
            "url": "http://42.235.99.98:33569/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:04:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820967/",
            "reporter": "geenensp"
        }
    ],
    "3820966": [
        {
            "dateadded": "2026-04-14 01:35:09 UTC",
            "url": "https://svc5-auth.bry3loxan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820966/",
            "reporter": "anonymous"
        }
    ],
    "3820965": [
        {
            "dateadded": "2026-04-14 01:30:11 UTC",
            "url": "https://salt4-byte.bry3loxan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820965/",
            "reporter": "anonymous"
        }
    ],
    "3820964": [
        {
            "dateadded": "2026-04-14 01:29:17 UTC",
            "url": "http://176.65.134.19/0uparm6",
            "url_status": "offline",
            "last_online": "2026-04-19 11:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820964/",
            "reporter": "botnetkiller"
        }
    ],
    "3820961": [
        {
            "dateadded": "2026-04-14 01:28:20 UTC",
            "url": "http://176.65.134.19/0upm68k",
            "url_status": "offline",
            "last_online": "2026-04-19 11:20:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820961/",
            "reporter": "botnetkiller"
        }
    ],
    "3820962": [
        {
            "dateadded": "2026-04-14 01:28:20 UTC",
            "url": "http://176.65.134.19/0upmpsl",
            "url_status": "offline",
            "last_online": "2026-04-19 12:13:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820962/",
            "reporter": "botnetkiller"
        }
    ],
    "3820963": [
        {
            "dateadded": "2026-04-14 01:28:20 UTC",
            "url": "http://42.239.191.226:58845/i",
            "url_status": "offline",
            "last_online": "2026-04-15 14:50:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820963/",
            "reporter": "geenensp"
        }
    ],
    "3820956": [
        {
            "dateadded": "2026-04-14 01:27:20 UTC",
            "url": "http://176.65.134.19/0upx64",
            "url_status": "offline",
            "last_online": "2026-04-19 12:25:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820956/",
            "reporter": "botnetkiller"
        }
    ],
    "3820957": [
        {
            "dateadded": "2026-04-14 01:27:20 UTC",
            "url": "http://176.65.134.19/0upx86",
            "url_status": "offline",
            "last_online": "2026-04-19 11:32:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820957/",
            "reporter": "botnetkiller"
        }
    ],
    "3820958": [
        {
            "dateadded": "2026-04-14 01:27:20 UTC",
            "url": "http://176.65.134.19/0upmips",
            "url_status": "offline",
            "last_online": "2026-04-19 11:53:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820958/",
            "reporter": "botnetkiller"
        }
    ],
    "3820959": [
        {
            "dateadded": "2026-04-14 01:27:20 UTC",
            "url": "http://176.65.134.19/0upppc",
            "url_status": "offline",
            "last_online": "2026-04-19 12:42:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820959/",
            "reporter": "botnetkiller"
        }
    ],
    "3820960": [
        {
            "dateadded": "2026-04-14 01:27:20 UTC",
            "url": "http://176.65.134.19/move",
            "url_status": "offline",
            "last_online": "2026-04-19 12:48:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820960/",
            "reporter": "botnetkiller"
        }
    ],
    "3820955": [
        {
            "dateadded": "2026-04-14 01:27:07 UTC",
            "url": "http://176.65.134.19/0uparm",
            "url_status": "offline",
            "last_online": "2026-04-19 11:55:02 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820955/",
            "reporter": "botnetkiller"
        }
    ],
    "3820951": [
        {
            "dateadded": "2026-04-14 01:26:14 UTC",
            "url": "http://176.65.134.19/0upspc",
            "url_status": "offline",
            "last_online": "2026-04-19 12:46:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820951/",
            "reporter": "botnetkiller"
        }
    ],
    "3820952": [
        {
            "dateadded": "2026-04-14 01:26:14 UTC",
            "url": "http://176.65.134.19/0upsh4",
            "url_status": "offline",
            "last_online": "2026-04-19 12:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820952/",
            "reporter": "botnetkiller"
        }
    ],
    "3820953": [
        {
            "dateadded": "2026-04-14 01:26:14 UTC",
            "url": "http://176.65.134.19/0uparm7",
            "url_status": "offline",
            "last_online": "2026-04-19 12:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820953/",
            "reporter": "botnetkiller"
        }
    ],
    "3820954": [
        {
            "dateadded": "2026-04-14 01:26:14 UTC",
            "url": "http://176.65.134.19/0uparm5",
            "url_status": "offline",
            "last_online": "2026-04-19 11:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820954/",
            "reporter": "botnetkiller"
        }
    ],
    "3820950": [
        {
            "dateadded": "2026-04-14 01:25:16 UTC",
            "url": "http://182.116.9.59:48332/i",
            "url_status": "offline",
            "last_online": "2026-04-18 13:50:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820950/",
            "reporter": "geenensp"
        }
    ],
    "3820949": [
        {
            "dateadded": "2026-04-14 01:24:09 UTC",
            "url": "https://node3-peer.bry3loxan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820949/",
            "reporter": "anonymous"
        }
    ],
    "3820948": [
        {
            "dateadded": "2026-04-14 01:20:10 UTC",
            "url": "http://123.129.132.93:41732/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820948/",
            "reporter": "geenensp"
        }
    ],
    "3820947": [
        {
            "dateadded": "2026-04-14 01:18:11 UTC",
            "url": "http://60.219.202.31:45880/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820947/",
            "reporter": "geenensp"
        }
    ],
    "3820946": [
        {
            "dateadded": "2026-04-14 01:18:07 UTC",
            "url": "https://api2-dns.bry3loxan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820946/",
            "reporter": "anonymous"
        }
    ],
    "3820945": [
        {
            "dateadded": "2026-04-14 01:15:20 UTC",
            "url": "http://5.165.101.226:53856/i",
            "url_status": "offline",
            "last_online": "2026-04-14 07:04:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820945/",
            "reporter": "geenensp"
        }
    ],
    "3820944": [
        {
            "dateadded": "2026-04-14 01:14:18 UTC",
            "url": "http://182.121.21.186:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:31:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820944/",
            "reporter": "geenensp"
        }
    ],
    "3820943": [
        {
            "dateadded": "2026-04-14 01:13:15 UTC",
            "url": "http://5.165.101.226:53856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:48:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820943/",
            "reporter": "geenensp"
        }
    ],
    "3820942": [
        {
            "dateadded": "2026-04-14 01:12:06 UTC",
            "url": "https://tcp1-send.bry3loxan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820942/",
            "reporter": "anonymous"
        }
    ],
    "3820941": [
        {
            "dateadded": "2026-04-14 01:07:18 UTC",
            "url": "http://222.219.74.101:58121/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820941/",
            "reporter": "geenensp"
        }
    ],
    "3820940": [
        {
            "dateadded": "2026-04-14 01:06:10 UTC",
            "url": "https://gate6-port.travexin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820940/",
            "reporter": "anonymous"
        }
    ],
    "3820939": [
        {
            "dateadded": "2026-04-14 01:02:11 UTC",
            "url": "https://svc5-relay.travexin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 01:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820939/",
            "reporter": "anonymous"
        }
    ],
    "3820938": [
        {
            "dateadded": "2026-04-14 00:58:09 UTC",
            "url": "http://182.116.9.59:48332/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:11:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820938/",
            "reporter": "geenensp"
        }
    ],
    "3820937": [
        {
            "dateadded": "2026-04-14 00:56:13 UTC",
            "url": "https://ops4-base.travexin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820937/",
            "reporter": "anonymous"
        }
    ],
    "3820936": [
        {
            "dateadded": "2026-04-14 00:50:19 UTC",
            "url": "http://61.54.42.193:57086/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820936/",
            "reporter": "geenensp"
        }
    ],
    "3820935": [
        {
            "dateadded": "2026-04-14 00:50:11 UTC",
            "url": "https://node3-view.travexin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820935/",
            "reporter": "anonymous"
        }
    ],
    "3820934": [
        {
            "dateadded": "2026-04-14 00:47:21 UTC",
            "url": "http://221.15.187.90:48431/i",
            "url_status": "offline",
            "last_online": "2026-04-14 00:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820934/",
            "reporter": "geenensp"
        }
    ],
    "3820933": [
        {
            "dateadded": "2026-04-14 00:44:14 UTC",
            "url": "https://api2-load.travexin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820933/",
            "reporter": "anonymous"
        }
    ],
    "3820932": [
        {
            "dateadded": "2026-04-14 00:41:22 UTC",
            "url": "http://42.239.191.226:58845/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820932/",
            "reporter": "geenensp"
        }
    ],
    "3820931": [
        {
            "dateadded": "2026-04-14 00:39:18 UTC",
            "url": "http://222.219.74.101:58121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:00:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820931/",
            "reporter": "geenensp"
        }
    ],
    "3820930": [
        {
            "dateadded": "2026-04-14 00:39:12 UTC",
            "url": "https://tun1-pipe.travexin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820930/",
            "reporter": "anonymous"
        }
    ],
    "3820929": [
        {
            "dateadded": "2026-04-14 00:38:11 UTC",
            "url": "http://110.38.221.11:35835/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:27:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820929/",
            "reporter": "geenensp"
        }
    ],
    "3820928": [
        {
            "dateadded": "2026-04-14 00:35:18 UTC",
            "url": "http://186.227.247.25:32769/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820928/",
            "reporter": "geenensp"
        }
    ],
    "3820927": [
        {
            "dateadded": "2026-04-14 00:34:10 UTC",
            "url": "https://gate6-link.zeq7moral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820927/",
            "reporter": "anonymous"
        }
    ],
    "3820912": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.arm6",
            "url_status": "offline",
            "last_online": "2026-04-14 00:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820912/",
            "reporter": "botnetkiller"
        }
    ],
    "3820913": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.arm4",
            "url_status": "offline",
            "last_online": "2026-04-14 10:33:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820913/",
            "reporter": "botnetkiller"
        }
    ],
    "3820914": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.x64",
            "url_status": "offline",
            "last_online": "2026-04-14 10:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820914/",
            "reporter": "botnetkiller"
        }
    ],
    "3820915": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.mips",
            "url_status": "offline",
            "last_online": "2026-04-14 10:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820915/",
            "reporter": "botnetkiller"
        }
    ],
    "3820916": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.sh4",
            "url_status": "offline",
            "last_online": "2026-04-14 00:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820916/",
            "reporter": "botnetkiller"
        }
    ],
    "3820917": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-14 00:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820917/",
            "reporter": "botnetkiller"
        }
    ],
    "3820918": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.dbg",
            "url_status": "offline",
            "last_online": "2026-04-14 11:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820918/",
            "reporter": "botnetkiller"
        }
    ],
    "3820919": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.i486",
            "url_status": "offline",
            "last_online": "2026-04-14 10:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820919/",
            "reporter": "botnetkiller"
        }
    ],
    "3820920": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.arm5",
            "url_status": "offline",
            "last_online": "2026-04-14 10:54:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820920/",
            "reporter": "botnetkiller"
        }
    ],
    "3820921": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.ppc",
            "url_status": "offline",
            "last_online": "2026-04-14 10:56:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820921/",
            "reporter": "botnetkiller"
        }
    ],
    "3820922": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.i686",
            "url_status": "offline",
            "last_online": "2026-04-14 00:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820922/",
            "reporter": "botnetkiller"
        }
    ],
    "3820923": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.arm7",
            "url_status": "offline",
            "last_online": "2026-04-14 10:47:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820923/",
            "reporter": "botnetkiller"
        }
    ],
    "3820924": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.m68k",
            "url_status": "offline",
            "last_online": "2026-04-14 00:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820924/",
            "reporter": "botnetkiller"
        }
    ],
    "3820925": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.spc",
            "url_status": "offline",
            "last_online": "2026-04-14 00:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820925/",
            "reporter": "botnetkiller"
        }
    ],
    "3820926": [
        {
            "dateadded": "2026-04-14 00:30:22 UTC",
            "url": "http://194.163.140.58:1212/zyre.apk",
            "url_status": "offline",
            "last_online": "2026-04-14 11:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820926/",
            "reporter": "botnetkiller"
        }
    ],
    "3820911": [
        {
            "dateadded": "2026-04-14 00:30:19 UTC",
            "url": "http://194.163.140.58:1212/zyre.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-14 10:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820911/",
            "reporter": "botnetkiller"
        }
    ],
    "3820910": [
        {
            "dateadded": "2026-04-14 00:29:18 UTC",
            "url": "http://194.163.140.58:1212/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820910/",
            "reporter": "botnetkiller"
        }
    ],
    "3820909": [
        {
            "dateadded": "2026-04-14 00:28:07 UTC",
            "url": "https://svc5-unit.zeq7moral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820909/",
            "reporter": "anonymous"
        }
    ],
    "3820908": [
        {
            "dateadded": "2026-04-14 00:23:12 UTC",
            "url": "http://221.15.187.90:48431/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 00:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820908/",
            "reporter": "geenensp"
        }
    ],
    "3820907": [
        {
            "dateadded": "2026-04-14 00:22:09 UTC",
            "url": "https://disk4-path.zeq7moral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820907/",
            "reporter": "anonymous"
        }
    ],
    "3820906": [
        {
            "dateadded": "2026-04-14 00:21:17 UTC",
            "url": "http://221.214.246.46:56858/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:41:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820906/",
            "reporter": "geenensp"
        }
    ],
    "3820905": [
        {
            "dateadded": "2026-04-14 00:19:20 UTC",
            "url": "http://60.18.85.182:51969/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:55:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820905/",
            "reporter": "geenensp"
        }
    ],
    "3820903": [
        {
            "dateadded": "2026-04-14 00:17:07 UTC",
            "url": "https://node3-list.zeq7moral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820903/",
            "reporter": "anonymous"
        }
    ],
    "3820904": [
        {
            "dateadded": "2026-04-14 00:17:07 UTC",
            "url": "http://194.163.140.58:1212/zyre.x86",
            "url_status": "offline",
            "last_online": "2026-04-14 00:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820904/",
            "reporter": "botnetkiller"
        }
    ],
    "3820902": [
        {
            "dateadded": "2026-04-14 00:14:10 UTC",
            "url": "https://api2-patch.zeq7moral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820902/",
            "reporter": "anonymous"
        }
    ],
    "3820901": [
        {
            "dateadded": "2026-04-14 00:08:17 UTC",
            "url": "http://186.227.247.25:32769/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820901/",
            "reporter": "geenensp"
        }
    ],
    "3820900": [
        {
            "dateadded": "2026-04-14 00:04:08 UTC",
            "url": "https://run1-exec.zeq7moral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 00:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820900/",
            "reporter": "anonymous"
        }
    ],
    "3820899": [
        {
            "dateadded": "2026-04-14 00:02:17 UTC",
            "url": "http://221.214.246.46:56858/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820899/",
            "reporter": "geenensp"
        }
    ],
    "3820898": [
        {
            "dateadded": "2026-04-13 23:59:12 UTC",
            "url": "http://182.117.76.47:43025/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:28:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820898/",
            "reporter": "geenensp"
        }
    ],
    "3820897": [
        {
            "dateadded": "2026-04-13 23:57:14 UTC",
            "url": "https://gate6-root.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820897/",
            "reporter": "anonymous"
        }
    ],
    "3820896": [
        {
            "dateadded": "2026-04-13 23:52:12 UTC",
            "url": "https://svc5-site.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820896/",
            "reporter": "anonymous"
        }
    ],
    "3820895": [
        {
            "dateadded": "2026-04-13 23:49:08 UTC",
            "url": "http://115.63.188.1:41421/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:54:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820895/",
            "reporter": "geenensp"
        }
    ],
    "3820894": [
        {
            "dateadded": "2026-04-13 23:48:12 UTC",
            "url": "http://123.10.25.133:44346/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 17:24:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820894/",
            "reporter": "geenensp"
        }
    ],
    "3820893": [
        {
            "dateadded": "2026-04-13 23:46:08 UTC",
            "url": "https://auth4-key.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820893/",
            "reporter": "anonymous"
        }
    ],
    "3820892": [
        {
            "dateadded": "2026-04-13 23:45:12 UTC",
            "url": "http://110.38.215.152:52195/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820892/",
            "reporter": "geenensp"
        }
    ],
    "3820891": [
        {
            "dateadded": "2026-04-13 23:41:08 UTC",
            "url": "https://node3-join.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820891/",
            "reporter": "anonymous"
        }
    ],
    "3820890": [
        {
            "dateadded": "2026-04-13 23:38:19 UTC",
            "url": "http://115.52.232.55:41267/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:47:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820890/",
            "reporter": "geenensp"
        }
    ],
    "3820889": [
        {
            "dateadded": "2026-04-13 23:37:18 UTC",
            "url": "http://94.156.152.67:83/x86",
            "url_status": "offline",
            "last_online": "2026-04-22 17:24:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820889/",
            "reporter": "botnetkiller"
        }
    ],
    "3820888": [
        {
            "dateadded": "2026-04-13 23:35:22 UTC",
            "url": "http://182.117.76.47:43025/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820888/",
            "reporter": "geenensp"
        }
    ],
    "3820887": [
        {
            "dateadded": "2026-04-13 23:35:12 UTC",
            "url": "https://api2-test.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820887/",
            "reporter": "anonymous"
        }
    ],
    "3820886": [
        {
            "dateadded": "2026-04-13 23:32:14 UTC",
            "url": "http://60.18.70.207:50558/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820886/",
            "reporter": "geenensp"
        }
    ],
    "3820885": [
        {
            "dateadded": "2026-04-13 23:31:11 UTC",
            "url": "https://log1-audit.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820885/",
            "reporter": "anonymous"
        }
    ],
    "3820884": [
        {
            "dateadded": "2026-04-13 23:28:15 UTC",
            "url": "https://gate6-way.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820884/",
            "reporter": "anonymous"
        }
    ],
    "3820883": [
        {
            "dateadded": "2026-04-13 23:26:14 UTC",
            "url": "http://39.87.202.193:41671/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820883/",
            "reporter": "geenensp"
        }
    ],
    "3820882": [
        {
            "dateadded": "2026-04-13 23:18:15 UTC",
            "url": "https://svc5-info.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820882/",
            "reporter": "anonymous"
        }
    ],
    "3820881": [
        {
            "dateadded": "2026-04-13 23:16:21 UTC",
            "url": "http://115.49.224.251:52626/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:09:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820881/",
            "reporter": "geenensp"
        }
    ],
    "3820880": [
        {
            "dateadded": "2026-04-13 23:15:20 UTC",
            "url": "http://115.52.232.55:41267/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820880/",
            "reporter": "geenensp"
        }
    ],
    "3820879": [
        {
            "dateadded": "2026-04-13 23:15:19 UTC",
            "url": "http://200.115.102.246:41079/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:19:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820879/",
            "reporter": "geenensp"
        }
    ],
    "3820878": [
        {
            "dateadded": "2026-04-13 23:13:27 UTC",
            "url": "http://105.184.105.39:37173/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820878/",
            "reporter": "geenensp"
        }
    ],
    "3820877": [
        {
            "dateadded": "2026-04-13 23:13:14 UTC",
            "url": "https://git4-repo.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 20:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820877/",
            "reporter": "anonymous"
        }
    ],
    "3820876": [
        {
            "dateadded": "2026-04-13 23:12:21 UTC",
            "url": "http://60.18.85.182:51969/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820876/",
            "reporter": "geenensp"
        }
    ],
    "3820875": [
        {
            "dateadded": "2026-04-13 23:11:21 UTC",
            "url": "http://101.23.105.204:57442/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820875/",
            "reporter": "geenensp"
        }
    ],
    "3820874": [
        {
            "dateadded": "2026-04-13 23:07:09 UTC",
            "url": "https://node3-blob.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820874/",
            "reporter": "anonymous"
        }
    ],
    "3820873": [
        {
            "dateadded": "2026-04-13 23:02:08 UTC",
            "url": "https://api2-meta.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 23:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820873/",
            "reporter": "anonymous"
        }
    ],
    "3820872": [
        {
            "dateadded": "2026-04-13 22:58:19 UTC",
            "url": "http://39.87.202.193:41671/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820872/",
            "reporter": "geenensp"
        }
    ],
    "3820871": [
        {
            "dateadded": "2026-04-13 22:56:14 UTC",
            "url": "https://set1-init.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820871/",
            "reporter": "anonymous"
        }
    ],
    "3820870": [
        {
            "dateadded": "2026-04-13 22:52:14 UTC",
            "url": "https://gate6-zone.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820870/",
            "reporter": "anonymous"
        }
    ],
    "3820869": [
        {
            "dateadded": "2026-04-13 22:50:24 UTC",
            "url": "http://113.75.79.92:55690/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:39:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820869/",
            "reporter": "geenensp"
        }
    ],
    "3820868": [
        {
            "dateadded": "2026-04-13 22:49:18 UTC",
            "url": "http://110.85.99.217:38787/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820868/",
            "reporter": "geenensp"
        }
    ],
    "3820867": [
        {
            "dateadded": "2026-04-13 22:49:12 UTC",
            "url": "https://svc5-ready.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820867/",
            "reporter": "anonymous"
        }
    ],
    "3820866": [
        {
            "dateadded": "2026-04-13 22:43:22 UTC",
            "url": "http://105.184.112.34:45527/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:43:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820866/",
            "reporter": "geenensp"
        }
    ],
    "3820865": [
        {
            "dateadded": "2026-04-13 22:39:43 UTC",
            "url": "http://112.239.127.191:54503/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820865/",
            "reporter": "geenensp"
        }
    ],
    "3820864": [
        {
            "dateadded": "2026-04-13 22:38:08 UTC",
            "url": "https://db4-store.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820864/",
            "reporter": "anonymous"
        }
    ],
    "3820863": [
        {
            "dateadded": "2026-04-13 22:37:10 UTC",
            "url": "http://42.177.20.212:59988/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 18:01:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820863/",
            "reporter": "geenensp"
        }
    ],
    "3820862": [
        {
            "dateadded": "2026-04-13 22:35:23 UTC",
            "url": "http://101.23.105.204:57442/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820862/",
            "reporter": "geenensp"
        }
    ],
    "3820861": [
        {
            "dateadded": "2026-04-13 22:35:10 UTC",
            "url": "http://62.60.226.159/znk.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 17:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820861/",
            "reporter": "c2hunter"
        }
    ],
    "3820860": [
        {
            "dateadded": "2026-04-13 22:33:14 UTC",
            "url": "https://node3-fast.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820860/",
            "reporter": "anonymous"
        }
    ],
    "3820859": [
        {
            "dateadded": "2026-04-13 22:32:19 UTC",
            "url": "http://60.18.70.207:50558/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 17:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820859/",
            "reporter": "geenensp"
        }
    ],
    "3820858": [
        {
            "dateadded": "2026-04-13 22:31:22 UTC",
            "url": "http://60.22.179.203:57182/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820858/",
            "reporter": "geenensp"
        }
    ],
    "3820857": [
        {
            "dateadded": "2026-04-13 22:27:14 UTC",
            "url": "https://api2-call.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820857/",
            "reporter": "anonymous"
        }
    ],
    "3820856": [
        {
            "dateadded": "2026-04-13 22:24:18 UTC",
            "url": "http://182.116.114.239:48365/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820856/",
            "reporter": "geenensp"
        }
    ],
    "3820855": [
        {
            "dateadded": "2026-04-13 22:24:08 UTC",
            "url": "https://raw.githubusercontent.com/professor9-sys/oldlauncher928/refs/heads/main/woofer.rar",
            "url_status": "online",
            "last_online": "2026-04-27 15:04:54 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820855/",
            "reporter": "botnetkiller"
        }
    ],
    "3820854": [
        {
            "dateadded": "2026-04-13 22:23:24 UTC",
            "url": "http://113.75.79.92:55690/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:07:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820854/",
            "reporter": "geenensp"
        }
    ],
    "3820853": [
        {
            "dateadded": "2026-04-13 22:22:14 UTC",
            "url": "https://box1-state.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820853/",
            "reporter": "anonymous"
        }
    ],
    "3820852": [
        {
            "dateadded": "2026-04-13 22:22:13 UTC",
            "url": "https://raw.githubusercontent.com/professor9-sys/oldlauncher928/refs/heads/main/cmd.bat",
            "url_status": "offline",
            "last_online": "2026-04-13 22:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "bat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820852/",
            "reporter": "botnetkiller"
        }
    ],
    "3820850": [
        {
            "dateadded": "2026-04-13 22:19:14 UTC",
            "url": "https://cloudstorage-hub.com/get-launcher.php",
            "url_status": "offline",
            "last_online": "2026-04-13 22:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "bat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820850/",
            "reporter": "botnetkiller"
        }
    ],
    "3820849": [
        {
            "dateadded": "2026-04-13 22:19:13 UTC",
            "url": "https://cloudstorage-hub.com/launches/8dacc96a6f17691cdbd7f9eacf910b0137af51f0.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 22:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820849/",
            "reporter": "botnetkiller"
        }
    ],
    "3820848": [
        {
            "dateadded": "2026-04-13 22:16:14 UTC",
            "url": "https://gate6-main.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820848/",
            "reporter": "anonymous"
        }
    ],
    "3820847": [
        {
            "dateadded": "2026-04-13 22:14:13 UTC",
            "url": "http://182.116.114.239:48365/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 10:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820847/",
            "reporter": "geenensp"
        }
    ],
    "3820846": [
        {
            "dateadded": "2026-04-13 22:12:20 UTC",
            "url": "http://125.47.200.76:42847/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:12:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820846/",
            "reporter": "geenensp"
        }
    ],
    "3820845": [
        {
            "dateadded": "2026-04-13 22:10:26 UTC",
            "url": "http://105.184.112.34:45527/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820845/",
            "reporter": "geenensp"
        }
    ],
    "3820844": [
        {
            "dateadded": "2026-04-13 22:10:14 UTC",
            "url": "https://svc5-flow.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820844/",
            "reporter": "anonymous"
        }
    ],
    "3820843": [
        {
            "dateadded": "2026-04-13 22:09:32 UTC",
            "url": "http://115.58.35.142:39509/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:09:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820843/",
            "reporter": "geenensp"
        }
    ],
    "3820842": [
        {
            "dateadded": "2026-04-13 22:05:19 UTC",
            "url": "http://182.124.112.31:40481/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:37:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820842/",
            "reporter": "geenensp"
        }
    ],
    "3820841": [
        {
            "dateadded": "2026-04-13 22:05:12 UTC",
            "url": "https://job4-task.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820841/",
            "reporter": "anonymous"
        }
    ],
    "3820840": [
        {
            "dateadded": "2026-04-13 22:00:11 UTC",
            "url": "https://node3-soft.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 22:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820840/",
            "reporter": "anonymous"
        }
    ],
    "3820839": [
        {
            "dateadded": "2026-04-13 21:54:10 UTC",
            "url": "https://api2-push.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820839/",
            "reporter": "anonymous"
        }
    ],
    "3820838": [
        {
            "dateadded": "2026-04-13 21:52:18 UTC",
            "url": "http://222.137.72.198:59189/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820838/",
            "reporter": "geenensp"
        }
    ],
    "3820837": [
        {
            "dateadded": "2026-04-13 21:50:20 UTC",
            "url": "http://222.137.72.198:59189/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:40:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820837/",
            "reporter": "geenensp"
        }
    ],
    "3820836": [
        {
            "dateadded": "2026-04-13 21:49:15 UTC",
            "url": "https://eth1-link.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820836/",
            "reporter": "anonymous"
        }
    ],
    "3820835": [
        {
            "dateadded": "2026-04-13 21:47:15 UTC",
            "url": "http://125.47.200.76:42847/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820835/",
            "reporter": "geenensp"
        }
    ],
    "3820834": [
        {
            "dateadded": "2026-04-13 21:44:07 UTC",
            "url": "https://gate6-hub.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820834/",
            "reporter": "anonymous"
        }
    ],
    "3820833": [
        {
            "dateadded": "2026-04-13 21:37:10 UTC",
            "url": "https://svc5-mesh.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820833/",
            "reporter": "anonymous"
        }
    ],
    "3820832": [
        {
            "dateadded": "2026-04-13 21:34:14 UTC",
            "url": "http://123.14.38.161:55419/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820832/",
            "reporter": "geenensp"
        }
    ],
    "3820831": [
        {
            "dateadded": "2026-04-13 21:32:17 UTC",
            "url": "http://39.87.31.132:59509/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 21:32:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820831/",
            "reporter": "geenensp"
        }
    ],
    "3820830": [
        {
            "dateadded": "2026-04-13 21:32:09 UTC",
            "url": "https://pod4-sync.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820830/",
            "reporter": "anonymous"
        }
    ],
    "3820829": [
        {
            "dateadded": "2026-04-13 21:29:18 UTC",
            "url": "http://182.119.92.186:57951/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:48:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820829/",
            "reporter": "geenensp"
        }
    ],
    "3820828": [
        {
            "dateadded": "2026-04-13 21:28:08 UTC",
            "url": "https://node3-core.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820828/",
            "reporter": "anonymous"
        }
    ],
    "3820827": [
        {
            "dateadded": "2026-04-13 21:26:15 UTC",
            "url": "http://87.227.116.162:34043/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820827/",
            "reporter": "geenensp"
        }
    ],
    "3820826": [
        {
            "dateadded": "2026-04-13 21:25:11 UTC",
            "url": "https://api2-route.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820826/",
            "reporter": "anonymous"
        }
    ],
    "3820825": [
        {
            "dateadded": "2026-04-13 21:15:10 UTC",
            "url": "https://mon1-check.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 21:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820825/",
            "reporter": "anonymous"
        }
    ],
    "3820824": [
        {
            "dateadded": "2026-04-13 21:15:07 UTC",
            "url": "https://ef8qorio.latat-long.digital/?ublib=pxjltvWQZvTHsBVh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820824/",
            "reporter": "anonymous"
        }
    ],
    "3820823": [
        {
            "dateadded": "2026-04-13 21:13:08 UTC",
            "url": "http://219.155.63.138:59071/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:20:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820823/",
            "reporter": "geenensp"
        }
    ],
    "3820822": [
        {
            "dateadded": "2026-04-13 21:11:08 UTC",
            "url": "http://103.213.235.26:42468/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820822/",
            "reporter": "geenensp"
        }
    ],
    "3820821": [
        {
            "dateadded": "2026-04-13 21:10:18 UTC",
            "url": "http://196.251.107.133/bins/pay",
            "url_status": "offline",
            "last_online": "2026-04-14 10:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820821/",
            "reporter": "botnetkiller"
        }
    ],
    "3820820": [
        {
            "dateadded": "2026-04-13 21:00:15 UTC",
            "url": "http://123.14.38.161:55419/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:56:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820820/",
            "reporter": "geenensp"
        }
    ],
    "3820819": [
        {
            "dateadded": "2026-04-13 21:00:10 UTC",
            "url": "http://115.50.254.26:35075/i",
            "url_status": "offline",
            "last_online": "2026-04-13 21:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820819/",
            "reporter": "geenensp"
        }
    ],
    "3820816": [
        {
            "dateadded": "2026-04-13 20:59:17 UTC",
            "url": "http://94.156.152.67:83/w2.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:23:36 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820816/",
            "reporter": "botnetkiller"
        }
    ],
    "3820817": [
        {
            "dateadded": "2026-04-13 20:59:17 UTC",
            "url": "http://94.156.152.67:83/telnet.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:09:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820817/",
            "reporter": "botnetkiller"
        }
    ],
    "3820818": [
        {
            "dateadded": "2026-04-13 20:59:17 UTC",
            "url": "http://94.156.152.67:83/jg.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820818/",
            "reporter": "botnetkiller"
        }
    ],
    "3820815": [
        {
            "dateadded": "2026-04-13 20:59:06 UTC",
            "url": "https://neo-c0upon.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820815/",
            "reporter": "anonymous"
        }
    ],
    "3820814": [
        {
            "dateadded": "2026-04-13 20:55:21 UTC",
            "url": "http://87.227.116.162:34043/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820814/",
            "reporter": "geenensp"
        }
    ],
    "3820813": [
        {
            "dateadded": "2026-04-13 20:54:09 UTC",
            "url": "https://zmxa.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820813/",
            "reporter": "anonymous"
        }
    ],
    "3820812": [
        {
            "dateadded": "2026-04-13 20:49:10 UTC",
            "url": "https://nvgsw.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820812/",
            "reporter": "anonymous"
        }
    ],
    "3820811": [
        {
            "dateadded": "2026-04-13 20:42:08 UTC",
            "url": "https://stitch-spool.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820811/",
            "reporter": "anonymous"
        }
    ],
    "3820810": [
        {
            "dateadded": "2026-04-13 20:40:20 UTC",
            "url": "http://59.97.254.243:44880/i",
            "url_status": "offline",
            "last_online": "2026-04-13 20:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820810/",
            "reporter": "geenensp"
        }
    ],
    "3820809": [
        {
            "dateadded": "2026-04-13 20:36:10 UTC",
            "url": "https://tyvp2rya.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820809/",
            "reporter": "anonymous"
        }
    ],
    "3820808": [
        {
            "dateadded": "2026-04-13 20:35:19 UTC",
            "url": "http://119.109.212.104:37559/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820808/",
            "reporter": "geenensp"
        }
    ],
    "3820807": [
        {
            "dateadded": "2026-04-13 20:32:09 UTC",
            "url": "https://couponfir.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820807/",
            "reporter": "anonymous"
        }
    ],
    "3820806": [
        {
            "dateadded": "2026-04-13 20:31:09 UTC",
            "url": "http://115.50.254.26:35075/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 20:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820806/",
            "reporter": "geenensp"
        }
    ],
    "3820805": [
        {
            "dateadded": "2026-04-13 20:28:07 UTC",
            "url": "https://fernoak.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820805/",
            "reporter": "anonymous"
        }
    ],
    "3820804": [
        {
            "dateadded": "2026-04-13 20:24:11 UTC",
            "url": "https://scre-dust.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820804/",
            "reporter": "anonymous"
        }
    ],
    "3820803": [
        {
            "dateadded": "2026-04-13 20:15:14 UTC",
            "url": "https://kel-fluxis.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820803/",
            "reporter": "anonymous"
        }
    ],
    "3820802": [
        {
            "dateadded": "2026-04-13 20:13:13 UTC",
            "url": "http://115.209.242.225:56782/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:27:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820802/",
            "reporter": "geenensp"
        }
    ],
    "3820801": [
        {
            "dateadded": "2026-04-13 20:11:08 UTC",
            "url": "https://bhbl.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820801/",
            "reporter": "anonymous"
        }
    ],
    "3820800": [
        {
            "dateadded": "2026-04-13 20:07:18 UTC",
            "url": "http://119.109.212.104:37559/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:57:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820800/",
            "reporter": "geenensp"
        }
    ],
    "3820799": [
        {
            "dateadded": "2026-04-13 20:06:18 UTC",
            "url": "http://182.119.226.118:43278/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820799/",
            "reporter": "geenensp"
        }
    ],
    "3820798": [
        {
            "dateadded": "2026-04-13 20:04:10 UTC",
            "url": "https://dirmod.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 20:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820798/",
            "reporter": "anonymous"
        }
    ],
    "3820797": [
        {
            "dateadded": "2026-04-13 19:58:17 UTC",
            "url": "http://182.112.231.140:45371/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:41:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820797/",
            "reporter": "geenensp"
        }
    ],
    "3820796": [
        {
            "dateadded": "2026-04-13 19:58:08 UTC",
            "url": "https://equitysail.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820796/",
            "reporter": "anonymous"
        }
    ],
    "3820795": [
        {
            "dateadded": "2026-04-13 19:52:12 UTC",
            "url": "https://jzdq.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820795/",
            "reporter": "anonymous"
        }
    ],
    "3820794": [
        {
            "dateadded": "2026-04-13 19:46:08 UTC",
            "url": "https://shif-well.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820794/",
            "reporter": "anonymous"
        }
    ],
    "3820793": [
        {
            "dateadded": "2026-04-13 19:45:11 UTC",
            "url": "http://219.157.185.79:35358/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 04:12:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820793/",
            "reporter": "geenensp"
        }
    ],
    "3820792": [
        {
            "dateadded": "2026-04-13 19:43:19 UTC",
            "url": "http://220.135.42.237:59112/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820792/",
            "reporter": "geenensp"
        }
    ],
    "3820791": [
        {
            "dateadded": "2026-04-13 19:40:12 UTC",
            "url": "https://3zpnkdk.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820791/",
            "reporter": "anonymous"
        }
    ],
    "3820790": [
        {
            "dateadded": "2026-04-13 19:35:09 UTC",
            "url": "https://alt-5ynta.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820790/",
            "reporter": "anonymous"
        }
    ],
    "3820789": [
        {
            "dateadded": "2026-04-13 19:30:10 UTC",
            "url": "https://guafux.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820789/",
            "reporter": "anonymous"
        }
    ],
    "3820788": [
        {
            "dateadded": "2026-04-13 19:29:13 UTC",
            "url": "http://45.183.184.74:56199/i",
            "url_status": "offline",
            "last_online": "2026-04-21 18:11:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820788/",
            "reporter": "geenensp"
        }
    ],
    "3820787": [
        {
            "dateadded": "2026-04-13 19:27:14 UTC",
            "url": "http://182.112.231.140:45371/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820787/",
            "reporter": "geenensp"
        }
    ],
    "3820786": [
        {
            "dateadded": "2026-04-13 19:25:10 UTC",
            "url": "http://45.183.184.74:56199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820786/",
            "reporter": "geenensp"
        }
    ],
    "3820785": [
        {
            "dateadded": "2026-04-13 19:23:11 UTC",
            "url": "https://psnwbo.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820785/",
            "reporter": "anonymous"
        }
    ],
    "3820784": [
        {
            "dateadded": "2026-04-13 19:21:16 UTC",
            "url": "http://42.238.239.136:53481/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:08:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820784/",
            "reporter": "geenensp"
        }
    ],
    "3820783": [
        {
            "dateadded": "2026-04-13 19:18:13 UTC",
            "url": "https://bv9fw.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820783/",
            "reporter": "anonymous"
        }
    ],
    "3820782": [
        {
            "dateadded": "2026-04-13 19:12:08 UTC",
            "url": "https://fafitgz.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820782/",
            "reporter": "anonymous"
        }
    ],
    "3820781": [
        {
            "dateadded": "2026-04-13 19:10:10 UTC",
            "url": "http://115.50.94.151:50862/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:23:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820781/",
            "reporter": "geenensp"
        }
    ],
    "3820780": [
        {
            "dateadded": "2026-04-13 19:08:17 UTC",
            "url": "http://115.50.94.151:50862/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:50:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820780/",
            "reporter": "geenensp"
        }
    ],
    "3820779": [
        {
            "dateadded": "2026-04-13 19:07:13 UTC",
            "url": "https://vendorwhole.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820779/",
            "reporter": "anonymous"
        }
    ],
    "3820778": [
        {
            "dateadded": "2026-04-13 19:05:29 UTC",
            "url": "http://120.157.23.2:51662/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:44:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820778/",
            "reporter": "geenensp"
        }
    ],
    "3820777": [
        {
            "dateadded": "2026-04-13 19:01:12 UTC",
            "url": "https://p3ak-path.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 19:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820777/",
            "reporter": "anonymous"
        }
    ],
    "3820776": [
        {
            "dateadded": "2026-04-13 18:57:18 UTC",
            "url": "http://61.53.133.69:45126/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 18:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820776/",
            "reporter": "geenensp"
        }
    ],
    "3820775": [
        {
            "dateadded": "2026-04-13 18:57:06 UTC",
            "url": "https://kawjhm.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820775/",
            "reporter": "anonymous"
        }
    ],
    "3820774": [
        {
            "dateadded": "2026-04-13 18:50:22 UTC",
            "url": "http://42.238.239.136:53481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820774/",
            "reporter": "geenensp"
        }
    ],
    "3820773": [
        {
            "dateadded": "2026-04-13 18:50:11 UTC",
            "url": "https://sercrestar.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820773/",
            "reporter": "anonymous"
        }
    ],
    "3820772": [
        {
            "dateadded": "2026-04-13 18:45:08 UTC",
            "url": "https://softcamp.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820772/",
            "reporter": "anonymous"
        }
    ],
    "3820771": [
        {
            "dateadded": "2026-04-13 18:39:07 UTC",
            "url": "https://caveazure.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820771/",
            "reporter": "anonymous"
        }
    ],
    "3820770": [
        {
            "dateadded": "2026-04-13 18:37:18 UTC",
            "url": "http://123.10.239.121:55537/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820770/",
            "reporter": "geenensp"
        }
    ],
    "3820769": [
        {
            "dateadded": "2026-04-13 18:33:11 UTC",
            "url": "https://hyper-pr1v.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820769/",
            "reporter": "anonymous"
        }
    ],
    "3820768": [
        {
            "dateadded": "2026-04-13 18:27:11 UTC",
            "url": "https://garde-rave.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820768/",
            "reporter": "anonymous"
        }
    ],
    "3820767": [
        {
            "dateadded": "2026-04-13 18:23:20 UTC",
            "url": "http://175.43.135.133:38267/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:21:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820767/",
            "reporter": "geenensp"
        }
    ],
    "3820766": [
        {
            "dateadded": "2026-04-13 18:22:07 UTC",
            "url": "https://g0lden4-mark.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820766/",
            "reporter": "anonymous"
        }
    ],
    "3820765": [
        {
            "dateadded": "2026-04-13 18:20:16 UTC",
            "url": "http://125.45.67.120:46441/i",
            "url_status": "offline",
            "last_online": "2026-04-13 18:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820765/",
            "reporter": "geenensp"
        }
    ],
    "3820764": [
        {
            "dateadded": "2026-04-13 18:17:08 UTC",
            "url": "https://5urv-pulse.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820764/",
            "reporter": "anonymous"
        }
    ],
    "3820763": [
        {
            "dateadded": "2026-04-13 18:13:11 UTC",
            "url": "http://182.116.116.67:46743/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820763/",
            "reporter": "geenensp"
        }
    ],
    "3820762": [
        {
            "dateadded": "2026-04-13 18:12:18 UTC",
            "url": "http://123.10.239.121:55537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820762/",
            "reporter": "geenensp"
        }
    ],
    "3820761": [
        {
            "dateadded": "2026-04-13 18:10:15 UTC",
            "url": "https://easturban.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820761/",
            "reporter": "anonymous"
        }
    ],
    "3820760": [
        {
            "dateadded": "2026-04-13 18:06:13 UTC",
            "url": "https://3ndp1-reach.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820760/",
            "reporter": "anonymous"
        }
    ],
    "3820759": [
        {
            "dateadded": "2026-04-13 18:05:08 UTC",
            "url": "http://182.121.190.99:43705/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:28:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820759/",
            "reporter": "geenensp"
        }
    ],
    "3820758": [
        {
            "dateadded": "2026-04-13 18:00:15 UTC",
            "url": "https://704swp.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 18:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820758/",
            "reporter": "anonymous"
        }
    ],
    "3820757": [
        {
            "dateadded": "2026-04-13 17:54:07 UTC",
            "url": "https://smar-disc.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820757/",
            "reporter": "anonymous"
        }
    ],
    "3820756": [
        {
            "dateadded": "2026-04-13 17:51:19 UTC",
            "url": "http://125.45.67.120:46441/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820756/",
            "reporter": "geenensp"
        }
    ],
    "3820755": [
        {
            "dateadded": "2026-04-13 17:49:13 UTC",
            "url": "https://talspireis4.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820755/",
            "reporter": "anonymous"
        }
    ],
    "3820754": [
        {
            "dateadded": "2026-04-13 17:45:19 UTC",
            "url": "http://182.127.165.211:50242/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820754/",
            "reporter": "geenensp"
        }
    ],
    "3820753": [
        {
            "dateadded": "2026-04-13 17:43:20 UTC",
            "url": "http://115.48.137.3:39727/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820753/",
            "reporter": "geenensp"
        }
    ],
    "3820752": [
        {
            "dateadded": "2026-04-13 17:42:14 UTC",
            "url": "http://182.121.190.99:43705/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820752/",
            "reporter": "geenensp"
        }
    ],
    "3820750": [
        {
            "dateadded": "2026-04-13 17:42:13 UTC",
            "url": "http://115.55.234.213:58277/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820750/",
            "reporter": "geenensp"
        }
    ],
    "3820751": [
        {
            "dateadded": "2026-04-13 17:42:13 UTC",
            "url": "https://wceemv.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820751/",
            "reporter": "anonymous"
        }
    ],
    "3820749": [
        {
            "dateadded": "2026-04-13 17:38:12 UTC",
            "url": "https://basicmas.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820749/",
            "reporter": "anonymous"
        }
    ],
    "3820748": [
        {
            "dateadded": "2026-04-13 17:31:16 UTC",
            "url": "https://nordraex4.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820748/",
            "reporter": "anonymous"
        }
    ],
    "3820747": [
        {
            "dateadded": "2026-04-13 17:26:15 UTC",
            "url": "https://scanmodel.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820747/",
            "reporter": "anonymous"
        }
    ],
    "3820746": [
        {
            "dateadded": "2026-04-13 17:20:13 UTC",
            "url": "https://shal6-stream.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820746/",
            "reporter": "anonymous"
        }
    ],
    "3820745": [
        {
            "dateadded": "2026-04-13 17:18:26 UTC",
            "url": "http://88.235.109.245:44042/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:19:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820745/",
            "reporter": "geenensp"
        }
    ],
    "3820744": [
        {
            "dateadded": "2026-04-13 17:18:22 UTC",
            "url": "http://203.177.251.31:36190/i",
            "url_status": "offline",
            "last_online": "2026-04-16 00:06:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820744/",
            "reporter": "geenensp"
        }
    ],
    "3820743": [
        {
            "dateadded": "2026-04-13 17:17:32 UTC",
            "url": "http://115.48.137.3:39727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:54:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820743/",
            "reporter": "geenensp"
        }
    ],
    "3820742": [
        {
            "dateadded": "2026-04-13 17:16:23 UTC",
            "url": "http://115.56.152.92:33877/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820742/",
            "reporter": "geenensp"
        }
    ],
    "3820741": [
        {
            "dateadded": "2026-04-13 17:15:17 UTC",
            "url": "https://arkmesh2ex.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820741/",
            "reporter": "anonymous"
        }
    ],
    "3820740": [
        {
            "dateadded": "2026-04-13 17:09:08 UTC",
            "url": "https://mh4j.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820740/",
            "reporter": "anonymous"
        }
    ],
    "3820739": [
        {
            "dateadded": "2026-04-13 17:08:21 UTC",
            "url": "http://61.53.72.47:48943/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820739/",
            "reporter": "geenensp"
        }
    ],
    "3820738": [
        {
            "dateadded": "2026-04-13 17:07:11 UTC",
            "url": "http://61.53.72.47:48943/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:23:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820738/",
            "reporter": "geenensp"
        }
    ],
    "3820735": [
        {
            "dateadded": "2026-04-13 17:05:09 UTC",
            "url": "http://185.139.215.64:9090/shell.aspx.jpg",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:35 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820735/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820736": [
        {
            "dateadded": "2026-04-13 17:05:09 UTC",
            "url": "http://185.139.215.64:9090/shell.jpg",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:59 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820736/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820737": [
        {
            "dateadded": "2026-04-13 17:05:09 UTC",
            "url": "http://185.139.215.64:9090/shell.asp.jpg",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820737/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820734": [
        {
            "dateadded": "2026-04-13 17:04:14 UTC",
            "url": "https://gmzhuq.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 17:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820734/",
            "reporter": "anonymous"
        }
    ],
    "3820733": [
        {
            "dateadded": "2026-04-13 17:02:30 UTC",
            "url": "http://45.166.188.48:34864/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820733/",
            "reporter": "geenensp"
        }
    ],
    "3820732": [
        {
            "dateadded": "2026-04-13 17:01:19 UTC",
            "url": "http://182.126.114.93:36606/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820732/",
            "reporter": "geenensp"
        }
    ],
    "3820731": [
        {
            "dateadded": "2026-04-13 16:58:14 UTC",
            "url": "https://4kreqbfj.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820731/",
            "reporter": "anonymous"
        }
    ],
    "3820727": [
        {
            "dateadded": "2026-04-13 16:56:09 UTC",
            "url": "http://176.125.242.191/cloud.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-13 16:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-125-242-191",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820727/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820728": [
        {
            "dateadded": "2026-04-13 16:56:09 UTC",
            "url": "http://176.125.242.191/cloud.mips",
            "url_status": "offline",
            "last_online": "2026-04-13 16:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-125-242-191",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820728/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820729": [
        {
            "dateadded": "2026-04-13 16:56:09 UTC",
            "url": "http://176.125.242.191/cloud.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-13 16:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-125-242-191",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820729/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820730": [
        {
            "dateadded": "2026-04-13 16:56:09 UTC",
            "url": "http://176.125.242.191/cloud.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-13 16:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-125-242-191",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820730/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820726": [
        {
            "dateadded": "2026-04-13 16:56:08 UTC",
            "url": "http://176.125.242.191/cat.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "176-125-242-191",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820726/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820725": [
        {
            "dateadded": "2026-04-13 16:56:07 UTC",
            "url": "http://176.125.242.191/cloud.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-13 16:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "176-125-242-191",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820725/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820724": [
        {
            "dateadded": "2026-04-13 16:52:10 UTC",
            "url": "https://d1malk.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:49:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820724/",
            "reporter": "anonymous"
        }
    ],
    "3820723": [
        {
            "dateadded": "2026-04-13 16:48:25 UTC",
            "url": "http://27.204.252.54:43744/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820723/",
            "reporter": "geenensp"
        }
    ],
    "3820722": [
        {
            "dateadded": "2026-04-13 16:47:18 UTC",
            "url": "http://203.177.251.31:36190/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:58:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820722/",
            "reporter": "geenensp"
        }
    ],
    "3820721": [
        {
            "dateadded": "2026-04-13 16:47:12 UTC",
            "url": "https://grid6-layer.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:05:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820721/",
            "reporter": "anonymous"
        }
    ],
    "3820720": [
        {
            "dateadded": "2026-04-13 16:45:23 UTC",
            "url": "http://221.227.35.94:54586/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820720/",
            "reporter": "geenensp"
        }
    ],
    "3820719": [
        {
            "dateadded": "2026-04-13 16:41:10 UTC",
            "url": "https://threadtrusted.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820719/",
            "reporter": "anonymous"
        }
    ],
    "3820718": [
        {
            "dateadded": "2026-04-13 16:36:23 UTC",
            "url": "http://119.176.197.31:33639/i",
            "url_status": "offline",
            "last_online": "2026-04-22 22:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820718/",
            "reporter": "geenensp"
        }
    ],
    "3820717": [
        {
            "dateadded": "2026-04-13 16:36:13 UTC",
            "url": "https://ultra-rnerge.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820717/",
            "reporter": "anonymous"
        }
    ],
    "3820716": [
        {
            "dateadded": "2026-04-13 16:32:08 UTC",
            "url": "http://81.177.213.167:8081/release0304.apk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "81-177-213-167-8081",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820716/",
            "reporter": "BlinkzSec"
        }
    ],
    "3820715": [
        {
            "dateadded": "2026-04-13 16:30:25 UTC",
            "url": "http://221.227.35.94:54586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 17:20:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820715/",
            "reporter": "geenensp"
        }
    ],
    "3820714": [
        {
            "dateadded": "2026-04-13 16:30:20 UTC",
            "url": "https://geo-fact0r.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820714/",
            "reporter": "anonymous"
        }
    ],
    "3820713": [
        {
            "dateadded": "2026-04-13 16:26:21 UTC",
            "url": "http://221.15.193.209:43172/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:26:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820713/",
            "reporter": "geenensp"
        }
    ],
    "3820712": [
        {
            "dateadded": "2026-04-13 16:24:22 UTC",
            "url": "http://61.52.0.102:54434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820712/",
            "reporter": "geenensp"
        }
    ],
    "3820711": [
        {
            "dateadded": "2026-04-13 16:24:10 UTC",
            "url": "https://29223qf.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820711/",
            "reporter": "anonymous"
        }
    ],
    "3820710": [
        {
            "dateadded": "2026-04-13 16:19:13 UTC",
            "url": "https://03dg.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:53:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820710/",
            "reporter": "anonymous"
        }
    ],
    "3820709": [
        {
            "dateadded": "2026-04-13 16:13:12 UTC",
            "url": "https://proto-reta1n.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820709/",
            "reporter": "anonymous"
        }
    ],
    "3820708": [
        {
            "dateadded": "2026-04-13 16:08:13 UTC",
            "url": "https://zentide2en.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820708/",
            "reporter": "anonymous"
        }
    ],
    "3820707": [
        {
            "dateadded": "2026-04-13 16:07:20 UTC",
            "url": "http://119.176.197.31:33639/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 23:46:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820707/",
            "reporter": "geenensp"
        }
    ],
    "3820706": [
        {
            "dateadded": "2026-04-13 16:04:08 UTC",
            "url": "https://75gy.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820706/",
            "reporter": "anonymous"
        }
    ],
    "3820705": [
        {
            "dateadded": "2026-04-13 16:01:13 UTC",
            "url": "https://loacascad.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820705/",
            "reporter": "anonymous"
        }
    ],
    "3820704": [
        {
            "dateadded": "2026-04-13 16:00:22 UTC",
            "url": "http://221.15.193.209:43172/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820704/",
            "reporter": "geenensp"
        }
    ],
    "3820703": [
        {
            "dateadded": "2026-04-13 16:00:11 UTC",
            "url": "http://112.113.206.200:58442/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:52:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820703/",
            "reporter": "geenensp"
        }
    ],
    "3820702": [
        {
            "dateadded": "2026-04-13 15:51:09 UTC",
            "url": "https://triflux3ar.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820702/",
            "reporter": "anonymous"
        }
    ],
    "3820701": [
        {
            "dateadded": "2026-04-13 15:50:13 UTC",
            "url": "http://190.55.14.216:35237/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:24:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820701/",
            "reporter": "geenensp"
        }
    ],
    "3820700": [
        {
            "dateadded": "2026-04-13 15:45:18 UTC",
            "url": "http://42.239.154.221:50950/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820700/",
            "reporter": "geenensp"
        }
    ],
    "3820699": [
        {
            "dateadded": "2026-04-13 15:45:09 UTC",
            "url": "https://form4l-flow.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820699/",
            "reporter": "anonymous"
        }
    ],
    "3820698": [
        {
            "dateadded": "2026-04-13 15:40:11 UTC",
            "url": "https://observe-mesh.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820698/",
            "reporter": "anonymous"
        }
    ],
    "3820697": [
        {
            "dateadded": "2026-04-13 15:38:19 UTC",
            "url": "http://61.52.47.179:46179/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820697/",
            "reporter": "geenensp"
        }
    ],
    "3820696": [
        {
            "dateadded": "2026-04-13 15:34:08 UTC",
            "url": "https://vellineen7.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820696/",
            "reporter": "anonymous"
        }
    ],
    "3820695": [
        {
            "dateadded": "2026-04-13 15:31:10 UTC",
            "url": "http://39.87.229.208:36574/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820695/",
            "reporter": "geenensp"
        }
    ],
    "3820694": [
        {
            "dateadded": "2026-04-13 15:28:09 UTC",
            "url": "https://3xte-array.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820694/",
            "reporter": "anonymous"
        }
    ],
    "3820693": [
        {
            "dateadded": "2026-04-13 15:22:07 UTC",
            "url": "https://9duu.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820693/",
            "reporter": "anonymous"
        }
    ],
    "3820692": [
        {
            "dateadded": "2026-04-13 15:19:09 UTC",
            "url": "https://kelmark6a.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820692/",
            "reporter": "anonymous"
        }
    ],
    "3820691": [
        {
            "dateadded": "2026-04-13 15:14:05 UTC",
            "url": "http://85.239.147.6/files/8265490257/eUcpk5X.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820691/",
            "reporter": "c2hunter"
        }
    ],
    "3820690": [
        {
            "dateadded": "2026-04-13 15:12:09 UTC",
            "url": "http://62.60.226.159/structure_14.3495_INSTALL.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 18:15:39 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "Stealc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820690/",
            "reporter": "abuse_ch"
        }
    ],
    "3820689": [
        {
            "dateadded": "2026-04-13 15:12:04 UTC",
            "url": "http://196.251.107.130/responsive_25.2509.7987_INSTALL.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820689/",
            "reporter": "abuse_ch"
        }
    ],
    "3820688": [
        {
            "dateadded": "2026-04-13 15:09:09 UTC",
            "url": "https://autumnlayer.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820688/",
            "reporter": "anonymous"
        }
    ],
    "3820687": [
        {
            "dateadded": "2026-04-13 15:04:11 UTC",
            "url": "https://frost-sync.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 15:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820687/",
            "reporter": "anonymous"
        }
    ],
    "3820686": [
        {
            "dateadded": "2026-04-13 15:02:06 UTC",
            "url": "https://2zjyp0pj.borschokf2dd.digital/?=check&&actmn=YAonHfDfBSXVCOEO",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820686/",
            "reporter": "anonymous"
        }
    ],
    "3820685": [
        {
            "dateadded": "2026-04-13 14:58:12 UTC",
            "url": "https://9o394zg7.paragonbloomera.digital/?=check&&actmn=oOQncBSZOqWUzRow",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820685/",
            "reporter": "anonymous"
        }
    ],
    "3820684": [
        {
            "dateadded": "2026-04-13 14:58:11 UTC",
            "url": "https://t35t-cast.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820684/",
            "reporter": "anonymous"
        }
    ],
    "3820683": [
        {
            "dateadded": "2026-04-13 14:53:16 UTC",
            "url": "https://pipeli-line.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820683/",
            "reporter": "anonymous"
        }
    ],
    "3820682": [
        {
            "dateadded": "2026-04-13 14:49:21 UTC",
            "url": "http://190.55.14.216:35237/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 10:25:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820682/",
            "reporter": "geenensp"
        }
    ],
    "3820681": [
        {
            "dateadded": "2026-04-13 14:47:14 UTC",
            "url": "https://nkkexjp.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820681/",
            "reporter": "anonymous"
        }
    ],
    "3820680": [
        {
            "dateadded": "2026-04-13 14:42:27 UTC",
            "url": "http://163.142.95.192:43603/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820680/",
            "reporter": "geenensp"
        }
    ],
    "3820679": [
        {
            "dateadded": "2026-04-13 14:42:07 UTC",
            "url": "https://yjsmlbn.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820679/",
            "reporter": "anonymous"
        }
    ],
    "3820678": [
        {
            "dateadded": "2026-04-13 14:36:10 UTC",
            "url": "https://serdrais8.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820678/",
            "reporter": "anonymous"
        }
    ],
    "3820677": [
        {
            "dateadded": "2026-04-13 14:33:20 UTC",
            "url": "http://221.15.141.110:59345/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:20:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820677/",
            "reporter": "geenensp"
        }
    ],
    "3820676": [
        {
            "dateadded": "2026-04-13 14:30:16 UTC",
            "url": "https://cleansensor.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820676/",
            "reporter": "anonymous"
        }
    ],
    "3820675": [
        {
            "dateadded": "2026-04-13 14:29:17 UTC",
            "url": "http://115.55.249.114:47991/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820675/",
            "reporter": "geenensp"
        }
    ],
    "3820674": [
        {
            "dateadded": "2026-04-13 14:27:12 UTC",
            "url": "https://ibpo.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820674/",
            "reporter": "anonymous"
        }
    ],
    "3820673": [
        {
            "dateadded": "2026-04-13 14:23:18 UTC",
            "url": "https://crimso1-vector.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:23:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820673/",
            "reporter": "anonymous"
        }
    ],
    "3820672": [
        {
            "dateadded": "2026-04-13 14:20:20 UTC",
            "url": "http://42.227.158.25:59281/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820672/",
            "reporter": "geenensp"
        }
    ],
    "3820671": [
        {
            "dateadded": "2026-04-13 14:18:16 UTC",
            "url": "http://125.45.59.68:40948/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820671/",
            "reporter": "geenensp"
        }
    ],
    "3820670": [
        {
            "dateadded": "2026-04-13 14:13:07 UTC",
            "url": "https://mn4wr.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820670/",
            "reporter": "anonymous"
        }
    ],
    "3820669": [
        {
            "dateadded": "2026-04-13 14:08:17 UTC",
            "url": "http://42.227.158.25:59281/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820669/",
            "reporter": "geenensp"
        }
    ],
    "3820668": [
        {
            "dateadded": "2026-04-13 14:08:15 UTC",
            "url": "https://checkmis.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:08:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820668/",
            "reporter": "anonymous"
        }
    ],
    "3820667": [
        {
            "dateadded": "2026-04-13 14:06:16 UTC",
            "url": "http://180.120.0.89:44129/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820667/",
            "reporter": "geenensp"
        }
    ],
    "3820666": [
        {
            "dateadded": "2026-04-13 14:02:18 UTC",
            "url": "http://115.55.249.114:47991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820666/",
            "reporter": "geenensp"
        }
    ],
    "3820665": [
        {
            "dateadded": "2026-04-13 14:02:17 UTC",
            "url": "http://123.14.159.153:40022/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:12:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820665/",
            "reporter": "geenensp"
        }
    ],
    "3820664": [
        {
            "dateadded": "2026-04-13 14:02:08 UTC",
            "url": "https://ptwc.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 14:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820664/",
            "reporter": "anonymous"
        }
    ],
    "3820663": [
        {
            "dateadded": "2026-04-13 13:59:11 UTC",
            "url": "http://115.52.24.172:56100/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:29:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820663/",
            "reporter": "geenensp"
        }
    ],
    "3820662": [
        {
            "dateadded": "2026-04-13 13:56:17 UTC",
            "url": "https://me6z.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820662/",
            "reporter": "anonymous"
        }
    ],
    "3820661": [
        {
            "dateadded": "2026-04-13 13:52:12 UTC",
            "url": "http://42.239.154.221:50950/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820661/",
            "reporter": "geenensp"
        }
    ],
    "3820660": [
        {
            "dateadded": "2026-04-13 13:50:12 UTC",
            "url": "https://03i6.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820660/",
            "reporter": "anonymous"
        }
    ],
    "3820659": [
        {
            "dateadded": "2026-04-13 13:46:23 UTC",
            "url": "http://180.120.0.89:44129/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:20:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820659/",
            "reporter": "geenensp"
        }
    ],
    "3820658": [
        {
            "dateadded": "2026-04-13 13:46:22 UTC",
            "url": "https://refundonex.com/cloud/form_59903.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820658/",
            "reporter": "abuse_ch"
        }
    ],
    "3820656": [
        {
            "dateadded": "2026-04-13 13:46:21 UTC",
            "url": "http://115.55.130.75:44466/i",
            "url_status": "offline",
            "last_online": "2026-04-16 06:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820656/",
            "reporter": "geenensp"
        }
    ],
    "3820657": [
        {
            "dateadded": "2026-04-13 13:46:21 UTC",
            "url": "http://139.218.43.94:50164/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:20:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820657/",
            "reporter": "geenensp"
        }
    ],
    "3820654": [
        {
            "dateadded": "2026-04-13 13:46:16 UTC",
            "url": "https://refundonex.com/cloud/form_62931.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820654/",
            "reporter": "abuse_ch"
        }
    ],
    "3820655": [
        {
            "dateadded": "2026-04-13 13:46:16 UTC",
            "url": "https://huvki.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820655/",
            "reporter": "anonymous"
        }
    ],
    "3820652": [
        {
            "dateadded": "2026-04-13 13:46:15 UTC",
            "url": "http://safedocs-hub.info/",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820652/",
            "reporter": "abuse_ch"
        }
    ],
    "3820653": [
        {
            "dateadded": "2026-04-13 13:46:15 UTC",
            "url": "http://photodocvault.info/",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820653/",
            "reporter": "abuse_ch"
        }
    ],
    "3820651": [
        {
            "dateadded": "2026-04-13 13:46:14 UTC",
            "url": "https://3nx4gks.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820651/",
            "reporter": "anonymous"
        }
    ],
    "3820650": [
        {
            "dateadded": "2026-04-13 13:46:10 UTC",
            "url": "http://visapics.info/",
            "url_status": "offline",
            "last_online": "2026-04-21 16:49:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820650/",
            "reporter": "abuse_ch"
        }
    ],
    "3820649": [
        {
            "dateadded": "2026-04-13 13:46:09 UTC",
            "url": "http://jdskl139sla.com/",
            "url_status": "offline",
            "last_online": "2026-04-13 13:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820649/",
            "reporter": "abuse_ch"
        }
    ],
    "3820648": [
        {
            "dateadded": "2026-04-13 13:46:08 UTC",
            "url": "http://169.40.135.119/lekc0304/longboatchronometer.hta",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820648/",
            "reporter": "abuse_ch"
        }
    ],
    "3820647": [
        {
            "dateadded": "2026-04-13 13:46:07 UTC",
            "url": "http://169.40.135.119/lekc0304/crablearned.hta",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820647/",
            "reporter": "abuse_ch"
        }
    ],
    "3820646": [
        {
            "dateadded": "2026-04-13 13:40:33 UTC",
            "url": "https://grandvegasbet.com.br/MSI_145331.png",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:33 UTC",
            "threat": "malware_download",
            "tags": [
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820646/",
            "reporter": "abuse_ch"
        }
    ],
    "3820645": [
        {
            "dateadded": "2026-04-13 13:40:29 UTC",
            "url": "https://refundonex.com/cloud/form_62775.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820645/",
            "reporter": "abuse_ch"
        }
    ],
    "3820643": [
        {
            "dateadded": "2026-04-13 13:40:27 UTC",
            "url": "https://refundonex.com/cloud/form_96490.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820643/",
            "reporter": "abuse_ch"
        }
    ],
    "3820644": [
        {
            "dateadded": "2026-04-13 13:40:27 UTC",
            "url": "https://refundonex.com/cloud/form_54535.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820644/",
            "reporter": "abuse_ch"
        }
    ],
    "3820633": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_08901.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820633/",
            "reporter": "abuse_ch"
        }
    ],
    "3820634": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_07853.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820634/",
            "reporter": "abuse_ch"
        }
    ],
    "3820635": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_87118.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820635/",
            "reporter": "abuse_ch"
        }
    ],
    "3820636": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_03497.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820636/",
            "reporter": "abuse_ch"
        }
    ],
    "3820637": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_84846.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820637/",
            "reporter": "abuse_ch"
        }
    ],
    "3820638": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_07367.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820638/",
            "reporter": "abuse_ch"
        }
    ],
    "3820639": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_00279.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820639/",
            "reporter": "abuse_ch"
        }
    ],
    "3820640": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_09934.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820640/",
            "reporter": "abuse_ch"
        }
    ],
    "3820641": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_08811.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820641/",
            "reporter": "abuse_ch"
        }
    ],
    "3820642": [
        {
            "dateadded": "2026-04-13 13:40:26 UTC",
            "url": "https://refundonex.com/cloud/form_99389.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820642/",
            "reporter": "abuse_ch"
        }
    ],
    "3820624": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_96565.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820624/",
            "reporter": "abuse_ch"
        }
    ],
    "3820625": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_95394.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820625/",
            "reporter": "abuse_ch"
        }
    ],
    "3820626": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_80947.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820626/",
            "reporter": "abuse_ch"
        }
    ],
    "3820627": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_80947.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820627/",
            "reporter": "abuse_ch"
        }
    ],
    "3820628": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_64432.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820628/",
            "reporter": "abuse_ch"
        }
    ],
    "3820629": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_10936.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820629/",
            "reporter": "abuse_ch"
        }
    ],
    "3820630": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_36347.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820630/",
            "reporter": "abuse_ch"
        }
    ],
    "3820631": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_26708.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820631/",
            "reporter": "abuse_ch"
        }
    ],
    "3820632": [
        {
            "dateadded": "2026-04-13 13:40:25 UTC",
            "url": "https://refundonex.com/cloud/form_58173.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820632/",
            "reporter": "abuse_ch"
        }
    ],
    "3820620": [
        {
            "dateadded": "2026-04-13 13:40:23 UTC",
            "url": "https://refundonex.com/cloud/form_01899.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820620/",
            "reporter": "abuse_ch"
        }
    ],
    "3820621": [
        {
            "dateadded": "2026-04-13 13:40:23 UTC",
            "url": "https://refundonex.com/cloud/form_90077.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820621/",
            "reporter": "abuse_ch"
        }
    ],
    "3820622": [
        {
            "dateadded": "2026-04-13 13:40:23 UTC",
            "url": "https://refundonex.com/cloud/form_06020.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820622/",
            "reporter": "abuse_ch"
        }
    ],
    "3820623": [
        {
            "dateadded": "2026-04-13 13:40:23 UTC",
            "url": "https://refundonex.com/cloud/form_77949.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820623/",
            "reporter": "abuse_ch"
        }
    ],
    "3820619": [
        {
            "dateadded": "2026-04-13 13:40:22 UTC",
            "url": "https://refundonex.com/cloud/form_03331.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820619/",
            "reporter": "abuse_ch"
        }
    ],
    "3820613": [
        {
            "dateadded": "2026-04-13 13:40:21 UTC",
            "url": "https://refundonex.com/cloud/form_73024.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820613/",
            "reporter": "abuse_ch"
        }
    ],
    "3820614": [
        {
            "dateadded": "2026-04-13 13:40:21 UTC",
            "url": "https://refundonex.com/cloud/form_27442.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820614/",
            "reporter": "abuse_ch"
        }
    ],
    "3820615": [
        {
            "dateadded": "2026-04-13 13:40:21 UTC",
            "url": "https://refundonex.com/cloud/form_95823.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820615/",
            "reporter": "abuse_ch"
        }
    ],
    "3820616": [
        {
            "dateadded": "2026-04-13 13:40:21 UTC",
            "url": "https://refundonex.com/cloud/form_07212.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820616/",
            "reporter": "abuse_ch"
        }
    ],
    "3820617": [
        {
            "dateadded": "2026-04-13 13:40:21 UTC",
            "url": "https://refundonex.com/cloud/form_15837.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820617/",
            "reporter": "abuse_ch"
        }
    ],
    "3820618": [
        {
            "dateadded": "2026-04-13 13:40:21 UTC",
            "url": "https://refundonex.com/cloud/form_71207.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820618/",
            "reporter": "abuse_ch"
        }
    ],
    "3820608": [
        {
            "dateadded": "2026-04-13 13:40:20 UTC",
            "url": "https://refundonex.com/cloud/form_71088.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820608/",
            "reporter": "abuse_ch"
        }
    ],
    "3820609": [
        {
            "dateadded": "2026-04-13 13:40:20 UTC",
            "url": "https://refundonex.com/cloud/form_07853.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820609/",
            "reporter": "abuse_ch"
        }
    ],
    "3820610": [
        {
            "dateadded": "2026-04-13 13:40:20 UTC",
            "url": "https://refundonex.com/cloud/form_99091.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820610/",
            "reporter": "abuse_ch"
        }
    ],
    "3820611": [
        {
            "dateadded": "2026-04-13 13:40:20 UTC",
            "url": "https://refundonex.com/cloud/form_36331.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820611/",
            "reporter": "abuse_ch"
        }
    ],
    "3820612": [
        {
            "dateadded": "2026-04-13 13:40:20 UTC",
            "url": "https://refundonex.com/cloud/form_85697.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820612/",
            "reporter": "abuse_ch"
        }
    ],
    "3820607": [
        {
            "dateadded": "2026-04-13 13:40:19 UTC",
            "url": "https://refundonex.com/cloud/form_96539.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820607/",
            "reporter": "abuse_ch"
        }
    ],
    "3820603": [
        {
            "dateadded": "2026-04-13 13:40:18 UTC",
            "url": "https://refundonex.com/cloud/form_06087.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820603/",
            "reporter": "abuse_ch"
        }
    ],
    "3820604": [
        {
            "dateadded": "2026-04-13 13:40:18 UTC",
            "url": "https://refundonex.com/cloud/form_13186.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820604/",
            "reporter": "abuse_ch"
        }
    ],
    "3820605": [
        {
            "dateadded": "2026-04-13 13:40:18 UTC",
            "url": "https://refundonex.com/cloud/form_37248.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820605/",
            "reporter": "abuse_ch"
        }
    ],
    "3820606": [
        {
            "dateadded": "2026-04-13 13:40:18 UTC",
            "url": "https://refundonex.com/cloud/form_96939.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820606/",
            "reporter": "abuse_ch"
        }
    ],
    "3820596": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_98423.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820596/",
            "reporter": "abuse_ch"
        }
    ],
    "3820597": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_72800.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820597/",
            "reporter": "abuse_ch"
        }
    ],
    "3820598": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_22807.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820598/",
            "reporter": "abuse_ch"
        }
    ],
    "3820599": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_00757.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820599/",
            "reporter": "abuse_ch"
        }
    ],
    "3820600": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_35795.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820600/",
            "reporter": "abuse_ch"
        }
    ],
    "3820601": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_79597.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820601/",
            "reporter": "abuse_ch"
        }
    ],
    "3820602": [
        {
            "dateadded": "2026-04-13 13:40:16 UTC",
            "url": "https://refundonex.com/cloud/form_27140.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820602/",
            "reporter": "abuse_ch"
        }
    ],
    "3820595": [
        {
            "dateadded": "2026-04-13 13:40:15 UTC",
            "url": "https://refundonex.com/cloud/form_03894.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820595/",
            "reporter": "abuse_ch"
        }
    ],
    "3820589": [
        {
            "dateadded": "2026-04-13 13:40:14 UTC",
            "url": "https://refundonex.com/cloud/form_03767.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820589/",
            "reporter": "abuse_ch"
        }
    ],
    "3820590": [
        {
            "dateadded": "2026-04-13 13:40:14 UTC",
            "url": "https://refundonex.com/cloud/form_99164.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820590/",
            "reporter": "abuse_ch"
        }
    ],
    "3820591": [
        {
            "dateadded": "2026-04-13 13:40:14 UTC",
            "url": "https://refundonex.com/cloud/form_19556.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820591/",
            "reporter": "abuse_ch"
        }
    ],
    "3820592": [
        {
            "dateadded": "2026-04-13 13:40:14 UTC",
            "url": "https://refundonex.com/cloud/form_41126.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820592/",
            "reporter": "abuse_ch"
        }
    ],
    "3820593": [
        {
            "dateadded": "2026-04-13 13:40:14 UTC",
            "url": "https://refundonex.com/cloud/form_17562.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820593/",
            "reporter": "abuse_ch"
        }
    ],
    "3820594": [
        {
            "dateadded": "2026-04-13 13:40:14 UTC",
            "url": "https://refundonex.com/cloud/form_38954.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820594/",
            "reporter": "abuse_ch"
        }
    ],
    "3820586": [
        {
            "dateadded": "2026-04-13 13:40:13 UTC",
            "url": "https://refundonex.com/cloud/form_79681.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820586/",
            "reporter": "abuse_ch"
        }
    ],
    "3820587": [
        {
            "dateadded": "2026-04-13 13:40:13 UTC",
            "url": "https://refundonex.com/cloud/form_49515.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820587/",
            "reporter": "abuse_ch"
        }
    ],
    "3820588": [
        {
            "dateadded": "2026-04-13 13:40:13 UTC",
            "url": "https://refundonex.com/cloud/form_31048.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820588/",
            "reporter": "abuse_ch"
        }
    ],
    "3820583": [
        {
            "dateadded": "2026-04-13 13:40:12 UTC",
            "url": "https://refundonex.com/cloud/form_94399.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820583/",
            "reporter": "abuse_ch"
        }
    ],
    "3820584": [
        {
            "dateadded": "2026-04-13 13:40:12 UTC",
            "url": "https://refundonex.com/cloud/form_24901.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820584/",
            "reporter": "abuse_ch"
        }
    ],
    "3820585": [
        {
            "dateadded": "2026-04-13 13:40:12 UTC",
            "url": "https://refundonex.com/cloud/form_85892.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820585/",
            "reporter": "abuse_ch"
        }
    ],
    "3820581": [
        {
            "dateadded": "2026-04-13 13:40:11 UTC",
            "url": "https://refundonex.com/cloud/form_46475.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820581/",
            "reporter": "abuse_ch"
        }
    ],
    "3820582": [
        {
            "dateadded": "2026-04-13 13:40:11 UTC",
            "url": "https://refundonex.com/cloud/form_57557.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820582/",
            "reporter": "abuse_ch"
        }
    ],
    "3820579": [
        {
            "dateadded": "2026-04-13 13:40:10 UTC",
            "url": "https://refundonex.com/cloud/form_49515.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820579/",
            "reporter": "abuse_ch"
        }
    ],
    "3820580": [
        {
            "dateadded": "2026-04-13 13:40:10 UTC",
            "url": "https://refundonex.com/cloud/form_68656.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820580/",
            "reporter": "abuse_ch"
        }
    ],
    "3820577": [
        {
            "dateadded": "2026-04-13 13:40:09 UTC",
            "url": "https://refundonex.com/cloud/form_15388.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820577/",
            "reporter": "abuse_ch"
        }
    ],
    "3820578": [
        {
            "dateadded": "2026-04-13 13:40:09 UTC",
            "url": "https://refundonex.com/cloud/form_80308.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820578/",
            "reporter": "abuse_ch"
        }
    ],
    "3820576": [
        {
            "dateadded": "2026-04-13 13:40:08 UTC",
            "url": "https://refundonex.com/cloud/form_17822.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820576/",
            "reporter": "abuse_ch"
        }
    ],
    "3820573": [
        {
            "dateadded": "2026-04-13 13:40:06 UTC",
            "url": "https://refundonex.com/cloud/form_23744.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820573/",
            "reporter": "abuse_ch"
        }
    ],
    "3820574": [
        {
            "dateadded": "2026-04-13 13:40:06 UTC",
            "url": "https://refundonex.com/cloud/form_94580.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820574/",
            "reporter": "abuse_ch"
        }
    ],
    "3820575": [
        {
            "dateadded": "2026-04-13 13:40:06 UTC",
            "url": "https://refundonex.com/cloud/form_39818.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820575/",
            "reporter": "abuse_ch"
        }
    ],
    "3820569": [
        {
            "dateadded": "2026-04-13 13:40:05 UTC",
            "url": "https://refundonex.com/cloud/form_72333.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820569/",
            "reporter": "abuse_ch"
        }
    ],
    "3820570": [
        {
            "dateadded": "2026-04-13 13:40:05 UTC",
            "url": "https://refundonex.com/cloud/form_28608.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820570/",
            "reporter": "abuse_ch"
        }
    ],
    "3820571": [
        {
            "dateadded": "2026-04-13 13:40:05 UTC",
            "url": "https://refundonex.com/cloud/form_21490.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820571/",
            "reporter": "abuse_ch"
        }
    ],
    "3820572": [
        {
            "dateadded": "2026-04-13 13:40:05 UTC",
            "url": "https://refundonex.com/cloud/form_84705.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820572/",
            "reporter": "abuse_ch"
        }
    ],
    "3820566": [
        {
            "dateadded": "2026-04-13 13:40:04 UTC",
            "url": "https://refundonex.com/cloud/form_57352.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820566/",
            "reporter": "abuse_ch"
        }
    ],
    "3820567": [
        {
            "dateadded": "2026-04-13 13:40:04 UTC",
            "url": "https://refundonex.com/cloud/form_46084.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820567/",
            "reporter": "abuse_ch"
        }
    ],
    "3820568": [
        {
            "dateadded": "2026-04-13 13:40:04 UTC",
            "url": "https://refundonex.com/cloud/form_04878.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820568/",
            "reporter": "abuse_ch"
        }
    ],
    "3820564": [
        {
            "dateadded": "2026-04-13 13:40:03 UTC",
            "url": "https://refundonex.com/cloud/form_88598.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820564/",
            "reporter": "abuse_ch"
        }
    ],
    "3820565": [
        {
            "dateadded": "2026-04-13 13:40:03 UTC",
            "url": "https://refundonex.com/cloud/form_98234.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820565/",
            "reporter": "abuse_ch"
        }
    ],
    "3820561": [
        {
            "dateadded": "2026-04-13 13:40:02 UTC",
            "url": "https://refundonex.com/cloud/form_54126.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:02 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820561/",
            "reporter": "abuse_ch"
        }
    ],
    "3820562": [
        {
            "dateadded": "2026-04-13 13:40:02 UTC",
            "url": "https://refundonex.com/cloud/form_53196.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820562/",
            "reporter": "abuse_ch"
        }
    ],
    "3820563": [
        {
            "dateadded": "2026-04-13 13:40:02 UTC",
            "url": "https://refundonex.com/cloud/form_61762.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820563/",
            "reporter": "abuse_ch"
        }
    ],
    "3820558": [
        {
            "dateadded": "2026-04-13 13:40:01 UTC",
            "url": "https://refundonex.com/cloud/form_37816.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820558/",
            "reporter": "abuse_ch"
        }
    ],
    "3820559": [
        {
            "dateadded": "2026-04-13 13:40:01 UTC",
            "url": "https://refundonex.com/cloud/form_28332.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820559/",
            "reporter": "abuse_ch"
        }
    ],
    "3820560": [
        {
            "dateadded": "2026-04-13 13:40:01 UTC",
            "url": "https://refundonex.com/cloud/form_20237.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820560/",
            "reporter": "abuse_ch"
        }
    ],
    "3820553": [
        {
            "dateadded": "2026-04-13 13:40:00 UTC",
            "url": "https://refundonex.com/cloud/form_78550.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820553/",
            "reporter": "abuse_ch"
        }
    ],
    "3820554": [
        {
            "dateadded": "2026-04-13 13:40:00 UTC",
            "url": "https://refundonex.com/cloud/form_94580.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820554/",
            "reporter": "abuse_ch"
        }
    ],
    "3820555": [
        {
            "dateadded": "2026-04-13 13:40:00 UTC",
            "url": "https://refundonex.com/cloud/form_51171.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820555/",
            "reporter": "abuse_ch"
        }
    ],
    "3820556": [
        {
            "dateadded": "2026-04-13 13:40:00 UTC",
            "url": "https://refundonex.com/cloud/form_47630.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820556/",
            "reporter": "abuse_ch"
        }
    ],
    "3820557": [
        {
            "dateadded": "2026-04-13 13:40:00 UTC",
            "url": "https://refundonex.com/cloud/form_81909.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820557/",
            "reporter": "abuse_ch"
        }
    ],
    "3820552": [
        {
            "dateadded": "2026-04-13 13:39:59 UTC",
            "url": "https://refundonex.com/cloud/form_45793.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820552/",
            "reporter": "abuse_ch"
        }
    ],
    "3820550": [
        {
            "dateadded": "2026-04-13 13:39:58 UTC",
            "url": "https://refundonex.com/cloud/form_74028.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820550/",
            "reporter": "abuse_ch"
        }
    ],
    "3820551": [
        {
            "dateadded": "2026-04-13 13:39:58 UTC",
            "url": "https://refundonex.com/cloud/form_50628.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820551/",
            "reporter": "abuse_ch"
        }
    ],
    "3820548": [
        {
            "dateadded": "2026-04-13 13:39:57 UTC",
            "url": "https://refundonex.com/cloud/form_50149.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820548/",
            "reporter": "abuse_ch"
        }
    ],
    "3820549": [
        {
            "dateadded": "2026-04-13 13:39:57 UTC",
            "url": "https://refundonex.com/cloud/form_72520.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820549/",
            "reporter": "abuse_ch"
        }
    ],
    "3820545": [
        {
            "dateadded": "2026-04-13 13:39:56 UTC",
            "url": "https://refundonex.com/cloud/form_22600.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820545/",
            "reporter": "abuse_ch"
        }
    ],
    "3820546": [
        {
            "dateadded": "2026-04-13 13:39:56 UTC",
            "url": "https://refundonex.com/cloud/form_85013.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820546/",
            "reporter": "abuse_ch"
        }
    ],
    "3820547": [
        {
            "dateadded": "2026-04-13 13:39:56 UTC",
            "url": "https://refundonex.com/cloud/form_21415.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820547/",
            "reporter": "abuse_ch"
        }
    ],
    "3820542": [
        {
            "dateadded": "2026-04-13 13:39:55 UTC",
            "url": "https://refundonex.com/cloud/form_86145.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820542/",
            "reporter": "abuse_ch"
        }
    ],
    "3820543": [
        {
            "dateadded": "2026-04-13 13:39:55 UTC",
            "url": "https://refundonex.com/cloud/form_77914.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820543/",
            "reporter": "abuse_ch"
        }
    ],
    "3820544": [
        {
            "dateadded": "2026-04-13 13:39:55 UTC",
            "url": "https://refundonex.com/cloud/form_04811.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820544/",
            "reporter": "abuse_ch"
        }
    ],
    "3820534": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_94601.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820534/",
            "reporter": "abuse_ch"
        }
    ],
    "3820535": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_97413.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820535/",
            "reporter": "abuse_ch"
        }
    ],
    "3820536": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_86906.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820536/",
            "reporter": "abuse_ch"
        }
    ],
    "3820537": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_01899.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820537/",
            "reporter": "abuse_ch"
        }
    ],
    "3820538": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_99091.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820538/",
            "reporter": "abuse_ch"
        }
    ],
    "3820539": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_61449.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820539/",
            "reporter": "abuse_ch"
        }
    ],
    "3820540": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_49326.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820540/",
            "reporter": "abuse_ch"
        }
    ],
    "3820541": [
        {
            "dateadded": "2026-04-13 13:39:54 UTC",
            "url": "https://refundonex.com/cloud/form_67655.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820541/",
            "reporter": "abuse_ch"
        }
    ],
    "3820531": [
        {
            "dateadded": "2026-04-13 13:39:52 UTC",
            "url": "https://refundonex.com/cloud/form_25525.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820531/",
            "reporter": "abuse_ch"
        }
    ],
    "3820532": [
        {
            "dateadded": "2026-04-13 13:39:52 UTC",
            "url": "https://refundonex.com/cloud/form_49780.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820532/",
            "reporter": "abuse_ch"
        }
    ],
    "3820533": [
        {
            "dateadded": "2026-04-13 13:39:52 UTC",
            "url": "https://refundonex.com/cloud/form_01211.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820533/",
            "reporter": "abuse_ch"
        }
    ],
    "3820522": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_17665.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820522/",
            "reporter": "abuse_ch"
        }
    ],
    "3820523": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_62565.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820523/",
            "reporter": "abuse_ch"
        }
    ],
    "3820524": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_06585.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820524/",
            "reporter": "abuse_ch"
        }
    ],
    "3820525": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_93549.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820525/",
            "reporter": "abuse_ch"
        }
    ],
    "3820526": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_91985.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820526/",
            "reporter": "abuse_ch"
        }
    ],
    "3820527": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_78515.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820527/",
            "reporter": "abuse_ch"
        }
    ],
    "3820528": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_60081.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820528/",
            "reporter": "abuse_ch"
        }
    ],
    "3820529": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_18088.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820529/",
            "reporter": "abuse_ch"
        }
    ],
    "3820530": [
        {
            "dateadded": "2026-04-13 13:39:51 UTC",
            "url": "https://refundonex.com/cloud/form_96939.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820530/",
            "reporter": "abuse_ch"
        }
    ],
    "3820519": [
        {
            "dateadded": "2026-04-13 13:39:50 UTC",
            "url": "https://refundonex.com/cloud/form_85369.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820519/",
            "reporter": "abuse_ch"
        }
    ],
    "3820520": [
        {
            "dateadded": "2026-04-13 13:39:50 UTC",
            "url": "https://refundonex.com/cloud/form_83645.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820520/",
            "reporter": "abuse_ch"
        }
    ],
    "3820521": [
        {
            "dateadded": "2026-04-13 13:39:50 UTC",
            "url": "https://refundonex.com/cloud/form_52809.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820521/",
            "reporter": "abuse_ch"
        }
    ],
    "3820515": [
        {
            "dateadded": "2026-04-13 13:39:49 UTC",
            "url": "https://refundonex.com/cloud/form_18892.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820515/",
            "reporter": "abuse_ch"
        }
    ],
    "3820516": [
        {
            "dateadded": "2026-04-13 13:39:49 UTC",
            "url": "https://refundonex.com/cloud/form_90767.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820516/",
            "reporter": "abuse_ch"
        }
    ],
    "3820517": [
        {
            "dateadded": "2026-04-13 13:39:49 UTC",
            "url": "https://refundonex.com/cloud/form_21927.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820517/",
            "reporter": "abuse_ch"
        }
    ],
    "3820518": [
        {
            "dateadded": "2026-04-13 13:39:49 UTC",
            "url": "https://refundonex.com/cloud/form_45698.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820518/",
            "reporter": "abuse_ch"
        }
    ],
    "3820514": [
        {
            "dateadded": "2026-04-13 13:39:48 UTC",
            "url": "https://refundonex.com/cloud/form_38427.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820514/",
            "reporter": "abuse_ch"
        }
    ],
    "3820512": [
        {
            "dateadded": "2026-04-13 13:39:47 UTC",
            "url": "https://refundonex.com/cloud/form_17822.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820512/",
            "reporter": "abuse_ch"
        }
    ],
    "3820513": [
        {
            "dateadded": "2026-04-13 13:39:47 UTC",
            "url": "https://refundonex.com/cloud/form_22739.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820513/",
            "reporter": "abuse_ch"
        }
    ],
    "3820508": [
        {
            "dateadded": "2026-04-13 13:39:46 UTC",
            "url": "https://refundonex.com/cloud/form_74798.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820508/",
            "reporter": "abuse_ch"
        }
    ],
    "3820509": [
        {
            "dateadded": "2026-04-13 13:39:46 UTC",
            "url": "https://refundonex.com/cloud/form_06239.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820509/",
            "reporter": "abuse_ch"
        }
    ],
    "3820510": [
        {
            "dateadded": "2026-04-13 13:39:46 UTC",
            "url": "https://refundonex.com/cloud/form_12487.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820510/",
            "reporter": "abuse_ch"
        }
    ],
    "3820511": [
        {
            "dateadded": "2026-04-13 13:39:46 UTC",
            "url": "https://refundonex.com/cloud/form_46899.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820511/",
            "reporter": "abuse_ch"
        }
    ],
    "3820505": [
        {
            "dateadded": "2026-04-13 13:39:45 UTC",
            "url": "https://refundonex.com/cloud/form_63667.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820505/",
            "reporter": "abuse_ch"
        }
    ],
    "3820506": [
        {
            "dateadded": "2026-04-13 13:39:45 UTC",
            "url": "https://refundonex.com/cloud/form_85262.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820506/",
            "reporter": "abuse_ch"
        }
    ],
    "3820507": [
        {
            "dateadded": "2026-04-13 13:39:45 UTC",
            "url": "https://refundonex.com/cloud/form_19180.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820507/",
            "reporter": "abuse_ch"
        }
    ],
    "3820503": [
        {
            "dateadded": "2026-04-13 13:39:44 UTC",
            "url": "https://refundonex.com/cloud/form_95365.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820503/",
            "reporter": "abuse_ch"
        }
    ],
    "3820504": [
        {
            "dateadded": "2026-04-13 13:39:44 UTC",
            "url": "https://refundonex.com/cloud/form_18869.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820504/",
            "reporter": "abuse_ch"
        }
    ],
    "3820496": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_43627.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820496/",
            "reporter": "abuse_ch"
        }
    ],
    "3820497": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_96986.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820497/",
            "reporter": "abuse_ch"
        }
    ],
    "3820498": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_81592.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820498/",
            "reporter": "abuse_ch"
        }
    ],
    "3820499": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_41312.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820499/",
            "reporter": "abuse_ch"
        }
    ],
    "3820500": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_21012.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820500/",
            "reporter": "abuse_ch"
        }
    ],
    "3820501": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_21336.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820501/",
            "reporter": "abuse_ch"
        }
    ],
    "3820502": [
        {
            "dateadded": "2026-04-13 13:39:43 UTC",
            "url": "https://refundonex.com/cloud/form_31218.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820502/",
            "reporter": "abuse_ch"
        }
    ],
    "3820492": [
        {
            "dateadded": "2026-04-13 13:39:42 UTC",
            "url": "https://refundonex.com/cloud/form_96608.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820492/",
            "reporter": "abuse_ch"
        }
    ],
    "3820493": [
        {
            "dateadded": "2026-04-13 13:39:42 UTC",
            "url": "https://refundonex.com/cloud/form_87057.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820493/",
            "reporter": "abuse_ch"
        }
    ],
    "3820494": [
        {
            "dateadded": "2026-04-13 13:39:42 UTC",
            "url": "https://refundonex.com/cloud/form_74209.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820494/",
            "reporter": "abuse_ch"
        }
    ],
    "3820495": [
        {
            "dateadded": "2026-04-13 13:39:42 UTC",
            "url": "https://refundonex.com/cloud/form_23911.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820495/",
            "reporter": "abuse_ch"
        }
    ],
    "3820485": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_61212.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820485/",
            "reporter": "abuse_ch"
        }
    ],
    "3820486": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_99237.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820486/",
            "reporter": "abuse_ch"
        }
    ],
    "3820487": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_24655.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820487/",
            "reporter": "abuse_ch"
        }
    ],
    "3820488": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_14079.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820488/",
            "reporter": "abuse_ch"
        }
    ],
    "3820489": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_65652.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820489/",
            "reporter": "abuse_ch"
        }
    ],
    "3820490": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_72999.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820490/",
            "reporter": "abuse_ch"
        }
    ],
    "3820491": [
        {
            "dateadded": "2026-04-13 13:39:41 UTC",
            "url": "https://refundonex.com/cloud/form_05816.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820491/",
            "reporter": "abuse_ch"
        }
    ],
    "3820483": [
        {
            "dateadded": "2026-04-13 13:39:40 UTC",
            "url": "https://refundonex.com/cloud/form_23564.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820483/",
            "reporter": "abuse_ch"
        }
    ],
    "3820484": [
        {
            "dateadded": "2026-04-13 13:39:40 UTC",
            "url": "https://refundonex.com/cloud/form_89789.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820484/",
            "reporter": "abuse_ch"
        }
    ],
    "3820478": [
        {
            "dateadded": "2026-04-13 13:39:39 UTC",
            "url": "https://refundonex.com/cloud/form_68148.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820478/",
            "reporter": "abuse_ch"
        }
    ],
    "3820479": [
        {
            "dateadded": "2026-04-13 13:39:39 UTC",
            "url": "https://refundonex.com/cloud/form_54354.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820479/",
            "reporter": "abuse_ch"
        }
    ],
    "3820480": [
        {
            "dateadded": "2026-04-13 13:39:39 UTC",
            "url": "https://refundonex.com/cloud/form_24993.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820480/",
            "reporter": "abuse_ch"
        }
    ],
    "3820481": [
        {
            "dateadded": "2026-04-13 13:39:39 UTC",
            "url": "https://refundonex.com/cloud/form_31160.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820481/",
            "reporter": "abuse_ch"
        }
    ],
    "3820482": [
        {
            "dateadded": "2026-04-13 13:39:39 UTC",
            "url": "https://refundonex.com/cloud/form_21152.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820482/",
            "reporter": "abuse_ch"
        }
    ],
    "3820473": [
        {
            "dateadded": "2026-04-13 13:39:38 UTC",
            "url": "https://refundonex.com/cloud/form_20799.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820473/",
            "reporter": "abuse_ch"
        }
    ],
    "3820474": [
        {
            "dateadded": "2026-04-13 13:39:38 UTC",
            "url": "https://refundonex.com/cloud/form_75813.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820474/",
            "reporter": "abuse_ch"
        }
    ],
    "3820475": [
        {
            "dateadded": "2026-04-13 13:39:38 UTC",
            "url": "https://refundonex.com/cloud/form_69212.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820475/",
            "reporter": "abuse_ch"
        }
    ],
    "3820476": [
        {
            "dateadded": "2026-04-13 13:39:38 UTC",
            "url": "https://refundonex.com/cloud/form_26022.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820476/",
            "reporter": "abuse_ch"
        }
    ],
    "3820477": [
        {
            "dateadded": "2026-04-13 13:39:38 UTC",
            "url": "https://refundonex.com/cloud/form_00088.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820477/",
            "reporter": "abuse_ch"
        }
    ],
    "3820470": [
        {
            "dateadded": "2026-04-13 13:39:37 UTC",
            "url": "https://refundonex.com/cloud/form_38954.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820470/",
            "reporter": "abuse_ch"
        }
    ],
    "3820471": [
        {
            "dateadded": "2026-04-13 13:39:37 UTC",
            "url": "https://refundonex.com/cloud/form_49196.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820471/",
            "reporter": "abuse_ch"
        }
    ],
    "3820472": [
        {
            "dateadded": "2026-04-13 13:39:37 UTC",
            "url": "https://refundonex.com/cloud/form_39469.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820472/",
            "reporter": "abuse_ch"
        }
    ],
    "3820465": [
        {
            "dateadded": "2026-04-13 13:39:36 UTC",
            "url": "https://refundonex.com/cloud/form_83418.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820465/",
            "reporter": "abuse_ch"
        }
    ],
    "3820466": [
        {
            "dateadded": "2026-04-13 13:39:36 UTC",
            "url": "https://refundonex.com/cloud/form_17665.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820466/",
            "reporter": "abuse_ch"
        }
    ],
    "3820467": [
        {
            "dateadded": "2026-04-13 13:39:36 UTC",
            "url": "https://refundonex.com/cloud/form_94326.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820467/",
            "reporter": "abuse_ch"
        }
    ],
    "3820468": [
        {
            "dateadded": "2026-04-13 13:39:36 UTC",
            "url": "https://refundonex.com/cloud/form_60056.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820468/",
            "reporter": "abuse_ch"
        }
    ],
    "3820469": [
        {
            "dateadded": "2026-04-13 13:39:36 UTC",
            "url": "https://refundonex.com/cloud/form_39670.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820469/",
            "reporter": "abuse_ch"
        }
    ],
    "3820462": [
        {
            "dateadded": "2026-04-13 13:39:35 UTC",
            "url": "https://refundonex.com/cloud/form_73549.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820462/",
            "reporter": "abuse_ch"
        }
    ],
    "3820463": [
        {
            "dateadded": "2026-04-13 13:39:35 UTC",
            "url": "https://refundonex.com/cloud/form_24655.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820463/",
            "reporter": "abuse_ch"
        }
    ],
    "3820464": [
        {
            "dateadded": "2026-04-13 13:39:35 UTC",
            "url": "https://refundonex.com/cloud/form_73779.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820464/",
            "reporter": "abuse_ch"
        }
    ],
    "3820460": [
        {
            "dateadded": "2026-04-13 13:39:33 UTC",
            "url": "https://refundonex.com/cloud/form_96783.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820460/",
            "reporter": "abuse_ch"
        }
    ],
    "3820461": [
        {
            "dateadded": "2026-04-13 13:39:33 UTC",
            "url": "https://refundonex.com/cloud/form_84071.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820461/",
            "reporter": "abuse_ch"
        }
    ],
    "3820457": [
        {
            "dateadded": "2026-04-13 13:39:31 UTC",
            "url": "https://refundonex.com/cloud/form_41093.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820457/",
            "reporter": "abuse_ch"
        }
    ],
    "3820458": [
        {
            "dateadded": "2026-04-13 13:39:31 UTC",
            "url": "https://refundonex.com/cloud/form_64307.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820458/",
            "reporter": "abuse_ch"
        }
    ],
    "3820459": [
        {
            "dateadded": "2026-04-13 13:39:31 UTC",
            "url": "https://refundonex.com/cloud/form_37394.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820459/",
            "reporter": "abuse_ch"
        }
    ],
    "3820453": [
        {
            "dateadded": "2026-04-13 13:39:30 UTC",
            "url": "https://refundonex.com/cloud/form_11740.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820453/",
            "reporter": "abuse_ch"
        }
    ],
    "3820454": [
        {
            "dateadded": "2026-04-13 13:39:30 UTC",
            "url": "https://refundonex.com/cloud/form_30425.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820454/",
            "reporter": "abuse_ch"
        }
    ],
    "3820455": [
        {
            "dateadded": "2026-04-13 13:39:30 UTC",
            "url": "https://refundonex.com/cloud/form_96673.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820455/",
            "reporter": "abuse_ch"
        }
    ],
    "3820456": [
        {
            "dateadded": "2026-04-13 13:39:30 UTC",
            "url": "https://refundonex.com/cloud/form_09934.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820456/",
            "reporter": "abuse_ch"
        }
    ],
    "3820446": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_71207.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820446/",
            "reporter": "abuse_ch"
        }
    ],
    "3820447": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_10931.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820447/",
            "reporter": "abuse_ch"
        }
    ],
    "3820448": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_81664.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820448/",
            "reporter": "abuse_ch"
        }
    ],
    "3820449": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_81664.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820449/",
            "reporter": "abuse_ch"
        }
    ],
    "3820450": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_36677.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820450/",
            "reporter": "abuse_ch"
        }
    ],
    "3820451": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_17113.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820451/",
            "reporter": "abuse_ch"
        }
    ],
    "3820452": [
        {
            "dateadded": "2026-04-13 13:39:29 UTC",
            "url": "https://refundonex.com/cloud/form_87951.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820452/",
            "reporter": "abuse_ch"
        }
    ],
    "3820442": [
        {
            "dateadded": "2026-04-13 13:39:28 UTC",
            "url": "https://refundonex.com/cloud/form_80321.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820442/",
            "reporter": "abuse_ch"
        }
    ],
    "3820443": [
        {
            "dateadded": "2026-04-13 13:39:28 UTC",
            "url": "https://refundonex.com/cloud/form_69452.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820443/",
            "reporter": "abuse_ch"
        }
    ],
    "3820444": [
        {
            "dateadded": "2026-04-13 13:39:28 UTC",
            "url": "https://refundonex.com/cloud/form_85753.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820444/",
            "reporter": "abuse_ch"
        }
    ],
    "3820445": [
        {
            "dateadded": "2026-04-13 13:39:28 UTC",
            "url": "https://refundonex.com/cloud/form_06716.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820445/",
            "reporter": "abuse_ch"
        }
    ],
    "3820438": [
        {
            "dateadded": "2026-04-13 13:39:27 UTC",
            "url": "https://refundonex.com/cloud/form_69975.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820438/",
            "reporter": "abuse_ch"
        }
    ],
    "3820439": [
        {
            "dateadded": "2026-04-13 13:39:27 UTC",
            "url": "https://refundonex.com/cloud/form_30425.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820439/",
            "reporter": "abuse_ch"
        }
    ],
    "3820440": [
        {
            "dateadded": "2026-04-13 13:39:27 UTC",
            "url": "https://refundonex.com/cloud/form_65803.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820440/",
            "reporter": "abuse_ch"
        }
    ],
    "3820441": [
        {
            "dateadded": "2026-04-13 13:39:27 UTC",
            "url": "https://refundonex.com/cloud/form_95823.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820441/",
            "reporter": "abuse_ch"
        }
    ],
    "3820434": [
        {
            "dateadded": "2026-04-13 13:39:26 UTC",
            "url": "https://refundonex.com/cloud/form_95559.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820434/",
            "reporter": "abuse_ch"
        }
    ],
    "3820435": [
        {
            "dateadded": "2026-04-13 13:39:26 UTC",
            "url": "https://refundonex.com/cloud/form_84276.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820435/",
            "reporter": "abuse_ch"
        }
    ],
    "3820436": [
        {
            "dateadded": "2026-04-13 13:39:26 UTC",
            "url": "https://refundonex.com/cloud/form_22301.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820436/",
            "reporter": "abuse_ch"
        }
    ],
    "3820437": [
        {
            "dateadded": "2026-04-13 13:39:26 UTC",
            "url": "https://refundonex.com/cloud/form_71145.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820437/",
            "reporter": "abuse_ch"
        }
    ],
    "3820430": [
        {
            "dateadded": "2026-04-13 13:39:25 UTC",
            "url": "https://refundonex.com/cloud/form_31160.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820430/",
            "reporter": "abuse_ch"
        }
    ],
    "3820431": [
        {
            "dateadded": "2026-04-13 13:39:25 UTC",
            "url": "https://refundonex.com/cloud/form_06835.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820431/",
            "reporter": "abuse_ch"
        }
    ],
    "3820432": [
        {
            "dateadded": "2026-04-13 13:39:25 UTC",
            "url": "https://refundonex.com/cloud/form_91790.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820432/",
            "reporter": "abuse_ch"
        }
    ],
    "3820433": [
        {
            "dateadded": "2026-04-13 13:39:25 UTC",
            "url": "https://refundonex.com/cloud/form_24070.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820433/",
            "reporter": "abuse_ch"
        }
    ],
    "3820422": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_95015.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820422/",
            "reporter": "abuse_ch"
        }
    ],
    "3820423": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_53313.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820423/",
            "reporter": "abuse_ch"
        }
    ],
    "3820424": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_57557.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820424/",
            "reporter": "abuse_ch"
        }
    ],
    "3820425": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_79849.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820425/",
            "reporter": "abuse_ch"
        }
    ],
    "3820426": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_34096.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820426/",
            "reporter": "abuse_ch"
        }
    ],
    "3820427": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_45753.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820427/",
            "reporter": "abuse_ch"
        }
    ],
    "3820428": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_50616.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820428/",
            "reporter": "abuse_ch"
        }
    ],
    "3820429": [
        {
            "dateadded": "2026-04-13 13:39:24 UTC",
            "url": "https://refundonex.com/cloud/form_87491.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820429/",
            "reporter": "abuse_ch"
        }
    ],
    "3820416": [
        {
            "dateadded": "2026-04-13 13:39:23 UTC",
            "url": "https://refundonex.com/cloud/form_70351.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820416/",
            "reporter": "abuse_ch"
        }
    ],
    "3820417": [
        {
            "dateadded": "2026-04-13 13:39:23 UTC",
            "url": "https://refundonex.com/cloud/form_33122.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820417/",
            "reporter": "abuse_ch"
        }
    ],
    "3820418": [
        {
            "dateadded": "2026-04-13 13:39:23 UTC",
            "url": "https://refundonex.com/cloud/form_83777.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820418/",
            "reporter": "abuse_ch"
        }
    ],
    "3820419": [
        {
            "dateadded": "2026-04-13 13:39:23 UTC",
            "url": "https://refundonex.com/cloud/form_58832.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820419/",
            "reporter": "abuse_ch"
        }
    ],
    "3820420": [
        {
            "dateadded": "2026-04-13 13:39:23 UTC",
            "url": "https://refundonex.com/cloud/form_05816.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820420/",
            "reporter": "abuse_ch"
        }
    ],
    "3820421": [
        {
            "dateadded": "2026-04-13 13:39:23 UTC",
            "url": "https://refundonex.com/cloud/form_38901.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820421/",
            "reporter": "abuse_ch"
        }
    ],
    "3820414": [
        {
            "dateadded": "2026-04-13 13:39:22 UTC",
            "url": "https://refundonex.com/cloud/form_71512.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820414/",
            "reporter": "abuse_ch"
        }
    ],
    "3820415": [
        {
            "dateadded": "2026-04-13 13:39:22 UTC",
            "url": "https://refundonex.com/cloud/form_02148.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820415/",
            "reporter": "abuse_ch"
        }
    ],
    "3820410": [
        {
            "dateadded": "2026-04-13 13:39:21 UTC",
            "url": "https://refundonex.com/cloud/form_17113.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820410/",
            "reporter": "abuse_ch"
        }
    ],
    "3820411": [
        {
            "dateadded": "2026-04-13 13:39:21 UTC",
            "url": "https://refundonex.com/cloud/form_87057.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820411/",
            "reporter": "abuse_ch"
        }
    ],
    "3820412": [
        {
            "dateadded": "2026-04-13 13:39:21 UTC",
            "url": "https://refundonex.com/cloud/form_50999.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820412/",
            "reporter": "abuse_ch"
        }
    ],
    "3820413": [
        {
            "dateadded": "2026-04-13 13:39:21 UTC",
            "url": "https://refundonex.com/cloud/form_27177.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820413/",
            "reporter": "abuse_ch"
        }
    ],
    "3820407": [
        {
            "dateadded": "2026-04-13 13:39:20 UTC",
            "url": "https://refundonex.com/cloud/form_50298.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820407/",
            "reporter": "abuse_ch"
        }
    ],
    "3820408": [
        {
            "dateadded": "2026-04-13 13:39:20 UTC",
            "url": "https://refundonex.com/cloud/form_51173.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820408/",
            "reporter": "abuse_ch"
        }
    ],
    "3820409": [
        {
            "dateadded": "2026-04-13 13:39:20 UTC",
            "url": "https://refundonex.com/cloud/form_85498.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820409/",
            "reporter": "abuse_ch"
        }
    ],
    "3820401": [
        {
            "dateadded": "2026-04-13 13:39:19 UTC",
            "url": "https://refundonex.com/cloud/form_91107.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820401/",
            "reporter": "abuse_ch"
        }
    ],
    "3820402": [
        {
            "dateadded": "2026-04-13 13:39:19 UTC",
            "url": "https://refundonex.com/cloud/form_55259.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820402/",
            "reporter": "abuse_ch"
        }
    ],
    "3820403": [
        {
            "dateadded": "2026-04-13 13:39:19 UTC",
            "url": "https://refundonex.com/cloud/form_33967.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820403/",
            "reporter": "abuse_ch"
        }
    ],
    "3820404": [
        {
            "dateadded": "2026-04-13 13:39:19 UTC",
            "url": "https://refundonex.com/cloud/form_15791.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820404/",
            "reporter": "abuse_ch"
        }
    ],
    "3820405": [
        {
            "dateadded": "2026-04-13 13:39:19 UTC",
            "url": "https://refundonex.com/cloud/form_22174.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820405/",
            "reporter": "abuse_ch"
        }
    ],
    "3820406": [
        {
            "dateadded": "2026-04-13 13:39:19 UTC",
            "url": "https://refundonex.com/cloud/form_91478.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820406/",
            "reporter": "abuse_ch"
        }
    ],
    "3820400": [
        {
            "dateadded": "2026-04-13 13:39:16 UTC",
            "url": "https://refundonex.com/cloud/form_98790.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820400/",
            "reporter": "abuse_ch"
        }
    ],
    "3820394": [
        {
            "dateadded": "2026-04-13 13:39:15 UTC",
            "url": "https://refundonex.com/cloud/form_76404.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820394/",
            "reporter": "abuse_ch"
        }
    ],
    "3820395": [
        {
            "dateadded": "2026-04-13 13:39:15 UTC",
            "url": "https://refundonex.com/cloud/form_75982.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820395/",
            "reporter": "abuse_ch"
        }
    ],
    "3820396": [
        {
            "dateadded": "2026-04-13 13:39:15 UTC",
            "url": "https://refundonex.com/cloud/form_27442.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820396/",
            "reporter": "abuse_ch"
        }
    ],
    "3820397": [
        {
            "dateadded": "2026-04-13 13:39:15 UTC",
            "url": "https://refundonex.com/cloud/form_42486.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820397/",
            "reporter": "abuse_ch"
        }
    ],
    "3820398": [
        {
            "dateadded": "2026-04-13 13:39:15 UTC",
            "url": "https://refundonex.com/cloud/form_83940.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820398/",
            "reporter": "abuse_ch"
        }
    ],
    "3820399": [
        {
            "dateadded": "2026-04-13 13:39:15 UTC",
            "url": "https://refundonex.com/cloud/form_64266.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820399/",
            "reporter": "abuse_ch"
        }
    ],
    "3820390": [
        {
            "dateadded": "2026-04-13 13:39:14 UTC",
            "url": "https://refundonex.com/cloud/form_86869.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820390/",
            "reporter": "abuse_ch"
        }
    ],
    "3820391": [
        {
            "dateadded": "2026-04-13 13:39:14 UTC",
            "url": "https://refundonex.com/cloud/form_29513.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820391/",
            "reporter": "abuse_ch"
        }
    ],
    "3820392": [
        {
            "dateadded": "2026-04-13 13:39:14 UTC",
            "url": "https://refundonex.com/cloud/form_92463.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820392/",
            "reporter": "abuse_ch"
        }
    ],
    "3820393": [
        {
            "dateadded": "2026-04-13 13:39:14 UTC",
            "url": "https://refundonex.com/cloud/form_97420.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820393/",
            "reporter": "abuse_ch"
        }
    ],
    "3820383": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_95692.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820383/",
            "reporter": "abuse_ch"
        }
    ],
    "3820384": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_25906.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820384/",
            "reporter": "abuse_ch"
        }
    ],
    "3820385": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_26253.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820385/",
            "reporter": "abuse_ch"
        }
    ],
    "3820386": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_03894.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820386/",
            "reporter": "abuse_ch"
        }
    ],
    "3820387": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_54805.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820387/",
            "reporter": "abuse_ch"
        }
    ],
    "3820388": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_97413.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820388/",
            "reporter": "abuse_ch"
        }
    ],
    "3820389": [
        {
            "dateadded": "2026-04-13 13:39:13 UTC",
            "url": "https://refundonex.com/cloud/form_91513.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820389/",
            "reporter": "abuse_ch"
        }
    ],
    "3820376": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://refundonex.com/cloud/form_36782.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820376/",
            "reporter": "abuse_ch"
        }
    ],
    "3820377": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://refundonex.com/cloud/form_67925.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820377/",
            "reporter": "abuse_ch"
        }
    ],
    "3820378": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://bgurbey.great-site.net/img_051935.png",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "xworm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820378/",
            "reporter": "abuse_ch"
        }
    ],
    "3820379": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://refundonex.com/cloud/form_39804.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820379/",
            "reporter": "abuse_ch"
        }
    ],
    "3820380": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://refundonex.com/cloud/form_26917.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820380/",
            "reporter": "abuse_ch"
        }
    ],
    "3820381": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://refundonex.com/cloud/form_15861.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820381/",
            "reporter": "abuse_ch"
        }
    ],
    "3820382": [
        {
            "dateadded": "2026-04-13 13:39:12 UTC",
            "url": "https://refundonex.com/cloud/form_36223.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820382/",
            "reporter": "abuse_ch"
        }
    ],
    "3820374": [
        {
            "dateadded": "2026-04-13 13:39:11 UTC",
            "url": "https://refundonex.com/cloud/form_66017.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820374/",
            "reporter": "abuse_ch"
        }
    ],
    "3820375": [
        {
            "dateadded": "2026-04-13 13:39:11 UTC",
            "url": "https://refundonex.com/cloud/form_83497.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820375/",
            "reporter": "abuse_ch"
        }
    ],
    "3820372": [
        {
            "dateadded": "2026-04-13 13:39:10 UTC",
            "url": "https://refundonex.com/cloud/form_85095.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820372/",
            "reporter": "abuse_ch"
        }
    ],
    "3820373": [
        {
            "dateadded": "2026-04-13 13:39:10 UTC",
            "url": "https://refundonex.com/cloud/form_45753.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820373/",
            "reporter": "abuse_ch"
        }
    ],
    "3820369": [
        {
            "dateadded": "2026-04-13 13:39:09 UTC",
            "url": "https://refundonex.com/cloud/form_34235.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820369/",
            "reporter": "abuse_ch"
        }
    ],
    "3820370": [
        {
            "dateadded": "2026-04-13 13:39:09 UTC",
            "url": "https://refundonex.com/cloud/form_84107.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820370/",
            "reporter": "abuse_ch"
        }
    ],
    "3820371": [
        {
            "dateadded": "2026-04-13 13:39:09 UTC",
            "url": "https://refundonex.com/cloud/form_07400.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820371/",
            "reporter": "abuse_ch"
        }
    ],
    "3820368": [
        {
            "dateadded": "2026-04-13 13:39:08 UTC",
            "url": "https://refundonex.com/cloud/form_06072.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820368/",
            "reporter": "abuse_ch"
        }
    ],
    "3820366": [
        {
            "dateadded": "2026-04-13 13:39:07 UTC",
            "url": "https://refundonex.com/cloud/form_16922.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820366/",
            "reporter": "abuse_ch"
        }
    ],
    "3820367": [
        {
            "dateadded": "2026-04-13 13:39:07 UTC",
            "url": "https://refundonex.com/cloud/form_25723.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820367/",
            "reporter": "abuse_ch"
        }
    ],
    "3820363": [
        {
            "dateadded": "2026-04-13 13:39:06 UTC",
            "url": "https://refundonex.com/cloud/form_86171.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820363/",
            "reporter": "abuse_ch"
        }
    ],
    "3820364": [
        {
            "dateadded": "2026-04-13 13:39:06 UTC",
            "url": "https://refundonex.com/cloud/form_49317.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820364/",
            "reporter": "abuse_ch"
        }
    ],
    "3820365": [
        {
            "dateadded": "2026-04-13 13:39:06 UTC",
            "url": "https://refundonex.com/cloud/form_89593.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820365/",
            "reporter": "abuse_ch"
        }
    ],
    "3820358": [
        {
            "dateadded": "2026-04-13 13:39:05 UTC",
            "url": "https://refundonex.com/cloud/form_45429.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820358/",
            "reporter": "abuse_ch"
        }
    ],
    "3820359": [
        {
            "dateadded": "2026-04-13 13:39:05 UTC",
            "url": "https://refundonex.com/cloud/form_91985.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820359/",
            "reporter": "abuse_ch"
        }
    ],
    "3820360": [
        {
            "dateadded": "2026-04-13 13:39:05 UTC",
            "url": "https://refundonex.com/cloud/form_77434.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820360/",
            "reporter": "abuse_ch"
        }
    ],
    "3820361": [
        {
            "dateadded": "2026-04-13 13:39:05 UTC",
            "url": "https://refundonex.com/cloud/form_23255.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820361/",
            "reporter": "abuse_ch"
        }
    ],
    "3820362": [
        {
            "dateadded": "2026-04-13 13:39:05 UTC",
            "url": "https://refundonex.com/cloud/form_61120.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820362/",
            "reporter": "abuse_ch"
        }
    ],
    "3820354": [
        {
            "dateadded": "2026-04-13 13:39:04 UTC",
            "url": "https://refundonex.com/cloud/form_35478.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820354/",
            "reporter": "abuse_ch"
        }
    ],
    "3820355": [
        {
            "dateadded": "2026-04-13 13:39:04 UTC",
            "url": "https://refundonex.com/cloud/form_16459.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820355/",
            "reporter": "abuse_ch"
        }
    ],
    "3820356": [
        {
            "dateadded": "2026-04-13 13:39:04 UTC",
            "url": "https://refundonex.com/cloud/form_34561.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820356/",
            "reporter": "abuse_ch"
        }
    ],
    "3820357": [
        {
            "dateadded": "2026-04-13 13:39:04 UTC",
            "url": "https://refundonex.com/cloud/form_25188.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820357/",
            "reporter": "abuse_ch"
        }
    ],
    "3820349": [
        {
            "dateadded": "2026-04-13 13:39:03 UTC",
            "url": "https://refundonex.com/cloud/form_94040.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820349/",
            "reporter": "abuse_ch"
        }
    ],
    "3820350": [
        {
            "dateadded": "2026-04-13 13:39:03 UTC",
            "url": "https://refundonex.com/cloud/form_897893.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820350/",
            "reporter": "abuse_ch"
        }
    ],
    "3820351": [
        {
            "dateadded": "2026-04-13 13:39:03 UTC",
            "url": "https://refundonex.com/cloud/form_96565.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820351/",
            "reporter": "abuse_ch"
        }
    ],
    "3820352": [
        {
            "dateadded": "2026-04-13 13:39:03 UTC",
            "url": "https://refundonex.com/cloud/form_59572.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820352/",
            "reporter": "abuse_ch"
        }
    ],
    "3820353": [
        {
            "dateadded": "2026-04-13 13:39:03 UTC",
            "url": "https://refundonex.com/cloud/form_97426.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820353/",
            "reporter": "abuse_ch"
        }
    ],
    "3820346": [
        {
            "dateadded": "2026-04-13 13:39:02 UTC",
            "url": "https://refundonex.com/cloud/form_22739.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820346/",
            "reporter": "abuse_ch"
        }
    ],
    "3820347": [
        {
            "dateadded": "2026-04-13 13:39:02 UTC",
            "url": "https://refundonex.com/cloud/form_87554.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820347/",
            "reporter": "abuse_ch"
        }
    ],
    "3820348": [
        {
            "dateadded": "2026-04-13 13:39:02 UTC",
            "url": "https://refundonex.com/cloud/form_11594.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820348/",
            "reporter": "abuse_ch"
        }
    ],
    "3820344": [
        {
            "dateadded": "2026-04-13 13:39:01 UTC",
            "url": "https://refundonex.com/cloud/form_43024.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820344/",
            "reporter": "abuse_ch"
        }
    ],
    "3820345": [
        {
            "dateadded": "2026-04-13 13:39:01 UTC",
            "url": "https://refundonex.com/cloud/form_21473.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820345/",
            "reporter": "abuse_ch"
        }
    ],
    "3820341": [
        {
            "dateadded": "2026-04-13 13:39:00 UTC",
            "url": "https://refundonex.com/cloud/form_24663.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820341/",
            "reporter": "abuse_ch"
        }
    ],
    "3820342": [
        {
            "dateadded": "2026-04-13 13:39:00 UTC",
            "url": "https://refundonex.com/cloud/form_66268.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820342/",
            "reporter": "abuse_ch"
        }
    ],
    "3820343": [
        {
            "dateadded": "2026-04-13 13:39:00 UTC",
            "url": "https://refundonex.com/cloud/form_52860.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:39:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820343/",
            "reporter": "abuse_ch"
        }
    ],
    "3820324": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_28403.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820324/",
            "reporter": "abuse_ch"
        }
    ],
    "3820325": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_60502.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820325/",
            "reporter": "abuse_ch"
        }
    ],
    "3820326": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_60727.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820326/",
            "reporter": "abuse_ch"
        }
    ],
    "3820327": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_77494.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820327/",
            "reporter": "abuse_ch"
        }
    ],
    "3820328": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_83777.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820328/",
            "reporter": "abuse_ch"
        }
    ],
    "3820329": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_96498.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820329/",
            "reporter": "abuse_ch"
        }
    ],
    "3820330": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_96986.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820330/",
            "reporter": "abuse_ch"
        }
    ],
    "3820331": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_18869.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820331/",
            "reporter": "abuse_ch"
        }
    ],
    "3820332": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_10789.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820332/",
            "reporter": "abuse_ch"
        }
    ],
    "3820333": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_04811.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820333/",
            "reporter": "abuse_ch"
        }
    ],
    "3820334": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_91513.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820334/",
            "reporter": "abuse_ch"
        }
    ],
    "3820335": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_07352.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820335/",
            "reporter": "abuse_ch"
        }
    ],
    "3820336": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_46190.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820336/",
            "reporter": "abuse_ch"
        }
    ],
    "3820337": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_91747.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820337/",
            "reporter": "abuse_ch"
        }
    ],
    "3820338": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_20299.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820338/",
            "reporter": "abuse_ch"
        }
    ],
    "3820339": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_33769.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820339/",
            "reporter": "abuse_ch"
        }
    ],
    "3820340": [
        {
            "dateadded": "2026-04-13 13:38:56 UTC",
            "url": "https://refundonex.com/cloud/form_12487.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820340/",
            "reporter": "abuse_ch"
        }
    ],
    "3820320": [
        {
            "dateadded": "2026-04-13 13:38:54 UTC",
            "url": "https://refundonex.com/cloud/form_65349.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820320/",
            "reporter": "abuse_ch"
        }
    ],
    "3820321": [
        {
            "dateadded": "2026-04-13 13:38:54 UTC",
            "url": "https://refundonex.com/cloud/form_81612.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820321/",
            "reporter": "abuse_ch"
        }
    ],
    "3820322": [
        {
            "dateadded": "2026-04-13 13:38:54 UTC",
            "url": "https://refundonex.com/cloud/form_25736.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820322/",
            "reporter": "abuse_ch"
        }
    ],
    "3820323": [
        {
            "dateadded": "2026-04-13 13:38:54 UTC",
            "url": "https://refundonex.com/cloud/form_64830.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820323/",
            "reporter": "abuse_ch"
        }
    ],
    "3820319": [
        {
            "dateadded": "2026-04-13 13:38:53 UTC",
            "url": "https://refundonex.com/cloud/form_55337.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820319/",
            "reporter": "abuse_ch"
        }
    ],
    "3820314": [
        {
            "dateadded": "2026-04-13 13:38:52 UTC",
            "url": "https://refundonex.com/cloud/form_39368.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820314/",
            "reporter": "abuse_ch"
        }
    ],
    "3820315": [
        {
            "dateadded": "2026-04-13 13:38:52 UTC",
            "url": "https://refundonex.com/cloud/form_22704.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820315/",
            "reporter": "abuse_ch"
        }
    ],
    "3820316": [
        {
            "dateadded": "2026-04-13 13:38:52 UTC",
            "url": "https://refundonex.com/cloud/form_02192.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820316/",
            "reporter": "abuse_ch"
        }
    ],
    "3820317": [
        {
            "dateadded": "2026-04-13 13:38:52 UTC",
            "url": "https://refundonex.com/cloud/form_91513.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820317/",
            "reporter": "abuse_ch"
        }
    ],
    "3820318": [
        {
            "dateadded": "2026-04-13 13:38:52 UTC",
            "url": "https://refundonex.com/cloud/form_10789.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820318/",
            "reporter": "abuse_ch"
        }
    ],
    "3820310": [
        {
            "dateadded": "2026-04-13 13:38:51 UTC",
            "url": "https://refundonex.com/cloud/form_97776.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820310/",
            "reporter": "abuse_ch"
        }
    ],
    "3820311": [
        {
            "dateadded": "2026-04-13 13:38:51 UTC",
            "url": "https://refundonex.com/cloud/form_26730.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820311/",
            "reporter": "abuse_ch"
        }
    ],
    "3820312": [
        {
            "dateadded": "2026-04-13 13:38:51 UTC",
            "url": "https://refundonex.com/cloud/form_00535.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820312/",
            "reporter": "abuse_ch"
        }
    ],
    "3820313": [
        {
            "dateadded": "2026-04-13 13:38:51 UTC",
            "url": "https://refundonex.com/cloud/form_46359.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820313/",
            "reporter": "abuse_ch"
        }
    ],
    "3820307": [
        {
            "dateadded": "2026-04-13 13:38:50 UTC",
            "url": "https://refundonex.com/cloud/form_54935.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820307/",
            "reporter": "abuse_ch"
        }
    ],
    "3820308": [
        {
            "dateadded": "2026-04-13 13:38:50 UTC",
            "url": "https://refundonex.com/cloud/form_42022.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820308/",
            "reporter": "abuse_ch"
        }
    ],
    "3820309": [
        {
            "dateadded": "2026-04-13 13:38:50 UTC",
            "url": "https://refundonex.com/cloud/form_67100.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820309/",
            "reporter": "abuse_ch"
        }
    ],
    "3820304": [
        {
            "dateadded": "2026-04-13 13:38:47 UTC",
            "url": "https://refundonex.com/cloud/form_06585.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820304/",
            "reporter": "abuse_ch"
        }
    ],
    "3820305": [
        {
            "dateadded": "2026-04-13 13:38:47 UTC",
            "url": "https://refundonex.com/cloud/form_96580.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820305/",
            "reporter": "abuse_ch"
        }
    ],
    "3820306": [
        {
            "dateadded": "2026-04-13 13:38:47 UTC",
            "url": "https://refundonex.com/cloud/form_84792.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820306/",
            "reporter": "abuse_ch"
        }
    ],
    "3820301": [
        {
            "dateadded": "2026-04-13 13:38:46 UTC",
            "url": "https://refundonex.com/cloud/form_64220.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820301/",
            "reporter": "abuse_ch"
        }
    ],
    "3820302": [
        {
            "dateadded": "2026-04-13 13:38:46 UTC",
            "url": "https://refundonex.com/cloud/form_69721.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820302/",
            "reporter": "abuse_ch"
        }
    ],
    "3820303": [
        {
            "dateadded": "2026-04-13 13:38:46 UTC",
            "url": "https://refundonex.com/cloud/form_85706.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820303/",
            "reporter": "abuse_ch"
        }
    ],
    "3820300": [
        {
            "dateadded": "2026-04-13 13:38:45 UTC",
            "url": "https://refundonex.com/cloud/form_48040.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820300/",
            "reporter": "abuse_ch"
        }
    ],
    "3820297": [
        {
            "dateadded": "2026-04-13 13:38:44 UTC",
            "url": "https://refundonex.com/cloud/form_89541.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820297/",
            "reporter": "abuse_ch"
        }
    ],
    "3820298": [
        {
            "dateadded": "2026-04-13 13:38:44 UTC",
            "url": "https://refundonex.com/cloud/form_00492.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820298/",
            "reporter": "abuse_ch"
        }
    ],
    "3820299": [
        {
            "dateadded": "2026-04-13 13:38:44 UTC",
            "url": "https://refundonex.com/cloud/form_58832.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820299/",
            "reporter": "abuse_ch"
        }
    ],
    "3820293": [
        {
            "dateadded": "2026-04-13 13:38:43 UTC",
            "url": "https://refundonex.com/cloud/form_14388.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820293/",
            "reporter": "abuse_ch"
        }
    ],
    "3820294": [
        {
            "dateadded": "2026-04-13 13:38:43 UTC",
            "url": "https://refundonex.com/cloud/form_84705.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820294/",
            "reporter": "abuse_ch"
        }
    ],
    "3820295": [
        {
            "dateadded": "2026-04-13 13:38:43 UTC",
            "url": "https://refundonex.com/cloud/form_60726.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820295/",
            "reporter": "abuse_ch"
        }
    ],
    "3820296": [
        {
            "dateadded": "2026-04-13 13:38:43 UTC",
            "url": "https://refundonex.com/cloud/form_26730.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820296/",
            "reporter": "abuse_ch"
        }
    ],
    "3820290": [
        {
            "dateadded": "2026-04-13 13:38:42 UTC",
            "url": "https://refundonex.com/cloud/form_73129.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820290/",
            "reporter": "abuse_ch"
        }
    ],
    "3820291": [
        {
            "dateadded": "2026-04-13 13:38:42 UTC",
            "url": "https://refundonex.com/cloud/form_13881.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820291/",
            "reporter": "abuse_ch"
        }
    ],
    "3820292": [
        {
            "dateadded": "2026-04-13 13:38:42 UTC",
            "url": "https://refundonex.com/cloud/form_72346.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820292/",
            "reporter": "abuse_ch"
        }
    ],
    "3820285": [
        {
            "dateadded": "2026-04-13 13:38:41 UTC",
            "url": "https://water.s3.cubbit.eu/bmiSkak.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820285/",
            "reporter": "abuse_ch"
        }
    ],
    "3820286": [
        {
            "dateadded": "2026-04-13 13:38:41 UTC",
            "url": "https://refundonex.com/cloud/form_13663.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820286/",
            "reporter": "abuse_ch"
        }
    ],
    "3820287": [
        {
            "dateadded": "2026-04-13 13:38:41 UTC",
            "url": "https://refundonex.com/cloud/form_54606.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820287/",
            "reporter": "abuse_ch"
        }
    ],
    "3820288": [
        {
            "dateadded": "2026-04-13 13:38:41 UTC",
            "url": "https://refundonex.com/cloud/form_68476.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820288/",
            "reporter": "abuse_ch"
        }
    ],
    "3820289": [
        {
            "dateadded": "2026-04-13 13:38:41 UTC",
            "url": "https://refundonex.com/cloud/form_02839.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820289/",
            "reporter": "abuse_ch"
        }
    ],
    "3820278": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_83467.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820278/",
            "reporter": "abuse_ch"
        }
    ],
    "3820279": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_50289.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820279/",
            "reporter": "abuse_ch"
        }
    ],
    "3820280": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_86171.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820280/",
            "reporter": "abuse_ch"
        }
    ],
    "3820281": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_93351.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820281/",
            "reporter": "abuse_ch"
        }
    ],
    "3820282": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_99237.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820282/",
            "reporter": "abuse_ch"
        }
    ],
    "3820283": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_07712.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820283/",
            "reporter": "abuse_ch"
        }
    ],
    "3820284": [
        {
            "dateadded": "2026-04-13 13:38:40 UTC",
            "url": "https://refundonex.com/cloud/form_27177.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820284/",
            "reporter": "abuse_ch"
        }
    ],
    "3820269": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_60161.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820269/",
            "reporter": "abuse_ch"
        }
    ],
    "3820270": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_00007.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820270/",
            "reporter": "abuse_ch"
        }
    ],
    "3820271": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_77802.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820271/",
            "reporter": "abuse_ch"
        }
    ],
    "3820272": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_37394.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820272/",
            "reporter": "abuse_ch"
        }
    ],
    "3820273": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_86145.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820273/",
            "reporter": "abuse_ch"
        }
    ],
    "3820274": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_18258.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820274/",
            "reporter": "abuse_ch"
        }
    ],
    "3820275": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_92910.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820275/",
            "reporter": "abuse_ch"
        }
    ],
    "3820276": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_83497.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820276/",
            "reporter": "abuse_ch"
        }
    ],
    "3820277": [
        {
            "dateadded": "2026-04-13 13:38:39 UTC",
            "url": "https://refundonex.com/cloud/form_28685.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820277/",
            "reporter": "abuse_ch"
        }
    ],
    "3820266": [
        {
            "dateadded": "2026-04-13 13:38:38 UTC",
            "url": "https://refundonex.com/cloud/form_72346.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820266/",
            "reporter": "abuse_ch"
        }
    ],
    "3820267": [
        {
            "dateadded": "2026-04-13 13:38:38 UTC",
            "url": "https://refundonex.com/cloud/form_24901.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820267/",
            "reporter": "abuse_ch"
        }
    ],
    "3820268": [
        {
            "dateadded": "2026-04-13 13:38:38 UTC",
            "url": "https://refundonex.com/cloud/form_03497.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820268/",
            "reporter": "abuse_ch"
        }
    ],
    "3820265": [
        {
            "dateadded": "2026-04-13 13:38:37 UTC",
            "url": "https://refundonex.com/cloud/form_98916.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820265/",
            "reporter": "abuse_ch"
        }
    ],
    "3820264": [
        {
            "dateadded": "2026-04-13 13:38:36 UTC",
            "url": "https://refundonex.com/cloud/form_44238.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820264/",
            "reporter": "abuse_ch"
        }
    ],
    "3820262": [
        {
            "dateadded": "2026-04-13 13:38:35 UTC",
            "url": "https://refundonex.com/cloud/form_78394.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820262/",
            "reporter": "abuse_ch"
        }
    ],
    "3820263": [
        {
            "dateadded": "2026-04-13 13:38:35 UTC",
            "url": "https://refundonex.com/cloud/form_21024.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820263/",
            "reporter": "abuse_ch"
        }
    ],
    "3820255": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_97017.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820255/",
            "reporter": "abuse_ch"
        }
    ],
    "3820256": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_15098.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820256/",
            "reporter": "abuse_ch"
        }
    ],
    "3820257": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_88693.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820257/",
            "reporter": "abuse_ch"
        }
    ],
    "3820258": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_91997.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820258/",
            "reporter": "abuse_ch"
        }
    ],
    "3820259": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_69254.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820259/",
            "reporter": "abuse_ch"
        }
    ],
    "3820260": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_19556.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820260/",
            "reporter": "abuse_ch"
        }
    ],
    "3820261": [
        {
            "dateadded": "2026-04-13 13:38:34 UTC",
            "url": "https://refundonex.com/cloud/form_29996.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820261/",
            "reporter": "abuse_ch"
        }
    ],
    "3820251": [
        {
            "dateadded": "2026-04-13 13:38:33 UTC",
            "url": "https://refundonex.com/cloud/form_08373.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820251/",
            "reporter": "abuse_ch"
        }
    ],
    "3820252": [
        {
            "dateadded": "2026-04-13 13:38:33 UTC",
            "url": "https://refundonex.com/cloud/form_54776.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820252/",
            "reporter": "abuse_ch"
        }
    ],
    "3820253": [
        {
            "dateadded": "2026-04-13 13:38:33 UTC",
            "url": "https://refundonex.com/cloud/form_73549.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820253/",
            "reporter": "abuse_ch"
        }
    ],
    "3820254": [
        {
            "dateadded": "2026-04-13 13:38:33 UTC",
            "url": "https://refundonex.com/cloud/form_99893.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820254/",
            "reporter": "abuse_ch"
        }
    ],
    "3820250": [
        {
            "dateadded": "2026-04-13 13:38:32 UTC",
            "url": "https://refundonex.com/cloud/form_56403.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820250/",
            "reporter": "abuse_ch"
        }
    ],
    "3820249": [
        {
            "dateadded": "2026-04-13 13:38:30 UTC",
            "url": "https://water.s3.cubbit.eu/ccAoheF.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820249/",
            "reporter": "abuse_ch"
        }
    ],
    "3820246": [
        {
            "dateadded": "2026-04-13 13:38:29 UTC",
            "url": "https://refundonex.com/cloud/form_18701.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820246/",
            "reporter": "abuse_ch"
        }
    ],
    "3820247": [
        {
            "dateadded": "2026-04-13 13:38:29 UTC",
            "url": "https://refundonex.com/cloud/form_54606.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820247/",
            "reporter": "abuse_ch"
        }
    ],
    "3820248": [
        {
            "dateadded": "2026-04-13 13:38:29 UTC",
            "url": "https://refundonex.com/cloud/form_43756.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820248/",
            "reporter": "abuse_ch"
        }
    ],
    "3820239": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_43666.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820239/",
            "reporter": "abuse_ch"
        }
    ],
    "3820240": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_65872.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820240/",
            "reporter": "abuse_ch"
        }
    ],
    "3820241": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_19463.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820241/",
            "reporter": "abuse_ch"
        }
    ],
    "3820242": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_85706.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820242/",
            "reporter": "abuse_ch"
        }
    ],
    "3820243": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_35769.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820243/",
            "reporter": "abuse_ch"
        }
    ],
    "3820244": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_97143.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820244/",
            "reporter": "abuse_ch"
        }
    ],
    "3820245": [
        {
            "dateadded": "2026-04-13 13:38:28 UTC",
            "url": "https://refundonex.com/cloud/form_06705.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820245/",
            "reporter": "abuse_ch"
        }
    ],
    "3820233": [
        {
            "dateadded": "2026-04-13 13:38:27 UTC",
            "url": "https://refundonex.com/cloud/form_72800.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820233/",
            "reporter": "abuse_ch"
        }
    ],
    "3820234": [
        {
            "dateadded": "2026-04-13 13:38:27 UTC",
            "url": "https://refundonex.com/cloud/form_81050.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820234/",
            "reporter": "abuse_ch"
        }
    ],
    "3820235": [
        {
            "dateadded": "2026-04-13 13:38:27 UTC",
            "url": "https://refundonex.com/cloud/form_54154.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820235/",
            "reporter": "abuse_ch"
        }
    ],
    "3820236": [
        {
            "dateadded": "2026-04-13 13:38:27 UTC",
            "url": "https://refundonex.com/cloud/form_52315.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820236/",
            "reporter": "abuse_ch"
        }
    ],
    "3820237": [
        {
            "dateadded": "2026-04-13 13:38:27 UTC",
            "url": "https://refundonex.com/cloud/form_56208.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820237/",
            "reporter": "abuse_ch"
        }
    ],
    "3820238": [
        {
            "dateadded": "2026-04-13 13:38:27 UTC",
            "url": "https://refundonex.com/cloud/form_27247.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820238/",
            "reporter": "abuse_ch"
        }
    ],
    "3820228": [
        {
            "dateadded": "2026-04-13 13:38:25 UTC",
            "url": "https://refundonex.com/cloud/form_74348.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820228/",
            "reporter": "abuse_ch"
        }
    ],
    "3820229": [
        {
            "dateadded": "2026-04-13 13:38:25 UTC",
            "url": "https://refundonex.com/cloud/form_68793.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820229/",
            "reporter": "abuse_ch"
        }
    ],
    "3820230": [
        {
            "dateadded": "2026-04-13 13:38:25 UTC",
            "url": "https://refundonex.com/cloud/form_23840.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820230/",
            "reporter": "abuse_ch"
        }
    ],
    "3820231": [
        {
            "dateadded": "2026-04-13 13:38:25 UTC",
            "url": "https://refundonex.com/cloud/form_63265.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820231/",
            "reporter": "abuse_ch"
        }
    ],
    "3820232": [
        {
            "dateadded": "2026-04-13 13:38:25 UTC",
            "url": "https://refundonex.com/cloud/form_33853.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820232/",
            "reporter": "abuse_ch"
        }
    ],
    "3820225": [
        {
            "dateadded": "2026-04-13 13:38:24 UTC",
            "url": "https://refundonex.com/cloud/form_95015.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820225/",
            "reporter": "abuse_ch"
        }
    ],
    "3820226": [
        {
            "dateadded": "2026-04-13 13:38:24 UTC",
            "url": "https://refundonex.com/cloud/form_15837.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820226/",
            "reporter": "abuse_ch"
        }
    ],
    "3820227": [
        {
            "dateadded": "2026-04-13 13:38:24 UTC",
            "url": "https://refundonex.com/cloud/form_25110.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820227/",
            "reporter": "abuse_ch"
        }
    ],
    "3820218": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_69962.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820218/",
            "reporter": "abuse_ch"
        }
    ],
    "3820219": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_46586.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820219/",
            "reporter": "abuse_ch"
        }
    ],
    "3820220": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_44587.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820220/",
            "reporter": "abuse_ch"
        }
    ],
    "3820221": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_26022.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820221/",
            "reporter": "abuse_ch"
        }
    ],
    "3820222": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_55337.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820222/",
            "reporter": "abuse_ch"
        }
    ],
    "3820223": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_28820.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820223/",
            "reporter": "abuse_ch"
        }
    ],
    "3820224": [
        {
            "dateadded": "2026-04-13 13:38:23 UTC",
            "url": "https://refundonex.com/cloud/form_87927.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820224/",
            "reporter": "abuse_ch"
        }
    ],
    "3820213": [
        {
            "dateadded": "2026-04-13 13:38:22 UTC",
            "url": "https://refundonex.com/cloud/form_91997.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820213/",
            "reporter": "abuse_ch"
        }
    ],
    "3820214": [
        {
            "dateadded": "2026-04-13 13:38:22 UTC",
            "url": "https://refundonex.com/cloud/form_93958.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820214/",
            "reporter": "abuse_ch"
        }
    ],
    "3820215": [
        {
            "dateadded": "2026-04-13 13:38:22 UTC",
            "url": "https://refundonex.com/cloud/form_76760.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820215/",
            "reporter": "abuse_ch"
        }
    ],
    "3820216": [
        {
            "dateadded": "2026-04-13 13:38:22 UTC",
            "url": "https://refundonex.com/cloud/form_17823.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820216/",
            "reporter": "abuse_ch"
        }
    ],
    "3820217": [
        {
            "dateadded": "2026-04-13 13:38:22 UTC",
            "url": "https://refundonex.com/cloud/form_42426.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820217/",
            "reporter": "abuse_ch"
        }
    ],
    "3820209": [
        {
            "dateadded": "2026-04-13 13:38:21 UTC",
            "url": "https://refundonex.com/cloud/form_17005.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820209/",
            "reporter": "abuse_ch"
        }
    ],
    "3820210": [
        {
            "dateadded": "2026-04-13 13:38:21 UTC",
            "url": "https://refundonex.com/cloud/form_41620.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820210/",
            "reporter": "abuse_ch"
        }
    ],
    "3820211": [
        {
            "dateadded": "2026-04-13 13:38:21 UTC",
            "url": "https://refundonex.com/cloud/form_61627.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820211/",
            "reporter": "abuse_ch"
        }
    ],
    "3820212": [
        {
            "dateadded": "2026-04-13 13:38:21 UTC",
            "url": "https://refundonex.com/cloud/form_47537.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820212/",
            "reporter": "abuse_ch"
        }
    ],
    "3820202": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_25736.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820202/",
            "reporter": "abuse_ch"
        }
    ],
    "3820203": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_19796.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820203/",
            "reporter": "abuse_ch"
        }
    ],
    "3820204": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_11055.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820204/",
            "reporter": "abuse_ch"
        }
    ],
    "3820205": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_24086.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820205/",
            "reporter": "abuse_ch"
        }
    ],
    "3820206": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_75034.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820206/",
            "reporter": "abuse_ch"
        }
    ],
    "3820207": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_80122.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820207/",
            "reporter": "abuse_ch"
        }
    ],
    "3820208": [
        {
            "dateadded": "2026-04-13 13:38:20 UTC",
            "url": "https://refundonex.com/cloud/form_74570.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820208/",
            "reporter": "abuse_ch"
        }
    ],
    "3820201": [
        {
            "dateadded": "2026-04-13 13:38:19 UTC",
            "url": "https://refundonex.com/cloud/form_98234.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820201/",
            "reporter": "abuse_ch"
        }
    ],
    "3820198": [
        {
            "dateadded": "2026-04-13 13:38:18 UTC",
            "url": "https://refundonex.com/cloud/form_85753.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820198/",
            "reporter": "abuse_ch"
        }
    ],
    "3820199": [
        {
            "dateadded": "2026-04-13 13:38:18 UTC",
            "url": "https://refundonex.com/cloud/form_84792.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820199/",
            "reporter": "abuse_ch"
        }
    ],
    "3820200": [
        {
            "dateadded": "2026-04-13 13:38:18 UTC",
            "url": "https://refundonex.com/cloud/form_68221.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820200/",
            "reporter": "abuse_ch"
        }
    ],
    "3820189": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_11286.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820189/",
            "reporter": "abuse_ch"
        }
    ],
    "3820190": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_26253.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820190/",
            "reporter": "abuse_ch"
        }
    ],
    "3820191": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_96490.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820191/",
            "reporter": "abuse_ch"
        }
    ],
    "3820192": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_20859.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820192/",
            "reporter": "abuse_ch"
        }
    ],
    "3820193": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_66758.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820193/",
            "reporter": "abuse_ch"
        }
    ],
    "3820194": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_54542.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820194/",
            "reporter": "abuse_ch"
        }
    ],
    "3820195": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_87927.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820195/",
            "reporter": "abuse_ch"
        }
    ],
    "3820196": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_08859.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820196/",
            "reporter": "abuse_ch"
        }
    ],
    "3820197": [
        {
            "dateadded": "2026-04-13 13:38:16 UTC",
            "url": "https://refundonex.com/cloud/form_23430.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820197/",
            "reporter": "abuse_ch"
        }
    ],
    "3820184": [
        {
            "dateadded": "2026-04-13 13:38:12 UTC",
            "url": "https://refundonex.com/cloud/form_15608.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820184/",
            "reporter": "abuse_ch"
        }
    ],
    "3820185": [
        {
            "dateadded": "2026-04-13 13:38:12 UTC",
            "url": "https://refundonex.com/cloud/form_67465.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820185/",
            "reporter": "abuse_ch"
        }
    ],
    "3820186": [
        {
            "dateadded": "2026-04-13 13:38:12 UTC",
            "url": "https://refundonex.com/cloud/form_60401.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820186/",
            "reporter": "abuse_ch"
        }
    ],
    "3820187": [
        {
            "dateadded": "2026-04-13 13:38:12 UTC",
            "url": "https://refundonex.com/cloud/form_99433.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820187/",
            "reporter": "abuse_ch"
        }
    ],
    "3820188": [
        {
            "dateadded": "2026-04-13 13:38:12 UTC",
            "url": "https://refundonex.com/cloud/form_83467.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820188/",
            "reporter": "abuse_ch"
        }
    ],
    "3820182": [
        {
            "dateadded": "2026-04-13 13:38:11 UTC",
            "url": "https://refundonex.com/cloud/form_08380.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820182/",
            "reporter": "abuse_ch"
        }
    ],
    "3820183": [
        {
            "dateadded": "2026-04-13 13:38:11 UTC",
            "url": "https://refundonex.com/cloud/form_96061.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820183/",
            "reporter": "abuse_ch"
        }
    ],
    "3820176": [
        {
            "dateadded": "2026-04-13 13:38:10 UTC",
            "url": "https://refundonex.com/cloud/form_08335.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820176/",
            "reporter": "abuse_ch"
        }
    ],
    "3820177": [
        {
            "dateadded": "2026-04-13 13:38:10 UTC",
            "url": "https://refundonex.com/cloud/form_73011.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820177/",
            "reporter": "abuse_ch"
        }
    ],
    "3820178": [
        {
            "dateadded": "2026-04-13 13:38:10 UTC",
            "url": "https://refundonex.com/cloud/form_95559.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820178/",
            "reporter": "abuse_ch"
        }
    ],
    "3820179": [
        {
            "dateadded": "2026-04-13 13:38:10 UTC",
            "url": "https://refundonex.com/cloud/form_63667.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820179/",
            "reporter": "abuse_ch"
        }
    ],
    "3820180": [
        {
            "dateadded": "2026-04-13 13:38:10 UTC",
            "url": "https://refundonex.com/cloud/form_15833.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820180/",
            "reporter": "abuse_ch"
        }
    ],
    "3820181": [
        {
            "dateadded": "2026-04-13 13:38:10 UTC",
            "url": "https://refundonex.com/cloud/form_29854.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820181/",
            "reporter": "abuse_ch"
        }
    ],
    "3820170": [
        {
            "dateadded": "2026-04-13 13:38:09 UTC",
            "url": "https://refundonex.com/cloud/form_26463.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820170/",
            "reporter": "abuse_ch"
        }
    ],
    "3820171": [
        {
            "dateadded": "2026-04-13 13:38:09 UTC",
            "url": "https://refundonex.com/cloud/form_59180.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820171/",
            "reporter": "abuse_ch"
        }
    ],
    "3820172": [
        {
            "dateadded": "2026-04-13 13:38:09 UTC",
            "url": "https://refundonex.com/cloud/form_59474.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820172/",
            "reporter": "abuse_ch"
        }
    ],
    "3820173": [
        {
            "dateadded": "2026-04-13 13:38:09 UTC",
            "url": "https://refundonex.com/cloud/form_96783.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820173/",
            "reporter": "abuse_ch"
        }
    ],
    "3820174": [
        {
            "dateadded": "2026-04-13 13:38:09 UTC",
            "url": "https://refundonex.com/cloud/form_15314.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820174/",
            "reporter": "abuse_ch"
        }
    ],
    "3820175": [
        {
            "dateadded": "2026-04-13 13:38:09 UTC",
            "url": "https://refundonex.com/cloud/form_93224.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820175/",
            "reporter": "abuse_ch"
        }
    ],
    "3820168": [
        {
            "dateadded": "2026-04-13 13:38:08 UTC",
            "url": "https://refundonex.com/cloud/form_70818.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820168/",
            "reporter": "abuse_ch"
        }
    ],
    "3820169": [
        {
            "dateadded": "2026-04-13 13:38:08 UTC",
            "url": "https://refundonex.com/cloud/form_86145.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820169/",
            "reporter": "abuse_ch"
        }
    ],
    "3820158": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_24978.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820158/",
            "reporter": "abuse_ch"
        }
    ],
    "3820159": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_06835.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820159/",
            "reporter": "abuse_ch"
        }
    ],
    "3820160": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://mypanel.vip/a9a4wp/hbgfred.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820160/",
            "reporter": "abuse_ch"
        }
    ],
    "3820161": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_07367.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820161/",
            "reporter": "abuse_ch"
        }
    ],
    "3820162": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_13579.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820162/",
            "reporter": "abuse_ch"
        }
    ],
    "3820163": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_63265.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820163/",
            "reporter": "abuse_ch"
        }
    ],
    "3820164": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_77773.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820164/",
            "reporter": "abuse_ch"
        }
    ],
    "3820165": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_93813.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820165/",
            "reporter": "abuse_ch"
        }
    ],
    "3820166": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_16480.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820166/",
            "reporter": "abuse_ch"
        }
    ],
    "3820167": [
        {
            "dateadded": "2026-04-13 13:38:07 UTC",
            "url": "https://refundonex.com/cloud/form_83432.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820167/",
            "reporter": "abuse_ch"
        }
    ],
    "3820153": [
        {
            "dateadded": "2026-04-13 13:38:06 UTC",
            "url": "https://refundonex.com/cloud/form_79811.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820153/",
            "reporter": "abuse_ch"
        }
    ],
    "3820154": [
        {
            "dateadded": "2026-04-13 13:38:06 UTC",
            "url": "https://refundonex.com/cloud/form_96490.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820154/",
            "reporter": "abuse_ch"
        }
    ],
    "3820155": [
        {
            "dateadded": "2026-04-13 13:38:06 UTC",
            "url": "https://refundonex.com/cloud/form_99268.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820155/",
            "reporter": "abuse_ch"
        }
    ],
    "3820156": [
        {
            "dateadded": "2026-04-13 13:38:06 UTC",
            "url": "https://refundonex.com/cloud/form_50144.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820156/",
            "reporter": "abuse_ch"
        }
    ],
    "3820157": [
        {
            "dateadded": "2026-04-13 13:38:06 UTC",
            "url": "https://refundonex.com/cloud/form_71339.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820157/",
            "reporter": "abuse_ch"
        }
    ],
    "3820151": [
        {
            "dateadded": "2026-04-13 13:38:05 UTC",
            "url": "https://refundonex.com/cloud/form_67328.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820151/",
            "reporter": "abuse_ch"
        }
    ],
    "3820152": [
        {
            "dateadded": "2026-04-13 13:38:05 UTC",
            "url": "https://refundonex.com/cloud/form_18487.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820152/",
            "reporter": "abuse_ch"
        }
    ],
    "3820150": [
        {
            "dateadded": "2026-04-13 13:38:04 UTC",
            "url": "https://refundonex.com/cloud/form_47014.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820150/",
            "reporter": "abuse_ch"
        }
    ],
    "3820149": [
        {
            "dateadded": "2026-04-13 13:38:03 UTC",
            "url": "https://refundonex.com/cloud/form_16922.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820149/",
            "reporter": "abuse_ch"
        }
    ],
    "3820146": [
        {
            "dateadded": "2026-04-13 13:38:02 UTC",
            "url": "https://refundonex.com/cloud/form_99893.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820146/",
            "reporter": "abuse_ch"
        }
    ],
    "3820147": [
        {
            "dateadded": "2026-04-13 13:38:02 UTC",
            "url": "https://refundonex.com/cloud/form_86869.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:02 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820147/",
            "reporter": "abuse_ch"
        }
    ],
    "3820148": [
        {
            "dateadded": "2026-04-13 13:38:02 UTC",
            "url": "https://refundonex.com/cloud/form_38670.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:02 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820148/",
            "reporter": "abuse_ch"
        }
    ],
    "3820143": [
        {
            "dateadded": "2026-04-13 13:38:01 UTC",
            "url": "https://refundonex.com/cloud/form_31475.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820143/",
            "reporter": "abuse_ch"
        }
    ],
    "3820144": [
        {
            "dateadded": "2026-04-13 13:38:01 UTC",
            "url": "https://refundonex.com/cloud/form_86529.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820144/",
            "reporter": "abuse_ch"
        }
    ],
    "3820145": [
        {
            "dateadded": "2026-04-13 13:38:01 UTC",
            "url": "https://refundonex.com/cloud/form_88598.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:38:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820145/",
            "reporter": "abuse_ch"
        }
    ],
    "3820142": [
        {
            "dateadded": "2026-04-13 13:38:00 UTC",
            "url": "http://182.113.25.88:33602/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820142/",
            "reporter": "geenensp"
        }
    ],
    "3820128": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_39773.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820128/",
            "reporter": "abuse_ch"
        }
    ],
    "3820129": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_60666.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820129/",
            "reporter": "abuse_ch"
        }
    ],
    "3820130": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_81148.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820130/",
            "reporter": "abuse_ch"
        }
    ],
    "3820131": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_96728.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820131/",
            "reporter": "abuse_ch"
        }
    ],
    "3820132": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_45349.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820132/",
            "reporter": "abuse_ch"
        }
    ],
    "3820133": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_97420.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820133/",
            "reporter": "abuse_ch"
        }
    ],
    "3820134": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_02259.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820134/",
            "reporter": "abuse_ch"
        }
    ],
    "3820135": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_32763.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820135/",
            "reporter": "abuse_ch"
        }
    ],
    "3820136": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_80122.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820136/",
            "reporter": "abuse_ch"
        }
    ],
    "3820137": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_99389.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820137/",
            "reporter": "abuse_ch"
        }
    ],
    "3820138": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_33197.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820138/",
            "reporter": "abuse_ch"
        }
    ],
    "3820139": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_64509.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820139/",
            "reporter": "abuse_ch"
        }
    ],
    "3820140": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_69626.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820140/",
            "reporter": "abuse_ch"
        }
    ],
    "3820141": [
        {
            "dateadded": "2026-04-13 13:37:58 UTC",
            "url": "https://refundonex.com/cloud/form_08074.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820141/",
            "reporter": "abuse_ch"
        }
    ],
    "3820126": [
        {
            "dateadded": "2026-04-13 13:37:57 UTC",
            "url": "https://refundonex.com/cloud/form_83645.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820126/",
            "reporter": "abuse_ch"
        }
    ],
    "3820127": [
        {
            "dateadded": "2026-04-13 13:37:57 UTC",
            "url": "https://refundonex.com/cloud/form_94399.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820127/",
            "reporter": "abuse_ch"
        }
    ],
    "3820123": [
        {
            "dateadded": "2026-04-13 13:37:56 UTC",
            "url": "https://refundonex.com/cloud/form_85275.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820123/",
            "reporter": "abuse_ch"
        }
    ],
    "3820124": [
        {
            "dateadded": "2026-04-13 13:37:56 UTC",
            "url": "https://refundonex.com/cloud/form_01355.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820124/",
            "reporter": "abuse_ch"
        }
    ],
    "3820125": [
        {
            "dateadded": "2026-04-13 13:37:56 UTC",
            "url": "https://refundonex.com/cloud/form_89789.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820125/",
            "reporter": "abuse_ch"
        }
    ],
    "3820118": [
        {
            "dateadded": "2026-04-13 13:37:53 UTC",
            "url": "https://refundonex.com/cloud/form_07384.pdf.lnk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820118/",
            "reporter": "abuse_ch"
        }
    ],
    "3820119": [
        {
            "dateadded": "2026-04-13 13:37:53 UTC",
            "url": "https://refundonex.com/cloud/form_92463.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820119/",
            "reporter": "abuse_ch"
        }
    ],
    "3820120": [
        {
            "dateadded": "2026-04-13 13:37:53 UTC",
            "url": "https://refundonex.com/cloud/form_60163.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820120/",
            "reporter": "abuse_ch"
        }
    ],
    "3820121": [
        {
            "dateadded": "2026-04-13 13:37:53 UTC",
            "url": "https://refundonex.com/cloud/form_15217.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820121/",
            "reporter": "abuse_ch"
        }
    ],
    "3820122": [
        {
            "dateadded": "2026-04-13 13:37:53 UTC",
            "url": "https://refundonex.com/cloud/form_56966.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820122/",
            "reporter": "abuse_ch"
        }
    ],
    "3820108": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_54122.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820108/",
            "reporter": "abuse_ch"
        }
    ],
    "3820109": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_68476.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820109/",
            "reporter": "abuse_ch"
        }
    ],
    "3820110": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_99389.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820110/",
            "reporter": "abuse_ch"
        }
    ],
    "3820111": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_89271.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820111/",
            "reporter": "abuse_ch"
        }
    ],
    "3820112": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_87454.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820112/",
            "reporter": "abuse_ch"
        }
    ],
    "3820113": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_84276.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820113/",
            "reporter": "abuse_ch"
        }
    ],
    "3820114": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_73308.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820114/",
            "reporter": "abuse_ch"
        }
    ],
    "3820115": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_15283.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820115/",
            "reporter": "abuse_ch"
        }
    ],
    "3820116": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_75025.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820116/",
            "reporter": "abuse_ch"
        }
    ],
    "3820117": [
        {
            "dateadded": "2026-04-13 13:37:52 UTC",
            "url": "https://refundonex.com/cloud/form_53501.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820117/",
            "reporter": "abuse_ch"
        }
    ],
    "3820102": [
        {
            "dateadded": "2026-04-13 13:37:51 UTC",
            "url": "http://182.113.25.88:33602/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820102/",
            "reporter": "geenensp"
        }
    ],
    "3820103": [
        {
            "dateadded": "2026-04-13 13:37:51 UTC",
            "url": "https://refundonex.com/cloud/form_84839.pdf.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820103/",
            "reporter": "abuse_ch"
        }
    ],
    "3820104": [
        {
            "dateadded": "2026-04-13 13:37:51 UTC",
            "url": "https://refundonex.com/cloud/form_08074.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820104/",
            "reporter": "abuse_ch"
        }
    ],
    "3820105": [
        {
            "dateadded": "2026-04-13 13:37:51 UTC",
            "url": "https://refundonex.com/cloud/form_20126.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820105/",
            "reporter": "abuse_ch"
        }
    ],
    "3820106": [
        {
            "dateadded": "2026-04-13 13:37:51 UTC",
            "url": "https://refundonex.com/cloud/form_37131.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820106/",
            "reporter": "abuse_ch"
        }
    ],
    "3820107": [
        {
            "dateadded": "2026-04-13 13:37:51 UTC",
            "url": "https://refundonex.com/cloud/form_50289.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820107/",
            "reporter": "abuse_ch"
        }
    ],
    "3820096": [
        {
            "dateadded": "2026-04-13 13:37:50 UTC",
            "url": "https://refundonex.com/cloud/form_81245.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820096/",
            "reporter": "abuse_ch"
        }
    ],
    "3820097": [
        {
            "dateadded": "2026-04-13 13:37:50 UTC",
            "url": "https://refundonex.com/cloud/form_64040.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820097/",
            "reporter": "abuse_ch"
        }
    ],
    "3820098": [
        {
            "dateadded": "2026-04-13 13:37:50 UTC",
            "url": "https://refundonex.com/cloud/form_87927.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820098/",
            "reporter": "abuse_ch"
        }
    ],
    "3820099": [
        {
            "dateadded": "2026-04-13 13:37:50 UTC",
            "url": "https://refundonex.com/cloud/form_69212.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820099/",
            "reporter": "abuse_ch"
        }
    ],
    "3820100": [
        {
            "dateadded": "2026-04-13 13:37:50 UTC",
            "url": "https://refundonex.com/cloud/form_49178.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820100/",
            "reporter": "abuse_ch"
        }
    ],
    "3820101": [
        {
            "dateadded": "2026-04-13 13:37:50 UTC",
            "url": "https://refundonex.com/cloud/form_69626.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820101/",
            "reporter": "abuse_ch"
        }
    ],
    "3820095": [
        {
            "dateadded": "2026-04-13 13:37:49 UTC",
            "url": "https://refundonex.com/cloud/form_19977.pdf.lnk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820095/",
            "reporter": "abuse_ch"
        }
    ],
    "3820094": [
        {
            "dateadded": "2026-04-13 13:37:48 UTC",
            "url": "https://refundonex.com/cloud/form_03569.pdf.lnk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820094/",
            "reporter": "abuse_ch"
        }
    ],
    "3820093": [
        {
            "dateadded": "2026-04-13 13:37:47 UTC",
            "url": "https://refundonex.com/cloud/form_69740.pdf.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820093/",
            "reporter": "abuse_ch"
        }
    ],
    "3820092": [
        {
            "dateadded": "2026-04-13 13:37:46 UTC",
            "url": "https://refundonex.com/cloud/form_52326.pdf.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820092/",
            "reporter": "abuse_ch"
        }
    ],
    "3820085": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_01535.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820085/",
            "reporter": "abuse_ch"
        }
    ],
    "3820086": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_18344.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820086/",
            "reporter": "abuse_ch"
        }
    ],
    "3820087": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_15283.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820087/",
            "reporter": "abuse_ch"
        }
    ],
    "3820088": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_99029.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820088/",
            "reporter": "abuse_ch"
        }
    ],
    "3820089": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_88693.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820089/",
            "reporter": "abuse_ch"
        }
    ],
    "3820090": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_72606.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820090/",
            "reporter": "abuse_ch"
        }
    ],
    "3820091": [
        {
            "dateadded": "2026-04-13 13:37:45 UTC",
            "url": "https://refundonex.com/cloud/form_897893.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820091/",
            "reporter": "abuse_ch"
        }
    ],
    "3820082": [
        {
            "dateadded": "2026-04-13 13:37:44 UTC",
            "url": "https://refundonex.com/cloud/form_89541.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820082/",
            "reporter": "abuse_ch"
        }
    ],
    "3820083": [
        {
            "dateadded": "2026-04-13 13:37:44 UTC",
            "url": "https://refundonex.com/cloud/form_84426.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820083/",
            "reporter": "abuse_ch"
        }
    ],
    "3820084": [
        {
            "dateadded": "2026-04-13 13:37:44 UTC",
            "url": "https://refundonex.com/cloud/form_08429.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820084/",
            "reporter": "abuse_ch"
        }
    ],
    "3820078": [
        {
            "dateadded": "2026-04-13 13:37:41 UTC",
            "url": "https://refundonex.com/cloud/form_68362.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820078/",
            "reporter": "abuse_ch"
        }
    ],
    "3820079": [
        {
            "dateadded": "2026-04-13 13:37:41 UTC",
            "url": "https://refundonex.com/cloud/form_52221.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820079/",
            "reporter": "abuse_ch"
        }
    ],
    "3820080": [
        {
            "dateadded": "2026-04-13 13:37:41 UTC",
            "url": "https://refundonex.com/cloud/form_63278.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820080/",
            "reporter": "abuse_ch"
        }
    ],
    "3820081": [
        {
            "dateadded": "2026-04-13 13:37:41 UTC",
            "url": "https://refundonex.com/cloud/form_87533.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820081/",
            "reporter": "abuse_ch"
        }
    ],
    "3820072": [
        {
            "dateadded": "2026-04-13 13:37:38 UTC",
            "url": "https://refundonex.com/cloud/form_41495.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820072/",
            "reporter": "abuse_ch"
        }
    ],
    "3820073": [
        {
            "dateadded": "2026-04-13 13:37:38 UTC",
            "url": "https://refundonex.com/cloud/form_79078.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820073/",
            "reporter": "abuse_ch"
        }
    ],
    "3820074": [
        {
            "dateadded": "2026-04-13 13:37:38 UTC",
            "url": "https://refundonex.com/cloud/form_85772.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820074/",
            "reporter": "abuse_ch"
        }
    ],
    "3820075": [
        {
            "dateadded": "2026-04-13 13:37:38 UTC",
            "url": "https://refundonex.com/cloud/form_60401.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820075/",
            "reporter": "abuse_ch"
        }
    ],
    "3820076": [
        {
            "dateadded": "2026-04-13 13:37:38 UTC",
            "url": "https://refundonex.com/cloud/form_50818.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820076/",
            "reporter": "abuse_ch"
        }
    ],
    "3820077": [
        {
            "dateadded": "2026-04-13 13:37:38 UTC",
            "url": "https://refundonex.com/cloud/form_90644.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820077/",
            "reporter": "abuse_ch"
        }
    ],
    "3820069": [
        {
            "dateadded": "2026-04-13 13:37:37 UTC",
            "url": "https://refundonex.com/cloud/form_77303.pdf.lnk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820069/",
            "reporter": "abuse_ch"
        }
    ],
    "3820070": [
        {
            "dateadded": "2026-04-13 13:37:37 UTC",
            "url": "https://refundonex.com/cloud/form_57990.pdf.lnk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820070/",
            "reporter": "abuse_ch"
        }
    ],
    "3820071": [
        {
            "dateadded": "2026-04-13 13:37:37 UTC",
            "url": "https://refundonex.com/cloud/form_90347.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820071/",
            "reporter": "abuse_ch"
        }
    ],
    "3820067": [
        {
            "dateadded": "2026-04-13 13:37:36 UTC",
            "url": "http://92.249.61.91/Client-built.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820067/",
            "reporter": "abuse_ch"
        }
    ],
    "3820068": [
        {
            "dateadded": "2026-04-13 13:37:36 UTC",
            "url": "https://refundonex.com/cloud/form_41200.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820068/",
            "reporter": "abuse_ch"
        }
    ],
    "3820061": [
        {
            "dateadded": "2026-04-13 13:37:35 UTC",
            "url": "https://refundonex.com/cloud/form_22996.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820061/",
            "reporter": "abuse_ch"
        }
    ],
    "3820062": [
        {
            "dateadded": "2026-04-13 13:37:35 UTC",
            "url": "https://refundonex.com/cloud/form_70256.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820062/",
            "reporter": "abuse_ch"
        }
    ],
    "3820063": [
        {
            "dateadded": "2026-04-13 13:37:35 UTC",
            "url": "https://refundonex.com/cloud/form_47978.pdf.lnk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820063/",
            "reporter": "abuse_ch"
        }
    ],
    "3820064": [
        {
            "dateadded": "2026-04-13 13:37:35 UTC",
            "url": "https://refundonex.com/cloud/form_53604.pdf.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820064/",
            "reporter": "abuse_ch"
        }
    ],
    "3820065": [
        {
            "dateadded": "2026-04-13 13:37:35 UTC",
            "url": "https://refundonex.com/cloud/form_07793.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820065/",
            "reporter": "abuse_ch"
        }
    ],
    "3820066": [
        {
            "dateadded": "2026-04-13 13:37:35 UTC",
            "url": "https://refundonex.com/cloud/form_83497.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820066/",
            "reporter": "abuse_ch"
        }
    ],
    "3820060": [
        {
            "dateadded": "2026-04-13 13:37:34 UTC",
            "url": "https://refundonex.com/cloud/form_39773.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820060/",
            "reporter": "abuse_ch"
        }
    ],
    "3820056": [
        {
            "dateadded": "2026-04-13 13:37:33 UTC",
            "url": "https://refundonex.com/cloud/form_84839.pdf.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820056/",
            "reporter": "abuse_ch"
        }
    ],
    "3820057": [
        {
            "dateadded": "2026-04-13 13:37:33 UTC",
            "url": "https://refundonex.com/cloud/form_95509.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820057/",
            "reporter": "abuse_ch"
        }
    ],
    "3820058": [
        {
            "dateadded": "2026-04-13 13:37:33 UTC",
            "url": "https://refundonex.com/cloud/form_87951.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820058/",
            "reporter": "abuse_ch"
        }
    ],
    "3820059": [
        {
            "dateadded": "2026-04-13 13:37:33 UTC",
            "url": "https://refundonex.com/cloud/form_50931.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820059/",
            "reporter": "abuse_ch"
        }
    ],
    "3820055": [
        {
            "dateadded": "2026-04-13 13:37:31 UTC",
            "url": "https://refundonex.com/cloud/form_88599.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820055/",
            "reporter": "abuse_ch"
        }
    ],
    "3820049": [
        {
            "dateadded": "2026-04-13 13:37:30 UTC",
            "url": "https://refundonex.com/cloud/form_79849.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820049/",
            "reporter": "abuse_ch"
        }
    ],
    "3820050": [
        {
            "dateadded": "2026-04-13 13:37:30 UTC",
            "url": "https://refundonex.com/cloud/form_18487.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820050/",
            "reporter": "abuse_ch"
        }
    ],
    "3820051": [
        {
            "dateadded": "2026-04-13 13:37:30 UTC",
            "url": "https://refundonex.com/cloud/form_66147.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820051/",
            "reporter": "abuse_ch"
        }
    ],
    "3820052": [
        {
            "dateadded": "2026-04-13 13:37:30 UTC",
            "url": "https://refundonex.com/cloud/form_43152.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820052/",
            "reporter": "abuse_ch"
        }
    ],
    "3820053": [
        {
            "dateadded": "2026-04-13 13:37:30 UTC",
            "url": "https://refundonex.com/cloud/form_31475.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820053/",
            "reporter": "abuse_ch"
        }
    ],
    "3820054": [
        {
            "dateadded": "2026-04-13 13:37:30 UTC",
            "url": "https://refundonex.com/cloud/form_31677.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820054/",
            "reporter": "abuse_ch"
        }
    ],
    "3820046": [
        {
            "dateadded": "2026-04-13 13:37:29 UTC",
            "url": "https://refundonex.com/cloud/form_14079.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820046/",
            "reporter": "abuse_ch"
        }
    ],
    "3820047": [
        {
            "dateadded": "2026-04-13 13:37:29 UTC",
            "url": "https://refundonex.com/cloud/form_67130.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820047/",
            "reporter": "abuse_ch"
        }
    ],
    "3820048": [
        {
            "dateadded": "2026-04-13 13:37:29 UTC",
            "url": "https://refundonex.com/cloud/form_09953.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820048/",
            "reporter": "abuse_ch"
        }
    ],
    "3820044": [
        {
            "dateadded": "2026-04-13 13:37:28 UTC",
            "url": "https://refundonex.com/cloud/form_52758.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820044/",
            "reporter": "abuse_ch"
        }
    ],
    "3820045": [
        {
            "dateadded": "2026-04-13 13:37:28 UTC",
            "url": "https://refundonex.com/cloud/form_50934.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820045/",
            "reporter": "abuse_ch"
        }
    ],
    "3820042": [
        {
            "dateadded": "2026-04-13 13:37:26 UTC",
            "url": "https://refundonex.com/cloud/form_13843.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820042/",
            "reporter": "abuse_ch"
        }
    ],
    "3820043": [
        {
            "dateadded": "2026-04-13 13:37:26 UTC",
            "url": "https://refundonex.com/cloud/form_93259.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820043/",
            "reporter": "abuse_ch"
        }
    ],
    "3820040": [
        {
            "dateadded": "2026-04-13 13:37:23 UTC",
            "url": "https://refundonex.com/cloud/form_81867.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820040/",
            "reporter": "abuse_ch"
        }
    ],
    "3820041": [
        {
            "dateadded": "2026-04-13 13:37:23 UTC",
            "url": "https://refundonex.com/cloud/form_69149.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820041/",
            "reporter": "abuse_ch"
        }
    ],
    "3820035": [
        {
            "dateadded": "2026-04-13 13:37:22 UTC",
            "url": "https://refundonex.com/cloud/form_40134.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820035/",
            "reporter": "abuse_ch"
        }
    ],
    "3820036": [
        {
            "dateadded": "2026-04-13 13:37:22 UTC",
            "url": "https://refundonex.com/cloud/form_29496.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820036/",
            "reporter": "abuse_ch"
        }
    ],
    "3820037": [
        {
            "dateadded": "2026-04-13 13:37:22 UTC",
            "url": "https://refundonex.com/cloud/form_24993.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820037/",
            "reporter": "abuse_ch"
        }
    ],
    "3820038": [
        {
            "dateadded": "2026-04-13 13:37:22 UTC",
            "url": "https://refundonex.com/cloud/form_71405.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820038/",
            "reporter": "abuse_ch"
        }
    ],
    "3820039": [
        {
            "dateadded": "2026-04-13 13:37:22 UTC",
            "url": "https://refundonex.com/cloud/form_27995.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820039/",
            "reporter": "abuse_ch"
        }
    ],
    "3820031": [
        {
            "dateadded": "2026-04-13 13:37:21 UTC",
            "url": "https://refundonex.com/cloud/form_11286.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820031/",
            "reporter": "abuse_ch"
        }
    ],
    "3820032": [
        {
            "dateadded": "2026-04-13 13:37:21 UTC",
            "url": "https://refundonex.com/cloud/form_57064.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820032/",
            "reporter": "abuse_ch"
        }
    ],
    "3820033": [
        {
            "dateadded": "2026-04-13 13:37:21 UTC",
            "url": "https://refundonex.com/cloud/form_73989.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820033/",
            "reporter": "abuse_ch"
        }
    ],
    "3820034": [
        {
            "dateadded": "2026-04-13 13:37:21 UTC",
            "url": "https://refundonex.com/cloud/form_71339.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820034/",
            "reporter": "abuse_ch"
        }
    ],
    "3820026": [
        {
            "dateadded": "2026-04-13 13:37:20 UTC",
            "url": "https://refundonex.com/cloud/form_72883.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820026/",
            "reporter": "abuse_ch"
        }
    ],
    "3820027": [
        {
            "dateadded": "2026-04-13 13:37:20 UTC",
            "url": "https://refundonex.com/cloud/form_62809.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820027/",
            "reporter": "abuse_ch"
        }
    ],
    "3820028": [
        {
            "dateadded": "2026-04-13 13:37:20 UTC",
            "url": "https://refundonex.com/cloud/form_91107.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820028/",
            "reporter": "abuse_ch"
        }
    ],
    "3820029": [
        {
            "dateadded": "2026-04-13 13:37:20 UTC",
            "url": "https://refundonex.com/cloud/form_25276.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820029/",
            "reporter": "abuse_ch"
        }
    ],
    "3820030": [
        {
            "dateadded": "2026-04-13 13:37:20 UTC",
            "url": "https://refundonex.com/cloud/form_91478.pdf.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820030/",
            "reporter": "abuse_ch"
        }
    ],
    "3820025": [
        {
            "dateadded": "2026-04-13 13:37:19 UTC",
            "url": "https://refundonex.com/cloud/form_16764.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820025/",
            "reporter": "abuse_ch"
        }
    ],
    "3820024": [
        {
            "dateadded": "2026-04-13 13:37:18 UTC",
            "url": "https://refundonex.com/cloud/form_29943.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820024/",
            "reporter": "abuse_ch"
        }
    ],
    "3820023": [
        {
            "dateadded": "2026-04-13 13:37:17 UTC",
            "url": "https://refundonex.com/cloud/form_98722.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820023/",
            "reporter": "abuse_ch"
        }
    ],
    "3820019": [
        {
            "dateadded": "2026-04-13 13:37:16 UTC",
            "url": "https://refundonex.com/cloud/form_03767.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820019/",
            "reporter": "abuse_ch"
        }
    ],
    "3820020": [
        {
            "dateadded": "2026-04-13 13:37:16 UTC",
            "url": "https://refundonex.com/cloud/form_84705.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820020/",
            "reporter": "abuse_ch"
        }
    ],
    "3820021": [
        {
            "dateadded": "2026-04-13 13:37:16 UTC",
            "url": "https://refundonex.com/cloud/form_35369.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820021/",
            "reporter": "abuse_ch"
        }
    ],
    "3820022": [
        {
            "dateadded": "2026-04-13 13:37:16 UTC",
            "url": "https://refundonex.com/cloud/form_81592.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820022/",
            "reporter": "abuse_ch"
        }
    ],
    "3820007": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_07352.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820007/",
            "reporter": "abuse_ch"
        }
    ],
    "3820008": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_65740.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820008/",
            "reporter": "abuse_ch"
        }
    ],
    "3820009": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_79681.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820009/",
            "reporter": "abuse_ch"
        }
    ],
    "3820010": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_43634.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820010/",
            "reporter": "abuse_ch"
        }
    ],
    "3820011": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_95015.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820011/",
            "reporter": "abuse_ch"
        }
    ],
    "3820012": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_90644.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820012/",
            "reporter": "abuse_ch"
        }
    ],
    "3820013": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_46031.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820013/",
            "reporter": "abuse_ch"
        }
    ],
    "3820014": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_89789.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820014/",
            "reporter": "abuse_ch"
        }
    ],
    "3820015": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_99268.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820015/",
            "reporter": "abuse_ch"
        }
    ],
    "3820016": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_87519.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820016/",
            "reporter": "abuse_ch"
        }
    ],
    "3820017": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_64509.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820017/",
            "reporter": "abuse_ch"
        }
    ],
    "3820018": [
        {
            "dateadded": "2026-04-13 13:37:15 UTC",
            "url": "https://refundonex.com/cloud/form_25490.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820018/",
            "reporter": "abuse_ch"
        }
    ],
    "3820004": [
        {
            "dateadded": "2026-04-13 13:37:14 UTC",
            "url": "https://refundonex.com/cloud/form_13802.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820004/",
            "reporter": "abuse_ch"
        }
    ],
    "3820005": [
        {
            "dateadded": "2026-04-13 13:37:14 UTC",
            "url": "https://refundonex.com/cloud/form_06087.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820005/",
            "reporter": "abuse_ch"
        }
    ],
    "3820006": [
        {
            "dateadded": "2026-04-13 13:37:14 UTC",
            "url": "https://refundonex.com/cloud/form_82893.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820006/",
            "reporter": "abuse_ch"
        }
    ],
    "3820003": [
        {
            "dateadded": "2026-04-13 13:37:11 UTC",
            "url": "https://refundonex.com/cloud/form_91790.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820003/",
            "reporter": "abuse_ch"
        }
    ],
    "3820002": [
        {
            "dateadded": "2026-04-13 13:37:10 UTC",
            "url": "https://refundonex.com/cloud/form_20137.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820002/",
            "reporter": "abuse_ch"
        }
    ],
    "3820000": [
        {
            "dateadded": "2026-04-13 13:37:09 UTC",
            "url": "https://refundonex.com/cloud/form_11594.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820000/",
            "reporter": "abuse_ch"
        }
    ],
    "3820001": [
        {
            "dateadded": "2026-04-13 13:37:09 UTC",
            "url": "https://refundonex.com/cloud/form_36834.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3820001/",
            "reporter": "abuse_ch"
        }
    ],
    "3819998": [
        {
            "dateadded": "2026-04-13 13:37:08 UTC",
            "url": "https://refundonex.com/cloud/form_15848.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819998/",
            "reporter": "abuse_ch"
        }
    ],
    "3819999": [
        {
            "dateadded": "2026-04-13 13:37:08 UTC",
            "url": "https://refundonex.com/cloud/form_45405.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819999/",
            "reporter": "abuse_ch"
        }
    ],
    "3819992": [
        {
            "dateadded": "2026-04-13 13:37:07 UTC",
            "url": "https://refundonex.com/cloud/form_28210.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819992/",
            "reporter": "abuse_ch"
        }
    ],
    "3819993": [
        {
            "dateadded": "2026-04-13 13:37:07 UTC",
            "url": "https://refundonex.com/cloud/form_68221.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819993/",
            "reporter": "abuse_ch"
        }
    ],
    "3819994": [
        {
            "dateadded": "2026-04-13 13:37:07 UTC",
            "url": "https://refundonex.com/cloud/form_34163.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819994/",
            "reporter": "abuse_ch"
        }
    ],
    "3819995": [
        {
            "dateadded": "2026-04-13 13:37:07 UTC",
            "url": "https://refundonex.com/cloud/form_80321.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819995/",
            "reporter": "abuse_ch"
        }
    ],
    "3819996": [
        {
            "dateadded": "2026-04-13 13:37:07 UTC",
            "url": "https://refundonex.com/cloud/form_96498.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819996/",
            "reporter": "abuse_ch"
        }
    ],
    "3819997": [
        {
            "dateadded": "2026-04-13 13:37:07 UTC",
            "url": "https://refundonex.com/cloud/form_08859.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819997/",
            "reporter": "abuse_ch"
        }
    ],
    "3819988": [
        {
            "dateadded": "2026-04-13 13:37:06 UTC",
            "url": "https://refundonex.com/cloud/form_84107.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819988/",
            "reporter": "abuse_ch"
        }
    ],
    "3819989": [
        {
            "dateadded": "2026-04-13 13:37:06 UTC",
            "url": "https://refundonex.com/cloud/form_63451.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819989/",
            "reporter": "abuse_ch"
        }
    ],
    "3819990": [
        {
            "dateadded": "2026-04-13 13:37:06 UTC",
            "url": "https://refundonex.com/cloud/form_83473.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819990/",
            "reporter": "abuse_ch"
        }
    ],
    "3819991": [
        {
            "dateadded": "2026-04-13 13:37:06 UTC",
            "url": "https://refundonex.com/cloud/form_77949.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819991/",
            "reporter": "abuse_ch"
        }
    ],
    "3819987": [
        {
            "dateadded": "2026-04-13 13:37:04 UTC",
            "url": "https://refundonex.com/cloud/form_65803.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819987/",
            "reporter": "abuse_ch"
        }
    ],
    "3819984": [
        {
            "dateadded": "2026-04-13 13:37:03 UTC",
            "url": "https://refundonex.com/cloud/form_00279.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819984/",
            "reporter": "abuse_ch"
        }
    ],
    "3819985": [
        {
            "dateadded": "2026-04-13 13:37:03 UTC",
            "url": "https://refundonex.com/cloud/form_32532.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819985/",
            "reporter": "abuse_ch"
        }
    ],
    "3819986": [
        {
            "dateadded": "2026-04-13 13:37:03 UTC",
            "url": "https://refundonex.com/cloud/form_00826.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819986/",
            "reporter": "abuse_ch"
        }
    ],
    "3819983": [
        {
            "dateadded": "2026-04-13 13:37:02 UTC",
            "url": "https://refundonex.com/cloud/form_81383.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819983/",
            "reporter": "abuse_ch"
        }
    ],
    "3819976": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_66234.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819976/",
            "reporter": "abuse_ch"
        }
    ],
    "3819977": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_26097.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819977/",
            "reporter": "abuse_ch"
        }
    ],
    "3819978": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_26463.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819978/",
            "reporter": "abuse_ch"
        }
    ],
    "3819979": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_35478.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819979/",
            "reporter": "abuse_ch"
        }
    ],
    "3819980": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_72520.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819980/",
            "reporter": "abuse_ch"
        }
    ],
    "3819981": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_87626.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819981/",
            "reporter": "abuse_ch"
        }
    ],
    "3819982": [
        {
            "dateadded": "2026-04-13 13:37:01 UTC",
            "url": "https://refundonex.com/cloud/form_91747.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819982/",
            "reporter": "abuse_ch"
        }
    ],
    "3819972": [
        {
            "dateadded": "2026-04-13 13:37:00 UTC",
            "url": "https://refundonex.com/cloud/form_01211.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819972/",
            "reporter": "abuse_ch"
        }
    ],
    "3819973": [
        {
            "dateadded": "2026-04-13 13:37:00 UTC",
            "url": "https://refundonex.com/cloud/form_95509.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819973/",
            "reporter": "abuse_ch"
        }
    ],
    "3819974": [
        {
            "dateadded": "2026-04-13 13:37:00 UTC",
            "url": "https://refundonex.com/cloud/form_02643.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819974/",
            "reporter": "abuse_ch"
        }
    ],
    "3819975": [
        {
            "dateadded": "2026-04-13 13:37:00 UTC",
            "url": "https://refundonex.com/cloud/form_76012.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819975/",
            "reporter": "abuse_ch"
        }
    ],
    "3819969": [
        {
            "dateadded": "2026-04-13 13:36:59 UTC",
            "url": "https://refundonex.com/cloud/form_92157.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819969/",
            "reporter": "abuse_ch"
        }
    ],
    "3819970": [
        {
            "dateadded": "2026-04-13 13:36:59 UTC",
            "url": "https://refundonex.com/cloud/form_93549.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819970/",
            "reporter": "abuse_ch"
        }
    ],
    "3819971": [
        {
            "dateadded": "2026-04-13 13:36:59 UTC",
            "url": "https://refundonex.com/cloud/form_98882.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819971/",
            "reporter": "abuse_ch"
        }
    ],
    "3819956": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_55920.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819956/",
            "reporter": "abuse_ch"
        }
    ],
    "3819957": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_56406.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819957/",
            "reporter": "abuse_ch"
        }
    ],
    "3819958": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_13236.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819958/",
            "reporter": "abuse_ch"
        }
    ],
    "3819959": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_63640.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819959/",
            "reporter": "abuse_ch"
        }
    ],
    "3819960": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_98423.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819960/",
            "reporter": "abuse_ch"
        }
    ],
    "3819961": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_53631.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819961/",
            "reporter": "abuse_ch"
        }
    ],
    "3819962": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_83865.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819962/",
            "reporter": "abuse_ch"
        }
    ],
    "3819963": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_66977.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819963/",
            "reporter": "abuse_ch"
        }
    ],
    "3819964": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_84450.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819964/",
            "reporter": "abuse_ch"
        }
    ],
    "3819965": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_83940.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819965/",
            "reporter": "abuse_ch"
        }
    ],
    "3819966": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_98234.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819966/",
            "reporter": "abuse_ch"
        }
    ],
    "3819967": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_77324.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819967/",
            "reporter": "abuse_ch"
        }
    ],
    "3819968": [
        {
            "dateadded": "2026-04-13 13:36:57 UTC",
            "url": "https://refundonex.com/cloud/form_94833.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819968/",
            "reporter": "abuse_ch"
        }
    ],
    "3819952": [
        {
            "dateadded": "2026-04-13 13:36:55 UTC",
            "url": "https://refundonex.com/cloud/form_45276.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819952/",
            "reporter": "abuse_ch"
        }
    ],
    "3819953": [
        {
            "dateadded": "2026-04-13 13:36:55 UTC",
            "url": "https://refundonex.com/cloud/form_55920.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819953/",
            "reporter": "abuse_ch"
        }
    ],
    "3819954": [
        {
            "dateadded": "2026-04-13 13:36:55 UTC",
            "url": "https://refundonex.com/cloud/form_05941.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819954/",
            "reporter": "abuse_ch"
        }
    ],
    "3819955": [
        {
            "dateadded": "2026-04-13 13:36:55 UTC",
            "url": "https://refundonex.com/cloud/form_27140.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819955/",
            "reporter": "abuse_ch"
        }
    ],
    "3819948": [
        {
            "dateadded": "2026-04-13 13:36:53 UTC",
            "url": "https://refundonex.com/cloud/form_79294.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819948/",
            "reporter": "abuse_ch"
        }
    ],
    "3819949": [
        {
            "dateadded": "2026-04-13 13:36:53 UTC",
            "url": "https://refundonex.com/cloud/form_38670.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819949/",
            "reporter": "abuse_ch"
        }
    ],
    "3819950": [
        {
            "dateadded": "2026-04-13 13:36:53 UTC",
            "url": "https://refundonex.com/cloud/form_47014.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819950/",
            "reporter": "abuse_ch"
        }
    ],
    "3819951": [
        {
            "dateadded": "2026-04-13 13:36:53 UTC",
            "url": "https://refundonex.com/cloud/form_83640.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819951/",
            "reporter": "abuse_ch"
        }
    ],
    "3819941": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_61938.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819941/",
            "reporter": "abuse_ch"
        }
    ],
    "3819942": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_10931.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819942/",
            "reporter": "abuse_ch"
        }
    ],
    "3819943": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_36175.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819943/",
            "reporter": "abuse_ch"
        }
    ],
    "3819944": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_41312.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819944/",
            "reporter": "abuse_ch"
        }
    ],
    "3819945": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_85697.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819945/",
            "reporter": "abuse_ch"
        }
    ],
    "3819946": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_66425.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819946/",
            "reporter": "abuse_ch"
        }
    ],
    "3819947": [
        {
            "dateadded": "2026-04-13 13:36:52 UTC",
            "url": "https://refundonex.com/cloud/form_24820.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819947/",
            "reporter": "abuse_ch"
        }
    ],
    "3819939": [
        {
            "dateadded": "2026-04-13 13:36:51 UTC",
            "url": "https://refundonex.com/cloud/form_79078.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819939/",
            "reporter": "abuse_ch"
        }
    ],
    "3819940": [
        {
            "dateadded": "2026-04-13 13:36:51 UTC",
            "url": "https://refundonex.com/cloud/form_85013.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819940/",
            "reporter": "abuse_ch"
        }
    ],
    "3819932": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_46586.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819932/",
            "reporter": "abuse_ch"
        }
    ],
    "3819933": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_36406.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819933/",
            "reporter": "abuse_ch"
        }
    ],
    "3819934": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_13309.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819934/",
            "reporter": "abuse_ch"
        }
    ],
    "3819935": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_95509.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819935/",
            "reporter": "abuse_ch"
        }
    ],
    "3819936": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_72788.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819936/",
            "reporter": "abuse_ch"
        }
    ],
    "3819937": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_89593.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819937/",
            "reporter": "abuse_ch"
        }
    ],
    "3819938": [
        {
            "dateadded": "2026-04-13 13:36:50 UTC",
            "url": "https://refundonex.com/cloud/form_63640.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819938/",
            "reporter": "abuse_ch"
        }
    ],
    "3819920": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_67328.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819920/",
            "reporter": "abuse_ch"
        }
    ],
    "3819921": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_48796.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819921/",
            "reporter": "abuse_ch"
        }
    ],
    "3819922": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_65225.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819922/",
            "reporter": "abuse_ch"
        }
    ],
    "3819923": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_60056.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819923/",
            "reporter": "abuse_ch"
        }
    ],
    "3819924": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_61762.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819924/",
            "reporter": "abuse_ch"
        }
    ],
    "3819925": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_71405.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819925/",
            "reporter": "abuse_ch"
        }
    ],
    "3819926": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_88815.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819926/",
            "reporter": "abuse_ch"
        }
    ],
    "3819927": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_11651.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819927/",
            "reporter": "abuse_ch"
        }
    ],
    "3819928": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_99806.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819928/",
            "reporter": "abuse_ch"
        }
    ],
    "3819929": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_75025.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819929/",
            "reporter": "abuse_ch"
        }
    ],
    "3819930": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_84426.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819930/",
            "reporter": "abuse_ch"
        }
    ],
    "3819931": [
        {
            "dateadded": "2026-04-13 13:36:49 UTC",
            "url": "https://refundonex.com/cloud/form_16430.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819931/",
            "reporter": "abuse_ch"
        }
    ],
    "3819918": [
        {
            "dateadded": "2026-04-13 13:36:47 UTC",
            "url": "https://refundonex.com/cloud/form_74209.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819918/",
            "reporter": "abuse_ch"
        }
    ],
    "3819919": [
        {
            "dateadded": "2026-04-13 13:36:47 UTC",
            "url": "https://refundonex.com/cloud/form_43919.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819919/",
            "reporter": "abuse_ch"
        }
    ],
    "3819917": [
        {
            "dateadded": "2026-04-13 13:36:46 UTC",
            "url": "https://refundonex.com/cloud/form_41093.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819917/",
            "reporter": "abuse_ch"
        }
    ],
    "3819916": [
        {
            "dateadded": "2026-04-13 13:36:45 UTC",
            "url": "https://refundonex.com/cloud/form_97017.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819916/",
            "reporter": "abuse_ch"
        }
    ],
    "3819910": [
        {
            "dateadded": "2026-04-13 13:36:44 UTC",
            "url": "https://refundonex.com/cloud/form_29996.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819910/",
            "reporter": "abuse_ch"
        }
    ],
    "3819911": [
        {
            "dateadded": "2026-04-13 13:36:44 UTC",
            "url": "https://refundonex.com/cloud/form_61896.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819911/",
            "reporter": "abuse_ch"
        }
    ],
    "3819912": [
        {
            "dateadded": "2026-04-13 13:36:44 UTC",
            "url": "https://refundonex.com/cloud/form_13316.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819912/",
            "reporter": "abuse_ch"
        }
    ],
    "3819913": [
        {
            "dateadded": "2026-04-13 13:36:44 UTC",
            "url": "https://refundonex.com/cloud/form_88088.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819913/",
            "reporter": "abuse_ch"
        }
    ],
    "3819914": [
        {
            "dateadded": "2026-04-13 13:36:44 UTC",
            "url": "https://refundonex.com/cloud/form_79483.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819914/",
            "reporter": "abuse_ch"
        }
    ],
    "3819915": [
        {
            "dateadded": "2026-04-13 13:36:44 UTC",
            "url": "https://refundonex.com/cloud/form_94834.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819915/",
            "reporter": "abuse_ch"
        }
    ],
    "3819909": [
        {
            "dateadded": "2026-04-13 13:36:43 UTC",
            "url": "https://refundonex.com/cloud/form_39368.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819909/",
            "reporter": "abuse_ch"
        }
    ],
    "3819904": [
        {
            "dateadded": "2026-04-13 13:36:42 UTC",
            "url": "https://refundonex.com/cloud/form_99043.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819904/",
            "reporter": "abuse_ch"
        }
    ],
    "3819905": [
        {
            "dateadded": "2026-04-13 13:36:42 UTC",
            "url": "https://refundonex.com/cloud/form_91997.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819905/",
            "reporter": "abuse_ch"
        }
    ],
    "3819906": [
        {
            "dateadded": "2026-04-13 13:36:42 UTC",
            "url": "https://refundonex.com/cloud/form_64040.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819906/",
            "reporter": "abuse_ch"
        }
    ],
    "3819907": [
        {
            "dateadded": "2026-04-13 13:36:42 UTC",
            "url": "https://refundonex.com/cloud/form_88746.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819907/",
            "reporter": "abuse_ch"
        }
    ],
    "3819908": [
        {
            "dateadded": "2026-04-13 13:36:42 UTC",
            "url": "https://refundonex.com/cloud/form_07301.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819908/",
            "reporter": "abuse_ch"
        }
    ],
    "3819902": [
        {
            "dateadded": "2026-04-13 13:36:41 UTC",
            "url": "https://refundonex.com/cloud/form_65651.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819902/",
            "reporter": "abuse_ch"
        }
    ],
    "3819903": [
        {
            "dateadded": "2026-04-13 13:36:41 UTC",
            "url": "https://refundonex.com/cloud/form_64538.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819903/",
            "reporter": "abuse_ch"
        }
    ],
    "3819898": [
        {
            "dateadded": "2026-04-13 13:36:40 UTC",
            "url": "https://refundonex.com/cloud/form_85772.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819898/",
            "reporter": "abuse_ch"
        }
    ],
    "3819899": [
        {
            "dateadded": "2026-04-13 13:36:40 UTC",
            "url": "https://refundonex.com/cloud/form_90767.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819899/",
            "reporter": "abuse_ch"
        }
    ],
    "3819900": [
        {
            "dateadded": "2026-04-13 13:36:40 UTC",
            "url": "https://refundonex.com/cloud/form_39203.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819900/",
            "reporter": "abuse_ch"
        }
    ],
    "3819901": [
        {
            "dateadded": "2026-04-13 13:36:40 UTC",
            "url": "https://refundonex.com/cloud/form_78515.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819901/",
            "reporter": "abuse_ch"
        }
    ],
    "3819894": [
        {
            "dateadded": "2026-04-13 13:36:39 UTC",
            "url": "https://refundonex.com/cloud/form_83777.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819894/",
            "reporter": "abuse_ch"
        }
    ],
    "3819895": [
        {
            "dateadded": "2026-04-13 13:36:39 UTC",
            "url": "https://refundonex.com/cloud/form_13097.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819895/",
            "reporter": "abuse_ch"
        }
    ],
    "3819896": [
        {
            "dateadded": "2026-04-13 13:36:39 UTC",
            "url": "https://refundonex.com/cloud/form_60502.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819896/",
            "reporter": "abuse_ch"
        }
    ],
    "3819897": [
        {
            "dateadded": "2026-04-13 13:36:39 UTC",
            "url": "https://refundonex.com/cloud/form_33197.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819897/",
            "reporter": "abuse_ch"
        }
    ],
    "3819885": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_01535.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819885/",
            "reporter": "abuse_ch"
        }
    ],
    "3819886": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_85892.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819886/",
            "reporter": "abuse_ch"
        }
    ],
    "3819887": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_15181.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819887/",
            "reporter": "abuse_ch"
        }
    ],
    "3819888": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_81271.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819888/",
            "reporter": "abuse_ch"
        }
    ],
    "3819889": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_90583.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819889/",
            "reporter": "abuse_ch"
        }
    ],
    "3819890": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_64509.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819890/",
            "reporter": "abuse_ch"
        }
    ],
    "3819891": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_50999.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819891/",
            "reporter": "abuse_ch"
        }
    ],
    "3819892": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_74028.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819892/",
            "reporter": "abuse_ch"
        }
    ],
    "3819893": [
        {
            "dateadded": "2026-04-13 13:36:38 UTC",
            "url": "https://refundonex.com/cloud/form_25110.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819893/",
            "reporter": "abuse_ch"
        }
    ],
    "3819880": [
        {
            "dateadded": "2026-04-13 13:36:37 UTC",
            "url": "https://refundonex.com/cloud/form_89593.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819880/",
            "reporter": "abuse_ch"
        }
    ],
    "3819881": [
        {
            "dateadded": "2026-04-13 13:36:37 UTC",
            "url": "https://refundonex.com/cloud/form_97426.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819881/",
            "reporter": "abuse_ch"
        }
    ],
    "3819882": [
        {
            "dateadded": "2026-04-13 13:36:37 UTC",
            "url": "https://refundonex.com/cloud/form_69035.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819882/",
            "reporter": "abuse_ch"
        }
    ],
    "3819883": [
        {
            "dateadded": "2026-04-13 13:36:37 UTC",
            "url": "https://refundonex.com/cloud/form_42426.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819883/",
            "reporter": "abuse_ch"
        }
    ],
    "3819884": [
        {
            "dateadded": "2026-04-13 13:36:37 UTC",
            "url": "https://refundonex.com/cloud/form_03796.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819884/",
            "reporter": "abuse_ch"
        }
    ],
    "3819878": [
        {
            "dateadded": "2026-04-13 13:36:36 UTC",
            "url": "https://refundonex.com/cloud/form_85262.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819878/",
            "reporter": "abuse_ch"
        }
    ],
    "3819879": [
        {
            "dateadded": "2026-04-13 13:36:36 UTC",
            "url": "https://refundonex.com/cloud/form_78812.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819879/",
            "reporter": "abuse_ch"
        }
    ],
    "3819875": [
        {
            "dateadded": "2026-04-13 13:36:35 UTC",
            "url": "https://refundonex.com/cloud/form_11549.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819875/",
            "reporter": "abuse_ch"
        }
    ],
    "3819876": [
        {
            "dateadded": "2026-04-13 13:36:35 UTC",
            "url": "https://refundonex.com/cloud/form_30329.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819876/",
            "reporter": "abuse_ch"
        }
    ],
    "3819877": [
        {
            "dateadded": "2026-04-13 13:36:35 UTC",
            "url": "https://refundonex.com/cloud/form_37707.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819877/",
            "reporter": "abuse_ch"
        }
    ],
    "3819867": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_84839.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819867/",
            "reporter": "abuse_ch"
        }
    ],
    "3819868": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_53430.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819868/",
            "reporter": "abuse_ch"
        }
    ],
    "3819869": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_67655.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819869/",
            "reporter": "abuse_ch"
        }
    ],
    "3819870": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_20882.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819870/",
            "reporter": "abuse_ch"
        }
    ],
    "3819871": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_49151.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819871/",
            "reporter": "abuse_ch"
        }
    ],
    "3819872": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_27329.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819872/",
            "reporter": "abuse_ch"
        }
    ],
    "3819873": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_34916.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819873/",
            "reporter": "abuse_ch"
        }
    ],
    "3819874": [
        {
            "dateadded": "2026-04-13 13:36:34 UTC",
            "url": "https://refundonex.com/cloud/form_62911.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819874/",
            "reporter": "abuse_ch"
        }
    ],
    "3819861": [
        {
            "dateadded": "2026-04-13 13:36:30 UTC",
            "url": "https://refundonex.com/cloud/form_87253.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819861/",
            "reporter": "abuse_ch"
        }
    ],
    "3819862": [
        {
            "dateadded": "2026-04-13 13:36:30 UTC",
            "url": "https://refundonex.com/cloud/form_68362.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819862/",
            "reporter": "abuse_ch"
        }
    ],
    "3819863": [
        {
            "dateadded": "2026-04-13 13:36:30 UTC",
            "url": "https://refundonex.com/cloud/form_93995.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819863/",
            "reporter": "abuse_ch"
        }
    ],
    "3819864": [
        {
            "dateadded": "2026-04-13 13:36:30 UTC",
            "url": "https://refundonex.com/cloud/form_18811.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819864/",
            "reporter": "abuse_ch"
        }
    ],
    "3819865": [
        {
            "dateadded": "2026-04-13 13:36:30 UTC",
            "url": "https://refundonex.com/cloud/form_56161.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819865/",
            "reporter": "abuse_ch"
        }
    ],
    "3819866": [
        {
            "dateadded": "2026-04-13 13:36:30 UTC",
            "url": "https://refundonex.com/cloud/form_34496.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819866/",
            "reporter": "abuse_ch"
        }
    ],
    "3819859": [
        {
            "dateadded": "2026-04-13 13:36:29 UTC",
            "url": "https://refundonex.com/cloud/form_55953.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819859/",
            "reporter": "abuse_ch"
        }
    ],
    "3819860": [
        {
            "dateadded": "2026-04-13 13:36:29 UTC",
            "url": "https://refundonex.com/cloud/form_12110.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819860/",
            "reporter": "abuse_ch"
        }
    ],
    "3819850": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_21336.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819850/",
            "reporter": "abuse_ch"
        }
    ],
    "3819851": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_98790.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819851/",
            "reporter": "abuse_ch"
        }
    ],
    "3819852": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_22996.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819852/",
            "reporter": "abuse_ch"
        }
    ],
    "3819853": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_05194.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819853/",
            "reporter": "abuse_ch"
        }
    ],
    "3819854": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_03478.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819854/",
            "reporter": "abuse_ch"
        }
    ],
    "3819855": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_07828.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819855/",
            "reporter": "abuse_ch"
        }
    ],
    "3819856": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_69035.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819856/",
            "reporter": "abuse_ch"
        }
    ],
    "3819857": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_24978.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819857/",
            "reporter": "abuse_ch"
        }
    ],
    "3819858": [
        {
            "dateadded": "2026-04-13 13:36:28 UTC",
            "url": "https://refundonex.com/cloud/form_23430.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819858/",
            "reporter": "abuse_ch"
        }
    ],
    "3819845": [
        {
            "dateadded": "2026-04-13 13:36:27 UTC",
            "url": "https://refundonex.com/cloud/form_75982.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819845/",
            "reporter": "abuse_ch"
        }
    ],
    "3819846": [
        {
            "dateadded": "2026-04-13 13:36:27 UTC",
            "url": "https://refundonex.com/cloud/form_68622.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819846/",
            "reporter": "abuse_ch"
        }
    ],
    "3819847": [
        {
            "dateadded": "2026-04-13 13:36:27 UTC",
            "url": "https://refundonex.com/cloud/form_18664.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819847/",
            "reporter": "abuse_ch"
        }
    ],
    "3819848": [
        {
            "dateadded": "2026-04-13 13:36:27 UTC",
            "url": "https://refundonex.com/cloud/form_13881.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819848/",
            "reporter": "abuse_ch"
        }
    ],
    "3819849": [
        {
            "dateadded": "2026-04-13 13:36:27 UTC",
            "url": "https://refundonex.com/cloud/form_35403.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819849/",
            "reporter": "abuse_ch"
        }
    ],
    "3819842": [
        {
            "dateadded": "2026-04-13 13:36:26 UTC",
            "url": "https://refundonex.com/cloud/form_72201.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819842/",
            "reporter": "abuse_ch"
        }
    ],
    "3819843": [
        {
            "dateadded": "2026-04-13 13:36:26 UTC",
            "url": "https://refundonex.com/cloud/form_59474.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819843/",
            "reporter": "abuse_ch"
        }
    ],
    "3819844": [
        {
            "dateadded": "2026-04-13 13:36:26 UTC",
            "url": "https://refundonex.com/cloud/form_68148.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819844/",
            "reporter": "abuse_ch"
        }
    ],
    "3819840": [
        {
            "dateadded": "2026-04-13 13:36:25 UTC",
            "url": "https://refundonex.com/cloud/form_05801.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819840/",
            "reporter": "abuse_ch"
        }
    ],
    "3819841": [
        {
            "dateadded": "2026-04-13 13:36:25 UTC",
            "url": "https://refundonex.com/cloud/form_17312.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819841/",
            "reporter": "abuse_ch"
        }
    ],
    "3819834": [
        {
            "dateadded": "2026-04-13 13:36:24 UTC",
            "url": "https://refundonex.com/cloud/form_96728.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819834/",
            "reporter": "abuse_ch"
        }
    ],
    "3819835": [
        {
            "dateadded": "2026-04-13 13:36:24 UTC",
            "url": "https://refundonex.com/cloud/form_84426.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819835/",
            "reporter": "abuse_ch"
        }
    ],
    "3819836": [
        {
            "dateadded": "2026-04-13 13:36:24 UTC",
            "url": "https://refundonex.com/cloud/form_68501.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819836/",
            "reporter": "abuse_ch"
        }
    ],
    "3819837": [
        {
            "dateadded": "2026-04-13 13:36:24 UTC",
            "url": "https://refundonex.com/cloud/form_34496.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819837/",
            "reporter": "abuse_ch"
        }
    ],
    "3819838": [
        {
            "dateadded": "2026-04-13 13:36:24 UTC",
            "url": "https://refundonex.com/cloud/form_17005.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819838/",
            "reporter": "abuse_ch"
        }
    ],
    "3819839": [
        {
            "dateadded": "2026-04-13 13:36:24 UTC",
            "url": "https://refundonex.com/cloud/form_86869.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819839/",
            "reporter": "abuse_ch"
        }
    ],
    "3819831": [
        {
            "dateadded": "2026-04-13 13:36:23 UTC",
            "url": "https://refundonex.com/cloud/form_58115.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819831/",
            "reporter": "abuse_ch"
        }
    ],
    "3819832": [
        {
            "dateadded": "2026-04-13 13:36:23 UTC",
            "url": "https://refundonex.com/cloud/form_85262.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819832/",
            "reporter": "abuse_ch"
        }
    ],
    "3819833": [
        {
            "dateadded": "2026-04-13 13:36:23 UTC",
            "url": "https://refundonex.com/cloud/form_25906.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819833/",
            "reporter": "abuse_ch"
        }
    ],
    "3819829": [
        {
            "dateadded": "2026-04-13 13:36:22 UTC",
            "url": "https://refundonex.com/cloud/form_87491.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819829/",
            "reporter": "abuse_ch"
        }
    ],
    "3819830": [
        {
            "dateadded": "2026-04-13 13:36:22 UTC",
            "url": "https://refundonex.com/cloud/form_97508.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819830/",
            "reporter": "abuse_ch"
        }
    ],
    "3819823": [
        {
            "dateadded": "2026-04-13 13:36:21 UTC",
            "url": "https://refundonex.com/cloud/form_62609.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819823/",
            "reporter": "abuse_ch"
        }
    ],
    "3819824": [
        {
            "dateadded": "2026-04-13 13:36:21 UTC",
            "url": "https://refundonex.com/cloud/form_61896.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819824/",
            "reporter": "abuse_ch"
        }
    ],
    "3819825": [
        {
            "dateadded": "2026-04-13 13:36:21 UTC",
            "url": "https://refundonex.com/cloud/form_02024.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819825/",
            "reporter": "abuse_ch"
        }
    ],
    "3819826": [
        {
            "dateadded": "2026-04-13 13:36:21 UTC",
            "url": "https://refundonex.com/cloud/form_21473.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819826/",
            "reporter": "abuse_ch"
        }
    ],
    "3819827": [
        {
            "dateadded": "2026-04-13 13:36:21 UTC",
            "url": "https://refundonex.com/cloud/form_12397.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819827/",
            "reporter": "abuse_ch"
        }
    ],
    "3819828": [
        {
            "dateadded": "2026-04-13 13:36:21 UTC",
            "url": "https://refundonex.com/cloud/form_10624.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819828/",
            "reporter": "abuse_ch"
        }
    ],
    "3819820": [
        {
            "dateadded": "2026-04-13 13:36:20 UTC",
            "url": "https://refundonex.com/cloud/form_16010.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819820/",
            "reporter": "abuse_ch"
        }
    ],
    "3819821": [
        {
            "dateadded": "2026-04-13 13:36:20 UTC",
            "url": "https://refundonex.com/cloud/form_18664.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819821/",
            "reporter": "abuse_ch"
        }
    ],
    "3819822": [
        {
            "dateadded": "2026-04-13 13:36:20 UTC",
            "url": "https://refundonex.com/cloud/form_55292.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819822/",
            "reporter": "abuse_ch"
        }
    ],
    "3819815": [
        {
            "dateadded": "2026-04-13 13:36:19 UTC",
            "url": "https://refundonex.com/cloud/form_79483.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819815/",
            "reporter": "abuse_ch"
        }
    ],
    "3819816": [
        {
            "dateadded": "2026-04-13 13:36:19 UTC",
            "url": "https://refundonex.com/cloud/form_08667.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819816/",
            "reporter": "abuse_ch"
        }
    ],
    "3819817": [
        {
            "dateadded": "2026-04-13 13:36:19 UTC",
            "url": "https://refundonex.com/cloud/form_97508.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819817/",
            "reporter": "abuse_ch"
        }
    ],
    "3819818": [
        {
            "dateadded": "2026-04-13 13:36:19 UTC",
            "url": "https://refundonex.com/cloud/form_83473.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819818/",
            "reporter": "abuse_ch"
        }
    ],
    "3819819": [
        {
            "dateadded": "2026-04-13 13:36:19 UTC",
            "url": "https://refundonex.com/cloud/form_17312.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819819/",
            "reporter": "abuse_ch"
        }
    ],
    "3819807": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_54354.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819807/",
            "reporter": "abuse_ch"
        }
    ],
    "3819808": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_82276.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819808/",
            "reporter": "abuse_ch"
        }
    ],
    "3819809": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_33845.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819809/",
            "reporter": "abuse_ch"
        }
    ],
    "3819810": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_40358.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819810/",
            "reporter": "abuse_ch"
        }
    ],
    "3819811": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_53196.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819811/",
            "reporter": "abuse_ch"
        }
    ],
    "3819812": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_79342.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819812/",
            "reporter": "abuse_ch"
        }
    ],
    "3819813": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_46084.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819813/",
            "reporter": "abuse_ch"
        }
    ],
    "3819814": [
        {
            "dateadded": "2026-04-13 13:36:18 UTC",
            "url": "https://refundonex.com/cloud/form_05194.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819814/",
            "reporter": "abuse_ch"
        }
    ],
    "3819805": [
        {
            "dateadded": "2026-04-13 13:36:17 UTC",
            "url": "https://refundonex.com/cloud/form_12525.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819805/",
            "reporter": "abuse_ch"
        }
    ],
    "3819806": [
        {
            "dateadded": "2026-04-13 13:36:17 UTC",
            "url": "https://refundonex.com/cloud/form_98937.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819806/",
            "reporter": "abuse_ch"
        }
    ],
    "3819803": [
        {
            "dateadded": "2026-04-13 13:36:16 UTC",
            "url": "https://refundonex.com/cloud/form_10718.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819803/",
            "reporter": "abuse_ch"
        }
    ],
    "3819804": [
        {
            "dateadded": "2026-04-13 13:36:16 UTC",
            "url": "https://refundonex.com/cloud/form_37616.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819804/",
            "reporter": "abuse_ch"
        }
    ],
    "3819801": [
        {
            "dateadded": "2026-04-13 13:36:15 UTC",
            "url": "https://refundonex.com/cloud/form_38374.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819801/",
            "reporter": "abuse_ch"
        }
    ],
    "3819802": [
        {
            "dateadded": "2026-04-13 13:36:15 UTC",
            "url": "https://refundonex.com/cloud/form_66758.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819802/",
            "reporter": "abuse_ch"
        }
    ],
    "3819798": [
        {
            "dateadded": "2026-04-13 13:36:14 UTC",
            "url": "https://refundonex.com/cloud/form_02324.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819798/",
            "reporter": "abuse_ch"
        }
    ],
    "3819799": [
        {
            "dateadded": "2026-04-13 13:36:14 UTC",
            "url": "https://refundonex.com/cloud/form_20396.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819799/",
            "reporter": "abuse_ch"
        }
    ],
    "3819800": [
        {
            "dateadded": "2026-04-13 13:36:14 UTC",
            "url": "https://refundonex.com/cloud/form_79342.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819800/",
            "reporter": "abuse_ch"
        }
    ],
    "3819795": [
        {
            "dateadded": "2026-04-13 13:36:13 UTC",
            "url": "https://refundonex.com/cloud/form_83473.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819795/",
            "reporter": "abuse_ch"
        }
    ],
    "3819796": [
        {
            "dateadded": "2026-04-13 13:36:13 UTC",
            "url": "https://refundonex.com/cloud/form_60666.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819796/",
            "reporter": "abuse_ch"
        }
    ],
    "3819797": [
        {
            "dateadded": "2026-04-13 13:36:13 UTC",
            "url": "https://refundonex.com/cloud/form_59665.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819797/",
            "reporter": "abuse_ch"
        }
    ],
    "3819790": [
        {
            "dateadded": "2026-04-13 13:36:12 UTC",
            "url": "https://refundonex.com/cloud/form_11549.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819790/",
            "reporter": "abuse_ch"
        }
    ],
    "3819791": [
        {
            "dateadded": "2026-04-13 13:36:12 UTC",
            "url": "https://refundonex.com/cloud/form_27245.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819791/",
            "reporter": "abuse_ch"
        }
    ],
    "3819792": [
        {
            "dateadded": "2026-04-13 13:36:12 UTC",
            "url": "https://refundonex.com/cloud/form_22845.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819792/",
            "reporter": "abuse_ch"
        }
    ],
    "3819793": [
        {
            "dateadded": "2026-04-13 13:36:12 UTC",
            "url": "https://refundonex.com/cloud/form_90950.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819793/",
            "reporter": "abuse_ch"
        }
    ],
    "3819794": [
        {
            "dateadded": "2026-04-13 13:36:12 UTC",
            "url": "https://refundonex.com/cloud/form_87533.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819794/",
            "reporter": "abuse_ch"
        }
    ],
    "3819789": [
        {
            "dateadded": "2026-04-13 13:36:11 UTC",
            "url": "https://refundonex.com/cloud/form_33337.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819789/",
            "reporter": "abuse_ch"
        }
    ],
    "3819783": [
        {
            "dateadded": "2026-04-13 13:36:10 UTC",
            "url": "https://refundonex.com/cloud/form_09625.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819783/",
            "reporter": "abuse_ch"
        }
    ],
    "3819784": [
        {
            "dateadded": "2026-04-13 13:36:10 UTC",
            "url": "https://refundonex.com/cloud/form_69962.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819784/",
            "reporter": "abuse_ch"
        }
    ],
    "3819785": [
        {
            "dateadded": "2026-04-13 13:36:10 UTC",
            "url": "https://refundonex.com/cloud/form_86842.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819785/",
            "reporter": "abuse_ch"
        }
    ],
    "3819786": [
        {
            "dateadded": "2026-04-13 13:36:10 UTC",
            "url": "https://refundonex.com/cloud/form_09625.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819786/",
            "reporter": "abuse_ch"
        }
    ],
    "3819787": [
        {
            "dateadded": "2026-04-13 13:36:10 UTC",
            "url": "https://refundonex.com/cloud/form_29513.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819787/",
            "reporter": "abuse_ch"
        }
    ],
    "3819788": [
        {
            "dateadded": "2026-04-13 13:36:10 UTC",
            "url": "https://refundonex.com/cloud/form_26708.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819788/",
            "reporter": "abuse_ch"
        }
    ],
    "3819779": [
        {
            "dateadded": "2026-04-13 13:36:09 UTC",
            "url": "https://refundonex.com/cloud/form_75496.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819779/",
            "reporter": "abuse_ch"
        }
    ],
    "3819780": [
        {
            "dateadded": "2026-04-13 13:36:09 UTC",
            "url": "https://refundonex.com/cloud/form_56400.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819780/",
            "reporter": "abuse_ch"
        }
    ],
    "3819781": [
        {
            "dateadded": "2026-04-13 13:36:09 UTC",
            "url": "https://refundonex.com/cloud/form_20882.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819781/",
            "reporter": "abuse_ch"
        }
    ],
    "3819782": [
        {
            "dateadded": "2026-04-13 13:36:09 UTC",
            "url": "https://refundonex.com/cloud/form_48547.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819782/",
            "reporter": "abuse_ch"
        }
    ],
    "3819775": [
        {
            "dateadded": "2026-04-13 13:36:08 UTC",
            "url": "https://refundonex.com/cloud/form_69394.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819775/",
            "reporter": "abuse_ch"
        }
    ],
    "3819776": [
        {
            "dateadded": "2026-04-13 13:36:08 UTC",
            "url": "https://refundonex.com/cloud/form_91865.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819776/",
            "reporter": "abuse_ch"
        }
    ],
    "3819777": [
        {
            "dateadded": "2026-04-13 13:36:08 UTC",
            "url": "https://refundonex.com/cloud/form_80321.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819777/",
            "reporter": "abuse_ch"
        }
    ],
    "3819778": [
        {
            "dateadded": "2026-04-13 13:36:08 UTC",
            "url": "https://refundonex.com/cloud/form_21603.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819778/",
            "reporter": "abuse_ch"
        }
    ],
    "3819771": [
        {
            "dateadded": "2026-04-13 13:36:07 UTC",
            "url": "https://refundonex.com/cloud/form_06290.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819771/",
            "reporter": "abuse_ch"
        }
    ],
    "3819772": [
        {
            "dateadded": "2026-04-13 13:36:07 UTC",
            "url": "https://refundonex.com/cloud/form_57655.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819772/",
            "reporter": "abuse_ch"
        }
    ],
    "3819773": [
        {
            "dateadded": "2026-04-13 13:36:07 UTC",
            "url": "https://refundonex.com/cloud/form_04630.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819773/",
            "reporter": "abuse_ch"
        }
    ],
    "3819774": [
        {
            "dateadded": "2026-04-13 13:36:07 UTC",
            "url": "https://refundonex.com/cloud/form_72333.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819774/",
            "reporter": "abuse_ch"
        }
    ],
    "3819767": [
        {
            "dateadded": "2026-04-13 13:36:06 UTC",
            "url": "https://refundonex.com/cloud/form_52435.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819767/",
            "reporter": "abuse_ch"
        }
    ],
    "3819768": [
        {
            "dateadded": "2026-04-13 13:36:06 UTC",
            "url": "https://refundonex.com/cloud/form_90767.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819768/",
            "reporter": "abuse_ch"
        }
    ],
    "3819769": [
        {
            "dateadded": "2026-04-13 13:36:06 UTC",
            "url": "https://refundonex.com/cloud/form_68583.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819769/",
            "reporter": "abuse_ch"
        }
    ],
    "3819770": [
        {
            "dateadded": "2026-04-13 13:36:06 UTC",
            "url": "https://refundonex.com/cloud/form_81148.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819770/",
            "reporter": "abuse_ch"
        }
    ],
    "3819764": [
        {
            "dateadded": "2026-04-13 13:36:05 UTC",
            "url": "https://refundonex.com/cloud/form_44883.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819764/",
            "reporter": "abuse_ch"
        }
    ],
    "3819765": [
        {
            "dateadded": "2026-04-13 13:36:05 UTC",
            "url": "https://refundonex.com/cloud/form_28685.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819765/",
            "reporter": "abuse_ch"
        }
    ],
    "3819766": [
        {
            "dateadded": "2026-04-13 13:36:05 UTC",
            "url": "https://refundonex.com/cloud/form_11651.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819766/",
            "reporter": "abuse_ch"
        }
    ],
    "3819761": [
        {
            "dateadded": "2026-04-13 13:36:04 UTC",
            "url": "https://refundonex.com/cloud/form_56298.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819761/",
            "reporter": "abuse_ch"
        }
    ],
    "3819762": [
        {
            "dateadded": "2026-04-13 13:36:04 UTC",
            "url": "https://refundonex.com/cloud/form_20786.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819762/",
            "reporter": "abuse_ch"
        }
    ],
    "3819763": [
        {
            "dateadded": "2026-04-13 13:36:04 UTC",
            "url": "https://refundonex.com/cloud/form_23908.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819763/",
            "reporter": "abuse_ch"
        }
    ],
    "3819757": [
        {
            "dateadded": "2026-04-13 13:36:03 UTC",
            "url": "https://refundonex.com/cloud/form_90347.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819757/",
            "reporter": "abuse_ch"
        }
    ],
    "3819758": [
        {
            "dateadded": "2026-04-13 13:36:03 UTC",
            "url": "https://refundonex.com/cloud/form_22533.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819758/",
            "reporter": "abuse_ch"
        }
    ],
    "3819759": [
        {
            "dateadded": "2026-04-13 13:36:03 UTC",
            "url": "https://refundonex.com/cloud/form_99084.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819759/",
            "reporter": "abuse_ch"
        }
    ],
    "3819760": [
        {
            "dateadded": "2026-04-13 13:36:03 UTC",
            "url": "https://refundonex.com/cloud/form_99043.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819760/",
            "reporter": "abuse_ch"
        }
    ],
    "3819756": [
        {
            "dateadded": "2026-04-13 13:36:02 UTC",
            "url": "https://refundonex.com/cloud/form_31677.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:02 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819756/",
            "reporter": "abuse_ch"
        }
    ],
    "3819751": [
        {
            "dateadded": "2026-04-13 13:36:00 UTC",
            "url": "https://refundonex.com/cloud/form_88693.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819751/",
            "reporter": "abuse_ch"
        }
    ],
    "3819752": [
        {
            "dateadded": "2026-04-13 13:36:00 UTC",
            "url": "https://refundonex.com/cloud/form_08380.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819752/",
            "reporter": "abuse_ch"
        }
    ],
    "3819753": [
        {
            "dateadded": "2026-04-13 13:36:00 UTC",
            "url": "https://refundonex.com/cloud/form_37131.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819753/",
            "reporter": "abuse_ch"
        }
    ],
    "3819754": [
        {
            "dateadded": "2026-04-13 13:36:00 UTC",
            "url": "https://refundonex.com/cloud/form_81040.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819754/",
            "reporter": "abuse_ch"
        }
    ],
    "3819755": [
        {
            "dateadded": "2026-04-13 13:36:00 UTC",
            "url": "https://refundonex.com/cloud/form_64898.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819755/",
            "reporter": "abuse_ch"
        }
    ],
    "3819749": [
        {
            "dateadded": "2026-04-13 13:35:59 UTC",
            "url": "https://refundonex.com/cloud/form_20126.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819749/",
            "reporter": "abuse_ch"
        }
    ],
    "3819750": [
        {
            "dateadded": "2026-04-13 13:35:59 UTC",
            "url": "https://refundonex.com/cloud/form_76995.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819750/",
            "reporter": "abuse_ch"
        }
    ],
    "3819741": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_23564.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819741/",
            "reporter": "abuse_ch"
        }
    ],
    "3819742": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_53313.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819742/",
            "reporter": "abuse_ch"
        }
    ],
    "3819743": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_81383.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819743/",
            "reporter": "abuse_ch"
        }
    ],
    "3819744": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_37816.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819744/",
            "reporter": "abuse_ch"
        }
    ],
    "3819745": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_94040.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819745/",
            "reporter": "abuse_ch"
        }
    ],
    "3819746": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_76148.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819746/",
            "reporter": "abuse_ch"
        }
    ],
    "3819747": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_46475.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819747/",
            "reporter": "abuse_ch"
        }
    ],
    "3819748": [
        {
            "dateadded": "2026-04-13 13:35:58 UTC",
            "url": "https://refundonex.com/cloud/form_07950.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819748/",
            "reporter": "abuse_ch"
        }
    ],
    "3819734": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_47796.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819734/",
            "reporter": "abuse_ch"
        }
    ],
    "3819735": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_02024.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819735/",
            "reporter": "abuse_ch"
        }
    ],
    "3819736": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_13720.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819736/",
            "reporter": "abuse_ch"
        }
    ],
    "3819737": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_12660.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819737/",
            "reporter": "abuse_ch"
        }
    ],
    "3819738": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_60763.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819738/",
            "reporter": "abuse_ch"
        }
    ],
    "3819739": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_92910.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819739/",
            "reporter": "abuse_ch"
        }
    ],
    "3819740": [
        {
            "dateadded": "2026-04-13 13:35:57 UTC",
            "url": "https://refundonex.com/cloud/form_33018.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819740/",
            "reporter": "abuse_ch"
        }
    ],
    "3819732": [
        {
            "dateadded": "2026-04-13 13:35:56 UTC",
            "url": "https://refundonex.com/cloud/form_66977.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819732/",
            "reporter": "abuse_ch"
        }
    ],
    "3819733": [
        {
            "dateadded": "2026-04-13 13:35:56 UTC",
            "url": "https://refundonex.com/cloud/form_28358.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819733/",
            "reporter": "abuse_ch"
        }
    ],
    "3819731": [
        {
            "dateadded": "2026-04-13 13:35:55 UTC",
            "url": "https://refundonex.com/cloud/form_03674.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819731/",
            "reporter": "abuse_ch"
        }
    ],
    "3819726": [
        {
            "dateadded": "2026-04-13 13:35:54 UTC",
            "url": "https://refundonex.com/cloud/form_92625.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819726/",
            "reporter": "abuse_ch"
        }
    ],
    "3819727": [
        {
            "dateadded": "2026-04-13 13:35:54 UTC",
            "url": "https://refundonex.com/cloud/form_36677.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819727/",
            "reporter": "abuse_ch"
        }
    ],
    "3819728": [
        {
            "dateadded": "2026-04-13 13:35:54 UTC",
            "url": "https://refundonex.com/cloud/form_43756.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819728/",
            "reporter": "abuse_ch"
        }
    ],
    "3819729": [
        {
            "dateadded": "2026-04-13 13:35:54 UTC",
            "url": "https://refundonex.com/cloud/form_16459.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819729/",
            "reporter": "abuse_ch"
        }
    ],
    "3819730": [
        {
            "dateadded": "2026-04-13 13:35:54 UTC",
            "url": "https://refundonex.com/cloud/form_93813.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819730/",
            "reporter": "abuse_ch"
        }
    ],
    "3819725": [
        {
            "dateadded": "2026-04-13 13:35:53 UTC",
            "url": "https://refundonex.com/cloud/form_42322.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819725/",
            "reporter": "abuse_ch"
        }
    ],
    "3819724": [
        {
            "dateadded": "2026-04-13 13:35:52 UTC",
            "url": "https://refundonex.com/cloud/form_00492.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819724/",
            "reporter": "abuse_ch"
        }
    ],
    "3819720": [
        {
            "dateadded": "2026-04-13 13:35:51 UTC",
            "url": "https://refundonex.com/cloud/form_23536.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819720/",
            "reporter": "abuse_ch"
        }
    ],
    "3819721": [
        {
            "dateadded": "2026-04-13 13:35:51 UTC",
            "url": "https://refundonex.com/cloud/form_88088.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819721/",
            "reporter": "abuse_ch"
        }
    ],
    "3819722": [
        {
            "dateadded": "2026-04-13 13:35:51 UTC",
            "url": "https://refundonex.com/cloud/form_81650.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819722/",
            "reporter": "abuse_ch"
        }
    ],
    "3819723": [
        {
            "dateadded": "2026-04-13 13:35:51 UTC",
            "url": "https://refundonex.com/cloud/form_99162.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819723/",
            "reporter": "abuse_ch"
        }
    ],
    "3819713": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_18811.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819713/",
            "reporter": "abuse_ch"
        }
    ],
    "3819714": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_02881.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819714/",
            "reporter": "abuse_ch"
        }
    ],
    "3819715": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_55259.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819715/",
            "reporter": "abuse_ch"
        }
    ],
    "3819716": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_96565.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819716/",
            "reporter": "abuse_ch"
        }
    ],
    "3819717": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_47630.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819717/",
            "reporter": "abuse_ch"
        }
    ],
    "3819718": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_63809.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819718/",
            "reporter": "abuse_ch"
        }
    ],
    "3819719": [
        {
            "dateadded": "2026-04-13 13:35:50 UTC",
            "url": "https://refundonex.com/cloud/form_41668.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819719/",
            "reporter": "abuse_ch"
        }
    ],
    "3819710": [
        {
            "dateadded": "2026-04-13 13:35:49 UTC",
            "url": "https://refundonex.com/cloud/form_62931.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819710/",
            "reporter": "abuse_ch"
        }
    ],
    "3819711": [
        {
            "dateadded": "2026-04-13 13:35:49 UTC",
            "url": "https://refundonex.com/cloud/form_05941.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819711/",
            "reporter": "abuse_ch"
        }
    ],
    "3819712": [
        {
            "dateadded": "2026-04-13 13:35:49 UTC",
            "url": "http://fv5-5.files.fm/down.php?i=qqrxaww3tr&n=rIFbbkp.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819712/",
            "reporter": "abuse_ch"
        }
    ],
    "3819705": [
        {
            "dateadded": "2026-04-13 13:35:48 UTC",
            "url": "https://refundonex.com/cloud/form_66742.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819705/",
            "reporter": "abuse_ch"
        }
    ],
    "3819706": [
        {
            "dateadded": "2026-04-13 13:35:48 UTC",
            "url": "https://refundonex.com/cloud/form_25599.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819706/",
            "reporter": "abuse_ch"
        }
    ],
    "3819707": [
        {
            "dateadded": "2026-04-13 13:35:48 UTC",
            "url": "https://refundonex.com/cloud/form_77272.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819707/",
            "reporter": "abuse_ch"
        }
    ],
    "3819708": [
        {
            "dateadded": "2026-04-13 13:35:48 UTC",
            "url": "https://refundonex.com/cloud/form_94326.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819708/",
            "reporter": "abuse_ch"
        }
    ],
    "3819709": [
        {
            "dateadded": "2026-04-13 13:35:48 UTC",
            "url": "https://refundonex.com/cloud/form_73959.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819709/",
            "reporter": "abuse_ch"
        }
    ],
    "3819700": [
        {
            "dateadded": "2026-04-13 13:35:47 UTC",
            "url": "https://refundonex.com/cloud/form_93351.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819700/",
            "reporter": "abuse_ch"
        }
    ],
    "3819701": [
        {
            "dateadded": "2026-04-13 13:35:47 UTC",
            "url": "https://refundonex.com/cloud/form_44883.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819701/",
            "reporter": "abuse_ch"
        }
    ],
    "3819702": [
        {
            "dateadded": "2026-04-13 13:35:47 UTC",
            "url": "https://refundonex.com/cloud/form_84106.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819702/",
            "reporter": "abuse_ch"
        }
    ],
    "3819703": [
        {
            "dateadded": "2026-04-13 13:35:47 UTC",
            "url": "https://refundonex.com/cloud/form_93995.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819703/",
            "reporter": "abuse_ch"
        }
    ],
    "3819704": [
        {
            "dateadded": "2026-04-13 13:35:47 UTC",
            "url": "https://refundonex.com/cloud/form_97333.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819704/",
            "reporter": "abuse_ch"
        }
    ],
    "3819698": [
        {
            "dateadded": "2026-04-13 13:35:46 UTC",
            "url": "https://refundonex.com/cloud/form_39804.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819698/",
            "reporter": "abuse_ch"
        }
    ],
    "3819699": [
        {
            "dateadded": "2026-04-13 13:35:46 UTC",
            "url": "https://refundonex.com/cloud/form_73989.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819699/",
            "reporter": "abuse_ch"
        }
    ],
    "3819694": [
        {
            "dateadded": "2026-04-13 13:35:45 UTC",
            "url": "https://refundonex.com/cloud/form_95289.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819694/",
            "reporter": "abuse_ch"
        }
    ],
    "3819695": [
        {
            "dateadded": "2026-04-13 13:35:45 UTC",
            "url": "https://refundonex.com/cloud/form_21463.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819695/",
            "reporter": "abuse_ch"
        }
    ],
    "3819696": [
        {
            "dateadded": "2026-04-13 13:35:45 UTC",
            "url": "https://refundonex.com/cloud/form_13186.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819696/",
            "reporter": "abuse_ch"
        }
    ],
    "3819697": [
        {
            "dateadded": "2026-04-13 13:35:45 UTC",
            "url": "https://refundonex.com/cloud/form_16464.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819697/",
            "reporter": "abuse_ch"
        }
    ],
    "3819692": [
        {
            "dateadded": "2026-04-13 13:35:44 UTC",
            "url": "https://refundonex.com/cloud/form_22872.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819692/",
            "reporter": "abuse_ch"
        }
    ],
    "3819693": [
        {
            "dateadded": "2026-04-13 13:35:44 UTC",
            "url": "https://refundonex.com/cloud/form_23356.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819693/",
            "reporter": "abuse_ch"
        }
    ],
    "3819690": [
        {
            "dateadded": "2026-04-13 13:35:42 UTC",
            "url": "https://refundonex.com/cloud/form_83432.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819690/",
            "reporter": "abuse_ch"
        }
    ],
    "3819691": [
        {
            "dateadded": "2026-04-13 13:35:42 UTC",
            "url": "https://refundonex.com/cloud/form_21415.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819691/",
            "reporter": "abuse_ch"
        }
    ],
    "3819686": [
        {
            "dateadded": "2026-04-13 13:35:41 UTC",
            "url": "https://refundonex.com/cloud/form_37826.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819686/",
            "reporter": "abuse_ch"
        }
    ],
    "3819687": [
        {
            "dateadded": "2026-04-13 13:35:41 UTC",
            "url": "https://refundonex.com/cloud/form_71512.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819687/",
            "reporter": "abuse_ch"
        }
    ],
    "3819688": [
        {
            "dateadded": "2026-04-13 13:35:41 UTC",
            "url": "https://refundonex.com/cloud/form_85772.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819688/",
            "reporter": "abuse_ch"
        }
    ],
    "3819689": [
        {
            "dateadded": "2026-04-13 13:35:41 UTC",
            "url": "https://refundonex.com/cloud/form_00620.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819689/",
            "reporter": "abuse_ch"
        }
    ],
    "3819678": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_65652.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819678/",
            "reporter": "abuse_ch"
        }
    ],
    "3819679": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_71885.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819679/",
            "reporter": "abuse_ch"
        }
    ],
    "3819680": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_66250.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819680/",
            "reporter": "abuse_ch"
        }
    ],
    "3819681": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_81383.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819681/",
            "reporter": "abuse_ch"
        }
    ],
    "3819682": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_52843.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819682/",
            "reporter": "abuse_ch"
        }
    ],
    "3819683": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_43388.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819683/",
            "reporter": "abuse_ch"
        }
    ],
    "3819684": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_12317.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819684/",
            "reporter": "abuse_ch"
        }
    ],
    "3819685": [
        {
            "dateadded": "2026-04-13 13:35:40 UTC",
            "url": "https://refundonex.com/cloud/form_39203.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819685/",
            "reporter": "abuse_ch"
        }
    ],
    "3819677": [
        {
            "dateadded": "2026-04-13 13:35:39 UTC",
            "url": "https://refundonex.com/cloud/form_95394.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819677/",
            "reporter": "abuse_ch"
        }
    ],
    "3819669": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_75496.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819669/",
            "reporter": "abuse_ch"
        }
    ],
    "3819670": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_60967.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819670/",
            "reporter": "abuse_ch"
        }
    ],
    "3819671": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_47488.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819671/",
            "reporter": "abuse_ch"
        }
    ],
    "3819672": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_51171.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819672/",
            "reporter": "abuse_ch"
        }
    ],
    "3819673": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_59685.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819673/",
            "reporter": "abuse_ch"
        }
    ],
    "3819674": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_96182.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819674/",
            "reporter": "abuse_ch"
        }
    ],
    "3819675": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_99164.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819675/",
            "reporter": "abuse_ch"
        }
    ],
    "3819676": [
        {
            "dateadded": "2026-04-13 13:35:38 UTC",
            "url": "https://refundonex.com/cloud/form_21763.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819676/",
            "reporter": "abuse_ch"
        }
    ],
    "3819668": [
        {
            "dateadded": "2026-04-13 13:35:37 UTC",
            "url": "https://refundonex.com/cloud/form_35807.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819668/",
            "reporter": "abuse_ch"
        }
    ],
    "3819664": [
        {
            "dateadded": "2026-04-13 13:35:36 UTC",
            "url": "https://refundonex.com/cloud/form_43024.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819664/",
            "reporter": "abuse_ch"
        }
    ],
    "3819665": [
        {
            "dateadded": "2026-04-13 13:35:36 UTC",
            "url": "https://refundonex.com/cloud/form_87626.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819665/",
            "reporter": "abuse_ch"
        }
    ],
    "3819666": [
        {
            "dateadded": "2026-04-13 13:35:36 UTC",
            "url": "https://refundonex.com/cloud/form_17662.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819666/",
            "reporter": "abuse_ch"
        }
    ],
    "3819667": [
        {
            "dateadded": "2026-04-13 13:35:36 UTC",
            "url": "https://refundonex.com/cloud/form_10888.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819667/",
            "reporter": "abuse_ch"
        }
    ],
    "3819661": [
        {
            "dateadded": "2026-04-13 13:35:35 UTC",
            "url": "https://refundonex.com/cloud/form_73976.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819661/",
            "reporter": "abuse_ch"
        }
    ],
    "3819662": [
        {
            "dateadded": "2026-04-13 13:35:35 UTC",
            "url": "https://refundonex.com/cloud/form_33845.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819662/",
            "reporter": "abuse_ch"
        }
    ],
    "3819663": [
        {
            "dateadded": "2026-04-13 13:35:35 UTC",
            "url": "https://refundonex.com/cloud/form_12971.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819663/",
            "reporter": "abuse_ch"
        }
    ],
    "3819657": [
        {
            "dateadded": "2026-04-13 13:35:34 UTC",
            "url": "https://refundonex.com/cloud/form_16220.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819657/",
            "reporter": "abuse_ch"
        }
    ],
    "3819658": [
        {
            "dateadded": "2026-04-13 13:35:34 UTC",
            "url": "https://refundonex.com/cloud/form_38899.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819658/",
            "reporter": "abuse_ch"
        }
    ],
    "3819659": [
        {
            "dateadded": "2026-04-13 13:35:34 UTC",
            "url": "https://refundonex.com/cloud/form_27129.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819659/",
            "reporter": "abuse_ch"
        }
    ],
    "3819660": [
        {
            "dateadded": "2026-04-13 13:35:34 UTC",
            "url": "https://refundonex.com/cloud/form_11369.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819660/",
            "reporter": "abuse_ch"
        }
    ],
    "3819656": [
        {
            "dateadded": "2026-04-13 13:35:33 UTC",
            "url": "https://refundonex.com/cloud/form_70273.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819656/",
            "reporter": "abuse_ch"
        }
    ],
    "3819653": [
        {
            "dateadded": "2026-04-13 13:35:32 UTC",
            "url": "https://refundonex.com/cloud/form_84106.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819653/",
            "reporter": "abuse_ch"
        }
    ],
    "3819654": [
        {
            "dateadded": "2026-04-13 13:35:32 UTC",
            "url": "https://refundonex.com/cloud/form_59685.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819654/",
            "reporter": "abuse_ch"
        }
    ],
    "3819655": [
        {
            "dateadded": "2026-04-13 13:35:32 UTC",
            "url": "https://refundonex.com/cloud/form_47537.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819655/",
            "reporter": "abuse_ch"
        }
    ],
    "3819646": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_86428.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819646/",
            "reporter": "abuse_ch"
        }
    ],
    "3819647": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_97776.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819647/",
            "reporter": "abuse_ch"
        }
    ],
    "3819648": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_48879.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819648/",
            "reporter": "abuse_ch"
        }
    ],
    "3819649": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_77462.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819649/",
            "reporter": "abuse_ch"
        }
    ],
    "3819650": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_99091.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819650/",
            "reporter": "abuse_ch"
        }
    ],
    "3819651": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_83888.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819651/",
            "reporter": "abuse_ch"
        }
    ],
    "3819652": [
        {
            "dateadded": "2026-04-13 13:35:31 UTC",
            "url": "https://refundonex.com/cloud/form_54535.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819652/",
            "reporter": "abuse_ch"
        }
    ],
    "3819645": [
        {
            "dateadded": "2026-04-13 13:35:30 UTC",
            "url": "https://refundonex.com/cloud/form_65225.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819645/",
            "reporter": "abuse_ch"
        }
    ],
    "3819641": [
        {
            "dateadded": "2026-04-13 13:35:29 UTC",
            "url": "https://refundonex.com/cloud/form_88815.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819641/",
            "reporter": "abuse_ch"
        }
    ],
    "3819642": [
        {
            "dateadded": "2026-04-13 13:35:29 UTC",
            "url": "https://refundonex.com/cloud/form_08820.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819642/",
            "reporter": "abuse_ch"
        }
    ],
    "3819643": [
        {
            "dateadded": "2026-04-13 13:35:29 UTC",
            "url": "https://refundonex.com/cloud/form_28076.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819643/",
            "reporter": "abuse_ch"
        }
    ],
    "3819644": [
        {
            "dateadded": "2026-04-13 13:35:29 UTC",
            "url": "https://refundonex.com/cloud/form_48499.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819644/",
            "reporter": "abuse_ch"
        }
    ],
    "3819636": [
        {
            "dateadded": "2026-04-13 13:35:27 UTC",
            "url": "https://refundonex.com/cloud/form_16464.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819636/",
            "reporter": "abuse_ch"
        }
    ],
    "3819637": [
        {
            "dateadded": "2026-04-13 13:35:27 UTC",
            "url": "https://refundonex.com/cloud/form_99029.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819637/",
            "reporter": "abuse_ch"
        }
    ],
    "3819638": [
        {
            "dateadded": "2026-04-13 13:35:27 UTC",
            "url": "https://refundonex.com/cloud/form_84071.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819638/",
            "reporter": "abuse_ch"
        }
    ],
    "3819639": [
        {
            "dateadded": "2026-04-13 13:35:27 UTC",
            "url": "https://refundonex.com/cloud/form_94559.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819639/",
            "reporter": "abuse_ch"
        }
    ],
    "3819640": [
        {
            "dateadded": "2026-04-13 13:35:27 UTC",
            "url": "https://refundonex.com/cloud/form_80995.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819640/",
            "reporter": "abuse_ch"
        }
    ],
    "3819634": [
        {
            "dateadded": "2026-04-13 13:35:25 UTC",
            "url": "https://refundonex.com/cloud/form_22166.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819634/",
            "reporter": "abuse_ch"
        }
    ],
    "3819635": [
        {
            "dateadded": "2026-04-13 13:35:25 UTC",
            "url": "https://refundonex.com/cloud/form_77324.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819635/",
            "reporter": "abuse_ch"
        }
    ],
    "3819629": [
        {
            "dateadded": "2026-04-13 13:35:24 UTC",
            "url": "https://refundonex.com/cloud/form_13097.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819629/",
            "reporter": "abuse_ch"
        }
    ],
    "3819630": [
        {
            "dateadded": "2026-04-13 13:35:24 UTC",
            "url": "https://refundonex.com/cloud/form_25276.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819630/",
            "reporter": "abuse_ch"
        }
    ],
    "3819631": [
        {
            "dateadded": "2026-04-13 13:35:24 UTC",
            "url": "https://refundonex.com/cloud/form_64055.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819631/",
            "reporter": "abuse_ch"
        }
    ],
    "3819632": [
        {
            "dateadded": "2026-04-13 13:35:24 UTC",
            "url": "https://refundonex.com/cloud/form_20713.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819632/",
            "reporter": "abuse_ch"
        }
    ],
    "3819633": [
        {
            "dateadded": "2026-04-13 13:35:24 UTC",
            "url": "https://refundonex.com/cloud/form_77813.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819633/",
            "reporter": "abuse_ch"
        }
    ],
    "3819625": [
        {
            "dateadded": "2026-04-13 13:35:23 UTC",
            "url": "https://refundonex.com/cloud/form_45694.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819625/",
            "reporter": "abuse_ch"
        }
    ],
    "3819626": [
        {
            "dateadded": "2026-04-13 13:35:23 UTC",
            "url": "https://refundonex.com/cloud/form_46415.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819626/",
            "reporter": "abuse_ch"
        }
    ],
    "3819627": [
        {
            "dateadded": "2026-04-13 13:35:23 UTC",
            "url": "https://refundonex.com/cloud/form_70376.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819627/",
            "reporter": "abuse_ch"
        }
    ],
    "3819628": [
        {
            "dateadded": "2026-04-13 13:35:23 UTC",
            "url": "https://refundonex.com/cloud/form_19796.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819628/",
            "reporter": "abuse_ch"
        }
    ],
    "3819619": [
        {
            "dateadded": "2026-04-13 13:35:22 UTC",
            "url": "https://refundonex.com/cloud/form_46190.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819619/",
            "reporter": "abuse_ch"
        }
    ],
    "3819620": [
        {
            "dateadded": "2026-04-13 13:35:22 UTC",
            "url": "https://refundonex.com/cloud/form_08622.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819620/",
            "reporter": "abuse_ch"
        }
    ],
    "3819621": [
        {
            "dateadded": "2026-04-13 13:35:22 UTC",
            "url": "https://refundonex.com/cloud/form_33091.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819621/",
            "reporter": "abuse_ch"
        }
    ],
    "3819622": [
        {
            "dateadded": "2026-04-13 13:35:22 UTC",
            "url": "https://refundonex.com/cloud/form_45694.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819622/",
            "reporter": "abuse_ch"
        }
    ],
    "3819623": [
        {
            "dateadded": "2026-04-13 13:35:22 UTC",
            "url": "https://refundonex.com/cloud/form_82208.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819623/",
            "reporter": "abuse_ch"
        }
    ],
    "3819624": [
        {
            "dateadded": "2026-04-13 13:35:22 UTC",
            "url": "https://refundonex.com/cloud/form_01355.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819624/",
            "reporter": "abuse_ch"
        }
    ],
    "3819614": [
        {
            "dateadded": "2026-04-13 13:35:21 UTC",
            "url": "https://refundonex.com/cloud/form_59903.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819614/",
            "reporter": "abuse_ch"
        }
    ],
    "3819615": [
        {
            "dateadded": "2026-04-13 13:35:21 UTC",
            "url": "https://refundonex.com/cloud/form_08622.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819615/",
            "reporter": "abuse_ch"
        }
    ],
    "3819616": [
        {
            "dateadded": "2026-04-13 13:35:21 UTC",
            "url": "https://refundonex.com/cloud/form_53592.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819616/",
            "reporter": "abuse_ch"
        }
    ],
    "3819617": [
        {
            "dateadded": "2026-04-13 13:35:21 UTC",
            "url": "https://refundonex.com/cloud/form_83865.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819617/",
            "reporter": "abuse_ch"
        }
    ],
    "3819618": [
        {
            "dateadded": "2026-04-13 13:35:21 UTC",
            "url": "https://refundonex.com/cloud/form_17662.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819618/",
            "reporter": "abuse_ch"
        }
    ],
    "3819612": [
        {
            "dateadded": "2026-04-13 13:35:20 UTC",
            "url": "https://refundonex.com/cloud/form_83897.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819612/",
            "reporter": "abuse_ch"
        }
    ],
    "3819613": [
        {
            "dateadded": "2026-04-13 13:35:20 UTC",
            "url": "https://refundonex.com/cloud/form_26726.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819613/",
            "reporter": "abuse_ch"
        }
    ],
    "3819610": [
        {
            "dateadded": "2026-04-13 13:35:19 UTC",
            "url": "https://refundonex.com/cloud/form_61111.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819610/",
            "reporter": "abuse_ch"
        }
    ],
    "3819611": [
        {
            "dateadded": "2026-04-13 13:35:19 UTC",
            "url": "https://refundonex.com/cloud/form_08999.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819611/",
            "reporter": "abuse_ch"
        }
    ],
    "3819608": [
        {
            "dateadded": "2026-04-13 13:35:18 UTC",
            "url": "https://refundonex.com/cloud/form_81664.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819608/",
            "reporter": "abuse_ch"
        }
    ],
    "3819609": [
        {
            "dateadded": "2026-04-13 13:35:18 UTC",
            "url": "https://refundonex.com/cloud/form_50934.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819609/",
            "reporter": "abuse_ch"
        }
    ],
    "3819605": [
        {
            "dateadded": "2026-04-13 13:35:17 UTC",
            "url": "https://refundonex.com/cloud/form_94834.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819605/",
            "reporter": "abuse_ch"
        }
    ],
    "3819606": [
        {
            "dateadded": "2026-04-13 13:35:17 UTC",
            "url": "https://refundonex.com/cloud/form_45349.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819606/",
            "reporter": "abuse_ch"
        }
    ],
    "3819607": [
        {
            "dateadded": "2026-04-13 13:35:17 UTC",
            "url": "https://refundonex.com/cloud/form_87454.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819607/",
            "reporter": "abuse_ch"
        }
    ],
    "3819604": [
        {
            "dateadded": "2026-04-13 13:35:16 UTC",
            "url": "https://refundonex.com/cloud/form_09506.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819604/",
            "reporter": "abuse_ch"
        }
    ],
    "3819601": [
        {
            "dateadded": "2026-04-13 13:35:15 UTC",
            "url": "https://refundonex.com/cloud/form_81547.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819601/",
            "reporter": "abuse_ch"
        }
    ],
    "3819602": [
        {
            "dateadded": "2026-04-13 13:35:15 UTC",
            "url": "https://refundonex.com/cloud/form_88599.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819602/",
            "reporter": "abuse_ch"
        }
    ],
    "3819603": [
        {
            "dateadded": "2026-04-13 13:35:15 UTC",
            "url": "https://refundonex.com/cloud/form_27669.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819603/",
            "reporter": "abuse_ch"
        }
    ],
    "3819599": [
        {
            "dateadded": "2026-04-13 13:35:14 UTC",
            "url": "https://refundonex.com/cloud/form_23744.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819599/",
            "reporter": "abuse_ch"
        }
    ],
    "3819600": [
        {
            "dateadded": "2026-04-13 13:35:14 UTC",
            "url": "https://refundonex.com/cloud/form_81050.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819600/",
            "reporter": "abuse_ch"
        }
    ],
    "3819594": [
        {
            "dateadded": "2026-04-13 13:35:13 UTC",
            "url": "https://refundonex.com/cloud/form_03331.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819594/",
            "reporter": "abuse_ch"
        }
    ],
    "3819595": [
        {
            "dateadded": "2026-04-13 13:35:13 UTC",
            "url": "https://refundonex.com/cloud/form_32763.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819595/",
            "reporter": "abuse_ch"
        }
    ],
    "3819596": [
        {
            "dateadded": "2026-04-13 13:35:13 UTC",
            "url": "https://refundonex.com/cloud/form_33337.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819596/",
            "reporter": "abuse_ch"
        }
    ],
    "3819597": [
        {
            "dateadded": "2026-04-13 13:35:13 UTC",
            "url": "https://refundonex.com/cloud/form_99029.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819597/",
            "reporter": "abuse_ch"
        }
    ],
    "3819598": [
        {
            "dateadded": "2026-04-13 13:35:13 UTC",
            "url": "https://refundonex.com/cloud/form_58844.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819598/",
            "reporter": "abuse_ch"
        }
    ],
    "3819592": [
        {
            "dateadded": "2026-04-13 13:35:12 UTC",
            "url": "https://refundonex.com/cloud/form_99162.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819592/",
            "reporter": "abuse_ch"
        }
    ],
    "3819593": [
        {
            "dateadded": "2026-04-13 13:35:12 UTC",
            "url": "https://refundonex.com/cloud/form_49151.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819593/",
            "reporter": "abuse_ch"
        }
    ],
    "3819589": [
        {
            "dateadded": "2026-04-13 13:35:11 UTC",
            "url": "https://refundonex.com/cloud/form_08901.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819589/",
            "reporter": "abuse_ch"
        }
    ],
    "3819590": [
        {
            "dateadded": "2026-04-13 13:35:11 UTC",
            "url": "https://refundonex.com/cloud/form_41200.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819590/",
            "reporter": "abuse_ch"
        }
    ],
    "3819591": [
        {
            "dateadded": "2026-04-13 13:35:11 UTC",
            "url": "https://refundonex.com/cloud/form_21152.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819591/",
            "reporter": "abuse_ch"
        }
    ],
    "3819586": [
        {
            "dateadded": "2026-04-13 13:35:09 UTC",
            "url": "https://refundonex.com/cloud/form_60163.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819586/",
            "reporter": "abuse_ch"
        }
    ],
    "3819587": [
        {
            "dateadded": "2026-04-13 13:35:09 UTC",
            "url": "https://refundonex.com/cloud/form_38966.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819587/",
            "reporter": "abuse_ch"
        }
    ],
    "3819588": [
        {
            "dateadded": "2026-04-13 13:35:09 UTC",
            "url": "https://refundonex.com/cloud/form_15608.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819588/",
            "reporter": "abuse_ch"
        }
    ],
    "3819578": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_70706.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819578/",
            "reporter": "abuse_ch"
        }
    ],
    "3819579": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_62963.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819579/",
            "reporter": "abuse_ch"
        }
    ],
    "3819580": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_15965.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819580/",
            "reporter": "abuse_ch"
        }
    ],
    "3819581": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_93958.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819581/",
            "reporter": "abuse_ch"
        }
    ],
    "3819582": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_36722.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819582/",
            "reporter": "abuse_ch"
        }
    ],
    "3819583": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_96986.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819583/",
            "reporter": "abuse_ch"
        }
    ],
    "3819584": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_62911.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819584/",
            "reporter": "abuse_ch"
        }
    ],
    "3819585": [
        {
            "dateadded": "2026-04-13 13:35:08 UTC",
            "url": "https://refundonex.com/cloud/form_16010.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819585/",
            "reporter": "abuse_ch"
        }
    ],
    "3819575": [
        {
            "dateadded": "2026-04-13 13:35:07 UTC",
            "url": "https://refundonex.com/cloud/form_52073.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819575/",
            "reporter": "abuse_ch"
        }
    ],
    "3819576": [
        {
            "dateadded": "2026-04-13 13:35:07 UTC",
            "url": "https://refundonex.com/cloud/form_60726.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819576/",
            "reporter": "abuse_ch"
        }
    ],
    "3819577": [
        {
            "dateadded": "2026-04-13 13:35:07 UTC",
            "url": "https://refundonex.com/cloud/form_20396.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819577/",
            "reporter": "abuse_ch"
        }
    ],
    "3819572": [
        {
            "dateadded": "2026-04-13 13:35:05 UTC",
            "url": "https://refundonex.com/cloud/form_00231.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819572/",
            "reporter": "abuse_ch"
        }
    ],
    "3819573": [
        {
            "dateadded": "2026-04-13 13:35:05 UTC",
            "url": "https://refundonex.com/cloud/form_36769.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819573/",
            "reporter": "abuse_ch"
        }
    ],
    "3819574": [
        {
            "dateadded": "2026-04-13 13:35:05 UTC",
            "url": "https://refundonex.com/cloud/form_74743.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819574/",
            "reporter": "abuse_ch"
        }
    ],
    "3819569": [
        {
            "dateadded": "2026-04-13 13:35:04 UTC",
            "url": "https://refundonex.com/cloud/form_82276.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819569/",
            "reporter": "abuse_ch"
        }
    ],
    "3819570": [
        {
            "dateadded": "2026-04-13 13:35:04 UTC",
            "url": "https://refundonex.com/cloud/form_80840.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819570/",
            "reporter": "abuse_ch"
        }
    ],
    "3819571": [
        {
            "dateadded": "2026-04-13 13:35:04 UTC",
            "url": "https://refundonex.com/cloud/form_88222.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819571/",
            "reporter": "abuse_ch"
        }
    ],
    "3819568": [
        {
            "dateadded": "2026-04-13 13:35:03 UTC",
            "url": "https://refundonex.com/cloud/form_13720.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819568/",
            "reporter": "abuse_ch"
        }
    ],
    "3819560": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_50818.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819560/",
            "reporter": "abuse_ch"
        }
    ],
    "3819561": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_51894.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819561/",
            "reporter": "abuse_ch"
        }
    ],
    "3819562": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_81650.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819562/",
            "reporter": "abuse_ch"
        }
    ],
    "3819563": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://r1v3-route.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819563/",
            "reporter": "anonymous"
        }
    ],
    "3819564": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_72068.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819564/",
            "reporter": "abuse_ch"
        }
    ],
    "3819565": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_64307.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819565/",
            "reporter": "abuse_ch"
        }
    ],
    "3819566": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_34055.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819566/",
            "reporter": "abuse_ch"
        }
    ],
    "3819567": [
        {
            "dateadded": "2026-04-13 13:35:01 UTC",
            "url": "https://refundonex.com/cloud/form_62563.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:35:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819567/",
            "reporter": "abuse_ch"
        }
    ],
    "3819554": [
        {
            "dateadded": "2026-04-13 13:34:58 UTC",
            "url": "https://refundonex.com/cloud/form_37826.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819554/",
            "reporter": "abuse_ch"
        }
    ],
    "3819555": [
        {
            "dateadded": "2026-04-13 13:34:58 UTC",
            "url": "https://refundonex.com/cloud/form_84428.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819555/",
            "reporter": "abuse_ch"
        }
    ],
    "3819556": [
        {
            "dateadded": "2026-04-13 13:34:58 UTC",
            "url": "https://refundonex.com/cloud/form_88278.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819556/",
            "reporter": "abuse_ch"
        }
    ],
    "3819557": [
        {
            "dateadded": "2026-04-13 13:34:58 UTC",
            "url": "https://refundonex.com/cloud/form_81245.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819557/",
            "reporter": "abuse_ch"
        }
    ],
    "3819558": [
        {
            "dateadded": "2026-04-13 13:34:58 UTC",
            "url": "https://refundonex.com/cloud/form_92625.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819558/",
            "reporter": "abuse_ch"
        }
    ],
    "3819559": [
        {
            "dateadded": "2026-04-13 13:34:58 UTC",
            "url": "https://refundonex.com/cloud/form_22174.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819559/",
            "reporter": "abuse_ch"
        }
    ],
    "3819548": [
        {
            "dateadded": "2026-04-13 13:34:57 UTC",
            "url": "https://refundonex.com/cloud/form_42552.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819548/",
            "reporter": "abuse_ch"
        }
    ],
    "3819549": [
        {
            "dateadded": "2026-04-13 13:34:57 UTC",
            "url": "https://refundonex.com/cloud/form_24086.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819549/",
            "reporter": "abuse_ch"
        }
    ],
    "3819550": [
        {
            "dateadded": "2026-04-13 13:34:57 UTC",
            "url": "https://refundonex.com/cloud/form_13302.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819550/",
            "reporter": "abuse_ch"
        }
    ],
    "3819551": [
        {
            "dateadded": "2026-04-13 13:34:57 UTC",
            "url": "https://refundonex.com/cloud/form_67033.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819551/",
            "reporter": "abuse_ch"
        }
    ],
    "3819552": [
        {
            "dateadded": "2026-04-13 13:34:57 UTC",
            "url": "https://refundonex.com/cloud/form_99043.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819552/",
            "reporter": "abuse_ch"
        }
    ],
    "3819553": [
        {
            "dateadded": "2026-04-13 13:34:57 UTC",
            "url": "https://refundonex.com/cloud/form_27669.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819553/",
            "reporter": "abuse_ch"
        }
    ],
    "3819545": [
        {
            "dateadded": "2026-04-13 13:34:56 UTC",
            "url": "https://refundonex.com/cloud/form_00757.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819545/",
            "reporter": "abuse_ch"
        }
    ],
    "3819546": [
        {
            "dateadded": "2026-04-13 13:34:56 UTC",
            "url": "https://refundonex.com/cloud/form_08683.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819546/",
            "reporter": "abuse_ch"
        }
    ],
    "3819547": [
        {
            "dateadded": "2026-04-13 13:34:56 UTC",
            "url": "https://refundonex.com/cloud/form_30450.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819547/",
            "reporter": "abuse_ch"
        }
    ],
    "3819540": [
        {
            "dateadded": "2026-04-13 13:34:55 UTC",
            "url": "https://refundonex.com/cloud/form_00142.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819540/",
            "reporter": "abuse_ch"
        }
    ],
    "3819541": [
        {
            "dateadded": "2026-04-13 13:34:55 UTC",
            "url": "https://refundonex.com/cloud/form_87414.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819541/",
            "reporter": "abuse_ch"
        }
    ],
    "3819542": [
        {
            "dateadded": "2026-04-13 13:34:55 UTC",
            "url": "https://refundonex.com/cloud/form_41604.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819542/",
            "reporter": "abuse_ch"
        }
    ],
    "3819543": [
        {
            "dateadded": "2026-04-13 13:34:55 UTC",
            "url": "https://refundonex.com/cloud/form_99806.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819543/",
            "reporter": "abuse_ch"
        }
    ],
    "3819544": [
        {
            "dateadded": "2026-04-13 13:34:55 UTC",
            "url": "https://refundonex.com/cloud/form_56208.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819544/",
            "reporter": "abuse_ch"
        }
    ],
    "3819536": [
        {
            "dateadded": "2026-04-13 13:34:54 UTC",
            "url": "https://refundonex.com/cloud/form_69452.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819536/",
            "reporter": "abuse_ch"
        }
    ],
    "3819537": [
        {
            "dateadded": "2026-04-13 13:34:54 UTC",
            "url": "https://refundonex.com/cloud/form_54776.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819537/",
            "reporter": "abuse_ch"
        }
    ],
    "3819538": [
        {
            "dateadded": "2026-04-13 13:34:54 UTC",
            "url": "https://refundonex.com/cloud/form_26097.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819538/",
            "reporter": "abuse_ch"
        }
    ],
    "3819539": [
        {
            "dateadded": "2026-04-13 13:34:54 UTC",
            "url": "https://refundonex.com/cloud/form_08939.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819539/",
            "reporter": "abuse_ch"
        }
    ],
    "3819535": [
        {
            "dateadded": "2026-04-13 13:34:52 UTC",
            "url": "https://refundonex.com/cloud/form_22872.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819535/",
            "reporter": "abuse_ch"
        }
    ],
    "3819532": [
        {
            "dateadded": "2026-04-13 13:34:51 UTC",
            "url": "https://refundonex.com/cloud/form_29854.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819532/",
            "reporter": "abuse_ch"
        }
    ],
    "3819533": [
        {
            "dateadded": "2026-04-13 13:34:51 UTC",
            "url": "https://refundonex.com/cloud/form_64432.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819533/",
            "reporter": "abuse_ch"
        }
    ],
    "3819534": [
        {
            "dateadded": "2026-04-13 13:34:51 UTC",
            "url": "https://refundonex.com/cloud/form_58173.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819534/",
            "reporter": "abuse_ch"
        }
    ],
    "3819524": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_72679.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819524/",
            "reporter": "abuse_ch"
        }
    ],
    "3819525": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_18892.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819525/",
            "reporter": "abuse_ch"
        }
    ],
    "3819526": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_36175.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819526/",
            "reporter": "abuse_ch"
        }
    ],
    "3819527": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_12510.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819527/",
            "reporter": "abuse_ch"
        }
    ],
    "3819528": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_77813.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819528/",
            "reporter": "abuse_ch"
        }
    ],
    "3819529": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_07828.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819529/",
            "reporter": "abuse_ch"
        }
    ],
    "3819530": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_96474.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819530/",
            "reporter": "abuse_ch"
        }
    ],
    "3819531": [
        {
            "dateadded": "2026-04-13 13:34:50 UTC",
            "url": "https://refundonex.com/cloud/form_71145.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819531/",
            "reporter": "abuse_ch"
        }
    ],
    "3819521": [
        {
            "dateadded": "2026-04-13 13:34:49 UTC",
            "url": "https://refundonex.com/cloud/form_24820.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819521/",
            "reporter": "abuse_ch"
        }
    ],
    "3819522": [
        {
            "dateadded": "2026-04-13 13:34:49 UTC",
            "url": "https://refundonex.com/cloud/form_30908.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819522/",
            "reporter": "abuse_ch"
        }
    ],
    "3819523": [
        {
            "dateadded": "2026-04-13 13:34:49 UTC",
            "url": "https://refundonex.com/cloud/form_13663.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819523/",
            "reporter": "abuse_ch"
        }
    ],
    "3819514": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_40919.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819514/",
            "reporter": "abuse_ch"
        }
    ],
    "3819515": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_70618.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819515/",
            "reporter": "abuse_ch"
        }
    ],
    "3819516": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_90583.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819516/",
            "reporter": "abuse_ch"
        }
    ],
    "3819517": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_64948.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819517/",
            "reporter": "abuse_ch"
        }
    ],
    "3819518": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_85275.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819518/",
            "reporter": "abuse_ch"
        }
    ],
    "3819519": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_84846.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819519/",
            "reporter": "abuse_ch"
        }
    ],
    "3819520": [
        {
            "dateadded": "2026-04-13 13:34:48 UTC",
            "url": "https://refundonex.com/cloud/form_16764.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819520/",
            "reporter": "abuse_ch"
        }
    ],
    "3819505": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_81612.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819505/",
            "reporter": "abuse_ch"
        }
    ],
    "3819506": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_87118.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819506/",
            "reporter": "abuse_ch"
        }
    ],
    "3819507": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_40919.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819507/",
            "reporter": "abuse_ch"
        }
    ],
    "3819508": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_46899.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819508/",
            "reporter": "abuse_ch"
        }
    ],
    "3819509": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_37616.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819509/",
            "reporter": "abuse_ch"
        }
    ],
    "3819510": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_56161.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819510/",
            "reporter": "abuse_ch"
        }
    ],
    "3819511": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_43188.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819511/",
            "reporter": "abuse_ch"
        }
    ],
    "3819512": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_68283.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819512/",
            "reporter": "abuse_ch"
        }
    ],
    "3819513": [
        {
            "dateadded": "2026-04-13 13:34:46 UTC",
            "url": "https://refundonex.com/cloud/form_52758.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819513/",
            "reporter": "abuse_ch"
        }
    ],
    "3819496": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_66262.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819496/",
            "reporter": "abuse_ch"
        }
    ],
    "3819497": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_98775.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819497/",
            "reporter": "abuse_ch"
        }
    ],
    "3819498": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_88067.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819498/",
            "reporter": "abuse_ch"
        }
    ],
    "3819499": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_48040.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819499/",
            "reporter": "abuse_ch"
        }
    ],
    "3819500": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_16272.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819500/",
            "reporter": "abuse_ch"
        }
    ],
    "3819501": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_54154.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819501/",
            "reporter": "abuse_ch"
        }
    ],
    "3819502": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_87626.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819502/",
            "reporter": "abuse_ch"
        }
    ],
    "3819503": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_47488.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819503/",
            "reporter": "abuse_ch"
        }
    ],
    "3819504": [
        {
            "dateadded": "2026-04-13 13:34:45 UTC",
            "url": "https://refundonex.com/cloud/form_25188.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819504/",
            "reporter": "abuse_ch"
        }
    ],
    "3819491": [
        {
            "dateadded": "2026-04-13 13:34:44 UTC",
            "url": "https://refundonex.com/cloud/form_73129.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819491/",
            "reporter": "abuse_ch"
        }
    ],
    "3819492": [
        {
            "dateadded": "2026-04-13 13:34:44 UTC",
            "url": "https://refundonex.com/cloud/form_19977.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819492/",
            "reporter": "abuse_ch"
        }
    ],
    "3819493": [
        {
            "dateadded": "2026-04-13 13:34:44 UTC",
            "url": "https://refundonex.com/cloud/form_73678.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819493/",
            "reporter": "abuse_ch"
        }
    ],
    "3819494": [
        {
            "dateadded": "2026-04-13 13:34:44 UTC",
            "url": "https://refundonex.com/cloud/form_95692.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819494/",
            "reporter": "abuse_ch"
        }
    ],
    "3819495": [
        {
            "dateadded": "2026-04-13 13:34:44 UTC",
            "url": "https://refundonex.com/cloud/form_93259.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819495/",
            "reporter": "abuse_ch"
        }
    ],
    "3819490": [
        {
            "dateadded": "2026-04-13 13:34:40 UTC",
            "url": "https://refundonex.com/cloud/form_52073.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819490/",
            "reporter": "abuse_ch"
        }
    ],
    "3819488": [
        {
            "dateadded": "2026-04-13 13:34:39 UTC",
            "url": "https://refundonex.com/cloud/form_68583.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819488/",
            "reporter": "abuse_ch"
        }
    ],
    "3819489": [
        {
            "dateadded": "2026-04-13 13:34:39 UTC",
            "url": "https://refundonex.com/cloud/form_72999.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819489/",
            "reporter": "abuse_ch"
        }
    ],
    "3819485": [
        {
            "dateadded": "2026-04-13 13:34:38 UTC",
            "url": "https://refundonex.com/cloud/form_72068.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819485/",
            "reporter": "abuse_ch"
        }
    ],
    "3819486": [
        {
            "dateadded": "2026-04-13 13:34:38 UTC",
            "url": "https://refundonex.com/cloud/form_71885.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819486/",
            "reporter": "abuse_ch"
        }
    ],
    "3819487": [
        {
            "dateadded": "2026-04-13 13:34:38 UTC",
            "url": "https://refundonex.com/cloud/form_88691.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819487/",
            "reporter": "abuse_ch"
        }
    ],
    "3819473": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_20314.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819473/",
            "reporter": "abuse_ch"
        }
    ],
    "3819474": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_21603.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819474/",
            "reporter": "abuse_ch"
        }
    ],
    "3819475": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_93995.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819475/",
            "reporter": "abuse_ch"
        }
    ],
    "3819476": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_96182.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819476/",
            "reporter": "abuse_ch"
        }
    ],
    "3819477": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_06716.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819477/",
            "reporter": "abuse_ch"
        }
    ],
    "3819478": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_97333.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819478/",
            "reporter": "abuse_ch"
        }
    ],
    "3819479": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_13235.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819479/",
            "reporter": "abuse_ch"
        }
    ],
    "3819480": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_69981.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819480/",
            "reporter": "abuse_ch"
        }
    ],
    "3819481": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_15217.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819481/",
            "reporter": "abuse_ch"
        }
    ],
    "3819482": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_91484.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819482/",
            "reporter": "abuse_ch"
        }
    ],
    "3819483": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_28820.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819483/",
            "reporter": "abuse_ch"
        }
    ],
    "3819484": [
        {
            "dateadded": "2026-04-13 13:34:37 UTC",
            "url": "https://refundonex.com/cloud/form_97017.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819484/",
            "reporter": "abuse_ch"
        }
    ],
    "3819469": [
        {
            "dateadded": "2026-04-13 13:34:36 UTC",
            "url": "https://refundonex.com/cloud/form_83888.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819469/",
            "reporter": "abuse_ch"
        }
    ],
    "3819470": [
        {
            "dateadded": "2026-04-13 13:34:36 UTC",
            "url": "https://refundonex.com/cloud/form_65651.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819470/",
            "reporter": "abuse_ch"
        }
    ],
    "3819471": [
        {
            "dateadded": "2026-04-13 13:34:36 UTC",
            "url": "https://refundonex.com/cloud/form_57896.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819471/",
            "reporter": "abuse_ch"
        }
    ],
    "3819472": [
        {
            "dateadded": "2026-04-13 13:34:36 UTC",
            "url": "https://refundonex.com/cloud/form_60161.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819472/",
            "reporter": "abuse_ch"
        }
    ],
    "3819465": [
        {
            "dateadded": "2026-04-13 13:34:35 UTC",
            "url": "https://refundonex.com/cloud/form_66017.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819465/",
            "reporter": "abuse_ch"
        }
    ],
    "3819466": [
        {
            "dateadded": "2026-04-13 13:34:35 UTC",
            "url": "https://refundonex.com/cloud/form_94833.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819466/",
            "reporter": "abuse_ch"
        }
    ],
    "3819467": [
        {
            "dateadded": "2026-04-13 13:34:35 UTC",
            "url": "https://refundonex.com/cloud/form_72679.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819467/",
            "reporter": "abuse_ch"
        }
    ],
    "3819468": [
        {
            "dateadded": "2026-04-13 13:34:35 UTC",
            "url": "https://refundonex.com/cloud/form_67130.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819468/",
            "reporter": "abuse_ch"
        }
    ],
    "3819463": [
        {
            "dateadded": "2026-04-13 13:34:34 UTC",
            "url": "https://refundonex.com/cloud/form_81547.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819463/",
            "reporter": "abuse_ch"
        }
    ],
    "3819464": [
        {
            "dateadded": "2026-04-13 13:34:34 UTC",
            "url": "https://refundonex.com/cloud/form_54969.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819464/",
            "reporter": "abuse_ch"
        }
    ],
    "3819461": [
        {
            "dateadded": "2026-04-13 13:34:33 UTC",
            "url": "https://refundonex.com/cloud/form_41495.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819461/",
            "reporter": "abuse_ch"
        }
    ],
    "3819462": [
        {
            "dateadded": "2026-04-13 13:34:33 UTC",
            "url": "https://refundonex.com/cloud/form_43724.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819462/",
            "reporter": "abuse_ch"
        }
    ],
    "3819455": [
        {
            "dateadded": "2026-04-13 13:34:32 UTC",
            "url": "https://refundonex.com/cloud/form_99433.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819455/",
            "reporter": "abuse_ch"
        }
    ],
    "3819456": [
        {
            "dateadded": "2026-04-13 13:34:32 UTC",
            "url": "https://refundonex.com/cloud/form_87414.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819456/",
            "reporter": "abuse_ch"
        }
    ],
    "3819457": [
        {
            "dateadded": "2026-04-13 13:34:32 UTC",
            "url": "https://refundonex.com/cloud/form_08373.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819457/",
            "reporter": "abuse_ch"
        }
    ],
    "3819458": [
        {
            "dateadded": "2026-04-13 13:34:32 UTC",
            "url": "https://refundonex.com/cloud/form_30450.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819458/",
            "reporter": "abuse_ch"
        }
    ],
    "3819459": [
        {
            "dateadded": "2026-04-13 13:34:32 UTC",
            "url": "https://refundonex.com/cloud/form_80830.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819459/",
            "reporter": "abuse_ch"
        }
    ],
    "3819460": [
        {
            "dateadded": "2026-04-13 13:34:32 UTC",
            "url": "https://refundonex.com/cloud/form_45405.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819460/",
            "reporter": "abuse_ch"
        }
    ],
    "3819451": [
        {
            "dateadded": "2026-04-13 13:34:31 UTC",
            "url": "https://refundonex.com/cloud/form_85095.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819451/",
            "reporter": "abuse_ch"
        }
    ],
    "3819452": [
        {
            "dateadded": "2026-04-13 13:34:31 UTC",
            "url": "https://refundonex.com/cloud/form_68947.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819452/",
            "reporter": "abuse_ch"
        }
    ],
    "3819453": [
        {
            "dateadded": "2026-04-13 13:34:31 UTC",
            "url": "https://refundonex.com/cloud/form_65012.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819453/",
            "reporter": "abuse_ch"
        }
    ],
    "3819454": [
        {
            "dateadded": "2026-04-13 13:34:31 UTC",
            "url": "https://refundonex.com/cloud/form_69981.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819454/",
            "reporter": "abuse_ch"
        }
    ],
    "3819448": [
        {
            "dateadded": "2026-04-13 13:34:30 UTC",
            "url": "https://refundonex.com/cloud/form_23580.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819448/",
            "reporter": "abuse_ch"
        }
    ],
    "3819449": [
        {
            "dateadded": "2026-04-13 13:34:30 UTC",
            "url": "https://refundonex.com/cloud/form_98775.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819449/",
            "reporter": "abuse_ch"
        }
    ],
    "3819450": [
        {
            "dateadded": "2026-04-13 13:34:30 UTC",
            "url": "https://refundonex.com/cloud/form_66234.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819450/",
            "reporter": "abuse_ch"
        }
    ],
    "3819445": [
        {
            "dateadded": "2026-04-13 13:34:29 UTC",
            "url": "https://refundonex.com/cloud/form_42486.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819445/",
            "reporter": "abuse_ch"
        }
    ],
    "3819446": [
        {
            "dateadded": "2026-04-13 13:34:29 UTC",
            "url": "https://refundonex.com/cloud/form_06113.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819446/",
            "reporter": "abuse_ch"
        }
    ],
    "3819447": [
        {
            "dateadded": "2026-04-13 13:34:29 UTC",
            "url": "https://refundonex.com/cloud/form_91385.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819447/",
            "reporter": "abuse_ch"
        }
    ],
    "3819440": [
        {
            "dateadded": "2026-04-13 13:34:27 UTC",
            "url": "https://refundonex.com/cloud/form_68667.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819440/",
            "reporter": "abuse_ch"
        }
    ],
    "3819441": [
        {
            "dateadded": "2026-04-13 13:34:27 UTC",
            "url": "https://refundonex.com/cloud/form_72892.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819441/",
            "reporter": "abuse_ch"
        }
    ],
    "3819442": [
        {
            "dateadded": "2026-04-13 13:34:27 UTC",
            "url": "https://refundonex.com/cloud/form_87547.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819442/",
            "reporter": "abuse_ch"
        }
    ],
    "3819443": [
        {
            "dateadded": "2026-04-13 13:34:27 UTC",
            "url": "https://refundonex.com/cloud/form_40212.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819443/",
            "reporter": "abuse_ch"
        }
    ],
    "3819444": [
        {
            "dateadded": "2026-04-13 13:34:27 UTC",
            "url": "https://refundonex.com/cloud/form_12660.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819444/",
            "reporter": "abuse_ch"
        }
    ],
    "3819435": [
        {
            "dateadded": "2026-04-13 13:34:26 UTC",
            "url": "https://refundonex.com/cloud/form_48547.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819435/",
            "reporter": "abuse_ch"
        }
    ],
    "3819436": [
        {
            "dateadded": "2026-04-13 13:34:26 UTC",
            "url": "https://refundonex.com/cloud/form_86171.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819436/",
            "reporter": "abuse_ch"
        }
    ],
    "3819437": [
        {
            "dateadded": "2026-04-13 13:34:26 UTC",
            "url": "https://refundonex.com/cloud/form_68793.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819437/",
            "reporter": "abuse_ch"
        }
    ],
    "3819438": [
        {
            "dateadded": "2026-04-13 13:34:26 UTC",
            "url": "https://refundonex.com/cloud/form_96182.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819438/",
            "reporter": "abuse_ch"
        }
    ],
    "3819439": [
        {
            "dateadded": "2026-04-13 13:34:26 UTC",
            "url": "https://refundonex.com/cloud/form_52326.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819439/",
            "reporter": "abuse_ch"
        }
    ],
    "3819427": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_68809.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819427/",
            "reporter": "abuse_ch"
        }
    ],
    "3819428": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_52221.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819428/",
            "reporter": "abuse_ch"
        }
    ],
    "3819429": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_07384.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819429/",
            "reporter": "abuse_ch"
        }
    ],
    "3819430": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_05947.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819430/",
            "reporter": "abuse_ch"
        }
    ],
    "3819431": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_49317.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819431/",
            "reporter": "abuse_ch"
        }
    ],
    "3819432": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_24938.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819432/",
            "reporter": "abuse_ch"
        }
    ],
    "3819433": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_96851.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819433/",
            "reporter": "abuse_ch"
        }
    ],
    "3819434": [
        {
            "dateadded": "2026-04-13 13:34:25 UTC",
            "url": "https://refundonex.com/cloud/form_96856.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819434/",
            "reporter": "abuse_ch"
        }
    ],
    "3819421": [
        {
            "dateadded": "2026-04-13 13:34:24 UTC",
            "url": "https://refundonex.com/cloud/form_34096.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819421/",
            "reporter": "abuse_ch"
        }
    ],
    "3819422": [
        {
            "dateadded": "2026-04-13 13:34:24 UTC",
            "url": "https://refundonex.com/cloud/form_02324.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819422/",
            "reporter": "abuse_ch"
        }
    ],
    "3819423": [
        {
            "dateadded": "2026-04-13 13:34:24 UTC",
            "url": "https://refundonex.com/cloud/form_43188.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819423/",
            "reporter": "abuse_ch"
        }
    ],
    "3819424": [
        {
            "dateadded": "2026-04-13 13:34:24 UTC",
            "url": "https://refundonex.com/cloud/form_47111.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819424/",
            "reporter": "abuse_ch"
        }
    ],
    "3819425": [
        {
            "dateadded": "2026-04-13 13:34:24 UTC",
            "url": "https://refundonex.com/cloud/form_53098.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819425/",
            "reporter": "abuse_ch"
        }
    ],
    "3819426": [
        {
            "dateadded": "2026-04-13 13:34:24 UTC",
            "url": "https://refundonex.com/cloud/form_91762.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819426/",
            "reporter": "abuse_ch"
        }
    ],
    "3819415": [
        {
            "dateadded": "2026-04-13 13:34:23 UTC",
            "url": "https://refundonex.com/cloud/form_20295.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819415/",
            "reporter": "abuse_ch"
        }
    ],
    "3819416": [
        {
            "dateadded": "2026-04-13 13:34:23 UTC",
            "url": "https://refundonex.com/cloud/form_93523.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819416/",
            "reporter": "abuse_ch"
        }
    ],
    "3819417": [
        {
            "dateadded": "2026-04-13 13:34:23 UTC",
            "url": "https://refundonex.com/cloud/form_02839.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819417/",
            "reporter": "abuse_ch"
        }
    ],
    "3819418": [
        {
            "dateadded": "2026-04-13 13:34:23 UTC",
            "url": "https://refundonex.com/cloud/form_82893.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819418/",
            "reporter": "abuse_ch"
        }
    ],
    "3819419": [
        {
            "dateadded": "2026-04-13 13:34:23 UTC",
            "url": "https://refundonex.com/cloud/form_80995.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819419/",
            "reporter": "abuse_ch"
        }
    ],
    "3819420": [
        {
            "dateadded": "2026-04-13 13:34:23 UTC",
            "url": "https://refundonex.com/cloud/form_37964.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819420/",
            "reporter": "abuse_ch"
        }
    ],
    "3819411": [
        {
            "dateadded": "2026-04-13 13:34:22 UTC",
            "url": "https://refundonex.com/cloud/form_84276.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819411/",
            "reporter": "abuse_ch"
        }
    ],
    "3819412": [
        {
            "dateadded": "2026-04-13 13:34:22 UTC",
            "url": "https://refundonex.com/cloud/form_86529.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819412/",
            "reporter": "abuse_ch"
        }
    ],
    "3819413": [
        {
            "dateadded": "2026-04-13 13:34:22 UTC",
            "url": "https://refundonex.com/cloud/form_41604.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819413/",
            "reporter": "abuse_ch"
        }
    ],
    "3819414": [
        {
            "dateadded": "2026-04-13 13:34:22 UTC",
            "url": "https://refundonex.com/cloud/form_05801.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819414/",
            "reporter": "abuse_ch"
        }
    ],
    "3819410": [
        {
            "dateadded": "2026-04-13 13:34:21 UTC",
            "url": "https://refundonex.com/cloud/form_62511.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819410/",
            "reporter": "abuse_ch"
        }
    ],
    "3819408": [
        {
            "dateadded": "2026-04-13 13:34:19 UTC",
            "url": "https://refundonex.com/cloud/form_22301.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819408/",
            "reporter": "abuse_ch"
        }
    ],
    "3819409": [
        {
            "dateadded": "2026-04-13 13:34:19 UTC",
            "url": "https://refundonex.com/cloud/form_15833.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819409/",
            "reporter": "abuse_ch"
        }
    ],
    "3819403": [
        {
            "dateadded": "2026-04-13 13:34:17 UTC",
            "url": "https://refundonex.com/cloud/form_35790.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819403/",
            "reporter": "abuse_ch"
        }
    ],
    "3819404": [
        {
            "dateadded": "2026-04-13 13:34:17 UTC",
            "url": "https://refundonex.com/cloud/form_97455.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819404/",
            "reporter": "abuse_ch"
        }
    ],
    "3819405": [
        {
            "dateadded": "2026-04-13 13:34:17 UTC",
            "url": "https://refundonex.com/cloud/form_15965.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819405/",
            "reporter": "abuse_ch"
        }
    ],
    "3819406": [
        {
            "dateadded": "2026-04-13 13:34:17 UTC",
            "url": "https://refundonex.com/cloud/form_64549.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819406/",
            "reporter": "abuse_ch"
        }
    ],
    "3819407": [
        {
            "dateadded": "2026-04-13 13:34:17 UTC",
            "url": "https://refundonex.com/cloud/form_81909.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819407/",
            "reporter": "abuse_ch"
        }
    ],
    "3819400": [
        {
            "dateadded": "2026-04-13 13:34:16 UTC",
            "url": "https://refundonex.com/cloud/form_82041.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819400/",
            "reporter": "abuse_ch"
        }
    ],
    "3819401": [
        {
            "dateadded": "2026-04-13 13:34:16 UTC",
            "url": "https://refundonex.com/cloud/form_96851.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819401/",
            "reporter": "abuse_ch"
        }
    ],
    "3819402": [
        {
            "dateadded": "2026-04-13 13:34:16 UTC",
            "url": "https://refundonex.com/cloud/form_91747.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819402/",
            "reporter": "abuse_ch"
        }
    ],
    "3819398": [
        {
            "dateadded": "2026-04-13 13:34:15 UTC",
            "url": "https://refundonex.com/cloud/form_57350.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819398/",
            "reporter": "abuse_ch"
        }
    ],
    "3819399": [
        {
            "dateadded": "2026-04-13 13:34:15 UTC",
            "url": "https://refundonex.com/cloud/form_80308.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819399/",
            "reporter": "abuse_ch"
        }
    ],
    "3819391": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_15163.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819391/",
            "reporter": "abuse_ch"
        }
    ],
    "3819392": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_33967.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819392/",
            "reporter": "abuse_ch"
        }
    ],
    "3819393": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_55459.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819393/",
            "reporter": "abuse_ch"
        }
    ],
    "3819394": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_98937.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819394/",
            "reporter": "abuse_ch"
        }
    ],
    "3819395": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_34561.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819395/",
            "reporter": "abuse_ch"
        }
    ],
    "3819396": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_34293.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819396/",
            "reporter": "abuse_ch"
        }
    ],
    "3819397": [
        {
            "dateadded": "2026-04-13 13:34:14 UTC",
            "url": "https://refundonex.com/cloud/form_63128.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819397/",
            "reporter": "abuse_ch"
        }
    ],
    "3819388": [
        {
            "dateadded": "2026-04-13 13:34:13 UTC",
            "url": "https://refundonex.com/cloud/form_65012.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819388/",
            "reporter": "abuse_ch"
        }
    ],
    "3819389": [
        {
            "dateadded": "2026-04-13 13:34:13 UTC",
            "url": "https://refundonex.com/cloud/form_44238.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819389/",
            "reporter": "abuse_ch"
        }
    ],
    "3819390": [
        {
            "dateadded": "2026-04-13 13:34:13 UTC",
            "url": "https://refundonex.com/cloud/form_81592.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819390/",
            "reporter": "abuse_ch"
        }
    ],
    "3819386": [
        {
            "dateadded": "2026-04-13 13:34:12 UTC",
            "url": "https://refundonex.com/cloud/form_55365.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819386/",
            "reporter": "abuse_ch"
        }
    ],
    "3819387": [
        {
            "dateadded": "2026-04-13 13:34:12 UTC",
            "url": "https://refundonex.com/cloud/form_26726.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819387/",
            "reporter": "abuse_ch"
        }
    ],
    "3819376": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_64830.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819376/",
            "reporter": "abuse_ch"
        }
    ],
    "3819377": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_45248.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819377/",
            "reporter": "abuse_ch"
        }
    ],
    "3819378": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_34916.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819378/",
            "reporter": "abuse_ch"
        }
    ],
    "3819379": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_33769.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819379/",
            "reporter": "abuse_ch"
        }
    ],
    "3819380": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_87414.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819380/",
            "reporter": "abuse_ch"
        }
    ],
    "3819381": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_70402.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819381/",
            "reporter": "abuse_ch"
        }
    ],
    "3819382": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_35403.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819382/",
            "reporter": "abuse_ch"
        }
    ],
    "3819383": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_74570.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819383/",
            "reporter": "abuse_ch"
        }
    ],
    "3819384": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_91985.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819384/",
            "reporter": "abuse_ch"
        }
    ],
    "3819385": [
        {
            "dateadded": "2026-04-13 13:34:11 UTC",
            "url": "https://refundonex.com/cloud/form_28076.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819385/",
            "reporter": "abuse_ch"
        }
    ],
    "3819371": [
        {
            "dateadded": "2026-04-13 13:34:10 UTC",
            "url": "https://refundonex.com/cloud/form_66147.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819371/",
            "reporter": "abuse_ch"
        }
    ],
    "3819372": [
        {
            "dateadded": "2026-04-13 13:34:10 UTC",
            "url": "https://refundonex.com/cloud/form_45629.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819372/",
            "reporter": "abuse_ch"
        }
    ],
    "3819373": [
        {
            "dateadded": "2026-04-13 13:34:10 UTC",
            "url": "https://refundonex.com/cloud/form_38374.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819373/",
            "reporter": "abuse_ch"
        }
    ],
    "3819374": [
        {
            "dateadded": "2026-04-13 13:34:10 UTC",
            "url": "https://refundonex.com/cloud/form_63278.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819374/",
            "reporter": "abuse_ch"
        }
    ],
    "3819375": [
        {
            "dateadded": "2026-04-13 13:34:10 UTC",
            "url": "https://refundonex.com/cloud/form_41668.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819375/",
            "reporter": "abuse_ch"
        }
    ],
    "3819368": [
        {
            "dateadded": "2026-04-13 13:34:09 UTC",
            "url": "https://refundonex.com/cloud/form_23840.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819368/",
            "reporter": "abuse_ch"
        }
    ],
    "3819369": [
        {
            "dateadded": "2026-04-13 13:34:09 UTC",
            "url": "https://refundonex.com/cloud/form_44107.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819369/",
            "reporter": "abuse_ch"
        }
    ],
    "3819370": [
        {
            "dateadded": "2026-04-13 13:34:09 UTC",
            "url": "https://refundonex.com/cloud/form_04878.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819370/",
            "reporter": "abuse_ch"
        }
    ],
    "3819363": [
        {
            "dateadded": "2026-04-13 13:34:07 UTC",
            "url": "https://refundonex.com/cloud/form_02148.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819363/",
            "reporter": "abuse_ch"
        }
    ],
    "3819364": [
        {
            "dateadded": "2026-04-13 13:34:07 UTC",
            "url": "https://refundonex.com/cloud/form_39600.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819364/",
            "reporter": "abuse_ch"
        }
    ],
    "3819365": [
        {
            "dateadded": "2026-04-13 13:34:07 UTC",
            "url": "https://refundonex.com/cloud/form_73779.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819365/",
            "reporter": "abuse_ch"
        }
    ],
    "3819366": [
        {
            "dateadded": "2026-04-13 13:34:07 UTC",
            "url": "https://refundonex.com/cloud/form_46358.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819366/",
            "reporter": "abuse_ch"
        }
    ],
    "3819367": [
        {
            "dateadded": "2026-04-13 13:34:07 UTC",
            "url": "https://refundonex.com/cloud/form_12971.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819367/",
            "reporter": "abuse_ch"
        }
    ],
    "3819360": [
        {
            "dateadded": "2026-04-13 13:34:05 UTC",
            "url": "https://refundonex.com/cloud/form_87951.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819360/",
            "reporter": "abuse_ch"
        }
    ],
    "3819361": [
        {
            "dateadded": "2026-04-13 13:34:05 UTC",
            "url": "https://refundonex.com/cloud/form_96856.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819361/",
            "reporter": "abuse_ch"
        }
    ],
    "3819362": [
        {
            "dateadded": "2026-04-13 13:34:05 UTC",
            "url": "https://refundonex.com/cloud/form_18088.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819362/",
            "reporter": "abuse_ch"
        }
    ],
    "3819359": [
        {
            "dateadded": "2026-04-13 13:34:04 UTC",
            "url": "https://refundonex.com/cloud/form_40212.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819359/",
            "reporter": "abuse_ch"
        }
    ],
    "3819357": [
        {
            "dateadded": "2026-04-13 13:34:03 UTC",
            "url": "https://refundonex.com/cloud/form_99893.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819357/",
            "reporter": "abuse_ch"
        }
    ],
    "3819358": [
        {
            "dateadded": "2026-04-13 13:34:03 UTC",
            "url": "https://refundonex.com/cloud/form_69167.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819358/",
            "reporter": "abuse_ch"
        }
    ],
    "3819355": [
        {
            "dateadded": "2026-04-13 13:34:02 UTC",
            "url": "https://refundonex.com/cloud/form_87533.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:02 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819355/",
            "reporter": "abuse_ch"
        }
    ],
    "3819356": [
        {
            "dateadded": "2026-04-13 13:34:02 UTC",
            "url": "https://refundonex.com/cloud/form_16383.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819356/",
            "reporter": "abuse_ch"
        }
    ],
    "3819352": [
        {
            "dateadded": "2026-04-13 13:34:01 UTC",
            "url": "https://refundonex.com/cloud/form_23580.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819352/",
            "reporter": "abuse_ch"
        }
    ],
    "3819353": [
        {
            "dateadded": "2026-04-13 13:34:01 UTC",
            "url": "https://refundonex.com/cloud/form_22704.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819353/",
            "reporter": "abuse_ch"
        }
    ],
    "3819354": [
        {
            "dateadded": "2026-04-13 13:34:01 UTC",
            "url": "https://refundonex.com/cloud/form_46359.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819354/",
            "reporter": "abuse_ch"
        }
    ],
    "3819344": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_96608.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819344/",
            "reporter": "abuse_ch"
        }
    ],
    "3819345": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_86906.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819345/",
            "reporter": "abuse_ch"
        }
    ],
    "3819346": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_23255.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819346/",
            "reporter": "abuse_ch"
        }
    ],
    "3819347": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_69721.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819347/",
            "reporter": "abuse_ch"
        }
    ],
    "3819348": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_88278.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819348/",
            "reporter": "abuse_ch"
        }
    ],
    "3819349": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_52809.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819349/",
            "reporter": "abuse_ch"
        }
    ],
    "3819350": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_91865.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819350/",
            "reporter": "abuse_ch"
        }
    ],
    "3819351": [
        {
            "dateadded": "2026-04-13 13:34:00 UTC",
            "url": "https://refundonex.com/cloud/form_02259.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819351/",
            "reporter": "abuse_ch"
        }
    ],
    "3819341": [
        {
            "dateadded": "2026-04-13 13:33:59 UTC",
            "url": "https://refundonex.com/cloud/form_07793.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819341/",
            "reporter": "abuse_ch"
        }
    ],
    "3819342": [
        {
            "dateadded": "2026-04-13 13:33:59 UTC",
            "url": "https://refundonex.com/cloud/form_43919.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819342/",
            "reporter": "abuse_ch"
        }
    ],
    "3819343": [
        {
            "dateadded": "2026-04-13 13:33:59 UTC",
            "url": "https://refundonex.com/cloud/form_76835.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819343/",
            "reporter": "abuse_ch"
        }
    ],
    "3819338": [
        {
            "dateadded": "2026-04-13 13:33:58 UTC",
            "url": "https://refundonex.com/cloud/form_50616.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819338/",
            "reporter": "abuse_ch"
        }
    ],
    "3819339": [
        {
            "dateadded": "2026-04-13 13:33:58 UTC",
            "url": "https://refundonex.com/cloud/form_47111.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819339/",
            "reporter": "abuse_ch"
        }
    ],
    "3819340": [
        {
            "dateadded": "2026-04-13 13:33:58 UTC",
            "url": "https://refundonex.com/cloud/form_76148.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819340/",
            "reporter": "abuse_ch"
        }
    ],
    "3819332": [
        {
            "dateadded": "2026-04-13 13:33:57 UTC",
            "url": "https://refundonex.com/cloud/form_96673.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819332/",
            "reporter": "abuse_ch"
        }
    ],
    "3819333": [
        {
            "dateadded": "2026-04-13 13:33:57 UTC",
            "url": "https://refundonex.com/cloud/form_36722.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819333/",
            "reporter": "abuse_ch"
        }
    ],
    "3819334": [
        {
            "dateadded": "2026-04-13 13:33:57 UTC",
            "url": "https://refundonex.com/cloud/form_00088.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819334/",
            "reporter": "abuse_ch"
        }
    ],
    "3819335": [
        {
            "dateadded": "2026-04-13 13:33:57 UTC",
            "url": "https://refundonex.com/cloud/form_83432.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819335/",
            "reporter": "abuse_ch"
        }
    ],
    "3819336": [
        {
            "dateadded": "2026-04-13 13:33:57 UTC",
            "url": "https://refundonex.com/cloud/form_88815.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819336/",
            "reporter": "abuse_ch"
        }
    ],
    "3819337": [
        {
            "dateadded": "2026-04-13 13:33:57 UTC",
            "url": "https://refundonex.com/cloud/form_18344.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819337/",
            "reporter": "abuse_ch"
        }
    ],
    "3819330": [
        {
            "dateadded": "2026-04-13 13:33:56 UTC",
            "url": "https://refundonex.com/cloud/form_08117.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819330/",
            "reporter": "abuse_ch"
        }
    ],
    "3819331": [
        {
            "dateadded": "2026-04-13 13:33:56 UTC",
            "url": "https://refundonex.com/cloud/form_96728.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819331/",
            "reporter": "abuse_ch"
        }
    ],
    "3819324": [
        {
            "dateadded": "2026-04-13 13:33:55 UTC",
            "url": "https://refundonex.com/cloud/form_57352.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819324/",
            "reporter": "abuse_ch"
        }
    ],
    "3819325": [
        {
            "dateadded": "2026-04-13 13:33:55 UTC",
            "url": "https://refundonex.com/cloud/form_62775.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819325/",
            "reporter": "abuse_ch"
        }
    ],
    "3819326": [
        {
            "dateadded": "2026-04-13 13:33:55 UTC",
            "url": "https://refundonex.com/cloud/form_87118.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819326/",
            "reporter": "abuse_ch"
        }
    ],
    "3819327": [
        {
            "dateadded": "2026-04-13 13:33:55 UTC",
            "url": "https://refundonex.com/cloud/form_81148.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819327/",
            "reporter": "abuse_ch"
        }
    ],
    "3819328": [
        {
            "dateadded": "2026-04-13 13:33:55 UTC",
            "url": "https://refundonex.com/cloud/form_37383.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819328/",
            "reporter": "abuse_ch"
        }
    ],
    "3819329": [
        {
            "dateadded": "2026-04-13 13:33:55 UTC",
            "url": "https://refundonex.com/cloud/form_53051.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819329/",
            "reporter": "abuse_ch"
        }
    ],
    "3819316": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_55365.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819316/",
            "reporter": "abuse_ch"
        }
    ],
    "3819317": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_68359.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819317/",
            "reporter": "abuse_ch"
        }
    ],
    "3819318": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_85706.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819318/",
            "reporter": "abuse_ch"
        }
    ],
    "3819319": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_55691.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819319/",
            "reporter": "abuse_ch"
        }
    ],
    "3819320": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_50144.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819320/",
            "reporter": "abuse_ch"
        }
    ],
    "3819321": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_46395.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819321/",
            "reporter": "abuse_ch"
        }
    ],
    "3819322": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_35807.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819322/",
            "reporter": "abuse_ch"
        }
    ],
    "3819323": [
        {
            "dateadded": "2026-04-13 13:33:52 UTC",
            "url": "https://refundonex.com/cloud/form_80308.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819323/",
            "reporter": "abuse_ch"
        }
    ],
    "3819313": [
        {
            "dateadded": "2026-04-13 13:33:51 UTC",
            "url": "https://refundonex.com/cloud/form_97776.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819313/",
            "reporter": "abuse_ch"
        }
    ],
    "3819314": [
        {
            "dateadded": "2026-04-13 13:33:51 UTC",
            "url": "https://refundonex.com/cloud/form_19180.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819314/",
            "reporter": "abuse_ch"
        }
    ],
    "3819315": [
        {
            "dateadded": "2026-04-13 13:33:51 UTC",
            "url": "https://refundonex.com/cloud/form_59665.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819315/",
            "reporter": "abuse_ch"
        }
    ],
    "3819309": [
        {
            "dateadded": "2026-04-13 13:33:50 UTC",
            "url": "https://refundonex.com/cloud/form_40358.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819309/",
            "reporter": "abuse_ch"
        }
    ],
    "3819310": [
        {
            "dateadded": "2026-04-13 13:33:50 UTC",
            "url": "https://refundonex.com/cloud/form_19463.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819310/",
            "reporter": "abuse_ch"
        }
    ],
    "3819311": [
        {
            "dateadded": "2026-04-13 13:33:50 UTC",
            "url": "https://refundonex.com/cloud/form_88691.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819311/",
            "reporter": "abuse_ch"
        }
    ],
    "3819312": [
        {
            "dateadded": "2026-04-13 13:33:50 UTC",
            "url": "https://refundonex.com/cloud/form_61111.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819312/",
            "reporter": "abuse_ch"
        }
    ],
    "3819300": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_77914.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819300/",
            "reporter": "abuse_ch"
        }
    ],
    "3819301": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_78413.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819301/",
            "reporter": "abuse_ch"
        }
    ],
    "3819302": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_51894.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819302/",
            "reporter": "abuse_ch"
        }
    ],
    "3819303": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_57473.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819303/",
            "reporter": "abuse_ch"
        }
    ],
    "3819304": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_58832.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819304/",
            "reporter": "abuse_ch"
        }
    ],
    "3819305": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_71572.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819305/",
            "reporter": "abuse_ch"
        }
    ],
    "3819306": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_23536.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819306/",
            "reporter": "abuse_ch"
        }
    ],
    "3819307": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_27129.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819307/",
            "reporter": "abuse_ch"
        }
    ],
    "3819308": [
        {
            "dateadded": "2026-04-13 13:33:49 UTC",
            "url": "https://refundonex.com/cloud/form_21559.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819308/",
            "reporter": "abuse_ch"
        }
    ],
    "3819298": [
        {
            "dateadded": "2026-04-13 13:33:48 UTC",
            "url": "https://refundonex.com/cloud/form_82893.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819298/",
            "reporter": "abuse_ch"
        }
    ],
    "3819299": [
        {
            "dateadded": "2026-04-13 13:33:48 UTC",
            "url": "https://refundonex.com/cloud/form_77303.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819299/",
            "reporter": "abuse_ch"
        }
    ],
    "3819295": [
        {
            "dateadded": "2026-04-13 13:33:47 UTC",
            "url": "https://refundonex.com/cloud/form_07693.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819295/",
            "reporter": "abuse_ch"
        }
    ],
    "3819296": [
        {
            "dateadded": "2026-04-13 13:33:47 UTC",
            "url": "http://198.12.83.76/55/ec/nicespeakingwithbetstthingsforme.hta",
            "url_status": "offline",
            "last_online": "2026-04-13 22:29:41 UTC",
            "threat": "malware_download",
            "tags": [
                "hta",
                "opendir",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819296/",
            "reporter": "abuse_ch"
        }
    ],
    "3819297": [
        {
            "dateadded": "2026-04-13 13:33:47 UTC",
            "url": "https://refundonex.com/cloud/form_67033.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819297/",
            "reporter": "abuse_ch"
        }
    ],
    "3819293": [
        {
            "dateadded": "2026-04-13 13:33:46 UTC",
            "url": "https://refundonex.com/cloud/form_16220.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819293/",
            "reporter": "abuse_ch"
        }
    ],
    "3819294": [
        {
            "dateadded": "2026-04-13 13:33:46 UTC",
            "url": "https://refundonex.com/cloud/form_00007.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819294/",
            "reporter": "abuse_ch"
        }
    ],
    "3819292": [
        {
            "dateadded": "2026-04-13 13:33:45 UTC",
            "url": "https://refundonex.com/cloud/form_89431.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819292/",
            "reporter": "abuse_ch"
        }
    ],
    "3819290": [
        {
            "dateadded": "2026-04-13 13:33:44 UTC",
            "url": "https://refundonex.com/cloud/form_19266.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819290/",
            "reporter": "abuse_ch"
        }
    ],
    "3819291": [
        {
            "dateadded": "2026-04-13 13:33:44 UTC",
            "url": "https://refundonex.com/cloud/form_66268.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819291/",
            "reporter": "abuse_ch"
        }
    ],
    "3819285": [
        {
            "dateadded": "2026-04-13 13:33:43 UTC",
            "url": "https://refundonex.com/cloud/form_81271.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819285/",
            "reporter": "abuse_ch"
        }
    ],
    "3819286": [
        {
            "dateadded": "2026-04-13 13:33:43 UTC",
            "url": "https://refundonex.com/cloud/form_60081.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819286/",
            "reporter": "abuse_ch"
        }
    ],
    "3819287": [
        {
            "dateadded": "2026-04-13 13:33:43 UTC",
            "url": "https://refundonex.com/cloud/form_36597.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819287/",
            "reporter": "abuse_ch"
        }
    ],
    "3819288": [
        {
            "dateadded": "2026-04-13 13:33:43 UTC",
            "url": "https://refundonex.com/cloud/form_45658.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819288/",
            "reporter": "abuse_ch"
        }
    ],
    "3819289": [
        {
            "dateadded": "2026-04-13 13:33:43 UTC",
            "url": "https://refundonex.com/cloud/form_94559.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819289/",
            "reporter": "abuse_ch"
        }
    ],
    "3819278": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_04829.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819278/",
            "reporter": "abuse_ch"
        }
    ],
    "3819279": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_01796.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819279/",
            "reporter": "abuse_ch"
        }
    ],
    "3819280": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_31816.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819280/",
            "reporter": "abuse_ch"
        }
    ],
    "3819281": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_38427.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819281/",
            "reporter": "abuse_ch"
        }
    ],
    "3819282": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_78116.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819282/",
            "reporter": "abuse_ch"
        }
    ],
    "3819283": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_27573.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819283/",
            "reporter": "abuse_ch"
        }
    ],
    "3819284": [
        {
            "dateadded": "2026-04-13 13:33:42 UTC",
            "url": "https://refundonex.com/cloud/form_62563.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819284/",
            "reporter": "abuse_ch"
        }
    ],
    "3819273": [
        {
            "dateadded": "2026-04-13 13:33:41 UTC",
            "url": "https://refundonex.com/cloud/form_74229.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819273/",
            "reporter": "abuse_ch"
        }
    ],
    "3819274": [
        {
            "dateadded": "2026-04-13 13:33:41 UTC",
            "url": "https://refundonex.com/cloud/form_73678.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819274/",
            "reporter": "abuse_ch"
        }
    ],
    "3819275": [
        {
            "dateadded": "2026-04-13 13:33:41 UTC",
            "url": "https://refundonex.com/cloud/form_90950.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819275/",
            "reporter": "abuse_ch"
        }
    ],
    "3819276": [
        {
            "dateadded": "2026-04-13 13:33:41 UTC",
            "url": "https://refundonex.com/cloud/form_93351.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819276/",
            "reporter": "abuse_ch"
        }
    ],
    "3819277": [
        {
            "dateadded": "2026-04-13 13:33:41 UTC",
            "url": "https://refundonex.com/cloud/form_83865.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819277/",
            "reporter": "abuse_ch"
        }
    ],
    "3819259": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_87491.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819259/",
            "reporter": "abuse_ch"
        }
    ],
    "3819260": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_87057.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819260/",
            "reporter": "abuse_ch"
        }
    ],
    "3819261": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_20786.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819261/",
            "reporter": "abuse_ch"
        }
    ],
    "3819262": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_81867.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819262/",
            "reporter": "abuse_ch"
        }
    ],
    "3819263": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_69975.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819263/",
            "reporter": "abuse_ch"
        }
    ],
    "3819264": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_96629.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819264/",
            "reporter": "abuse_ch"
        }
    ],
    "3819265": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_02192.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819265/",
            "reporter": "abuse_ch"
        }
    ],
    "3819266": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_20137.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819266/",
            "reporter": "abuse_ch"
        }
    ],
    "3819267": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_01812.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819267/",
            "reporter": "abuse_ch"
        }
    ],
    "3819268": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_93224.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819268/",
            "reporter": "abuse_ch"
        }
    ],
    "3819269": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_18177.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819269/",
            "reporter": "abuse_ch"
        }
    ],
    "3819270": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_08811.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819270/",
            "reporter": "abuse_ch"
        }
    ],
    "3819271": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_74229.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819271/",
            "reporter": "abuse_ch"
        }
    ],
    "3819272": [
        {
            "dateadded": "2026-04-13 13:33:40 UTC",
            "url": "https://refundonex.com/cloud/form_19266.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819272/",
            "reporter": "abuse_ch"
        }
    ],
    "3819258": [
        {
            "dateadded": "2026-04-13 13:33:39 UTC",
            "url": "https://refundonex.com/cloud/form_53097.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819258/",
            "reporter": "abuse_ch"
        }
    ],
    "3819251": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_01458.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819251/",
            "reporter": "abuse_ch"
        }
    ],
    "3819252": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_36331.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819252/",
            "reporter": "abuse_ch"
        }
    ],
    "3819253": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_59517.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819253/",
            "reporter": "abuse_ch"
        }
    ],
    "3819254": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_27245.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819254/",
            "reporter": "abuse_ch"
        }
    ],
    "3819255": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_85934.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819255/",
            "reporter": "abuse_ch"
        }
    ],
    "3819256": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_89431.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819256/",
            "reporter": "abuse_ch"
        }
    ],
    "3819257": [
        {
            "dateadded": "2026-04-13 13:33:34 UTC",
            "url": "https://refundonex.com/cloud/form_97143.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819257/",
            "reporter": "abuse_ch"
        }
    ],
    "3819240": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_23911.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819240/",
            "reporter": "abuse_ch"
        }
    ],
    "3819241": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_92696.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819241/",
            "reporter": "abuse_ch"
        }
    ],
    "3819242": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_02162.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819242/",
            "reporter": "abuse_ch"
        }
    ],
    "3819243": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_80830.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819243/",
            "reporter": "abuse_ch"
        }
    ],
    "3819244": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_96145.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819244/",
            "reporter": "abuse_ch"
        }
    ],
    "3819245": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_15181.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819245/",
            "reporter": "abuse_ch"
        }
    ],
    "3819246": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_30736.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819246/",
            "reporter": "abuse_ch"
        }
    ],
    "3819247": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_87519.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819247/",
            "reporter": "abuse_ch"
        }
    ],
    "3819248": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_98722.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819248/",
            "reporter": "abuse_ch"
        }
    ],
    "3819249": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_91129.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819249/",
            "reporter": "abuse_ch"
        }
    ],
    "3819250": [
        {
            "dateadded": "2026-04-13 13:33:31 UTC",
            "url": "https://refundonex.com/cloud/form_87554.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819250/",
            "reporter": "abuse_ch"
        }
    ],
    "3819232": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_86906.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819232/",
            "reporter": "abuse_ch"
        }
    ],
    "3819233": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_10319.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819233/",
            "reporter": "abuse_ch"
        }
    ],
    "3819234": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_49326.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819234/",
            "reporter": "abuse_ch"
        }
    ],
    "3819235": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_03569.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819235/",
            "reporter": "abuse_ch"
        }
    ],
    "3819236": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_92625.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819236/",
            "reporter": "abuse_ch"
        }
    ],
    "3819237": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_20296.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819237/",
            "reporter": "abuse_ch"
        }
    ],
    "3819238": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_91478.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819238/",
            "reporter": "abuse_ch"
        }
    ],
    "3819239": [
        {
            "dateadded": "2026-04-13 13:33:28 UTC",
            "url": "https://refundonex.com/cloud/form_77773.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819239/",
            "reporter": "abuse_ch"
        }
    ],
    "3819225": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_15791.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819225/",
            "reporter": "abuse_ch"
        }
    ],
    "3819226": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_99131.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819226/",
            "reporter": "abuse_ch"
        }
    ],
    "3819227": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_72788.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819227/",
            "reporter": "abuse_ch"
        }
    ],
    "3819228": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_78413.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819228/",
            "reporter": "abuse_ch"
        }
    ],
    "3819229": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_45276.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819229/",
            "reporter": "abuse_ch"
        }
    ],
    "3819230": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_96477.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819230/",
            "reporter": "abuse_ch"
        }
    ],
    "3819231": [
        {
            "dateadded": "2026-04-13 13:33:27 UTC",
            "url": "https://refundonex.com/cloud/form_11369.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819231/",
            "reporter": "abuse_ch"
        }
    ],
    "3819222": [
        {
            "dateadded": "2026-04-13 13:33:26 UTC",
            "url": "https://refundonex.com/cloud/form_16272.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819222/",
            "reporter": "abuse_ch"
        }
    ],
    "3819223": [
        {
            "dateadded": "2026-04-13 13:33:26 UTC",
            "url": "https://refundonex.com/cloud/form_36782.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819223/",
            "reporter": "abuse_ch"
        }
    ],
    "3819224": [
        {
            "dateadded": "2026-04-13 13:33:26 UTC",
            "url": "https://refundonex.com/cloud/form_23593.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819224/",
            "reporter": "abuse_ch"
        }
    ],
    "3819217": [
        {
            "dateadded": "2026-04-13 13:33:25 UTC",
            "url": "https://refundonex.com/cloud/form_01577.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819217/",
            "reporter": "abuse_ch"
        }
    ],
    "3819218": [
        {
            "dateadded": "2026-04-13 13:33:25 UTC",
            "url": "https://refundonex.com/cloud/form_04263.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819218/",
            "reporter": "abuse_ch"
        }
    ],
    "3819219": [
        {
            "dateadded": "2026-04-13 13:33:25 UTC",
            "url": "https://refundonex.com/cloud/form_91129.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819219/",
            "reporter": "abuse_ch"
        }
    ],
    "3819220": [
        {
            "dateadded": "2026-04-13 13:33:25 UTC",
            "url": "https://refundonex.com/cloud/form_77802.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819220/",
            "reporter": "abuse_ch"
        }
    ],
    "3819221": [
        {
            "dateadded": "2026-04-13 13:33:25 UTC",
            "url": "https://refundonex.com/cloud/form_57655.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819221/",
            "reporter": "abuse_ch"
        }
    ],
    "3819212": [
        {
            "dateadded": "2026-04-13 13:33:23 UTC",
            "url": "https://refundonex.com/cloud/form_12317.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819212/",
            "reporter": "abuse_ch"
        }
    ],
    "3819213": [
        {
            "dateadded": "2026-04-13 13:33:23 UTC",
            "url": "https://refundonex.com/cloud/form_93549.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819213/",
            "reporter": "abuse_ch"
        }
    ],
    "3819214": [
        {
            "dateadded": "2026-04-13 13:33:23 UTC",
            "url": "https://refundonex.com/cloud/form_24070.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819214/",
            "reporter": "abuse_ch"
        }
    ],
    "3819215": [
        {
            "dateadded": "2026-04-13 13:33:23 UTC",
            "url": "http://107.175.88.100/458/4/cloudconnections.js",
            "url_status": "offline",
            "last_online": "2026-04-13 22:59:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "js",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819215/",
            "reporter": "abuse_ch"
        }
    ],
    "3819216": [
        {
            "dateadded": "2026-04-13 13:33:23 UTC",
            "url": "https://refundonex.com/cloud/form_09506.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819216/",
            "reporter": "abuse_ch"
        }
    ],
    "3819205": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_85892.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819205/",
            "reporter": "abuse_ch"
        }
    ],
    "3819206": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_37612.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819206/",
            "reporter": "abuse_ch"
        }
    ],
    "3819207": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_16430.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819207/",
            "reporter": "abuse_ch"
        }
    ],
    "3819208": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_39574.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819208/",
            "reporter": "abuse_ch"
        }
    ],
    "3819209": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_89271.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819209/",
            "reporter": "abuse_ch"
        }
    ],
    "3819210": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_95559.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819210/",
            "reporter": "abuse_ch"
        }
    ],
    "3819211": [
        {
            "dateadded": "2026-04-13 13:33:22 UTC",
            "url": "https://refundonex.com/cloud/form_44090.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819211/",
            "reporter": "abuse_ch"
        }
    ],
    "3819204": [
        {
            "dateadded": "2026-04-13 13:33:21 UTC",
            "url": "https://refundonex.com/cloud/form_38832.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819204/",
            "reporter": "abuse_ch"
        }
    ],
    "3819203": [
        {
            "dateadded": "2026-04-13 13:33:19 UTC",
            "url": "https://refundonex.com/cloud/form_63948.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819203/",
            "reporter": "abuse_ch"
        }
    ],
    "3819194": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_12570.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819194/",
            "reporter": "abuse_ch"
        }
    ],
    "3819195": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_00142.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819195/",
            "reporter": "abuse_ch"
        }
    ],
    "3819196": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_84071.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819196/",
            "reporter": "abuse_ch"
        }
    ],
    "3819197": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_20295.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819197/",
            "reporter": "abuse_ch"
        }
    ],
    "3819198": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_99084.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819198/",
            "reporter": "abuse_ch"
        }
    ],
    "3819199": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_43572.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819199/",
            "reporter": "abuse_ch"
        }
    ],
    "3819200": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_88598.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819200/",
            "reporter": "abuse_ch"
        }
    ],
    "3819201": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_85753.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819201/",
            "reporter": "abuse_ch"
        }
    ],
    "3819202": [
        {
            "dateadded": "2026-04-13 13:33:18 UTC",
            "url": "https://refundonex.com/cloud/form_01458.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819202/",
            "reporter": "abuse_ch"
        }
    ],
    "3819187": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_15098.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819187/",
            "reporter": "abuse_ch"
        }
    ],
    "3819188": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_64055.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819188/",
            "reporter": "abuse_ch"
        }
    ],
    "3819189": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_87454.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819189/",
            "reporter": "abuse_ch"
        }
    ],
    "3819190": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_12110.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819190/",
            "reporter": "abuse_ch"
        }
    ],
    "3819191": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_01812.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819191/",
            "reporter": "abuse_ch"
        }
    ],
    "3819192": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_85369.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819192/",
            "reporter": "abuse_ch"
        }
    ],
    "3819193": [
        {
            "dateadded": "2026-04-13 13:33:17 UTC",
            "url": "https://refundonex.com/cloud/form_57350.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819193/",
            "reporter": "abuse_ch"
        }
    ],
    "3819177": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_55459.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819177/",
            "reporter": "abuse_ch"
        }
    ],
    "3819178": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_88971.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819178/",
            "reporter": "abuse_ch"
        }
    ],
    "3819179": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_96673.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819179/",
            "reporter": "abuse_ch"
        }
    ],
    "3819180": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_92157.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819180/",
            "reporter": "abuse_ch"
        }
    ],
    "3819181": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_26701.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819181/",
            "reporter": "abuse_ch"
        }
    ],
    "3819182": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_89226.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819182/",
            "reporter": "abuse_ch"
        }
    ],
    "3819183": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_05378.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819183/",
            "reporter": "abuse_ch"
        }
    ],
    "3819184": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_53631.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819184/",
            "reporter": "abuse_ch"
        }
    ],
    "3819185": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_46031.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819185/",
            "reporter": "abuse_ch"
        }
    ],
    "3819186": [
        {
            "dateadded": "2026-04-13 13:33:16 UTC",
            "url": "https://refundonex.com/cloud/form_37707.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819186/",
            "reporter": "abuse_ch"
        }
    ],
    "3819175": [
        {
            "dateadded": "2026-04-13 13:33:15 UTC",
            "url": "https://refundonex.com/cloud/form_38832.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819175/",
            "reporter": "abuse_ch"
        }
    ],
    "3819176": [
        {
            "dateadded": "2026-04-13 13:33:15 UTC",
            "url": "https://refundonex.com/cloud/form_35369.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819176/",
            "reporter": "abuse_ch"
        }
    ],
    "3819169": [
        {
            "dateadded": "2026-04-13 13:33:13 UTC",
            "url": "https://refundonex.com/cloud/form_87253.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819169/",
            "reporter": "abuse_ch"
        }
    ],
    "3819170": [
        {
            "dateadded": "2026-04-13 13:33:13 UTC",
            "url": "https://refundonex.com/cloud/form_68283.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819170/",
            "reporter": "abuse_ch"
        }
    ],
    "3819171": [
        {
            "dateadded": "2026-04-13 13:33:13 UTC",
            "url": "https://refundonex.com/cloud/form_11055.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819171/",
            "reporter": "abuse_ch"
        }
    ],
    "3819172": [
        {
            "dateadded": "2026-04-13 13:33:13 UTC",
            "url": "https://refundonex.com/cloud/form_60555.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819172/",
            "reporter": "abuse_ch"
        }
    ],
    "3819173": [
        {
            "dateadded": "2026-04-13 13:33:13 UTC",
            "url": "https://refundonex.com/cloud/form_70256.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819173/",
            "reporter": "abuse_ch"
        }
    ],
    "3819174": [
        {
            "dateadded": "2026-04-13 13:33:13 UTC",
            "url": "https://refundonex.com/cloud/form_59572.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819174/",
            "reporter": "abuse_ch"
        }
    ],
    "3819165": [
        {
            "dateadded": "2026-04-13 13:33:11 UTC",
            "url": "https://refundonex.com/cloud/form_43572.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819165/",
            "reporter": "abuse_ch"
        }
    ],
    "3819166": [
        {
            "dateadded": "2026-04-13 13:33:11 UTC",
            "url": "https://refundonex.com/cloud/form_91762.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819166/",
            "reporter": "abuse_ch"
        }
    ],
    "3819167": [
        {
            "dateadded": "2026-04-13 13:33:11 UTC",
            "url": "https://refundonex.com/cloud/form_48879.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819167/",
            "reporter": "abuse_ch"
        }
    ],
    "3819168": [
        {
            "dateadded": "2026-04-13 13:33:11 UTC",
            "url": "https://refundonex.com/cloud/form_97455.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819168/",
            "reporter": "abuse_ch"
        }
    ],
    "3819162": [
        {
            "dateadded": "2026-04-13 13:33:09 UTC",
            "url": "https://refundonex.com/cloud/form_06235.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819162/",
            "reporter": "abuse_ch"
        }
    ],
    "3819163": [
        {
            "dateadded": "2026-04-13 13:33:09 UTC",
            "url": "https://refundonex.com/cloud/form_56298.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819163/",
            "reporter": "abuse_ch"
        }
    ],
    "3819164": [
        {
            "dateadded": "2026-04-13 13:33:09 UTC",
            "url": "https://refundonex.com/cloud/form_25723.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819164/",
            "reporter": "abuse_ch"
        }
    ],
    "3819159": [
        {
            "dateadded": "2026-04-13 13:33:08 UTC",
            "url": "https://refundonex.com/cloud/form_06290.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819159/",
            "reporter": "abuse_ch"
        }
    ],
    "3819160": [
        {
            "dateadded": "2026-04-13 13:33:08 UTC",
            "url": "https://refundonex.com/cloud/form_96580.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819160/",
            "reporter": "abuse_ch"
        }
    ],
    "3819161": [
        {
            "dateadded": "2026-04-13 13:33:08 UTC",
            "url": "https://refundonex.com/cloud/form_91762.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819161/",
            "reporter": "abuse_ch"
        }
    ],
    "3819147": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_56406.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819147/",
            "reporter": "abuse_ch"
        }
    ],
    "3819148": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_69149.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819148/",
            "reporter": "abuse_ch"
        }
    ],
    "3819149": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_76760.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819149/",
            "reporter": "abuse_ch"
        }
    ],
    "3819150": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_55648.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819150/",
            "reporter": "abuse_ch"
        }
    ],
    "3819151": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_71088.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819151/",
            "reporter": "abuse_ch"
        }
    ],
    "3819152": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_06705.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819152/",
            "reporter": "abuse_ch"
        }
    ],
    "3819153": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_85934.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819153/",
            "reporter": "abuse_ch"
        }
    ],
    "3819154": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_03478.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819154/",
            "reporter": "abuse_ch"
        }
    ],
    "3819155": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_15388.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819155/",
            "reporter": "abuse_ch"
        }
    ],
    "3819156": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_63675.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819156/",
            "reporter": "abuse_ch"
        }
    ],
    "3819157": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_45793.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819157/",
            "reporter": "abuse_ch"
        }
    ],
    "3819158": [
        {
            "dateadded": "2026-04-13 13:33:06 UTC",
            "url": "https://refundonex.com/cloud/form_96474.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819158/",
            "reporter": "abuse_ch"
        }
    ],
    "3819144": [
        {
            "dateadded": "2026-04-13 13:33:05 UTC",
            "url": "https://refundonex.com/cloud/form_15163.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819144/",
            "reporter": "abuse_ch"
        }
    ],
    "3819145": [
        {
            "dateadded": "2026-04-13 13:33:05 UTC",
            "url": "https://refundonex.com/cloud/form_66723.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819145/",
            "reporter": "abuse_ch"
        }
    ],
    "3819146": [
        {
            "dateadded": "2026-04-13 13:33:05 UTC",
            "url": "https://refundonex.com/cloud/form_70706.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819146/",
            "reporter": "abuse_ch"
        }
    ],
    "3819138": [
        {
            "dateadded": "2026-04-13 13:33:04 UTC",
            "url": "https://refundonex.com/cloud/form_89541.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819138/",
            "reporter": "abuse_ch"
        }
    ],
    "3819139": [
        {
            "dateadded": "2026-04-13 13:33:04 UTC",
            "url": "https://refundonex.com/cloud/form_45629.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819139/",
            "reporter": "abuse_ch"
        }
    ],
    "3819140": [
        {
            "dateadded": "2026-04-13 13:33:04 UTC",
            "url": "https://refundonex.com/cloud/form_31268.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819140/",
            "reporter": "abuse_ch"
        }
    ],
    "3819141": [
        {
            "dateadded": "2026-04-13 13:33:04 UTC",
            "url": "https://refundonex.com/cloud/form_97413.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819141/",
            "reporter": "abuse_ch"
        }
    ],
    "3819142": [
        {
            "dateadded": "2026-04-13 13:33:04 UTC",
            "url": "https://refundonex.com/cloud/form_66723.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819142/",
            "reporter": "abuse_ch"
        }
    ],
    "3819143": [
        {
            "dateadded": "2026-04-13 13:33:04 UTC",
            "url": "https://refundonex.com/cloud/form_50931.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819143/",
            "reporter": "abuse_ch"
        }
    ],
    "3819131": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_73011.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819131/",
            "reporter": "abuse_ch"
        }
    ],
    "3819132": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_24938.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819132/",
            "reporter": "abuse_ch"
        }
    ],
    "3819133": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_34163.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819133/",
            "reporter": "abuse_ch"
        }
    ],
    "3819134": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_70618.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819134/",
            "reporter": "abuse_ch"
        }
    ],
    "3819135": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_97333.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819135/",
            "reporter": "abuse_ch"
        }
    ],
    "3819136": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_80947.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819136/",
            "reporter": "abuse_ch"
        }
    ],
    "3819137": [
        {
            "dateadded": "2026-04-13 13:33:03 UTC",
            "url": "https://refundonex.com/cloud/form_06949.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819137/",
            "reporter": "abuse_ch"
        }
    ],
    "3819130": [
        {
            "dateadded": "2026-04-13 13:33:02 UTC",
            "url": "https://refundonex.com/cloud/form_33018.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819130/",
            "reporter": "abuse_ch"
        }
    ],
    "3819128": [
        {
            "dateadded": "2026-04-13 13:33:01 UTC",
            "url": "https://refundonex.com/cloud/form_98916.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819128/",
            "reporter": "abuse_ch"
        }
    ],
    "3819129": [
        {
            "dateadded": "2026-04-13 13:33:01 UTC",
            "url": "https://refundonex.com/cloud/form_02162.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:01 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819129/",
            "reporter": "abuse_ch"
        }
    ],
    "3819126": [
        {
            "dateadded": "2026-04-13 13:33:00 UTC",
            "url": "https://refundonex.com/cloud/form_89271.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819126/",
            "reporter": "abuse_ch"
        }
    ],
    "3819127": [
        {
            "dateadded": "2026-04-13 13:33:00 UTC",
            "url": "https://refundonex.com/cloud/form_43627.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:33:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819127/",
            "reporter": "abuse_ch"
        }
    ],
    "3819125": [
        {
            "dateadded": "2026-04-13 13:32:59 UTC",
            "url": "https://refundonex.com/cloud/form_28210.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819125/",
            "reporter": "abuse_ch"
        }
    ],
    "3819124": [
        {
            "dateadded": "2026-04-13 13:32:58 UTC",
            "url": "https://refundonex.com/cloud/form_35790.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819124/",
            "reporter": "abuse_ch"
        }
    ],
    "3819120": [
        {
            "dateadded": "2026-04-13 13:32:56 UTC",
            "url": "https://refundonex.com/cloud/form_68667.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819120/",
            "reporter": "abuse_ch"
        }
    ],
    "3819121": [
        {
            "dateadded": "2026-04-13 13:32:56 UTC",
            "url": "https://refundonex.com/cloud/form_02643.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819121/",
            "reporter": "abuse_ch"
        }
    ],
    "3819122": [
        {
            "dateadded": "2026-04-13 13:32:56 UTC",
            "url": "https://refundonex.com/cloud/form_72493.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819122/",
            "reporter": "abuse_ch"
        }
    ],
    "3819123": [
        {
            "dateadded": "2026-04-13 13:32:56 UTC",
            "url": "https://refundonex.com/cloud/form_38075.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819123/",
            "reporter": "abuse_ch"
        }
    ],
    "3819116": [
        {
            "dateadded": "2026-04-13 13:32:55 UTC",
            "url": "https://refundonex.com/cloud/form_95289.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819116/",
            "reporter": "abuse_ch"
        }
    ],
    "3819117": [
        {
            "dateadded": "2026-04-13 13:32:55 UTC",
            "url": "https://refundonex.com/cloud/form_84450.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819117/",
            "reporter": "abuse_ch"
        }
    ],
    "3819118": [
        {
            "dateadded": "2026-04-13 13:32:55 UTC",
            "url": "https://refundonex.com/cloud/form_07950.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819118/",
            "reporter": "abuse_ch"
        }
    ],
    "3819119": [
        {
            "dateadded": "2026-04-13 13:32:55 UTC",
            "url": "https://refundonex.com/cloud/form_19872.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819119/",
            "reporter": "abuse_ch"
        }
    ],
    "3819113": [
        {
            "dateadded": "2026-04-13 13:32:54 UTC",
            "url": "https://refundonex.com/cloud/form_45658.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819113/",
            "reporter": "abuse_ch"
        }
    ],
    "3819114": [
        {
            "dateadded": "2026-04-13 13:32:54 UTC",
            "url": "https://refundonex.com/cloud/form_45012.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819114/",
            "reporter": "abuse_ch"
        }
    ],
    "3819115": [
        {
            "dateadded": "2026-04-13 13:32:54 UTC",
            "url": "https://refundonex.com/cloud/form_87547.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819115/",
            "reporter": "abuse_ch"
        }
    ],
    "3819112": [
        {
            "dateadded": "2026-04-13 13:32:53 UTC",
            "url": "https://refundonex.com/cloud/form_65652.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819112/",
            "reporter": "abuse_ch"
        }
    ],
    "3819109": [
        {
            "dateadded": "2026-04-13 13:32:52 UTC",
            "url": "https://refundonex.com/cloud/form_43581.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819109/",
            "reporter": "abuse_ch"
        }
    ],
    "3819110": [
        {
            "dateadded": "2026-04-13 13:32:52 UTC",
            "url": "https://refundonex.com/cloud/form_44587.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819110/",
            "reporter": "abuse_ch"
        }
    ],
    "3819111": [
        {
            "dateadded": "2026-04-13 13:32:52 UTC",
            "url": "https://refundonex.com/cloud/form_22600.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819111/",
            "reporter": "abuse_ch"
        }
    ],
    "3819099": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_26591.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819099/",
            "reporter": "abuse_ch"
        }
    ],
    "3819100": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_94399.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819100/",
            "reporter": "abuse_ch"
        }
    ],
    "3819101": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_39469.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819101/",
            "reporter": "abuse_ch"
        }
    ],
    "3819102": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_07505.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819102/",
            "reporter": "abuse_ch"
        }
    ],
    "3819103": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_95289.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819103/",
            "reporter": "abuse_ch"
        }
    ],
    "3819104": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_91865.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819104/",
            "reporter": "abuse_ch"
        }
    ],
    "3819105": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_17823.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819105/",
            "reporter": "abuse_ch"
        }
    ],
    "3819106": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_22807.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819106/",
            "reporter": "abuse_ch"
        }
    ],
    "3819107": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_17562.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819107/",
            "reporter": "abuse_ch"
        }
    ],
    "3819108": [
        {
            "dateadded": "2026-04-13 13:32:51 UTC",
            "url": "https://refundonex.com/cloud/form_29943.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819108/",
            "reporter": "abuse_ch"
        }
    ],
    "3819089": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_60555.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819089/",
            "reporter": "abuse_ch"
        }
    ],
    "3819090": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_89226.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819090/",
            "reporter": "abuse_ch"
        }
    ],
    "3819091": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_88691.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819091/",
            "reporter": "abuse_ch"
        }
    ],
    "3819092": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_83897.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819092/",
            "reporter": "abuse_ch"
        }
    ],
    "3819093": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_897893.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819093/",
            "reporter": "abuse_ch"
        }
    ],
    "3819094": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_32532.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819094/",
            "reporter": "abuse_ch"
        }
    ],
    "3819095": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_88067.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819095/",
            "reporter": "abuse_ch"
        }
    ],
    "3819096": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_72892.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819096/",
            "reporter": "abuse_ch"
        }
    ],
    "3819097": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_46358.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819097/",
            "reporter": "abuse_ch"
        }
    ],
    "3819098": [
        {
            "dateadded": "2026-04-13 13:32:50 UTC",
            "url": "https://refundonex.com/cloud/form_53894.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819098/",
            "reporter": "abuse_ch"
        }
    ],
    "3819084": [
        {
            "dateadded": "2026-04-13 13:32:49 UTC",
            "url": "https://refundonex.com/cloud/form_96629.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819084/",
            "reporter": "abuse_ch"
        }
    ],
    "3819085": [
        {
            "dateadded": "2026-04-13 13:32:49 UTC",
            "url": "https://refundonex.com/cloud/form_14989.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819085/",
            "reporter": "abuse_ch"
        }
    ],
    "3819086": [
        {
            "dateadded": "2026-04-13 13:32:49 UTC",
            "url": "https://refundonex.com/cloud/form_65872.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819086/",
            "reporter": "abuse_ch"
        }
    ],
    "3819087": [
        {
            "dateadded": "2026-04-13 13:32:49 UTC",
            "url": "https://refundonex.com/cloud/form_16383.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819087/",
            "reporter": "abuse_ch"
        }
    ],
    "3819088": [
        {
            "dateadded": "2026-04-13 13:32:49 UTC",
            "url": "https://refundonex.com/cloud/form_05378.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819088/",
            "reporter": "abuse_ch"
        }
    ],
    "3819082": [
        {
            "dateadded": "2026-04-13 13:32:48 UTC",
            "url": "https://refundonex.com/cloud/form_16480.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819082/",
            "reporter": "abuse_ch"
        }
    ],
    "3819083": [
        {
            "dateadded": "2026-04-13 13:32:48 UTC",
            "url": "https://refundonex.com/cloud/form_31225.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819083/",
            "reporter": "abuse_ch"
        }
    ],
    "3819074": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_25490.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819074/",
            "reporter": "abuse_ch"
        }
    ],
    "3819075": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_72145.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819075/",
            "reporter": "abuse_ch"
        }
    ],
    "3819076": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_65740.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819076/",
            "reporter": "abuse_ch"
        }
    ],
    "3819077": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_85275.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819077/",
            "reporter": "abuse_ch"
        }
    ],
    "3819078": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_72883.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819078/",
            "reporter": "abuse_ch"
        }
    ],
    "3819079": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_65349.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819079/",
            "reporter": "abuse_ch"
        }
    ],
    "3819080": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_23356.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819080/",
            "reporter": "abuse_ch"
        }
    ],
    "3819081": [
        {
            "dateadded": "2026-04-13 13:32:46 UTC",
            "url": "https://refundonex.com/cloud/form_54122.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819081/",
            "reporter": "abuse_ch"
        }
    ],
    "3819073": [
        {
            "dateadded": "2026-04-13 13:32:45 UTC",
            "url": "https://refundonex.com/cloud/form_39574.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819073/",
            "reporter": "abuse_ch"
        }
    ],
    "3819072": [
        {
            "dateadded": "2026-04-13 13:32:44 UTC",
            "url": "https://refundonex.com/cloud/form_70376.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819072/",
            "reporter": "abuse_ch"
        }
    ],
    "3819070": [
        {
            "dateadded": "2026-04-13 13:32:43 UTC",
            "url": "https://refundonex.com/cloud/form_99084.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819070/",
            "reporter": "abuse_ch"
        }
    ],
    "3819071": [
        {
            "dateadded": "2026-04-13 13:32:43 UTC",
            "url": "https://refundonex.com/cloud/form_83940.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819071/",
            "reporter": "abuse_ch"
        }
    ],
    "3819066": [
        {
            "dateadded": "2026-04-13 13:32:42 UTC",
            "url": "https://refundonex.com/cloud/form_76404.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819066/",
            "reporter": "abuse_ch"
        }
    ],
    "3819067": [
        {
            "dateadded": "2026-04-13 13:32:42 UTC",
            "url": "https://refundonex.com/cloud/form_68656.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819067/",
            "reporter": "abuse_ch"
        }
    ],
    "3819068": [
        {
            "dateadded": "2026-04-13 13:32:42 UTC",
            "url": "https://refundonex.com/cloud/form_99164.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819068/",
            "reporter": "abuse_ch"
        }
    ],
    "3819069": [
        {
            "dateadded": "2026-04-13 13:32:42 UTC",
            "url": "https://refundonex.com/cloud/form_41904.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819069/",
            "reporter": "abuse_ch"
        }
    ],
    "3819064": [
        {
            "dateadded": "2026-04-13 13:32:40 UTC",
            "url": "https://refundonex.com/cloud/form_53098.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819064/",
            "reporter": "abuse_ch"
        }
    ],
    "3819065": [
        {
            "dateadded": "2026-04-13 13:32:40 UTC",
            "url": "https://refundonex.com/cloud/form_84792.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819065/",
            "reporter": "abuse_ch"
        }
    ],
    "3819058": [
        {
            "dateadded": "2026-04-13 13:32:39 UTC",
            "url": "https://refundonex.com/cloud/form_20799.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819058/",
            "reporter": "abuse_ch"
        }
    ],
    "3819059": [
        {
            "dateadded": "2026-04-13 13:32:39 UTC",
            "url": "https://refundonex.com/cloud/form_61449.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819059/",
            "reporter": "abuse_ch"
        }
    ],
    "3819060": [
        {
            "dateadded": "2026-04-13 13:32:39 UTC",
            "url": "https://refundonex.com/cloud/form_20296.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819060/",
            "reporter": "abuse_ch"
        }
    ],
    "3819061": [
        {
            "dateadded": "2026-04-13 13:32:39 UTC",
            "url": "https://refundonex.com/cloud/form_82208.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819061/",
            "reporter": "abuse_ch"
        }
    ],
    "3819062": [
        {
            "dateadded": "2026-04-13 13:32:39 UTC",
            "url": "https://refundonex.com/cloud/form_13236.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819062/",
            "reporter": "abuse_ch"
        }
    ],
    "3819063": [
        {
            "dateadded": "2026-04-13 13:32:39 UTC",
            "url": "https://refundonex.com/cloud/form_22533.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819063/",
            "reporter": "abuse_ch"
        }
    ],
    "3819057": [
        {
            "dateadded": "2026-04-13 13:32:38 UTC",
            "url": "https://refundonex.com/cloud/form_07400.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819057/",
            "reporter": "abuse_ch"
        }
    ],
    "3819046": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://mypanel.vip/a9a4wp/ndofghk.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819046/",
            "reporter": "abuse_ch"
        }
    ],
    "3819047": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_72160.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819047/",
            "reporter": "abuse_ch"
        }
    ],
    "3819048": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_18177.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819048/",
            "reporter": "abuse_ch"
        }
    ],
    "3819049": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_78550.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819049/",
            "reporter": "abuse_ch"
        }
    ],
    "3819050": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_54467.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819050/",
            "reporter": "abuse_ch"
        }
    ],
    "3819051": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_44090.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819051/",
            "reporter": "abuse_ch"
        }
    ],
    "3819052": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_41904.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819052/",
            "reporter": "abuse_ch"
        }
    ],
    "3819053": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_34293.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819053/",
            "reporter": "abuse_ch"
        }
    ],
    "3819054": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_13316.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819054/",
            "reporter": "abuse_ch"
        }
    ],
    "3819055": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_61938.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819055/",
            "reporter": "abuse_ch"
        }
    ],
    "3819056": [
        {
            "dateadded": "2026-04-13 13:32:37 UTC",
            "url": "https://refundonex.com/cloud/form_41126.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819056/",
            "reporter": "abuse_ch"
        }
    ],
    "3819043": [
        {
            "dateadded": "2026-04-13 13:32:36 UTC",
            "url": "https://refundonex.com/cloud/form_49929.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819043/",
            "reporter": "abuse_ch"
        }
    ],
    "3819044": [
        {
            "dateadded": "2026-04-13 13:32:36 UTC",
            "url": "https://refundonex.com/cloud/form_23919.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819044/",
            "reporter": "abuse_ch"
        }
    ],
    "3819045": [
        {
            "dateadded": "2026-04-13 13:32:36 UTC",
            "url": "https://refundonex.com/cloud/form_94580.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819045/",
            "reporter": "abuse_ch"
        }
    ],
    "3819037": [
        {
            "dateadded": "2026-04-13 13:32:35 UTC",
            "url": "https://refundonex.com/cloud/form_63948.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819037/",
            "reporter": "abuse_ch"
        }
    ],
    "3819038": [
        {
            "dateadded": "2026-04-13 13:32:35 UTC",
            "url": "https://refundonex.com/cloud/form_52937.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819038/",
            "reporter": "abuse_ch"
        }
    ],
    "3819039": [
        {
            "dateadded": "2026-04-13 13:32:35 UTC",
            "url": "https://refundonex.com/cloud/form_26917.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819039/",
            "reporter": "abuse_ch"
        }
    ],
    "3819040": [
        {
            "dateadded": "2026-04-13 13:32:35 UTC",
            "url": "https://refundonex.com/cloud/form_10539.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819040/",
            "reporter": "abuse_ch"
        }
    ],
    "3819041": [
        {
            "dateadded": "2026-04-13 13:32:35 UTC",
            "url": "https://refundonex.com/cloud/form_22845.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819041/",
            "reporter": "abuse_ch"
        }
    ],
    "3819042": [
        {
            "dateadded": "2026-04-13 13:32:35 UTC",
            "url": "https://refundonex.com/cloud/form_53604.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819042/",
            "reporter": "abuse_ch"
        }
    ],
    "3819031": [
        {
            "dateadded": "2026-04-13 13:32:34 UTC",
            "url": "https://refundonex.com/cloud/form_45309.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819031/",
            "reporter": "abuse_ch"
        }
    ],
    "3819032": [
        {
            "dateadded": "2026-04-13 13:32:34 UTC",
            "url": "https://refundonex.com/cloud/form_04263.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819032/",
            "reporter": "abuse_ch"
        }
    ],
    "3819033": [
        {
            "dateadded": "2026-04-13 13:32:34 UTC",
            "url": "https://refundonex.com/cloud/form_79294.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819033/",
            "reporter": "abuse_ch"
        }
    ],
    "3819034": [
        {
            "dateadded": "2026-04-13 13:32:34 UTC",
            "url": "https://refundonex.com/cloud/form_28608.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819034/",
            "reporter": "abuse_ch"
        }
    ],
    "3819035": [
        {
            "dateadded": "2026-04-13 13:32:34 UTC",
            "url": "https://refundonex.com/cloud/form_83888.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819035/",
            "reporter": "abuse_ch"
        }
    ],
    "3819036": [
        {
            "dateadded": "2026-04-13 13:32:34 UTC",
            "url": "https://refundonex.com/cloud/form_98916.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819036/",
            "reporter": "abuse_ch"
        }
    ],
    "3819028": [
        {
            "dateadded": "2026-04-13 13:32:33 UTC",
            "url": "https://refundonex.com/cloud/form_55147.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819028/",
            "reporter": "abuse_ch"
        }
    ],
    "3819029": [
        {
            "dateadded": "2026-04-13 13:32:33 UTC",
            "url": "https://refundonex.com/cloud/form_83640.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819029/",
            "reporter": "abuse_ch"
        }
    ],
    "3819030": [
        {
            "dateadded": "2026-04-13 13:32:33 UTC",
            "url": "https://refundonex.com/cloud/form_08683.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819030/",
            "reporter": "abuse_ch"
        }
    ],
    "3819026": [
        {
            "dateadded": "2026-04-13 13:32:32 UTC",
            "url": "https://refundonex.com/cloud/form_01796.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819026/",
            "reporter": "abuse_ch"
        }
    ],
    "3819027": [
        {
            "dateadded": "2026-04-13 13:32:32 UTC",
            "url": "https://refundonex.com/cloud/form_85095.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819027/",
            "reporter": "abuse_ch"
        }
    ],
    "3819019": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_79569.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819019/",
            "reporter": "abuse_ch"
        }
    ],
    "3819020": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_36834.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819020/",
            "reporter": "abuse_ch"
        }
    ],
    "3819021": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_28026.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819021/",
            "reporter": "abuse_ch"
        }
    ],
    "3819022": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_03796.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819022/",
            "reporter": "abuse_ch"
        }
    ],
    "3819023": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_21927.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819023/",
            "reporter": "abuse_ch"
        }
    ],
    "3819024": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_96580.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819024/",
            "reporter": "abuse_ch"
        }
    ],
    "3819025": [
        {
            "dateadded": "2026-04-13 13:32:31 UTC",
            "url": "https://refundonex.com/cloud/form_20859.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819025/",
            "reporter": "abuse_ch"
        }
    ],
    "3819018": [
        {
            "dateadded": "2026-04-13 13:32:30 UTC",
            "url": "https://refundonex.com/cloud/form_36728.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819018/",
            "reporter": "abuse_ch"
        }
    ],
    "3819017": [
        {
            "dateadded": "2026-04-13 13:32:29 UTC",
            "url": "https://refundonex.com/cloud/form_55147.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819017/",
            "reporter": "abuse_ch"
        }
    ],
    "3819016": [
        {
            "dateadded": "2026-04-13 13:32:28 UTC",
            "url": "https://refundonex.com/cloud/form_08820.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819016/",
            "reporter": "abuse_ch"
        }
    ],
    "3819015": [
        {
            "dateadded": "2026-04-13 13:32:27 UTC",
            "url": "https://refundonex.com/cloud/form_98722.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819015/",
            "reporter": "abuse_ch"
        }
    ],
    "3819011": [
        {
            "dateadded": "2026-04-13 13:32:26 UTC",
            "url": "https://refundonex.com/cloud/form_43634.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819011/",
            "reporter": "abuse_ch"
        }
    ],
    "3819012": [
        {
            "dateadded": "2026-04-13 13:32:26 UTC",
            "url": "https://refundonex.com/cloud/form_76012.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819012/",
            "reporter": "abuse_ch"
        }
    ],
    "3819013": [
        {
            "dateadded": "2026-04-13 13:32:26 UTC",
            "url": "https://refundonex.com/cloud/form_20035.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819013/",
            "reporter": "abuse_ch"
        }
    ],
    "3819014": [
        {
            "dateadded": "2026-04-13 13:32:26 UTC",
            "url": "https://refundonex.com/cloud/form_29496.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819014/",
            "reporter": "abuse_ch"
        }
    ],
    "3819010": [
        {
            "dateadded": "2026-04-13 13:32:25 UTC",
            "url": "https://refundonex.com/cloud/form_64538.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819010/",
            "reporter": "abuse_ch"
        }
    ],
    "3819003": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_01788.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819003/",
            "reporter": "abuse_ch"
        }
    ],
    "3819004": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_23908.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819004/",
            "reporter": "abuse_ch"
        }
    ],
    "3819005": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_91790.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819005/",
            "reporter": "abuse_ch"
        }
    ],
    "3819006": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_94833.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819006/",
            "reporter": "abuse_ch"
        }
    ],
    "3819007": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_96608.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819007/",
            "reporter": "abuse_ch"
        }
    ],
    "3819008": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_24764.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819008/",
            "reporter": "abuse_ch"
        }
    ],
    "3819009": [
        {
            "dateadded": "2026-04-13 13:32:24 UTC",
            "url": "https://refundonex.com/cloud/form_81909.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819009/",
            "reporter": "abuse_ch"
        }
    ],
    "3818993": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_48154.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818993/",
            "reporter": "abuse_ch"
        }
    ],
    "3818994": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_97508.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818994/",
            "reporter": "abuse_ch"
        }
    ],
    "3818995": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_92696.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818995/",
            "reporter": "abuse_ch"
        }
    ],
    "3818996": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_64761.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818996/",
            "reporter": "abuse_ch"
        }
    ],
    "3818997": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_28026.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818997/",
            "reporter": "abuse_ch"
        }
    ],
    "3818998": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_26591.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818998/",
            "reporter": "abuse_ch"
        }
    ],
    "3818999": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_92910.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818999/",
            "reporter": "abuse_ch"
        }
    ],
    "3819000": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_62511.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819000/",
            "reporter": "abuse_ch"
        }
    ],
    "3819001": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_43388.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819001/",
            "reporter": "abuse_ch"
        }
    ],
    "3819002": [
        {
            "dateadded": "2026-04-13 13:32:23 UTC",
            "url": "https://refundonex.com/cloud/form_70402.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:23 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3819002/",
            "reporter": "abuse_ch"
        }
    ],
    "3818987": [
        {
            "dateadded": "2026-04-13 13:32:22 UTC",
            "url": "https://refundonex.com/cloud/form_05895.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818987/",
            "reporter": "abuse_ch"
        }
    ],
    "3818988": [
        {
            "dateadded": "2026-04-13 13:32:22 UTC",
            "url": "https://refundonex.com/cloud/form_21559.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818988/",
            "reporter": "abuse_ch"
        }
    ],
    "3818989": [
        {
            "dateadded": "2026-04-13 13:32:22 UTC",
            "url": "https://refundonex.com/cloud/form_09953.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818989/",
            "reporter": "abuse_ch"
        }
    ],
    "3818990": [
        {
            "dateadded": "2026-04-13 13:32:22 UTC",
            "url": "https://refundonex.com/cloud/form_13579.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818990/",
            "reporter": "abuse_ch"
        }
    ],
    "3818991": [
        {
            "dateadded": "2026-04-13 13:32:22 UTC",
            "url": "https://refundonex.com/cloud/form_63809.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818991/",
            "reporter": "abuse_ch"
        }
    ],
    "3818992": [
        {
            "dateadded": "2026-04-13 13:32:22 UTC",
            "url": "https://refundonex.com/cloud/form_49929.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818992/",
            "reporter": "abuse_ch"
        }
    ],
    "3818978": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_46395.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818978/",
            "reporter": "abuse_ch"
        }
    ],
    "3818979": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_83418.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818979/",
            "reporter": "abuse_ch"
        }
    ],
    "3818980": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_21974.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818980/",
            "reporter": "abuse_ch"
        }
    ],
    "3818981": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_85498.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818981/",
            "reporter": "abuse_ch"
        }
    ],
    "3818982": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_54805.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818982/",
            "reporter": "abuse_ch"
        }
    ],
    "3818983": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_84846.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818983/",
            "reporter": "abuse_ch"
        }
    ],
    "3818984": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_14989.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818984/",
            "reporter": "abuse_ch"
        }
    ],
    "3818985": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_24663.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818985/",
            "reporter": "abuse_ch"
        }
    ],
    "3818986": [
        {
            "dateadded": "2026-04-13 13:32:21 UTC",
            "url": "https://refundonex.com/cloud/form_48499.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818986/",
            "reporter": "abuse_ch"
        }
    ],
    "3818973": [
        {
            "dateadded": "2026-04-13 13:32:19 UTC",
            "url": "https://refundonex.com/cloud/form_62843.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818973/",
            "reporter": "abuse_ch"
        }
    ],
    "3818974": [
        {
            "dateadded": "2026-04-13 13:32:19 UTC",
            "url": "https://refundonex.com/cloud/form_95394.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818974/",
            "reporter": "abuse_ch"
        }
    ],
    "3818975": [
        {
            "dateadded": "2026-04-13 13:32:19 UTC",
            "url": "https://refundonex.com/cloud/form_37383.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818975/",
            "reporter": "abuse_ch"
        }
    ],
    "3818976": [
        {
            "dateadded": "2026-04-13 13:32:19 UTC",
            "url": "https://refundonex.com/cloud/form_84450.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818976/",
            "reporter": "abuse_ch"
        }
    ],
    "3818977": [
        {
            "dateadded": "2026-04-13 13:32:19 UTC",
            "url": "https://refundonex.com/cloud/form_72715.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818977/",
            "reporter": "abuse_ch"
        }
    ],
    "3818972": [
        {
            "dateadded": "2026-04-13 13:32:16 UTC",
            "url": "https://refundonex.com/cloud/form_79597.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818972/",
            "reporter": "abuse_ch"
        }
    ],
    "3818970": [
        {
            "dateadded": "2026-04-13 13:32:15 UTC",
            "url": "https://refundonex.com/cloud/form_53501.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818970/",
            "reporter": "abuse_ch"
        }
    ],
    "3818971": [
        {
            "dateadded": "2026-04-13 13:32:15 UTC",
            "url": "https://refundonex.com/cloud/form_21012.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818971/",
            "reporter": "abuse_ch"
        }
    ],
    "3818967": [
        {
            "dateadded": "2026-04-13 13:32:14 UTC",
            "url": "https://refundonex.com/cloud/form_38966.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818967/",
            "reporter": "abuse_ch"
        }
    ],
    "3818968": [
        {
            "dateadded": "2026-04-13 13:32:14 UTC",
            "url": "https://refundonex.com/cloud/form_80840.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818968/",
            "reporter": "abuse_ch"
        }
    ],
    "3818969": [
        {
            "dateadded": "2026-04-13 13:32:14 UTC",
            "url": "https://refundonex.com/cloud/form_80995.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818969/",
            "reporter": "abuse_ch"
        }
    ],
    "3818962": [
        {
            "dateadded": "2026-04-13 13:32:13 UTC",
            "url": "https://refundonex.com/cloud/form_70894.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818962/",
            "reporter": "abuse_ch"
        }
    ],
    "3818963": [
        {
            "dateadded": "2026-04-13 13:32:13 UTC",
            "url": "https://refundonex.com/cloud/form_60967.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818963/",
            "reporter": "abuse_ch"
        }
    ],
    "3818964": [
        {
            "dateadded": "2026-04-13 13:32:13 UTC",
            "url": "https://refundonex.com/cloud/form_93958.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818964/",
            "reporter": "abuse_ch"
        }
    ],
    "3818965": [
        {
            "dateadded": "2026-04-13 13:32:13 UTC",
            "url": "https://refundonex.com/cloud/form_25599.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818965/",
            "reporter": "abuse_ch"
        }
    ],
    "3818966": [
        {
            "dateadded": "2026-04-13 13:32:13 UTC",
            "url": "https://refundonex.com/cloud/form_31816.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818966/",
            "reporter": "abuse_ch"
        }
    ],
    "3818953": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_88746.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818953/",
            "reporter": "abuse_ch"
        }
    ],
    "3818954": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_67465.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818954/",
            "reporter": "abuse_ch"
        }
    ],
    "3818955": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_54837.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818955/",
            "reporter": "abuse_ch"
        }
    ],
    "3818956": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_00535.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818956/",
            "reporter": "abuse_ch"
        }
    ],
    "3818957": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_88067.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818957/",
            "reporter": "abuse_ch"
        }
    ],
    "3818958": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_20314.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818958/",
            "reporter": "abuse_ch"
        }
    ],
    "3818959": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "http://27.206.142.250:45268/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:42:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818959/",
            "reporter": "geenensp"
        }
    ],
    "3818960": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_66262.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818960/",
            "reporter": "abuse_ch"
        }
    ],
    "3818961": [
        {
            "dateadded": "2026-04-13 13:32:12 UTC",
            "url": "https://refundonex.com/cloud/form_39600.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818961/",
            "reporter": "abuse_ch"
        }
    ],
    "3818949": [
        {
            "dateadded": "2026-04-13 13:32:11 UTC",
            "url": "https://refundonex.com/cloud/form_56403.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818949/",
            "reporter": "abuse_ch"
        }
    ],
    "3818950": [
        {
            "dateadded": "2026-04-13 13:32:11 UTC",
            "url": "https://refundonex.com/cloud/testx.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818950/",
            "reporter": "abuse_ch"
        }
    ],
    "3818951": [
        {
            "dateadded": "2026-04-13 13:32:11 UTC",
            "url": "https://refundonex.com/cloud/form_40134.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818951/",
            "reporter": "abuse_ch"
        }
    ],
    "3818952": [
        {
            "dateadded": "2026-04-13 13:32:11 UTC",
            "url": "https://refundonex.com/cloud/form_24198.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818952/",
            "reporter": "abuse_ch"
        }
    ],
    "3818946": [
        {
            "dateadded": "2026-04-13 13:32:10 UTC",
            "url": "https://refundonex.com/cloud/form_54126.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818946/",
            "reporter": "abuse_ch"
        }
    ],
    "3818947": [
        {
            "dateadded": "2026-04-13 13:32:10 UTC",
            "url": "https://refundonex.com/cloud/form_87253.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818947/",
            "reporter": "abuse_ch"
        }
    ],
    "3818948": [
        {
            "dateadded": "2026-04-13 13:32:10 UTC",
            "url": "https://refundonex.com/cloud/form_88088.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818948/",
            "reporter": "abuse_ch"
        }
    ],
    "3818939": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_12510.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818939/",
            "reporter": "abuse_ch"
        }
    ],
    "3818940": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_50628.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818940/",
            "reporter": "abuse_ch"
        }
    ],
    "3818941": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_47973.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818941/",
            "reporter": "abuse_ch"
        }
    ],
    "3818942": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_31225.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818942/",
            "reporter": "abuse_ch"
        }
    ],
    "3818943": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_55691.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818943/",
            "reporter": "abuse_ch"
        }
    ],
    "3818944": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_06239.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818944/",
            "reporter": "abuse_ch"
        }
    ],
    "3818945": [
        {
            "dateadded": "2026-04-13 13:32:09 UTC",
            "url": "https://refundonex.com/cloud/form_28403.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818945/",
            "reporter": "abuse_ch"
        }
    ],
    "3818935": [
        {
            "dateadded": "2026-04-13 13:32:08 UTC",
            "url": "https://refundonex.com/cloud/form_57473.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818935/",
            "reporter": "abuse_ch"
        }
    ],
    "3818936": [
        {
            "dateadded": "2026-04-13 13:32:08 UTC",
            "url": "https://refundonex.com/cloud/form_54969.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818936/",
            "reporter": "abuse_ch"
        }
    ],
    "3818937": [
        {
            "dateadded": "2026-04-13 13:32:08 UTC",
            "url": "https://refundonex.com/cloud/form_10718.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818937/",
            "reporter": "abuse_ch"
        }
    ],
    "3818938": [
        {
            "dateadded": "2026-04-13 13:32:08 UTC",
            "url": "https://refundonex.com/cloud/form_34055.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818938/",
            "reporter": "abuse_ch"
        }
    ],
    "3818933": [
        {
            "dateadded": "2026-04-13 13:32:07 UTC",
            "url": "https://refundonex.com/cloud/JoseTomas.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818933/",
            "reporter": "abuse_ch"
        }
    ],
    "3818934": [
        {
            "dateadded": "2026-04-13 13:32:07 UTC",
            "url": "https://refundonex.com/cloud/form_45012.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818934/",
            "reporter": "abuse_ch"
        }
    ],
    "3818927": [
        {
            "dateadded": "2026-04-13 13:32:06 UTC",
            "url": "https://refundonex.com/cloud/form_52297.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818927/",
            "reporter": "abuse_ch"
        }
    ],
    "3818928": [
        {
            "dateadded": "2026-04-13 13:32:06 UTC",
            "url": "https://refundonex.com/cloud/form_59150.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818928/",
            "reporter": "abuse_ch"
        }
    ],
    "3818929": [
        {
            "dateadded": "2026-04-13 13:32:06 UTC",
            "url": "https://refundonex.com/cloud/form_96629.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818929/",
            "reporter": "abuse_ch"
        }
    ],
    "3818930": [
        {
            "dateadded": "2026-04-13 13:32:06 UTC",
            "url": "https://refundonex.com/cloud/form_81040.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818930/",
            "reporter": "abuse_ch"
        }
    ],
    "3818931": [
        {
            "dateadded": "2026-04-13 13:32:06 UTC",
            "url": "https://refundonex.com/cloud/form_49889.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818931/",
            "reporter": "abuse_ch"
        }
    ],
    "3818932": [
        {
            "dateadded": "2026-04-13 13:32:06 UTC",
            "url": "https://refundonex.com/cloud/form_48154.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818932/",
            "reporter": "abuse_ch"
        }
    ],
    "3818926": [
        {
            "dateadded": "2026-04-13 13:32:03 UTC",
            "url": "https://refundonex.com/cloud/form_51173.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818926/",
            "reporter": "abuse_ch"
        }
    ],
    "3818923": [
        {
            "dateadded": "2026-04-13 13:32:02 UTC",
            "url": "https://refundonex.com/cloud/form_92157.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818923/",
            "reporter": "abuse_ch"
        }
    ],
    "3818924": [
        {
            "dateadded": "2026-04-13 13:32:02 UTC",
            "url": "https://refundonex.com/cloud/form_48752.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818924/",
            "reporter": "abuse_ch"
        }
    ],
    "3818925": [
        {
            "dateadded": "2026-04-13 13:32:02 UTC",
            "url": "https://refundonex.com/cloud/form_30968.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:32:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818925/",
            "reporter": "abuse_ch"
        }
    ],
    "3818908": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_43724.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818908/",
            "reporter": "abuse_ch"
        }
    ],
    "3818909": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_96061.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818909/",
            "reporter": "abuse_ch"
        }
    ],
    "3818910": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_02185.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818910/",
            "reporter": "abuse_ch"
        }
    ],
    "3818911": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_52843.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818911/",
            "reporter": "abuse_ch"
        }
    ],
    "3818912": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_02881.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818912/",
            "reporter": "abuse_ch"
        }
    ],
    "3818913": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_95823.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818913/",
            "reporter": "abuse_ch"
        }
    ],
    "3818914": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_86529.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818914/",
            "reporter": "abuse_ch"
        }
    ],
    "3818915": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_57990.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818915/",
            "reporter": "abuse_ch"
        }
    ],
    "3818916": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_59180.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818916/",
            "reporter": "abuse_ch"
        }
    ],
    "3818917": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_92463.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818917/",
            "reporter": "abuse_ch"
        }
    ],
    "3818918": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_76383.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818918/",
            "reporter": "abuse_ch"
        }
    ],
    "3818919": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_60763.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818919/",
            "reporter": "abuse_ch"
        }
    ],
    "3818920": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_06020.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818920/",
            "reporter": "abuse_ch"
        }
    ],
    "3818921": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_47973.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818921/",
            "reporter": "abuse_ch"
        }
    ],
    "3818922": [
        {
            "dateadded": "2026-04-13 13:31:59 UTC",
            "url": "https://refundonex.com/cloud/form_93523.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818922/",
            "reporter": "abuse_ch"
        }
    ],
    "3818900": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_63675.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818900/",
            "reporter": "abuse_ch"
        }
    ],
    "3818901": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_65304.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818901/",
            "reporter": "abuse_ch"
        }
    ],
    "3818902": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_37248.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818902/",
            "reporter": "abuse_ch"
        }
    ],
    "3818903": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_05947.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818903/",
            "reporter": "abuse_ch"
        }
    ],
    "3818904": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_04630.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818904/",
            "reporter": "abuse_ch"
        }
    ],
    "3818905": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_96145.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818905/",
            "reporter": "abuse_ch"
        }
    ],
    "3818906": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_21463.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818906/",
            "reporter": "abuse_ch"
        }
    ],
    "3818907": [
        {
            "dateadded": "2026-04-13 13:31:58 UTC",
            "url": "https://refundonex.com/cloud/form_70351.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818907/",
            "reporter": "abuse_ch"
        }
    ],
    "3818898": [
        {
            "dateadded": "2026-04-13 13:31:57 UTC",
            "url": "https://refundonex.com/cloud/form_12570.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818898/",
            "reporter": "abuse_ch"
        }
    ],
    "3818899": [
        {
            "dateadded": "2026-04-13 13:31:57 UTC",
            "url": "https://refundonex.com/cloud/form_27995.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818899/",
            "reporter": "abuse_ch"
        }
    ],
    "3818892": [
        {
            "dateadded": "2026-04-13 13:31:56 UTC",
            "url": "https://refundonex.com/cloud/form_82041.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818892/",
            "reporter": "abuse_ch"
        }
    ],
    "3818893": [
        {
            "dateadded": "2026-04-13 13:31:56 UTC",
            "url": "https://refundonex.com/cloud/form_01577.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818893/",
            "reporter": "abuse_ch"
        }
    ],
    "3818894": [
        {
            "dateadded": "2026-04-13 13:31:56 UTC",
            "url": "https://refundonex.com/cloud/form_62963.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818894/",
            "reporter": "abuse_ch"
        }
    ],
    "3818895": [
        {
            "dateadded": "2026-04-13 13:31:56 UTC",
            "url": "https://refundonex.com/cloud/form_36223.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818895/",
            "reporter": "abuse_ch"
        }
    ],
    "3818896": [
        {
            "dateadded": "2026-04-13 13:31:56 UTC",
            "url": "https://refundonex.com/cloud/form_42552.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818896/",
            "reporter": "abuse_ch"
        }
    ],
    "3818897": [
        {
            "dateadded": "2026-04-13 13:31:56 UTC",
            "url": "https://refundonex.com/cloud/form_10319.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818897/",
            "reporter": "abuse_ch"
        }
    ],
    "3818889": [
        {
            "dateadded": "2026-04-13 13:31:55 UTC",
            "url": "https://refundonex.com/cloud/form_35795.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818889/",
            "reporter": "abuse_ch"
        }
    ],
    "3818890": [
        {
            "dateadded": "2026-04-13 13:31:55 UTC",
            "url": "https://refundonex.com/cloud/form_13309.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818890/",
            "reporter": "abuse_ch"
        }
    ],
    "3818891": [
        {
            "dateadded": "2026-04-13 13:31:55 UTC",
            "url": "https://refundonex.com/cloud/form_62843.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:43 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818891/",
            "reporter": "abuse_ch"
        }
    ],
    "3818886": [
        {
            "dateadded": "2026-04-13 13:31:52 UTC",
            "url": "https://refundonex.com/cloud/form_47384.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:52 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818886/",
            "reporter": "abuse_ch"
        }
    ],
    "3818887": [
        {
            "dateadded": "2026-04-13 13:31:52 UTC",
            "url": "https://refundonex.com/cloud/form_62809.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818887/",
            "reporter": "abuse_ch"
        }
    ],
    "3818888": [
        {
            "dateadded": "2026-04-13 13:31:52 UTC",
            "url": "https://refundonex.com/cloud/form_55648.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818888/",
            "reporter": "abuse_ch"
        }
    ],
    "3818883": [
        {
            "dateadded": "2026-04-13 13:31:49 UTC",
            "url": "https://refundonex.com/cloud/form_85697.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818883/",
            "reporter": "abuse_ch"
        }
    ],
    "3818884": [
        {
            "dateadded": "2026-04-13 13:31:49 UTC",
            "url": "https://refundonex.com/cloud/form_49196.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818884/",
            "reporter": "abuse_ch"
        }
    ],
    "3818885": [
        {
            "dateadded": "2026-04-13 13:31:49 UTC",
            "url": "https://refundonex.com/cloud/form_83645.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818885/",
            "reporter": "abuse_ch"
        }
    ],
    "3818878": [
        {
            "dateadded": "2026-04-13 13:31:47 UTC",
            "url": "https://refundonex.com/cloud/form_53430.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818878/",
            "reporter": "abuse_ch"
        }
    ],
    "3818879": [
        {
            "dateadded": "2026-04-13 13:31:47 UTC",
            "url": "https://refundonex.com/cloud/form_93813.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818879/",
            "reporter": "abuse_ch"
        }
    ],
    "3818880": [
        {
            "dateadded": "2026-04-13 13:31:47 UTC",
            "url": "https://refundonex.com/cloud/form_99237.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818880/",
            "reporter": "abuse_ch"
        }
    ],
    "3818881": [
        {
            "dateadded": "2026-04-13 13:31:47 UTC",
            "url": "https://refundonex.com/cloud/form_08667.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818881/",
            "reporter": "abuse_ch"
        }
    ],
    "3818882": [
        {
            "dateadded": "2026-04-13 13:31:47 UTC",
            "url": "https://refundonex.com/cloud/form_99268.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:47 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818882/",
            "reporter": "abuse_ch"
        }
    ],
    "3818870": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_75034.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818870/",
            "reporter": "abuse_ch"
        }
    ],
    "3818871": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_48752.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818871/",
            "reporter": "abuse_ch"
        }
    ],
    "3818872": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_76995.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818872/",
            "reporter": "abuse_ch"
        }
    ],
    "3818873": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_40082.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818873/",
            "reporter": "abuse_ch"
        }
    ],
    "3818874": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_52860.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818874/",
            "reporter": "abuse_ch"
        }
    ],
    "3818875": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_69254.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818875/",
            "reporter": "abuse_ch"
        }
    ],
    "3818876": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_36769.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818876/",
            "reporter": "abuse_ch"
        }
    ],
    "3818877": [
        {
            "dateadded": "2026-04-13 13:31:46 UTC",
            "url": "https://refundonex.com/cloud/form_46273.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818877/",
            "reporter": "abuse_ch"
        }
    ],
    "3818869": [
        {
            "dateadded": "2026-04-13 13:31:43 UTC",
            "url": "https://refundonex.com/cloud/form_68359.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818869/",
            "reporter": "abuse_ch"
        }
    ],
    "3818867": [
        {
            "dateadded": "2026-04-13 13:31:42 UTC",
            "url": "https://refundonex.com/cloud/form_52937.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818867/",
            "reporter": "abuse_ch"
        }
    ],
    "3818868": [
        {
            "dateadded": "2026-04-13 13:31:42 UTC",
            "url": "https://refundonex.com/cloud/form_42022.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818868/",
            "reporter": "abuse_ch"
        }
    ],
    "3818866": [
        {
            "dateadded": "2026-04-13 13:31:41 UTC",
            "url": "https://refundonex.com/cloud/form_20299.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818866/",
            "reporter": "abuse_ch"
        }
    ],
    "3818863": [
        {
            "dateadded": "2026-04-13 13:31:40 UTC",
            "url": "https://refundonex.com/cloud/form_19872.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818863/",
            "reporter": "abuse_ch"
        }
    ],
    "3818864": [
        {
            "dateadded": "2026-04-13 13:31:40 UTC",
            "url": "https://refundonex.com/cloud/form_83897.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818864/",
            "reporter": "abuse_ch"
        }
    ],
    "3818865": [
        {
            "dateadded": "2026-04-13 13:31:40 UTC",
            "url": "https://refundonex.com/cloud/form_63451.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818865/",
            "reporter": "abuse_ch"
        }
    ],
    "3818853": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_25525.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818853/",
            "reporter": "abuse_ch"
        }
    ],
    "3818854": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_58115.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818854/",
            "reporter": "abuse_ch"
        }
    ],
    "3818855": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_80840.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818855/",
            "reporter": "abuse_ch"
        }
    ],
    "3818856": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_64761.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818856/",
            "reporter": "abuse_ch"
        }
    ],
    "3818857": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_20237.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818857/",
            "reporter": "abuse_ch"
        }
    ],
    "3818858": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_97143.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818858/",
            "reporter": "abuse_ch"
        }
    ],
    "3818859": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_39818.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818859/",
            "reporter": "abuse_ch"
        }
    ],
    "3818860": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_91484.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818860/",
            "reporter": "abuse_ch"
        }
    ],
    "3818861": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_08429.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818861/",
            "reporter": "abuse_ch"
        }
    ],
    "3818862": [
        {
            "dateadded": "2026-04-13 13:31:39 UTC",
            "url": "https://refundonex.com/cloud/form_34784.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818862/",
            "reporter": "abuse_ch"
        }
    ],
    "3818851": [
        {
            "dateadded": "2026-04-13 13:31:38 UTC",
            "url": "https://refundonex.com/cloud/form_33122.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818851/",
            "reporter": "abuse_ch"
        }
    ],
    "3818852": [
        {
            "dateadded": "2026-04-13 13:31:38 UTC",
            "url": "https://refundonex.com/cloud/form_95365.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818852/",
            "reporter": "abuse_ch"
        }
    ],
    "3818846": [
        {
            "dateadded": "2026-04-13 13:31:37 UTC",
            "url": "https://refundonex.com/cloud/form_54837.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818846/",
            "reporter": "abuse_ch"
        }
    ],
    "3818847": [
        {
            "dateadded": "2026-04-13 13:31:37 UTC",
            "url": "https://refundonex.com/cloud/form_60727.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818847/",
            "reporter": "abuse_ch"
        }
    ],
    "3818848": [
        {
            "dateadded": "2026-04-13 13:31:37 UTC",
            "url": "https://refundonex.com/cloud/form_79811.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818848/",
            "reporter": "abuse_ch"
        }
    ],
    "3818849": [
        {
            "dateadded": "2026-04-13 13:31:37 UTC",
            "url": "https://refundonex.com/cloud/form_48796.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818849/",
            "reporter": "abuse_ch"
        }
    ],
    "3818850": [
        {
            "dateadded": "2026-04-13 13:31:37 UTC",
            "url": "https://refundonex.com/cloud/form_07212.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:37 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818850/",
            "reporter": "abuse_ch"
        }
    ],
    "3818845": [
        {
            "dateadded": "2026-04-13 13:31:34 UTC",
            "url": "https://refundonex.com/cloud/form_31048.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818845/",
            "reporter": "abuse_ch"
        }
    ],
    "3818837": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_89226.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818837/",
            "reporter": "abuse_ch"
        }
    ],
    "3818838": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_94326.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818838/",
            "reporter": "abuse_ch"
        }
    ],
    "3818839": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_56048.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818839/",
            "reporter": "abuse_ch"
        }
    ],
    "3818840": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_07013.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818840/",
            "reporter": "abuse_ch"
        }
    ],
    "3818841": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_66742.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818841/",
            "reporter": "abuse_ch"
        }
    ],
    "3818842": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_06949.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818842/",
            "reporter": "abuse_ch"
        }
    ],
    "3818843": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_55953.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818843/",
            "reporter": "abuse_ch"
        }
    ],
    "3818844": [
        {
            "dateadded": "2026-04-13 13:31:33 UTC",
            "url": "https://refundonex.com/cloud/form_96477.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818844/",
            "reporter": "abuse_ch"
        }
    ],
    "3818828": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_93259.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818828/",
            "reporter": "abuse_ch"
        }
    ],
    "3818829": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_97426.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818829/",
            "reporter": "abuse_ch"
        }
    ],
    "3818830": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_15861.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818830/",
            "reporter": "abuse_ch"
        }
    ],
    "3818831": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_74743.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818831/",
            "reporter": "abuse_ch"
        }
    ],
    "3818832": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_86428.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818832/",
            "reporter": "abuse_ch"
        }
    ],
    "3818833": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_04829.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818833/",
            "reporter": "abuse_ch"
        }
    ],
    "3818834": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_33091.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818834/",
            "reporter": "abuse_ch"
        }
    ],
    "3818835": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_70818.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818835/",
            "reporter": "abuse_ch"
        }
    ],
    "3818836": [
        {
            "dateadded": "2026-04-13 13:31:32 UTC",
            "url": "https://refundonex.com/cloud/form_08686.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818836/",
            "reporter": "abuse_ch"
        }
    ],
    "3818818": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_85498.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:50 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818818/",
            "reporter": "abuse_ch"
        }
    ],
    "3818819": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_01673.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818819/",
            "reporter": "abuse_ch"
        }
    ],
    "3818820": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_06113.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818820/",
            "reporter": "abuse_ch"
        }
    ],
    "3818821": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_30968.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818821/",
            "reporter": "abuse_ch"
        }
    ],
    "3818822": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_69394.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818822/",
            "reporter": "abuse_ch"
        }
    ],
    "3818823": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_92696.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818823/",
            "reporter": "abuse_ch"
        }
    ],
    "3818824": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_63128.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818824/",
            "reporter": "abuse_ch"
        }
    ],
    "3818825": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_64549.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818825/",
            "reporter": "abuse_ch"
        }
    ],
    "3818826": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_24198.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818826/",
            "reporter": "abuse_ch"
        }
    ],
    "3818827": [
        {
            "dateadded": "2026-04-13 13:31:31 UTC",
            "url": "https://refundonex.com/cloud/form_35000.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818827/",
            "reporter": "abuse_ch"
        }
    ],
    "3818812": [
        {
            "dateadded": "2026-04-13 13:31:30 UTC",
            "url": "https://refundonex.com/cloud/form_08686.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818812/",
            "reporter": "abuse_ch"
        }
    ],
    "3818813": [
        {
            "dateadded": "2026-04-13 13:31:30 UTC",
            "url": "https://refundonex.com/cloud/form_59828.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818813/",
            "reporter": "abuse_ch"
        }
    ],
    "3818814": [
        {
            "dateadded": "2026-04-13 13:31:30 UTC",
            "url": "https://refundonex.com/cloud/form_73024.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818814/",
            "reporter": "abuse_ch"
        }
    ],
    "3818815": [
        {
            "dateadded": "2026-04-13 13:31:30 UTC",
            "url": "https://refundonex.com/cloud/form_68947.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818815/",
            "reporter": "abuse_ch"
        }
    ],
    "3818816": [
        {
            "dateadded": "2026-04-13 13:31:30 UTC",
            "url": "https://refundonex.com/cloud/form_57064.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818816/",
            "reporter": "abuse_ch"
        }
    ],
    "3818817": [
        {
            "dateadded": "2026-04-13 13:31:30 UTC",
            "url": "https://refundonex.com/cloud/form_69918.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818817/",
            "reporter": "abuse_ch"
        }
    ],
    "3818811": [
        {
            "dateadded": "2026-04-13 13:31:28 UTC",
            "url": "https://refundonex.com/cloud/form_12397.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818811/",
            "reporter": "abuse_ch"
        }
    ],
    "3818810": [
        {
            "dateadded": "2026-04-13 13:31:27 UTC",
            "url": "https://refundonex.com/cloud/form_95692.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818810/",
            "reporter": "abuse_ch"
        }
    ],
    "3818808": [
        {
            "dateadded": "2026-04-13 13:31:24 UTC",
            "url": "https://refundonex.com/cloud/form_31218.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:24 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818808/",
            "reporter": "abuse_ch"
        }
    ],
    "3818809": [
        {
            "dateadded": "2026-04-13 13:31:24 UTC",
            "url": "https://refundonex.com/cloud/form_06072.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818809/",
            "reporter": "abuse_ch"
        }
    ],
    "3818805": [
        {
            "dateadded": "2026-04-13 13:31:23 UTC",
            "url": "https://refundonex.com/cloud/form_03117.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818805/",
            "reporter": "abuse_ch"
        }
    ],
    "3818806": [
        {
            "dateadded": "2026-04-13 13:31:23 UTC",
            "url": "https://refundonex.com/cloud/form_73308.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818806/",
            "reporter": "abuse_ch"
        }
    ],
    "3818807": [
        {
            "dateadded": "2026-04-13 13:31:23 UTC",
            "url": "https://refundonex.com/cloud/form_59517.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818807/",
            "reporter": "abuse_ch"
        }
    ],
    "3818803": [
        {
            "dateadded": "2026-04-13 13:31:22 UTC",
            "url": "https://refundonex.com/cloud/form_49639.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818803/",
            "reporter": "abuse_ch"
        }
    ],
    "3818804": [
        {
            "dateadded": "2026-04-13 13:31:22 UTC",
            "url": "https://refundonex.com/cloud/form_96145.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818804/",
            "reporter": "abuse_ch"
        }
    ],
    "3818797": [
        {
            "dateadded": "2026-04-13 13:31:21 UTC",
            "url": "https://refundonex.com/cloud/form_91129.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818797/",
            "reporter": "abuse_ch"
        }
    ],
    "3818798": [
        {
            "dateadded": "2026-04-13 13:31:21 UTC",
            "url": "https://refundonex.com/cloud/form_88222.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818798/",
            "reporter": "abuse_ch"
        }
    ],
    "3818799": [
        {
            "dateadded": "2026-04-13 13:31:21 UTC",
            "url": "https://refundonex.com/cloud/form_61120.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818799/",
            "reporter": "abuse_ch"
        }
    ],
    "3818800": [
        {
            "dateadded": "2026-04-13 13:31:21 UTC",
            "url": "https://refundonex.com/cloud/form_75892.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818800/",
            "reporter": "abuse_ch"
        }
    ],
    "3818801": [
        {
            "dateadded": "2026-04-13 13:31:21 UTC",
            "url": "https://refundonex.com/cloud/form_01986.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818801/",
            "reporter": "abuse_ch"
        }
    ],
    "3818802": [
        {
            "dateadded": "2026-04-13 13:31:21 UTC",
            "url": "https://refundonex.com/cloud/form_10624.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818802/",
            "reporter": "abuse_ch"
        }
    ],
    "3818789": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_53097.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818789/",
            "reporter": "abuse_ch"
        }
    ],
    "3818790": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_61627.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818790/",
            "reporter": "abuse_ch"
        }
    ],
    "3818791": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_77272.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818791/",
            "reporter": "abuse_ch"
        }
    ],
    "3818792": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_66425.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818792/",
            "reporter": "abuse_ch"
        }
    ],
    "3818793": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_75892.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818793/",
            "reporter": "abuse_ch"
        }
    ],
    "3818794": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_90644.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818794/",
            "reporter": "abuse_ch"
        }
    ],
    "3818795": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_18701.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818795/",
            "reporter": "abuse_ch"
        }
    ],
    "3818796": [
        {
            "dateadded": "2026-04-13 13:31:19 UTC",
            "url": "https://refundonex.com/cloud/form_49780.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818796/",
            "reporter": "abuse_ch"
        }
    ],
    "3818781": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_59150.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818781/",
            "reporter": "abuse_ch"
        }
    ],
    "3818782": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_91385.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818782/",
            "reporter": "abuse_ch"
        }
    ],
    "3818783": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_00826.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818783/",
            "reporter": "abuse_ch"
        }
    ],
    "3818784": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_72715.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818784/",
            "reporter": "abuse_ch"
        }
    ],
    "3818785": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_54542.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818785/",
            "reporter": "abuse_ch"
        }
    ],
    "3818786": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_76835.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818786/",
            "reporter": "abuse_ch"
        }
    ],
    "3818787": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_97455.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818787/",
            "reporter": "abuse_ch"
        }
    ],
    "3818788": [
        {
            "dateadded": "2026-04-13 13:31:18 UTC",
            "url": "https://refundonex.com/cloud/form_04008.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818788/",
            "reporter": "abuse_ch"
        }
    ],
    "3818775": [
        {
            "dateadded": "2026-04-13 13:31:17 UTC",
            "url": "https://refundonex.com/cloud/testx.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818775/",
            "reporter": "abuse_ch"
        }
    ],
    "3818776": [
        {
            "dateadded": "2026-04-13 13:31:17 UTC",
            "url": "https://refundonex.com/cloud/form_53894.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818776/",
            "reporter": "abuse_ch"
        }
    ],
    "3818777": [
        {
            "dateadded": "2026-04-13 13:31:17 UTC",
            "url": "https://refundonex.com/cloud/form_97420.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818777/",
            "reporter": "abuse_ch"
        }
    ],
    "3818778": [
        {
            "dateadded": "2026-04-13 13:31:17 UTC",
            "url": "https://refundonex.com/cloud/form_68501.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818778/",
            "reporter": "abuse_ch"
        }
    ],
    "3818779": [
        {
            "dateadded": "2026-04-13 13:31:17 UTC",
            "url": "https://refundonex.com/cloud/form_96856.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818779/",
            "reporter": "abuse_ch"
        }
    ],
    "3818780": [
        {
            "dateadded": "2026-04-13 13:31:17 UTC",
            "url": "https://refundonex.com/cloud/form_72579.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818780/",
            "reporter": "abuse_ch"
        }
    ],
    "3818767": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_94040.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818767/",
            "reporter": "abuse_ch"
        }
    ],
    "3818768": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_65304.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818768/",
            "reporter": "abuse_ch"
        }
    ],
    "3818769": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_80830.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818769/",
            "reporter": "abuse_ch"
        }
    ],
    "3818770": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_27247.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818770/",
            "reporter": "abuse_ch"
        }
    ],
    "3818771": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_90077.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818771/",
            "reporter": "abuse_ch"
        }
    ],
    "3818772": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_01986.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818772/",
            "reporter": "abuse_ch"
        }
    ],
    "3818773": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_47978.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818773/",
            "reporter": "abuse_ch"
        }
    ],
    "3818774": [
        {
            "dateadded": "2026-04-13 13:31:16 UTC",
            "url": "https://refundonex.com/cloud/form_69740.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818774/",
            "reporter": "abuse_ch"
        }
    ],
    "3818763": [
        {
            "dateadded": "2026-04-13 13:31:13 UTC",
            "url": "https://refundonex.com/cloud/form_94559.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818763/",
            "reporter": "abuse_ch"
        }
    ],
    "3818764": [
        {
            "dateadded": "2026-04-13 13:31:13 UTC",
            "url": "https://refundonex.com/cloud/form_03117.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818764/",
            "reporter": "abuse_ch"
        }
    ],
    "3818765": [
        {
            "dateadded": "2026-04-13 13:31:13 UTC",
            "url": "https://refundonex.com/cloud/form_84106.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818765/",
            "reporter": "abuse_ch"
        }
    ],
    "3818766": [
        {
            "dateadded": "2026-04-13 13:31:13 UTC",
            "url": "https://refundonex.com/cloud/form_78116.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818766/",
            "reporter": "abuse_ch"
        }
    ],
    "3818758": [
        {
            "dateadded": "2026-04-13 13:31:12 UTC",
            "url": "https://refundonex.com/cloud/form_84428.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818758/",
            "reporter": "abuse_ch"
        }
    ],
    "3818759": [
        {
            "dateadded": "2026-04-13 13:31:12 UTC",
            "url": "https://refundonex.com/cloud/form_73976.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818759/",
            "reporter": "abuse_ch"
        }
    ],
    "3818760": [
        {
            "dateadded": "2026-04-13 13:31:12 UTC",
            "url": "https://refundonex.com/cloud/form_64948.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818760/",
            "reporter": "abuse_ch"
        }
    ],
    "3818761": [
        {
            "dateadded": "2026-04-13 13:31:12 UTC",
            "url": "https://refundonex.com/cloud/form_88971.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818761/",
            "reporter": "abuse_ch"
        }
    ],
    "3818762": [
        {
            "dateadded": "2026-04-13 13:31:12 UTC",
            "url": "https://refundonex.com/cloud/form_99806.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818762/",
            "reporter": "abuse_ch"
        }
    ],
    "3818754": [
        {
            "dateadded": "2026-04-13 13:31:11 UTC",
            "url": "https://refundonex.com/cloud/form_94834.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818754/",
            "reporter": "abuse_ch"
        }
    ],
    "3818755": [
        {
            "dateadded": "2026-04-13 13:31:11 UTC",
            "url": "https://refundonex.com/cloud/form_24764.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818755/",
            "reporter": "abuse_ch"
        }
    ],
    "3818756": [
        {
            "dateadded": "2026-04-13 13:31:11 UTC",
            "url": "https://refundonex.com/cloud/form_72145.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818756/",
            "reporter": "abuse_ch"
        }
    ],
    "3818757": [
        {
            "dateadded": "2026-04-13 13:31:11 UTC",
            "url": "https://refundonex.com/cloud/form_22166.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818757/",
            "reporter": "abuse_ch"
        }
    ],
    "3818748": [
        {
            "dateadded": "2026-04-13 13:31:09 UTC",
            "url": "https://refundonex.com/cloud/form_36597.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818748/",
            "reporter": "abuse_ch"
        }
    ],
    "3818749": [
        {
            "dateadded": "2026-04-13 13:31:09 UTC",
            "url": "https://refundonex.com/cloud/form_77462.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818749/",
            "reporter": "abuse_ch"
        }
    ],
    "3818750": [
        {
            "dateadded": "2026-04-13 13:31:09 UTC",
            "url": "https://refundonex.com/cloud/form_20713.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818750/",
            "reporter": "abuse_ch"
        }
    ],
    "3818751": [
        {
            "dateadded": "2026-04-13 13:31:09 UTC",
            "url": "https://refundonex.com/cloud/form_96474.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818751/",
            "reporter": "abuse_ch"
        }
    ],
    "3818752": [
        {
            "dateadded": "2026-04-13 13:31:09 UTC",
            "url": "https://refundonex.com/cloud/form_40469.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818752/",
            "reporter": "abuse_ch"
        }
    ],
    "3818753": [
        {
            "dateadded": "2026-04-13 13:31:09 UTC",
            "url": "https://refundonex.com/cloud/form_44107.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818753/",
            "reporter": "abuse_ch"
        }
    ],
    "3818745": [
        {
            "dateadded": "2026-04-13 13:31:08 UTC",
            "url": "https://refundonex.com/cloud/form_88599.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818745/",
            "reporter": "abuse_ch"
        }
    ],
    "3818746": [
        {
            "dateadded": "2026-04-13 13:31:08 UTC",
            "url": "https://refundonex.com/cloud/form_56966.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818746/",
            "reporter": "abuse_ch"
        }
    ],
    "3818747": [
        {
            "dateadded": "2026-04-13 13:31:08 UTC",
            "url": "https://refundonex.com/cloud/form_85013.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818747/",
            "reporter": "abuse_ch"
        }
    ],
    "3818739": [
        {
            "dateadded": "2026-04-13 13:31:07 UTC",
            "url": "https://refundonex.com/cloud/form_26701.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818739/",
            "reporter": "abuse_ch"
        }
    ],
    "3818740": [
        {
            "dateadded": "2026-04-13 13:31:07 UTC",
            "url": "https://refundonex.com/cloud/form_98423.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818740/",
            "reporter": "abuse_ch"
        }
    ],
    "3818741": [
        {
            "dateadded": "2026-04-13 13:31:07 UTC",
            "url": "https://refundonex.com/cloud/form_85934.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818741/",
            "reporter": "abuse_ch"
        }
    ],
    "3818742": [
        {
            "dateadded": "2026-04-13 13:31:07 UTC",
            "url": "https://refundonex.com/cloud/form_56400.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818742/",
            "reporter": "abuse_ch"
        }
    ],
    "3818743": [
        {
            "dateadded": "2026-04-13 13:31:07 UTC",
            "url": "https://refundonex.com/cloud/form_40082.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818743/",
            "reporter": "abuse_ch"
        }
    ],
    "3818744": [
        {
            "dateadded": "2026-04-13 13:31:07 UTC",
            "url": "https://refundonex.com/cloud/testx.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818744/",
            "reporter": "abuse_ch"
        }
    ],
    "3818737": [
        {
            "dateadded": "2026-04-13 13:31:06 UTC",
            "url": "https://refundonex.com/cloud/form_41620.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818737/",
            "reporter": "abuse_ch"
        }
    ],
    "3818738": [
        {
            "dateadded": "2026-04-13 13:31:06 UTC",
            "url": "https://refundonex.com/cloud/form_38075.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818738/",
            "reporter": "abuse_ch"
        }
    ],
    "3818732": [
        {
            "dateadded": "2026-04-13 13:31:05 UTC",
            "url": "https://refundonex.com/cloud/form_96061.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818732/",
            "reporter": "abuse_ch"
        }
    ],
    "3818733": [
        {
            "dateadded": "2026-04-13 13:31:05 UTC",
            "url": "https://refundonex.com/cloud/form_96851.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818733/",
            "reporter": "abuse_ch"
        }
    ],
    "3818734": [
        {
            "dateadded": "2026-04-13 13:31:05 UTC",
            "url": "https://refundonex.com/cloud/form_07013.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818734/",
            "reporter": "abuse_ch"
        }
    ],
    "3818735": [
        {
            "dateadded": "2026-04-13 13:31:05 UTC",
            "url": "https://refundonex.com/cloud/form_54467.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818735/",
            "reporter": "abuse_ch"
        }
    ],
    "3818736": [
        {
            "dateadded": "2026-04-13 13:31:05 UTC",
            "url": "https://refundonex.com/cloud/form_90347.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818736/",
            "reporter": "abuse_ch"
        }
    ],
    "3818729": [
        {
            "dateadded": "2026-04-13 13:31:04 UTC",
            "url": "https://refundonex.com/cloud/form_90583.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818729/",
            "reporter": "abuse_ch"
        }
    ],
    "3818730": [
        {
            "dateadded": "2026-04-13 13:31:04 UTC",
            "url": "https://refundonex.com/cloud/form_86842.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818730/",
            "reporter": "abuse_ch"
        }
    ],
    "3818731": [
        {
            "dateadded": "2026-04-13 13:31:04 UTC",
            "url": "https://refundonex.com/cloud/form_78106.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818731/",
            "reporter": "abuse_ch"
        }
    ],
    "3818726": [
        {
            "dateadded": "2026-04-13 13:31:03 UTC",
            "url": "https://refundonex.com/cloud/form_81612.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818726/",
            "reporter": "abuse_ch"
        }
    ],
    "3818727": [
        {
            "dateadded": "2026-04-13 13:31:03 UTC",
            "url": "https://refundonex.com/cloud/form_99162.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818727/",
            "reporter": "abuse_ch"
        }
    ],
    "3818728": [
        {
            "dateadded": "2026-04-13 13:31:03 UTC",
            "url": "https://refundonex.com/cloud/form_57896.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:03 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818728/",
            "reporter": "abuse_ch"
        }
    ],
    "3818722": [
        {
            "dateadded": "2026-04-13 13:31:02 UTC",
            "url": "https://refundonex.com/cloud/form_08901.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818722/",
            "reporter": "abuse_ch"
        }
    ],
    "3818723": [
        {
            "dateadded": "2026-04-13 13:31:02 UTC",
            "url": "https://refundonex.com/cloud/form_83640.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818723/",
            "reporter": "abuse_ch"
        }
    ],
    "3818724": [
        {
            "dateadded": "2026-04-13 13:31:02 UTC",
            "url": "https://refundonex.com/cloud/form_27573.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:02 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818724/",
            "reporter": "abuse_ch"
        }
    ],
    "3818725": [
        {
            "dateadded": "2026-04-13 13:31:02 UTC",
            "url": "https://refundonex.com/cloud/form_70273.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818725/",
            "reporter": "abuse_ch"
        }
    ],
    "3818716": [
        {
            "dateadded": "2026-04-13 13:31:00 UTC",
            "url": "https://refundonex.com/cloud/form_52315.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818716/",
            "reporter": "abuse_ch"
        }
    ],
    "3818717": [
        {
            "dateadded": "2026-04-13 13:31:00 UTC",
            "url": "https://refundonex.com/cloud/form_43581.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818717/",
            "reporter": "abuse_ch"
        }
    ],
    "3818718": [
        {
            "dateadded": "2026-04-13 13:31:00 UTC",
            "url": "https://refundonex.com/cloud/form_72160.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818718/",
            "reporter": "abuse_ch"
        }
    ],
    "3818719": [
        {
            "dateadded": "2026-04-13 13:31:00 UTC",
            "url": "https://refundonex.com/cloud/form_30908.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818719/",
            "reporter": "abuse_ch"
        }
    ],
    "3818720": [
        {
            "dateadded": "2026-04-13 13:31:00 UTC",
            "url": "https://refundonex.com/cloud/form_64220.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818720/",
            "reporter": "abuse_ch"
        }
    ],
    "3818721": [
        {
            "dateadded": "2026-04-13 13:31:00 UTC",
            "url": "http://107.175.88.100/458/cloudconnect.hta",
            "url_status": "offline",
            "last_online": "2026-04-13 23:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "CobaltStrike",
                "hta",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818721/",
            "reporter": "abuse_ch"
        }
    ],
    "3818710": [
        {
            "dateadded": "2026-04-13 13:30:59 UTC",
            "url": "https://refundonex.com/cloud/form_81650.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818710/",
            "reporter": "abuse_ch"
        }
    ],
    "3818711": [
        {
            "dateadded": "2026-04-13 13:30:59 UTC",
            "url": "https://refundonex.com/cloud/form_08999.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818711/",
            "reporter": "abuse_ch"
        }
    ],
    "3818712": [
        {
            "dateadded": "2026-04-13 13:30:59 UTC",
            "url": "https://refundonex.com/cloud/form_76383.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818712/",
            "reporter": "abuse_ch"
        }
    ],
    "3818713": [
        {
            "dateadded": "2026-04-13 13:30:59 UTC",
            "url": "https://refundonex.com/cloud/form_37964.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818713/",
            "reporter": "abuse_ch"
        }
    ],
    "3818714": [
        {
            "dateadded": "2026-04-13 13:30:59 UTC",
            "url": "https://refundonex.com/cloud/form_46273.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818714/",
            "reporter": "abuse_ch"
        }
    ],
    "3818715": [
        {
            "dateadded": "2026-04-13 13:30:59 UTC",
            "url": "https://refundonex.com/cloud/form_28358.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:59 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818715/",
            "reporter": "abuse_ch"
        }
    ],
    "3818704": [
        {
            "dateadded": "2026-04-13 13:30:58 UTC",
            "url": "https://refundonex.com/cloud/form_88746.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818704/",
            "reporter": "abuse_ch"
        }
    ],
    "3818705": [
        {
            "dateadded": "2026-04-13 13:30:58 UTC",
            "url": "https://refundonex.com/cloud/form_36406.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818705/",
            "reporter": "abuse_ch"
        }
    ],
    "3818706": [
        {
            "dateadded": "2026-04-13 13:30:58 UTC",
            "url": "https://refundonex.com/cloud/form_36347.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818706/",
            "reporter": "abuse_ch"
        }
    ],
    "3818707": [
        {
            "dateadded": "2026-04-13 13:30:58 UTC",
            "url": "https://refundonex.com/cloud/form_83418.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818707/",
            "reporter": "abuse_ch"
        }
    ],
    "3818708": [
        {
            "dateadded": "2026-04-13 13:30:58 UTC",
            "url": "https://refundonex.com/cloud/form_88222.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818708/",
            "reporter": "abuse_ch"
        }
    ],
    "3818709": [
        {
            "dateadded": "2026-04-13 13:30:58 UTC",
            "url": "https://refundonex.com/cloud/form_84107.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818709/",
            "reporter": "abuse_ch"
        }
    ],
    "3818702": [
        {
            "dateadded": "2026-04-13 13:30:57 UTC",
            "url": "https://refundonex.com/cloud/form_34235.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818702/",
            "reporter": "abuse_ch"
        }
    ],
    "3818703": [
        {
            "dateadded": "2026-04-13 13:30:57 UTC",
            "url": "https://refundonex.com/cloud/form_18258.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818703/",
            "reporter": "abuse_ch"
        }
    ],
    "3818700": [
        {
            "dateadded": "2026-04-13 13:30:56 UTC",
            "url": "https://refundonex.com/cloud/form_20035.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:56 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818700/",
            "reporter": "abuse_ch"
        }
    ],
    "3818701": [
        {
            "dateadded": "2026-04-13 13:30:56 UTC",
            "url": "https://refundonex.com/cloud/form_23593.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818701/",
            "reporter": "abuse_ch"
        }
    ],
    "3818695": [
        {
            "dateadded": "2026-04-13 13:30:55 UTC",
            "url": "https://refundonex.com/cloud/form_71572.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818695/",
            "reporter": "abuse_ch"
        }
    ],
    "3818696": [
        {
            "dateadded": "2026-04-13 13:30:55 UTC",
            "url": "https://refundonex.com/cloud/form_13302.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818696/",
            "reporter": "abuse_ch"
        }
    ],
    "3818697": [
        {
            "dateadded": "2026-04-13 13:30:55 UTC",
            "url": "https://refundonex.com/cloud/form_00620.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818697/",
            "reporter": "abuse_ch"
        }
    ],
    "3818698": [
        {
            "dateadded": "2026-04-13 13:30:55 UTC",
            "url": "https://refundonex.com/cloud/form_12525.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818698/",
            "reporter": "abuse_ch"
        }
    ],
    "3818699": [
        {
            "dateadded": "2026-04-13 13:30:55 UTC",
            "url": "https://refundonex.com/cloud/form_28332.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818699/",
            "reporter": "abuse_ch"
        }
    ],
    "3818693": [
        {
            "dateadded": "2026-04-13 13:30:54 UTC",
            "url": "https://refundonex.com/cloud/form_45429.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818693/",
            "reporter": "abuse_ch"
        }
    ],
    "3818694": [
        {
            "dateadded": "2026-04-13 13:30:54 UTC",
            "url": "https://refundonex.com/cloud/form_13843.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818694/",
            "reporter": "abuse_ch"
        }
    ],
    "3818692": [
        {
            "dateadded": "2026-04-13 13:30:53 UTC",
            "url": "https://refundonex.com/cloud/form_50298.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:53 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818692/",
            "reporter": "abuse_ch"
        }
    ],
    "3818691": [
        {
            "dateadded": "2026-04-13 13:30:52 UTC",
            "url": "https://refundonex.com/cloud/form_86428.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818691/",
            "reporter": "abuse_ch"
        }
    ],
    "3818687": [
        {
            "dateadded": "2026-04-13 13:30:51 UTC",
            "url": "https://refundonex.com/cloud/form_56048.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818687/",
            "reporter": "abuse_ch"
        }
    ],
    "3818688": [
        {
            "dateadded": "2026-04-13 13:30:51 UTC",
            "url": "https://refundonex.com/cloud/form_94601.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818688/",
            "reporter": "abuse_ch"
        }
    ],
    "3818689": [
        {
            "dateadded": "2026-04-13 13:30:51 UTC",
            "url": "https://refundonex.com/cloud/form_69918.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818689/",
            "reporter": "abuse_ch"
        }
    ],
    "3818690": [
        {
            "dateadded": "2026-04-13 13:30:51 UTC",
            "url": "https://refundonex.com/cloud/form_34305.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818690/",
            "reporter": "abuse_ch"
        }
    ],
    "3818683": [
        {
            "dateadded": "2026-04-13 13:30:50 UTC",
            "url": "https://refundonex.com/cloud/form_93224.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818683/",
            "reporter": "abuse_ch"
        }
    ],
    "3818684": [
        {
            "dateadded": "2026-04-13 13:30:50 UTC",
            "url": "https://refundonex.com/cloud/form_90077.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818684/",
            "reporter": "abuse_ch"
        }
    ],
    "3818685": [
        {
            "dateadded": "2026-04-13 13:30:50 UTC",
            "url": "https://refundonex.com/cloud/form_89431.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818685/",
            "reporter": "abuse_ch"
        }
    ],
    "3818686": [
        {
            "dateadded": "2026-04-13 13:30:50 UTC",
            "url": "https://refundonex.com/cloud/form_28346.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818686/",
            "reporter": "abuse_ch"
        }
    ],
    "3818680": [
        {
            "dateadded": "2026-04-13 13:30:49 UTC",
            "url": "https://refundonex.com/cloud/form_74798.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818680/",
            "reporter": "abuse_ch"
        }
    ],
    "3818681": [
        {
            "dateadded": "2026-04-13 13:30:49 UTC",
            "url": "https://refundonex.com/cloud/form_13802.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818681/",
            "reporter": "abuse_ch"
        }
    ],
    "3818682": [
        {
            "dateadded": "2026-04-13 13:30:49 UTC",
            "url": "https://refundonex.com/cloud/form_91385.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818682/",
            "reporter": "abuse_ch"
        }
    ],
    "3818668": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_99433.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818668/",
            "reporter": "abuse_ch"
        }
    ],
    "3818669": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_59828.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818669/",
            "reporter": "abuse_ch"
        }
    ],
    "3818670": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_81050.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818670/",
            "reporter": "abuse_ch"
        }
    ],
    "3818671": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_62565.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818671/",
            "reporter": "abuse_ch"
        }
    ],
    "3818672": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_03674.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818672/",
            "reporter": "abuse_ch"
        }
    ],
    "3818673": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_28346.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818673/",
            "reporter": "abuse_ch"
        }
    ],
    "3818674": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_96939.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818674/",
            "reporter": "abuse_ch"
        }
    ],
    "3818675": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_93523.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818675/",
            "reporter": "abuse_ch"
        }
    ],
    "3818676": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_35000.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818676/",
            "reporter": "abuse_ch"
        }
    ],
    "3818677": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_61212.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818677/",
            "reporter": "abuse_ch"
        }
    ],
    "3818678": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_67925.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818678/",
            "reporter": "abuse_ch"
        }
    ],
    "3818679": [
        {
            "dateadded": "2026-04-13 13:30:48 UTC",
            "url": "https://refundonex.com/cloud/form_07712.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818679/",
            "reporter": "abuse_ch"
        }
    ],
    "3818665": [
        {
            "dateadded": "2026-04-13 13:30:46 UTC",
            "url": "https://refundonex.com/cloud/form_01788.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818665/",
            "reporter": "abuse_ch"
        }
    ],
    "3818666": [
        {
            "dateadded": "2026-04-13 13:30:46 UTC",
            "url": "https://refundonex.com/cloud/form_07950.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818666/",
            "reporter": "abuse_ch"
        }
    ],
    "3818667": [
        {
            "dateadded": "2026-04-13 13:30:46 UTC",
            "url": "https://refundonex.com/cloud/form_34305.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818667/",
            "reporter": "abuse_ch"
        }
    ],
    "3818663": [
        {
            "dateadded": "2026-04-13 13:30:45 UTC",
            "url": "https://refundonex.com/cloud/form_08788.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818663/",
            "reporter": "abuse_ch"
        }
    ],
    "3818664": [
        {
            "dateadded": "2026-04-13 13:30:45 UTC",
            "url": "https://refundonex.com/cloud/form_81867.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:45 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818664/",
            "reporter": "abuse_ch"
        }
    ],
    "3818660": [
        {
            "dateadded": "2026-04-13 13:30:44 UTC",
            "url": "https://refundonex.com/cloud/form_11740.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818660/",
            "reporter": "abuse_ch"
        }
    ],
    "3818661": [
        {
            "dateadded": "2026-04-13 13:30:44 UTC",
            "url": "https://refundonex.com/cloud/form_40469.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:44 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818661/",
            "reporter": "abuse_ch"
        }
    ],
    "3818662": [
        {
            "dateadded": "2026-04-13 13:30:44 UTC",
            "url": "https://refundonex.com/cloud/form_81547.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818662/",
            "reporter": "abuse_ch"
        }
    ],
    "3818658": [
        {
            "dateadded": "2026-04-13 13:30:42 UTC",
            "url": "https://refundonex.com/cloud/form_46415.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818658/",
            "reporter": "abuse_ch"
        }
    ],
    "3818659": [
        {
            "dateadded": "2026-04-13 13:30:42 UTC",
            "url": "https://refundonex.com/cloud/form_98790.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818659/",
            "reporter": "abuse_ch"
        }
    ],
    "3818650": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_96498.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818650/",
            "reporter": "abuse_ch"
        }
    ],
    "3818651": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_45309.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818651/",
            "reporter": "abuse_ch"
        }
    ],
    "3818652": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_01673.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818652/",
            "reporter": "abuse_ch"
        }
    ],
    "3818653": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_96783.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818653/",
            "reporter": "abuse_ch"
        }
    ],
    "3818654": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_08939.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818654/",
            "reporter": "abuse_ch"
        }
    ],
    "3818655": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_12549.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818655/",
            "reporter": "abuse_ch"
        }
    ],
    "3818656": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_34784.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818656/",
            "reporter": "abuse_ch"
        }
    ],
    "3818657": [
        {
            "dateadded": "2026-04-13 13:30:41 UTC",
            "url": "https://refundonex.com/cloud/form_79569.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:41 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818657/",
            "reporter": "abuse_ch"
        }
    ],
    "3818648": [
        {
            "dateadded": "2026-04-13 13:30:40 UTC",
            "url": "https://refundonex.com/cloud/form_69167.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818648/",
            "reporter": "abuse_ch"
        }
    ],
    "3818649": [
        {
            "dateadded": "2026-04-13 13:30:40 UTC",
            "url": "https://refundonex.com/cloud/form_81040.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818649/",
            "reporter": "abuse_ch"
        }
    ],
    "3818645": [
        {
            "dateadded": "2026-04-13 13:30:39 UTC",
            "url": "https://refundonex.com/cloud/form_75813.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818645/",
            "reporter": "abuse_ch"
        }
    ],
    "3818646": [
        {
            "dateadded": "2026-04-13 13:30:39 UTC",
            "url": "https://refundonex.com/cloud/form_82276.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818646/",
            "reporter": "abuse_ch"
        }
    ],
    "3818647": [
        {
            "dateadded": "2026-04-13 13:30:39 UTC",
            "url": "https://refundonex.com/cloud/form_47384.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818647/",
            "reporter": "abuse_ch"
        }
    ],
    "3818642": [
        {
            "dateadded": "2026-04-13 13:30:38 UTC",
            "url": "https://refundonex.com/cloud/form_04008.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818642/",
            "reporter": "abuse_ch"
        }
    ],
    "3818643": [
        {
            "dateadded": "2026-04-13 13:30:38 UTC",
            "url": "https://refundonex.com/cloud/form_15314.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818643/",
            "reporter": "abuse_ch"
        }
    ],
    "3818644": [
        {
            "dateadded": "2026-04-13 13:30:38 UTC",
            "url": "https://refundonex.com/cloud/form_12549.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818644/",
            "reporter": "abuse_ch"
        }
    ],
    "3818638": [
        {
            "dateadded": "2026-04-13 13:30:37 UTC",
            "url": "https://refundonex.com/cloud/form_21763.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818638/",
            "reporter": "abuse_ch"
        }
    ],
    "3818639": [
        {
            "dateadded": "2026-04-13 13:30:37 UTC",
            "url": "https://refundonex.com/cloud/form_21974.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818639/",
            "reporter": "abuse_ch"
        }
    ],
    "3818640": [
        {
            "dateadded": "2026-04-13 13:30:37 UTC",
            "url": "https://refundonex.com/cloud/form_72201.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818640/",
            "reporter": "abuse_ch"
        }
    ],
    "3818641": [
        {
            "dateadded": "2026-04-13 13:30:37 UTC",
            "url": "https://refundonex.com/cloud/form_74348.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818641/",
            "reporter": "abuse_ch"
        }
    ],
    "3818632": [
        {
            "dateadded": "2026-04-13 13:30:36 UTC",
            "url": "https://refundonex.com/cloud/form_73959.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818632/",
            "reporter": "abuse_ch"
        }
    ],
    "3818633": [
        {
            "dateadded": "2026-04-13 13:30:36 UTC",
            "url": "https://refundonex.com/cloud/form_61451.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818633/",
            "reporter": "abuse_ch"
        }
    ],
    "3818634": [
        {
            "dateadded": "2026-04-13 13:30:36 UTC",
            "url": "https://refundonex.com/cloud/form_82041.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818634/",
            "reporter": "abuse_ch"
        }
    ],
    "3818635": [
        {
            "dateadded": "2026-04-13 13:30:36 UTC",
            "url": "https://refundonex.com/cloud/form_85369.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818635/",
            "reporter": "abuse_ch"
        }
    ],
    "3818636": [
        {
            "dateadded": "2026-04-13 13:30:36 UTC",
            "url": "https://refundonex.com/cloud/form_66250.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818636/",
            "reporter": "abuse_ch"
        }
    ],
    "3818637": [
        {
            "dateadded": "2026-04-13 13:30:36 UTC",
            "url": "https://refundonex.com/cloud/form_62609.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818637/",
            "reporter": "abuse_ch"
        }
    ],
    "3818630": [
        {
            "dateadded": "2026-04-13 13:30:35 UTC",
            "url": "https://refundonex.com/cloud/form_98775.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818630/",
            "reporter": "abuse_ch"
        }
    ],
    "3818631": [
        {
            "dateadded": "2026-04-13 13:30:35 UTC",
            "url": "https://refundonex.com/cloud/form_91484.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818631/",
            "reporter": "abuse_ch"
        }
    ],
    "3818624": [
        {
            "dateadded": "2026-04-13 13:30:34 UTC",
            "url": "https://refundonex.com/cloud/form_64898.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818624/",
            "reporter": "abuse_ch"
        }
    ],
    "3818625": [
        {
            "dateadded": "2026-04-13 13:30:34 UTC",
            "url": "https://refundonex.com/cloud/form_21024.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818625/",
            "reporter": "abuse_ch"
        }
    ],
    "3818626": [
        {
            "dateadded": "2026-04-13 13:30:34 UTC",
            "url": "https://refundonex.com/cloud/form_13235.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818626/",
            "reporter": "abuse_ch"
        }
    ],
    "3818627": [
        {
            "dateadded": "2026-04-13 13:30:34 UTC",
            "url": "https://refundonex.com/cloud/form_50149.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818627/",
            "reporter": "abuse_ch"
        }
    ],
    "3818628": [
        {
            "dateadded": "2026-04-13 13:30:34 UTC",
            "url": "https://refundonex.com/cloud/form_07693.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818628/",
            "reporter": "abuse_ch"
        }
    ],
    "3818629": [
        {
            "dateadded": "2026-04-13 13:30:34 UTC",
            "url": "https://refundonex.com/cloud/form_30329.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818629/",
            "reporter": "abuse_ch"
        }
    ],
    "3818616": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_53592.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818616/",
            "reporter": "abuse_ch"
        }
    ],
    "3818617": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_47796.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818617/",
            "reporter": "abuse_ch"
        }
    ],
    "3818618": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "http://198.12.83.76/55/goodforbestthings.js",
            "url_status": "offline",
            "last_online": "2026-04-13 22:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "js",
                "opendir",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818618/",
            "reporter": "abuse_ch"
        }
    ],
    "3818619": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_06235.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818619/",
            "reporter": "abuse_ch"
        }
    ],
    "3818620": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_38899.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818620/",
            "reporter": "abuse_ch"
        }
    ],
    "3818621": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_67100.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818621/",
            "reporter": "abuse_ch"
        }
    ],
    "3818622": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_96539.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818622/",
            "reporter": "abuse_ch"
        }
    ],
    "3818623": [
        {
            "dateadded": "2026-04-13 13:30:33 UTC",
            "url": "https://refundonex.com/cloud/form_87547.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818623/",
            "reporter": "abuse_ch"
        }
    ],
    "3818613": [
        {
            "dateadded": "2026-04-13 13:30:31 UTC",
            "url": "https://refundonex.com/cloud/form_10936.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818613/",
            "reporter": "abuse_ch"
        }
    ],
    "3818614": [
        {
            "dateadded": "2026-04-13 13:30:31 UTC",
            "url": "https://refundonex.com/cloud/form_14388.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818614/",
            "reporter": "abuse_ch"
        }
    ],
    "3818615": [
        {
            "dateadded": "2026-04-13 13:30:31 UTC",
            "url": "https://refundonex.com/cloud/form_27329.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818615/",
            "reporter": "abuse_ch"
        }
    ],
    "3818612": [
        {
            "dateadded": "2026-04-13 13:30:30 UTC",
            "url": "https://refundonex.com/cloud/form_21490.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818612/",
            "reporter": "abuse_ch"
        }
    ],
    "3818605": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_78394.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818605/",
            "reporter": "abuse_ch"
        }
    ],
    "3818606": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_81271.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818606/",
            "reporter": "abuse_ch"
        }
    ],
    "3818607": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_61451.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818607/",
            "reporter": "abuse_ch"
        }
    ],
    "3818608": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_37612.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818608/",
            "reporter": "abuse_ch"
        }
    ],
    "3818609": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_38901.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818609/",
            "reporter": "abuse_ch"
        }
    ],
    "3818610": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_33853.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818610/",
            "reporter": "abuse_ch"
        }
    ],
    "3818611": [
        {
            "dateadded": "2026-04-13 13:30:29 UTC",
            "url": "https://refundonex.com/cloud/form_58844.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818611/",
            "reporter": "abuse_ch"
        }
    ],
    "3818596": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_45698.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818596/",
            "reporter": "abuse_ch"
        }
    ],
    "3818597": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_08117.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818597/",
            "reporter": "abuse_ch"
        }
    ],
    "3818598": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_82208.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818598/",
            "reporter": "abuse_ch"
        }
    ],
    "3818599": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_10888.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818599/",
            "reporter": "abuse_ch"
        }
    ],
    "3818600": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_31268.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818600/",
            "reporter": "abuse_ch"
        }
    ],
    "3818601": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_05895.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818601/",
            "reporter": "abuse_ch"
        }
    ],
    "3818602": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_95365.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818602/",
            "reporter": "abuse_ch"
        }
    ],
    "3818603": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_54935.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818603/",
            "reporter": "abuse_ch"
        }
    ],
    "3818604": [
        {
            "dateadded": "2026-04-13 13:30:28 UTC",
            "url": "https://refundonex.com/cloud/form_55292.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818604/",
            "reporter": "abuse_ch"
        }
    ],
    "3818591": [
        {
            "dateadded": "2026-04-13 13:30:27 UTC",
            "url": "https://refundonex.com/cloud/form_91107.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818591/",
            "reporter": "abuse_ch"
        }
    ],
    "3818592": [
        {
            "dateadded": "2026-04-13 13:30:27 UTC",
            "url": "https://refundonex.com/cloud/form_07301.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818592/",
            "reporter": "abuse_ch"
        }
    ],
    "3818593": [
        {
            "dateadded": "2026-04-13 13:30:27 UTC",
            "url": "https://refundonex.com/cloud/form_78106.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818593/",
            "reporter": "abuse_ch"
        }
    ],
    "3818594": [
        {
            "dateadded": "2026-04-13 13:30:27 UTC",
            "url": "https://capi-recor.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818594/",
            "reporter": "anonymous"
        }
    ],
    "3818595": [
        {
            "dateadded": "2026-04-13 13:30:27 UTC",
            "url": "https://refundonex.com/cloud/form_02185.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818595/",
            "reporter": "abuse_ch"
        }
    ],
    "3818587": [
        {
            "dateadded": "2026-04-13 13:30:25 UTC",
            "url": "https://refundonex.com/cloud/form_98882.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818587/",
            "reporter": "abuse_ch"
        }
    ],
    "3818588": [
        {
            "dateadded": "2026-04-13 13:30:25 UTC",
            "url": "https://refundonex.com/cloud/form_81245.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818588/",
            "reporter": "abuse_ch"
        }
    ],
    "3818589": [
        {
            "dateadded": "2026-04-13 13:30:25 UTC",
            "url": "https://refundonex.com/cloud/form_72579.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818589/",
            "reporter": "abuse_ch"
        }
    ],
    "3818590": [
        {
            "dateadded": "2026-04-13 13:30:25 UTC",
            "url": "https://refundonex.com/cloud/form_30736.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818590/",
            "reporter": "abuse_ch"
        }
    ],
    "3818586": [
        {
            "dateadded": "2026-04-13 13:30:22 UTC",
            "url": "https://refundonex.com/cloud/form_98937.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818586/",
            "reporter": "abuse_ch"
        }
    ],
    "3818580": [
        {
            "dateadded": "2026-04-13 13:30:21 UTC",
            "url": "https://refundonex.com/cloud/form_49639.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818580/",
            "reporter": "abuse_ch"
        }
    ],
    "3818581": [
        {
            "dateadded": "2026-04-13 13:30:21 UTC",
            "url": "https://refundonex.com/cloud/form_45248.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818581/",
            "reporter": "abuse_ch"
        }
    ],
    "3818582": [
        {
            "dateadded": "2026-04-13 13:30:21 UTC",
            "url": "https://refundonex.com/cloud/form_98882.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818582/",
            "reporter": "abuse_ch"
        }
    ],
    "3818583": [
        {
            "dateadded": "2026-04-13 13:30:21 UTC",
            "url": "https://refundonex.com/cloud/form_90950.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818583/",
            "reporter": "abuse_ch"
        }
    ],
    "3818584": [
        {
            "dateadded": "2026-04-13 13:30:21 UTC",
            "url": "https://refundonex.com/cloud/form_64266.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818584/",
            "reporter": "abuse_ch"
        }
    ],
    "3818585": [
        {
            "dateadded": "2026-04-13 13:30:21 UTC",
            "url": "https://refundonex.com/cloud/form_88278.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818585/",
            "reporter": "abuse_ch"
        }
    ],
    "3818576": [
        {
            "dateadded": "2026-04-13 13:30:20 UTC",
            "url": "https://refundonex.com/cloud/form_77434.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818576/",
            "reporter": "abuse_ch"
        }
    ],
    "3818577": [
        {
            "dateadded": "2026-04-13 13:30:20 UTC",
            "url": "https://refundonex.com/cloud/form_70894.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818577/",
            "reporter": "abuse_ch"
        }
    ],
    "3818578": [
        {
            "dateadded": "2026-04-13 13:30:20 UTC",
            "url": "https://refundonex.com/cloud/form_23919.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818578/",
            "reporter": "abuse_ch"
        }
    ],
    "3818579": [
        {
            "dateadded": "2026-04-13 13:30:20 UTC",
            "url": "https://refundonex.com/cloud/form_83467.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818579/",
            "reporter": "abuse_ch"
        }
    ],
    "3818571": [
        {
            "dateadded": "2026-04-13 13:30:19 UTC",
            "url": "https://refundonex.com/cloud/form_86842.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818571/",
            "reporter": "abuse_ch"
        }
    ],
    "3818572": [
        {
            "dateadded": "2026-04-13 13:30:19 UTC",
            "url": "https://refundonex.com/cloud/form_72606.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818572/",
            "reporter": "abuse_ch"
        }
    ],
    "3818573": [
        {
            "dateadded": "2026-04-13 13:30:19 UTC",
            "url": "https://refundonex.com/cloud/form_53051.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818573/",
            "reporter": "abuse_ch"
        }
    ],
    "3818574": [
        {
            "dateadded": "2026-04-13 13:30:19 UTC",
            "url": "https://refundonex.com/cloud/form_78812.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818574/",
            "reporter": "abuse_ch"
        }
    ],
    "3818575": [
        {
            "dateadded": "2026-04-13 13:30:19 UTC",
            "url": "https://refundonex.com/cloud/form_08788.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818575/",
            "reporter": "abuse_ch"
        }
    ],
    "3818565": [
        {
            "dateadded": "2026-04-13 13:30:18 UTC",
            "url": "https://refundonex.com/cloud/form_36728.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818565/",
            "reporter": "abuse_ch"
        }
    ],
    "3818566": [
        {
            "dateadded": "2026-04-13 13:30:18 UTC",
            "url": "https://refundonex.com/cloud/form_43152.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818566/",
            "reporter": "abuse_ch"
        }
    ],
    "3818567": [
        {
            "dateadded": "2026-04-13 13:30:18 UTC",
            "url": "https://refundonex.com/cloud/form_96477.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818567/",
            "reporter": "abuse_ch"
        }
    ],
    "3818568": [
        {
            "dateadded": "2026-04-13 13:30:18 UTC",
            "url": "https://refundonex.com/cloud/form_15848.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818568/",
            "reporter": "abuse_ch"
        }
    ],
    "3818569": [
        {
            "dateadded": "2026-04-13 13:30:18 UTC",
            "url": "https://refundonex.com/cloud/form_49178.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818569/",
            "reporter": "abuse_ch"
        }
    ],
    "3818570": [
        {
            "dateadded": "2026-04-13 13:30:18 UTC",
            "url": "https://refundonex.com/cloud/form_68622.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818570/",
            "reporter": "abuse_ch"
        }
    ],
    "3818561": [
        {
            "dateadded": "2026-04-13 13:30:16 UTC",
            "url": "https://refundonex.com/cloud/form_77494.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818561/",
            "reporter": "abuse_ch"
        }
    ],
    "3818562": [
        {
            "dateadded": "2026-04-13 13:30:16 UTC",
            "url": "https://refundonex.com/cloud/form_49889.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818562/",
            "reporter": "abuse_ch"
        }
    ],
    "3818563": [
        {
            "dateadded": "2026-04-13 13:30:16 UTC",
            "url": "https://refundonex.com/cloud/form_35769.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818563/",
            "reporter": "abuse_ch"
        }
    ],
    "3818564": [
        {
            "dateadded": "2026-04-13 13:30:16 UTC",
            "url": "https://refundonex.com/cloud/form_94601.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818564/",
            "reporter": "abuse_ch"
        }
    ],
    "3818555": [
        {
            "dateadded": "2026-04-13 13:30:14 UTC",
            "url": "https://refundonex.com/cloud/form_39670.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818555/",
            "reporter": "abuse_ch"
        }
    ],
    "3818556": [
        {
            "dateadded": "2026-04-13 13:30:14 UTC",
            "url": "https://refundonex.com/cloud/form_08335.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818556/",
            "reporter": "abuse_ch"
        }
    ],
    "3818557": [
        {
            "dateadded": "2026-04-13 13:30:14 UTC",
            "url": "https://refundonex.com/cloud/form_00231.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818557/",
            "reporter": "abuse_ch"
        }
    ],
    "3818558": [
        {
            "dateadded": "2026-04-13 13:30:14 UTC",
            "url": "https://refundonex.com/cloud/form_52297.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818558/",
            "reporter": "abuse_ch"
        }
    ],
    "3818559": [
        {
            "dateadded": "2026-04-13 13:30:14 UTC",
            "url": "https://refundonex.com/cloud/form_87554.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818559/",
            "reporter": "abuse_ch"
        }
    ],
    "3818560": [
        {
            "dateadded": "2026-04-13 13:30:14 UTC",
            "url": "https://refundonex.com/cloud/form_99131.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818560/",
            "reporter": "abuse_ch"
        }
    ],
    "3818550": [
        {
            "dateadded": "2026-04-13 13:30:13 UTC",
            "url": "https://refundonex.com/cloud/form_42322.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818550/",
            "reporter": "abuse_ch"
        }
    ],
    "3818551": [
        {
            "dateadded": "2026-04-13 13:30:13 UTC",
            "url": "https://refundonex.com/cloud/form_68809.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818551/",
            "reporter": "abuse_ch"
        }
    ],
    "3818552": [
        {
            "dateadded": "2026-04-13 13:30:13 UTC",
            "url": "https://refundonex.com/cloud/form_72493.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818552/",
            "reporter": "abuse_ch"
        }
    ],
    "3818553": [
        {
            "dateadded": "2026-04-13 13:30:13 UTC",
            "url": "https://refundonex.com/cloud/form_01622.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818553/",
            "reporter": "abuse_ch"
        }
    ],
    "3818554": [
        {
            "dateadded": "2026-04-13 13:30:13 UTC",
            "url": "https://refundonex.com/cloud/form_87519.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818554/",
            "reporter": "abuse_ch"
        }
    ],
    "3818549": [
        {
            "dateadded": "2026-04-13 13:30:12 UTC",
            "url": "https://refundonex.com/cloud/form_84428.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818549/",
            "reporter": "abuse_ch"
        }
    ],
    "3818542": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/form_01622.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818542/",
            "reporter": "abuse_ch"
        }
    ],
    "3818543": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/form_07505.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818543/",
            "reporter": "abuse_ch"
        }
    ],
    "3818544": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/form_96539.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818544/",
            "reporter": "abuse_ch"
        }
    ],
    "3818545": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/JoseTomas.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818545/",
            "reporter": "abuse_ch"
        }
    ],
    "3818546": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/form_10539.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818546/",
            "reporter": "abuse_ch"
        }
    ],
    "3818547": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/form_52435.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818547/",
            "reporter": "abuse_ch"
        }
    ],
    "3818548": [
        {
            "dateadded": "2026-04-13 13:30:11 UTC",
            "url": "https://refundonex.com/cloud/form_88971.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818548/",
            "reporter": "abuse_ch"
        }
    ],
    "3818541": [
        {
            "dateadded": "2026-04-13 13:30:10 UTC",
            "url": "https://refundonex.com/cloud/form_43666.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-13 13:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818541/",
            "reporter": "abuse_ch"
        }
    ],
    "3818539": [
        {
            "dateadded": "2026-04-13 13:17:35 UTC",
            "url": "https://refundonex.com/cloud/form_39574.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818539/",
            "reporter": "abuse_ch"
        }
    ],
    "3818540": [
        {
            "dateadded": "2026-04-13 13:17:35 UTC",
            "url": "https://refundonex.com/cloud/form_63667.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818540/",
            "reporter": "abuse_ch"
        }
    ],
    "3818537": [
        {
            "dateadded": "2026-04-13 13:17:34 UTC",
            "url": "https://refundonex.com/cloud/form_05378.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818537/",
            "reporter": "abuse_ch"
        }
    ],
    "3818538": [
        {
            "dateadded": "2026-04-13 13:17:34 UTC",
            "url": "https://refundonex.com/cloud/form_62843.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818538/",
            "reporter": "abuse_ch"
        }
    ],
    "3818534": [
        {
            "dateadded": "2026-04-13 13:17:33 UTC",
            "url": "https://refundonex.com/cloud/form_48547.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818534/",
            "reporter": "abuse_ch"
        }
    ],
    "3818535": [
        {
            "dateadded": "2026-04-13 13:17:33 UTC",
            "url": "https://refundonex.com/cloud/form_43572.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818535/",
            "reporter": "abuse_ch"
        }
    ],
    "3818536": [
        {
            "dateadded": "2026-04-13 13:17:33 UTC",
            "url": "https://refundonex.com/cloud/form_65740.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818536/",
            "reporter": "abuse_ch"
        }
    ],
    "3818531": [
        {
            "dateadded": "2026-04-13 13:17:32 UTC",
            "url": "https://refundonex.com/cloud/form_79342.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818531/",
            "reporter": "abuse_ch"
        }
    ],
    "3818532": [
        {
            "dateadded": "2026-04-13 13:17:32 UTC",
            "url": "https://refundonex.com/cloud/form_33853.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818532/",
            "reporter": "abuse_ch"
        }
    ],
    "3818533": [
        {
            "dateadded": "2026-04-13 13:17:32 UTC",
            "url": "https://refundonex.com/cloud/form_23580.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818533/",
            "reporter": "abuse_ch"
        }
    ],
    "3818523": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_66250.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818523/",
            "reporter": "abuse_ch"
        }
    ],
    "3818524": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_13235.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818524/",
            "reporter": "abuse_ch"
        }
    ],
    "3818525": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_66758.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818525/",
            "reporter": "abuse_ch"
        }
    ],
    "3818526": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_70402.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818526/",
            "reporter": "abuse_ch"
        }
    ],
    "3818527": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_53097.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818527/",
            "reporter": "abuse_ch"
        }
    ],
    "3818528": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_55920.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818528/",
            "reporter": "abuse_ch"
        }
    ],
    "3818529": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_75496.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818529/",
            "reporter": "abuse_ch"
        }
    ],
    "3818530": [
        {
            "dateadded": "2026-04-13 13:17:31 UTC",
            "url": "https://refundonex.com/cloud/form_63809.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818530/",
            "reporter": "abuse_ch"
        }
    ],
    "3818522": [
        {
            "dateadded": "2026-04-13 13:17:30 UTC",
            "url": "https://refundonex.com/cloud/form_00757.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818522/",
            "reporter": "abuse_ch"
        }
    ],
    "3818514": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_31225.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818514/",
            "reporter": "abuse_ch"
        }
    ],
    "3818515": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_52937.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818515/",
            "reporter": "abuse_ch"
        }
    ],
    "3818516": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_49326.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818516/",
            "reporter": "abuse_ch"
        }
    ],
    "3818517": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_66977.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818517/",
            "reporter": "abuse_ch"
        }
    ],
    "3818518": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_16480.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818518/",
            "reporter": "abuse_ch"
        }
    ],
    "3818519": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_13236.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818519/",
            "reporter": "abuse_ch"
        }
    ],
    "3818520": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_03117.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818520/",
            "reporter": "abuse_ch"
        }
    ],
    "3818521": [
        {
            "dateadded": "2026-04-13 13:17:29 UTC",
            "url": "https://refundonex.com/cloud/form_66723.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818521/",
            "reporter": "abuse_ch"
        }
    ],
    "3818513": [
        {
            "dateadded": "2026-04-13 13:17:28 UTC",
            "url": "https://refundonex.com/cloud/form_03331.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818513/",
            "reporter": "abuse_ch"
        }
    ],
    "3818510": [
        {
            "dateadded": "2026-04-13 13:17:26 UTC",
            "url": "https://refundonex.com/cloud/form_63451.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818510/",
            "reporter": "abuse_ch"
        }
    ],
    "3818511": [
        {
            "dateadded": "2026-04-13 13:17:26 UTC",
            "url": "https://refundonex.com/cloud/form_67130.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818511/",
            "reporter": "abuse_ch"
        }
    ],
    "3818512": [
        {
            "dateadded": "2026-04-13 13:17:26 UTC",
            "url": "https://refundonex.com/cloud/form_54354.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818512/",
            "reporter": "abuse_ch"
        }
    ],
    "3818509": [
        {
            "dateadded": "2026-04-13 13:17:25 UTC",
            "url": "https://refundonex.com/cloud/form_08335.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818509/",
            "reporter": "abuse_ch"
        }
    ],
    "3818500": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_71145.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818500/",
            "reporter": "abuse_ch"
        }
    ],
    "3818501": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_66017.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818501/",
            "reporter": "abuse_ch"
        }
    ],
    "3818502": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_52326.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818502/",
            "reporter": "abuse_ch"
        }
    ],
    "3818503": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_61627.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818503/",
            "reporter": "abuse_ch"
        }
    ],
    "3818504": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_40212.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818504/",
            "reporter": "abuse_ch"
        }
    ],
    "3818505": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_36769.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818505/",
            "reporter": "abuse_ch"
        }
    ],
    "3818506": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_13881.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818506/",
            "reporter": "abuse_ch"
        }
    ],
    "3818507": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_71207.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818507/",
            "reporter": "abuse_ch"
        }
    ],
    "3818508": [
        {
            "dateadded": "2026-04-13 13:17:24 UTC",
            "url": "https://refundonex.com/cloud/form_53631.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818508/",
            "reporter": "abuse_ch"
        }
    ],
    "3818494": [
        {
            "dateadded": "2026-04-13 13:17:23 UTC",
            "url": "https://refundonex.com/cloud/form_20859.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818494/",
            "reporter": "abuse_ch"
        }
    ],
    "3818495": [
        {
            "dateadded": "2026-04-13 13:17:23 UTC",
            "url": "https://refundonex.com/cloud/form_12570.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818495/",
            "reporter": "abuse_ch"
        }
    ],
    "3818496": [
        {
            "dateadded": "2026-04-13 13:17:23 UTC",
            "url": "https://refundonex.com/cloud/form_65349.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818496/",
            "reporter": "abuse_ch"
        }
    ],
    "3818497": [
        {
            "dateadded": "2026-04-13 13:17:23 UTC",
            "url": "https://refundonex.com/cloud/form_53313.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818497/",
            "reporter": "abuse_ch"
        }
    ],
    "3818498": [
        {
            "dateadded": "2026-04-13 13:17:23 UTC",
            "url": "https://refundonex.com/cloud/form_46586.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818498/",
            "reporter": "abuse_ch"
        }
    ],
    "3818499": [
        {
            "dateadded": "2026-04-13 13:17:23 UTC",
            "url": "https://refundonex.com/cloud/form_50934.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818499/",
            "reporter": "abuse_ch"
        }
    ],
    "3818487": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_29854.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818487/",
            "reporter": "abuse_ch"
        }
    ],
    "3818488": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_21024.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818488/",
            "reporter": "abuse_ch"
        }
    ],
    "3818489": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_38832.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818489/",
            "reporter": "abuse_ch"
        }
    ],
    "3818490": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_35369.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818490/",
            "reporter": "abuse_ch"
        }
    ],
    "3818491": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_01673.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818491/",
            "reporter": "abuse_ch"
        }
    ],
    "3818492": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_23593.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818492/",
            "reporter": "abuse_ch"
        }
    ],
    "3818493": [
        {
            "dateadded": "2026-04-13 13:17:22 UTC",
            "url": "https://refundonex.com/cloud/form_72493.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818493/",
            "reporter": "abuse_ch"
        }
    ],
    "3818486": [
        {
            "dateadded": "2026-04-13 13:17:21 UTC",
            "url": "https://refundonex.com/cloud/form_39773.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818486/",
            "reporter": "abuse_ch"
        }
    ],
    "3818483": [
        {
            "dateadded": "2026-04-13 13:17:20 UTC",
            "url": "https://refundonex.com/cloud/form_43756.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818483/",
            "reporter": "abuse_ch"
        }
    ],
    "3818484": [
        {
            "dateadded": "2026-04-13 13:17:20 UTC",
            "url": "https://refundonex.com/cloud/form_13802.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818484/",
            "reporter": "abuse_ch"
        }
    ],
    "3818485": [
        {
            "dateadded": "2026-04-13 13:17:20 UTC",
            "url": "https://refundonex.com/cloud/form_76404.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818485/",
            "reporter": "abuse_ch"
        }
    ],
    "3818477": [
        {
            "dateadded": "2026-04-13 13:17:18 UTC",
            "url": "https://refundonex.com/cloud/form_24764.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818477/",
            "reporter": "abuse_ch"
        }
    ],
    "3818478": [
        {
            "dateadded": "2026-04-13 13:17:18 UTC",
            "url": "https://refundonex.com/cloud/form_06072.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818478/",
            "reporter": "abuse_ch"
        }
    ],
    "3818479": [
        {
            "dateadded": "2026-04-13 13:17:18 UTC",
            "url": "https://refundonex.com/cloud/form_02259.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818479/",
            "reporter": "abuse_ch"
        }
    ],
    "3818480": [
        {
            "dateadded": "2026-04-13 13:17:18 UTC",
            "url": "https://refundonex.com/cloud/form_27140.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818480/",
            "reporter": "abuse_ch"
        }
    ],
    "3818481": [
        {
            "dateadded": "2026-04-13 13:17:18 UTC",
            "url": "https://refundonex.com/cloud/form_17113.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818481/",
            "reporter": "abuse_ch"
        }
    ],
    "3818482": [
        {
            "dateadded": "2026-04-13 13:17:18 UTC",
            "url": "https://refundonex.com/cloud/form_36223.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818482/",
            "reporter": "abuse_ch"
        }
    ],
    "3818476": [
        {
            "dateadded": "2026-04-13 13:17:16 UTC",
            "url": "https://refundonex.com/cloud/form_70273.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818476/",
            "reporter": "abuse_ch"
        }
    ],
    "3818470": [
        {
            "dateadded": "2026-04-13 13:17:15 UTC",
            "url": "https://refundonex.com/cloud/form_06290.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818470/",
            "reporter": "abuse_ch"
        }
    ],
    "3818471": [
        {
            "dateadded": "2026-04-13 13:17:15 UTC",
            "url": "https://refundonex.com/cloud/form_70706.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818471/",
            "reporter": "abuse_ch"
        }
    ],
    "3818472": [
        {
            "dateadded": "2026-04-13 13:17:15 UTC",
            "url": "https://refundonex.com/cloud/form_22166.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818472/",
            "reporter": "abuse_ch"
        }
    ],
    "3818473": [
        {
            "dateadded": "2026-04-13 13:17:15 UTC",
            "url": "https://refundonex.com/cloud/form_21763.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818473/",
            "reporter": "abuse_ch"
        }
    ],
    "3818474": [
        {
            "dateadded": "2026-04-13 13:17:15 UTC",
            "url": "https://refundonex.com/cloud/form_12317.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818474/",
            "reporter": "abuse_ch"
        }
    ],
    "3818475": [
        {
            "dateadded": "2026-04-13 13:17:15 UTC",
            "url": "https://refundonex.com/cloud/form_75982.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818475/",
            "reporter": "abuse_ch"
        }
    ],
    "3818466": [
        {
            "dateadded": "2026-04-13 13:17:14 UTC",
            "url": "https://refundonex.com/cloud/form_72579.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818466/",
            "reporter": "abuse_ch"
        }
    ],
    "3818467": [
        {
            "dateadded": "2026-04-13 13:17:14 UTC",
            "url": "https://refundonex.com/cloud/form_72800.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818467/",
            "reporter": "abuse_ch"
        }
    ],
    "3818468": [
        {
            "dateadded": "2026-04-13 13:17:14 UTC",
            "url": "https://refundonex.com/cloud/form_72333.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818468/",
            "reporter": "abuse_ch"
        }
    ],
    "3818469": [
        {
            "dateadded": "2026-04-13 13:17:14 UTC",
            "url": "https://refundonex.com/cloud/form_45694.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818469/",
            "reporter": "abuse_ch"
        }
    ],
    "3818460": [
        {
            "dateadded": "2026-04-13 13:17:13 UTC",
            "url": "https://refundonex.com/cloud/form_60163.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818460/",
            "reporter": "abuse_ch"
        }
    ],
    "3818461": [
        {
            "dateadded": "2026-04-13 13:17:13 UTC",
            "url": "https://refundonex.com/cloud/form_56298.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818461/",
            "reporter": "abuse_ch"
        }
    ],
    "3818462": [
        {
            "dateadded": "2026-04-13 13:17:13 UTC",
            "url": "https://refundonex.com/cloud/form_42022.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818462/",
            "reporter": "abuse_ch"
        }
    ],
    "3818463": [
        {
            "dateadded": "2026-04-13 13:17:13 UTC",
            "url": "https://refundonex.com/cloud/form_34096.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818463/",
            "reporter": "abuse_ch"
        }
    ],
    "3818464": [
        {
            "dateadded": "2026-04-13 13:17:13 UTC",
            "url": "https://refundonex.com/cloud/form_37826.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818464/",
            "reporter": "abuse_ch"
        }
    ],
    "3818465": [
        {
            "dateadded": "2026-04-13 13:17:13 UTC",
            "url": "https://refundonex.com/cloud/form_34293.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818465/",
            "reporter": "abuse_ch"
        }
    ],
    "3818453": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_26917.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818453/",
            "reporter": "abuse_ch"
        }
    ],
    "3818454": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_08622.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818454/",
            "reporter": "abuse_ch"
        }
    ],
    "3818455": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_55337.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818455/",
            "reporter": "abuse_ch"
        }
    ],
    "3818456": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_07793.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818456/",
            "reporter": "abuse_ch"
        }
    ],
    "3818457": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_38670.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818457/",
            "reporter": "abuse_ch"
        }
    ],
    "3818458": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_77303.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818458/",
            "reporter": "abuse_ch"
        }
    ],
    "3818459": [
        {
            "dateadded": "2026-04-13 13:17:12 UTC",
            "url": "https://refundonex.com/cloud/form_05816.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818459/",
            "reporter": "abuse_ch"
        }
    ],
    "3818450": [
        {
            "dateadded": "2026-04-13 13:17:11 UTC",
            "url": "https://refundonex.com/cloud/form_20799.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818450/",
            "reporter": "abuse_ch"
        }
    ],
    "3818451": [
        {
            "dateadded": "2026-04-13 13:17:11 UTC",
            "url": "https://refundonex.com/cloud/form_69035.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818451/",
            "reporter": "abuse_ch"
        }
    ],
    "3818452": [
        {
            "dateadded": "2026-04-13 13:17:11 UTC",
            "url": "https://refundonex.com/cloud/form_27995.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818452/",
            "reporter": "abuse_ch"
        }
    ],
    "3818441": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_54805.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818441/",
            "reporter": "abuse_ch"
        }
    ],
    "3818442": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_50616.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818442/",
            "reporter": "abuse_ch"
        }
    ],
    "3818443": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_21152.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818443/",
            "reporter": "abuse_ch"
        }
    ],
    "3818444": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_66262.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818444/",
            "reporter": "abuse_ch"
        }
    ],
    "3818445": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_64948.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818445/",
            "reporter": "abuse_ch"
        }
    ],
    "3818446": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_15833.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818446/",
            "reporter": "abuse_ch"
        }
    ],
    "3818447": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_55691.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818447/",
            "reporter": "abuse_ch"
        }
    ],
    "3818448": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_06239.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818448/",
            "reporter": "abuse_ch"
        }
    ],
    "3818449": [
        {
            "dateadded": "2026-04-13 13:17:10 UTC",
            "url": "https://refundonex.com/cloud/form_74229.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818449/",
            "reporter": "abuse_ch"
        }
    ],
    "3818439": [
        {
            "dateadded": "2026-04-13 13:17:08 UTC",
            "url": "https://refundonex.com/cloud/form_60555.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818439/",
            "reporter": "abuse_ch"
        }
    ],
    "3818440": [
        {
            "dateadded": "2026-04-13 13:17:08 UTC",
            "url": "https://refundonex.com/cloud/form_77272.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818440/",
            "reporter": "abuse_ch"
        }
    ],
    "3818437": [
        {
            "dateadded": "2026-04-13 13:17:06 UTC",
            "url": "https://refundonex.com/cloud/form_74348.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818437/",
            "reporter": "abuse_ch"
        }
    ],
    "3818438": [
        {
            "dateadded": "2026-04-13 13:17:06 UTC",
            "url": "https://refundonex.com/cloud/form_23840.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818438/",
            "reporter": "abuse_ch"
        }
    ],
    "3818434": [
        {
            "dateadded": "2026-04-13 13:17:05 UTC",
            "url": "https://refundonex.com/cloud/form_53098.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818434/",
            "reporter": "abuse_ch"
        }
    ],
    "3818435": [
        {
            "dateadded": "2026-04-13 13:17:05 UTC",
            "url": "https://refundonex.com/cloud/form_09625.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818435/",
            "reporter": "abuse_ch"
        }
    ],
    "3818436": [
        {
            "dateadded": "2026-04-13 13:17:05 UTC",
            "url": "https://refundonex.com/cloud/form_33018.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818436/",
            "reporter": "abuse_ch"
        }
    ],
    "3818433": [
        {
            "dateadded": "2026-04-13 13:17:04 UTC",
            "url": "https://refundonex.com/cloud/form_63640.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818433/",
            "reporter": "abuse_ch"
        }
    ],
    "3818427": [
        {
            "dateadded": "2026-04-13 13:17:03 UTC",
            "url": "https://refundonex.com/cloud/form_72715.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818427/",
            "reporter": "abuse_ch"
        }
    ],
    "3818428": [
        {
            "dateadded": "2026-04-13 13:17:03 UTC",
            "url": "https://refundonex.com/cloud/form_52860.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818428/",
            "reporter": "abuse_ch"
        }
    ],
    "3818429": [
        {
            "dateadded": "2026-04-13 13:17:03 UTC",
            "url": "https://refundonex.com/cloud/form_70818.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818429/",
            "reporter": "abuse_ch"
        }
    ],
    "3818430": [
        {
            "dateadded": "2026-04-13 13:17:03 UTC",
            "url": "https://refundonex.com/cloud/form_78812.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818430/",
            "reporter": "abuse_ch"
        }
    ],
    "3818431": [
        {
            "dateadded": "2026-04-13 13:17:03 UTC",
            "url": "https://refundonex.com/cloud/form_34784.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818431/",
            "reporter": "abuse_ch"
        }
    ],
    "3818432": [
        {
            "dateadded": "2026-04-13 13:17:03 UTC",
            "url": "https://refundonex.com/cloud/form_58115.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818432/",
            "reporter": "abuse_ch"
        }
    ],
    "3818424": [
        {
            "dateadded": "2026-04-13 13:17:02 UTC",
            "url": "https://refundonex.com/cloud/form_01796.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818424/",
            "reporter": "abuse_ch"
        }
    ],
    "3818425": [
        {
            "dateadded": "2026-04-13 13:17:02 UTC",
            "url": "https://refundonex.com/cloud/form_68947.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818425/",
            "reporter": "abuse_ch"
        }
    ],
    "3818426": [
        {
            "dateadded": "2026-04-13 13:17:02 UTC",
            "url": "https://refundonex.com/cloud/form_48040.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818426/",
            "reporter": "abuse_ch"
        }
    ],
    "3818422": [
        {
            "dateadded": "2026-04-13 13:17:01 UTC",
            "url": "https://refundonex.com/cloud/form_30736.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818422/",
            "reporter": "abuse_ch"
        }
    ],
    "3818423": [
        {
            "dateadded": "2026-04-13 13:17:01 UTC",
            "url": "https://refundonex.com/cloud/form_60763.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818423/",
            "reporter": "abuse_ch"
        }
    ],
    "3818409": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_06020.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818409/",
            "reporter": "abuse_ch"
        }
    ],
    "3818410": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_47973.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818410/",
            "reporter": "abuse_ch"
        }
    ],
    "3818411": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_45012.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818411/",
            "reporter": "abuse_ch"
        }
    ],
    "3818412": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_56400.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818412/",
            "reporter": "abuse_ch"
        }
    ],
    "3818413": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_47111.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818413/",
            "reporter": "abuse_ch"
        }
    ],
    "3818414": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_22872.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818414/",
            "reporter": "abuse_ch"
        }
    ],
    "3818415": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_28210.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818415/",
            "reporter": "abuse_ch"
        }
    ],
    "3818416": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_17665.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818416/",
            "reporter": "abuse_ch"
        }
    ],
    "3818417": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_31160.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818417/",
            "reporter": "abuse_ch"
        }
    ],
    "3818418": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_45753.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818418/",
            "reporter": "abuse_ch"
        }
    ],
    "3818419": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_23430.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818419/",
            "reporter": "abuse_ch"
        }
    ],
    "3818420": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_62809.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818420/",
            "reporter": "abuse_ch"
        }
    ],
    "3818421": [
        {
            "dateadded": "2026-04-13 13:17:00 UTC",
            "url": "https://refundonex.com/cloud/form_23911.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818421/",
            "reporter": "abuse_ch"
        }
    ],
    "3818408": [
        {
            "dateadded": "2026-04-13 13:16:59 UTC",
            "url": "https://refundonex.com/cloud/form_42486.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818408/",
            "reporter": "abuse_ch"
        }
    ],
    "3818397": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_37383.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818397/",
            "reporter": "abuse_ch"
        }
    ],
    "3818398": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_36597.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818398/",
            "reporter": "abuse_ch"
        }
    ],
    "3818399": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_57990.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818399/",
            "reporter": "abuse_ch"
        }
    ],
    "3818400": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_60727.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818400/",
            "reporter": "abuse_ch"
        }
    ],
    "3818401": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_46084.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818401/",
            "reporter": "abuse_ch"
        }
    ],
    "3818402": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_39469.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818402/",
            "reporter": "abuse_ch"
        }
    ],
    "3818403": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_36406.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818403/",
            "reporter": "abuse_ch"
        }
    ],
    "3818404": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_00231.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818404/",
            "reporter": "abuse_ch"
        }
    ],
    "3818405": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_25490.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818405/",
            "reporter": "abuse_ch"
        }
    ],
    "3818406": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_68656.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818406/",
            "reporter": "abuse_ch"
        }
    ],
    "3818407": [
        {
            "dateadded": "2026-04-13 13:16:58 UTC",
            "url": "https://refundonex.com/cloud/form_41620.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818407/",
            "reporter": "abuse_ch"
        }
    ],
    "3818396": [
        {
            "dateadded": "2026-04-13 13:16:57 UTC",
            "url": "https://refundonex.com/cloud/form_20299.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818396/",
            "reporter": "abuse_ch"
        }
    ],
    "3818395": [
        {
            "dateadded": "2026-04-13 13:16:56 UTC",
            "url": "https://refundonex.com/cloud/form_69254.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818395/",
            "reporter": "abuse_ch"
        }
    ],
    "3818394": [
        {
            "dateadded": "2026-04-13 13:16:55 UTC",
            "url": "https://refundonex.com/cloud/form_24820.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818394/",
            "reporter": "abuse_ch"
        }
    ],
    "3818390": [
        {
            "dateadded": "2026-04-13 13:16:53 UTC",
            "url": "https://refundonex.com/cloud/form_16459.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818390/",
            "reporter": "abuse_ch"
        }
    ],
    "3818391": [
        {
            "dateadded": "2026-04-13 13:16:53 UTC",
            "url": "https://refundonex.com/cloud/form_13302.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818391/",
            "reporter": "abuse_ch"
        }
    ],
    "3818392": [
        {
            "dateadded": "2026-04-13 13:16:53 UTC",
            "url": "https://refundonex.com/cloud/form_79849.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818392/",
            "reporter": "abuse_ch"
        }
    ],
    "3818393": [
        {
            "dateadded": "2026-04-13 13:16:53 UTC",
            "url": "https://refundonex.com/cloud/form_04008.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818393/",
            "reporter": "abuse_ch"
        }
    ],
    "3818385": [
        {
            "dateadded": "2026-04-13 13:16:52 UTC",
            "url": "https://refundonex.com/cloud/form_21415.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818385/",
            "reporter": "abuse_ch"
        }
    ],
    "3818386": [
        {
            "dateadded": "2026-04-13 13:16:52 UTC",
            "url": "https://refundonex.com/cloud/form_61120.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818386/",
            "reporter": "abuse_ch"
        }
    ],
    "3818387": [
        {
            "dateadded": "2026-04-13 13:16:52 UTC",
            "url": "https://refundonex.com/cloud/form_51173.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818387/",
            "reporter": "abuse_ch"
        }
    ],
    "3818388": [
        {
            "dateadded": "2026-04-13 13:16:52 UTC",
            "url": "https://refundonex.com/cloud/form_36175.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818388/",
            "reporter": "abuse_ch"
        }
    ],
    "3818389": [
        {
            "dateadded": "2026-04-13 13:16:52 UTC",
            "url": "https://refundonex.com/cloud/form_04263.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818389/",
            "reporter": "abuse_ch"
        }
    ],
    "3818371": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_46190.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818371/",
            "reporter": "abuse_ch"
        }
    ],
    "3818372": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_24655.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818372/",
            "reporter": "abuse_ch"
        }
    ],
    "3818373": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_76760.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818373/",
            "reporter": "abuse_ch"
        }
    ],
    "3818374": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_00620.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818374/",
            "reporter": "abuse_ch"
        }
    ],
    "3818375": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_79811.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818375/",
            "reporter": "abuse_ch"
        }
    ],
    "3818376": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_03569.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818376/",
            "reporter": "abuse_ch"
        }
    ],
    "3818377": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_57350.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818377/",
            "reporter": "abuse_ch"
        }
    ],
    "3818378": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_52435.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818378/",
            "reporter": "abuse_ch"
        }
    ],
    "3818379": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_02192.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818379/",
            "reporter": "abuse_ch"
        }
    ],
    "3818380": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_45429.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818380/",
            "reporter": "abuse_ch"
        }
    ],
    "3818381": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_10624.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818381/",
            "reporter": "abuse_ch"
        }
    ],
    "3818382": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_31816.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818382/",
            "reporter": "abuse_ch"
        }
    ],
    "3818383": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_06705.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818383/",
            "reporter": "abuse_ch"
        }
    ],
    "3818384": [
        {
            "dateadded": "2026-04-13 13:16:51 UTC",
            "url": "https://refundonex.com/cloud/form_41093.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818384/",
            "reporter": "abuse_ch"
        }
    ],
    "3818369": [
        {
            "dateadded": "2026-04-13 13:16:47 UTC",
            "url": "https://refundonex.com/cloud/form_34561.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818369/",
            "reporter": "abuse_ch"
        }
    ],
    "3818370": [
        {
            "dateadded": "2026-04-13 13:16:47 UTC",
            "url": "https://refundonex.com/cloud/form_64432.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818370/",
            "reporter": "abuse_ch"
        }
    ],
    "3818363": [
        {
            "dateadded": "2026-04-13 13:16:46 UTC",
            "url": "https://refundonex.com/cloud/form_17662.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818363/",
            "reporter": "abuse_ch"
        }
    ],
    "3818364": [
        {
            "dateadded": "2026-04-13 13:16:46 UTC",
            "url": "https://refundonex.com/cloud/form_54935.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818364/",
            "reporter": "abuse_ch"
        }
    ],
    "3818365": [
        {
            "dateadded": "2026-04-13 13:16:46 UTC",
            "url": "https://refundonex.com/cloud/form_34305.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818365/",
            "reporter": "abuse_ch"
        }
    ],
    "3818366": [
        {
            "dateadded": "2026-04-13 13:16:46 UTC",
            "url": "https://refundonex.com/cloud/form_64220.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818366/",
            "reporter": "abuse_ch"
        }
    ],
    "3818367": [
        {
            "dateadded": "2026-04-13 13:16:46 UTC",
            "url": "https://refundonex.com/cloud/form_15388.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818367/",
            "reporter": "abuse_ch"
        }
    ],
    "3818368": [
        {
            "dateadded": "2026-04-13 13:16:46 UTC",
            "url": "https://refundonex.com/cloud/form_02162.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818368/",
            "reporter": "abuse_ch"
        }
    ],
    "3818357": [
        {
            "dateadded": "2026-04-13 13:16:44 UTC",
            "url": "https://refundonex.com/cloud/form_38427.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818357/",
            "reporter": "abuse_ch"
        }
    ],
    "3818358": [
        {
            "dateadded": "2026-04-13 13:16:44 UTC",
            "url": "https://refundonex.com/cloud/form_75892.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818358/",
            "reporter": "abuse_ch"
        }
    ],
    "3818359": [
        {
            "dateadded": "2026-04-13 13:16:44 UTC",
            "url": "https://refundonex.com/cloud/form_79681.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818359/",
            "reporter": "abuse_ch"
        }
    ],
    "3818360": [
        {
            "dateadded": "2026-04-13 13:16:44 UTC",
            "url": "https://refundonex.com/cloud/form_72346.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818360/",
            "reporter": "abuse_ch"
        }
    ],
    "3818361": [
        {
            "dateadded": "2026-04-13 13:16:44 UTC",
            "url": "https://refundonex.com/cloud/form_10931.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818361/",
            "reporter": "abuse_ch"
        }
    ],
    "3818362": [
        {
            "dateadded": "2026-04-13 13:16:44 UTC",
            "url": "https://refundonex.com/cloud/form_21463.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818362/",
            "reporter": "abuse_ch"
        }
    ],
    "3818348": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_35478.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818348/",
            "reporter": "abuse_ch"
        }
    ],
    "3818349": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_08667.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818349/",
            "reporter": "abuse_ch"
        }
    ],
    "3818350": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_11594.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818350/",
            "reporter": "abuse_ch"
        }
    ],
    "3818351": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_53196.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818351/",
            "reporter": "abuse_ch"
        }
    ],
    "3818352": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_66425.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818352/",
            "reporter": "abuse_ch"
        }
    ],
    "3818353": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_03478.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818353/",
            "reporter": "abuse_ch"
        }
    ],
    "3818354": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_48499.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818354/",
            "reporter": "abuse_ch"
        }
    ],
    "3818355": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_54606.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818355/",
            "reporter": "abuse_ch"
        }
    ],
    "3818356": [
        {
            "dateadded": "2026-04-13 13:16:43 UTC",
            "url": "https://refundonex.com/cloud/form_16464.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818356/",
            "reporter": "abuse_ch"
        }
    ],
    "3818346": [
        {
            "dateadded": "2026-04-13 13:16:42 UTC",
            "url": "https://refundonex.com/cloud/form_27245.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818346/",
            "reporter": "abuse_ch"
        }
    ],
    "3818347": [
        {
            "dateadded": "2026-04-13 13:16:42 UTC",
            "url": "https://refundonex.com/cloud/form_65225.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818347/",
            "reporter": "abuse_ch"
        }
    ],
    "3818342": [
        {
            "dateadded": "2026-04-13 13:16:41 UTC",
            "url": "https://refundonex.com/cloud/form_24978.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818342/",
            "reporter": "abuse_ch"
        }
    ],
    "3818343": [
        {
            "dateadded": "2026-04-13 13:16:41 UTC",
            "url": "https://refundonex.com/cloud/form_69962.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818343/",
            "reporter": "abuse_ch"
        }
    ],
    "3818344": [
        {
            "dateadded": "2026-04-13 13:16:41 UTC",
            "url": "https://refundonex.com/cloud/form_15837.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818344/",
            "reporter": "abuse_ch"
        }
    ],
    "3818345": [
        {
            "dateadded": "2026-04-13 13:16:41 UTC",
            "url": "https://refundonex.com/cloud/form_49889.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818345/",
            "reporter": "abuse_ch"
        }
    ],
    "3818340": [
        {
            "dateadded": "2026-04-13 13:16:39 UTC",
            "url": "https://refundonex.com/cloud/form_36782.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818340/",
            "reporter": "abuse_ch"
        }
    ],
    "3818341": [
        {
            "dateadded": "2026-04-13 13:16:39 UTC",
            "url": "https://refundonex.com/cloud/form_36677.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818341/",
            "reporter": "abuse_ch"
        }
    ],
    "3818336": [
        {
            "dateadded": "2026-04-13 13:16:38 UTC",
            "url": "https://refundonex.com/cloud/form_22807.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818336/",
            "reporter": "abuse_ch"
        }
    ],
    "3818337": [
        {
            "dateadded": "2026-04-13 13:16:38 UTC",
            "url": "https://refundonex.com/cloud/form_05947.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818337/",
            "reporter": "abuse_ch"
        }
    ],
    "3818338": [
        {
            "dateadded": "2026-04-13 13:16:38 UTC",
            "url": "https://refundonex.com/cloud/form_57557.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818338/",
            "reporter": "abuse_ch"
        }
    ],
    "3818339": [
        {
            "dateadded": "2026-04-13 13:16:38 UTC",
            "url": "https://refundonex.com/cloud/form_16272.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818339/",
            "reporter": "abuse_ch"
        }
    ],
    "3818328": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_05801.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818328/",
            "reporter": "abuse_ch"
        }
    ],
    "3818329": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_51171.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818329/",
            "reporter": "abuse_ch"
        }
    ],
    "3818330": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_64266.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818330/",
            "reporter": "abuse_ch"
        }
    ],
    "3818331": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_79483.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818331/",
            "reporter": "abuse_ch"
        }
    ],
    "3818332": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_46031.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818332/",
            "reporter": "abuse_ch"
        }
    ],
    "3818333": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_02324.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818333/",
            "reporter": "abuse_ch"
        }
    ],
    "3818334": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_59828.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818334/",
            "reporter": "abuse_ch"
        }
    ],
    "3818335": [
        {
            "dateadded": "2026-04-13 13:16:37 UTC",
            "url": "https://refundonex.com/cloud/form_34235.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818335/",
            "reporter": "abuse_ch"
        }
    ],
    "3818327": [
        {
            "dateadded": "2026-04-13 13:16:36 UTC",
            "url": "https://refundonex.com/cloud/form_38954.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818327/",
            "reporter": "abuse_ch"
        }
    ],
    "3818322": [
        {
            "dateadded": "2026-04-13 13:16:35 UTC",
            "url": "https://refundonex.com/cloud/form_01788.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818322/",
            "reporter": "abuse_ch"
        }
    ],
    "3818323": [
        {
            "dateadded": "2026-04-13 13:16:35 UTC",
            "url": "https://refundonex.com/cloud/form_00142.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818323/",
            "reporter": "abuse_ch"
        }
    ],
    "3818324": [
        {
            "dateadded": "2026-04-13 13:16:35 UTC",
            "url": "https://refundonex.com/cloud/form_56161.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818324/",
            "reporter": "abuse_ch"
        }
    ],
    "3818325": [
        {
            "dateadded": "2026-04-13 13:16:35 UTC",
            "url": "https://refundonex.com/cloud/form_42322.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818325/",
            "reporter": "abuse_ch"
        }
    ],
    "3818326": [
        {
            "dateadded": "2026-04-13 13:16:35 UTC",
            "url": "https://refundonex.com/cloud/form_31218.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818326/",
            "reporter": "abuse_ch"
        }
    ],
    "3818318": [
        {
            "dateadded": "2026-04-13 13:16:34 UTC",
            "url": "https://refundonex.com/cloud/form_78106.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818318/",
            "reporter": "abuse_ch"
        }
    ],
    "3818319": [
        {
            "dateadded": "2026-04-13 13:16:34 UTC",
            "url": "https://refundonex.com/cloud/form_48154.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818319/",
            "reporter": "abuse_ch"
        }
    ],
    "3818320": [
        {
            "dateadded": "2026-04-13 13:16:34 UTC",
            "url": "https://refundonex.com/cloud/form_54535.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818320/",
            "reporter": "abuse_ch"
        }
    ],
    "3818321": [
        {
            "dateadded": "2026-04-13 13:16:34 UTC",
            "url": "https://refundonex.com/cloud/form_71405.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818321/",
            "reporter": "abuse_ch"
        }
    ],
    "3818315": [
        {
            "dateadded": "2026-04-13 13:16:33 UTC",
            "url": "https://refundonex.com/cloud/form_33769.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818315/",
            "reporter": "abuse_ch"
        }
    ],
    "3818316": [
        {
            "dateadded": "2026-04-13 13:16:33 UTC",
            "url": "https://refundonex.com/cloud/form_35795.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818316/",
            "reporter": "abuse_ch"
        }
    ],
    "3818317": [
        {
            "dateadded": "2026-04-13 13:16:33 UTC",
            "url": "https://refundonex.com/cloud/form_35403.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818317/",
            "reporter": "abuse_ch"
        }
    ],
    "3818308": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_60726.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818308/",
            "reporter": "abuse_ch"
        }
    ],
    "3818309": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_69149.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818309/",
            "reporter": "abuse_ch"
        }
    ],
    "3818310": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_76148.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818310/",
            "reporter": "abuse_ch"
        }
    ],
    "3818311": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_67655.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818311/",
            "reporter": "abuse_ch"
        }
    ],
    "3818312": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_41495.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818312/",
            "reporter": "abuse_ch"
        }
    ],
    "3818313": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_09953.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818313/",
            "reporter": "abuse_ch"
        }
    ],
    "3818314": [
        {
            "dateadded": "2026-04-13 13:16:32 UTC",
            "url": "https://refundonex.com/cloud/form_19266.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818314/",
            "reporter": "abuse_ch"
        }
    ],
    "3818299": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_44238.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818299/",
            "reporter": "abuse_ch"
        }
    ],
    "3818300": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_63675.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818300/",
            "reporter": "abuse_ch"
        }
    ],
    "3818301": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_23255.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818301/",
            "reporter": "abuse_ch"
        }
    ],
    "3818302": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_33967.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818302/",
            "reporter": "abuse_ch"
        }
    ],
    "3818303": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_25188.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818303/",
            "reporter": "abuse_ch"
        }
    ],
    "3818304": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_38075.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818304/",
            "reporter": "abuse_ch"
        }
    ],
    "3818305": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_46415.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818305/",
            "reporter": "abuse_ch"
        }
    ],
    "3818306": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_10319.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818306/",
            "reporter": "abuse_ch"
        }
    ],
    "3818307": [
        {
            "dateadded": "2026-04-13 13:16:31 UTC",
            "url": "https://refundonex.com/cloud/form_15791.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818307/",
            "reporter": "abuse_ch"
        }
    ],
    "3818297": [
        {
            "dateadded": "2026-04-13 13:16:30 UTC",
            "url": "https://refundonex.com/cloud/form_12660.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818297/",
            "reporter": "abuse_ch"
        }
    ],
    "3818298": [
        {
            "dateadded": "2026-04-13 13:16:30 UTC",
            "url": "https://refundonex.com/cloud/form_37816.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818298/",
            "reporter": "abuse_ch"
        }
    ],
    "3818295": [
        {
            "dateadded": "2026-04-13 13:16:29 UTC",
            "url": "https://refundonex.com/cloud/form_33845.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818295/",
            "reporter": "abuse_ch"
        }
    ],
    "3818296": [
        {
            "dateadded": "2026-04-13 13:16:29 UTC",
            "url": "https://refundonex.com/cloud/form_17312.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818296/",
            "reporter": "abuse_ch"
        }
    ],
    "3818290": [
        {
            "dateadded": "2026-04-13 13:16:28 UTC",
            "url": "https://refundonex.com/cloud/form_57352.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818290/",
            "reporter": "abuse_ch"
        }
    ],
    "3818291": [
        {
            "dateadded": "2026-04-13 13:16:28 UTC",
            "url": "https://refundonex.com/cloud/form_07367.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818291/",
            "reporter": "abuse_ch"
        }
    ],
    "3818292": [
        {
            "dateadded": "2026-04-13 13:16:28 UTC",
            "url": "https://refundonex.com/cloud/form_02024.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818292/",
            "reporter": "abuse_ch"
        }
    ],
    "3818293": [
        {
            "dateadded": "2026-04-13 13:16:28 UTC",
            "url": "https://refundonex.com/cloud/form_65304.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818293/",
            "reporter": "abuse_ch"
        }
    ],
    "3818294": [
        {
            "dateadded": "2026-04-13 13:16:28 UTC",
            "url": "https://refundonex.com/cloud/form_20295.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818294/",
            "reporter": "abuse_ch"
        }
    ],
    "3818285": [
        {
            "dateadded": "2026-04-13 13:16:27 UTC",
            "url": "https://refundonex.com/cloud/form_61212.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818285/",
            "reporter": "abuse_ch"
        }
    ],
    "3818286": [
        {
            "dateadded": "2026-04-13 13:16:27 UTC",
            "url": "https://refundonex.com/cloud/form_79597.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818286/",
            "reporter": "abuse_ch"
        }
    ],
    "3818287": [
        {
            "dateadded": "2026-04-13 13:16:27 UTC",
            "url": "https://refundonex.com/cloud/form_53051.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818287/",
            "reporter": "abuse_ch"
        }
    ],
    "3818288": [
        {
            "dateadded": "2026-04-13 13:16:27 UTC",
            "url": "https://refundonex.com/cloud/form_54467.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818288/",
            "reporter": "abuse_ch"
        }
    ],
    "3818289": [
        {
            "dateadded": "2026-04-13 13:16:27 UTC",
            "url": "https://refundonex.com/cloud/form_41312.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818289/",
            "reporter": "abuse_ch"
        }
    ],
    "3818283": [
        {
            "dateadded": "2026-04-13 13:16:25 UTC",
            "url": "https://refundonex.com/cloud/form_17562.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818283/",
            "reporter": "abuse_ch"
        }
    ],
    "3818284": [
        {
            "dateadded": "2026-04-13 13:16:25 UTC",
            "url": "https://refundonex.com/cloud/form_70618.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818284/",
            "reporter": "abuse_ch"
        }
    ],
    "3818279": [
        {
            "dateadded": "2026-04-13 13:16:24 UTC",
            "url": "https://refundonex.com/cloud/form_64761.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818279/",
            "reporter": "abuse_ch"
        }
    ],
    "3818280": [
        {
            "dateadded": "2026-04-13 13:16:24 UTC",
            "url": "https://refundonex.com/cloud/form_57655.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818280/",
            "reporter": "abuse_ch"
        }
    ],
    "3818281": [
        {
            "dateadded": "2026-04-13 13:16:24 UTC",
            "url": "https://refundonex.com/cloud/form_46475.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818281/",
            "reporter": "abuse_ch"
        }
    ],
    "3818282": [
        {
            "dateadded": "2026-04-13 13:16:24 UTC",
            "url": "https://refundonex.com/cloud/form_47537.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818282/",
            "reporter": "abuse_ch"
        }
    ],
    "3818275": [
        {
            "dateadded": "2026-04-13 13:16:23 UTC",
            "url": "https://refundonex.com/cloud/form_45276.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818275/",
            "reporter": "abuse_ch"
        }
    ],
    "3818276": [
        {
            "dateadded": "2026-04-13 13:16:23 UTC",
            "url": "https://refundonex.com/cloud/form_39600.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818276/",
            "reporter": "abuse_ch"
        }
    ],
    "3818277": [
        {
            "dateadded": "2026-04-13 13:16:23 UTC",
            "url": "https://refundonex.com/cloud/form_49780.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818277/",
            "reporter": "abuse_ch"
        }
    ],
    "3818278": [
        {
            "dateadded": "2026-04-13 13:16:23 UTC",
            "url": "https://refundonex.com/cloud/form_20296.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818278/",
            "reporter": "abuse_ch"
        }
    ],
    "3818271": [
        {
            "dateadded": "2026-04-13 13:16:22 UTC",
            "url": "https://refundonex.com/cloud/form_42426.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818271/",
            "reporter": "abuse_ch"
        }
    ],
    "3818272": [
        {
            "dateadded": "2026-04-13 13:16:22 UTC",
            "url": "https://refundonex.com/cloud/form_45698.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818272/",
            "reporter": "abuse_ch"
        }
    ],
    "3818273": [
        {
            "dateadded": "2026-04-13 13:16:22 UTC",
            "url": "https://refundonex.com/cloud/form_39368.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818273/",
            "reporter": "abuse_ch"
        }
    ],
    "3818274": [
        {
            "dateadded": "2026-04-13 13:16:22 UTC",
            "url": "https://refundonex.com/cloud/form_37612.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818274/",
            "reporter": "abuse_ch"
        }
    ],
    "3818269": [
        {
            "dateadded": "2026-04-13 13:16:21 UTC",
            "url": "https://refundonex.com/cloud/form_55147.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818269/",
            "reporter": "abuse_ch"
        }
    ],
    "3818270": [
        {
            "dateadded": "2026-04-13 13:16:21 UTC",
            "url": "https://refundonex.com/cloud/form_71512.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818270/",
            "reporter": "abuse_ch"
        }
    ],
    "3818265": [
        {
            "dateadded": "2026-04-13 13:16:20 UTC",
            "url": "https://refundonex.com/cloud/form_49178.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818265/",
            "reporter": "abuse_ch"
        }
    ],
    "3818266": [
        {
            "dateadded": "2026-04-13 13:16:20 UTC",
            "url": "https://refundonex.com/cloud/form_50144.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818266/",
            "reporter": "abuse_ch"
        }
    ],
    "3818267": [
        {
            "dateadded": "2026-04-13 13:16:20 UTC",
            "url": "https://refundonex.com/cloud/form_30908.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818267/",
            "reporter": "abuse_ch"
        }
    ],
    "3818268": [
        {
            "dateadded": "2026-04-13 13:16:20 UTC",
            "url": "https://refundonex.com/cloud/form_44107.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818268/",
            "reporter": "abuse_ch"
        }
    ],
    "3818259": [
        {
            "dateadded": "2026-04-13 13:16:19 UTC",
            "url": "https://refundonex.com/cloud/form_73129.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818259/",
            "reporter": "abuse_ch"
        }
    ],
    "3818260": [
        {
            "dateadded": "2026-04-13 13:16:19 UTC",
            "url": "https://refundonex.com/cloud/form_54542.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818260/",
            "reporter": "abuse_ch"
        }
    ],
    "3818261": [
        {
            "dateadded": "2026-04-13 13:16:19 UTC",
            "url": "https://refundonex.com/cloud/form_74028.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818261/",
            "reporter": "abuse_ch"
        }
    ],
    "3818262": [
        {
            "dateadded": "2026-04-13 13:16:19 UTC",
            "url": "https://refundonex.com/cloud/form_33337.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818262/",
            "reporter": "abuse_ch"
        }
    ],
    "3818263": [
        {
            "dateadded": "2026-04-13 13:16:19 UTC",
            "url": "https://refundonex.com/cloud/form_29513.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818263/",
            "reporter": "abuse_ch"
        }
    ],
    "3818264": [
        {
            "dateadded": "2026-04-13 13:16:19 UTC",
            "url": "https://refundonex.com/cloud/form_20035.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818264/",
            "reporter": "abuse_ch"
        }
    ],
    "3818257": [
        {
            "dateadded": "2026-04-13 13:16:18 UTC",
            "url": "https://refundonex.com/cloud/form_18869.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818257/",
            "reporter": "abuse_ch"
        }
    ],
    "3818258": [
        {
            "dateadded": "2026-04-13 13:16:18 UTC",
            "url": "https://refundonex.com/cloud/form_77324.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818258/",
            "reporter": "abuse_ch"
        }
    ],
    "3818247": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_24663.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818247/",
            "reporter": "abuse_ch"
        }
    ],
    "3818248": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_52221.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818248/",
            "reporter": "abuse_ch"
        }
    ],
    "3818249": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_50931.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818249/",
            "reporter": "abuse_ch"
        }
    ],
    "3818250": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_01899.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818250/",
            "reporter": "abuse_ch"
        }
    ],
    "3818251": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_60056.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818251/",
            "reporter": "abuse_ch"
        }
    ],
    "3818252": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_37707.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818252/",
            "reporter": "abuse_ch"
        }
    ],
    "3818253": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_69167.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818253/",
            "reporter": "abuse_ch"
        }
    ],
    "3818254": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_59665.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818254/",
            "reporter": "abuse_ch"
        }
    ],
    "3818255": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_29943.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818255/",
            "reporter": "abuse_ch"
        }
    ],
    "3818256": [
        {
            "dateadded": "2026-04-13 13:16:17 UTC",
            "url": "https://refundonex.com/cloud/form_27247.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818256/",
            "reporter": "abuse_ch"
        }
    ],
    "3818245": [
        {
            "dateadded": "2026-04-13 13:16:16 UTC",
            "url": "https://refundonex.com/cloud/form_47384.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818245/",
            "reporter": "abuse_ch"
        }
    ],
    "3818246": [
        {
            "dateadded": "2026-04-13 13:16:16 UTC",
            "url": "https://refundonex.com/cloud/form_06113.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818246/",
            "reporter": "abuse_ch"
        }
    ],
    "3818240": [
        {
            "dateadded": "2026-04-13 13:16:15 UTC",
            "url": "https://refundonex.com/cloud/form_05941.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818240/",
            "reporter": "abuse_ch"
        }
    ],
    "3818241": [
        {
            "dateadded": "2026-04-13 13:16:15 UTC",
            "url": "https://refundonex.com/cloud/form_52843.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818241/",
            "reporter": "abuse_ch"
        }
    ],
    "3818242": [
        {
            "dateadded": "2026-04-13 13:16:15 UTC",
            "url": "https://refundonex.com/cloud/form_28358.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818242/",
            "reporter": "abuse_ch"
        }
    ],
    "3818243": [
        {
            "dateadded": "2026-04-13 13:16:15 UTC",
            "url": "https://refundonex.com/cloud/form_43388.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818243/",
            "reporter": "abuse_ch"
        }
    ],
    "3818244": [
        {
            "dateadded": "2026-04-13 13:16:15 UTC",
            "url": "https://refundonex.com/cloud/form_30425.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818244/",
            "reporter": "abuse_ch"
        }
    ],
    "3818234": [
        {
            "dateadded": "2026-04-13 13:16:14 UTC",
            "url": "https://refundonex.com/cloud/form_03796.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818234/",
            "reporter": "abuse_ch"
        }
    ],
    "3818235": [
        {
            "dateadded": "2026-04-13 13:16:14 UTC",
            "url": "https://refundonex.com/cloud/form_50289.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818235/",
            "reporter": "abuse_ch"
        }
    ],
    "3818236": [
        {
            "dateadded": "2026-04-13 13:16:14 UTC",
            "url": "https://refundonex.com/cloud/form_43634.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818236/",
            "reporter": "abuse_ch"
        }
    ],
    "3818237": [
        {
            "dateadded": "2026-04-13 13:16:14 UTC",
            "url": "https://refundonex.com/cloud/form_10888.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818237/",
            "reporter": "abuse_ch"
        }
    ],
    "3818238": [
        {
            "dateadded": "2026-04-13 13:16:14 UTC",
            "url": "https://refundonex.com/cloud/form_25736.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818238/",
            "reporter": "abuse_ch"
        }
    ],
    "3818239": [
        {
            "dateadded": "2026-04-13 13:16:14 UTC",
            "url": "https://refundonex.com/cloud/form_41668.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818239/",
            "reporter": "abuse_ch"
        }
    ],
    "3818232": [
        {
            "dateadded": "2026-04-13 13:16:13 UTC",
            "url": "https://refundonex.com/cloud/form_21603.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818232/",
            "reporter": "abuse_ch"
        }
    ],
    "3818233": [
        {
            "dateadded": "2026-04-13 13:16:13 UTC",
            "url": "https://refundonex.com/cloud/form_02148.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818233/",
            "reporter": "abuse_ch"
        }
    ],
    "3818231": [
        {
            "dateadded": "2026-04-13 13:16:12 UTC",
            "url": "https://refundonex.com/cloud/form_35000.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818231/",
            "reporter": "abuse_ch"
        }
    ],
    "3818228": [
        {
            "dateadded": "2026-04-13 13:16:11 UTC",
            "url": "https://refundonex.com/cloud/form_10789.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818228/",
            "reporter": "abuse_ch"
        }
    ],
    "3818229": [
        {
            "dateadded": "2026-04-13 13:16:11 UTC",
            "url": "https://refundonex.com/cloud/form_73011.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818229/",
            "reporter": "abuse_ch"
        }
    ],
    "3818230": [
        {
            "dateadded": "2026-04-13 13:16:11 UTC",
            "url": "https://refundonex.com/cloud/form_24070.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818230/",
            "reporter": "abuse_ch"
        }
    ],
    "3818227": [
        {
            "dateadded": "2026-04-13 13:16:10 UTC",
            "url": "https://refundonex.com/cloud/form_30968.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818227/",
            "reporter": "abuse_ch"
        }
    ],
    "3818223": [
        {
            "dateadded": "2026-04-13 13:16:09 UTC",
            "url": "https://refundonex.com/cloud/form_23744.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818223/",
            "reporter": "abuse_ch"
        }
    ],
    "3818224": [
        {
            "dateadded": "2026-04-13 13:16:09 UTC",
            "url": "https://refundonex.com/cloud/form_38901.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818224/",
            "reporter": "abuse_ch"
        }
    ],
    "3818225": [
        {
            "dateadded": "2026-04-13 13:16:09 UTC",
            "url": "https://refundonex.com/cloud/form_38899.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818225/",
            "reporter": "abuse_ch"
        }
    ],
    "3818226": [
        {
            "dateadded": "2026-04-13 13:16:09 UTC",
            "url": "https://refundonex.com/cloud/form_43188.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818226/",
            "reporter": "abuse_ch"
        }
    ],
    "3818213": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_19977.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818213/",
            "reporter": "abuse_ch"
        }
    ],
    "3818214": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_15217.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818214/",
            "reporter": "abuse_ch"
        }
    ],
    "3818215": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_60502.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818215/",
            "reporter": "abuse_ch"
        }
    ],
    "3818216": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_55953.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818216/",
            "reporter": "abuse_ch"
        }
    ],
    "3818217": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_16010.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818217/",
            "reporter": "abuse_ch"
        }
    ],
    "3818218": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_59572.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818218/",
            "reporter": "abuse_ch"
        }
    ],
    "3818219": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_15861.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818219/",
            "reporter": "abuse_ch"
        }
    ],
    "3818220": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_19556.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818220/",
            "reporter": "abuse_ch"
        }
    ],
    "3818221": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_68667.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818221/",
            "reporter": "abuse_ch"
        }
    ],
    "3818222": [
        {
            "dateadded": "2026-04-13 13:16:08 UTC",
            "url": "https://refundonex.com/cloud/form_05194.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818222/",
            "reporter": "abuse_ch"
        }
    ],
    "3818209": [
        {
            "dateadded": "2026-04-13 13:16:07 UTC",
            "url": "https://refundonex.com/cloud/form_11549.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818209/",
            "reporter": "abuse_ch"
        }
    ],
    "3818210": [
        {
            "dateadded": "2026-04-13 13:16:07 UTC",
            "url": "https://refundonex.com/cloud/form_40134.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818210/",
            "reporter": "abuse_ch"
        }
    ],
    "3818211": [
        {
            "dateadded": "2026-04-13 13:16:07 UTC",
            "url": "https://refundonex.com/cloud/form_35769.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818211/",
            "reporter": "abuse_ch"
        }
    ],
    "3818212": [
        {
            "dateadded": "2026-04-13 13:16:07 UTC",
            "url": "https://refundonex.com/cloud/form_20882.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818212/",
            "reporter": "abuse_ch"
        }
    ],
    "3818207": [
        {
            "dateadded": "2026-04-13 13:16:06 UTC",
            "url": "https://refundonex.com/cloud/form_52073.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818207/",
            "reporter": "abuse_ch"
        }
    ],
    "3818208": [
        {
            "dateadded": "2026-04-13 13:16:06 UTC",
            "url": "https://refundonex.com/cloud/form_66234.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818208/",
            "reporter": "abuse_ch"
        }
    ],
    "3818205": [
        {
            "dateadded": "2026-04-13 13:16:05 UTC",
            "url": "https://refundonex.com/cloud/form_15163.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818205/",
            "reporter": "abuse_ch"
        }
    ],
    "3818206": [
        {
            "dateadded": "2026-04-13 13:16:05 UTC",
            "url": "https://refundonex.com/cloud/form_02881.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818206/",
            "reporter": "abuse_ch"
        }
    ],
    "3818201": [
        {
            "dateadded": "2026-04-13 13:16:04 UTC",
            "url": "https://refundonex.com/cloud/form_12525.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818201/",
            "reporter": "abuse_ch"
        }
    ],
    "3818202": [
        {
            "dateadded": "2026-04-13 13:16:04 UTC",
            "url": "https://refundonex.com/cloud/form_52315.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818202/",
            "reporter": "abuse_ch"
        }
    ],
    "3818203": [
        {
            "dateadded": "2026-04-13 13:16:04 UTC",
            "url": "https://refundonex.com/cloud/form_21974.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818203/",
            "reporter": "abuse_ch"
        }
    ],
    "3818204": [
        {
            "dateadded": "2026-04-13 13:16:04 UTC",
            "url": "https://refundonex.com/cloud/form_10936.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818204/",
            "reporter": "abuse_ch"
        }
    ],
    "3818199": [
        {
            "dateadded": "2026-04-13 13:16:03 UTC",
            "url": "https://refundonex.com/cloud/form_41604.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818199/",
            "reporter": "abuse_ch"
        }
    ],
    "3818200": [
        {
            "dateadded": "2026-04-13 13:16:03 UTC",
            "url": "https://refundonex.com/cloud/form_08859.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818200/",
            "reporter": "abuse_ch"
        }
    ],
    "3818196": [
        {
            "dateadded": "2026-04-13 13:16:02 UTC",
            "url": "https://refundonex.com/cloud/form_61762.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818196/",
            "reporter": "abuse_ch"
        }
    ],
    "3818197": [
        {
            "dateadded": "2026-04-13 13:16:02 UTC",
            "url": "https://refundonex.com/cloud/form_15314.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818197/",
            "reporter": "abuse_ch"
        }
    ],
    "3818198": [
        {
            "dateadded": "2026-04-13 13:16:02 UTC",
            "url": "https://refundonex.com/cloud/form_77802.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818198/",
            "reporter": "abuse_ch"
        }
    ],
    "3818195": [
        {
            "dateadded": "2026-04-13 13:16:01 UTC",
            "url": "https://refundonex.com/cloud/form_68501.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:16:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818195/",
            "reporter": "abuse_ch"
        }
    ],
    "3818194": [
        {
            "dateadded": "2026-04-13 13:16:00 UTC",
            "url": "https://refundonex.com/cloud/form_48879.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818194/",
            "reporter": "abuse_ch"
        }
    ],
    "3818192": [
        {
            "dateadded": "2026-04-13 13:15:59 UTC",
            "url": "https://refundonex.com/cloud/form_72883.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818192/",
            "reporter": "abuse_ch"
        }
    ],
    "3818193": [
        {
            "dateadded": "2026-04-13 13:15:59 UTC",
            "url": "https://refundonex.com/cloud/form_24901.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818193/",
            "reporter": "abuse_ch"
        }
    ],
    "3818190": [
        {
            "dateadded": "2026-04-13 13:15:58 UTC",
            "url": "https://refundonex.com/cloud/form_10718.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818190/",
            "reporter": "abuse_ch"
        }
    ],
    "3818191": [
        {
            "dateadded": "2026-04-13 13:15:58 UTC",
            "url": "https://refundonex.com/cloud/form_68583.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818191/",
            "reporter": "abuse_ch"
        }
    ],
    "3818182": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_77914.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818182/",
            "reporter": "abuse_ch"
        }
    ],
    "3818183": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_23919.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818183/",
            "reporter": "abuse_ch"
        }
    ],
    "3818184": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_45349.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818184/",
            "reporter": "abuse_ch"
        }
    ],
    "3818185": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_37616.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818185/",
            "reporter": "abuse_ch"
        }
    ],
    "3818186": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_01622.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818186/",
            "reporter": "abuse_ch"
        }
    ],
    "3818187": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_22174.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818187/",
            "reporter": "abuse_ch"
        }
    ],
    "3818188": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_57473.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818188/",
            "reporter": "abuse_ch"
        }
    ],
    "3818189": [
        {
            "dateadded": "2026-04-13 13:15:57 UTC",
            "url": "https://refundonex.com/cloud/form_37394.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818189/",
            "reporter": "abuse_ch"
        }
    ],
    "3818180": [
        {
            "dateadded": "2026-04-13 13:15:56 UTC",
            "url": "https://refundonex.com/cloud/form_17823.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818180/",
            "reporter": "abuse_ch"
        }
    ],
    "3818181": [
        {
            "dateadded": "2026-04-13 13:15:56 UTC",
            "url": "https://refundonex.com/cloud/form_47630.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818181/",
            "reporter": "abuse_ch"
        }
    ],
    "3818175": [
        {
            "dateadded": "2026-04-13 13:15:55 UTC",
            "url": "https://refundonex.com/cloud/form_60666.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818175/",
            "reporter": "abuse_ch"
        }
    ],
    "3818176": [
        {
            "dateadded": "2026-04-13 13:15:55 UTC",
            "url": "https://refundonex.com/cloud/form_03497.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818176/",
            "reporter": "abuse_ch"
        }
    ],
    "3818177": [
        {
            "dateadded": "2026-04-13 13:15:55 UTC",
            "url": "https://refundonex.com/cloud/form_16430.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818177/",
            "reporter": "abuse_ch"
        }
    ],
    "3818178": [
        {
            "dateadded": "2026-04-13 13:15:55 UTC",
            "url": "https://refundonex.com/cloud/form_03767.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818178/",
            "reporter": "abuse_ch"
        }
    ],
    "3818179": [
        {
            "dateadded": "2026-04-13 13:15:55 UTC",
            "url": "https://refundonex.com/cloud/form_24086.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818179/",
            "reporter": "abuse_ch"
        }
    ],
    "3818174": [
        {
            "dateadded": "2026-04-13 13:15:54 UTC",
            "url": "https://refundonex.com/cloud/form_36728.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818174/",
            "reporter": "abuse_ch"
        }
    ],
    "3818172": [
        {
            "dateadded": "2026-04-13 13:15:53 UTC",
            "url": "https://refundonex.com/cloud/form_69740.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818172/",
            "reporter": "abuse_ch"
        }
    ],
    "3818173": [
        {
            "dateadded": "2026-04-13 13:15:53 UTC",
            "url": "https://refundonex.com/cloud/form_05895.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818173/",
            "reporter": "abuse_ch"
        }
    ],
    "3818162": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_50298.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818162/",
            "reporter": "abuse_ch"
        }
    ],
    "3818163": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_01355.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818163/",
            "reporter": "abuse_ch"
        }
    ],
    "3818164": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_11651.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818164/",
            "reporter": "abuse_ch"
        }
    ],
    "3818165": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_18487.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818165/",
            "reporter": "abuse_ch"
        }
    ],
    "3818166": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_15608.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818166/",
            "reporter": "abuse_ch"
        }
    ],
    "3818167": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_20126.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818167/",
            "reporter": "abuse_ch"
        }
    ],
    "3818168": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_18258.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818168/",
            "reporter": "abuse_ch"
        }
    ],
    "3818169": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_28332.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818169/",
            "reporter": "abuse_ch"
        }
    ],
    "3818170": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_30450.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818170/",
            "reporter": "abuse_ch"
        }
    ],
    "3818171": [
        {
            "dateadded": "2026-04-13 13:15:52 UTC",
            "url": "https://refundonex.com/cloud/form_07400.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818171/",
            "reporter": "abuse_ch"
        }
    ],
    "3818159": [
        {
            "dateadded": "2026-04-13 13:15:51 UTC",
            "url": "https://refundonex.com/cloud/form_45309.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818159/",
            "reporter": "abuse_ch"
        }
    ],
    "3818160": [
        {
            "dateadded": "2026-04-13 13:15:51 UTC",
            "url": "https://refundonex.com/cloud/form_15848.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818160/",
            "reporter": "abuse_ch"
        }
    ],
    "3818161": [
        {
            "dateadded": "2026-04-13 13:15:51 UTC",
            "url": "https://refundonex.com/cloud/form_70256.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818161/",
            "reporter": "abuse_ch"
        }
    ],
    "3818158": [
        {
            "dateadded": "2026-04-13 13:15:50 UTC",
            "url": "https://refundonex.com/cloud/form_43581.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818158/",
            "reporter": "abuse_ch"
        }
    ],
    "3818151": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_62511.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818151/",
            "reporter": "abuse_ch"
        }
    ],
    "3818152": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_58173.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818152/",
            "reporter": "abuse_ch"
        }
    ],
    "3818153": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_61896.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818153/",
            "reporter": "abuse_ch"
        }
    ],
    "3818154": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_71885.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818154/",
            "reporter": "abuse_ch"
        }
    ],
    "3818155": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_52809.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818155/",
            "reporter": "abuse_ch"
        }
    ],
    "3818156": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_08117.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818156/",
            "reporter": "abuse_ch"
        }
    ],
    "3818157": [
        {
            "dateadded": "2026-04-13 13:15:49 UTC",
            "url": "https://refundonex.com/cloud/form_73678.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818157/",
            "reporter": "abuse_ch"
        }
    ],
    "3818147": [
        {
            "dateadded": "2026-04-13 13:15:48 UTC",
            "url": "https://refundonex.com/cloud/form_77773.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818147/",
            "reporter": "abuse_ch"
        }
    ],
    "3818148": [
        {
            "dateadded": "2026-04-13 13:15:48 UTC",
            "url": "https://refundonex.com/cloud/form_07505.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818148/",
            "reporter": "abuse_ch"
        }
    ],
    "3818149": [
        {
            "dateadded": "2026-04-13 13:15:48 UTC",
            "url": "https://refundonex.com/cloud/form_39818.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818149/",
            "reporter": "abuse_ch"
        }
    ],
    "3818150": [
        {
            "dateadded": "2026-04-13 13:15:48 UTC",
            "url": "https://refundonex.com/cloud/form_31475.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818150/",
            "reporter": "abuse_ch"
        }
    ],
    "3818145": [
        {
            "dateadded": "2026-04-13 13:15:47 UTC",
            "url": "https://refundonex.com/cloud/form_11740.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818145/",
            "reporter": "abuse_ch"
        }
    ],
    "3818146": [
        {
            "dateadded": "2026-04-13 13:15:47 UTC",
            "url": "https://refundonex.com/cloud/form_08999.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818146/",
            "reporter": "abuse_ch"
        }
    ],
    "3818140": [
        {
            "dateadded": "2026-04-13 13:15:46 UTC",
            "url": "https://refundonex.com/cloud/form_68359.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818140/",
            "reporter": "abuse_ch"
        }
    ],
    "3818141": [
        {
            "dateadded": "2026-04-13 13:15:46 UTC",
            "url": "https://refundonex.com/cloud/form_60967.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818141/",
            "reporter": "abuse_ch"
        }
    ],
    "3818142": [
        {
            "dateadded": "2026-04-13 13:15:46 UTC",
            "url": "https://refundonex.com/cloud/form_25276.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818142/",
            "reporter": "abuse_ch"
        }
    ],
    "3818143": [
        {
            "dateadded": "2026-04-13 13:15:46 UTC",
            "url": "https://refundonex.com/cloud/form_67328.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818143/",
            "reporter": "abuse_ch"
        }
    ],
    "3818144": [
        {
            "dateadded": "2026-04-13 13:15:46 UTC",
            "url": "https://refundonex.com/cloud/form_07013.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818144/",
            "reporter": "abuse_ch"
        }
    ],
    "3818138": [
        {
            "dateadded": "2026-04-13 13:15:45 UTC",
            "url": "https://refundonex.com/cloud/form_34916.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818138/",
            "reporter": "abuse_ch"
        }
    ],
    "3818139": [
        {
            "dateadded": "2026-04-13 13:15:45 UTC",
            "url": "https://refundonex.com/cloud/form_48796.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818139/",
            "reporter": "abuse_ch"
        }
    ],
    "3818137": [
        {
            "dateadded": "2026-04-13 13:15:44 UTC",
            "url": "https://refundonex.com/cloud/form_28076.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818137/",
            "reporter": "abuse_ch"
        }
    ],
    "3818114": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_12397.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818114/",
            "reporter": "abuse_ch"
        }
    ],
    "3818115": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_31048.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818115/",
            "reporter": "abuse_ch"
        }
    ],
    "3818116": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_44090.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818116/",
            "reporter": "abuse_ch"
        }
    ],
    "3818117": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_43919.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818117/",
            "reporter": "abuse_ch"
        }
    ],
    "3818118": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_58844.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818118/",
            "reporter": "abuse_ch"
        }
    ],
    "3818119": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_44587.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818119/",
            "reporter": "abuse_ch"
        }
    ],
    "3818120": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_56048.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818120/",
            "reporter": "abuse_ch"
        }
    ],
    "3818121": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_07853.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818121/",
            "reporter": "abuse_ch"
        }
    ],
    "3818122": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_54154.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818122/",
            "reporter": "abuse_ch"
        }
    ],
    "3818123": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_72892.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818123/",
            "reporter": "abuse_ch"
        }
    ],
    "3818124": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_73959.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818124/",
            "reporter": "abuse_ch"
        }
    ],
    "3818125": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_12487.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818125/",
            "reporter": "abuse_ch"
        }
    ],
    "3818126": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_31268.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818126/",
            "reporter": "abuse_ch"
        }
    ],
    "3818127": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_20137.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818127/",
            "reporter": "abuse_ch"
        }
    ],
    "3818128": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_71339.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818128/",
            "reporter": "abuse_ch"
        }
    ],
    "3818129": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_22704.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818129/",
            "reporter": "abuse_ch"
        }
    ],
    "3818130": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_77813.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818130/",
            "reporter": "abuse_ch"
        }
    ],
    "3818131": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_08939.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818131/",
            "reporter": "abuse_ch"
        }
    ],
    "3818132": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_26463.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818132/",
            "reporter": "abuse_ch"
        }
    ],
    "3818133": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_07828.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818133/",
            "reporter": "abuse_ch"
        }
    ],
    "3818134": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_28026.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818134/",
            "reporter": "abuse_ch"
        }
    ],
    "3818135": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_06835.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818135/",
            "reporter": "abuse_ch"
        }
    ],
    "3818136": [
        {
            "dateadded": "2026-04-13 13:15:41 UTC",
            "url": "https://refundonex.com/cloud/form_64307.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818136/",
            "reporter": "abuse_ch"
        }
    ],
    "3818104": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_00535.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818104/",
            "reporter": "abuse_ch"
        }
    ],
    "3818105": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_11369.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818105/",
            "reporter": "abuse_ch"
        }
    ],
    "3818106": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_51894.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818106/",
            "reporter": "abuse_ch"
        }
    ],
    "3818107": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_72679.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818107/",
            "reporter": "abuse_ch"
        }
    ],
    "3818108": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_76995.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818108/",
            "reporter": "abuse_ch"
        }
    ],
    "3818109": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_55292.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818109/",
            "reporter": "abuse_ch"
        }
    ],
    "3818110": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_64538.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818110/",
            "reporter": "abuse_ch"
        }
    ],
    "3818111": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_67033.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818111/",
            "reporter": "abuse_ch"
        }
    ],
    "3818112": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_18892.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818112/",
            "reporter": "abuse_ch"
        }
    ],
    "3818113": [
        {
            "dateadded": "2026-04-13 13:15:40 UTC",
            "url": "https://refundonex.com/cloud/form_68622.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818113/",
            "reporter": "abuse_ch"
        }
    ],
    "3818102": [
        {
            "dateadded": "2026-04-13 13:15:36 UTC",
            "url": "https://refundonex.com/cloud/form_52297.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818102/",
            "reporter": "abuse_ch"
        }
    ],
    "3818103": [
        {
            "dateadded": "2026-04-13 13:15:36 UTC",
            "url": "https://refundonex.com/cloud/form_37964.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818103/",
            "reporter": "abuse_ch"
        }
    ],
    "3818101": [
        {
            "dateadded": "2026-04-13 13:15:34 UTC",
            "url": "https://refundonex.com/cloud/form_60401.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818101/",
            "reporter": "abuse_ch"
        }
    ],
    "3818098": [
        {
            "dateadded": "2026-04-13 13:15:30 UTC",
            "url": "https://refundonex.com/cloud/form_72999.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818098/",
            "reporter": "abuse_ch"
        }
    ],
    "3818099": [
        {
            "dateadded": "2026-04-13 13:15:30 UTC",
            "url": "https://refundonex.com/cloud/form_04829.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818099/",
            "reporter": "abuse_ch"
        }
    ],
    "3818100": [
        {
            "dateadded": "2026-04-13 13:15:30 UTC",
            "url": "https://refundonex.com/cloud/form_08074.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818100/",
            "reporter": "abuse_ch"
        }
    ],
    "3818093": [
        {
            "dateadded": "2026-04-13 13:15:29 UTC",
            "url": "https://refundonex.com/cloud/form_45629.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818093/",
            "reporter": "abuse_ch"
        }
    ],
    "3818094": [
        {
            "dateadded": "2026-04-13 13:15:29 UTC",
            "url": "https://refundonex.com/cloud/form_78515.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818094/",
            "reporter": "abuse_ch"
        }
    ],
    "3818095": [
        {
            "dateadded": "2026-04-13 13:15:29 UTC",
            "url": "https://refundonex.com/cloud/form_16922.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818095/",
            "reporter": "abuse_ch"
        }
    ],
    "3818096": [
        {
            "dateadded": "2026-04-13 13:15:29 UTC",
            "url": "https://refundonex.com/cloud/form_67925.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818096/",
            "reporter": "abuse_ch"
        }
    ],
    "3818097": [
        {
            "dateadded": "2026-04-13 13:15:29 UTC",
            "url": "https://refundonex.com/cloud/form_65651.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818097/",
            "reporter": "abuse_ch"
        }
    ],
    "3818084": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_68221.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818084/",
            "reporter": "abuse_ch"
        }
    ],
    "3818085": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_18177.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818085/",
            "reporter": "abuse_ch"
        }
    ],
    "3818086": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_03674.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818086/",
            "reporter": "abuse_ch"
        }
    ],
    "3818087": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_00826.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818087/",
            "reporter": "abuse_ch"
        }
    ],
    "3818088": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_18701.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818088/",
            "reporter": "abuse_ch"
        }
    ],
    "3818089": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_36722.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818089/",
            "reporter": "abuse_ch"
        }
    ],
    "3818090": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_62563.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818090/",
            "reporter": "abuse_ch"
        }
    ],
    "3818091": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_55259.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818091/",
            "reporter": "abuse_ch"
        }
    ],
    "3818092": [
        {
            "dateadded": "2026-04-13 13:15:28 UTC",
            "url": "https://refundonex.com/cloud/form_49196.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818092/",
            "reporter": "abuse_ch"
        }
    ],
    "3818083": [
        {
            "dateadded": "2026-04-13 13:15:26 UTC",
            "url": "https://refundonex.com/cloud/form_07384.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818083/",
            "reporter": "abuse_ch"
        }
    ],
    "3818079": [
        {
            "dateadded": "2026-04-13 13:15:25 UTC",
            "url": "https://refundonex.com/cloud/form_46395.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818079/",
            "reporter": "abuse_ch"
        }
    ],
    "3818080": [
        {
            "dateadded": "2026-04-13 13:15:25 UTC",
            "url": "https://refundonex.com/cloud/form_50149.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818080/",
            "reporter": "abuse_ch"
        }
    ],
    "3818081": [
        {
            "dateadded": "2026-04-13 13:15:25 UTC",
            "url": "https://refundonex.com/cloud/form_74798.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818081/",
            "reporter": "abuse_ch"
        }
    ],
    "3818082": [
        {
            "dateadded": "2026-04-13 13:15:25 UTC",
            "url": "https://refundonex.com/cloud/form_10539.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818082/",
            "reporter": "abuse_ch"
        }
    ],
    "3818072": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_12549.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818072/",
            "reporter": "abuse_ch"
        }
    ],
    "3818073": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_66268.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818073/",
            "reporter": "abuse_ch"
        }
    ],
    "3818074": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_64549.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818074/",
            "reporter": "abuse_ch"
        }
    ],
    "3818075": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_48752.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818075/",
            "reporter": "abuse_ch"
        }
    ],
    "3818076": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_27129.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818076/",
            "reporter": "abuse_ch"
        }
    ],
    "3818077": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_36347.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818077/",
            "reporter": "abuse_ch"
        }
    ],
    "3818078": [
        {
            "dateadded": "2026-04-13 13:15:24 UTC",
            "url": "https://refundonex.com/cloud/form_19872.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818078/",
            "reporter": "abuse_ch"
        }
    ],
    "3818071": [
        {
            "dateadded": "2026-04-13 13:15:23 UTC",
            "url": "https://refundonex.com/cloud/form_14989.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818071/",
            "reporter": "abuse_ch"
        }
    ],
    "3818068": [
        {
            "dateadded": "2026-04-13 13:15:22 UTC",
            "url": "https://refundonex.com/cloud/form_31677.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818068/",
            "reporter": "abuse_ch"
        }
    ],
    "3818069": [
        {
            "dateadded": "2026-04-13 13:15:22 UTC",
            "url": "https://refundonex.com/cloud/form_00088.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818069/",
            "reporter": "abuse_ch"
        }
    ],
    "3818070": [
        {
            "dateadded": "2026-04-13 13:15:22 UTC",
            "url": "https://refundonex.com/cloud/form_23356.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818070/",
            "reporter": "abuse_ch"
        }
    ],
    "3818067": [
        {
            "dateadded": "2026-04-13 13:15:21 UTC",
            "url": "https://refundonex.com/cloud/form_68148.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818067/",
            "reporter": "abuse_ch"
        }
    ],
    "3818062": [
        {
            "dateadded": "2026-04-13 13:15:20 UTC",
            "url": "https://refundonex.com/cloud/form_76383.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818062/",
            "reporter": "abuse_ch"
        }
    ],
    "3818063": [
        {
            "dateadded": "2026-04-13 13:15:20 UTC",
            "url": "https://refundonex.com/cloud/form_22739.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818063/",
            "reporter": "abuse_ch"
        }
    ],
    "3818064": [
        {
            "dateadded": "2026-04-13 13:15:20 UTC",
            "url": "https://refundonex.com/cloud/form_35807.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818064/",
            "reporter": "abuse_ch"
        }
    ],
    "3818065": [
        {
            "dateadded": "2026-04-13 13:15:20 UTC",
            "url": "https://refundonex.com/cloud/form_56208.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818065/",
            "reporter": "abuse_ch"
        }
    ],
    "3818066": [
        {
            "dateadded": "2026-04-13 13:15:20 UTC",
            "url": "https://refundonex.com/cloud/form_11055.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818066/",
            "reporter": "abuse_ch"
        }
    ],
    "3818059": [
        {
            "dateadded": "2026-04-13 13:15:19 UTC",
            "url": "https://refundonex.com/cloud/form_18664.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818059/",
            "reporter": "abuse_ch"
        }
    ],
    "3818060": [
        {
            "dateadded": "2026-04-13 13:15:19 UTC",
            "url": "https://refundonex.com/cloud/form_40919.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818060/",
            "reporter": "abuse_ch"
        }
    ],
    "3818061": [
        {
            "dateadded": "2026-04-13 13:15:19 UTC",
            "url": "https://refundonex.com/cloud/form_25110.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818061/",
            "reporter": "abuse_ch"
        }
    ],
    "3818057": [
        {
            "dateadded": "2026-04-13 13:15:18 UTC",
            "url": "https://refundonex.com/cloud/form_20314.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818057/",
            "reporter": "abuse_ch"
        }
    ],
    "3818058": [
        {
            "dateadded": "2026-04-13 13:15:18 UTC",
            "url": "https://refundonex.com/cloud/form_56966.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818058/",
            "reporter": "abuse_ch"
        }
    ],
    "3818054": [
        {
            "dateadded": "2026-04-13 13:15:17 UTC",
            "url": "https://refundonex.com/cloud/form_26097.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818054/",
            "reporter": "abuse_ch"
        }
    ],
    "3818055": [
        {
            "dateadded": "2026-04-13 13:15:17 UTC",
            "url": "https://refundonex.com/cloud/form_27442.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818055/",
            "reporter": "abuse_ch"
        }
    ],
    "3818056": [
        {
            "dateadded": "2026-04-13 13:15:17 UTC",
            "url": "https://refundonex.com/cloud/form_08788.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818056/",
            "reporter": "abuse_ch"
        }
    ],
    "3818044": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_77949.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818044/",
            "reporter": "abuse_ch"
        }
    ],
    "3818045": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_21473.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818045/",
            "reporter": "abuse_ch"
        }
    ],
    "3818046": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_57896.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818046/",
            "reporter": "abuse_ch"
        }
    ],
    "3818047": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_28608.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818047/",
            "reporter": "abuse_ch"
        }
    ],
    "3818048": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_77434.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818048/",
            "reporter": "abuse_ch"
        }
    ],
    "3818049": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_63128.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818049/",
            "reporter": "abuse_ch"
        }
    ],
    "3818050": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_00007.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818050/",
            "reporter": "abuse_ch"
        }
    ],
    "3818051": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_59474.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818051/",
            "reporter": "abuse_ch"
        }
    ],
    "3818052": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_21927.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818052/",
            "reporter": "abuse_ch"
        }
    ],
    "3818053": [
        {
            "dateadded": "2026-04-13 13:15:16 UTC",
            "url": "https://refundonex.com/cloud/form_28346.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818053/",
            "reporter": "abuse_ch"
        }
    ],
    "3818041": [
        {
            "dateadded": "2026-04-13 13:15:15 UTC",
            "url": "https://refundonex.com/cloud/form_33197.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818041/",
            "reporter": "abuse_ch"
        }
    ],
    "3818042": [
        {
            "dateadded": "2026-04-13 13:15:15 UTC",
            "url": "https://refundonex.com/cloud/form_26022.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818042/",
            "reporter": "abuse_ch"
        }
    ],
    "3818043": [
        {
            "dateadded": "2026-04-13 13:15:15 UTC",
            "url": "https://refundonex.com/cloud/form_62911.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818043/",
            "reporter": "abuse_ch"
        }
    ],
    "3818036": [
        {
            "dateadded": "2026-04-13 13:15:14 UTC",
            "url": "https://refundonex.com/cloud/form_71088.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818036/",
            "reporter": "abuse_ch"
        }
    ],
    "3818037": [
        {
            "dateadded": "2026-04-13 13:15:14 UTC",
            "url": "https://refundonex.com/cloud/form_65012.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818037/",
            "reporter": "abuse_ch"
        }
    ],
    "3818038": [
        {
            "dateadded": "2026-04-13 13:15:14 UTC",
            "url": "https://refundonex.com/cloud/form_65872.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818038/",
            "reporter": "abuse_ch"
        }
    ],
    "3818039": [
        {
            "dateadded": "2026-04-13 13:15:14 UTC",
            "url": "https://refundonex.com/cloud/form_72160.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818039/",
            "reporter": "abuse_ch"
        }
    ],
    "3818040": [
        {
            "dateadded": "2026-04-13 13:15:14 UTC",
            "url": "https://refundonex.com/cloud/form_64040.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818040/",
            "reporter": "abuse_ch"
        }
    ],
    "3818034": [
        {
            "dateadded": "2026-04-13 13:15:13 UTC",
            "url": "https://refundonex.com/cloud/form_00279.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818034/",
            "reporter": "abuse_ch"
        }
    ],
    "3818035": [
        {
            "dateadded": "2026-04-13 13:15:13 UTC",
            "url": "https://refundonex.com/cloud/form_49639.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818035/",
            "reporter": "abuse_ch"
        }
    ],
    "3818031": [
        {
            "dateadded": "2026-04-13 13:15:11 UTC",
            "url": "https://refundonex.com/cloud/form_08820.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818031/",
            "reporter": "abuse_ch"
        }
    ],
    "3818032": [
        {
            "dateadded": "2026-04-13 13:15:11 UTC",
            "url": "https://refundonex.com/cloud/form_54969.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818032/",
            "reporter": "abuse_ch"
        }
    ],
    "3818033": [
        {
            "dateadded": "2026-04-13 13:15:11 UTC",
            "url": "https://refundonex.com/cloud/form_68793.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818033/",
            "reporter": "abuse_ch"
        }
    ],
    "3818026": [
        {
            "dateadded": "2026-04-13 13:15:10 UTC",
            "url": "https://refundonex.com/cloud/form_43627.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818026/",
            "reporter": "abuse_ch"
        }
    ],
    "3818027": [
        {
            "dateadded": "2026-04-13 13:15:10 UTC",
            "url": "https://refundonex.com/cloud/form_28403.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818027/",
            "reporter": "abuse_ch"
        }
    ],
    "3818028": [
        {
            "dateadded": "2026-04-13 13:15:10 UTC",
            "url": "https://refundonex.com/cloud/form_26708.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818028/",
            "reporter": "abuse_ch"
        }
    ],
    "3818029": [
        {
            "dateadded": "2026-04-13 13:15:10 UTC",
            "url": "https://refundonex.com/cloud/form_34055.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818029/",
            "reporter": "abuse_ch"
        }
    ],
    "3818030": [
        {
            "dateadded": "2026-04-13 13:15:10 UTC",
            "url": "https://refundonex.com/cloud/form_25599.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818030/",
            "reporter": "abuse_ch"
        }
    ],
    "3818024": [
        {
            "dateadded": "2026-04-13 13:15:09 UTC",
            "url": "https://refundonex.com/cloud/form_59517.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818024/",
            "reporter": "abuse_ch"
        }
    ],
    "3818025": [
        {
            "dateadded": "2026-04-13 13:15:09 UTC",
            "url": "https://refundonex.com/cloud/form_08429.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818025/",
            "reporter": "abuse_ch"
        }
    ],
    "3818017": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_21336.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818017/",
            "reporter": "abuse_ch"
        }
    ],
    "3818018": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_23536.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818018/",
            "reporter": "abuse_ch"
        }
    ],
    "3818019": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_06087.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818019/",
            "reporter": "abuse_ch"
        }
    ],
    "3818020": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_76835.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818020/",
            "reporter": "abuse_ch"
        }
    ],
    "3818021": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_19796.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818021/",
            "reporter": "abuse_ch"
        }
    ],
    "3818022": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_57064.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818022/",
            "reporter": "abuse_ch"
        }
    ],
    "3818023": [
        {
            "dateadded": "2026-04-13 13:15:08 UTC",
            "url": "https://refundonex.com/cloud/form_13186.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818023/",
            "reporter": "abuse_ch"
        }
    ],
    "3818011": [
        {
            "dateadded": "2026-04-13 13:15:07 UTC",
            "url": "https://refundonex.com/cloud/form_46358.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818011/",
            "reporter": "abuse_ch"
        }
    ],
    "3818012": [
        {
            "dateadded": "2026-04-13 13:15:07 UTC",
            "url": "https://refundonex.com/cloud/form_59685.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818012/",
            "reporter": "abuse_ch"
        }
    ],
    "3818013": [
        {
            "dateadded": "2026-04-13 13:15:07 UTC",
            "url": "https://refundonex.com/cloud/form_32763.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818013/",
            "reporter": "abuse_ch"
        }
    ],
    "3818014": [
        {
            "dateadded": "2026-04-13 13:15:07 UTC",
            "url": "https://refundonex.com/cloud/form_74570.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818014/",
            "reporter": "abuse_ch"
        }
    ],
    "3818015": [
        {
            "dateadded": "2026-04-13 13:15:07 UTC",
            "url": "https://refundonex.com/cloud/form_43152.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818015/",
            "reporter": "abuse_ch"
        }
    ],
    "3818016": [
        {
            "dateadded": "2026-04-13 13:15:07 UTC",
            "url": "https://refundonex.com/cloud/form_73308.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818016/",
            "reporter": "abuse_ch"
        }
    ],
    "3818008": [
        {
            "dateadded": "2026-04-13 13:15:06 UTC",
            "url": "https://refundonex.com/cloud/form_06235.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818008/",
            "reporter": "abuse_ch"
        }
    ],
    "3818009": [
        {
            "dateadded": "2026-04-13 13:15:06 UTC",
            "url": "https://refundonex.com/cloud/form_71572.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818009/",
            "reporter": "abuse_ch"
        }
    ],
    "3818010": [
        {
            "dateadded": "2026-04-13 13:15:06 UTC",
            "url": "https://refundonex.com/cloud/form_53604.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818010/",
            "reporter": "abuse_ch"
        }
    ],
    "3818007": [
        {
            "dateadded": "2026-04-13 13:15:05 UTC",
            "url": "https://refundonex.com/cloud/form_69918.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818007/",
            "reporter": "abuse_ch"
        }
    ],
    "3818003": [
        {
            "dateadded": "2026-04-13 13:15:04 UTC",
            "url": "https://refundonex.com/cloud/form_78394.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818003/",
            "reporter": "abuse_ch"
        }
    ],
    "3818004": [
        {
            "dateadded": "2026-04-13 13:15:04 UTC",
            "url": "https://refundonex.com/cloud/form_72520.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818004/",
            "reporter": "abuse_ch"
        }
    ],
    "3818005": [
        {
            "dateadded": "2026-04-13 13:15:04 UTC",
            "url": "https://refundonex.com/cloud/form_32532.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818005/",
            "reporter": "abuse_ch"
        }
    ],
    "3818006": [
        {
            "dateadded": "2026-04-13 13:15:04 UTC",
            "url": "https://refundonex.com/cloud/form_54126.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818006/",
            "reporter": "abuse_ch"
        }
    ],
    "3818000": [
        {
            "dateadded": "2026-04-13 13:15:03 UTC",
            "url": "https://refundonex.com/cloud/form_47488.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818000/",
            "reporter": "abuse_ch"
        }
    ],
    "3818001": [
        {
            "dateadded": "2026-04-13 13:15:03 UTC",
            "url": "https://refundonex.com/cloud/form_69721.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818001/",
            "reporter": "abuse_ch"
        }
    ],
    "3818002": [
        {
            "dateadded": "2026-04-13 13:15:03 UTC",
            "url": "https://refundonex.com/cloud/form_79078.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3818002/",
            "reporter": "abuse_ch"
        }
    ],
    "3817999": [
        {
            "dateadded": "2026-04-13 13:15:02 UTC",
            "url": "https://refundonex.com/cloud/form_11286.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817999/",
            "reporter": "abuse_ch"
        }
    ],
    "3817997": [
        {
            "dateadded": "2026-04-13 13:15:01 UTC",
            "url": "https://refundonex.com/cloud/form_78413.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817997/",
            "reporter": "abuse_ch"
        }
    ],
    "3817998": [
        {
            "dateadded": "2026-04-13 13:15:01 UTC",
            "url": "https://refundonex.com/cloud/form_68362.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817998/",
            "reporter": "abuse_ch"
        }
    ],
    "3817993": [
        {
            "dateadded": "2026-04-13 13:15:00 UTC",
            "url": "https://refundonex.com/cloud/form_37131.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817993/",
            "reporter": "abuse_ch"
        }
    ],
    "3817994": [
        {
            "dateadded": "2026-04-13 13:15:00 UTC",
            "url": "https://refundonex.com/cloud/form_76012.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817994/",
            "reporter": "abuse_ch"
        }
    ],
    "3817995": [
        {
            "dateadded": "2026-04-13 13:15:00 UTC",
            "url": "https://refundonex.com/cloud/form_13663.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817995/",
            "reporter": "abuse_ch"
        }
    ],
    "3817996": [
        {
            "dateadded": "2026-04-13 13:15:00 UTC",
            "url": "https://refundonex.com/cloud/form_24198.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817996/",
            "reporter": "abuse_ch"
        }
    ],
    "3817989": [
        {
            "dateadded": "2026-04-13 13:14:59 UTC",
            "url": "https://refundonex.com/cloud/form_49151.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817989/",
            "reporter": "abuse_ch"
        }
    ],
    "3817990": [
        {
            "dateadded": "2026-04-13 13:14:59 UTC",
            "url": "https://refundonex.com/cloud/form_62931.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817990/",
            "reporter": "abuse_ch"
        }
    ],
    "3817991": [
        {
            "dateadded": "2026-04-13 13:14:59 UTC",
            "url": "https://refundonex.com/cloud/form_09934.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817991/",
            "reporter": "abuse_ch"
        }
    ],
    "3817992": [
        {
            "dateadded": "2026-04-13 13:14:59 UTC",
            "url": "https://refundonex.com/cloud/form_04878.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817992/",
            "reporter": "abuse_ch"
        }
    ],
    "3817981": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_72068.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817981/",
            "reporter": "abuse_ch"
        }
    ],
    "3817982": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_26591.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817982/",
            "reporter": "abuse_ch"
        }
    ],
    "3817983": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_27177.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817983/",
            "reporter": "abuse_ch"
        }
    ],
    "3817984": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_08683.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817984/",
            "reporter": "abuse_ch"
        }
    ],
    "3817985": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_20713.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817985/",
            "reporter": "abuse_ch"
        }
    ],
    "3817986": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_80122.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817986/",
            "reporter": "abuse_ch"
        }
    ],
    "3817987": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_46359.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817987/",
            "reporter": "abuse_ch"
        }
    ],
    "3817988": [
        {
            "dateadded": "2026-04-13 13:14:58 UTC",
            "url": "https://refundonex.com/cloud/form_26726.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817988/",
            "reporter": "abuse_ch"
        }
    ],
    "3817980": [
        {
            "dateadded": "2026-04-13 13:14:57 UTC",
            "url": "https://refundonex.com/cloud/form_35790.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817980/",
            "reporter": "abuse_ch"
        }
    ],
    "3817972": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_18811.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817972/",
            "reporter": "abuse_ch"
        }
    ],
    "3817973": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_41126.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817973/",
            "reporter": "abuse_ch"
        }
    ],
    "3817974": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_79294.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817974/",
            "reporter": "abuse_ch"
        }
    ],
    "3817975": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_38966.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817975/",
            "reporter": "abuse_ch"
        }
    ],
    "3817976": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_16383.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817976/",
            "reporter": "abuse_ch"
        }
    ],
    "3817977": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_50628.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817977/",
            "reporter": "abuse_ch"
        }
    ],
    "3817978": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_63265.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817978/",
            "reporter": "abuse_ch"
        }
    ],
    "3817979": [
        {
            "dateadded": "2026-04-13 13:14:56 UTC",
            "url": "https://refundonex.com/cloud/form_19463.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817979/",
            "reporter": "abuse_ch"
        }
    ],
    "3817971": [
        {
            "dateadded": "2026-04-13 13:14:55 UTC",
            "url": "https://refundonex.com/cloud/form_46899.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817971/",
            "reporter": "abuse_ch"
        }
    ],
    "3817965": [
        {
            "dateadded": "2026-04-13 13:14:54 UTC",
            "url": "https://refundonex.com/cloud/form_60081.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817965/",
            "reporter": "abuse_ch"
        }
    ],
    "3817966": [
        {
            "dateadded": "2026-04-13 13:14:54 UTC",
            "url": "https://refundonex.com/cloud/form_02643.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817966/",
            "reporter": "abuse_ch"
        }
    ],
    "3817967": [
        {
            "dateadded": "2026-04-13 13:14:54 UTC",
            "url": "https://refundonex.com/cloud/form_36834.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817967/",
            "reporter": "abuse_ch"
        }
    ],
    "3817968": [
        {
            "dateadded": "2026-04-13 13:14:54 UTC",
            "url": "https://refundonex.com/cloud/form_28685.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817968/",
            "reporter": "abuse_ch"
        }
    ],
    "3817969": [
        {
            "dateadded": "2026-04-13 13:14:54 UTC",
            "url": "https://refundonex.com/cloud/form_63278.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817969/",
            "reporter": "abuse_ch"
        }
    ],
    "3817970": [
        {
            "dateadded": "2026-04-13 13:14:54 UTC",
            "url": "https://refundonex.com/cloud/form_75813.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817970/",
            "reporter": "abuse_ch"
        }
    ],
    "3817956": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_77462.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817956/",
            "reporter": "abuse_ch"
        }
    ],
    "3817957": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_01535.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817957/",
            "reporter": "abuse_ch"
        }
    ],
    "3817958": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_70376.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817958/",
            "reporter": "abuse_ch"
        }
    ],
    "3817959": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_08380.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817959/",
            "reporter": "abuse_ch"
        }
    ],
    "3817960": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_77494.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817960/",
            "reporter": "abuse_ch"
        }
    ],
    "3817961": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_12971.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817961/",
            "reporter": "abuse_ch"
        }
    ],
    "3817962": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_74209.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817962/",
            "reporter": "abuse_ch"
        }
    ],
    "3817963": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_73976.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817963/",
            "reporter": "abuse_ch"
        }
    ],
    "3817964": [
        {
            "dateadded": "2026-04-13 13:14:51 UTC",
            "url": "https://refundonex.com/cloud/form_18088.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817964/",
            "reporter": "abuse_ch"
        }
    ],
    "3817952": [
        {
            "dateadded": "2026-04-13 13:14:50 UTC",
            "url": "https://refundonex.com/cloud/form_47014.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817952/",
            "reporter": "abuse_ch"
        }
    ],
    "3817953": [
        {
            "dateadded": "2026-04-13 13:14:50 UTC",
            "url": "https://refundonex.com/cloud/form_01577.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817953/",
            "reporter": "abuse_ch"
        }
    ],
    "3817954": [
        {
            "dateadded": "2026-04-13 13:14:50 UTC",
            "url": "https://refundonex.com/cloud/form_29996.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817954/",
            "reporter": "abuse_ch"
        }
    ],
    "3817955": [
        {
            "dateadded": "2026-04-13 13:14:50 UTC",
            "url": "https://refundonex.com/cloud/form_13309.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817955/",
            "reporter": "abuse_ch"
        }
    ],
    "3817947": [
        {
            "dateadded": "2026-04-13 13:14:49 UTC",
            "url": "https://refundonex.com/cloud/form_69975.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817947/",
            "reporter": "abuse_ch"
        }
    ],
    "3817948": [
        {
            "dateadded": "2026-04-13 13:14:49 UTC",
            "url": "https://refundonex.com/cloud/form_49317.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817948/",
            "reporter": "abuse_ch"
        }
    ],
    "3817949": [
        {
            "dateadded": "2026-04-13 13:14:49 UTC",
            "url": "https://refundonex.com/cloud/form_68476.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817949/",
            "reporter": "abuse_ch"
        }
    ],
    "3817950": [
        {
            "dateadded": "2026-04-13 13:14:49 UTC",
            "url": "https://refundonex.com/cloud/form_15098.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817950/",
            "reporter": "abuse_ch"
        }
    ],
    "3817951": [
        {
            "dateadded": "2026-04-13 13:14:49 UTC",
            "url": "https://refundonex.com/cloud/form_41904.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817951/",
            "reporter": "abuse_ch"
        }
    ],
    "3817945": [
        {
            "dateadded": "2026-04-13 13:14:48 UTC",
            "url": "https://refundonex.com/cloud/form_66742.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817945/",
            "reporter": "abuse_ch"
        }
    ],
    "3817946": [
        {
            "dateadded": "2026-04-13 13:14:48 UTC",
            "url": "https://refundonex.com/cloud/form_52758.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817946/",
            "reporter": "abuse_ch"
        }
    ],
    "3817939": [
        {
            "dateadded": "2026-04-13 13:14:47 UTC",
            "url": "https://refundonex.com/cloud/form_13720.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817939/",
            "reporter": "abuse_ch"
        }
    ],
    "3817940": [
        {
            "dateadded": "2026-04-13 13:14:47 UTC",
            "url": "https://refundonex.com/cloud/form_39670.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817940/",
            "reporter": "abuse_ch"
        }
    ],
    "3817941": [
        {
            "dateadded": "2026-04-13 13:14:47 UTC",
            "url": "https://refundonex.com/cloud/form_74743.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817941/",
            "reporter": "abuse_ch"
        }
    ],
    "3817942": [
        {
            "dateadded": "2026-04-13 13:14:47 UTC",
            "url": "https://refundonex.com/cloud/form_55365.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817942/",
            "reporter": "abuse_ch"
        }
    ],
    "3817943": [
        {
            "dateadded": "2026-04-13 13:14:47 UTC",
            "url": "https://refundonex.com/cloud/form_69212.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817943/",
            "reporter": "abuse_ch"
        }
    ],
    "3817944": [
        {
            "dateadded": "2026-04-13 13:14:47 UTC",
            "url": "https://refundonex.com/cloud/form_23908.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817944/",
            "reporter": "abuse_ch"
        }
    ],
    "3817937": [
        {
            "dateadded": "2026-04-13 13:14:46 UTC",
            "url": "https://refundonex.com/cloud/form_75025.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817937/",
            "reporter": "abuse_ch"
        }
    ],
    "3817938": [
        {
            "dateadded": "2026-04-13 13:14:46 UTC",
            "url": "https://refundonex.com/cloud/form_06949.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817938/",
            "reporter": "abuse_ch"
        }
    ],
    "3817929": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_72201.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817929/",
            "reporter": "abuse_ch"
        }
    ],
    "3817930": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_22533.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817930/",
            "reporter": "abuse_ch"
        }
    ],
    "3817931": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_25723.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817931/",
            "reporter": "abuse_ch"
        }
    ],
    "3817932": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_22600.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817932/",
            "reporter": "abuse_ch"
        }
    ],
    "3817933": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_16220.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817933/",
            "reporter": "abuse_ch"
        }
    ],
    "3817934": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_24938.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817934/",
            "reporter": "abuse_ch"
        }
    ],
    "3817935": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_16764.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817935/",
            "reporter": "abuse_ch"
        }
    ],
    "3817936": [
        {
            "dateadded": "2026-04-13 13:14:45 UTC",
            "url": "https://refundonex.com/cloud/form_04630.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817936/",
            "reporter": "abuse_ch"
        }
    ],
    "3817924": [
        {
            "dateadded": "2026-04-13 13:14:44 UTC",
            "url": "https://refundonex.com/cloud/form_47978.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817924/",
            "reporter": "abuse_ch"
        }
    ],
    "3817925": [
        {
            "dateadded": "2026-04-13 13:14:44 UTC",
            "url": "https://refundonex.com/cloud/form_64055.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817925/",
            "reporter": "abuse_ch"
        }
    ],
    "3817926": [
        {
            "dateadded": "2026-04-13 13:14:44 UTC",
            "url": "https://refundonex.com/cloud/form_01458.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817926/",
            "reporter": "abuse_ch"
        }
    ],
    "3817927": [
        {
            "dateadded": "2026-04-13 13:14:44 UTC",
            "url": "https://refundonex.com/cloud/form_13579.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817927/",
            "reporter": "abuse_ch"
        }
    ],
    "3817928": [
        {
            "dateadded": "2026-04-13 13:14:44 UTC",
            "url": "https://refundonex.com/cloud/form_75034.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817928/",
            "reporter": "abuse_ch"
        }
    ],
    "3817920": [
        {
            "dateadded": "2026-04-13 13:14:43 UTC",
            "url": "https://refundonex.com/cloud/form_00492.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817920/",
            "reporter": "abuse_ch"
        }
    ],
    "3817921": [
        {
            "dateadded": "2026-04-13 13:14:43 UTC",
            "url": "https://refundonex.com/cloud/form_62565.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817921/",
            "reporter": "abuse_ch"
        }
    ],
    "3817922": [
        {
            "dateadded": "2026-04-13 13:14:43 UTC",
            "url": "https://refundonex.com/cloud/form_15181.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817922/",
            "reporter": "abuse_ch"
        }
    ],
    "3817923": [
        {
            "dateadded": "2026-04-13 13:14:43 UTC",
            "url": "https://refundonex.com/cloud/form_21490.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817923/",
            "reporter": "abuse_ch"
        }
    ],
    "3817912": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_34496.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817912/",
            "reporter": "abuse_ch"
        }
    ],
    "3817913": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_15965.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817913/",
            "reporter": "abuse_ch"
        }
    ],
    "3817914": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_41200.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817914/",
            "reporter": "abuse_ch"
        }
    ],
    "3817915": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_02185.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817915/",
            "reporter": "abuse_ch"
        }
    ],
    "3817916": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_50999.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817916/",
            "reporter": "abuse_ch"
        }
    ],
    "3817917": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_07301.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817917/",
            "reporter": "abuse_ch"
        }
    ],
    "3817918": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_63948.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817918/",
            "reporter": "abuse_ch"
        }
    ],
    "3817919": [
        {
            "dateadded": "2026-04-13 13:14:42 UTC",
            "url": "https://refundonex.com/cloud/form_50818.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817919/",
            "reporter": "abuse_ch"
        }
    ],
    "3817911": [
        {
            "dateadded": "2026-04-13 13:14:41 UTC",
            "url": "https://refundonex.com/cloud/form_49929.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817911/",
            "reporter": "abuse_ch"
        }
    ],
    "3817910": [
        {
            "dateadded": "2026-04-13 13:14:40 UTC",
            "url": "https://refundonex.com/cloud/form_70351.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817910/",
            "reporter": "abuse_ch"
        }
    ],
    "3817909": [
        {
            "dateadded": "2026-04-13 13:14:39 UTC",
            "url": "https://refundonex.com/cloud/form_28820.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817909/",
            "reporter": "abuse_ch"
        }
    ],
    "3817903": [
        {
            "dateadded": "2026-04-13 13:14:38 UTC",
            "url": "https://refundonex.com/cloud/form_36331.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817903/",
            "reporter": "abuse_ch"
        }
    ],
    "3817904": [
        {
            "dateadded": "2026-04-13 13:14:38 UTC",
            "url": "https://refundonex.com/cloud/form_53430.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817904/",
            "reporter": "abuse_ch"
        }
    ],
    "3817905": [
        {
            "dateadded": "2026-04-13 13:14:38 UTC",
            "url": "https://refundonex.com/cloud/form_21012.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817905/",
            "reporter": "abuse_ch"
        }
    ],
    "3817906": [
        {
            "dateadded": "2026-04-13 13:14:38 UTC",
            "url": "https://refundonex.com/cloud/form_39203.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817906/",
            "reporter": "abuse_ch"
        }
    ],
    "3817907": [
        {
            "dateadded": "2026-04-13 13:14:38 UTC",
            "url": "https://refundonex.com/cloud/form_59903.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817907/",
            "reporter": "abuse_ch"
        }
    ],
    "3817908": [
        {
            "dateadded": "2026-04-13 13:14:38 UTC",
            "url": "https://refundonex.com/cloud/form_26701.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817908/",
            "reporter": "abuse_ch"
        }
    ],
    "3817901": [
        {
            "dateadded": "2026-04-13 13:14:37 UTC",
            "url": "https://refundonex.com/cloud/form_72788.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817901/",
            "reporter": "abuse_ch"
        }
    ],
    "3817902": [
        {
            "dateadded": "2026-04-13 13:14:37 UTC",
            "url": "https://refundonex.com/cloud/form_55648.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817902/",
            "reporter": "abuse_ch"
        }
    ],
    "3817899": [
        {
            "dateadded": "2026-04-13 13:14:36 UTC",
            "url": "https://refundonex.com/cloud/form_67100.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817899/",
            "reporter": "abuse_ch"
        }
    ],
    "3817900": [
        {
            "dateadded": "2026-04-13 13:14:36 UTC",
            "url": "https://refundonex.com/cloud/form_43024.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817900/",
            "reporter": "abuse_ch"
        }
    ],
    "3817891": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_20396.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817891/",
            "reporter": "abuse_ch"
        }
    ],
    "3817892": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_19180.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817892/",
            "reporter": "abuse_ch"
        }
    ],
    "3817893": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_73549.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817893/",
            "reporter": "abuse_ch"
        }
    ],
    "3817894": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_22996.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817894/",
            "reporter": "abuse_ch"
        }
    ],
    "3817895": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_53501.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817895/",
            "reporter": "abuse_ch"
        }
    ],
    "3817896": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_07212.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817896/",
            "reporter": "abuse_ch"
        }
    ],
    "3817897": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_26253.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817897/",
            "reporter": "abuse_ch"
        }
    ],
    "3817898": [
        {
            "dateadded": "2026-04-13 13:14:35 UTC",
            "url": "https://refundonex.com/cloud/form_69394.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817898/",
            "reporter": "abuse_ch"
        }
    ],
    "3817889": [
        {
            "dateadded": "2026-04-13 13:14:34 UTC",
            "url": "https://refundonex.com/cloud/form_18344.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817889/",
            "reporter": "abuse_ch"
        }
    ],
    "3817890": [
        {
            "dateadded": "2026-04-13 13:14:34 UTC",
            "url": "https://refundonex.com/cloud/form_72145.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817890/",
            "reporter": "abuse_ch"
        }
    ],
    "3817887": [
        {
            "dateadded": "2026-04-13 13:14:33 UTC",
            "url": "https://refundonex.com/cloud/form_40358.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817887/",
            "reporter": "abuse_ch"
        }
    ],
    "3817888": [
        {
            "dateadded": "2026-04-13 13:14:33 UTC",
            "url": "https://refundonex.com/cloud/form_27329.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817888/",
            "reporter": "abuse_ch"
        }
    ],
    "3817883": [
        {
            "dateadded": "2026-04-13 13:14:32 UTC",
            "url": "https://refundonex.com/cloud/form_01986.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817883/",
            "reporter": "abuse_ch"
        }
    ],
    "3817884": [
        {
            "dateadded": "2026-04-13 13:14:32 UTC",
            "url": "https://refundonex.com/cloud/form_45793.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817884/",
            "reporter": "abuse_ch"
        }
    ],
    "3817885": [
        {
            "dateadded": "2026-04-13 13:14:32 UTC",
            "url": "https://refundonex.com/cloud/form_21559.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817885/",
            "reporter": "abuse_ch"
        }
    ],
    "3817886": [
        {
            "dateadded": "2026-04-13 13:14:32 UTC",
            "url": "https://refundonex.com/cloud/form_07712.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817886/",
            "reporter": "abuse_ch"
        }
    ],
    "3817876": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_22301.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817876/",
            "reporter": "abuse_ch"
        }
    ],
    "3817877": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_01812.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817877/",
            "reporter": "abuse_ch"
        }
    ],
    "3817878": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_26730.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817878/",
            "reporter": "abuse_ch"
        }
    ],
    "3817879": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_65803.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817879/",
            "reporter": "abuse_ch"
        }
    ],
    "3817880": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_01211.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817880/",
            "reporter": "abuse_ch"
        }
    ],
    "3817881": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_70894.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817881/",
            "reporter": "abuse_ch"
        }
    ],
    "3817882": [
        {
            "dateadded": "2026-04-13 13:14:31 UTC",
            "url": "https://refundonex.com/cloud/form_55459.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817882/",
            "reporter": "abuse_ch"
        }
    ],
    "3817869": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/form_59150.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817869/",
            "reporter": "abuse_ch"
        }
    ],
    "3817870": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/form_22845.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817870/",
            "reporter": "abuse_ch"
        }
    ],
    "3817871": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/form_67465.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817871/",
            "reporter": "abuse_ch"
        }
    ],
    "3817872": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/form_40469.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817872/",
            "reporter": "abuse_ch"
        }
    ],
    "3817873": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/JoseTomas.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817873/",
            "reporter": "abuse_ch"
        }
    ],
    "3817874": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/form_08811.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817874/",
            "reporter": "abuse_ch"
        }
    ],
    "3817875": [
        {
            "dateadded": "2026-04-13 13:14:30 UTC",
            "url": "https://refundonex.com/cloud/form_73024.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817875/",
            "reporter": "abuse_ch"
        }
    ],
    "3817864": [
        {
            "dateadded": "2026-04-13 13:14:29 UTC",
            "url": "https://refundonex.com/cloud/form_17822.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817864/",
            "reporter": "abuse_ch"
        }
    ],
    "3817865": [
        {
            "dateadded": "2026-04-13 13:14:29 UTC",
            "url": "https://refundonex.com/cloud/form_09506.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817865/",
            "reporter": "abuse_ch"
        }
    ],
    "3817866": [
        {
            "dateadded": "2026-04-13 13:14:29 UTC",
            "url": "https://refundonex.com/cloud/form_56406.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817866/",
            "reporter": "abuse_ch"
        }
    ],
    "3817867": [
        {
            "dateadded": "2026-04-13 13:14:29 UTC",
            "url": "https://refundonex.com/cloud/form_45658.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817867/",
            "reporter": "abuse_ch"
        }
    ],
    "3817868": [
        {
            "dateadded": "2026-04-13 13:14:29 UTC",
            "url": "https://refundonex.com/cloud/form_61111.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817868/",
            "reporter": "abuse_ch"
        }
    ],
    "3817857": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_54122.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817857/",
            "reporter": "abuse_ch"
        }
    ],
    "3817858": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_64830.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817858/",
            "reporter": "abuse_ch"
        }
    ],
    "3817859": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_17005.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817859/",
            "reporter": "abuse_ch"
        }
    ],
    "3817860": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_69981.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817860/",
            "reporter": "abuse_ch"
        }
    ],
    "3817861": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_13097.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817861/",
            "reporter": "abuse_ch"
        }
    ],
    "3817862": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_40082.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817862/",
            "reporter": "abuse_ch"
        }
    ],
    "3817863": [
        {
            "dateadded": "2026-04-13 13:14:28 UTC",
            "url": "https://refundonex.com/cloud/form_60161.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817863/",
            "reporter": "abuse_ch"
        }
    ],
    "3817856": [
        {
            "dateadded": "2026-04-13 13:14:27 UTC",
            "url": "https://refundonex.com/cloud/form_25906.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817856/",
            "reporter": "abuse_ch"
        }
    ],
    "3817854": [
        {
            "dateadded": "2026-04-13 13:14:26 UTC",
            "url": "https://refundonex.com/cloud/form_43724.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817854/",
            "reporter": "abuse_ch"
        }
    ],
    "3817855": [
        {
            "dateadded": "2026-04-13 13:14:26 UTC",
            "url": "https://refundonex.com/cloud/form_69626.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817855/",
            "reporter": "abuse_ch"
        }
    ],
    "3817851": [
        {
            "dateadded": "2026-04-13 13:14:25 UTC",
            "url": "https://refundonex.com/cloud/form_14079.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817851/",
            "reporter": "abuse_ch"
        }
    ],
    "3817852": [
        {
            "dateadded": "2026-04-13 13:14:25 UTC",
            "url": "https://refundonex.com/cloud/form_53592.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817852/",
            "reporter": "abuse_ch"
        }
    ],
    "3817853": [
        {
            "dateadded": "2026-04-13 13:14:25 UTC",
            "url": "https://refundonex.com/cloud/form_08686.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817853/",
            "reporter": "abuse_ch"
        }
    ],
    "3817847": [
        {
            "dateadded": "2026-04-13 13:14:24 UTC",
            "url": "https://refundonex.com/cloud/form_53894.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817847/",
            "reporter": "abuse_ch"
        }
    ],
    "3817848": [
        {
            "dateadded": "2026-04-13 13:14:24 UTC",
            "url": "https://refundonex.com/cloud/form_25525.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817848/",
            "reporter": "abuse_ch"
        }
    ],
    "3817849": [
        {
            "dateadded": "2026-04-13 13:14:24 UTC",
            "url": "https://refundonex.com/cloud/form_27573.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817849/",
            "reporter": "abuse_ch"
        }
    ],
    "3817850": [
        {
            "dateadded": "2026-04-13 13:14:24 UTC",
            "url": "https://refundonex.com/cloud/form_78550.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817850/",
            "reporter": "abuse_ch"
        }
    ],
    "3817845": [
        {
            "dateadded": "2026-04-13 13:14:23 UTC",
            "url": "https://refundonex.com/cloud/form_78116.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817845/",
            "reporter": "abuse_ch"
        }
    ],
    "3817846": [
        {
            "dateadded": "2026-04-13 13:14:23 UTC",
            "url": "https://refundonex.com/cloud/form_73989.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817846/",
            "reporter": "abuse_ch"
        }
    ],
    "3817844": [
        {
            "dateadded": "2026-04-13 13:14:22 UTC",
            "url": "https://refundonex.com/cloud/form_73779.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817844/",
            "reporter": "abuse_ch"
        }
    ],
    "3817843": [
        {
            "dateadded": "2026-04-13 13:14:21 UTC",
            "url": "https://refundonex.com/cloud/form_49515.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817843/",
            "reporter": "abuse_ch"
        }
    ],
    "3817840": [
        {
            "dateadded": "2026-04-13 13:14:20 UTC",
            "url": "https://refundonex.com/cloud/form_54837.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817840/",
            "reporter": "abuse_ch"
        }
    ],
    "3817841": [
        {
            "dateadded": "2026-04-13 13:14:20 UTC",
            "url": "https://refundonex.com/cloud/form_27669.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817841/",
            "reporter": "abuse_ch"
        }
    ],
    "3817842": [
        {
            "dateadded": "2026-04-13 13:14:20 UTC",
            "url": "https://refundonex.com/cloud/form_62963.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817842/",
            "reporter": "abuse_ch"
        }
    ],
    "3817835": [
        {
            "dateadded": "2026-04-13 13:14:19 UTC",
            "url": "https://refundonex.com/cloud/form_03894.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817835/",
            "reporter": "abuse_ch"
        }
    ],
    "3817836": [
        {
            "dateadded": "2026-04-13 13:14:19 UTC",
            "url": "https://refundonex.com/cloud/form_08373.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817836/",
            "reporter": "abuse_ch"
        }
    ],
    "3817837": [
        {
            "dateadded": "2026-04-13 13:14:19 UTC",
            "url": "https://refundonex.com/cloud/form_46273.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817837/",
            "reporter": "abuse_ch"
        }
    ],
    "3817838": [
        {
            "dateadded": "2026-04-13 13:14:19 UTC",
            "url": "https://refundonex.com/cloud/form_61938.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817838/",
            "reporter": "abuse_ch"
        }
    ],
    "3817839": [
        {
            "dateadded": "2026-04-13 13:14:19 UTC",
            "url": "https://refundonex.com/cloud/form_45248.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817839/",
            "reporter": "abuse_ch"
        }
    ],
    "3817829": [
        {
            "dateadded": "2026-04-13 13:14:18 UTC",
            "url": "https://refundonex.com/cloud/form_42552.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817829/",
            "reporter": "abuse_ch"
        }
    ],
    "3817830": [
        {
            "dateadded": "2026-04-13 13:14:18 UTC",
            "url": "https://refundonex.com/cloud/form_29496.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817830/",
            "reporter": "abuse_ch"
        }
    ],
    "3817831": [
        {
            "dateadded": "2026-04-13 13:14:18 UTC",
            "url": "https://refundonex.com/cloud/form_62609.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817831/",
            "reporter": "abuse_ch"
        }
    ],
    "3817832": [
        {
            "dateadded": "2026-04-13 13:14:18 UTC",
            "url": "https://refundonex.com/cloud/form_68809.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817832/",
            "reporter": "abuse_ch"
        }
    ],
    "3817833": [
        {
            "dateadded": "2026-04-13 13:14:18 UTC",
            "url": "https://refundonex.com/cloud/form_14388.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817833/",
            "reporter": "abuse_ch"
        }
    ],
    "3817834": [
        {
            "dateadded": "2026-04-13 13:14:18 UTC",
            "url": "https://refundonex.com/cloud/form_61451.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817834/",
            "reporter": "abuse_ch"
        }
    ],
    "3817823": [
        {
            "dateadded": "2026-04-13 13:14:17 UTC",
            "url": "https://refundonex.com/cloud/form_45405.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817823/",
            "reporter": "abuse_ch"
        }
    ],
    "3817824": [
        {
            "dateadded": "2026-04-13 13:14:17 UTC",
            "url": "https://refundonex.com/cloud/form_23564.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817824/",
            "reporter": "abuse_ch"
        }
    ],
    "3817825": [
        {
            "dateadded": "2026-04-13 13:14:17 UTC",
            "url": "https://refundonex.com/cloud/form_12510.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817825/",
            "reporter": "abuse_ch"
        }
    ],
    "3817826": [
        {
            "dateadded": "2026-04-13 13:14:17 UTC",
            "url": "https://refundonex.com/cloud/form_13316.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817826/",
            "reporter": "abuse_ch"
        }
    ],
    "3817827": [
        {
            "dateadded": "2026-04-13 13:14:17 UTC",
            "url": "https://refundonex.com/cloud/form_47796.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817827/",
            "reporter": "abuse_ch"
        }
    ],
    "3817828": [
        {
            "dateadded": "2026-04-13 13:14:17 UTC",
            "url": "https://refundonex.com/cloud/form_66147.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817828/",
            "reporter": "abuse_ch"
        }
    ],
    "3817814": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_34163.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817814/",
            "reporter": "abuse_ch"
        }
    ],
    "3817815": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_30329.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817815/",
            "reporter": "abuse_ch"
        }
    ],
    "3817816": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_54776.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817816/",
            "reporter": "abuse_ch"
        }
    ],
    "3817817": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_44883.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817817/",
            "reporter": "abuse_ch"
        }
    ],
    "3817818": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_72606.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817818/",
            "reporter": "abuse_ch"
        }
    ],
    "3817819": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_13843.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817819/",
            "reporter": "abuse_ch"
        }
    ],
    "3817820": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_59180.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817820/",
            "reporter": "abuse_ch"
        }
    ],
    "3817821": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_20237.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817821/",
            "reporter": "abuse_ch"
        }
    ],
    "3817822": [
        {
            "dateadded": "2026-04-13 13:14:16 UTC",
            "url": "https://refundonex.com/cloud/form_39804.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817822/",
            "reporter": "abuse_ch"
        }
    ],
    "3817811": [
        {
            "dateadded": "2026-04-13 13:14:15 UTC",
            "url": "https://refundonex.com/cloud/form_64898.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817811/",
            "reporter": "abuse_ch"
        }
    ],
    "3817812": [
        {
            "dateadded": "2026-04-13 13:14:15 UTC",
            "url": "https://refundonex.com/cloud/form_15283.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817812/",
            "reporter": "abuse_ch"
        }
    ],
    "3817813": [
        {
            "dateadded": "2026-04-13 13:14:15 UTC",
            "url": "https://refundonex.com/cloud/form_68283.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817813/",
            "reporter": "abuse_ch"
        }
    ],
    "3817810": [
        {
            "dateadded": "2026-04-13 13:14:13 UTC",
            "url": "https://refundonex.com/cloud/form_24993.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817810/",
            "reporter": "abuse_ch"
        }
    ],
    "3817806": [
        {
            "dateadded": "2026-04-13 13:14:12 UTC",
            "url": "https://refundonex.com/cloud/form_07352.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817806/",
            "reporter": "abuse_ch"
        }
    ],
    "3817807": [
        {
            "dateadded": "2026-04-13 13:14:12 UTC",
            "url": "https://refundonex.com/cloud/form_43666.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817807/",
            "reporter": "abuse_ch"
        }
    ],
    "3817808": [
        {
            "dateadded": "2026-04-13 13:14:12 UTC",
            "url": "https://refundonex.com/cloud/form_62775.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817808/",
            "reporter": "abuse_ch"
        }
    ],
    "3817809": [
        {
            "dateadded": "2026-04-13 13:14:12 UTC",
            "url": "https://refundonex.com/cloud/form_56403.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817809/",
            "reporter": "abuse_ch"
        }
    ],
    "3817801": [
        {
            "dateadded": "2026-04-13 13:14:11 UTC",
            "url": "https://refundonex.com/cloud/form_12110.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817801/",
            "reporter": "abuse_ch"
        }
    ],
    "3817802": [
        {
            "dateadded": "2026-04-13 13:14:11 UTC",
            "url": "https://refundonex.com/cloud/form_04811.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817802/",
            "reporter": "abuse_ch"
        }
    ],
    "3817803": [
        {
            "dateadded": "2026-04-13 13:14:11 UTC",
            "url": "https://refundonex.com/cloud/form_37248.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817803/",
            "reporter": "abuse_ch"
        }
    ],
    "3817804": [
        {
            "dateadded": "2026-04-13 13:14:11 UTC",
            "url": "https://refundonex.com/cloud/form_07693.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817804/",
            "reporter": "abuse_ch"
        }
    ],
    "3817805": [
        {
            "dateadded": "2026-04-13 13:14:11 UTC",
            "url": "https://refundonex.com/cloud/form_38374.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817805/",
            "reporter": "abuse_ch"
        }
    ],
    "3817800": [
        {
            "dateadded": "2026-04-13 13:14:10 UTC",
            "url": "https://refundonex.com/cloud/form_06585.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817800/",
            "reporter": "abuse_ch"
        }
    ],
    "3817792": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_20786.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817792/",
            "reporter": "abuse_ch"
        }
    ],
    "3817793": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_33091.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817793/",
            "reporter": "abuse_ch"
        }
    ],
    "3817794": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_79569.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817794/",
            "reporter": "abuse_ch"
        }
    ],
    "3817795": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_69452.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817795/",
            "reporter": "abuse_ch"
        }
    ],
    "3817796": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_33122.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:09:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817796/",
            "reporter": "abuse_ch"
        }
    ],
    "3817797": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_61449.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817797/",
            "reporter": "abuse_ch"
        }
    ],
    "3817798": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_06716.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817798/",
            "reporter": "abuse_ch"
        }
    ],
    "3817799": [
        {
            "dateadded": "2026-04-13 13:14:09 UTC",
            "url": "https://refundonex.com/cloud/form_02839.pdf.ps1",
            "url_status": "offline",
            "last_online": "2026-04-13 13:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817799/",
            "reporter": "abuse_ch"
        }
    ],
    "3817791": [
        {
            "dateadded": "2026-04-13 13:13:14 UTC",
            "url": "https://refundonex.com/cloud/form_99131.pdf.vbs",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "vbs"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817791/",
            "reporter": "abuse_ch"
        }
    ],
    "3817790": [
        {
            "dateadded": "2026-04-13 13:13:12 UTC",
            "url": "http://115.55.130.75:44466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:04:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817790/",
            "reporter": "geenensp"
        }
    ],
    "3817789": [
        {
            "dateadded": "2026-04-13 13:11:11 UTC",
            "url": "https://form4t4-mount.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817789/",
            "reporter": "anonymous"
        }
    ],
    "3817788": [
        {
            "dateadded": "2026-04-13 13:10:15 UTC",
            "url": "https://pub-0a6599d7d6394e379b6da3d6bfb5354a.r2.dev/nenkin.msi",
            "url_status": "offline",
            "last_online": "2026-04-13 13:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817788/",
            "reporter": "abuse_ch"
        }
    ],
    "3817787": [
        {
            "dateadded": "2026-04-13 13:09:12 UTC",
            "url": "http://valfanto.com/img_080646dbnewvps.png",
            "url_status": "offline",
            "last_online": "2026-04-17 01:19:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817787/",
            "reporter": "abuse_ch"
        }
    ],
    "3817786": [
        {
            "dateadded": "2026-04-13 13:09:09 UTC",
            "url": "http://valfanto.com/optimized_MSInewtoo.png",
            "url_status": "offline",
            "last_online": "2026-04-15 22:37:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817786/",
            "reporter": "abuse_ch"
        }
    ],
    "3817785": [
        {
            "dateadded": "2026-04-13 13:09:08 UTC",
            "url": "http://teslasuit.to/yunew.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817785/",
            "reporter": "abuse_ch"
        }
    ],
    "3817784": [
        {
            "dateadded": "2026-04-13 13:09:05 UTC",
            "url": "http://teslasuit.to/optimized_MSIforyu.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817784/",
            "reporter": "abuse_ch"
        }
    ],
    "3817783": [
        {
            "dateadded": "2026-04-13 13:08:18 UTC",
            "url": "http://115.56.99.251:39980/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 17:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817783/",
            "reporter": "geenensp"
        }
    ],
    "3817782": [
        {
            "dateadded": "2026-04-13 13:07:19 UTC",
            "url": "http://105.184.105.39:37173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817782/",
            "reporter": "geenensp"
        }
    ],
    "3817781": [
        {
            "dateadded": "2026-04-13 13:06:18 UTC",
            "url": "https://biom9-hinge.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817781/",
            "reporter": "anonymous"
        }
    ],
    "3817780": [
        {
            "dateadded": "2026-04-13 13:01:08 UTC",
            "url": "https://genorne-watch.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 13:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817780/",
            "reporter": "anonymous"
        }
    ],
    "3817779": [
        {
            "dateadded": "2026-04-13 12:59:10 UTC",
            "url": "https://www.dropbox.com/scl/fi/6sd0a0od839wwehcndldi/Merluis-Setup-2.0.0.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                " BYOR",
                " discord-scam",
                " fake-game",
                " infostealer",
                " rat",
                "ZKM-Stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817779/",
            "reporter": "Omaha"
        }
    ],
    "3817778": [
        {
            "dateadded": "2026-04-13 12:58:18 UTC",
            "url": "http://182.116.123.29:57324/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:10:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817778/",
            "reporter": "geenensp"
        }
    ],
    "3817777": [
        {
            "dateadded": "2026-04-13 12:54:09 UTC",
            "url": "https://alt-br4ve.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817777/",
            "reporter": "anonymous"
        }
    ],
    "3817776": [
        {
            "dateadded": "2026-04-13 12:50:10 UTC",
            "url": "https://ly12yqh.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817776/",
            "reporter": "anonymous"
        }
    ],
    "3817774": [
        {
            "dateadded": "2026-04-13 12:48:06 UTC",
            "url": "http://196.251.107.104/crypted_x64.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817774/",
            "reporter": "abuse_ch"
        }
    ],
    "3817775": [
        {
            "dateadded": "2026-04-13 12:48:06 UTC",
            "url": "http://196.251.107.104/10.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817775/",
            "reporter": "abuse_ch"
        }
    ],
    "3817773": [
        {
            "dateadded": "2026-04-13 12:46:11 UTC",
            "url": "https://keldraon.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817773/",
            "reporter": "anonymous"
        }
    ],
    "3817772": [
        {
            "dateadded": "2026-04-13 12:45:20 UTC",
            "url": "http://119.180.15.35:60517/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817772/",
            "reporter": "geenensp"
        }
    ],
    "3817770": [
        {
            "dateadded": "2026-04-13 12:42:08 UTC",
            "url": "http://62.60.226.159/ptp.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 17:03:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817770/",
            "reporter": "abuse_ch"
        }
    ],
    "3817771": [
        {
            "dateadded": "2026-04-13 12:42:08 UTC",
            "url": "http://62.60.226.159/inkrog.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 18:18:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817771/",
            "reporter": "abuse_ch"
        }
    ],
    "3817769": [
        {
            "dateadded": "2026-04-13 12:42:07 UTC",
            "url": "http://62.60.226.159/clpr2.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 18:19:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817769/",
            "reporter": "abuse_ch"
        }
    ],
    "3817768": [
        {
            "dateadded": "2026-04-13 12:40:18 UTC",
            "url": "http://182.123.235.81:40133/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817768/",
            "reporter": "geenensp"
        }
    ],
    "3817767": [
        {
            "dateadded": "2026-04-13 12:39:08 UTC",
            "url": "http://42.179.152.194:37784/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817767/",
            "reporter": "geenensp"
        }
    ],
    "3817766": [
        {
            "dateadded": "2026-04-13 12:37:11 UTC",
            "url": "https://subtlemark.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817766/",
            "reporter": "anonymous"
        }
    ],
    "3817765": [
        {
            "dateadded": "2026-04-13 12:35:10 UTC",
            "url": "http://42.225.205.192:44857/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817765/",
            "reporter": "geenensp"
        }
    ],
    "3817764": [
        {
            "dateadded": "2026-04-13 12:33:27 UTC",
            "url": "http://loejfrw2.ignorelist.com/Mont.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817764/",
            "reporter": "abuse_ch"
        }
    ],
    "3817763": [
        {
            "dateadded": "2026-04-13 12:33:15 UTC",
            "url": "http://loejfrw2.ignorelist.com/opt/adm/lct/ssad4edD!4d.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 23:24:30 UTC",
            "threat": "malware_download",
            "tags": [
                "DarkVisionRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817763/",
            "reporter": "abuse_ch"
        }
    ],
    "3817762": [
        {
            "dateadded": "2026-04-13 12:33:12 UTC",
            "url": "http://loejfrw2.ignorelist.com/opt/adm/lct/shjef2aVFDe.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 23:27:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817762/",
            "reporter": "abuse_ch"
        }
    ],
    "3817760": [
        {
            "dateadded": "2026-04-13 12:33:09 UTC",
            "url": "http://loejfrw2.ignorelist.com/opt/adm/lct/WinHos32.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817760/",
            "reporter": "abuse_ch"
        }
    ],
    "3817761": [
        {
            "dateadded": "2026-04-13 12:33:09 UTC",
            "url": "http://loejfrw2.ignorelist.com/opt/adm/lct/Mont.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817761/",
            "reporter": "abuse_ch"
        }
    ],
    "3817759": [
        {
            "dateadded": "2026-04-13 12:33:07 UTC",
            "url": "http://loejfrw2.ignorelist.com/HotlifyCracked.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817759/",
            "reporter": "abuse_ch"
        }
    ],
    "3817758": [
        {
            "dateadded": "2026-04-13 12:24:13 UTC",
            "url": "https://ertfu9pm.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817758/",
            "reporter": "anonymous"
        }
    ],
    "3817757": [
        {
            "dateadded": "2026-04-13 12:23:17 UTC",
            "url": "http://182.116.123.29:57324/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:17:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817757/",
            "reporter": "geenensp"
        }
    ],
    "3817756": [
        {
            "dateadded": "2026-04-13 12:20:10 UTC",
            "url": "http://38.49.217.42/lk/bhaikEcn191.bin",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:19 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817756/",
            "reporter": "abuse_ch"
        }
    ],
    "3817755": [
        {
            "dateadded": "2026-04-13 12:16:11 UTC",
            "url": "https://mermeshar9.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817755/",
            "reporter": "anonymous"
        }
    ],
    "3817754": [
        {
            "dateadded": "2026-04-13 12:11:05 UTC",
            "url": "http://85.239.147.6/files/8079848160/OsnAGaf.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817754/",
            "reporter": "c2hunter"
        }
    ],
    "3817753": [
        {
            "dateadded": "2026-04-13 12:09:44 UTC",
            "url": "https://adobeready.online/zip/download.php?file=original_payload.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 12:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817753/",
            "reporter": "abuse_ch"
        }
    ],
    "3817752": [
        {
            "dateadded": "2026-04-13 12:09:13 UTC",
            "url": "https://gatewa1-wave.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817752/",
            "reporter": "anonymous"
        }
    ],
    "3817751": [
        {
            "dateadded": "2026-04-13 12:07:12 UTC",
            "url": "http://36.71.28.128:48624/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:23:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817751/",
            "reporter": "geenensp"
        }
    ],
    "3817750": [
        {
            "dateadded": "2026-04-13 12:05:19 UTC",
            "url": "http://123.189.183.150:60468/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:42:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817750/",
            "reporter": "geenensp"
        }
    ],
    "3817749": [
        {
            "dateadded": "2026-04-13 12:03:23 UTC",
            "url": "http://36.71.28.128:48624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817749/",
            "reporter": "geenensp"
        }
    ],
    "3817748": [
        {
            "dateadded": "2026-04-13 12:02:15 UTC",
            "url": "http://42.225.205.192:44857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 10:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817748/",
            "reporter": "geenensp"
        }
    ],
    "3817747": [
        {
            "dateadded": "2026-04-13 12:02:10 UTC",
            "url": "http://125.41.227.60:50168/i",
            "url_status": "offline",
            "last_online": "2026-04-13 12:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817747/",
            "reporter": "geenensp"
        }
    ],
    "3817746": [
        {
            "dateadded": "2026-04-13 12:02:07 UTC",
            "url": "https://94auswsb.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 12:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817746/",
            "reporter": "anonymous"
        }
    ],
    "3817745": [
        {
            "dateadded": "2026-04-13 11:58:10 UTC",
            "url": "http://115.49.64.55:45537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 04:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817745/",
            "reporter": "geenensp"
        }
    ],
    "3817744": [
        {
            "dateadded": "2026-04-13 11:54:11 UTC",
            "url": "https://nimblcave.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817744/",
            "reporter": "anonymous"
        }
    ],
    "3817743": [
        {
            "dateadded": "2026-04-13 11:46:19 UTC",
            "url": "https://5tud1-zone.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:46:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817743/",
            "reporter": "anonymous"
        }
    ],
    "3817742": [
        {
            "dateadded": "2026-04-13 11:42:21 UTC",
            "url": "http://175.148.82.99:55571/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817742/",
            "reporter": "geenensp"
        }
    ],
    "3817741": [
        {
            "dateadded": "2026-04-13 11:41:10 UTC",
            "url": "http://60.23.239.249:57064/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817741/",
            "reporter": "geenensp"
        }
    ],
    "3817740": [
        {
            "dateadded": "2026-04-13 11:39:13 UTC",
            "url": "https://zzqm.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817740/",
            "reporter": "anonymous"
        }
    ],
    "3817739": [
        {
            "dateadded": "2026-04-13 11:39:12 UTC",
            "url": "http://27.215.182.169:48355/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817739/",
            "reporter": "geenensp"
        }
    ],
    "3817738": [
        {
            "dateadded": "2026-04-13 11:37:22 UTC",
            "url": "http://123.189.183.150:60468/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 18:02:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817738/",
            "reporter": "geenensp"
        }
    ],
    "3817737": [
        {
            "dateadded": "2026-04-13 11:34:21 UTC",
            "url": "http://42.224.190.222:39404/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817737/",
            "reporter": "geenensp"
        }
    ],
    "3817736": [
        {
            "dateadded": "2026-04-13 11:32:20 UTC",
            "url": "http://125.41.227.60:50168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817736/",
            "reporter": "geenensp"
        }
    ],
    "3817735": [
        {
            "dateadded": "2026-04-13 11:30:16 UTC",
            "url": "https://ynykxz.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817735/",
            "reporter": "anonymous"
        }
    ],
    "3817734": [
        {
            "dateadded": "2026-04-13 11:23:08 UTC",
            "url": "https://dhcy36nr.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817734/",
            "reporter": "anonymous"
        }
    ],
    "3817733": [
        {
            "dateadded": "2026-04-13 11:17:09 UTC",
            "url": "https://royalvita.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817733/",
            "reporter": "anonymous"
        }
    ],
    "3817732": [
        {
            "dateadded": "2026-04-13 11:14:20 UTC",
            "url": "http://27.215.182.169:48355/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:30:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817732/",
            "reporter": "geenensp"
        }
    ],
    "3817731": [
        {
            "dateadded": "2026-04-13 11:08:12 UTC",
            "url": "https://rnatr1-branch.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817731/",
            "reporter": "anonymous"
        }
    ],
    "3817730": [
        {
            "dateadded": "2026-04-13 11:06:19 UTC",
            "url": "http://125.47.87.242:44666/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:47:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817730/",
            "reporter": "geenensp"
        }
    ],
    "3817729": [
        {
            "dateadded": "2026-04-13 11:05:22 UTC",
            "url": "http://115.57.9.228:60737/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817729/",
            "reporter": "geenensp"
        }
    ],
    "3817728": [
        {
            "dateadded": "2026-04-13 11:02:24 UTC",
            "url": "http://221.15.255.153:45388/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:03:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817728/",
            "reporter": "geenensp"
        }
    ],
    "3817727": [
        {
            "dateadded": "2026-04-13 11:01:20 UTC",
            "url": "https://deliveryquant.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 11:01:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817727/",
            "reporter": "anonymous"
        }
    ],
    "3817726": [
        {
            "dateadded": "2026-04-13 10:58:11 UTC",
            "url": "https://main-gate.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817726/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817725": [
        {
            "dateadded": "2026-04-13 10:57:13 UTC",
            "url": "https://land-node.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817725/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817724": [
        {
            "dateadded": "2026-04-13 10:57:10 UTC",
            "url": "https://grain-log.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:22:26 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817724/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817722": [
        {
            "dateadded": "2026-04-13 10:57:05 UTC",
            "url": "https://flux-svc.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817722/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817723": [
        {
            "dateadded": "2026-04-13 10:57:05 UTC",
            "url": "http://85.239.147.6/files/8405865752/I0mTjOf.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817723/",
            "reporter": "Bitsight"
        }
    ],
    "3817718": [
        {
            "dateadded": "2026-04-13 10:56:17 UTC",
            "url": "https://point-gate.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817718/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817719": [
        {
            "dateadded": "2026-04-13 10:56:17 UTC",
            "url": "https://vector-svc.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817719/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817720": [
        {
            "dateadded": "2026-04-13 10:56:17 UTC",
            "url": "https://farm-api.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817720/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817721": [
        {
            "dateadded": "2026-04-13 10:56:17 UTC",
            "url": "https://unit-hub.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817721/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817717": [
        {
            "dateadded": "2026-04-13 10:56:16 UTC",
            "url": "https://cell-vault.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817717/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817715": [
        {
            "dateadded": "2026-04-13 10:56:13 UTC",
            "url": "https://sphere-api.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:57:59 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817715/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817716": [
        {
            "dateadded": "2026-04-13 10:56:13 UTC",
            "url": "https://grow-vault.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:08:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817716/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817714": [
        {
            "dateadded": "2026-04-13 10:56:12 UTC",
            "url": "https://base-svc.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:48:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817714/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817713": [
        {
            "dateadded": "2026-04-13 10:56:11 UTC",
            "url": "https://space-node.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:28:25 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817713/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817712": [
        {
            "dateadded": "2026-04-13 10:56:09 UTC",
            "url": "https://world-api.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:45:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817712/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817711": [
        {
            "dateadded": "2026-04-13 10:56:05 UTC",
            "url": "http://logic-gate.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817711/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817710": [
        {
            "dateadded": "2026-04-13 10:55:23 UTC",
            "url": "https://thesis-log.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:23 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817710/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817708": [
        {
            "dateadded": "2026-04-13 10:55:22 UTC",
            "url": "https://vector-api.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:22 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817708/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817709": [
        {
            "dateadded": "2026-04-13 10:55:22 UTC",
            "url": "https://grid-core.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:22 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817709/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817707": [
        {
            "dateadded": "2026-04-13 10:55:21 UTC",
            "url": "https://thought-api.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:21 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817707/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817706": [
        {
            "dateadded": "2026-04-13 10:55:18 UTC",
            "url": "https://soil-hub.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:18 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817706/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817704": [
        {
            "dateadded": "2026-04-13 10:55:15 UTC",
            "url": "https://sphere-node.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817704/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817705": [
        {
            "dateadded": "2026-04-13 10:55:15 UTC",
            "url": "https://view-svc.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817705/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817703": [
        {
            "dateadded": "2026-04-13 10:55:12 UTC",
            "url": "http://model-node.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817703/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817701": [
        {
            "dateadded": "2026-04-13 10:54:13 UTC",
            "url": "https://quormeshos3.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817701/",
            "reporter": "anonymous"
        }
    ],
    "3817702": [
        {
            "dateadded": "2026-04-13 10:54:13 UTC",
            "url": "https://debate-hub.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817702/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817700": [
        {
            "dateadded": "2026-04-13 10:54:12 UTC",
            "url": "https://root-gate.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817700/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817697": [
        {
            "dateadded": "2026-04-13 10:54:10 UTC",
            "url": "https://flow-data.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817697/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817698": [
        {
            "dateadded": "2026-04-13 10:54:10 UTC",
            "url": "https://mind-sync.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817698/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817699": [
        {
            "dateadded": "2026-04-13 10:54:10 UTC",
            "url": "https://crop-api.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817699/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817696": [
        {
            "dateadded": "2026-04-13 10:54:06 UTC",
            "url": "http://theory-svc.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817696/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817695": [
        {
            "dateadded": "2026-04-13 10:53:32 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817695/",
            "reporter": "abuse_ch"
        }
    ],
    "3817694": [
        {
            "dateadded": "2026-04-13 10:53:22 UTC",
            "url": "https://brain-gate.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:53:22 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817694/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817693": [
        {
            "dateadded": "2026-04-13 10:53:21 UTC",
            "url": "http://196.251.107.133/bins/arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817693/",
            "reporter": "abuse_ch"
        }
    ],
    "3817692": [
        {
            "dateadded": "2026-04-13 10:53:20 UTC",
            "url": "https://store-vault.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:53:20 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817692/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817683": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817683/",
            "reporter": "abuse_ch"
        }
    ],
    "3817684": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817684/",
            "reporter": "abuse_ch"
        }
    ],
    "3817685": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817685/",
            "reporter": "abuse_ch"
        }
    ],
    "3817686": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817686/",
            "reporter": "abuse_ch"
        }
    ],
    "3817687": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817687/",
            "reporter": "abuse_ch"
        }
    ],
    "3817688": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817688/",
            "reporter": "abuse_ch"
        }
    ],
    "3817689": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817689/",
            "reporter": "abuse_ch"
        }
    ],
    "3817690": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817690/",
            "reporter": "abuse_ch"
        }
    ],
    "3817691": [
        {
            "dateadded": "2026-04-13 10:53:19 UTC",
            "url": "http://196.251.107.133/bins/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817691/",
            "reporter": "abuse_ch"
        }
    ],
    "3817682": [
        {
            "dateadded": "2026-04-13 10:53:17 UTC",
            "url": "https://engine-api.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:59:38 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817682/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817681": [
        {
            "dateadded": "2026-04-13 10:53:16 UTC",
            "url": "http://point-hub.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817681/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817680": [
        {
            "dateadded": "2026-04-13 10:53:13 UTC",
            "url": "https://sense-log.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 18:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817680/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817679": [
        {
            "dateadded": "2026-04-13 10:53:12 UTC",
            "url": "http://view-vault.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817679/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817678": [
        {
            "dateadded": "2026-04-13 10:52:21 UTC",
            "url": "https://hub-gate.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:21 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817678/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817677": [
        {
            "dateadded": "2026-04-13 10:52:20 UTC",
            "url": "http://61.52.42.192:51568/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:27:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817677/",
            "reporter": "geenensp"
        }
    ],
    "3817675": [
        {
            "dateadded": "2026-04-13 10:52:19 UTC",
            "url": "https://order-svc.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:19 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817675/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817676": [
        {
            "dateadded": "2026-04-13 10:52:19 UTC",
            "url": "https://pure-svc.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:19 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817676/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817674": [
        {
            "dateadded": "2026-04-13 10:52:18 UTC",
            "url": "https://global-io.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:18 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817674/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817673": [
        {
            "dateadded": "2026-04-13 10:52:17 UTC",
            "url": "https://trade-svc.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817673/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817672": [
        {
            "dateadded": "2026-04-13 10:52:14 UTC",
            "url": "https://mind-sync.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817672/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817671": [
        {
            "dateadded": "2026-04-13 10:52:12 UTC",
            "url": "https://core-hub.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817671/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817670": [
        {
            "dateadded": "2026-04-13 10:52:11 UTC",
            "url": "http://space-gate.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817670/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817669": [
        {
            "dateadded": "2026-04-13 10:51:13 UTC",
            "url": "https://logic-vault.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817669/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817667": [
        {
            "dateadded": "2026-04-13 10:51:12 UTC",
            "url": "https://talk-node.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817667/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817668": [
        {
            "dateadded": "2026-04-13 10:51:12 UTC",
            "url": "https://think-node.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817668/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817666": [
        {
            "dateadded": "2026-04-13 10:46:12 UTC",
            "url": "https://zenforgeix.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817666/",
            "reporter": "anonymous"
        }
    ],
    "3817665": [
        {
            "dateadded": "2026-04-13 10:43:17 UTC",
            "url": "http://42.233.106.8:47882/i",
            "url_status": "offline",
            "last_online": "2026-04-14 20:02:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817665/",
            "reporter": "geenensp"
        }
    ],
    "3817664": [
        {
            "dateadded": "2026-04-13 10:40:20 UTC",
            "url": "http://182.117.41.179:49897/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817664/",
            "reporter": "geenensp"
        }
    ],
    "3817663": [
        {
            "dateadded": "2026-04-13 10:38:20 UTC",
            "url": "https://patterndelivery.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817663/",
            "reporter": "anonymous"
        }
    ],
    "3817662": [
        {
            "dateadded": "2026-04-13 10:37:11 UTC",
            "url": "http://125.47.87.242:44666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 04:08:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817662/",
            "reporter": "geenensp"
        }
    ],
    "3817661": [
        {
            "dateadded": "2026-04-13 10:36:23 UTC",
            "url": "http://115.57.9.228:60737/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:36:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817661/",
            "reporter": "geenensp"
        }
    ],
    "3817659": [
        {
            "dateadded": "2026-04-13 10:30:16 UTC",
            "url": "https://cg892665.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817659/",
            "reporter": "anonymous"
        }
    ],
    "3817660": [
        {
            "dateadded": "2026-04-13 10:30:16 UTC",
            "url": "http://221.15.255.153:45388/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817660/",
            "reporter": "geenensp"
        }
    ],
    "3817658": [
        {
            "dateadded": "2026-04-13 10:27:16 UTC",
            "url": "http://61.52.42.192:51568/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817658/",
            "reporter": "geenensp"
        }
    ],
    "3817657": [
        {
            "dateadded": "2026-04-13 10:23:11 UTC",
            "url": "https://aliglagoo.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817657/",
            "reporter": "anonymous"
        }
    ],
    "3817656": [
        {
            "dateadded": "2026-04-13 10:15:18 UTC",
            "url": "https://mer-draex.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817656/",
            "reporter": "anonymous"
        }
    ],
    "3817655": [
        {
            "dateadded": "2026-04-13 10:08:13 UTC",
            "url": "https://pars-packe.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817655/",
            "reporter": "anonymous"
        }
    ],
    "3817654": [
        {
            "dateadded": "2026-04-13 10:04:21 UTC",
            "url": "http://103.147.137.35:46748/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:29:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817654/",
            "reporter": "geenensp"
        }
    ],
    "3817653": [
        {
            "dateadded": "2026-04-13 09:59:13 UTC",
            "url": "https://00zk7cis.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 18:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817653/",
            "reporter": "anonymous"
        }
    ],
    "3817652": [
        {
            "dateadded": "2026-04-13 09:59:09 UTC",
            "url": "https://rule-node.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 20:09:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817652/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817651": [
        {
            "dateadded": "2026-04-13 09:58:17 UTC",
            "url": "https://root-svc.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817651/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817650": [
        {
            "dateadded": "2026-04-13 09:58:15 UTC",
            "url": "https://data-api.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817650/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817649": [
        {
            "dateadded": "2026-04-13 09:58:13 UTC",
            "url": "https://matrix-flow.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817649/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817648": [
        {
            "dateadded": "2026-04-13 09:58:11 UTC",
            "url": "https://shift-node.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817648/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817647": [
        {
            "dateadded": "2026-04-13 09:58:10 UTC",
            "url": "https://link-gate.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817647/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817646": [
        {
            "dateadded": "2026-04-13 09:58:09 UTC",
            "url": "https://stream-svc.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817646/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817645": [
        {
            "dateadded": "2026-04-13 09:58:08 UTC",
            "url": "https://main-hub.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817645/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817643": [
        {
            "dateadded": "2026-04-13 09:57:15 UTC",
            "url": "https://trust-gate.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817643/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817644": [
        {
            "dateadded": "2026-04-13 09:57:15 UTC",
            "url": "https://pay-svc.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817644/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817642": [
        {
            "dateadded": "2026-04-13 09:57:09 UTC",
            "url": "https://map-log.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:09:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817642/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817641": [
        {
            "dateadded": "2026-04-13 09:57:08 UTC",
            "url": "https://shift-svc.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 20:06:00 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817641/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817640": [
        {
            "dateadded": "2026-04-13 09:57:06 UTC",
            "url": "http://thesis-vault.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817640/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817639": [
        {
            "dateadded": "2026-04-13 09:56:17 UTC",
            "url": "https://layer-io.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817639/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817638": [
        {
            "dateadded": "2026-04-13 09:56:13 UTC",
            "url": "https://space-gate.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817638/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817637": [
        {
            "dateadded": "2026-04-13 09:56:09 UTC",
            "url": "https://theory-svc.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817637/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817636": [
        {
            "dateadded": "2026-04-13 09:55:14 UTC",
            "url": "https://point-hub.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:09:58 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817636/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817635": [
        {
            "dateadded": "2026-04-13 09:55:13 UTC",
            "url": "https://mind-hub.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817635/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817634": [
        {
            "dateadded": "2026-04-13 09:54:17 UTC",
            "url": "https://rep4-signal.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817634/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817633": [
        {
            "dateadded": "2026-04-13 09:54:12 UTC",
            "url": "https://velmarkis.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 18:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817633/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817632": [
        {
            "dateadded": "2026-04-13 09:54:08 UTC",
            "url": "https://matrix-vault.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 18:51:57 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817632/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817631": [
        {
            "dateadded": "2026-04-13 09:53:17 UTC",
            "url": "https://safe-vault.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817631/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817629": [
        {
            "dateadded": "2026-04-13 09:53:10 UTC",
            "url": "https://entity-node.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 10:07:02 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817629/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817630": [
        {
            "dateadded": "2026-04-13 09:53:10 UTC",
            "url": "https://model-node.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817630/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817628": [
        {
            "dateadded": "2026-04-13 09:53:08 UTC",
            "url": "https://cash-flow.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817628/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817627": [
        {
            "dateadded": "2026-04-13 09:53:07 UTC",
            "url": "https://view-vault.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817627/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817626": [
        {
            "dateadded": "2026-04-13 09:52:20 UTC",
            "url": "https://loan-api.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817626/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817625": [
        {
            "dateadded": "2026-04-13 09:52:14 UTC",
            "url": "https://869n.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817625/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817624": [
        {
            "dateadded": "2026-04-13 09:52:10 UTC",
            "url": "https://bank-node.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-14 19:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817624/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817623": [
        {
            "dateadded": "2026-04-13 09:52:05 UTC",
            "url": "https://lumvalea.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817623/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817621": [
        {
            "dateadded": "2026-04-13 09:51:17 UTC",
            "url": "https://velvale7on.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:51:17 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817621/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817622": [
        {
            "dateadded": "2026-04-13 09:51:17 UTC",
            "url": "https://q6ivtu.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:51:17 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817622/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817620": [
        {
            "dateadded": "2026-04-13 09:51:16 UTC",
            "url": "http://alimqulov.uz/storage/buyruqlar/v1/NSM.lic",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817620/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817618": [
        {
            "dateadded": "2026-04-13 09:51:15 UTC",
            "url": "https://pwndrop.llcsintez-n.org/zKGorQDO/Built_Stub.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 09:51:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817618/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817619": [
        {
            "dateadded": "2026-04-13 09:51:15 UTC",
            "url": "https://pastefy.app/OJE0pV28/raw",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817619/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817617": [
        {
            "dateadded": "2026-04-13 09:51:13 UTC",
            "url": "http://alimqulov.uz/storage/buyruqlar/v1/client32.ini",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817617/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817616": [
        {
            "dateadded": "2026-04-13 09:51:12 UTC",
            "url": "http://dpaste.com/AMA5CXNLK.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817616/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817614": [
        {
            "dateadded": "2026-04-13 09:51:11 UTC",
            "url": "https://composerefine.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817614/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817615": [
        {
            "dateadded": "2026-04-13 09:51:11 UTC",
            "url": "https://pastefy.app/eKkAgMVM/raw",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817615/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817612": [
        {
            "dateadded": "2026-04-13 09:51:10 UTC",
            "url": "http://alimqulov.uz/storage/buyruqlar/v1/client32.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817612/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817613": [
        {
            "dateadded": "2026-04-13 09:51:10 UTC",
            "url": "https://jxoov.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/",
            "url_status": "offline",
            "last_online": "2026-04-13 09:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817613/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817611": [
        {
            "dateadded": "2026-04-13 09:51:09 UTC",
            "url": "https://pastefy.app/CLQ4FHyf/raw",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817611/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817610": [
        {
            "dateadded": "2026-04-13 09:51:07 UTC",
            "url": "https://vp4psm.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 09:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817610/",
            "reporter": "anonymous"
        }
    ],
    "3817608": [
        {
            "dateadded": "2026-04-13 09:51:05 UTC",
            "url": "https://dpaste.com/AMA5CXNLK.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817608/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817609": [
        {
            "dateadded": "2026-04-13 09:51:05 UTC",
            "url": "https://dpaste.com/3VY69RY7J.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817609/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817607": [
        {
            "dateadded": "2026-04-13 09:50:16 UTC",
            "url": "https://ghanioilandgas.com/ghanioilandgas.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:19:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817607/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3817606": [
        {
            "dateadded": "2026-04-13 09:49:07 UTC",
            "url": "http://176.65.144.60/Psd8eZaW/Plugins/cred64.dll",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Amadey",
                "dll"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817606/",
            "reporter": "abuse_ch"
        }
    ],
    "3817605": [
        {
            "dateadded": "2026-04-13 09:44:09 UTC",
            "url": "https://qu0t6-trail.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 10:05:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817605/",
            "reporter": "anonymous"
        }
    ],
    "3817604": [
        {
            "dateadded": "2026-04-13 09:40:24 UTC",
            "url": "http://42.176.250.75:58181/i",
            "url_status": "offline",
            "last_online": "2026-04-16 13:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817604/",
            "reporter": "geenensp"
        }
    ],
    "3817603": [
        {
            "dateadded": "2026-04-13 09:37:16 UTC",
            "url": "https://iwiax.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 09:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817603/",
            "reporter": "anonymous"
        }
    ],
    "3817602": [
        {
            "dateadded": "2026-04-13 09:34:08 UTC",
            "url": "http://42.228.233.58:39587/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817602/",
            "reporter": "geenensp"
        }
    ],
    "3817601": [
        {
            "dateadded": "2026-04-13 09:29:16 UTC",
            "url": "http://61.54.204.202:38778/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817601/",
            "reporter": "geenensp"
        }
    ],
    "3817600": [
        {
            "dateadded": "2026-04-13 09:29:11 UTC",
            "url": "https://nimbl-sheet.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 09:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817600/",
            "reporter": "anonymous"
        }
    ],
    "3817599": [
        {
            "dateadded": "2026-04-13 09:22:11 UTC",
            "url": "http://42.224.125.141:60171/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:17:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817599/",
            "reporter": "geenensp"
        }
    ],
    "3817598": [
        {
            "dateadded": "2026-04-13 09:21:22 UTC",
            "url": "https://meta-trust3d.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 09:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817598/",
            "reporter": "anonymous"
        }
    ],
    "3817597": [
        {
            "dateadded": "2026-04-13 09:18:15 UTC",
            "url": "https://sfayxss.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 09:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817597/",
            "reporter": "anonymous"
        }
    ],
    "3817596": [
        {
            "dateadded": "2026-04-13 09:07:35 UTC",
            "url": "http://36.64.174.210:45719/i",
            "url_status": "offline",
            "last_online": "2026-04-13 09:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817596/",
            "reporter": "geenensp"
        }
    ],
    "3817595": [
        {
            "dateadded": "2026-04-13 09:06:07 UTC",
            "url": "http://175.174.76.212:39558/i",
            "url_status": "offline",
            "last_online": "2026-04-18 16:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817595/",
            "reporter": "geenensp"
        }
    ],
    "3817594": [
        {
            "dateadded": "2026-04-13 09:06:06 UTC",
            "url": "https://valeoptic.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 09:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817594/",
            "reporter": "anonymous"
        }
    ],
    "3817593": [
        {
            "dateadded": "2026-04-13 09:05:19 UTC",
            "url": "http://42.224.8.114:43027/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:48:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817593/",
            "reporter": "geenensp"
        }
    ],
    "3817592": [
        {
            "dateadded": "2026-04-13 09:02:19 UTC",
            "url": "http://61.54.204.202:38778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:20:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817592/",
            "reporter": "geenensp"
        }
    ],
    "3817591": [
        {
            "dateadded": "2026-04-13 09:01:18 UTC",
            "url": "http://42.180.13.85:45414/i",
            "url_status": "offline",
            "last_online": "2026-04-19 17:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817591/",
            "reporter": "geenensp"
        }
    ],
    "3817590": [
        {
            "dateadded": "2026-04-13 08:59:10 UTC",
            "url": "https://freightdat.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817590/",
            "reporter": "anonymous"
        }
    ],
    "3817589": [
        {
            "dateadded": "2026-04-13 08:54:20 UTC",
            "url": "http://42.224.125.141:60171/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:20:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817589/",
            "reporter": "geenensp"
        }
    ],
    "3817588": [
        {
            "dateadded": "2026-04-13 08:52:12 UTC",
            "url": "https://tp3gkrx.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817588/",
            "reporter": "anonymous"
        }
    ],
    "3817587": [
        {
            "dateadded": "2026-04-13 08:43:11 UTC",
            "url": "https://defend.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817587/",
            "reporter": "anonymous"
        }
    ],
    "3817586": [
        {
            "dateadded": "2026-04-13 08:39:15 UTC",
            "url": "https://beam.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817586/",
            "reporter": "anonymous"
        }
    ],
    "3817585": [
        {
            "dateadded": "2026-04-13 08:39:12 UTC",
            "url": "http://175.174.76.212:39558/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817585/",
            "reporter": "geenensp"
        }
    ],
    "3817584": [
        {
            "dateadded": "2026-04-13 08:39:10 UTC",
            "url": "http://94.244.36.34:48579/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817584/",
            "reporter": "geenensp"
        }
    ],
    "3817583": [
        {
            "dateadded": "2026-04-13 08:35:20 UTC",
            "url": "https://rende.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:35:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817583/",
            "reporter": "anonymous"
        }
    ],
    "3817582": [
        {
            "dateadded": "2026-04-13 08:29:20 UTC",
            "url": "http://119.126.120.31:54022/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817582/",
            "reporter": "geenensp"
        }
    ],
    "3817581": [
        {
            "dateadded": "2026-04-13 08:20:10 UTC",
            "url": "http://114.227.61.168:57443/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817581/",
            "reporter": "geenensp"
        }
    ],
    "3817580": [
        {
            "dateadded": "2026-04-13 08:14:18 UTC",
            "url": "http://61.137.202.1:55169/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817580/",
            "reporter": "geenensp"
        }
    ],
    "3817579": [
        {
            "dateadded": "2026-04-13 08:11:18 UTC",
            "url": "http://42.224.8.114:43027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:27:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817579/",
            "reporter": "geenensp"
        }
    ],
    "3817578": [
        {
            "dateadded": "2026-04-13 08:06:12 UTC",
            "url": "https://rende7-beam.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817578/",
            "reporter": "anonymous"
        }
    ],
    "3817577": [
        {
            "dateadded": "2026-04-13 08:00:12 UTC",
            "url": "https://solspireum.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 08:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817577/",
            "reporter": "anonymous"
        }
    ],
    "3817576": [
        {
            "dateadded": "2026-04-13 07:52:15 UTC",
            "url": "https://neo-r0ck.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 07:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817576/",
            "reporter": "anonymous"
        }
    ],
    "3817575": [
        {
            "dateadded": "2026-04-13 07:45:17 UTC",
            "url": "https://flamemanifest.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 07:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817575/",
            "reporter": "anonymous"
        }
    ],
    "3817574": [
        {
            "dateadded": "2026-04-13 07:42:18 UTC",
            "url": "http://115.49.2.184:58830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817574/",
            "reporter": "geenensp"
        }
    ],
    "3817572": [
        {
            "dateadded": "2026-04-13 07:41:18 UTC",
            "url": "http://222.138.117.14:55300/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 07:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817572/",
            "reporter": "geenensp"
        }
    ],
    "3817573": [
        {
            "dateadded": "2026-04-13 07:41:18 UTC",
            "url": "http://115.55.48.216:42702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:01:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817573/",
            "reporter": "geenensp"
        }
    ],
    "3817571": [
        {
            "dateadded": "2026-04-13 07:37:11 UTC",
            "url": "https://vivi3-watch.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 07:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817571/",
            "reporter": "anonymous"
        }
    ],
    "3817570": [
        {
            "dateadded": "2026-04-13 07:32:15 UTC",
            "url": "http://219.154.160.33:35575/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:00:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817570/",
            "reporter": "geenensp"
        }
    ],
    "3817569": [
        {
            "dateadded": "2026-04-13 07:29:14 UTC",
            "url": "https://trilith0en.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 07:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817569/",
            "reporter": "anonymous"
        }
    ],
    "3817568": [
        {
            "dateadded": "2026-04-13 07:21:08 UTC",
            "url": "https://bandwi-span.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 07:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817568/",
            "reporter": "anonymous"
        }
    ],
    "3817567": [
        {
            "dateadded": "2026-04-13 07:13:16 UTC",
            "url": "http://42.242.164.219:33668/i",
            "url_status": "offline",
            "last_online": "2026-04-15 18:58:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817567/",
            "reporter": "geenensp"
        }
    ],
    "3817566": [
        {
            "dateadded": "2026-04-13 07:13:14 UTC",
            "url": "https://w0rk3-wave.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 07:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817566/",
            "reporter": "anonymous"
        }
    ],
    "3817565": [
        {
            "dateadded": "2026-04-13 07:03:12 UTC",
            "url": "http://123.183.196.223:57863/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:53:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817565/",
            "reporter": "geenensp"
        }
    ],
    "3817564": [
        {
            "dateadded": "2026-04-13 07:03:08 UTC",
            "url": "http://123.11.168.250:58356/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:48:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817564/",
            "reporter": "geenensp"
        }
    ],
    "3817563": [
        {
            "dateadded": "2026-04-13 06:59:10 UTC",
            "url": "http://117.63.246.36:49016/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:24:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817563/",
            "reporter": "geenensp"
        }
    ],
    "3817562": [
        {
            "dateadded": "2026-04-13 06:56:11 UTC",
            "url": "http://119.126.120.31:54022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817562/",
            "reporter": "geenensp"
        }
    ],
    "3817561": [
        {
            "dateadded": "2026-04-13 06:50:08 UTC",
            "url": "https://lywetogx.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 06:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817561/",
            "reporter": "anonymous"
        }
    ],
    "3817560": [
        {
            "dateadded": "2026-04-13 06:46:10 UTC",
            "url": "http://61.52.197.8:53251/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:32:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817560/",
            "reporter": "geenensp"
        }
    ],
    "3817559": [
        {
            "dateadded": "2026-04-13 06:44:07 UTC",
            "url": "https://did8.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 06:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817559/",
            "reporter": "anonymous"
        }
    ],
    "3817558": [
        {
            "dateadded": "2026-04-13 06:38:17 UTC",
            "url": "http://110.37.117.225:35094/i",
            "url_status": "offline",
            "last_online": "2026-04-13 06:38:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817558/",
            "reporter": "geenensp"
        }
    ],
    "3817557": [
        {
            "dateadded": "2026-04-13 06:37:12 UTC",
            "url": "http://110.186.228.86:54618/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:21:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817557/",
            "reporter": "geenensp"
        }
    ],
    "3817556": [
        {
            "dateadded": "2026-04-13 06:35:10 UTC",
            "url": "https://buffmargi.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 06:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817556/",
            "reporter": "anonymous"
        }
    ],
    "3817555": [
        {
            "dateadded": "2026-04-13 06:28:10 UTC",
            "url": "https://zennexis.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 06:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817555/",
            "reporter": "anonymous"
        }
    ],
    "3817554": [
        {
            "dateadded": "2026-04-13 06:25:16 UTC",
            "url": "http://182.119.62.197:55213/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:58:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817554/",
            "reporter": "geenensp"
        }
    ],
    "3817553": [
        {
            "dateadded": "2026-04-13 06:18:16 UTC",
            "url": "http://117.63.246.36:49016/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:55:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817553/",
            "reporter": "geenensp"
        }
    ],
    "3817552": [
        {
            "dateadded": "2026-04-13 06:11:18 UTC",
            "url": "http://110.37.117.225:35094/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 06:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817552/",
            "reporter": "geenensp"
        }
    ],
    "3817551": [
        {
            "dateadded": "2026-04-13 06:08:13 UTC",
            "url": "http://27.219.14.111:38777/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:31:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817551/",
            "reporter": "geenensp"
        }
    ],
    "3817550": [
        {
            "dateadded": "2026-04-13 06:07:35 UTC",
            "url": "http://42.242.164.219:33668/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:00:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817550/",
            "reporter": "geenensp"
        }
    ],
    "3817549": [
        {
            "dateadded": "2026-04-13 06:07:17 UTC",
            "url": "http://110.37.1.162:58224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817549/",
            "reporter": "geenensp"
        }
    ],
    "3817548": [
        {
            "dateadded": "2026-04-13 06:04:07 UTC",
            "url": "https://runwspoo.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 06:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817548/",
            "reporter": "anonymous"
        }
    ],
    "3817547": [
        {
            "dateadded": "2026-04-13 06:02:09 UTC",
            "url": "http://42.224.103.137:38084/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:05:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817547/",
            "reporter": "geenensp"
        }
    ],
    "3817546": [
        {
            "dateadded": "2026-04-13 05:58:17 UTC",
            "url": "https://vmkzuhhq.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817546/",
            "reporter": "anonymous"
        }
    ],
    "3817545": [
        {
            "dateadded": "2026-04-13 05:54:13 UTC",
            "url": "http://222.79.195.189:52819/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817545/",
            "reporter": "geenensp"
        }
    ],
    "3817544": [
        {
            "dateadded": "2026-04-13 05:49:14 UTC",
            "url": "https://deliver4-mesh.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:49:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817544/",
            "reporter": "anonymous"
        }
    ],
    "3817543": [
        {
            "dateadded": "2026-04-13 05:48:20 UTC",
            "url": "http://27.210.144.124:37815/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:24:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817543/",
            "reporter": "geenensp"
        }
    ],
    "3817529": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817529/",
            "reporter": "adliwahid"
        }
    ],
    "3817530": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817530/",
            "reporter": "adliwahid"
        }
    ],
    "3817531": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817531/",
            "reporter": "adliwahid"
        }
    ],
    "3817532": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817532/",
            "reporter": "adliwahid"
        }
    ],
    "3817533": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817533/",
            "reporter": "adliwahid"
        }
    ],
    "3817534": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817534/",
            "reporter": "adliwahid"
        }
    ],
    "3817535": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817535/",
            "reporter": "adliwahid"
        }
    ],
    "3817536": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817536/",
            "reporter": "adliwahid"
        }
    ],
    "3817537": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817537/",
            "reporter": "adliwahid"
        }
    ],
    "3817538": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817538/",
            "reporter": "adliwahid"
        }
    ],
    "3817539": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817539/",
            "reporter": "adliwahid"
        }
    ],
    "3817540": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817540/",
            "reporter": "adliwahid"
        }
    ],
    "3817541": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817541/",
            "reporter": "adliwahid"
        }
    ],
    "3817542": [
        {
            "dateadded": "2026-04-13 05:44:21 UTC",
            "url": "http://139.59.231.32/Hammz/Hammz.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817542/",
            "reporter": "adliwahid"
        }
    ],
    "3817528": [
        {
            "dateadded": "2026-04-13 05:43:22 UTC",
            "url": "http://190.109.227.177:44025/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:12:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817528/",
            "reporter": "geenensp"
        }
    ],
    "3817527": [
        {
            "dateadded": "2026-04-13 05:42:12 UTC",
            "url": "https://pxedkzjn.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817527/",
            "reporter": "anonymous"
        }
    ],
    "3817526": [
        {
            "dateadded": "2026-04-13 05:41:20 UTC",
            "url": "http://27.219.14.111:38777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817526/",
            "reporter": "geenensp"
        }
    ],
    "3817525": [
        {
            "dateadded": "2026-04-13 05:38:14 UTC",
            "url": "http://115.49.2.184:58830/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:49:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817525/",
            "reporter": "geenensp"
        }
    ],
    "3817524": [
        {
            "dateadded": "2026-04-13 05:37:19 UTC",
            "url": "http://42.224.103.137:38084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 04:46:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817524/",
            "reporter": "geenensp"
        }
    ],
    "3817522": [
        {
            "dateadded": "2026-04-13 05:34:21 UTC",
            "url": "http://190.109.227.177:44025/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817522/",
            "reporter": "geenensp"
        }
    ],
    "3817523": [
        {
            "dateadded": "2026-04-13 05:34:21 UTC",
            "url": "http://182.123.235.81:40133/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817523/",
            "reporter": "geenensp"
        }
    ],
    "3817521": [
        {
            "dateadded": "2026-04-13 05:33:13 UTC",
            "url": "https://ygxq.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817521/",
            "reporter": "anonymous"
        }
    ],
    "3817520": [
        {
            "dateadded": "2026-04-13 05:33:12 UTC",
            "url": "http://182.119.62.197:55213/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817520/",
            "reporter": "geenensp"
        }
    ],
    "3817519": [
        {
            "dateadded": "2026-04-13 05:31:16 UTC",
            "url": "http://27.210.144.124:37815/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817519/",
            "reporter": "geenensp"
        }
    ],
    "3817518": [
        {
            "dateadded": "2026-04-13 05:26:14 UTC",
            "url": "https://lumnexa.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817518/",
            "reporter": "anonymous"
        }
    ],
    "3817517": [
        {
            "dateadded": "2026-04-13 05:21:19 UTC",
            "url": "http://115.55.197.113:40935/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817517/",
            "reporter": "geenensp"
        }
    ],
    "3817516": [
        {
            "dateadded": "2026-04-13 05:21:18 UTC",
            "url": "http://110.37.26.48:58182/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:21:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817516/",
            "reporter": "geenensp"
        }
    ],
    "3817515": [
        {
            "dateadded": "2026-04-13 05:19:09 UTC",
            "url": "https://71wxz.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817515/",
            "reporter": "anonymous"
        }
    ],
    "3817514": [
        {
            "dateadded": "2026-04-13 05:14:19 UTC",
            "url": "http://115.55.129.229:54199/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817514/",
            "reporter": "geenensp"
        }
    ],
    "3817513": [
        {
            "dateadded": "2026-04-13 05:11:13 UTC",
            "url": "https://wkodj.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817513/",
            "reporter": "anonymous"
        }
    ],
    "3817512": [
        {
            "dateadded": "2026-04-13 05:10:15 UTC",
            "url": "http://123.14.159.153:40022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817512/",
            "reporter": "geenensp"
        }
    ],
    "3817511": [
        {
            "dateadded": "2026-04-13 05:09:27 UTC",
            "url": "http://42.179.152.194:37784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:52:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817511/",
            "reporter": "geenensp"
        }
    ],
    "3817510": [
        {
            "dateadded": "2026-04-13 05:08:22 UTC",
            "url": "http://221.14.173.8:42365/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:08:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817510/",
            "reporter": "geenensp"
        }
    ],
    "3817509": [
        {
            "dateadded": "2026-04-13 05:04:11 UTC",
            "url": "https://dih0t.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 05:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817509/",
            "reporter": "anonymous"
        }
    ],
    "3817508": [
        {
            "dateadded": "2026-04-13 05:03:20 UTC",
            "url": "http://115.55.129.229:54199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 05:03:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817508/",
            "reporter": "geenensp"
        }
    ],
    "3817507": [
        {
            "dateadded": "2026-04-13 05:00:23 UTC",
            "url": "http://123.10.25.133:44346/i",
            "url_status": "offline",
            "last_online": "2026-04-14 16:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817507/",
            "reporter": "geenensp"
        }
    ],
    "3817506": [
        {
            "dateadded": "2026-04-13 04:59:08 UTC",
            "url": "http://110.37.26.48:58182/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817506/",
            "reporter": "geenensp"
        }
    ],
    "3817505": [
        {
            "dateadded": "2026-04-13 04:56:13 UTC",
            "url": "https://meta-tru5.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817505/",
            "reporter": "anonymous"
        }
    ],
    "3817503": [
        {
            "dateadded": "2026-04-13 04:54:19 UTC",
            "url": "http://182.119.69.230:34470/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:19:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817503/",
            "reporter": "geenensp"
        }
    ],
    "3817504": [
        {
            "dateadded": "2026-04-13 04:54:19 UTC",
            "url": "http://182.121.61.159:54517/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:03:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817504/",
            "reporter": "geenensp"
        }
    ],
    "3817502": [
        {
            "dateadded": "2026-04-13 04:48:21 UTC",
            "url": "http://61.52.197.8:53251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817502/",
            "reporter": "geenensp"
        }
    ],
    "3817501": [
        {
            "dateadded": "2026-04-13 04:48:13 UTC",
            "url": "https://nisjdefz.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817501/",
            "reporter": "anonymous"
        }
    ],
    "3817500": [
        {
            "dateadded": "2026-04-13 04:47:16 UTC",
            "url": "http://110.36.80.169:36365/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:22:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817500/",
            "reporter": "geenensp"
        }
    ],
    "3817499": [
        {
            "dateadded": "2026-04-13 04:41:20 UTC",
            "url": "http://221.14.173.8:42365/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817499/",
            "reporter": "geenensp"
        }
    ],
    "3817498": [
        {
            "dateadded": "2026-04-13 04:41:13 UTC",
            "url": "https://c0ysh.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817498/",
            "reporter": "anonymous"
        }
    ],
    "3817497": [
        {
            "dateadded": "2026-04-13 04:36:27 UTC",
            "url": "http://175.147.202.60:35666/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817497/",
            "reporter": "geenensp"
        }
    ],
    "3817496": [
        {
            "dateadded": "2026-04-13 04:34:21 UTC",
            "url": "http://182.119.69.230:34470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817496/",
            "reporter": "geenensp"
        }
    ],
    "3817495": [
        {
            "dateadded": "2026-04-13 04:32:12 UTC",
            "url": "https://x79h.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817495/",
            "reporter": "anonymous"
        }
    ],
    "3817494": [
        {
            "dateadded": "2026-04-13 04:30:18 UTC",
            "url": "https://vend0r-crest.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817494/",
            "reporter": "anonymous"
        }
    ],
    "3817493": [
        {
            "dateadded": "2026-04-13 04:26:18 UTC",
            "url": "http://182.121.61.159:54517/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817493/",
            "reporter": "geenensp"
        }
    ],
    "3817492": [
        {
            "dateadded": "2026-04-13 04:23:22 UTC",
            "url": "http://36.84.113.62:36160/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:50:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817492/",
            "reporter": "geenensp"
        }
    ],
    "3817491": [
        {
            "dateadded": "2026-04-13 04:17:15 UTC",
            "url": "https://15cqw.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817491/",
            "reporter": "anonymous"
        }
    ],
    "3817490": [
        {
            "dateadded": "2026-04-13 04:16:28 UTC",
            "url": "http://42.224.54.166:36078/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:50:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817490/",
            "reporter": "geenensp"
        }
    ],
    "3817489": [
        {
            "dateadded": "2026-04-13 04:14:19 UTC",
            "url": "http://125.45.40.209:53307/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:52:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817489/",
            "reporter": "geenensp"
        }
    ],
    "3817488": [
        {
            "dateadded": "2026-04-13 04:10:19 UTC",
            "url": "https://wolorch.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:10:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817488/",
            "reporter": "anonymous"
        }
    ],
    "3817487": [
        {
            "dateadded": "2026-04-13 04:08:11 UTC",
            "url": "http://112.248.187.57:51040/i",
            "url_status": "offline",
            "last_online": "2026-04-15 07:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817487/",
            "reporter": "geenensp"
        }
    ],
    "3817486": [
        {
            "dateadded": "2026-04-13 04:04:18 UTC",
            "url": "http://175.147.202.60:35666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817486/",
            "reporter": "geenensp"
        }
    ],
    "3817485": [
        {
            "dateadded": "2026-04-13 04:03:10 UTC",
            "url": "https://daernon-grid.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 04:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817485/",
            "reporter": "anonymous"
        }
    ],
    "3817484": [
        {
            "dateadded": "2026-04-13 03:55:11 UTC",
            "url": "https://cryeast.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817484/",
            "reporter": "anonymous"
        }
    ],
    "3817483": [
        {
            "dateadded": "2026-04-13 03:52:19 UTC",
            "url": "http://123.11.79.113:35702/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:45:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817483/",
            "reporter": "geenensp"
        }
    ],
    "3817482": [
        {
            "dateadded": "2026-04-13 03:51:18 UTC",
            "url": "http://110.36.80.169:36365/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817482/",
            "reporter": "geenensp"
        }
    ],
    "3817481": [
        {
            "dateadded": "2026-04-13 03:50:09 UTC",
            "url": "http://125.45.40.209:53307/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817481/",
            "reporter": "geenensp"
        }
    ],
    "3817480": [
        {
            "dateadded": "2026-04-13 03:47:46 UTC",
            "url": "http://112.248.187.57:51040/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817480/",
            "reporter": "geenensp"
        }
    ],
    "3817479": [
        {
            "dateadded": "2026-04-13 03:47:09 UTC",
            "url": "https://1707.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817479/",
            "reporter": "anonymous"
        }
    ],
    "3817478": [
        {
            "dateadded": "2026-04-13 03:45:18 UTC",
            "url": "http://200.59.83.65:45907/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:22:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817478/",
            "reporter": "geenensp"
        }
    ],
    "3817477": [
        {
            "dateadded": "2026-04-13 03:44:12 UTC",
            "url": "https://assetrid.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817477/",
            "reporter": "anonymous"
        }
    ],
    "3817476": [
        {
            "dateadded": "2026-04-13 03:32:08 UTC",
            "url": "https://vapb64us.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817476/",
            "reporter": "anonymous"
        }
    ],
    "3817475": [
        {
            "dateadded": "2026-04-13 03:31:08 UTC",
            "url": "http://123.11.79.113:35702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817475/",
            "reporter": "geenensp"
        }
    ],
    "3817474": [
        {
            "dateadded": "2026-04-13 03:30:10 UTC",
            "url": "https://toos.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817474/",
            "reporter": "anonymous"
        }
    ],
    "3817473": [
        {
            "dateadded": "2026-04-13 03:19:14 UTC",
            "url": "https://ultra-shall0w.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817473/",
            "reporter": "anonymous"
        }
    ],
    "3817472": [
        {
            "dateadded": "2026-04-13 03:14:19 UTC",
            "url": "http://42.229.239.191:37382/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:34:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817472/",
            "reporter": "geenensp"
        }
    ],
    "3817471": [
        {
            "dateadded": "2026-04-13 03:12:08 UTC",
            "url": "https://iqwo0.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817471/",
            "reporter": "anonymous"
        }
    ],
    "3817470": [
        {
            "dateadded": "2026-04-13 03:08:17 UTC",
            "url": "http://115.56.66.8:44451/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:46:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817470/",
            "reporter": "geenensp"
        }
    ],
    "3817469": [
        {
            "dateadded": "2026-04-13 03:05:12 UTC",
            "url": "https://3zowl.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 03:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817469/",
            "reporter": "anonymous"
        }
    ],
    "3817468": [
        {
            "dateadded": "2026-04-13 02:59:11 UTC",
            "url": "https://akkcq5.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817468/",
            "reporter": "anonymous"
        }
    ],
    "3817467": [
        {
            "dateadded": "2026-04-13 02:58:12 UTC",
            "url": "http://125.41.8.16:58154/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:59:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817467/",
            "reporter": "geenensp"
        }
    ],
    "3817466": [
        {
            "dateadded": "2026-04-13 02:52:08 UTC",
            "url": "https://payloastag.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817466/",
            "reporter": "anonymous"
        }
    ],
    "3817465": [
        {
            "dateadded": "2026-04-13 02:48:17 UTC",
            "url": "http://110.37.48.162:58636/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817465/",
            "reporter": "geenensp"
        }
    ],
    "3817464": [
        {
            "dateadded": "2026-04-13 02:46:17 UTC",
            "url": "http://125.47.226.157:49348/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:16:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817464/",
            "reporter": "geenensp"
        }
    ],
    "3817458": [
        {
            "dateadded": "2026-04-13 02:45:24 UTC",
            "url": "https://103.106.229.247/bins/ecryptfsd",
            "url_status": "offline",
            "last_online": "2026-04-14 10:55:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817458/",
            "reporter": "botnetkiller"
        }
    ],
    "3817459": [
        {
            "dateadded": "2026-04-13 02:45:24 UTC",
            "url": "https://103.106.229.247/bins/zswap_shrinkd",
            "url_status": "offline",
            "last_online": "2026-04-14 11:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817459/",
            "reporter": "botnetkiller"
        }
    ],
    "3817460": [
        {
            "dateadded": "2026-04-13 02:45:24 UTC",
            "url": "https://103.106.229.247/bins/rcuop_0",
            "url_status": "offline",
            "last_online": "2026-04-14 11:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817460/",
            "reporter": "botnetkiller"
        }
    ],
    "3817461": [
        {
            "dateadded": "2026-04-13 02:45:24 UTC",
            "url": "https://103.106.229.247/bins/kblockd0",
            "url_status": "offline",
            "last_online": "2026-04-14 10:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817461/",
            "reporter": "botnetkiller"
        }
    ],
    "3817462": [
        {
            "dateadded": "2026-04-13 02:45:24 UTC",
            "url": "https://103.106.229.247/bins/ksoftirqd0",
            "url_status": "offline",
            "last_online": "2026-04-14 10:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817462/",
            "reporter": "botnetkiller"
        }
    ],
    "3817463": [
        {
            "dateadded": "2026-04-13 02:45:24 UTC",
            "url": "https://103.106.229.247/bins/cfg80211d",
            "url_status": "offline",
            "last_online": "2026-04-14 10:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817463/",
            "reporter": "botnetkiller"
        }
    ],
    "3817457": [
        {
            "dateadded": "2026-04-13 02:45:14 UTC",
            "url": "https://103.106.229.247/bins/edac_polld",
            "url_status": "offline",
            "last_online": "2026-04-14 10:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817457/",
            "reporter": "botnetkiller"
        }
    ],
    "3817456": [
        {
            "dateadded": "2026-04-13 02:45:13 UTC",
            "url": "https://103.106.229.247/bins/bioset0",
            "url_status": "offline",
            "last_online": "2026-04-14 10:34:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817456/",
            "reporter": "botnetkiller"
        }
    ],
    "3817452": [
        {
            "dateadded": "2026-04-13 02:45:12 UTC",
            "url": "https://103.106.229.247/bins/jbd2_sda1d",
            "url_status": "offline",
            "last_online": "2026-04-14 11:01:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817452/",
            "reporter": "botnetkiller"
        }
    ],
    "3817453": [
        {
            "dateadded": "2026-04-13 02:45:12 UTC",
            "url": "https://103.106.229.247/bins/kswapd0",
            "url_status": "offline",
            "last_online": "2026-04-14 11:29:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817453/",
            "reporter": "botnetkiller"
        }
    ],
    "3817454": [
        {
            "dateadded": "2026-04-13 02:45:12 UTC",
            "url": "https://103.106.229.247/bins/devfreq_wq",
            "url_status": "offline",
            "last_online": "2026-04-14 11:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817454/",
            "reporter": "botnetkiller"
        }
    ],
    "3817455": [
        {
            "dateadded": "2026-04-13 02:45:12 UTC",
            "url": "https://103.106.229.247/bins/kworker_u8",
            "url_status": "offline",
            "last_online": "2026-04-14 11:00:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817455/",
            "reporter": "botnetkiller"
        }
    ],
    "3817451": [
        {
            "dateadded": "2026-04-13 02:45:08 UTC",
            "url": "https://39mx.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817451/",
            "reporter": "anonymous"
        }
    ],
    "3817450": [
        {
            "dateadded": "2026-04-13 02:40:14 UTC",
            "url": "https://ydiftfl.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817450/",
            "reporter": "anonymous"
        }
    ],
    "3817449": [
        {
            "dateadded": "2026-04-13 02:38:12 UTC",
            "url": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm5",
            "url_status": "offline",
            "last_online": "2026-04-13 16:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817449/",
            "reporter": "botnetkiller"
        }
    ],
    "3817447": [
        {
            "dateadded": "2026-04-13 02:37:15 UTC",
            "url": "http://204.76.203.168/ultron.arm7",
            "url_status": "offline",
            "last_online": "2026-04-13 16:27:37 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817447/",
            "reporter": "botnetkiller"
        }
    ],
    "3817448": [
        {
            "dateadded": "2026-04-13 02:37:15 UTC",
            "url": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm6",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817448/",
            "reporter": "botnetkiller"
        }
    ],
    "3817444": [
        {
            "dateadded": "2026-04-13 02:36:19 UTC",
            "url": "http://204.76.203.168.ptr.pfcloud.network/bj",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:53 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817444/",
            "reporter": "botnetkiller"
        }
    ],
    "3817445": [
        {
            "dateadded": "2026-04-13 02:36:19 UTC",
            "url": "http://204.76.203.168.ptr.pfcloud.network/ultron.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-13 16:59:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817445/",
            "reporter": "botnetkiller"
        }
    ],
    "3817446": [
        {
            "dateadded": "2026-04-13 02:36:19 UTC",
            "url": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm7",
            "url_status": "offline",
            "last_online": "2026-04-13 16:29:35 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817446/",
            "reporter": "botnetkiller"
        }
    ],
    "3817440": [
        {
            "dateadded": "2026-04-13 02:36:15 UTC",
            "url": "http://204.76.203.168/ultron.arm5",
            "url_status": "offline",
            "last_online": "2026-04-13 17:40:41 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817440/",
            "reporter": "botnetkiller"
        }
    ],
    "3817441": [
        {
            "dateadded": "2026-04-13 02:36:15 UTC",
            "url": "http://204.76.203.168/ultron.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-13 16:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mips",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817441/",
            "reporter": "botnetkiller"
        }
    ],
    "3817442": [
        {
            "dateadded": "2026-04-13 02:36:15 UTC",
            "url": "http://204.76.203.168/ultron.arm6",
            "url_status": "offline",
            "last_online": "2026-04-13 17:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817442/",
            "reporter": "botnetkiller"
        }
    ],
    "3817443": [
        {
            "dateadded": "2026-04-13 02:36:15 UTC",
            "url": "http://204.76.203.168/bj",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817443/",
            "reporter": "botnetkiller"
        }
    ],
    "3817439": [
        {
            "dateadded": "2026-04-13 02:32:08 UTC",
            "url": "https://5cqwuhoc.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817439/",
            "reporter": "anonymous"
        }
    ],
    "3817438": [
        {
            "dateadded": "2026-04-13 02:26:07 UTC",
            "url": "https://hw62b.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817438/",
            "reporter": "anonymous"
        }
    ],
    "3817437": [
        {
            "dateadded": "2026-04-13 02:25:07 UTC",
            "url": "http://123.12.180.220:56437/i",
            "url_status": "offline",
            "last_online": "2026-04-13 02:25:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817437/",
            "reporter": "geenensp"
        }
    ],
    "3817436": [
        {
            "dateadded": "2026-04-13 02:24:05 UTC",
            "url": "http://85.239.147.6/files/8717422379/fcAMh42.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817436/",
            "reporter": "c2hunter"
        }
    ],
    "3817435": [
        {
            "dateadded": "2026-04-13 02:20:18 UTC",
            "url": "http://125.47.226.157:49348/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:44:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817435/",
            "reporter": "geenensp"
        }
    ],
    "3817434": [
        {
            "dateadded": "2026-04-13 02:20:09 UTC",
            "url": "https://listenercorte.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817434/",
            "reporter": "anonymous"
        }
    ],
    "3817433": [
        {
            "dateadded": "2026-04-13 02:18:06 UTC",
            "url": "http://103.106.229.247/loader.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817433/",
            "reporter": "geenensp"
        }
    ],
    "3817432": [
        {
            "dateadded": "2026-04-13 02:12:17 UTC",
            "url": "http://61.53.124.98:58896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817432/",
            "reporter": "geenensp"
        }
    ],
    "3817431": [
        {
            "dateadded": "2026-04-13 02:12:13 UTC",
            "url": "https://sterileric.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817431/",
            "reporter": "anonymous"
        }
    ],
    "3817430": [
        {
            "dateadded": "2026-04-13 02:08:18 UTC",
            "url": "http://123.12.180.220:56437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 02:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817430/",
            "reporter": "geenensp"
        }
    ],
    "3817429": [
        {
            "dateadded": "2026-04-13 02:06:12 UTC",
            "url": "https://gvxnzo.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 02:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817429/",
            "reporter": "anonymous"
        }
    ],
    "3817428": [
        {
            "dateadded": "2026-04-13 02:05:14 UTC",
            "url": "http://222.139.75.213:35606/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:04:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817428/",
            "reporter": "geenensp"
        }
    ],
    "3817427": [
        {
            "dateadded": "2026-04-13 02:00:24 UTC",
            "url": "http://42.224.220.216:37586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 02:00:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817427/",
            "reporter": "geenensp"
        }
    ],
    "3817426": [
        {
            "dateadded": "2026-04-13 01:59:09 UTC",
            "url": "https://bold4-loop.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817426/",
            "reporter": "anonymous"
        }
    ],
    "3817425": [
        {
            "dateadded": "2026-04-13 01:55:07 UTC",
            "url": "http://115.55.134.156:48189/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:56:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817425/",
            "reporter": "geenensp"
        }
    ],
    "3817424": [
        {
            "dateadded": "2026-04-13 01:53:38 UTC",
            "url": "http://110.37.48.162:58636/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 01:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817424/",
            "reporter": "geenensp"
        }
    ],
    "3817423": [
        {
            "dateadded": "2026-04-13 01:52:08 UTC",
            "url": "https://nhspq.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817423/",
            "reporter": "anonymous"
        }
    ],
    "3817422": [
        {
            "dateadded": "2026-04-13 01:46:13 UTC",
            "url": "https://8rnyx.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817422/",
            "reporter": "anonymous"
        }
    ],
    "3817421": [
        {
            "dateadded": "2026-04-13 01:39:06 UTC",
            "url": "https://geo-st0ck.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817421/",
            "reporter": "anonymous"
        }
    ],
    "3817420": [
        {
            "dateadded": "2026-04-13 01:37:16 UTC",
            "url": "http://115.55.134.156:48189/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:52:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817420/",
            "reporter": "geenensp"
        }
    ],
    "3817419": [
        {
            "dateadded": "2026-04-13 01:32:19 UTC",
            "url": "http://178.238.27.138:33047/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:25:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817419/",
            "reporter": "geenensp"
        }
    ],
    "3817418": [
        {
            "dateadded": "2026-04-13 01:32:09 UTC",
            "url": "https://bandwiglade.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817418/",
            "reporter": "anonymous"
        }
    ],
    "3817417": [
        {
            "dateadded": "2026-04-13 01:26:08 UTC",
            "url": "https://orvfw4.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817417/",
            "reporter": "anonymous"
        }
    ],
    "3817416": [
        {
            "dateadded": "2026-04-13 01:23:28 UTC",
            "url": "http://221.202.17.125:43141/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:41:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817416/",
            "reporter": "geenensp"
        }
    ],
    "3817415": [
        {
            "dateadded": "2026-04-13 01:20:08 UTC",
            "url": "https://mpjrpw.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817415/",
            "reporter": "anonymous"
        }
    ],
    "3817414": [
        {
            "dateadded": "2026-04-13 01:18:17 UTC",
            "url": "http://221.202.17.125:43141/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817414/",
            "reporter": "geenensp"
        }
    ],
    "3817413": [
        {
            "dateadded": "2026-04-13 01:16:21 UTC",
            "url": "http://61.52.44.36:58168/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817413/",
            "reporter": "geenensp"
        }
    ],
    "3817412": [
        {
            "dateadded": "2026-04-13 01:14:10 UTC",
            "url": "http://45.128.119.160:1212/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 01:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817412/",
            "reporter": "botnetkiller"
        }
    ],
    "3817395": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.arm5",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817395/",
            "reporter": "botnetkiller"
        }
    ],
    "3817396": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.i486",
            "url_status": "offline",
            "last_online": "2026-04-13 04:49:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817396/",
            "reporter": "botnetkiller"
        }
    ],
    "3817397": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.m68k",
            "url_status": "offline",
            "last_online": "2026-04-13 04:20:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817397/",
            "reporter": "botnetkiller"
        }
    ],
    "3817398": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.ppc",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817398/",
            "reporter": "botnetkiller"
        }
    ],
    "3817399": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.sh4",
            "url_status": "offline",
            "last_online": "2026-04-13 04:48:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817399/",
            "reporter": "botnetkiller"
        }
    ],
    "3817400": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.apk",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817400/",
            "reporter": "botnetkiller"
        }
    ],
    "3817401": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.i686",
            "url_status": "offline",
            "last_online": "2026-04-13 04:27:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817401/",
            "reporter": "botnetkiller"
        }
    ],
    "3817402": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.spc",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817402/",
            "reporter": "botnetkiller"
        }
    ],
    "3817403": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.x64",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817403/",
            "reporter": "botnetkiller"
        }
    ],
    "3817404": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817404/",
            "reporter": "botnetkiller"
        }
    ],
    "3817405": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-13 04:04:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817405/",
            "reporter": "botnetkiller"
        }
    ],
    "3817406": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.x86",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817406/",
            "reporter": "botnetkiller"
        }
    ],
    "3817407": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.arm6",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817407/",
            "reporter": "botnetkiller"
        }
    ],
    "3817408": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.mips",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817408/",
            "reporter": "botnetkiller"
        }
    ],
    "3817409": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.arm4",
            "url_status": "offline",
            "last_online": "2026-04-13 04:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817409/",
            "reporter": "botnetkiller"
        }
    ],
    "3817410": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.arm7",
            "url_status": "offline",
            "last_online": "2026-04-13 04:09:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817410/",
            "reporter": "botnetkiller"
        }
    ],
    "3817411": [
        {
            "dateadded": "2026-04-13 01:13:16 UTC",
            "url": "http://45.128.119.160:1212/zyre.dbg",
            "url_status": "offline",
            "last_online": "2026-04-13 04:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817411/",
            "reporter": "botnetkiller"
        }
    ],
    "3817394": [
        {
            "dateadded": "2026-04-13 01:12:08 UTC",
            "url": "https://load9-mount.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817394/",
            "reporter": "anonymous"
        }
    ],
    "3817393": [
        {
            "dateadded": "2026-04-13 01:09:47 UTC",
            "url": "http://112.225.49.27:41733/i",
            "url_status": "offline",
            "last_online": "2026-04-13 01:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817393/",
            "reporter": "geenensp"
        }
    ],
    "3817392": [
        {
            "dateadded": "2026-04-13 01:09:05 UTC",
            "url": "http://85.239.147.6/files/7782139129/nM8PZXp.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817392/",
            "reporter": "c2hunter"
        }
    ],
    "3817391": [
        {
            "dateadded": "2026-04-13 01:07:08 UTC",
            "url": "https://norvale5on.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 01:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817391/",
            "reporter": "anonymous"
        }
    ],
    "3817390": [
        {
            "dateadded": "2026-04-13 00:59:13 UTC",
            "url": "http://105.184.95.232:46139/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:49:54 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817390/",
            "reporter": "botnetkiller"
        }
    ],
    "3817389": [
        {
            "dateadded": "2026-04-13 00:59:10 UTC",
            "url": "http://61.52.44.36:58168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:19:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817389/",
            "reporter": "geenensp"
        }
    ],
    "3817388": [
        {
            "dateadded": "2026-04-13 00:59:08 UTC",
            "url": "https://talmarkum1.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817388/",
            "reporter": "anonymous"
        }
    ],
    "3817387": [
        {
            "dateadded": "2026-04-13 00:58:21 UTC",
            "url": "http://105.184.95.232:46139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:33:45 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817387/",
            "reporter": "botnetkiller"
        }
    ],
    "3817385": [
        {
            "dateadded": "2026-04-13 00:58:19 UTC",
            "url": "http://105.184.95.232:46139/Mozi.a",
            "url_status": "offline",
            "last_online": "2026-04-14 06:06:59 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817385/",
            "reporter": "botnetkiller"
        }
    ],
    "3817386": [
        {
            "dateadded": "2026-04-13 00:58:19 UTC",
            "url": "http://105.184.95.232:46139/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-14 06:33:24 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817386/",
            "reporter": "botnetkiller"
        }
    ],
    "3817384": [
        {
            "dateadded": "2026-04-13 00:55:22 UTC",
            "url": "http://27.222.59.209:43199/i",
            "url_status": "offline",
            "last_online": "2026-04-23 11:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817384/",
            "reporter": "geenensp"
        }
    ],
    "3817383": [
        {
            "dateadded": "2026-04-13 00:52:13 UTC",
            "url": "http://222.141.113.132:48596/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:23:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817383/",
            "reporter": "geenensp"
        }
    ],
    "3817382": [
        {
            "dateadded": "2026-04-13 00:52:08 UTC",
            "url": "https://87vq.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817382/",
            "reporter": "anonymous"
        }
    ],
    "3817381": [
        {
            "dateadded": "2026-04-13 00:47:09 UTC",
            "url": "https://cvsbi.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817381/",
            "reporter": "anonymous"
        }
    ],
    "3817380": [
        {
            "dateadded": "2026-04-13 00:42:10 UTC",
            "url": "https://es3tp.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817380/",
            "reporter": "anonymous"
        }
    ],
    "3817379": [
        {
            "dateadded": "2026-04-13 00:36:12 UTC",
            "url": "https://serlineet.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817379/",
            "reporter": "anonymous"
        }
    ],
    "3817378": [
        {
            "dateadded": "2026-04-13 00:35:12 UTC",
            "url": "http://182.116.34.195:42330/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817378/",
            "reporter": "geenensp"
        }
    ],
    "3817377": [
        {
            "dateadded": "2026-04-13 00:30:09 UTC",
            "url": "https://modul-scene.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817377/",
            "reporter": "anonymous"
        }
    ],
    "3817376": [
        {
            "dateadded": "2026-04-13 00:29:18 UTC",
            "url": "http://222.141.113.132:48596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817376/",
            "reporter": "geenensp"
        }
    ],
    "3817375": [
        {
            "dateadded": "2026-04-13 00:26:13 UTC",
            "url": "https://rnoon-wave.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817375/",
            "reporter": "anonymous"
        }
    ],
    "3817374": [
        {
            "dateadded": "2026-04-13 00:20:14 UTC",
            "url": "https://breezesto.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817374/",
            "reporter": "anonymous"
        }
    ],
    "3817373": [
        {
            "dateadded": "2026-04-13 00:14:06 UTC",
            "url": "https://quorcore1a.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817373/",
            "reporter": "anonymous"
        }
    ],
    "3817372": [
        {
            "dateadded": "2026-04-13 00:13:10 UTC",
            "url": "http://119.180.15.35:60517/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817372/",
            "reporter": "geenensp"
        }
    ],
    "3817371": [
        {
            "dateadded": "2026-04-13 00:08:11 UTC",
            "url": "https://57vl6.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817371/",
            "reporter": "anonymous"
        }
    ],
    "3817370": [
        {
            "dateadded": "2026-04-13 00:08:08 UTC",
            "url": "http://125.41.225.94:43318/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:40:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817370/",
            "reporter": "geenensp"
        }
    ],
    "3817369": [
        {
            "dateadded": "2026-04-13 00:07:11 UTC",
            "url": "http://182.116.34.195:42330/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:56:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817369/",
            "reporter": "geenensp"
        }
    ],
    "3817368": [
        {
            "dateadded": "2026-04-13 00:03:07 UTC",
            "url": "https://handleill.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-13 00:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817368/",
            "reporter": "anonymous"
        }
    ],
    "3817367": [
        {
            "dateadded": "2026-04-12 23:58:10 UTC",
            "url": "https://fresh-crest.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817367/",
            "reporter": "anonymous"
        }
    ],
    "3817366": [
        {
            "dateadded": "2026-04-12 23:53:06 UTC",
            "url": "https://cipherdepo.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817366/",
            "reporter": "anonymous"
        }
    ],
    "3817365": [
        {
            "dateadded": "2026-04-12 23:50:09 UTC",
            "url": "https://dzokbx.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817365/",
            "reporter": "anonymous"
        }
    ],
    "3817364": [
        {
            "dateadded": "2026-04-12 23:47:07 UTC",
            "url": "http://125.41.1.133:48547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:11:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817364/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817363": [
        {
            "dateadded": "2026-04-12 23:42:18 UTC",
            "url": "http://185.30.145.246:42917/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:51:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817363/",
            "reporter": "geenensp"
        }
    ],
    "3817362": [
        {
            "dateadded": "2026-04-12 23:41:20 UTC",
            "url": "http://115.54.147.247:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:38:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817362/",
            "reporter": "geenensp"
        }
    ],
    "3817361": [
        {
            "dateadded": "2026-04-12 23:41:19 UTC",
            "url": "http://77.247.88.88:37256/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817361/",
            "reporter": "geenensp"
        }
    ],
    "3817360": [
        {
            "dateadded": "2026-04-12 23:40:21 UTC",
            "url": "http://125.41.225.94:43318/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 05:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817360/",
            "reporter": "geenensp"
        }
    ],
    "3817359": [
        {
            "dateadded": "2026-04-12 23:40:14 UTC",
            "url": "https://quormarkal8.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817359/",
            "reporter": "anonymous"
        }
    ],
    "3817358": [
        {
            "dateadded": "2026-04-12 23:39:22 UTC",
            "url": "http://61.53.124.98:58896/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:29:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817358/",
            "reporter": "geenensp"
        }
    ],
    "3817357": [
        {
            "dateadded": "2026-04-12 23:34:13 UTC",
            "url": "https://arkcrest5or.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817357/",
            "reporter": "anonymous"
        }
    ],
    "3817356": [
        {
            "dateadded": "2026-04-12 23:30:18 UTC",
            "url": "http://168.227.66.219:52900/i",
            "url_status": "offline",
            "last_online": "2026-04-14 07:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817356/",
            "reporter": "geenensp"
        }
    ],
    "3817355": [
        {
            "dateadded": "2026-04-12 23:29:12 UTC",
            "url": "https://deal-mars.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817355/",
            "reporter": "anonymous"
        }
    ],
    "3817354": [
        {
            "dateadded": "2026-04-12 23:24:14 UTC",
            "url": "https://tal-crestal.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817354/",
            "reporter": "anonymous"
        }
    ],
    "3817353": [
        {
            "dateadded": "2026-04-12 23:20:17 UTC",
            "url": "http://185.30.145.246:42917/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 10:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817353/",
            "reporter": "geenensp"
        }
    ],
    "3817352": [
        {
            "dateadded": "2026-04-12 23:19:21 UTC",
            "url": "http://115.51.121.187:47354/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817352/",
            "reporter": "geenensp"
        }
    ],
    "3817351": [
        {
            "dateadded": "2026-04-12 23:18:08 UTC",
            "url": "https://xjmzl07n.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817351/",
            "reporter": "anonymous"
        }
    ],
    "3817350": [
        {
            "dateadded": "2026-04-12 23:15:25 UTC",
            "url": "http://182.117.152.135:60762/i",
            "url_status": "offline",
            "last_online": "2026-04-14 16:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817350/",
            "reporter": "geenensp"
        }
    ],
    "3817349": [
        {
            "dateadded": "2026-04-12 23:11:13 UTC",
            "url": "https://needlsdk.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817349/",
            "reporter": "anonymous"
        }
    ],
    "3817348": [
        {
            "dateadded": "2026-04-12 23:08:19 UTC",
            "url": "http://210.10.132.168:42905/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:04:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817348/",
            "reporter": "geenensp"
        }
    ],
    "3817347": [
        {
            "dateadded": "2026-04-12 23:07:20 UTC",
            "url": "http://27.215.241.209:41905/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:59:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817347/",
            "reporter": "geenensp"
        }
    ],
    "3817346": [
        {
            "dateadded": "2026-04-12 23:06:12 UTC",
            "url": "https://scre-wes.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817346/",
            "reporter": "anonymous"
        }
    ],
    "3817345": [
        {
            "dateadded": "2026-04-12 23:00:17 UTC",
            "url": "https://fiercepale.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 23:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817345/",
            "reporter": "anonymous"
        }
    ],
    "3817344": [
        {
            "dateadded": "2026-04-12 22:55:16 UTC",
            "url": "https://exte-lab.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817344/",
            "reporter": "anonymous"
        }
    ],
    "3817343": [
        {
            "dateadded": "2026-04-12 22:52:19 UTC",
            "url": "http://37.53.147.17:46102/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817343/",
            "reporter": "geenensp"
        }
    ],
    "3817342": [
        {
            "dateadded": "2026-04-12 22:51:23 UTC",
            "url": "http://115.51.121.187:47354/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817342/",
            "reporter": "geenensp"
        }
    ],
    "3817341": [
        {
            "dateadded": "2026-04-12 22:50:16 UTC",
            "url": "https://lumtidea9.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817341/",
            "reporter": "anonymous"
        }
    ],
    "3817340": [
        {
            "dateadded": "2026-04-12 22:49:22 UTC",
            "url": "http://42.238.241.248:36637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817340/",
            "reporter": "geenensp"
        }
    ],
    "3817339": [
        {
            "dateadded": "2026-04-12 22:46:08 UTC",
            "url": "http://27.215.241.209:41905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:54:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817339/",
            "reporter": "geenensp"
        }
    ],
    "3817338": [
        {
            "dateadded": "2026-04-12 22:45:24 UTC",
            "url": "http://115.50.217.75:45106/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817338/",
            "reporter": "geenensp"
        }
    ],
    "3817337": [
        {
            "dateadded": "2026-04-12 22:44:12 UTC",
            "url": "https://lvk5wwb.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817337/",
            "reporter": "anonymous"
        }
    ],
    "3817336": [
        {
            "dateadded": "2026-04-12 22:38:14 UTC",
            "url": "https://winterdeliv.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817336/",
            "reporter": "anonymous"
        }
    ],
    "3817335": [
        {
            "dateadded": "2026-04-12 22:34:23 UTC",
            "url": "http://182.127.100.197:57451/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:32:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817335/",
            "reporter": "geenensp"
        }
    ],
    "3817334": [
        {
            "dateadded": "2026-04-12 22:34:10 UTC",
            "url": "https://cloudstorage-hub.com/woofer.rar",
            "url_status": "offline",
            "last_online": "2026-04-13 05:08:47 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817334/",
            "reporter": "botnetkiller"
        }
    ],
    "3817333": [
        {
            "dateadded": "2026-04-12 22:34:09 UTC",
            "url": "https://cloudstorage-hub.com/cmd.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "bat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817333/",
            "reporter": "botnetkiller"
        }
    ],
    "3817332": [
        {
            "dateadded": "2026-04-12 22:34:06 UTC",
            "url": "http://185.149.120.3/download/net_launcher.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:55 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817332/",
            "reporter": "botnetkiller"
        }
    ],
    "3817331": [
        {
            "dateadded": "2026-04-12 22:33:28 UTC",
            "url": "http://115.230.19.188:56782/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817331/",
            "reporter": "geenensp"
        }
    ],
    "3817330": [
        {
            "dateadded": "2026-04-12 22:33:13 UTC",
            "url": "https://trivenet8.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817330/",
            "reporter": "anonymous"
        }
    ],
    "3817329": [
        {
            "dateadded": "2026-04-12 22:32:18 UTC",
            "url": "http://39.74.77.63:46717/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:51:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817329/",
            "reporter": "geenensp"
        }
    ],
    "3817328": [
        {
            "dateadded": "2026-04-12 22:26:14 UTC",
            "url": "https://harves3-spark.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817328/",
            "reporter": "anonymous"
        }
    ],
    "3817327": [
        {
            "dateadded": "2026-04-12 22:22:12 UTC",
            "url": "https://9rmc.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817327/",
            "reporter": "anonymous"
        }
    ],
    "3817326": [
        {
            "dateadded": "2026-04-12 22:17:14 UTC",
            "url": "https://repairsales.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817326/",
            "reporter": "anonymous"
        }
    ],
    "3817325": [
        {
            "dateadded": "2026-04-12 22:12:07 UTC",
            "url": "http://115.51.42.137:34610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:17:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817325/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817324": [
        {
            "dateadded": "2026-04-12 22:11:21 UTC",
            "url": "http://222.137.145.139:57984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817324/",
            "reporter": "geenensp"
        }
    ],
    "3817323": [
        {
            "dateadded": "2026-04-12 22:10:15 UTC",
            "url": "https://gf11j.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817323/",
            "reporter": "anonymous"
        }
    ],
    "3817322": [
        {
            "dateadded": "2026-04-12 22:09:19 UTC",
            "url": "http://42.239.152.16:60492/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:29:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817322/",
            "reporter": "geenensp"
        }
    ],
    "3817321": [
        {
            "dateadded": "2026-04-12 22:06:30 UTC",
            "url": "http://110.37.116.78:46837/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817321/",
            "reporter": "geenensp"
        }
    ],
    "3817320": [
        {
            "dateadded": "2026-04-12 22:04:13 UTC",
            "url": "https://arknexal2.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817320/",
            "reporter": "anonymous"
        }
    ],
    "3817319": [
        {
            "dateadded": "2026-04-12 22:02:18 UTC",
            "url": "http://39.74.77.63:46717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817319/",
            "reporter": "geenensp"
        }
    ],
    "3817318": [
        {
            "dateadded": "2026-04-12 21:59:10 UTC",
            "url": "http://222.141.113.247:50135/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:19:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817318/",
            "reporter": "geenensp"
        }
    ],
    "3817317": [
        {
            "dateadded": "2026-04-12 21:58:07 UTC",
            "url": "https://bkumfd.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817317/",
            "reporter": "anonymous"
        }
    ],
    "3817316": [
        {
            "dateadded": "2026-04-12 21:55:21 UTC",
            "url": "http://125.47.75.121:34429/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 21:55:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817316/",
            "reporter": "geenensp"
        }
    ],
    "3817315": [
        {
            "dateadded": "2026-04-12 21:54:13 UTC",
            "url": "https://opt1c-mesh.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817315/",
            "reporter": "anonymous"
        }
    ],
    "3817314": [
        {
            "dateadded": "2026-04-12 21:48:09 UTC",
            "url": "https://lum-lineos.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817314/",
            "reporter": "anonymous"
        }
    ],
    "3817313": [
        {
            "dateadded": "2026-04-12 21:44:20 UTC",
            "url": "http://42.239.152.16:60492/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817313/",
            "reporter": "geenensp"
        }
    ],
    "3817312": [
        {
            "dateadded": "2026-04-12 21:42:07 UTC",
            "url": "https://lwzqvms.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817312/",
            "reporter": "anonymous"
        }
    ],
    "3817311": [
        {
            "dateadded": "2026-04-12 21:37:17 UTC",
            "url": "http://115.55.198.34:53132/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:31:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817311/",
            "reporter": "geenensp"
        }
    ],
    "3817310": [
        {
            "dateadded": "2026-04-12 21:37:13 UTC",
            "url": "https://odau.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817310/",
            "reporter": "anonymous"
        }
    ],
    "3817309": [
        {
            "dateadded": "2026-04-12 21:36:11 UTC",
            "url": "http://110.37.116.78:46837/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817309/",
            "reporter": "geenensp"
        }
    ],
    "3817308": [
        {
            "dateadded": "2026-04-12 21:30:10 UTC",
            "url": "https://genelight.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817308/",
            "reporter": "anonymous"
        }
    ],
    "3817307": [
        {
            "dateadded": "2026-04-12 21:25:13 UTC",
            "url": "https://zl0dsl.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817307/",
            "reporter": "anonymous"
        }
    ],
    "3817306": [
        {
            "dateadded": "2026-04-12 21:21:10 UTC",
            "url": "https://han9l.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817306/",
            "reporter": "anonymous"
        }
    ],
    "3817305": [
        {
            "dateadded": "2026-04-12 21:17:18 UTC",
            "url": "http://60.209.196.193:33456/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817305/",
            "reporter": "geenensp"
        }
    ],
    "3817304": [
        {
            "dateadded": "2026-04-12 21:14:17 UTC",
            "url": "http://223.151.248.133:47220/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:18:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817304/",
            "reporter": "geenensp"
        }
    ],
    "3817303": [
        {
            "dateadded": "2026-04-12 21:14:16 UTC",
            "url": "http://115.55.198.34:53132/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817303/",
            "reporter": "geenensp"
        }
    ],
    "3817302": [
        {
            "dateadded": "2026-04-12 21:14:07 UTC",
            "url": "https://agibny9n.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817302/",
            "reporter": "anonymous"
        }
    ],
    "3817301": [
        {
            "dateadded": "2026-04-12 21:10:11 UTC",
            "url": "http://120.28.81.206:34521/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:33:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817301/",
            "reporter": "geenensp"
        }
    ],
    "3817300": [
        {
            "dateadded": "2026-04-12 21:09:12 UTC",
            "url": "https://merspireos7.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817300/",
            "reporter": "anonymous"
        }
    ],
    "3817299": [
        {
            "dateadded": "2026-04-12 21:03:06 UTC",
            "url": "https://zenspireix9.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 21:03:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817299/",
            "reporter": "anonymous"
        }
    ],
    "3817298": [
        {
            "dateadded": "2026-04-12 20:57:08 UTC",
            "url": "https://apbc9a.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817298/",
            "reporter": "anonymous"
        }
    ],
    "3817297": [
        {
            "dateadded": "2026-04-12 20:57:06 UTC",
            "url": "http://113.239.70.25:55329/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:54:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817297/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817296": [
        {
            "dateadded": "2026-04-12 20:52:11 UTC",
            "url": "https://fl0w-graph.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817296/",
            "reporter": "anonymous"
        }
    ],
    "3817293": [
        {
            "dateadded": "2026-04-12 20:51:20 UTC",
            "url": "http://201.149.107.54:38508/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:43:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817293/",
            "reporter": "geenensp"
        }
    ],
    "3817294": [
        {
            "dateadded": "2026-04-12 20:51:20 UTC",
            "url": "http://110.37.44.158:57124/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:12:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817294/",
            "reporter": "geenensp"
        }
    ],
    "3817295": [
        {
            "dateadded": "2026-04-12 20:51:20 UTC",
            "url": "http://110.37.44.158:57124/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817295/",
            "reporter": "geenensp"
        }
    ],
    "3817292": [
        {
            "dateadded": "2026-04-12 20:50:20 UTC",
            "url": "http://223.151.248.133:47220/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 20:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817292/",
            "reporter": "geenensp"
        }
    ],
    "3817291": [
        {
            "dateadded": "2026-04-12 20:49:18 UTC",
            "url": "http://60.209.196.193:33456/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 17:12:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817291/",
            "reporter": "geenensp"
        }
    ],
    "3817290": [
        {
            "dateadded": "2026-04-12 20:45:13 UTC",
            "url": "https://moon0-logic.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817290/",
            "reporter": "anonymous"
        }
    ],
    "3817289": [
        {
            "dateadded": "2026-04-12 20:42:06 UTC",
            "url": "http://110.37.66.78:35416/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:39:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817289/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817288": [
        {
            "dateadded": "2026-04-12 20:41:10 UTC",
            "url": "http://80.67.33.209:43975/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:27:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817288/",
            "reporter": "geenensp"
        }
    ],
    "3817287": [
        {
            "dateadded": "2026-04-12 20:40:12 UTC",
            "url": "https://68df0.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817287/",
            "reporter": "anonymous"
        }
    ],
    "3817286": [
        {
            "dateadded": "2026-04-12 20:39:09 UTC",
            "url": "http://182.121.81.106:50150/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:21:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817286/",
            "reporter": "geenensp"
        }
    ],
    "3817285": [
        {
            "dateadded": "2026-04-12 20:38:16 UTC",
            "url": "https://43.228.157.127/all.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:31 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817285/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817284": [
        {
            "dateadded": "2026-04-12 20:38:15 UTC",
            "url": "http://46.151.182.82/i686",
            "url_status": "offline",
            "last_online": "2026-04-19 11:36:43 UTC",
            "threat": "malware_download",
            "tags": [
                "46-151-182-82",
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817284/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817283": [
        {
            "dateadded": "2026-04-12 20:37:14 UTC",
            "url": "https://43.228.157.127/titanjr.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817283/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817271": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:33 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817271/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817272": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817272/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817273": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:22 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817273/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817274": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.x86_32",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817274/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817275": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:27 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817275/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817276": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:36 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817276/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817277": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.mipsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817277/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817278": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817278/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817279": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:49 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817279/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817280": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/titanjr.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817280/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817281": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:42 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817281/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817282": [
        {
            "dateadded": "2026-04-12 20:36:22 UTC",
            "url": "https://43.228.157.127/titanjr.i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817282/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817265": [
        {
            "dateadded": "2026-04-12 20:36:21 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:50 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817265/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817266": [
        {
            "dateadded": "2026-04-12 20:36:21 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817266/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817267": [
        {
            "dateadded": "2026-04-12 20:36:21 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817267/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817268": [
        {
            "dateadded": "2026-04-12 20:36:21 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817268/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817269": [
        {
            "dateadded": "2026-04-12 20:36:21 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:41 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817269/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817270": [
        {
            "dateadded": "2026-04-12 20:36:21 UTC",
            "url": "https://43.228.157.127/huhu/titanjr.ppc440",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:24 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817270/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817262": [
        {
            "dateadded": "2026-04-12 20:35:18 UTC",
            "url": "https://43.228.157.127/titanjr.mipsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817262/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817263": [
        {
            "dateadded": "2026-04-12 20:35:18 UTC",
            "url": "https://43.228.157.127/titanjr.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:47 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817263/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817264": [
        {
            "dateadded": "2026-04-12 20:35:18 UTC",
            "url": "https://43.228.157.127/titanjr.ppc440",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:05 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817264/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817253": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817253/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817254": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817254/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817255": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:00 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817255/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817256": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817256/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817257": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:27 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817257/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817258": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817258/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817259": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.x86_32",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817259/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817260": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:40 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817260/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817261": [
        {
            "dateadded": "2026-04-12 20:35:16 UTC",
            "url": "https://43.228.157.127/titanjr.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817261/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817252": [
        {
            "dateadded": "2026-04-12 20:35:12 UTC",
            "url": "https://publiccrawl.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817252/",
            "reporter": "anonymous"
        }
    ],
    "3817251": [
        {
            "dateadded": "2026-04-12 20:34:17 UTC",
            "url": "https://43.228.157.127/titanjr.spc",
            "url_status": "online",
            "last_online": "2026-04-27 13:12:46 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-127",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817251/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817250": [
        {
            "dateadded": "2026-04-12 20:31:19 UTC",
            "url": "http://222.140.160.167:32981/i",
            "url_status": "offline",
            "last_online": "2026-04-12 20:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817250/",
            "reporter": "geenensp"
        }
    ],
    "3817249": [
        {
            "dateadded": "2026-04-12 20:30:13 UTC",
            "url": "https://nmno.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817249/",
            "reporter": "anonymous"
        }
    ],
    "3817248": [
        {
            "dateadded": "2026-04-12 20:27:11 UTC",
            "url": "https://m9thskmy.paragonbloomera.digital/?=check&&actmn=GSGdFQyAJpakwztU",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817248/",
            "reporter": "anonymous"
        }
    ],
    "3817247": [
        {
            "dateadded": "2026-04-12 20:24:07 UTC",
            "url": "https://c4p1-route.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:24:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817247/",
            "reporter": "anonymous"
        }
    ],
    "3817246": [
        {
            "dateadded": "2026-04-12 20:20:11 UTC",
            "url": "http://219.156.175.211:38261/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817246/",
            "reporter": "geenensp"
        }
    ],
    "3817245": [
        {
            "dateadded": "2026-04-12 20:18:08 UTC",
            "url": "https://vub10.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817245/",
            "reporter": "anonymous"
        }
    ],
    "3817244": [
        {
            "dateadded": "2026-04-12 20:17:07 UTC",
            "url": "http://110.37.66.78:35416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:29:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817244/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817243": [
        {
            "dateadded": "2026-04-12 20:13:20 UTC",
            "url": "http://182.121.81.106:50150/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:25:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817243/",
            "reporter": "geenensp"
        }
    ],
    "3817242": [
        {
            "dateadded": "2026-04-12 20:12:10 UTC",
            "url": "https://jnza.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817242/",
            "reporter": "anonymous"
        }
    ],
    "3817241": [
        {
            "dateadded": "2026-04-12 20:09:18 UTC",
            "url": "http://220.202.89.27:54299/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:25:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817241/",
            "reporter": "geenensp"
        }
    ],
    "3817240": [
        {
            "dateadded": "2026-04-12 20:07:14 UTC",
            "url": "https://systemott.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817240/",
            "reporter": "anonymous"
        }
    ],
    "3817239": [
        {
            "dateadded": "2026-04-12 20:07:07 UTC",
            "url": "http://42.231.94.183:60744/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817239/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817238": [
        {
            "dateadded": "2026-04-12 20:06:11 UTC",
            "url": "http://123.12.32.168:33964/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:43:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817238/",
            "reporter": "geenensp"
        }
    ],
    "3817237": [
        {
            "dateadded": "2026-04-12 20:02:05 UTC",
            "url": "http://175.164.96.190:33965/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:39:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817237/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817236": [
        {
            "dateadded": "2026-04-12 20:01:12 UTC",
            "url": "https://sermarken6.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 20:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817236/",
            "reporter": "anonymous"
        }
    ],
    "3817235": [
        {
            "dateadded": "2026-04-12 19:56:08 UTC",
            "url": "https://sap-alp.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817235/",
            "reporter": "anonymous"
        }
    ],
    "3817234": [
        {
            "dateadded": "2026-04-12 19:51:09 UTC",
            "url": "http://219.156.175.211:38261/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817234/",
            "reporter": "geenensp"
        }
    ],
    "3817233": [
        {
            "dateadded": "2026-04-12 19:50:16 UTC",
            "url": "https://compute-comp.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817233/",
            "reporter": "anonymous"
        }
    ],
    "3817232": [
        {
            "dateadded": "2026-04-12 19:45:15 UTC",
            "url": "https://normarkix.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817232/",
            "reporter": "anonymous"
        }
    ],
    "3817231": [
        {
            "dateadded": "2026-04-12 19:45:11 UTC",
            "url": "http://123.12.32.168:33964/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817231/",
            "reporter": "geenensp"
        }
    ],
    "3817230": [
        {
            "dateadded": "2026-04-12 19:42:16 UTC",
            "url": "http://110.37.78.200:42234/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817230/",
            "reporter": "geenensp"
        }
    ],
    "3817229": [
        {
            "dateadded": "2026-04-12 19:42:07 UTC",
            "url": "http://42.231.94.183:60744/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:46:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817229/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817228": [
        {
            "dateadded": "2026-04-12 19:39:14 UTC",
            "url": "https://arklinea.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817228/",
            "reporter": "anonymous"
        }
    ],
    "3817227": [
        {
            "dateadded": "2026-04-12 19:35:19 UTC",
            "url": "https://5ybzh.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817227/",
            "reporter": "anonymous"
        }
    ],
    "3817226": [
        {
            "dateadded": "2026-04-12 19:32:14 UTC",
            "url": "https://96rcki34.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817226/",
            "reporter": "anonymous"
        }
    ],
    "3817225": [
        {
            "dateadded": "2026-04-12 19:27:07 UTC",
            "url": "http://175.164.96.190:33965/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:21:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817225/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817224": [
        {
            "dateadded": "2026-04-12 19:26:20 UTC",
            "url": "http://42.227.207.21:46533/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817224/",
            "reporter": "geenensp"
        }
    ],
    "3817223": [
        {
            "dateadded": "2026-04-12 19:24:20 UTC",
            "url": "http://220.192.233.49:51550/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:58:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817223/",
            "reporter": "geenensp"
        }
    ],
    "3817222": [
        {
            "dateadded": "2026-04-12 19:23:13 UTC",
            "url": "https://labellively.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817222/",
            "reporter": "anonymous"
        }
    ],
    "3817221": [
        {
            "dateadded": "2026-04-12 19:16:09 UTC",
            "url": "https://1kuz.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817221/",
            "reporter": "anonymous"
        }
    ],
    "3817220": [
        {
            "dateadded": "2026-04-12 19:11:18 UTC",
            "url": "http://42.6.251.140:35341/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 16:39:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817220/",
            "reporter": "geenensp"
        }
    ],
    "3817219": [
        {
            "dateadded": "2026-04-12 19:10:13 UTC",
            "url": "https://41uml3.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817219/",
            "reporter": "anonymous"
        }
    ],
    "3817218": [
        {
            "dateadded": "2026-04-12 19:10:09 UTC",
            "url": "http://176.65.139.52/payload",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817218/",
            "reporter": "botnetkiller"
        }
    ],
    "3817217": [
        {
            "dateadded": "2026-04-12 19:08:18 UTC",
            "url": "http://222.142.227.254:59558/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817217/",
            "reporter": "geenensp"
        }
    ],
    "3817216": [
        {
            "dateadded": "2026-04-12 19:06:09 UTC",
            "url": "https://coral5-index.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 19:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817216/",
            "reporter": "anonymous"
        }
    ],
    "3817209": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/bot",
            "url_status": "offline",
            "last_online": "2026-04-15 10:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817209/",
            "reporter": "botnetkiller"
        }
    ],
    "3817210": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/s",
            "url_status": "offline",
            "last_online": "2026-04-15 16:39:48 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817210/",
            "reporter": "botnetkiller"
        }
    ],
    "3817211": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/bot_arm",
            "url_status": "offline",
            "last_online": "2026-04-15 16:49:02 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817211/",
            "reporter": "botnetkiller"
        }
    ],
    "3817212": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/bot_mips",
            "url_status": "offline",
            "last_online": "2026-04-15 11:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817212/",
            "reporter": "botnetkiller"
        }
    ],
    "3817213": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/bot_ppc",
            "url_status": "offline",
            "last_online": "2026-04-15 11:01:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817213/",
            "reporter": "botnetkiller"
        }
    ],
    "3817214": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/bot_mipsel",
            "url_status": "offline",
            "last_online": "2026-04-15 14:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817214/",
            "reporter": "botnetkiller"
        }
    ],
    "3817215": [
        {
            "dateadded": "2026-04-12 19:04:16 UTC",
            "url": "http://176.65.139.52/m",
            "url_status": "offline",
            "last_online": "2026-04-15 10:57:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817215/",
            "reporter": "botnetkiller"
        }
    ],
    "3817208": [
        {
            "dateadded": "2026-04-12 19:04:14 UTC",
            "url": "http://176.65.139.52/adb2.go",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "Go",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817208/",
            "reporter": "botnetkiller"
        }
    ],
    "3817206": [
        {
            "dateadded": "2026-04-12 19:03:16 UTC",
            "url": "http://176.65.139.52/armv7",
            "url_status": "offline",
            "last_online": "2026-04-15 16:38:00 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817206/",
            "reporter": "botnetkiller"
        }
    ],
    "3817207": [
        {
            "dateadded": "2026-04-12 19:03:16 UTC",
            "url": "http://176.65.139.52/bot_aarch64",
            "url_status": "offline",
            "last_online": "2026-04-15 14:08:46 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817207/",
            "reporter": "botnetkiller"
        }
    ],
    "3817205": [
        {
            "dateadded": "2026-04-12 19:03:15 UTC",
            "url": "http://176.65.139.52/adb3.go",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "Go",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817205/",
            "reporter": "botnetkiller"
        }
    ],
    "3817204": [
        {
            "dateadded": "2026-04-12 19:03:13 UTC",
            "url": "http://176.65.139.52/bot_armv7",
            "url_status": "offline",
            "last_online": "2026-04-15 11:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817204/",
            "reporter": "botnetkiller"
        }
    ],
    "3817203": [
        {
            "dateadded": "2026-04-12 19:00:21 UTC",
            "url": "http://42.227.207.21:46533/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817203/",
            "reporter": "geenensp"
        }
    ],
    "3817202": [
        {
            "dateadded": "2026-04-12 18:59:06 UTC",
            "url": "https://switchfresh.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817202/",
            "reporter": "anonymous"
        }
    ],
    "3817201": [
        {
            "dateadded": "2026-04-12 18:56:19 UTC",
            "url": "http://183.23.135.140:35197/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 18:56:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817201/",
            "reporter": "geenensp"
        }
    ],
    "3817200": [
        {
            "dateadded": "2026-04-12 18:54:16 UTC",
            "url": "https://dynvenis5.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:54:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817200/",
            "reporter": "anonymous"
        }
    ],
    "3817199": [
        {
            "dateadded": "2026-04-12 18:47:08 UTC",
            "url": "https://ht1eqo.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817199/",
            "reporter": "anonymous"
        }
    ],
    "3817197": [
        {
            "dateadded": "2026-04-12 18:44:16 UTC",
            "url": "http://222.142.227.254:59558/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:35:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817197/",
            "reporter": "geenensp"
        }
    ],
    "3817198": [
        {
            "dateadded": "2026-04-12 18:44:16 UTC",
            "url": "http://210.10.132.168:42905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817198/",
            "reporter": "geenensp"
        }
    ],
    "3817196": [
        {
            "dateadded": "2026-04-12 18:43:18 UTC",
            "url": "http://182.127.53.122:44306/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:23:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817196/",
            "reporter": "geenensp"
        }
    ],
    "3817195": [
        {
            "dateadded": "2026-04-12 18:43:13 UTC",
            "url": "http://182.127.53.122:44306/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817195/",
            "reporter": "geenensp"
        }
    ],
    "3817194": [
        {
            "dateadded": "2026-04-12 18:40:12 UTC",
            "url": "https://snow-cache.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817194/",
            "reporter": "anonymous"
        }
    ],
    "3817193": [
        {
            "dateadded": "2026-04-12 18:33:13 UTC",
            "url": "https://review-spr.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817193/",
            "reporter": "anonymous"
        }
    ],
    "3817192": [
        {
            "dateadded": "2026-04-12 18:31:19 UTC",
            "url": "http://115.55.229.210:46613/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:46:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817192/",
            "reporter": "geenensp"
        }
    ],
    "3817190": [
        {
            "dateadded": "2026-04-12 18:30:11 UTC",
            "url": "http://196.189.198.173:40926/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 18:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817190/",
            "reporter": "geenensp"
        }
    ],
    "3817191": [
        {
            "dateadded": "2026-04-12 18:30:11 UTC",
            "url": "http://220.192.233.49:51550/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817191/",
            "reporter": "geenensp"
        }
    ],
    "3817189": [
        {
            "dateadded": "2026-04-12 18:27:11 UTC",
            "url": "https://vitalpure.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817189/",
            "reporter": "anonymous"
        }
    ],
    "3817188": [
        {
            "dateadded": "2026-04-12 18:22:11 UTC",
            "url": "http://160.176.104.127:38960/i",
            "url_status": "offline",
            "last_online": "2026-04-12 18:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817188/",
            "reporter": "geenensp"
        }
    ],
    "3817187": [
        {
            "dateadded": "2026-04-12 18:21:16 UTC",
            "url": "http://61.54.253.228:48676/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817187/",
            "reporter": "geenensp"
        }
    ],
    "3817186": [
        {
            "dateadded": "2026-04-12 18:20:10 UTC",
            "url": "https://olxx.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817186/",
            "reporter": "anonymous"
        }
    ],
    "3817185": [
        {
            "dateadded": "2026-04-12 18:15:09 UTC",
            "url": "https://kvtk.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817185/",
            "reporter": "anonymous"
        }
    ],
    "3817184": [
        {
            "dateadded": "2026-04-12 18:13:10 UTC",
            "url": "http://85.12.205.35:34082/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817184/",
            "reporter": "geenensp"
        }
    ],
    "3817183": [
        {
            "dateadded": "2026-04-12 18:08:10 UTC",
            "url": "https://izdmpn.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817183/",
            "reporter": "anonymous"
        }
    ],
    "3817182": [
        {
            "dateadded": "2026-04-12 18:02:12 UTC",
            "url": "http://27.37.86.75:36056/i",
            "url_status": "offline",
            "last_online": "2026-04-19 11:09:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817182/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817181": [
        {
            "dateadded": "2026-04-12 18:02:10 UTC",
            "url": "https://5ummi5-mark.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 18:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817181/",
            "reporter": "anonymous"
        }
    ],
    "3817180": [
        {
            "dateadded": "2026-04-12 18:00:19 UTC",
            "url": "http://160.176.104.127:38960/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 18:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817180/",
            "reporter": "geenensp"
        }
    ],
    "3817179": [
        {
            "dateadded": "2026-04-12 17:55:14 UTC",
            "url": "https://abncti.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817179/",
            "reporter": "anonymous"
        }
    ],
    "3817178": [
        {
            "dateadded": "2026-04-12 17:49:07 UTC",
            "url": "https://blwaa.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817178/",
            "reporter": "anonymous"
        }
    ],
    "3817177": [
        {
            "dateadded": "2026-04-12 17:48:13 UTC",
            "url": "http://115.55.229.210:46613/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:28:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817177/",
            "reporter": "geenensp"
        }
    ],
    "3817176": [
        {
            "dateadded": "2026-04-12 17:47:13 UTC",
            "url": "http://222.141.215.30:41418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817176/",
            "reporter": "geenensp"
        }
    ],
    "3817175": [
        {
            "dateadded": "2026-04-12 17:42:20 UTC",
            "url": "http://36.70.75.142:55572/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:12:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817175/",
            "reporter": "geenensp"
        }
    ],
    "3817174": [
        {
            "dateadded": "2026-04-12 17:42:19 UTC",
            "url": "http://123.13.138.190:53134/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:30:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817174/",
            "reporter": "geenensp"
        }
    ],
    "3817173": [
        {
            "dateadded": "2026-04-12 17:42:12 UTC",
            "url": "https://southspring.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817173/",
            "reporter": "anonymous"
        }
    ],
    "3817172": [
        {
            "dateadded": "2026-04-12 17:38:21 UTC",
            "url": "http://42.225.204.233:51782/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817172/",
            "reporter": "geenensp"
        }
    ],
    "3817171": [
        {
            "dateadded": "2026-04-12 17:35:11 UTC",
            "url": "https://atomicatom.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817171/",
            "reporter": "anonymous"
        }
    ],
    "3817170": [
        {
            "dateadded": "2026-04-12 17:27:13 UTC",
            "url": "https://cell4-stream.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817170/",
            "reporter": "anonymous"
        }
    ],
    "3817169": [
        {
            "dateadded": "2026-04-12 17:25:20 UTC",
            "url": "http://182.124.46.83:56863/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:46:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817169/",
            "reporter": "geenensp"
        }
    ],
    "3817168": [
        {
            "dateadded": "2026-04-12 17:21:17 UTC",
            "url": "http://222.137.145.139:57984/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817168/",
            "reporter": "geenensp"
        }
    ],
    "3817167": [
        {
            "dateadded": "2026-04-12 17:21:11 UTC",
            "url": "https://nkhpvbun.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817167/",
            "reporter": "anonymous"
        }
    ],
    "3817166": [
        {
            "dateadded": "2026-04-12 17:17:06 UTC",
            "url": "http://104.32.65.48:58765/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817166/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817165": [
        {
            "dateadded": "2026-04-12 17:15:17 UTC",
            "url": "https://pale-prime.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817165/",
            "reporter": "anonymous"
        }
    ],
    "3817164": [
        {
            "dateadded": "2026-04-12 17:14:29 UTC",
            "url": "http://42.225.204.233:51782/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817164/",
            "reporter": "geenensp"
        }
    ],
    "3817163": [
        {
            "dateadded": "2026-04-12 17:08:14 UTC",
            "url": "https://macrosummit.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817163/",
            "reporter": "anonymous"
        }
    ],
    "3817162": [
        {
            "dateadded": "2026-04-12 17:01:19 UTC",
            "url": "https://lyav76.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 17:01:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817162/",
            "reporter": "anonymous"
        }
    ],
    "3817161": [
        {
            "dateadded": "2026-04-12 16:58:22 UTC",
            "url": "http://182.124.46.83:56863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:45:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817161/",
            "reporter": "geenensp"
        }
    ],
    "3817160": [
        {
            "dateadded": "2026-04-12 16:55:14 UTC",
            "url": "https://vk05p.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817160/",
            "reporter": "anonymous"
        }
    ],
    "3817159": [
        {
            "dateadded": "2026-04-12 16:55:11 UTC",
            "url": "http://112.253.133.48:42624/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:03:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817159/",
            "reporter": "geenensp"
        }
    ],
    "3817158": [
        {
            "dateadded": "2026-04-12 16:52:07 UTC",
            "url": "http://104.32.65.48:58765/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:11:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817158/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817157": [
        {
            "dateadded": "2026-04-12 16:47:16 UTC",
            "url": "http://27.193.49.1:55034/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817157/",
            "reporter": "geenensp"
        }
    ],
    "3817156": [
        {
            "dateadded": "2026-04-12 16:47:14 UTC",
            "url": "https://clinicfjord.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817156/",
            "reporter": "anonymous"
        }
    ],
    "3817155": [
        {
            "dateadded": "2026-04-12 16:42:14 UTC",
            "url": "https://royalemb.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817155/",
            "reporter": "anonymous"
        }
    ],
    "3817150": [
        {
            "dateadded": "2026-04-12 16:41:23 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817150/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817151": [
        {
            "dateadded": "2026-04-12 16:41:23 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.i486",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817151/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817152": [
        {
            "dateadded": "2026-04-12 16:41:23 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817152/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817153": [
        {
            "dateadded": "2026-04-12 16:41:23 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817153/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817154": [
        {
            "dateadded": "2026-04-12 16:41:23 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817154/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817141": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817141/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817142": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817142/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817143": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.spc",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817143/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817144": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817144/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817145": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817145/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817146": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817146/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817147": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817147/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817148": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817148/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817149": [
        {
            "dateadded": "2026-04-12 16:41:13 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817149/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817140": [
        {
            "dateadded": "2026-04-12 16:41:10 UTC",
            "url": "http://143.20.37.150/huhu/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-12 16:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817140/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3817139": [
        {
            "dateadded": "2026-04-12 16:35:13 UTC",
            "url": "https://b4y-signal.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817139/",
            "reporter": "anonymous"
        }
    ],
    "3817138": [
        {
            "dateadded": "2026-04-12 16:34:05 UTC",
            "url": "http://85.239.147.6/files/ja/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817138/",
            "reporter": "Bitsight"
        }
    ],
    "3817137": [
        {
            "dateadded": "2026-04-12 16:32:34 UTC",
            "url": "http://112.253.133.48:42624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 04:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817137/",
            "reporter": "geenensp"
        }
    ],
    "3817136": [
        {
            "dateadded": "2026-04-12 16:28:22 UTC",
            "url": "http://119.116.188.223:47326/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:23:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817136/",
            "reporter": "geenensp"
        }
    ],
    "3817135": [
        {
            "dateadded": "2026-04-12 16:28:13 UTC",
            "url": "https://exposmot.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817135/",
            "reporter": "anonymous"
        }
    ],
    "3817134": [
        {
            "dateadded": "2026-04-12 16:21:15 UTC",
            "url": "https://v1al-sheet.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817134/",
            "reporter": "anonymous"
        }
    ],
    "3817133": [
        {
            "dateadded": "2026-04-12 16:16:17 UTC",
            "url": "https://reso1-cast.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817133/",
            "reporter": "anonymous"
        }
    ],
    "3817132": [
        {
            "dateadded": "2026-04-12 16:10:21 UTC",
            "url": "http://42.224.220.216:37586/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817132/",
            "reporter": "geenensp"
        }
    ],
    "3817131": [
        {
            "dateadded": "2026-04-12 16:09:12 UTC",
            "url": "https://opticsswi.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817131/",
            "reporter": "anonymous"
        }
    ],
    "3817130": [
        {
            "dateadded": "2026-04-12 16:03:13 UTC",
            "url": "https://pquyrk.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 16:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817130/",
            "reporter": "anonymous"
        }
    ],
    "3817129": [
        {
            "dateadded": "2026-04-12 16:03:09 UTC",
            "url": "http://27.193.49.1:55034/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817129/",
            "reporter": "geenensp"
        }
    ],
    "3817128": [
        {
            "dateadded": "2026-04-12 16:03:08 UTC",
            "url": "http://119.116.188.223:47326/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817128/",
            "reporter": "geenensp"
        }
    ],
    "3817127": [
        {
            "dateadded": "2026-04-12 15:59:16 UTC",
            "url": "https://colorpastur.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817127/",
            "reporter": "anonymous"
        }
    ],
    "3817125": [
        {
            "dateadded": "2026-04-12 15:55:21 UTC",
            "url": "http://222.127.220.233:55009/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:57:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817125/",
            "reporter": "geenensp"
        }
    ],
    "3817126": [
        {
            "dateadded": "2026-04-12 15:55:21 UTC",
            "url": "http://171.36.107.247:37323/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:42:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817126/",
            "reporter": "geenensp"
        }
    ],
    "3817124": [
        {
            "dateadded": "2026-04-12 15:52:08 UTC",
            "url": "http://112.225.103.254:33705/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817124/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817123": [
        {
            "dateadded": "2026-04-12 15:48:17 UTC",
            "url": "http://110.37.13.110:56345/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817123/",
            "reporter": "geenensp"
        }
    ],
    "3817122": [
        {
            "dateadded": "2026-04-12 15:48:12 UTC",
            "url": "https://yjcyrpx.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817122/",
            "reporter": "anonymous"
        }
    ],
    "3817121": [
        {
            "dateadded": "2026-04-12 15:44:34 UTC",
            "url": "https://low.exphelp.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-12 15:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817121/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3817120": [
        {
            "dateadded": "2026-04-12 15:44:21 UTC",
            "url": "https://like.exphelp.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-12 15:44:21 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817120/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3817119": [
        {
            "dateadded": "2026-04-12 15:42:11 UTC",
            "url": "https://t3st1-track.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817119/",
            "reporter": "anonymous"
        }
    ],
    "3817118": [
        {
            "dateadded": "2026-04-12 15:35:11 UTC",
            "url": "https://cddvp.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817118/",
            "reporter": "anonymous"
        }
    ],
    "3817117": [
        {
            "dateadded": "2026-04-12 15:29:11 UTC",
            "url": "https://sound3-gate.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817117/",
            "reporter": "anonymous"
        }
    ],
    "3817116": [
        {
            "dateadded": "2026-04-12 15:27:20 UTC",
            "url": "http://110.37.13.110:56345/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:08:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817116/",
            "reporter": "geenensp"
        }
    ],
    "3817115": [
        {
            "dateadded": "2026-04-12 15:22:27 UTC",
            "url": "http://112.225.103.254:33705/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 23:34:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817115/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817114": [
        {
            "dateadded": "2026-04-12 15:22:13 UTC",
            "url": "https://ridg31-drive.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817114/",
            "reporter": "anonymous"
        }
    ],
    "3817113": [
        {
            "dateadded": "2026-04-12 15:19:19 UTC",
            "url": "http://115.59.33.206:35711/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817113/",
            "reporter": "geenensp"
        }
    ],
    "3817112": [
        {
            "dateadded": "2026-04-12 15:19:05 UTC",
            "url": "http://196.251.107.133/bins/yarn",
            "url_status": "offline",
            "last_online": "2026-04-14 10:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "196-251-107-133",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817112/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817109": [
        {
            "dateadded": "2026-04-12 15:18:06 UTC",
            "url": "http://196.251.107.133/bins/col.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:29:43 UTC",
            "threat": "malware_download",
            "tags": [
                "196-251-107-133",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817109/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817110": [
        {
            "dateadded": "2026-04-12 15:18:06 UTC",
            "url": "http://196.251.107.133/bins/kla2.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "196-251-107-133",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817110/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817111": [
        {
            "dateadded": "2026-04-12 15:18:06 UTC",
            "url": "http://196.251.107.133/bins/bin",
            "url_status": "offline",
            "last_online": "2026-04-14 11:07:39 UTC",
            "threat": "malware_download",
            "tags": [
                "196-251-107-133",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817111/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817108": [
        {
            "dateadded": "2026-04-12 15:15:12 UTC",
            "url": "https://merdraex.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817108/",
            "reporter": "anonymous"
        }
    ],
    "3817107": [
        {
            "dateadded": "2026-04-12 15:11:21 UTC",
            "url": "http://45.83.207.105///arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 11:45:21 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817107/",
            "reporter": "botnetkiller"
        }
    ],
    "3817106": [
        {
            "dateadded": "2026-04-12 15:11:09 UTC",
            "url": "https://31.57.97.180/farhoud/WsFR9o7.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 23:09:00 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817106/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817105": [
        {
            "dateadded": "2026-04-12 15:10:14 UTC",
            "url": "https://github.com/absencecampstool380/server-query-fake-player-count/raw/refs/heads/main/embark/player-fake-server-query-count-2.9-alpha.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817105/",
            "reporter": "tcains1"
        }
    ],
    "3817104": [
        {
            "dateadded": "2026-04-12 15:10:13 UTC",
            "url": "http://27.215.4.198:34019/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817104/",
            "reporter": "geenensp"
        }
    ],
    "3817103": [
        {
            "dateadded": "2026-04-12 15:10:08 UTC",
            "url": "https://raw.githubusercontent.com/absencecampstool380/server-query-fake-player-count/refs/heads/main/embark/player-fake-server-query-count-2.9-alpha.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817103/",
            "reporter": "tcains1"
        }
    ],
    "3817102": [
        {
            "dateadded": "2026-04-12 15:08:08 UTC",
            "url": "https://imag-media.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817102/",
            "reporter": "anonymous"
        }
    ],
    "3817101": [
        {
            "dateadded": "2026-04-12 15:07:07 UTC",
            "url": "http://119.165.93.226:47404/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817101/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817100": [
        {
            "dateadded": "2026-04-12 15:03:11 UTC",
            "url": "http://43.228.157.123/kfhogts",
            "url_status": "offline",
            "last_online": "2026-04-21 11:13:37 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-123",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817100/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817099": [
        {
            "dateadded": "2026-04-12 15:03:08 UTC",
            "url": "http://43.228.157.123/MidwestGrey.exe",
            "url_status": "offline",
            "last_online": "2026-04-20 07:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "43-228-157-123",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817099/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817098": [
        {
            "dateadded": "2026-04-12 15:01:25 UTC",
            "url": "http://124.94.247.137:41605/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:12:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817098/",
            "reporter": "geenensp"
        }
    ],
    "3817097": [
        {
            "dateadded": "2026-04-12 15:01:12 UTC",
            "url": "https://dockbrok.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 15:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817097/",
            "reporter": "anonymous"
        }
    ],
    "3817096": [
        {
            "dateadded": "2026-04-12 14:56:29 UTC",
            "url": "http://36.70.100.39:60234/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817096/",
            "reporter": "geenensp"
        }
    ],
    "3817095": [
        {
            "dateadded": "2026-04-12 14:55:21 UTC",
            "url": "http://115.59.33.206:35711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:47:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817095/",
            "reporter": "geenensp"
        }
    ],
    "3817094": [
        {
            "dateadded": "2026-04-12 14:55:12 UTC",
            "url": "https://hoyjyxdc.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817094/",
            "reporter": "anonymous"
        }
    ],
    "3817093": [
        {
            "dateadded": "2026-04-12 14:50:29 UTC",
            "url": "http://202.107.89.181:39639/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817093/",
            "reporter": "geenensp"
        }
    ],
    "3817092": [
        {
            "dateadded": "2026-04-12 14:50:14 UTC",
            "url": "https://gr1m-forge.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817092/",
            "reporter": "anonymous"
        }
    ],
    "3817091": [
        {
            "dateadded": "2026-04-12 14:46:14 UTC",
            "url": "https://printscar.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817091/",
            "reporter": "anonymous"
        }
    ],
    "3817079": [
        {
            "dateadded": "2026-04-12 14:36:16 UTC",
            "url": "https://freightrap.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:36:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817079/",
            "reporter": "anonymous"
        }
    ],
    "3817078": [
        {
            "dateadded": "2026-04-12 14:33:23 UTC",
            "url": "http://36.70.100.39:60234/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817078/",
            "reporter": "geenensp"
        }
    ],
    "3817077": [
        {
            "dateadded": "2026-04-12 14:33:16 UTC",
            "url": "https://cliff-hinge.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817077/",
            "reporter": "anonymous"
        }
    ],
    "3817067": [
        {
            "dateadded": "2026-04-12 14:26:18 UTC",
            "url": "http://124.94.247.137:41605/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:25:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817067/",
            "reporter": "geenensp"
        }
    ],
    "3817066": [
        {
            "dateadded": "2026-04-12 14:22:20 UTC",
            "url": "https://5ap-pulse.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:22:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817066/",
            "reporter": "anonymous"
        }
    ],
    "3817065": [
        {
            "dateadded": "2026-04-12 14:22:07 UTC",
            "url": "http://119.165.93.226:47404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:21:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817065/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3817064": [
        {
            "dateadded": "2026-04-12 14:16:15 UTC",
            "url": "https://sol-draon.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817064/",
            "reporter": "anonymous"
        }
    ],
    "3817063": [
        {
            "dateadded": "2026-04-12 14:15:21 UTC",
            "url": "http://61.54.42.27:37347/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:11:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817063/",
            "reporter": "geenensp"
        }
    ],
    "3817061": [
        {
            "dateadded": "2026-04-12 14:10:15 UTC",
            "url": "https://basi-sand.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817061/",
            "reporter": "anonymous"
        }
    ],
    "3817062": [
        {
            "dateadded": "2026-04-12 14:10:15 UTC",
            "url": "http://38.60.241.29/kkkzzz.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "38-60-241-29",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817062/",
            "reporter": "BlinkzSec"
        }
    ],
    "3817060": [
        {
            "dateadded": "2026-04-12 14:07:11 UTC",
            "url": "https://neo-f0x.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 14:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817060/",
            "reporter": "anonymous"
        }
    ],
    "3817059": [
        {
            "dateadded": "2026-04-12 14:04:20 UTC",
            "url": "http://115.58.171.121:45571/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:32:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817059/",
            "reporter": "geenensp"
        }
    ],
    "3817057": [
        {
            "dateadded": "2026-04-12 14:02:17 UTC",
            "url": "https://raw.githubusercontent.com/gilbertGabe/tuneskit-iphone-unlocker-2-5-0-9-premium-tools/refs/heads/branch/overfearful/premium_iphone_unlocker_tools_tuneskit_2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:02:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817057/",
            "reporter": "tcains1"
        }
    ],
    "3817058": [
        {
            "dateadded": "2026-04-12 14:02:17 UTC",
            "url": "https://github.com/edwindoremi/Asterisk/raw/refs/heads/main/templates/Software_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817058/",
            "reporter": "tcains1"
        }
    ],
    "3817053": [
        {
            "dateadded": "2026-04-12 14:02:14 UTC",
            "url": "https://github.com/FauzanOktavianto/Website-KP/raw/refs/heads/main/one-health/assets/Website_KP_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:15:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817053/",
            "reporter": "tcains1"
        }
    ],
    "3817054": [
        {
            "dateadded": "2026-04-12 14:02:14 UTC",
            "url": "https://github.com/gilbertGabe/valthrun-cs2/raw/refs/heads/main/radar/shared/src/bin/valthrun_cs_v3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:49:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817054/",
            "reporter": "tcains1"
        }
    ],
    "3817055": [
        {
            "dateadded": "2026-04-12 14:02:14 UTC",
            "url": "https://github.com/gilbertGabe/tuneskit-iphone-unlocker-2-5-0-9-premium-tools/raw/refs/heads/branch/overfearful/premium_iphone_unlocker_tools_tuneskit_2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817055/",
            "reporter": "tcains1"
        }
    ],
    "3817056": [
        {
            "dateadded": "2026-04-12 14:02:14 UTC",
            "url": "https://raw.githubusercontent.com/FauzanOktavianto/Website-KP/refs/heads/main/one-health/assets/Website_KP_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:51:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817056/",
            "reporter": "tcains1"
        }
    ],
    "3817049": [
        {
            "dateadded": "2026-04-12 14:02:13 UTC",
            "url": "https://raw.githubusercontent.com/edwindoremi/Asterisk/refs/heads/main/templates/Software_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:44:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817049/",
            "reporter": "tcains1"
        }
    ],
    "3817050": [
        {
            "dateadded": "2026-04-12 14:02:13 UTC",
            "url": "https://raw.githubusercontent.com/FauzanOktavianto/praktikum2020/refs/heads/master/Modul%20PDF/praktikum_2.9-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817050/",
            "reporter": "tcains1"
        }
    ],
    "3817051": [
        {
            "dateadded": "2026-04-12 14:02:13 UTC",
            "url": "https://github.com/FauzanOktavianto/praktikum2020/raw/refs/heads/master/Modul%20PDF/praktikum_2.9-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817051/",
            "reporter": "tcains1"
        }
    ],
    "3817052": [
        {
            "dateadded": "2026-04-12 14:02:13 UTC",
            "url": "https://raw.githubusercontent.com/gilbertGabe/valthrun-cs2/refs/heads/main/radar/shared/src/bin/valthrun_cs_v3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:08:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817052/",
            "reporter": "tcains1"
        }
    ],
    "3817048": [
        {
            "dateadded": "2026-04-12 13:59:12 UTC",
            "url": "https://github.com/Pranavchaure/Live-Chat-App/raw/refs/heads/main/backend/node_modules/undefsafe/lib/App-Chat-Live-2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817048/",
            "reporter": "tcains1"
        }
    ],
    "3817047": [
        {
            "dateadded": "2026-04-12 13:58:17 UTC",
            "url": "https://github.com/Pranavchaure/Travel-Website/raw/refs/heads/main/images/Website-Travel-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:32:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817047/",
            "reporter": "tcains1"
        }
    ],
    "3817046": [
        {
            "dateadded": "2026-04-12 13:58:16 UTC",
            "url": "https://raw.githubusercontent.com/Pranavchaure/Travel-Website/refs/heads/main/images/Website-Travel-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:58:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817046/",
            "reporter": "tcains1"
        }
    ],
    "3817043": [
        {
            "dateadded": "2026-04-12 13:58:14 UTC",
            "url": "https://raw.githubusercontent.com/Pranavchaure/Live-Chat-App/refs/heads/main/backend/node_modules/undefsafe/lib/App-Chat-Live-2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817043/",
            "reporter": "tcains1"
        }
    ],
    "3817044": [
        {
            "dateadded": "2026-04-12 13:58:14 UTC",
            "url": "https://quaxcheck.com.tr/api/d/chromelevator.exe",
            "url_status": "offline",
            "last_online": "2026-04-20 16:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "payload"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817044/",
            "reporter": "burger"
        }
    ],
    "3817045": [
        {
            "dateadded": "2026-04-12 13:58:14 UTC",
            "url": "https://github.com/GHost1959/indies-on-solana/raw/refs/heads/main/.idea/inspectionProfiles/indies-solana-on-v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:52:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817045/",
            "reporter": "tcains1"
        }
    ],
    "3817042": [
        {
            "dateadded": "2026-04-12 13:58:13 UTC",
            "url": "https://github.com/Pranavchaure/Pong-Remake/raw/refs/heads/main/stroup/Remake_Pong_v1.2-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:53:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817042/",
            "reporter": "tcains1"
        }
    ],
    "3817040": [
        {
            "dateadded": "2026-04-12 13:58:12 UTC",
            "url": "https://raw.githubusercontent.com/Pranavchaure/Pong-Remake/refs/heads/main/stroup/Remake_Pong_v1.2-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:17:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817040/",
            "reporter": "tcains1"
        }
    ],
    "3817041": [
        {
            "dateadded": "2026-04-12 13:58:12 UTC",
            "url": "https://raw.githubusercontent.com/GHost1959/indies-on-solana/refs/heads/main/.idea/inspectionProfiles/indies-solana-on-v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:36:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817041/",
            "reporter": "tcains1"
        }
    ],
    "3817039": [
        {
            "dateadded": "2026-04-12 13:56:16 UTC",
            "url": "https://github.com/aaradhya26/Login-and-registration-using-Room-database/raw/refs/heads/master/chord/Login_and_database_registration_Room_using_3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:26:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817039/",
            "reporter": "tcains1"
        }
    ],
    "3817038": [
        {
            "dateadded": "2026-04-12 13:56:13 UTC",
            "url": "https://github.com/aaradhya26/Lib/raw/refs/heads/master/referral/Software-3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:20:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817038/",
            "reporter": "tcains1"
        }
    ],
    "3817036": [
        {
            "dateadded": "2026-04-12 13:56:12 UTC",
            "url": "https://raw.githubusercontent.com/aaradhya26/Login-and-registration-using-Room-database/refs/heads/master/chord/Login_and_database_registration_Room_using_3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817036/",
            "reporter": "tcains1"
        }
    ],
    "3817037": [
        {
            "dateadded": "2026-04-12 13:56:12 UTC",
            "url": "https://raw.githubusercontent.com/aaradhya26/swaybaeofficial-v2/refs/heads/master/barrandite/swaybaeofficial_v_3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817037/",
            "reporter": "tcains1"
        }
    ],
    "3817033": [
        {
            "dateadded": "2026-04-12 13:56:11 UTC",
            "url": "https://github.com/Manimahsoub/individual_level_project/raw/refs/heads/main/pinny/project_level_individual_v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817033/",
            "reporter": "tcains1"
        }
    ],
    "3817034": [
        {
            "dateadded": "2026-04-12 13:56:11 UTC",
            "url": "https://raw.githubusercontent.com/aaradhya26/Lib/refs/heads/master/referral/Software-3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817034/",
            "reporter": "tcains1"
        }
    ],
    "3817035": [
        {
            "dateadded": "2026-04-12 13:56:11 UTC",
            "url": "https://github.com/aaradhya26/swaybaeofficial-v2/raw/refs/heads/master/barrandite/swaybaeofficial_v_3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817035/",
            "reporter": "tcains1"
        }
    ],
    "3817031": [
        {
            "dateadded": "2026-04-12 13:56:10 UTC",
            "url": "https://github.com/bartgastra/web3-rpg/raw/refs/heads/main/contracts/typechain-types/@openzeppelin/contracts/utils/introspection/web_rpg_Verulamian.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817031/",
            "reporter": "tcains1"
        }
    ],
    "3817032": [
        {
            "dateadded": "2026-04-12 13:56:10 UTC",
            "url": "https://raw.githubusercontent.com/Manimahsoub/individual_level_project/refs/heads/main/pinny/project_level_individual_v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 11:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817032/",
            "reporter": "tcains1"
        }
    ],
    "3817030": [
        {
            "dateadded": "2026-04-12 13:56:08 UTC",
            "url": "https://raw.githubusercontent.com/bartgastra/web3-rpg/refs/heads/main/contracts/typechain-types/%40openzeppelin/contracts/utils/introspection/web_rpg_Verulamian.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:12:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817030/",
            "reporter": "tcains1"
        }
    ],
    "3817029": [
        {
            "dateadded": "2026-04-12 13:55:08 UTC",
            "url": "https://f0res-frame.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817029/",
            "reporter": "anonymous"
        }
    ],
    "3817028": [
        {
            "dateadded": "2026-04-12 13:50:14 UTC",
            "url": "https://raw.githubusercontent.com/Sha-dow837/Memory-Game/refs/heads/main/overlinger/Game_Memory_1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 05:18:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817028/",
            "reporter": "tcains1"
        }
    ],
    "3817022": [
        {
            "dateadded": "2026-04-12 13:50:13 UTC",
            "url": "https://raw.githubusercontent.com/wmmahdi/wmmahdi.github.io/refs/heads/main/uncolored/github-wmmahdi-io-v3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:26:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817022/",
            "reporter": "tcains1"
        }
    ],
    "3817023": [
        {
            "dateadded": "2026-04-12 13:50:13 UTC",
            "url": "https://github.com/Ozomake/lightbrush-moestradamus-art/raw/refs/heads/main/src/components/layout/moestradamus_art_lightbrush_v3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:59:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817023/",
            "reporter": "tcains1"
        }
    ],
    "3817024": [
        {
            "dateadded": "2026-04-12 13:50:13 UTC",
            "url": "https://raw.githubusercontent.com/Sha-dow837/curriculum/refs/heads/master/javascript/javascript-playground-questions/js-beginning-and-end-pairs/Software_v2.0-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 09:04:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817024/",
            "reporter": "tcains1"
        }
    ],
    "3817025": [
        {
            "dateadded": "2026-04-12 13:50:13 UTC",
            "url": "https://raw.githubusercontent.com/michaelnxdstan/IntelligentVRAMNode/refs/heads/main/nimmer/Intelligent_VRAM_Node_v3.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 05:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817025/",
            "reporter": "tcains1"
        }
    ],
    "3817026": [
        {
            "dateadded": "2026-04-12 13:50:13 UTC",
            "url": "https://raw.githubusercontent.com/Ozomake/lightbrush-moestradamus-art/refs/heads/main/src/components/layout/moestradamus_art_lightbrush_v3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 05:29:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817026/",
            "reporter": "tcains1"
        }
    ],
    "3817027": [
        {
            "dateadded": "2026-04-12 13:50:13 UTC",
            "url": "https://github.com/michaelnxdstan/IntelligentVRAMNode/raw/refs/heads/main/nimmer/Intelligent_VRAM_Node_v3.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 05:56:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817027/",
            "reporter": "tcains1"
        }
    ],
    "3817021": [
        {
            "dateadded": "2026-04-12 13:50:12 UTC",
            "url": "https://github.com/wmmahdi/Rps-plus-gemini-ai/raw/refs/heads/main/frontend/Rps-plus-ai-gemini-v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 07:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817021/",
            "reporter": "tcains1"
        }
    ],
    "3817020": [
        {
            "dateadded": "2026-04-12 13:50:11 UTC",
            "url": "https://github.com/Sha-dow837/curriculum/raw/refs/heads/master/javascript/javascript-playground-questions/js-beginning-and-end-pairs/Software_v2.0-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:44:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817020/",
            "reporter": "tcains1"
        }
    ],
    "3817018": [
        {
            "dateadded": "2026-04-12 13:50:10 UTC",
            "url": "https://raw.githubusercontent.com/walletmfi/c64stream/refs/heads/main/tools/stream-c-v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817018/",
            "reporter": "tcains1"
        }
    ],
    "3817019": [
        {
            "dateadded": "2026-04-12 13:50:10 UTC",
            "url": "https://raw.githubusercontent.com/PedraoDUgas/RaylibUE/refs/heads/main/Source/RaylibUE/Private/Raylib-UE-v3.5-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:08:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817019/",
            "reporter": "tcains1"
        }
    ],
    "3817013": [
        {
            "dateadded": "2026-04-12 13:50:08 UTC",
            "url": "https://github.com/Sha-dow837/Memory-Game/raw/refs/heads/main/overlinger/Game_Memory_1.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 05:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817013/",
            "reporter": "tcains1"
        }
    ],
    "3817014": [
        {
            "dateadded": "2026-04-12 13:50:08 UTC",
            "url": "https://github.com/wmmahdi/wmmahdi.github.io/raw/refs/heads/main/uncolored/github-wmmahdi-io-v3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:42:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817014/",
            "reporter": "tcains1"
        }
    ],
    "3817015": [
        {
            "dateadded": "2026-04-12 13:50:08 UTC",
            "url": "https://raw.githubusercontent.com/wmmahdi/Rps-plus-gemini-ai/refs/heads/main/frontend/Rps-plus-ai-gemini-v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 06:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817015/",
            "reporter": "tcains1"
        }
    ],
    "3817016": [
        {
            "dateadded": "2026-04-12 13:50:08 UTC",
            "url": "https://github.com/PedraoDUgas/RaylibUE/raw/refs/heads/main/Source/RaylibUE/Private/Raylib-UE-v3.5-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:39:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817016/",
            "reporter": "tcains1"
        }
    ],
    "3817017": [
        {
            "dateadded": "2026-04-12 13:50:08 UTC",
            "url": "https://github.com/walletmfi/c64stream/raw/refs/heads/main/tools/stream-c-v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817017/",
            "reporter": "tcains1"
        }
    ],
    "3817012": [
        {
            "dateadded": "2026-04-12 13:49:10 UTC",
            "url": "https://n0hi.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817012/",
            "reporter": "anonymous"
        }
    ],
    "3817011": [
        {
            "dateadded": "2026-04-12 13:48:20 UTC",
            "url": "http://61.54.42.27:37347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:20:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817011/",
            "reporter": "geenensp"
        }
    ],
    "3817009": [
        {
            "dateadded": "2026-04-12 13:45:12 UTC",
            "url": "https://github.com/su3488499/su3488499.github.io/raw/refs/heads/main/Brunelliaceae/io-github-su-v3.4-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817009/",
            "reporter": "tcains1"
        }
    ],
    "3817010": [
        {
            "dateadded": "2026-04-12 13:45:12 UTC",
            "url": "https://github.com/MTVCode97/long/raw/refs/heads/main/long/long/message1.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 13:59:30 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817010/",
            "reporter": "tcains1"
        }
    ],
    "3817008": [
        {
            "dateadded": "2026-04-12 13:45:08 UTC",
            "url": "https://raw.githubusercontent.com/MTVCode97/long/refs/heads/main/long/long/message1.txt",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:00 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817008/",
            "reporter": "tcains1"
        }
    ],
    "3817007": [
        {
            "dateadded": "2026-04-12 13:44:16 UTC",
            "url": "https://github.com/YawAmoah/tetris-on-base/raw/refs/heads/main/tetris-on-base/app/api/base_tetris_on_v3.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 13:44:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817007/",
            "reporter": "tcains1"
        }
    ],
    "3817003": [
        {
            "dateadded": "2026-04-12 13:44:12 UTC",
            "url": "https://raw.githubusercontent.com/YawAmoah/yawamoah.github.io/refs/heads/main/steppe/io-github-yawamoah-disbalancement.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:58:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817003/",
            "reporter": "tcains1"
        }
    ],
    "3817004": [
        {
            "dateadded": "2026-04-12 13:44:12 UTC",
            "url": "https://raw.githubusercontent.com/su3488499/SourenDatta_Mega-HTML-CSS-Project_AeroUI-Design-System/refs/heads/main/css/System-Datta-CS-HTM-U-Mega-Design-Souren-Aero-Project-cariama.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:24:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817004/",
            "reporter": "tcains1"
        }
    ],
    "3817005": [
        {
            "dateadded": "2026-04-12 13:44:12 UTC",
            "url": "https://github.com/AhmadShahid12/ft_transcendence/raw/refs/heads/main/frontend/transcendence_ft_v2.5-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:04:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817005/",
            "reporter": "tcains1"
        }
    ],
    "3817006": [
        {
            "dateadded": "2026-04-12 13:44:12 UTC",
            "url": "https://raw.githubusercontent.com/su3488499/su3488499.github.io/refs/heads/main/Brunelliaceae/io-github-su-v3.4-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817006/",
            "reporter": "tcains1"
        }
    ],
    "3817001": [
        {
            "dateadded": "2026-04-12 13:44:11 UTC",
            "url": "https://raw.githubusercontent.com/YawAmoah/tetris-on-base/refs/heads/main/tetris-on-base/app/api/base_tetris_on_v3.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817001/",
            "reporter": "tcains1"
        }
    ],
    "3817002": [
        {
            "dateadded": "2026-04-12 13:44:11 UTC",
            "url": "https://github.com/AhmadShahid12/ahmadshahid12.github.io/raw/refs/heads/main/semianarchist/github_ahmadshahid_io_2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 12:51:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817002/",
            "reporter": "tcains1"
        }
    ],
    "3816999": [
        {
            "dateadded": "2026-04-12 13:44:09 UTC",
            "url": "https://raw.githubusercontent.com/AhmadShahid12/ft_transcendence/refs/heads/main/frontend/transcendence_ft_v2.5-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:23:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816999/",
            "reporter": "tcains1"
        }
    ],
    "3817000": [
        {
            "dateadded": "2026-04-12 13:44:09 UTC",
            "url": "https://github.com/su3488499/SourenDatta_Mega-HTML-CSS-Project_AeroUI-Design-System/raw/refs/heads/main/css/System-Datta-CS-HTM-U-Mega-Design-Souren-Aero-Project-cariama.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3817000/",
            "reporter": "tcains1"
        }
    ],
    "3816997": [
        {
            "dateadded": "2026-04-12 13:44:07 UTC",
            "url": "https://raw.githubusercontent.com/AhmadShahid12/ahmadshahid12.github.io/refs/heads/main/semianarchist/github_ahmadshahid_io_2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:18:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816997/",
            "reporter": "tcains1"
        }
    ],
    "3816998": [
        {
            "dateadded": "2026-04-12 13:44:07 UTC",
            "url": "https://github.com/YawAmoah/yawamoah.github.io/raw/refs/heads/main/steppe/io-github-yawamoah-disbalancement.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:23:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816998/",
            "reporter": "tcains1"
        }
    ],
    "3816996": [
        {
            "dateadded": "2026-04-12 13:43:16 UTC",
            "url": "http://115.57.81.22:57492/i",
            "url_status": "offline",
            "last_online": "2026-04-14 08:46:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816996/",
            "reporter": "geenensp"
        }
    ],
    "3816995": [
        {
            "dateadded": "2026-04-12 13:43:12 UTC",
            "url": "https://sketcult.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816995/",
            "reporter": "anonymous"
        }
    ],
    "3816994": [
        {
            "dateadded": "2026-04-12 13:41:17 UTC",
            "url": "https://github.com/gehansa/gehansa.github.io/raw/refs/heads/main/impetition/io-gehansa-github-1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:59:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816994/",
            "reporter": "tcains1"
        }
    ],
    "3816993": [
        {
            "dateadded": "2026-04-12 13:41:13 UTC",
            "url": "https://raw.githubusercontent.com/riskijeki57/riskijeki57.github.io/refs/heads/main/concupy/github_riskijeki_io_v3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816993/",
            "reporter": "tcains1"
        }
    ],
    "3816992": [
        {
            "dateadded": "2026-04-12 13:41:11 UTC",
            "url": "https://github.com/riskijeki57/riskijeki57.github.io/raw/refs/heads/main/concupy/github_riskijeki_io_v3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:23:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816992/",
            "reporter": "tcains1"
        }
    ],
    "3816991": [
        {
            "dateadded": "2026-04-12 13:41:10 UTC",
            "url": "https://raw.githubusercontent.com/gehansa/3DS-Shader-Modifier/refs/heads/main/logodaedaly/Shader_D_Modifier_v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:22:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816991/",
            "reporter": "tcains1"
        }
    ],
    "3816990": [
        {
            "dateadded": "2026-04-12 13:41:08 UTC",
            "url": "https://raw.githubusercontent.com/riskijeki57/Native-Snake-AI/refs/heads/master/ovey/Snake-AI-Native-v3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816990/",
            "reporter": "tcains1"
        }
    ],
    "3816989": [
        {
            "dateadded": "2026-04-12 13:41:07 UTC",
            "url": "https://github.com/riskijeki57/Native-Snake-AI/raw/refs/heads/master/ovey/Snake-AI-Native-v3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:06:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816989/",
            "reporter": "tcains1"
        }
    ],
    "3816987": [
        {
            "dateadded": "2026-04-12 13:41:06 UTC",
            "url": "https://github.com/gehansa/3DS-Shader-Modifier/raw/refs/heads/main/logodaedaly/Shader_D_Modifier_v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 10:44:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816987/",
            "reporter": "tcains1"
        }
    ],
    "3816988": [
        {
            "dateadded": "2026-04-12 13:41:06 UTC",
            "url": "https://raw.githubusercontent.com/gehansa/gehansa.github.io/refs/heads/main/impetition/io-gehansa-github-1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-13 11:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816988/",
            "reporter": "tcains1"
        }
    ],
    "3816986": [
        {
            "dateadded": "2026-04-12 13:38:10 UTC",
            "url": "http://130.94.41.210:8080/update.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "130-94-41-210-8080",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816986/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816985": [
        {
            "dateadded": "2026-04-12 13:36:08 UTC",
            "url": "https://tricrestum.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816985/",
            "reporter": "anonymous"
        }
    ],
    "3816984": [
        {
            "dateadded": "2026-04-12 13:30:13 UTC",
            "url": "https://rur414-line.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816984/",
            "reporter": "anonymous"
        }
    ],
    "3816983": [
        {
            "dateadded": "2026-04-12 13:28:18 UTC",
            "url": "http://123.148.198.166:51569/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:25:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816983/",
            "reporter": "geenensp"
        }
    ],
    "3816982": [
        {
            "dateadded": "2026-04-12 13:22:12 UTC",
            "url": "https://letteneed.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816982/",
            "reporter": "anonymous"
        }
    ],
    "3816981": [
        {
            "dateadded": "2026-04-12 13:16:08 UTC",
            "url": "https://pjrlyy.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816981/",
            "reporter": "anonymous"
        }
    ],
    "3816980": [
        {
            "dateadded": "2026-04-12 13:13:14 UTC",
            "url": "http://221.15.4.9:47466/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:22:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816980/",
            "reporter": "geenensp"
        }
    ],
    "3816979": [
        {
            "dateadded": "2026-04-12 13:09:18 UTC",
            "url": "http://221.15.15.16:37694/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:26:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816979/",
            "reporter": "geenensp"
        }
    ],
    "3816978": [
        {
            "dateadded": "2026-04-12 13:09:10 UTC",
            "url": "https://sdasrfj.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816978/",
            "reporter": "anonymous"
        }
    ],
    "3816977": [
        {
            "dateadded": "2026-04-12 13:02:12 UTC",
            "url": "https://irfy5j.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 13:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816977/",
            "reporter": "anonymous"
        }
    ],
    "3816976": [
        {
            "dateadded": "2026-04-12 13:02:11 UTC",
            "url": "http://37.26.86.218:47719/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:19:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816976/",
            "reporter": "geenensp"
        }
    ],
    "3816975": [
        {
            "dateadded": "2026-04-12 13:00:12 UTC",
            "url": "http://123.148.198.166:51569/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 17:41:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816975/",
            "reporter": "geenensp"
        }
    ],
    "3816974": [
        {
            "dateadded": "2026-04-12 12:56:17 UTC",
            "url": "http://110.39.234.150:56706/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:42:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816974/",
            "reporter": "geenensp"
        }
    ],
    "3816973": [
        {
            "dateadded": "2026-04-12 12:55:16 UTC",
            "url": "https://deepoutl.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816973/",
            "reporter": "anonymous"
        }
    ],
    "3816972": [
        {
            "dateadded": "2026-04-12 12:55:07 UTC",
            "url": "http://130.12.180.16/bins/redis-proxyd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816972/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816958": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/bins/redis-scand",
            "url_status": "offline",
            "last_online": "2026-04-15 17:17:37 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816958/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816959": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-runcd",
            "url_status": "offline",
            "last_online": "2026-04-15 10:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816959/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816960": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/bins/redis-sbomd",
            "url_status": "offline",
            "last_online": "2026-04-15 10:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816960/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816961": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/bins/redis-runcd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816961/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816962": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-buildxd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816962/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816963": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-daemon",
            "url_status": "offline",
            "last_online": "2026-04-15 16:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816963/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816964": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/bins/redis-daemon",
            "url_status": "offline",
            "last_online": "2026-04-15 15:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816964/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816965": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-conteinerd-shim",
            "url_status": "offline",
            "last_online": "2026-04-15 17:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816965/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816966": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-swarmd",
            "url_status": "offline",
            "last_online": "2026-04-15 11:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816966/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816967": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/bins/redis-composd",
            "url_status": "offline",
            "last_online": "2026-04-15 10:20:19 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816967/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816968": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-sbomd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816968/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816969": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-conteinerd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:15:50 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816969/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816970": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/redis-composd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:28:23 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816970/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816971": [
        {
            "dateadded": "2026-04-12 12:54:12 UTC",
            "url": "http://130.12.180.16/bins/redis-buildxd",
            "url_status": "offline",
            "last_online": "2026-04-15 17:16:06 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816971/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816944": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/redis-scoutd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816944/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816945": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/redis-proxyd",
            "url_status": "offline",
            "last_online": "2026-04-15 17:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816945/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816946": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/redis-conteinerd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:50:22 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816946/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816947": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/redis-conteinerd-shim",
            "url_status": "offline",
            "last_online": "2026-04-15 10:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816947/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816948": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/redis-credentiald",
            "url_status": "offline",
            "last_online": "2026-04-15 16:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816948/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816949": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/redis-scoutd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:47:40 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816949/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816950": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/redis-swarmd",
            "url_status": "offline",
            "last_online": "2026-04-15 11:40:19 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816950/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816951": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/redis-credentiald",
            "url_status": "offline",
            "last_online": "2026-04-15 16:31:54 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816951/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816952": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/armada",
            "url_status": "offline",
            "last_online": "2026-04-15 17:08:29 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816952/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816953": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/redis-initd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:14:23 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816953/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816954": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/redis-scand",
            "url_status": "offline",
            "last_online": "2026-04-15 11:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816954/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816955": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://221.15.4.9:47466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:00:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816955/",
            "reporter": "geenensp"
        }
    ],
    "3816956": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/bins/redis-initd",
            "url_status": "offline",
            "last_online": "2026-04-15 16:58:46 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816956/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816957": [
        {
            "dateadded": "2026-04-12 12:54:11 UTC",
            "url": "http://130.12.180.16/armada",
            "url_status": "offline",
            "last_online": "2026-04-15 12:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "gafgyt",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816957/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816943": [
        {
            "dateadded": "2026-04-12 12:54:09 UTC",
            "url": "http://130.12.180.16/init.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "130-12-180-16",
                "armada",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816943/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816942": [
        {
            "dateadded": "2026-04-12 12:50:08 UTC",
            "url": "https://sapcha.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816942/",
            "reporter": "anonymous"
        }
    ],
    "3816941": [
        {
            "dateadded": "2026-04-12 12:45:09 UTC",
            "url": "http://222.139.225.181:46083/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:49:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816941/",
            "reporter": "geenensp"
        }
    ],
    "3816940": [
        {
            "dateadded": "2026-04-12 12:44:06 UTC",
            "url": "http://178.16.55.80/System.vbs",
            "url_status": "offline",
            "last_online": "2026-04-25 15:09:04 UTC",
            "threat": "malware_download",
            "tags": [
                "DEU",
                "geofenced",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816940/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816939": [
        {
            "dateadded": "2026-04-12 12:43:09 UTC",
            "url": "https://summ4-field.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816939/",
            "reporter": "anonymous"
        }
    ],
    "3816938": [
        {
            "dateadded": "2026-04-12 12:43:05 UTC",
            "url": "https://178.16.55.80/System.vbs",
            "url_status": "offline",
            "last_online": "2026-04-25 15:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-80",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816938/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816937": [
        {
            "dateadded": "2026-04-12 12:41:20 UTC",
            "url": "http://221.15.15.16:37694/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:34:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816937/",
            "reporter": "geenensp"
        }
    ],
    "3816936": [
        {
            "dateadded": "2026-04-12 12:38:16 UTC",
            "url": "http://125.41.8.16:58154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:26:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816936/",
            "reporter": "geenensp"
        }
    ],
    "3816935": [
        {
            "dateadded": "2026-04-12 12:36:16 UTC",
            "url": "https://raw.githubusercontent.com/Ewoba/ewoba.github.io/refs/heads/main/lampoon/io_github_ewoba_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816935/",
            "reporter": "tcains1"
        }
    ],
    "3816934": [
        {
            "dateadded": "2026-04-12 12:36:12 UTC",
            "url": "https://github.com/Ewoba/kick-tg-rewards/raw/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/packaging/tg-kick-rewards-v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816934/",
            "reporter": "tcains1"
        }
    ],
    "3816932": [
        {
            "dateadded": "2026-04-12 12:36:09 UTC",
            "url": "https://github.com/Pato851/pato851.github.io/raw/refs/heads/main/supraterraneous/io-github-pato-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816932/",
            "reporter": "tcains1"
        }
    ],
    "3816933": [
        {
            "dateadded": "2026-04-12 12:36:09 UTC",
            "url": "https://github.com/Ewoba/ewoba.github.io/raw/refs/heads/main/lampoon/io_github_ewoba_v3.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816933/",
            "reporter": "tcains1"
        }
    ],
    "3816928": [
        {
            "dateadded": "2026-04-12 12:36:07 UTC",
            "url": "https://raw.githubusercontent.com/Ewoba/kick-tg-rewards/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/packaging/tg-kick-rewards-v2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816928/",
            "reporter": "tcains1"
        }
    ],
    "3816929": [
        {
            "dateadded": "2026-04-12 12:36:07 UTC",
            "url": "https://raw.githubusercontent.com/Pato851/rock-breaker/refs/heads/main/src/components/rock_breaker_v1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816929/",
            "reporter": "tcains1"
        }
    ],
    "3816930": [
        {
            "dateadded": "2026-04-12 12:36:07 UTC",
            "url": "https://github.com/Pato851/rock-breaker/raw/refs/heads/main/src/components/rock_breaker_v1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816930/",
            "reporter": "tcains1"
        }
    ],
    "3816931": [
        {
            "dateadded": "2026-04-12 12:36:07 UTC",
            "url": "https://raw.githubusercontent.com/Pato851/pato851.github.io/refs/heads/main/supraterraneous/io-github-pato-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816931/",
            "reporter": "tcains1"
        }
    ],
    "3816927": [
        {
            "dateadded": "2026-04-12 12:35:09 UTC",
            "url": "https://sparrowultra.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816927/",
            "reporter": "anonymous"
        }
    ],
    "3816925": [
        {
            "dateadded": "2026-04-12 12:34:05 UTC",
            "url": "https://178.16.54.149/sostener.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "178-16-54-149",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816925/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816926": [
        {
            "dateadded": "2026-04-12 12:34:05 UTC",
            "url": "https://178.16.54.149/andre.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "178-16-54-149",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816926/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816924": [
        {
            "dateadded": "2026-04-12 12:32:15 UTC",
            "url": "http://37.26.86.218:47719/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:49:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816924/",
            "reporter": "geenensp"
        }
    ],
    "3816923": [
        {
            "dateadded": "2026-04-12 12:32:11 UTC",
            "url": "https://github.com/talktobaby/infinity-snip3/raw/refs/heads/master/audio/infinity_snip_screeve.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816923/",
            "reporter": "tcains1"
        }
    ],
    "3816921": [
        {
            "dateadded": "2026-04-12 12:32:08 UTC",
            "url": "https://github.com/talktobaby/talktobaby.github.io/raw/refs/heads/main/hymeneals/talktobaby-io-github-v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816921/",
            "reporter": "tcains1"
        }
    ],
    "3816922": [
        {
            "dateadded": "2026-04-12 12:32:08 UTC",
            "url": "https://raw.githubusercontent.com/talktobaby/infinity-snip3/refs/heads/master/audio/infinity_snip_screeve.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816922/",
            "reporter": "tcains1"
        }
    ],
    "3816920": [
        {
            "dateadded": "2026-04-12 12:32:06 UTC",
            "url": "https://raw.githubusercontent.com/talktobaby/talktobaby.github.io/refs/heads/main/hymeneals/talktobaby-io-github-v1.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816920/",
            "reporter": "tcains1"
        }
    ],
    "3816919": [
        {
            "dateadded": "2026-04-12 12:31:19 UTC",
            "url": "http://123.10.130.49:51449/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:41:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816919/",
            "reporter": "geenensp"
        }
    ],
    "3816917": [
        {
            "dateadded": "2026-04-12 12:30:17 UTC",
            "url": "http://196.189.96.59:51959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 01:55:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816917/",
            "reporter": "geenensp"
        }
    ],
    "3816918": [
        {
            "dateadded": "2026-04-12 12:30:17 UTC",
            "url": "http://110.39.234.150:56706/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816918/",
            "reporter": "geenensp"
        }
    ],
    "3816916": [
        {
            "dateadded": "2026-04-12 12:29:15 UTC",
            "url": "https://mhkugefu.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816916/",
            "reporter": "anonymous"
        }
    ],
    "3816915": [
        {
            "dateadded": "2026-04-12 12:27:24 UTC",
            "url": "http://222.139.225.181:46083/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816915/",
            "reporter": "geenensp"
        }
    ],
    "3816914": [
        {
            "dateadded": "2026-04-12 12:27:08 UTC",
            "url": "http://27.207.82.181:59400/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816914/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816913": [
        {
            "dateadded": "2026-04-12 12:26:19 UTC",
            "url": "http://219.156.58.239:39369/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:09:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816913/",
            "reporter": "geenensp"
        }
    ],
    "3816912": [
        {
            "dateadded": "2026-04-12 12:22:12 UTC",
            "url": "https://5xhr.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816912/",
            "reporter": "anonymous"
        }
    ],
    "3816911": [
        {
            "dateadded": "2026-04-12 12:22:06 UTC",
            "url": "http://42.225.62.169:50063/i",
            "url_status": "offline",
            "last_online": "2026-04-12 14:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816911/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816910": [
        {
            "dateadded": "2026-04-12 12:19:17 UTC",
            "url": "http://60.18.11.208:32961/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:46:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816910/",
            "reporter": "geenensp"
        }
    ],
    "3816909": [
        {
            "dateadded": "2026-04-12 12:15:11 UTC",
            "url": "https://dynspireis.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816909/",
            "reporter": "anonymous"
        }
    ],
    "3816908": [
        {
            "dateadded": "2026-04-12 12:12:16 UTC",
            "url": "http://42.225.62.169:50063/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 14:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816908/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816907": [
        {
            "dateadded": "2026-04-12 12:12:07 UTC",
            "url": "http://27.207.82.181:59400/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 13:57:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816907/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816906": [
        {
            "dateadded": "2026-04-12 12:10:13 UTC",
            "url": "https://rn1no-hold.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816906/",
            "reporter": "anonymous"
        }
    ],
    "3816905": [
        {
            "dateadded": "2026-04-12 12:07:07 UTC",
            "url": "http://115.52.247.47:59739/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:22:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816905/",
            "reporter": "geenensp"
        }
    ],
    "3816904": [
        {
            "dateadded": "2026-04-12 12:05:17 UTC",
            "url": "http://61.53.133.158:37406/i",
            "url_status": "offline",
            "last_online": "2026-04-12 15:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816904/",
            "reporter": "geenensp"
        }
    ],
    "3816903": [
        {
            "dateadded": "2026-04-12 12:03:14 UTC",
            "url": "https://dosb0zd.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 12:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816903/",
            "reporter": "anonymous"
        }
    ],
    "3816902": [
        {
            "dateadded": "2026-04-12 12:00:19 UTC",
            "url": "http://115.49.66.246:52417/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:53:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816902/",
            "reporter": "geenensp"
        }
    ],
    "3816901": [
        {
            "dateadded": "2026-04-12 11:57:13 UTC",
            "url": "http://221.15.146.103:54816/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:53:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816901/",
            "reporter": "geenensp"
        }
    ],
    "3816900": [
        {
            "dateadded": "2026-04-12 11:56:10 UTC",
            "url": "https://pulse1-phase.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816900/",
            "reporter": "anonymous"
        }
    ],
    "3816899": [
        {
            "dateadded": "2026-04-12 11:55:19 UTC",
            "url": "http://60.18.11.208:32961/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 05:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816899/",
            "reporter": "geenensp"
        }
    ],
    "3816898": [
        {
            "dateadded": "2026-04-12 11:54:19 UTC",
            "url": "http://105.111.204.158:47130/i",
            "url_status": "offline",
            "last_online": "2026-04-12 11:54:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816898/",
            "reporter": "geenensp"
        }
    ],
    "3816897": [
        {
            "dateadded": "2026-04-12 11:51:13 UTC",
            "url": "https://github.com/BeAsT700/ServerMaker/raw/refs/heads/main/data/Maker_Server_v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:02 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816897/",
            "reporter": "tcains1"
        }
    ],
    "3816896": [
        {
            "dateadded": "2026-04-12 11:51:12 UTC",
            "url": "https://raw.githubusercontent.com/BeAsT700/beast700.github.io/refs/heads/main/still/beast_io_github_2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816896/",
            "reporter": "tcains1"
        }
    ],
    "3816895": [
        {
            "dateadded": "2026-04-12 11:51:10 UTC",
            "url": "https://raw.githubusercontent.com/BeAsT700/flexlkgaming-com/refs/heads/main/firmhearted/com_flexlkgaming_1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 13:07:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816895/",
            "reporter": "tcains1"
        }
    ],
    "3816893": [
        {
            "dateadded": "2026-04-12 11:51:09 UTC",
            "url": "https://github.com/BeAsT700/flexlkgaming-com/raw/refs/heads/main/firmhearted/com_flexlkgaming_1.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816893/",
            "reporter": "tcains1"
        }
    ],
    "3816894": [
        {
            "dateadded": "2026-04-12 11:51:09 UTC",
            "url": "https://github.com/BeAsT700/beast700.github.io/raw/refs/heads/main/still/beast_io_github_2.9.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816894/",
            "reporter": "tcains1"
        }
    ],
    "3816892": [
        {
            "dateadded": "2026-04-12 11:51:07 UTC",
            "url": "https://raw.githubusercontent.com/BeAsT700/ServerMaker/refs/heads/main/data/Maker_Server_v3.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:01 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816892/",
            "reporter": "tcains1"
        }
    ],
    "3816891": [
        {
            "dateadded": "2026-04-12 11:49:10 UTC",
            "url": "https://neura-vector.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816891/",
            "reporter": "anonymous"
        }
    ],
    "3816890": [
        {
            "dateadded": "2026-04-12 11:46:18 UTC",
            "url": "http://115.52.247.47:59739/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:26:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816890/",
            "reporter": "geenensp"
        }
    ],
    "3816888": [
        {
            "dateadded": "2026-04-12 11:45:14 UTC",
            "url": "https://github.com/xFoXuSx/xfoxusx.github.io/raw/refs/heads/main/arsenism/github_io_xfoxusx_v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:16:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816888/",
            "reporter": "tcains1"
        }
    ],
    "3816889": [
        {
            "dateadded": "2026-04-12 11:45:14 UTC",
            "url": "https://github.com/xFoXuSx/Arduino-joystick-and-servo-control/raw/refs/heads/main/lection/servo-Arduino-control-and-joystick-1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816889/",
            "reporter": "tcains1"
        }
    ],
    "3816887": [
        {
            "dateadded": "2026-04-12 11:45:12 UTC",
            "url": "https://raw.githubusercontent.com/xFoXuSx/Arduino-joystick-and-servo-control/refs/heads/main/lection/servo-Arduino-control-and-joystick-1.1.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816887/",
            "reporter": "tcains1"
        }
    ],
    "3816886": [
        {
            "dateadded": "2026-04-12 11:45:09 UTC",
            "url": "https://raw.githubusercontent.com/xFoXuSx/xfoxusx.github.io/refs/heads/main/arsenism/github_io_xfoxusx_v1.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816886/",
            "reporter": "tcains1"
        }
    ],
    "3816885": [
        {
            "dateadded": "2026-04-12 11:44:09 UTC",
            "url": "http://app.cc-coins.xyz/epdevmgr.dll",
            "url_status": "offline",
            "last_online": "2026-04-12 11:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "app-cc-coins-xyz",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816885/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816884": [
        {
            "dateadded": "2026-04-12 11:42:17 UTC",
            "url": "https://mogen.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816884/",
            "reporter": "anonymous"
        }
    ],
    "3816883": [
        {
            "dateadded": "2026-04-12 11:39:25 UTC",
            "url": "http://61.53.133.69:45126/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:03:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816883/",
            "reporter": "geenensp"
        }
    ],
    "3816882": [
        {
            "dateadded": "2026-04-12 11:36:26 UTC",
            "url": "http://81.228.61.65:44334/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 17:02:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816882/",
            "reporter": "geenensp"
        }
    ],
    "3816881": [
        {
            "dateadded": "2026-04-12 11:36:14 UTC",
            "url": "https://cmomy7g.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816881/",
            "reporter": "anonymous"
        }
    ],
    "3816880": [
        {
            "dateadded": "2026-04-12 11:34:08 UTC",
            "url": "http://154.36.188.81/openclaw%20installation.exe",
            "url_status": "offline",
            "last_online": "2026-04-12 11:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "154-36-188-81",
                "opendir",
                "PurpleFox",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816880/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816878": [
        {
            "dateadded": "2026-04-12 11:34:07 UTC",
            "url": "http://154.36.188.81/150.js",
            "url_status": "offline",
            "last_online": "2026-04-12 11:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "154-36-188-81",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816878/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816879": [
        {
            "dateadded": "2026-04-12 11:34:07 UTC",
            "url": "http://154.36.188.81/ware.js",
            "url_status": "offline",
            "last_online": "2026-04-12 11:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "154-36-188-81",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816879/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816877": [
        {
            "dateadded": "2026-04-12 11:32:20 UTC",
            "url": "http://105.111.204.158:47130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 11:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816877/",
            "reporter": "geenensp"
        }
    ],
    "3816876": [
        {
            "dateadded": "2026-04-12 11:30:17 UTC",
            "url": "https://glypipeli.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:30:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816876/",
            "reporter": "anonymous"
        }
    ],
    "3816875": [
        {
            "dateadded": "2026-04-12 11:29:22 UTC",
            "url": "http://221.15.146.103:54816/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:12:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816875/",
            "reporter": "geenensp"
        }
    ],
    "3816874": [
        {
            "dateadded": "2026-04-12 11:23:08 UTC",
            "url": "https://outletarray.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816874/",
            "reporter": "anonymous"
        }
    ],
    "3816873": [
        {
            "dateadded": "2026-04-12 11:18:25 UTC",
            "url": "http://125.47.231.76:40893/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816873/",
            "reporter": "geenensp"
        }
    ],
    "3816872": [
        {
            "dateadded": "2026-04-12 11:17:13 UTC",
            "url": "https://meta-cornp.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816872/",
            "reporter": "anonymous"
        }
    ],
    "3816871": [
        {
            "dateadded": "2026-04-12 11:13:24 UTC",
            "url": "http://219.154.160.33:35575/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:04:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816871/",
            "reporter": "geenensp"
        }
    ],
    "3816870": [
        {
            "dateadded": "2026-04-12 11:12:21 UTC",
            "url": "http://61.53.133.158:37406/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 15:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816870/",
            "reporter": "geenensp"
        }
    ],
    "3816869": [
        {
            "dateadded": "2026-04-12 11:10:13 UTC",
            "url": "https://scalelabel.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816869/",
            "reporter": "anonymous"
        }
    ],
    "3816868": [
        {
            "dateadded": "2026-04-12 11:09:06 UTC",
            "url": "http://193.233.89.32/cgi-bin.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 04:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-89-32",
                "exe",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816868/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816867": [
        {
            "dateadded": "2026-04-12 11:08:12 UTC",
            "url": "http://pl.avgkrbw.com/cgi-bin.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 04:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "opendir",
                "pl-avgkrbw-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816867/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816865": [
        {
            "dateadded": "2026-04-12 11:04:11 UTC",
            "url": "https://dawnbold.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 11:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816865/",
            "reporter": "anonymous"
        }
    ],
    "3816864": [
        {
            "dateadded": "2026-04-12 11:04:08 UTC",
            "url": "http://27.204.196.191:48777/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816864/",
            "reporter": "geenensp"
        }
    ],
    "3816863": [
        {
            "dateadded": "2026-04-12 11:04:07 UTC",
            "url": "https://193.233.89.32/cgi-bin.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 06:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "193-233-89-32",
                "exe",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816863/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816862": [
        {
            "dateadded": "2026-04-12 11:02:08 UTC",
            "url": "http://42.230.33.117:53163/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 11:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816862/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816861": [
        {
            "dateadded": "2026-04-12 10:57:16 UTC",
            "url": "https://dyndra8al.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:57:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816861/",
            "reporter": "anonymous"
        }
    ],
    "3816860": [
        {
            "dateadded": "2026-04-12 10:49:15 UTC",
            "url": "https://jymbrdt.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816860/",
            "reporter": "anonymous"
        }
    ],
    "3816858": [
        {
            "dateadded": "2026-04-12 10:48:25 UTC",
            "url": "http://112.248.107.147:43327/i",
            "url_status": "offline",
            "last_online": "2026-04-12 14:35:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816858/",
            "reporter": "geenensp"
        }
    ],
    "3816859": [
        {
            "dateadded": "2026-04-12 10:48:25 UTC",
            "url": "http://115.49.66.246:52417/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816859/",
            "reporter": "geenensp"
        }
    ],
    "3816857": [
        {
            "dateadded": "2026-04-12 10:45:18 UTC",
            "url": "http://125.47.231.76:40893/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:57:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816857/",
            "reporter": "geenensp"
        }
    ],
    "3816856": [
        {
            "dateadded": "2026-04-12 10:45:17 UTC",
            "url": "http://27.215.45.26:35402/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:19:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816856/",
            "reporter": "geenensp"
        }
    ],
    "3816855": [
        {
            "dateadded": "2026-04-12 10:44:16 UTC",
            "url": "https://sub-runvv.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:44:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816855/",
            "reporter": "anonymous"
        }
    ],
    "3816854": [
        {
            "dateadded": "2026-04-12 10:42:22 UTC",
            "url": "http://182.118.247.162:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:51:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816854/",
            "reporter": "geenensp"
        }
    ],
    "3816853": [
        {
            "dateadded": "2026-04-12 10:39:27 UTC",
            "url": "http://42.227.32.202:60833/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816853/",
            "reporter": "geenensp"
        }
    ],
    "3816852": [
        {
            "dateadded": "2026-04-12 10:38:23 UTC",
            "url": "http://27.204.196.191:48777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:25:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816852/",
            "reporter": "geenensp"
        }
    ],
    "3816851": [
        {
            "dateadded": "2026-04-12 10:37:14 UTC",
            "url": "https://anccompi.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816851/",
            "reporter": "anonymous"
        }
    ],
    "3816850": [
        {
            "dateadded": "2026-04-12 10:29:14 UTC",
            "url": "https://timbecor.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816850/",
            "reporter": "anonymous"
        }
    ],
    "3816849": [
        {
            "dateadded": "2026-04-12 10:26:25 UTC",
            "url": "http://42.234.141.169:39308/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816849/",
            "reporter": "geenensp"
        }
    ],
    "3816848": [
        {
            "dateadded": "2026-04-12 10:24:53 UTC",
            "url": "http://112.248.107.147:43327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:24:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816848/",
            "reporter": "geenensp"
        }
    ],
    "3816847": [
        {
            "dateadded": "2026-04-12 10:24:24 UTC",
            "url": "http://110.37.103.213:47064/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:24:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816847/",
            "reporter": "geenensp"
        }
    ],
    "3816846": [
        {
            "dateadded": "2026-04-12 10:24:16 UTC",
            "url": "https://kel-valear.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816846/",
            "reporter": "anonymous"
        }
    ],
    "3816845": [
        {
            "dateadded": "2026-04-12 10:18:22 UTC",
            "url": "http://27.215.45.26:35402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:12:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816845/",
            "reporter": "geenensp"
        }
    ],
    "3816844": [
        {
            "dateadded": "2026-04-12 10:16:12 UTC",
            "url": "https://f1x8-point.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816844/",
            "reporter": "anonymous"
        }
    ],
    "3816843": [
        {
            "dateadded": "2026-04-12 10:16:09 UTC",
            "url": "http://115.49.120.141:36611/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816843/",
            "reporter": "geenensp"
        }
    ],
    "3816842": [
        {
            "dateadded": "2026-04-12 10:15:25 UTC",
            "url": "http://42.227.32.202:60833/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:17:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816842/",
            "reporter": "geenensp"
        }
    ],
    "3816841": [
        {
            "dateadded": "2026-04-12 10:15:17 UTC",
            "url": "https://raw.githubusercontent.com/abdalrhmanasif5/Tic_tac_toe/refs/heads/main/auriculae/toe-Tic-tac-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816841/",
            "reporter": "tcains1"
        }
    ],
    "3816837": [
        {
            "dateadded": "2026-04-12 10:15:16 UTC",
            "url": "https://github.com/abdalrhmanasif5/32/raw/refs/heads/main/app/(public)/contact/Software_v1.6-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816837/",
            "reporter": "tcains1"
        }
    ],
    "3816838": [
        {
            "dateadded": "2026-04-12 10:15:16 UTC",
            "url": "https://raw.githubusercontent.com/abdalrhmanasif5/abdalrhmanasif5.github.io/refs/heads/main/torques/github_io_abdalrhmanasif_screwsman.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816838/",
            "reporter": "tcains1"
        }
    ],
    "3816839": [
        {
            "dateadded": "2026-04-12 10:15:16 UTC",
            "url": "https://github.com/abdalrhmanasif5/abdalrhmanasif5.github.io/raw/refs/heads/main/torques/github_io_abdalrhmanasif_screwsman.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816839/",
            "reporter": "tcains1"
        }
    ],
    "3816840": [
        {
            "dateadded": "2026-04-12 10:15:16 UTC",
            "url": "https://github.com/abdalrhmanasif5/Tic_tac_toe/raw/refs/heads/main/auriculae/toe-Tic-tac-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816840/",
            "reporter": "tcains1"
        }
    ],
    "3816836": [
        {
            "dateadded": "2026-04-12 10:15:15 UTC",
            "url": "https://raw.githubusercontent.com/abdalrhmanasif5/32/refs/heads/main/app/(public)/contact/Software_v1.6-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816836/",
            "reporter": "tcains1"
        }
    ],
    "3816835": [
        {
            "dateadded": "2026-04-12 10:12:33 UTC",
            "url": "http://125.44.42.50:42761/i",
            "url_status": "offline",
            "last_online": "2026-04-12 13:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816835/",
            "reporter": "geenensp"
        }
    ],
    "3816834": [
        {
            "dateadded": "2026-04-12 10:10:21 UTC",
            "url": "https://zendra6a.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:10:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816834/",
            "reporter": "anonymous"
        }
    ],
    "3816833": [
        {
            "dateadded": "2026-04-12 10:10:17 UTC",
            "url": "http://219.156.55.224:57343/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:36:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816833/",
            "reporter": "geenensp"
        }
    ],
    "3816832": [
        {
            "dateadded": "2026-04-12 10:06:24 UTC",
            "url": "http://115.48.161.209:53130/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:04:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816832/",
            "reporter": "geenensp"
        }
    ],
    "3816831": [
        {
            "dateadded": "2026-04-12 10:04:24 UTC",
            "url": "http://110.37.103.213:47064/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 14:10:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816831/",
            "reporter": "geenensp"
        }
    ],
    "3816830": [
        {
            "dateadded": "2026-04-12 10:03:17 UTC",
            "url": "https://nf59jdtk.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 10:03:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816830/",
            "reporter": "anonymous"
        }
    ],
    "3816829": [
        {
            "dateadded": "2026-04-12 10:01:12 UTC",
            "url": "http://77.110.125.145/q11.txt",
            "url_status": "offline",
            "last_online": "2026-04-25 18:37:46 UTC",
            "threat": "malware_download",
            "tags": [
                "77-110-125-145",
                "CoinMiner",
                "miner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816829/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816828": [
        {
            "dateadded": "2026-04-12 10:00:23 UTC",
            "url": "http://77.110.125.145/q12.txt",
            "url_status": "offline",
            "last_online": "2026-04-25 16:57:03 UTC",
            "threat": "malware_download",
            "tags": [
                "77-110-125-145",
                "CoinMiner",
                "miner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816828/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816827": [
        {
            "dateadded": "2026-04-12 10:00:22 UTC",
            "url": "http://77.110.125.145/ghost.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 17:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "77-110-125-145",
                "CoinMiner",
                "miner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816827/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816826": [
        {
            "dateadded": "2026-04-12 09:58:19 UTC",
            "url": "http://115.49.120.141:36611/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816826/",
            "reporter": "geenensp"
        }
    ],
    "3816825": [
        {
            "dateadded": "2026-04-12 09:58:18 UTC",
            "url": "http://125.40.152.45:44677/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:23:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816825/",
            "reporter": "geenensp"
        }
    ],
    "3816824": [
        {
            "dateadded": "2026-04-12 09:57:09 UTC",
            "url": "https://enclin.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816824/",
            "reporter": "anonymous"
        }
    ],
    "3816822": [
        {
            "dateadded": "2026-04-12 09:50:22 UTC",
            "url": "http://45.66.228.93/linux_arm64",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:38 UTC",
            "threat": "malware_download",
            "tags": [
                "45-66-228-93",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816822/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816823": [
        {
            "dateadded": "2026-04-12 09:50:22 UTC",
            "url": "http://45.66.228.93/linux_mips64",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "45-66-228-93",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816823/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816821": [
        {
            "dateadded": "2026-04-12 09:50:09 UTC",
            "url": "https://77vlmbv.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816821/",
            "reporter": "anonymous"
        }
    ],
    "3816820": [
        {
            "dateadded": "2026-04-12 09:44:18 UTC",
            "url": "http://42.233.161.250:55762/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:57:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816820/",
            "reporter": "geenensp"
        }
    ],
    "3816819": [
        {
            "dateadded": "2026-04-12 09:43:13 UTC",
            "url": "https://toke-plate.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816819/",
            "reporter": "anonymous"
        }
    ],
    "3816818": [
        {
            "dateadded": "2026-04-12 09:39:22 UTC",
            "url": "http://115.48.161.209:53130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 05:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816818/",
            "reporter": "geenensp"
        }
    ],
    "3816817": [
        {
            "dateadded": "2026-04-12 09:37:13 UTC",
            "url": "https://ktvkmgqc.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816817/",
            "reporter": "anonymous"
        }
    ],
    "3816816": [
        {
            "dateadded": "2026-04-12 09:35:12 UTC",
            "url": "http://85.192.27.231:8080/robot.html",
            "url_status": "offline",
            "last_online": "2026-04-13 05:32:41 UTC",
            "threat": "malware_download",
            "tags": [
                "85-192-27-231-8080",
                "Ligolo",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816816/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816815": [
        {
            "dateadded": "2026-04-12 09:34:18 UTC",
            "url": "http://105.184.63.39:41825/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816815/",
            "reporter": "geenensp"
        }
    ],
    "3816814": [
        {
            "dateadded": "2026-04-12 09:31:13 UTC",
            "url": "http://125.40.152.45:44677/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816814/",
            "reporter": "geenensp"
        }
    ],
    "3816813": [
        {
            "dateadded": "2026-04-12 09:30:17 UTC",
            "url": "http://123.190.31.82:45032/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:02:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816813/",
            "reporter": "geenensp"
        }
    ],
    "3816812": [
        {
            "dateadded": "2026-04-12 09:30:15 UTC",
            "url": "https://serlith5ex.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816812/",
            "reporter": "anonymous"
        }
    ],
    "3816811": [
        {
            "dateadded": "2026-04-12 09:24:10 UTC",
            "url": "https://1ink.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816811/",
            "reporter": "anonymous"
        }
    ],
    "3816810": [
        {
            "dateadded": "2026-04-12 09:23:16 UTC",
            "url": "https://github.com/mixteens/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 13:56:36 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816810/",
            "reporter": "tcains1"
        }
    ],
    "3816809": [
        {
            "dateadded": "2026-04-12 09:23:08 UTC",
            "url": "https://raw.githubusercontent.com/mixteens/FiveM-Spoofer/refs/heads/main/CFXBypass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:01 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816809/",
            "reporter": "tcains1"
        }
    ],
    "3816808": [
        {
            "dateadded": "2026-04-12 09:22:19 UTC",
            "url": "http://175.165.81.141:35825/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816808/",
            "reporter": "geenensp"
        }
    ],
    "3816807": [
        {
            "dateadded": "2026-04-12 09:18:10 UTC",
            "url": "https://f0rmate.para5itrecal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816807/",
            "reporter": "anonymous"
        }
    ],
    "3816806": [
        {
            "dateadded": "2026-04-12 09:16:31 UTC",
            "url": "http://42.55.54.172:32873/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816806/",
            "reporter": "geenensp"
        }
    ],
    "3816804": [
        {
            "dateadded": "2026-04-12 09:15:15 UTC",
            "url": "https://node3.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816804/",
            "reporter": "anonymous"
        }
    ],
    "3816805": [
        {
            "dateadded": "2026-04-12 09:15:15 UTC",
            "url": "http://182.127.165.211:50242/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816805/",
            "reporter": "geenensp"
        }
    ],
    "3816803": [
        {
            "dateadded": "2026-04-12 09:04:18 UTC",
            "url": "http://123.190.31.82:45032/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:53:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816803/",
            "reporter": "geenensp"
        }
    ],
    "3816802": [
        {
            "dateadded": "2026-04-12 09:03:18 UTC",
            "url": "http://60.17.159.203:35723/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:33:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816802/",
            "reporter": "geenensp"
        }
    ],
    "3816801": [
        {
            "dateadded": "2026-04-12 09:03:07 UTC",
            "url": "https://fi1e.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 09:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816801/",
            "reporter": "anonymous"
        }
    ],
    "3816800": [
        {
            "dateadded": "2026-04-12 08:55:11 UTC",
            "url": "https://b0x.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816800/",
            "reporter": "anonymous"
        }
    ],
    "3816799": [
        {
            "dateadded": "2026-04-12 08:54:18 UTC",
            "url": "http://42.55.54.172:32873/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:35:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816799/",
            "reporter": "geenensp"
        }
    ],
    "3816798": [
        {
            "dateadded": "2026-04-12 08:51:08 UTC",
            "url": "https://a1ea.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816798/",
            "reporter": "anonymous"
        }
    ],
    "3816797": [
        {
            "dateadded": "2026-04-12 08:42:20 UTC",
            "url": "http://120.28.193.170:40844/i",
            "url_status": "offline",
            "last_online": "2026-04-17 18:21:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816797/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816796": [
        {
            "dateadded": "2026-04-12 08:41:18 UTC",
            "url": "http://42.230.43.177:52857/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816796/",
            "reporter": "geenensp"
        }
    ],
    "3816795": [
        {
            "dateadded": "2026-04-12 08:39:10 UTC",
            "url": "http://60.17.159.203:35723/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 12:04:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816795/",
            "reporter": "geenensp"
        }
    ],
    "3816794": [
        {
            "dateadded": "2026-04-12 08:38:13 UTC",
            "url": "https://ma1n.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816794/",
            "reporter": "anonymous"
        }
    ],
    "3816793": [
        {
            "dateadded": "2026-04-12 08:37:17 UTC",
            "url": "https://raw.githubusercontent.com/jahredip/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816793/",
            "reporter": "tcains1"
        }
    ],
    "3816791": [
        {
            "dateadded": "2026-04-12 08:37:16 UTC",
            "url": "https://github.com/jahredip/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816791/",
            "reporter": "tcains1"
        }
    ],
    "3816792": [
        {
            "dateadded": "2026-04-12 08:37:16 UTC",
            "url": "https://raw.githubusercontent.com/trustnobodys/FiveM-Spoofer/refs/heads/main/CFXBypass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816792/",
            "reporter": "tcains1"
        }
    ],
    "3816790": [
        {
            "dateadded": "2026-04-12 08:37:12 UTC",
            "url": "https://github.com/trustnobodys/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816790/",
            "reporter": "tcains1"
        }
    ],
    "3816789": [
        {
            "dateadded": "2026-04-12 08:28:06 UTC",
            "url": "http://85.11.167.101/main.go",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816789/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816788": [
        {
            "dateadded": "2026-04-12 08:24:17 UTC",
            "url": "https://github.com/aquaelia9084/new-year/releases/download/new/v2.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-19 04:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-update",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816788/",
            "reporter": "tcains1"
        }
    ],
    "3816787": [
        {
            "dateadded": "2026-04-12 08:24:11 UTC",
            "url": "https://goragalo.live/usu",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "pw-update",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816787/",
            "reporter": "tcains1"
        }
    ],
    "3816786": [
        {
            "dateadded": "2026-04-12 08:23:08 UTC",
            "url": "https://gate6-main.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816786/",
            "reporter": "anonymous"
        }
    ],
    "3816783": [
        {
            "dateadded": "2026-04-12 08:18:10 UTC",
            "url": "https://svc5-relay.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816783/",
            "reporter": "anonymous"
        }
    ],
    "3816784": [
        {
            "dateadded": "2026-04-12 08:18:10 UTC",
            "url": "https://github.com/atteriss/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:00 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816784/",
            "reporter": "tcains1"
        }
    ],
    "3816785": [
        {
            "dateadded": "2026-04-12 08:18:10 UTC",
            "url": "https://raw.githubusercontent.com/atteriss/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:27 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe",
                "rustystealer",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816785/",
            "reporter": "tcains1"
        }
    ],
    "3816782": [
        {
            "dateadded": "2026-04-12 08:12:08 UTC",
            "url": "https://vault4-key.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816782/",
            "reporter": "anonymous"
        }
    ],
    "3816781": [
        {
            "dateadded": "2026-04-12 08:11:11 UTC",
            "url": "https://gitlab.com/evanblue/thestar/-/raw/main/259UZDS8POXH.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 04:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816781/",
            "reporter": "tcains1"
        }
    ],
    "3816780": [
        {
            "dateadded": "2026-04-12 08:09:13 UTC",
            "url": "https://gitlab.com/evanblue/thestar/-/raw/main/4J8576A0E8V3.exe",
            "url_status": "offline",
            "last_online": "2026-04-13 04:53:47 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "SantaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816780/",
            "reporter": "tcains1"
        }
    ],
    "3816779": [
        {
            "dateadded": "2026-04-12 08:07:20 UTC",
            "url": "http://42.230.43.177:52857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:29:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816779/",
            "reporter": "geenensp"
        }
    ],
    "3816778": [
        {
            "dateadded": "2026-04-12 08:06:07 UTC",
            "url": "https://node3-soft.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816778/",
            "reporter": "anonymous"
        }
    ],
    "3816777": [
        {
            "dateadded": "2026-04-12 08:01:08 UTC",
            "url": "https://api2-call.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 08:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816777/",
            "reporter": "anonymous"
        }
    ],
    "3816776": [
        {
            "dateadded": "2026-04-12 07:57:09 UTC",
            "url": "https://test1-run.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816776/",
            "reporter": "anonymous"
        }
    ],
    "3816775": [
        {
            "dateadded": "2026-04-12 07:55:15 UTC",
            "url": "http://114.217.123.237:52109/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:07:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816775/",
            "reporter": "geenensp"
        }
    ],
    "3816774": [
        {
            "dateadded": "2026-04-12 07:54:14 UTC",
            "url": "https://hub6-area.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816774/",
            "reporter": "anonymous"
        }
    ],
    "3816773": [
        {
            "dateadded": "2026-04-12 07:52:07 UTC",
            "url": "http://27.215.4.198:34019/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816773/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816770": [
        {
            "dateadded": "2026-04-12 07:48:09 UTC",
            "url": "http://222.137.136.91:55785/i",
            "url_status": "offline",
            "last_online": "2026-04-12 07:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816770/",
            "reporter": "geenensp"
        }
    ],
    "3816771": [
        {
            "dateadded": "2026-04-12 07:48:09 UTC",
            "url": "http://115.56.155.41:48303/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816771/",
            "reporter": "geenensp"
        }
    ],
    "3816769": [
        {
            "dateadded": "2026-04-12 07:47:41 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU9",
            "url_status": "offline",
            "last_online": "2026-04-12 07:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816769/",
            "reporter": "tcains1"
        }
    ],
    "3816768": [
        {
            "dateadded": "2026-04-12 07:47:38 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU8",
            "url_status": "offline",
            "last_online": "2026-04-12 07:47:38 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816768/",
            "reporter": "tcains1"
        }
    ],
    "3816767": [
        {
            "dateadded": "2026-04-12 07:47:37 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU1",
            "url_status": "offline",
            "last_online": "2026-04-12 07:47:37 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816767/",
            "reporter": "tcains1"
        }
    ],
    "3816766": [
        {
            "dateadded": "2026-04-12 07:47:25 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU5",
            "url_status": "offline",
            "last_online": "2026-04-12 07:47:25 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816766/",
            "reporter": "tcains1"
        }
    ],
    "3816765": [
        {
            "dateadded": "2026-04-12 07:46:13 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU3",
            "url_status": "offline",
            "last_online": "2026-04-12 07:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816765/",
            "reporter": "tcains1"
        }
    ],
    "3816764": [
        {
            "dateadded": "2026-04-12 07:45:12 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU6",
            "url_status": "offline",
            "last_online": "2026-04-12 07:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816764/",
            "reporter": "tcains1"
        }
    ],
    "3816761": [
        {
            "dateadded": "2026-04-12 07:44:29 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU7",
            "url_status": "offline",
            "last_online": "2026-04-12 07:44:29 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816761/",
            "reporter": "tcains1"
        }
    ],
    "3816760": [
        {
            "dateadded": "2026-04-12 07:44:21 UTC",
            "url": "https://svc5-flow.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:44:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816760/",
            "reporter": "anonymous"
        }
    ],
    "3816759": [
        {
            "dateadded": "2026-04-12 07:42:11 UTC",
            "url": "http://125.45.156.42:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-14 16:42:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816759/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816758": [
        {
            "dateadded": "2026-04-12 07:39:12 UTC",
            "url": "https://map4-base.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816758/",
            "reporter": "anonymous"
        }
    ],
    "3816757": [
        {
            "dateadded": "2026-04-12 07:35:09 UTC",
            "url": "https://node3-push.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816757/",
            "reporter": "anonymous"
        }
    ],
    "3816756": [
        {
            "dateadded": "2026-04-12 07:32:19 UTC",
            "url": "http://182.113.204.103:34110/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816756/",
            "reporter": "geenensp"
        }
    ],
    "3816755": [
        {
            "dateadded": "2026-04-12 07:31:06 UTC",
            "url": "https://api2-jump.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816755/",
            "reporter": "anonymous"
        }
    ],
    "3816754": [
        {
            "dateadded": "2026-04-12 07:29:23 UTC",
            "url": "http://114.217.123.237:52109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 11:00:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816754/",
            "reporter": "geenensp"
        }
    ],
    "3816753": [
        {
            "dateadded": "2026-04-12 07:28:18 UTC",
            "url": "http://222.137.136.91:55785/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 07:28:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816753/",
            "reporter": "geenensp"
        }
    ],
    "3816752": [
        {
            "dateadded": "2026-04-12 07:22:11 UTC",
            "url": "https://read1-data.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816752/",
            "reporter": "anonymous"
        }
    ],
    "3816751": [
        {
            "dateadded": "2026-04-12 07:18:15 UTC",
            "url": "http://182.112.15.61:43770/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:42:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816751/",
            "reporter": "geenensp"
        }
    ],
    "3816750": [
        {
            "dateadded": "2026-04-12 07:16:09 UTC",
            "url": "https://gate6-map.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816750/",
            "reporter": "anonymous"
        }
    ],
    "3816749": [
        {
            "dateadded": "2026-04-12 07:15:21 UTC",
            "url": "http://105.184.93.84:38207/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:56:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816749/",
            "reporter": "geenensp"
        }
    ],
    "3816748": [
        {
            "dateadded": "2026-04-12 07:11:07 UTC",
            "url": "https://svc5-info.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816748/",
            "reporter": "anonymous"
        }
    ],
    "3816747": [
        {
            "dateadded": "2026-04-12 07:10:21 UTC",
            "url": "http://42.6.251.140:35341/i",
            "url_status": "offline",
            "last_online": "2026-04-18 18:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816747/",
            "reporter": "geenensp"
        }
    ],
    "3816746": [
        {
            "dateadded": "2026-04-12 07:09:25 UTC",
            "url": "http://115.49.7.248:46851/i",
            "url_status": "offline",
            "last_online": "2026-04-12 07:09:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816746/",
            "reporter": "geenensp"
        }
    ],
    "3816745": [
        {
            "dateadded": "2026-04-12 07:06:17 UTC",
            "url": "http://196.189.9.27:53452/i",
            "url_status": "offline",
            "last_online": "2026-04-12 07:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816745/",
            "reporter": "geenensp"
        }
    ],
    "3816744": [
        {
            "dateadded": "2026-04-12 07:05:16 UTC",
            "url": "http://196.189.9.27:53452/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 07:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816744/",
            "reporter": "geenensp"
        }
    ],
    "3816743": [
        {
            "dateadded": "2026-04-12 07:05:08 UTC",
            "url": "https://box4-file.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 07:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816743/",
            "reporter": "anonymous"
        }
    ],
    "3816742": [
        {
            "dateadded": "2026-04-12 07:03:20 UTC",
            "url": "http://139.59.231.32/Hammz.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816742/",
            "reporter": "geenensp"
        }
    ],
    "3816741": [
        {
            "dateadded": "2026-04-12 07:03:09 UTC",
            "url": "http://45.66.228.93/linux_mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:42 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "stopmalwareservice"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816741/",
            "reporter": "seventeam"
        }
    ],
    "3816739": [
        {
            "dateadded": "2026-04-12 07:03:07 UTC",
            "url": "http://45.66.228.93/linux_arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:37 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "stopmalwareservice"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816739/",
            "reporter": "seventeam"
        }
    ],
    "3816740": [
        {
            "dateadded": "2026-04-12 07:03:07 UTC",
            "url": "http://45.66.228.93/linux_amd64",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:58 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "stopmalwareservice"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816740/",
            "reporter": "seventeam"
        }
    ],
    "3816738": [
        {
            "dateadded": "2026-04-12 07:03:05 UTC",
            "url": "http://45.66.228.93/linux_arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "mirai",
                "stopmalwareservice"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816738/",
            "reporter": "seventeam"
        }
    ],
    "3816737": [
        {
            "dateadded": "2026-04-12 07:02:19 UTC",
            "url": "http://125.43.229.251:51959/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816737/",
            "reporter": "geenensp"
        }
    ],
    "3816736": [
        {
            "dateadded": "2026-04-12 07:02:06 UTC",
            "url": "http://42.229.118.220:54296/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:33:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816736/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816735": [
        {
            "dateadded": "2026-04-12 06:59:06 UTC",
            "url": "https://node3-flag.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816735/",
            "reporter": "anonymous"
        }
    ],
    "3816734": [
        {
            "dateadded": "2026-04-12 06:56:18 UTC",
            "url": "http://121.227.10.192:53406/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816734/",
            "reporter": "geenensp"
        }
    ],
    "3816733": [
        {
            "dateadded": "2026-04-12 06:54:07 UTC",
            "url": "https://app2-root.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816733/",
            "reporter": "anonymous"
        }
    ],
    "3816732": [
        {
            "dateadded": "2026-04-12 06:48:07 UTC",
            "url": "https://base1-site.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816732/",
            "reporter": "anonymous"
        }
    ],
    "3816731": [
        {
            "dateadded": "2026-04-12 06:45:14 UTC",
            "url": "http://115.57.230.188:38991/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:15:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816731/",
            "reporter": "geenensp"
        }
    ],
    "3816730": [
        {
            "dateadded": "2026-04-12 06:43:06 UTC",
            "url": "https://hub6-pipe.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816730/",
            "reporter": "anonymous"
        }
    ],
    "3816729": [
        {
            "dateadded": "2026-04-12 06:41:18 UTC",
            "url": "http://115.63.46.55:51278/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:08:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816729/",
            "reporter": "geenensp"
        }
    ],
    "3816728": [
        {
            "dateadded": "2026-04-12 06:39:08 UTC",
            "url": "http://27.37.102.70:43603/i",
            "url_status": "offline",
            "last_online": "2026-04-12 06:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816728/",
            "reporter": "geenensp"
        }
    ],
    "3816727": [
        {
            "dateadded": "2026-04-12 06:37:12 UTC",
            "url": "https://svc5-scan.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816727/",
            "reporter": "anonymous"
        }
    ],
    "3816726": [
        {
            "dateadded": "2026-04-12 06:37:10 UTC",
            "url": "http://182.123.190.106:46174/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:53:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816726/",
            "reporter": "geenensp"
        }
    ],
    "3816725": [
        {
            "dateadded": "2026-04-12 06:36:15 UTC",
            "url": "http://112.240.165.44:50520/i",
            "url_status": "offline",
            "last_online": "2026-04-13 08:20:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816725/",
            "reporter": "geenensp"
        }
    ],
    "3816724": [
        {
            "dateadded": "2026-04-12 06:35:12 UTC",
            "url": "http://162.255.251.91:40631/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:04:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816724/",
            "reporter": "geenensp"
        }
    ],
    "3816723": [
        {
            "dateadded": "2026-04-12 06:31:11 UTC",
            "url": "https://db4-cache.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816723/",
            "reporter": "anonymous"
        }
    ],
    "3816722": [
        {
            "dateadded": "2026-04-12 06:30:22 UTC",
            "url": "http://121.227.10.192:53406/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 17:45:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816722/",
            "reporter": "geenensp"
        }
    ],
    "3816721": [
        {
            "dateadded": "2026-04-12 06:29:15 UTC",
            "url": "http://113.236.157.0:44711/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:31:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816721/",
            "reporter": "geenensp"
        }
    ],
    "3816720": [
        {
            "dateadded": "2026-04-12 06:26:08 UTC",
            "url": "https://node3-link.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816720/",
            "reporter": "anonymous"
        }
    ],
    "3816719": [
        {
            "dateadded": "2026-04-12 06:23:14 UTC",
            "url": "http://42.228.233.58:39587/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:46:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816719/",
            "reporter": "geenensp"
        }
    ],
    "3816718": [
        {
            "dateadded": "2026-04-12 06:19:06 UTC",
            "url": "https://api2-port.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816718/",
            "reporter": "anonymous"
        }
    ],
    "3816717": [
        {
            "dateadded": "2026-04-12 06:17:07 UTC",
            "url": "http://162.255.251.91:40631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816717/",
            "reporter": "geenensp"
        }
    ],
    "3816716": [
        {
            "dateadded": "2026-04-12 06:16:14 UTC",
            "url": "http://39.87.31.132:59509/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:36:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816716/",
            "reporter": "geenensp"
        }
    ],
    "3816715": [
        {
            "dateadded": "2026-04-12 06:14:08 UTC",
            "url": "https://file1-swap.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816715/",
            "reporter": "anonymous"
        }
    ],
    "3816714": [
        {
            "dateadded": "2026-04-12 06:11:12 UTC",
            "url": "http://115.63.46.55:51278/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:38:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816714/",
            "reporter": "geenensp"
        }
    ],
    "3816713": [
        {
            "dateadded": "2026-04-12 06:09:08 UTC",
            "url": "https://gate6-link.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816713/",
            "reporter": "anonymous"
        }
    ],
    "3816712": [
        {
            "dateadded": "2026-04-12 06:07:29 UTC",
            "url": "http://112.240.165.44:50520/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816712/",
            "reporter": "geenensp"
        }
    ],
    "3816711": [
        {
            "dateadded": "2026-04-12 06:03:09 UTC",
            "url": "https://svc5-edge.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 06:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816711/",
            "reporter": "anonymous"
        }
    ],
    "3816710": [
        {
            "dateadded": "2026-04-12 06:02:07 UTC",
            "url": "http://123.132.157.222:49384/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:21:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816710/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816709": [
        {
            "dateadded": "2026-04-12 06:01:11 UTC",
            "url": "http://113.236.157.0:44711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 05:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816709/",
            "reporter": "geenensp"
        }
    ],
    "3816707": [
        {
            "dateadded": "2026-04-12 05:58:07 UTC",
            "url": "https://blob4-data.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816707/",
            "reporter": "anonymous"
        }
    ],
    "3816708": [
        {
            "dateadded": "2026-04-12 05:58:07 UTC",
            "url": "http://182.123.190.106:46174/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816708/",
            "reporter": "geenensp"
        }
    ],
    "3816706": [
        {
            "dateadded": "2026-04-12 05:52:13 UTC",
            "url": "https://node3-pack.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816706/",
            "reporter": "anonymous"
        }
    ],
    "3816705": [
        {
            "dateadded": "2026-04-12 05:47:13 UTC",
            "url": "https://api2-cert.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816705/",
            "reporter": "anonymous"
        }
    ],
    "3816704": [
        {
            "dateadded": "2026-04-12 05:47:07 UTC",
            "url": "http://110.36.27.186:37845/i",
            "url_status": "offline",
            "last_online": "2026-04-12 11:12:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816704/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816703": [
        {
            "dateadded": "2026-04-12 05:41:06 UTC",
            "url": "https://auth1-user.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:41:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816703/",
            "reporter": "anonymous"
        }
    ],
    "3816702": [
        {
            "dateadded": "2026-04-12 05:38:15 UTC",
            "url": "http://217.211.117.55:60426/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816702/",
            "reporter": "geenensp"
        }
    ],
    "3816701": [
        {
            "dateadded": "2026-04-12 05:37:14 UTC",
            "url": "http://200.115.102.246:41079/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 14:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816701/",
            "reporter": "geenensp"
        }
    ],
    "3816700": [
        {
            "dateadded": "2026-04-12 05:35:14 UTC",
            "url": "http://27.215.121.175:33960/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:04:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816700/",
            "reporter": "geenensp"
        }
    ],
    "3816699": [
        {
            "dateadded": "2026-04-12 05:35:11 UTC",
            "url": "https://hub6-main.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816699/",
            "reporter": "anonymous"
        }
    ],
    "3816698": [
        {
            "dateadded": "2026-04-12 05:30:15 UTC",
            "url": "https://svc5-rule.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816698/",
            "reporter": "anonymous"
        }
    ],
    "3816697": [
        {
            "dateadded": "2026-04-12 05:25:15 UTC",
            "url": "http://178.141.132.251:52976/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816697/",
            "reporter": "geenensp"
        }
    ],
    "3816696": [
        {
            "dateadded": "2026-04-12 05:24:17 UTC",
            "url": "http://123.8.56.206:58800/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816696/",
            "reporter": "geenensp"
        }
    ],
    "3816695": [
        {
            "dateadded": "2026-04-12 05:24:10 UTC",
            "url": "https://api4-sync.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816695/",
            "reporter": "anonymous"
        }
    ],
    "3816694": [
        {
            "dateadded": "2026-04-12 05:18:09 UTC",
            "url": "https://node3-core.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816694/",
            "reporter": "anonymous"
        }
    ],
    "3816693": [
        {
            "dateadded": "2026-04-12 05:17:07 UTC",
            "url": "http://110.36.27.186:37845/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:41:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816693/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816692": [
        {
            "dateadded": "2026-04-12 05:13:11 UTC",
            "url": "https://list2-load.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816692/",
            "reporter": "anonymous"
        }
    ],
    "3816691": [
        {
            "dateadded": "2026-04-12 05:10:17 UTC",
            "url": "http://125.38.134.233:57439/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816691/",
            "reporter": "geenensp"
        }
    ],
    "3816690": [
        {
            "dateadded": "2026-04-12 05:09:19 UTC",
            "url": "http://27.215.121.175:33960/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:24:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816690/",
            "reporter": "geenensp"
        }
    ],
    "3816689": [
        {
            "dateadded": "2026-04-12 05:08:16 UTC",
            "url": "http://116.24.188.113:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-14 18:36:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816689/",
            "reporter": "geenensp"
        }
    ],
    "3816688": [
        {
            "dateadded": "2026-04-12 05:07:13 UTC",
            "url": "https://step1-item.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816688/",
            "reporter": "anonymous"
        }
    ],
    "3816687": [
        {
            "dateadded": "2026-04-12 05:04:18 UTC",
            "url": "http://105.184.63.39:41825/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816687/",
            "reporter": "geenensp"
        }
    ],
    "3816686": [
        {
            "dateadded": "2026-04-12 05:02:23 UTC",
            "url": "http://123.132.166.255:59261/i",
            "url_status": "offline",
            "last_online": "2026-04-27 05:09:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816686/",
            "reporter": "geenensp"
        }
    ],
    "3816685": [
        {
            "dateadded": "2026-04-12 05:01:17 UTC",
            "url": "http://178.141.132.251:52976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:08:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816685/",
            "reporter": "geenensp"
        }
    ],
    "3816684": [
        {
            "dateadded": "2026-04-12 05:01:10 UTC",
            "url": "https://way6-gate.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 05:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816684/",
            "reporter": "anonymous"
        }
    ],
    "3816683": [
        {
            "dateadded": "2026-04-12 04:55:10 UTC",
            "url": "https://svc5-task.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816683/",
            "reporter": "anonymous"
        }
    ],
    "3816682": [
        {
            "dateadded": "2026-04-12 04:50:13 UTC",
            "url": "https://call4-back.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816682/",
            "reporter": "anonymous"
        }
    ],
    "3816681": [
        {
            "dateadded": "2026-04-12 04:44:07 UTC",
            "url": "https://node3-view.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816681/",
            "reporter": "anonymous"
        }
    ],
    "3816680": [
        {
            "dateadded": "2026-04-12 04:40:17 UTC",
            "url": "http://42.227.204.231:36096/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816680/",
            "reporter": "geenensp"
        }
    ],
    "3816679": [
        {
            "dateadded": "2026-04-12 04:39:14 UTC",
            "url": "https://api2-stage.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816679/",
            "reporter": "anonymous"
        }
    ],
    "3816678": [
        {
            "dateadded": "2026-04-12 04:36:08 UTC",
            "url": "https://work1-area.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816678/",
            "reporter": "anonymous"
        }
    ],
    "3816677": [
        {
            "dateadded": "2026-04-12 04:33:11 UTC",
            "url": "https://gate6-root.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816677/",
            "reporter": "anonymous"
        }
    ],
    "3816676": [
        {
            "dateadded": "2026-04-12 04:27:15 UTC",
            "url": "http://168.195.7.105:53345/i",
            "url_status": "offline",
            "last_online": "2026-04-13 03:24:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816676/",
            "reporter": "geenensp"
        }
    ],
    "3816675": [
        {
            "dateadded": "2026-04-12 04:24:13 UTC",
            "url": "https://unit5-mesh.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816675/",
            "reporter": "anonymous"
        }
    ],
    "3816674": [
        {
            "dateadded": "2026-04-12 04:24:09 UTC",
            "url": "http://115.61.118.193:33166/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:51:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816674/",
            "reporter": "geenensp"
        }
    ],
    "3816673": [
        {
            "dateadded": "2026-04-12 04:17:15 UTC",
            "url": "https://main4-path.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816673/",
            "reporter": "anonymous"
        }
    ],
    "3816672": [
        {
            "dateadded": "2026-04-12 04:12:14 UTC",
            "url": "https://srv3-ready.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816672/",
            "reporter": "anonymous"
        }
    ],
    "3816671": [
        {
            "dateadded": "2026-04-12 04:07:14 UTC",
            "url": "http://42.239.252.16:47389/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:48:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816671/",
            "reporter": "geenensp"
        }
    ],
    "3816670": [
        {
            "dateadded": "2026-04-12 04:05:16 UTC",
            "url": "https://peer2-join.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 04:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816670/",
            "reporter": "anonymous"
        }
    ],
    "3816669": [
        {
            "dateadded": "2026-04-12 04:03:16 UTC",
            "url": "http://125.44.252.245:54450/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:03:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816669/",
            "reporter": "geenensp"
        }
    ],
    "3816668": [
        {
            "dateadded": "2026-04-12 04:02:11 UTC",
            "url": "http://125.44.252.245:54450/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816668/",
            "reporter": "geenensp"
        }
    ],
    "3816667": [
        {
            "dateadded": "2026-04-12 03:59:15 UTC",
            "url": "http://168.195.7.105:53345/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:59:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816667/",
            "reporter": "geenensp"
        }
    ],
    "3816666": [
        {
            "dateadded": "2026-04-12 03:59:08 UTC",
            "url": "https://link1-host.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816666/",
            "reporter": "anonymous"
        }
    ],
    "3816664": [
        {
            "dateadded": "2026-04-12 03:55:15 UTC",
            "url": "http://115.61.118.193:33166/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 22:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816664/",
            "reporter": "geenensp"
        }
    ],
    "3816665": [
        {
            "dateadded": "2026-04-12 03:55:15 UTC",
            "url": "http://182.117.48.227:44027/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:39:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816665/",
            "reporter": "geenensp"
        }
    ],
    "3816663": [
        {
            "dateadded": "2026-04-12 03:54:07 UTC",
            "url": "https://port6-send.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816663/",
            "reporter": "anonymous"
        }
    ],
    "3816662": [
        {
            "dateadded": "2026-04-12 03:52:11 UTC",
            "url": "http://42.227.204.231:36096/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816662/",
            "reporter": "geenensp"
        }
    ],
    "3816661": [
        {
            "dateadded": "2026-04-12 03:49:07 UTC",
            "url": "https://hub5-local.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816661/",
            "reporter": "anonymous"
        }
    ],
    "3816660": [
        {
            "dateadded": "2026-04-12 03:44:09 UTC",
            "url": "https://soft4-base.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816660/",
            "reporter": "anonymous"
        }
    ],
    "3816659": [
        {
            "dateadded": "2026-04-12 03:43:16 UTC",
            "url": "http://42.239.252.16:47389/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:59:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816659/",
            "reporter": "geenensp"
        }
    ],
    "3816658": [
        {
            "dateadded": "2026-04-12 03:37:07 UTC",
            "url": "https://app3-frame.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816658/",
            "reporter": "anonymous"
        }
    ],
    "3816657": [
        {
            "dateadded": "2026-04-12 03:33:06 UTC",
            "url": "http://185.9.139.117:56264/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816657/",
            "reporter": "geenensp"
        }
    ],
    "3816656": [
        {
            "dateadded": "2026-04-12 03:32:07 UTC",
            "url": "https://data2-fast.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816656/",
            "reporter": "anonymous"
        }
    ],
    "3816655": [
        {
            "dateadded": "2026-04-12 03:30:35 UTC",
            "url": "http://112.248.140.131:35523/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:08:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816655/",
            "reporter": "geenensp"
        }
    ],
    "3816654": [
        {
            "dateadded": "2026-04-12 03:27:05 UTC",
            "url": "http://85.239.147.6/files/7862638382/4ZdyEdX.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816654/",
            "reporter": "Bitsight"
        }
    ],
    "3816653": [
        {
            "dateadded": "2026-04-12 03:26:07 UTC",
            "url": "https://site1-proxy.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816653/",
            "reporter": "anonymous"
        }
    ],
    "3816652": [
        {
            "dateadded": "2026-04-12 03:22:06 UTC",
            "url": "http://123.5.150.65:49597/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:46:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816652/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816651": [
        {
            "dateadded": "2026-04-12 03:21:12 UTC",
            "url": "https://gate6-post.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816651/",
            "reporter": "anonymous"
        }
    ],
    "3816650": [
        {
            "dateadded": "2026-04-12 03:19:09 UTC",
            "url": "http://182.117.48.227:44027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:56:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816650/",
            "reporter": "geenensp"
        }
    ],
    "3816649": [
        {
            "dateadded": "2026-04-12 03:16:17 UTC",
            "url": "http://119.36.133.117:43987/i",
            "url_status": "offline",
            "last_online": "2026-04-14 11:06:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816649/",
            "reporter": "geenensp"
        }
    ],
    "3816648": [
        {
            "dateadded": "2026-04-12 03:15:08 UTC",
            "url": "https://web5-relay.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816648/",
            "reporter": "anonymous"
        }
    ],
    "3816647": [
        {
            "dateadded": "2026-04-12 03:12:07 UTC",
            "url": "http://123.5.150.65:49597/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:35:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816647/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816646": [
        {
            "dateadded": "2026-04-12 03:09:10 UTC",
            "url": "https://sync4-meta.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816646/",
            "reporter": "anonymous"
        }
    ],
    "3816645": [
        {
            "dateadded": "2026-04-12 03:08:13 UTC",
            "url": "http://219.156.186.137:60035/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816645/",
            "reporter": "geenensp"
        }
    ],
    "3816644": [
        {
            "dateadded": "2026-04-12 03:04:08 UTC",
            "url": "https://node3-alpha.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 03:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816644/",
            "reporter": "anonymous"
        }
    ],
    "3816643": [
        {
            "dateadded": "2026-04-12 02:59:12 UTC",
            "url": "https://api2-delta.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816643/",
            "reporter": "anonymous"
        }
    ],
    "3816642": [
        {
            "dateadded": "2026-04-12 02:58:14 UTC",
            "url": "http://222.142.203.190:43506/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:19:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816642/",
            "reporter": "geenensp"
        }
    ],
    "3816641": [
        {
            "dateadded": "2026-04-12 02:56:12 UTC",
            "url": "http://119.36.133.117:43987/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:20:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816641/",
            "reporter": "geenensp"
        }
    ],
    "3816640": [
        {
            "dateadded": "2026-04-12 02:55:16 UTC",
            "url": "http://42.4.29.205:41439/i",
            "url_status": "offline",
            "last_online": "2026-04-17 17:56:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816640/",
            "reporter": "geenensp"
        }
    ],
    "3816639": [
        {
            "dateadded": "2026-04-12 02:54:07 UTC",
            "url": "https://flow1-point.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816639/",
            "reporter": "anonymous"
        }
    ],
    "3816638": [
        {
            "dateadded": "2026-04-12 02:51:11 UTC",
            "url": "https://bash6-cmd.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816638/",
            "reporter": "anonymous"
        }
    ],
    "3816637": [
        {
            "dateadded": "2026-04-12 02:46:16 UTC",
            "url": "http://37.28.179.42:34243/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816637/",
            "reporter": "geenensp"
        }
    ],
    "3816636": [
        {
            "dateadded": "2026-04-12 02:42:06 UTC",
            "url": "https://stat5-info.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:42:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816636/",
            "reporter": "anonymous"
        }
    ],
    "3816635": [
        {
            "dateadded": "2026-04-12 02:40:13 UTC",
            "url": "http://219.156.186.137:60035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 17:22:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816635/",
            "reporter": "geenensp"
        }
    ],
    "3816634": [
        {
            "dateadded": "2026-04-12 02:37:15 UTC",
            "url": "http://222.142.203.190:43506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:54:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816634/",
            "reporter": "geenensp"
        }
    ],
    "3816633": [
        {
            "dateadded": "2026-04-12 02:35:08 UTC",
            "url": "https://top4-load.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816633/",
            "reporter": "anonymous"
        }
    ],
    "3816632": [
        {
            "dateadded": "2026-04-12 02:31:14 UTC",
            "url": "http://42.7.113.60:50615/i",
            "url_status": "offline",
            "last_online": "2026-04-18 11:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816632/",
            "reporter": "geenensp"
        }
    ],
    "3816631": [
        {
            "dateadded": "2026-04-12 02:29:06 UTC",
            "url": "https://pid3-check.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:29:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816631/",
            "reporter": "anonymous"
        }
    ],
    "3816630": [
        {
            "dateadded": "2026-04-12 02:24:11 UTC",
            "url": "https://job2-run.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816630/",
            "reporter": "anonymous"
        }
    ],
    "3816629": [
        {
            "dateadded": "2026-04-12 02:19:08 UTC",
            "url": "https://cron1-task.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816629/",
            "reporter": "anonymous"
        }
    ],
    "3816628": [
        {
            "dateadded": "2026-04-12 02:15:28 UTC",
            "url": "http://125.44.189.182:56559/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816628/",
            "reporter": "geenensp"
        }
    ],
    "3816627": [
        {
            "dateadded": "2026-04-12 02:14:13 UTC",
            "url": "http://222.141.80.19:45986/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816627/",
            "reporter": "geenensp"
        }
    ],
    "3816626": [
        {
            "dateadded": "2026-04-12 02:13:07 UTC",
            "url": "https://font6-face.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816626/",
            "reporter": "anonymous"
        }
    ],
    "3816625": [
        {
            "dateadded": "2026-04-12 02:11:11 UTC",
            "url": "http://112.242.63.76:36399/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816625/",
            "reporter": "geenensp"
        }
    ],
    "3816624": [
        {
            "dateadded": "2026-04-12 02:10:13 UTC",
            "url": "http://222.141.13.3:55202/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816624/",
            "reporter": "geenensp"
        }
    ],
    "3816623": [
        {
            "dateadded": "2026-04-12 02:07:08 UTC",
            "url": "https://img5-asset.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816623/",
            "reporter": "anonymous"
        }
    ],
    "3816622": [
        {
            "dateadded": "2026-04-12 02:07:07 UTC",
            "url": "http://42.7.113.60:50615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:34:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816622/",
            "reporter": "geenensp"
        }
    ],
    "3816621": [
        {
            "dateadded": "2026-04-12 02:02:07 UTC",
            "url": "http://61.53.133.107:42420/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:20:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816621/",
            "reporter": "geenensp"
        }
    ],
    "3816620": [
        {
            "dateadded": "2026-04-12 02:01:11 UTC",
            "url": "https://js4-script.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 02:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816620/",
            "reporter": "anonymous"
        }
    ],
    "3816619": [
        {
            "dateadded": "2026-04-12 01:57:07 UTC",
            "url": "https://tag3-attr.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816619/",
            "reporter": "anonymous"
        }
    ],
    "3816618": [
        {
            "dateadded": "2026-04-12 01:51:07 UTC",
            "url": "https://css2-rule.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816618/",
            "reporter": "anonymous"
        }
    ],
    "3816617": [
        {
            "dateadded": "2026-04-12 01:47:15 UTC",
            "url": "http://42.224.101.229:44224/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816617/",
            "reporter": "geenensp"
        }
    ],
    "3816616": [
        {
            "dateadded": "2026-04-12 01:45:12 UTC",
            "url": "https://dom1-tree.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816616/",
            "reporter": "anonymous"
        }
    ],
    "3816615": [
        {
            "dateadded": "2026-04-12 01:43:15 UTC",
            "url": "http://222.141.80.19:45986/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:28:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816615/",
            "reporter": "geenensp"
        }
    ],
    "3816614": [
        {
            "dateadded": "2026-04-12 01:41:38 UTC",
            "url": "http://112.242.63.76:36399/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816614/",
            "reporter": "geenensp"
        }
    ],
    "3816613": [
        {
            "dateadded": "2026-04-12 01:40:08 UTC",
            "url": "https://lib6-share.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816613/",
            "reporter": "anonymous"
        }
    ],
    "3816612": [
        {
            "dateadded": "2026-04-12 01:39:06 UTC",
            "url": "http://222.141.13.3:55202/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 01:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816612/",
            "reporter": "geenensp"
        }
    ],
    "3816611": [
        {
            "dateadded": "2026-04-12 01:37:12 UTC",
            "url": "http://61.53.133.107:42420/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 00:39:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816611/",
            "reporter": "geenensp"
        }
    ],
    "3816610": [
        {
            "dateadded": "2026-04-12 01:34:08 UTC",
            "url": "https://bin5-exec.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816610/",
            "reporter": "anonymous"
        }
    ],
    "3816609": [
        {
            "dateadded": "2026-04-12 01:30:28 UTC",
            "url": "http://113.239.213.15:39786/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:49:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816609/",
            "reporter": "geenensp"
        }
    ],
    "3816608": [
        {
            "dateadded": "2026-04-12 01:28:06 UTC",
            "url": "https://tmp4-path.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816608/",
            "reporter": "anonymous"
        }
    ],
    "3816607": [
        {
            "dateadded": "2026-04-12 01:25:16 UTC",
            "url": "http://39.87.253.39:56295/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816607/",
            "reporter": "geenensp"
        }
    ],
    "3816606": [
        {
            "dateadded": "2026-04-12 01:22:10 UTC",
            "url": "https://dir3-index.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816606/",
            "reporter": "anonymous"
        }
    ],
    "3816605": [
        {
            "dateadded": "2026-04-12 01:20:14 UTC",
            "url": "http://182.124.164.154:60858/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816605/",
            "reporter": "geenensp"
        }
    ],
    "3816604": [
        {
            "dateadded": "2026-04-12 01:17:08 UTC",
            "url": "https://file2-obj.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816604/",
            "reporter": "anonymous"
        }
    ],
    "3816603": [
        {
            "dateadded": "2026-04-12 01:11:16 UTC",
            "url": "http://219.156.55.224:57343/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:56:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816603/",
            "reporter": "geenensp"
        }
    ],
    "3816602": [
        {
            "dateadded": "2026-04-12 01:11:08 UTC",
            "url": "https://raw1-blob.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816602/",
            "reporter": "anonymous"
        }
    ],
    "3816601": [
        {
            "dateadded": "2026-04-12 01:10:15 UTC",
            "url": "http://110.37.65.231:47299/i",
            "url_status": "offline",
            "last_online": "2026-04-12 01:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816601/",
            "reporter": "geenensp"
        }
    ],
    "3816600": [
        {
            "dateadded": "2026-04-12 01:06:09 UTC",
            "url": "https://txt6-info.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816600/",
            "reporter": "anonymous"
        }
    ],
    "3816599": [
        {
            "dateadded": "2026-04-12 01:01:10 UTC",
            "url": "https://ptr5-rev.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 01:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816599/",
            "reporter": "anonymous"
        }
    ],
    "3816598": [
        {
            "dateadded": "2026-04-12 00:58:13 UTC",
            "url": "http://39.87.253.39:56295/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816598/",
            "reporter": "geenensp"
        }
    ],
    "3816597": [
        {
            "dateadded": "2026-04-12 00:55:08 UTC",
            "url": "https://soa4-start.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816597/",
            "reporter": "anonymous"
        }
    ],
    "3816596": [
        {
            "dateadded": "2026-04-12 00:50:14 UTC",
            "url": "http://37.28.179.42:34243/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 23:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816596/",
            "reporter": "geenensp"
        }
    ],
    "3816595": [
        {
            "dateadded": "2026-04-12 00:49:10 UTC",
            "url": "https://ttl3-limit.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816595/",
            "reporter": "anonymous"
        }
    ],
    "3816594": [
        {
            "dateadded": "2026-04-12 00:48:17 UTC",
            "url": "http://123.9.194.74:45878/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 00:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816594/",
            "reporter": "geenensp"
        }
    ],
    "3816593": [
        {
            "dateadded": "2026-04-12 00:48:12 UTC",
            "url": "http://182.124.164.154:60858/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 15:35:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816593/",
            "reporter": "geenensp"
        }
    ],
    "3816592": [
        {
            "dateadded": "2026-04-12 00:43:06 UTC",
            "url": "https://rec2-record.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816592/",
            "reporter": "anonymous"
        }
    ],
    "3816591": [
        {
            "dateadded": "2026-04-12 00:38:09 UTC",
            "url": "https://zone1-dns.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816591/",
            "reporter": "anonymous"
        }
    ],
    "3816590": [
        {
            "dateadded": "2026-04-12 00:34:07 UTC",
            "url": "https://hop6-route.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816590/",
            "reporter": "anonymous"
        }
    ],
    "3816589": [
        {
            "dateadded": "2026-04-12 00:31:06 UTC",
            "url": "https://ping5-test.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816589/",
            "reporter": "anonymous"
        }
    ],
    "3816588": [
        {
            "dateadded": "2026-04-12 00:21:08 UTC",
            "url": "https://salt4-byte.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816588/",
            "reporter": "anonymous"
        }
    ],
    "3816587": [
        {
            "dateadded": "2026-04-12 00:17:07 UTC",
            "url": "https://hash3-list.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816587/",
            "reporter": "anonymous"
        }
    ],
    "3816586": [
        {
            "dateadded": "2026-04-12 00:14:09 UTC",
            "url": "https://seed2-node.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816586/",
            "reporter": "anonymous"
        }
    ],
    "3816585": [
        {
            "dateadded": "2026-04-12 00:06:07 UTC",
            "url": "https://f13hwmuq.amb1ing-farm.digital/?=check&&actmn=igmcfYhhKNGPWHKN",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816585/",
            "reporter": "anonymous"
        }
    ],
    "3816584": [
        {
            "dateadded": "2026-04-12 00:04:14 UTC",
            "url": "https://peer1-link.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816584/",
            "reporter": "anonymous"
        }
    ],
    "3816583": [
        {
            "dateadded": "2026-04-12 00:01:10 UTC",
            "url": "https://mac6-bind.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 00:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816583/",
            "reporter": "anonymous"
        }
    ],
    "3816582": [
        {
            "dateadded": "2026-04-12 00:00:08 UTC",
            "url": "http://105.224.66.250:45019/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816582/",
            "reporter": "geenensp"
        }
    ],
    "3816581": [
        {
            "dateadded": "2026-04-11 23:57:06 UTC",
            "url": "https://udp5-recv.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816581/",
            "reporter": "anonymous"
        }
    ],
    "3816580": [
        {
            "dateadded": "2026-04-11 23:55:15 UTC",
            "url": "http://123.5.150.52:35183/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816580/",
            "reporter": "geenensp"
        }
    ],
    "3816579": [
        {
            "dateadded": "2026-04-11 23:53:11 UTC",
            "url": "http://42.235.6.148:60969/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:21:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816579/",
            "reporter": "geenensp"
        }
    ],
    "3816578": [
        {
            "dateadded": "2026-04-11 23:50:07 UTC",
            "url": "http://85.239.147.6/files/8042875554/RvsamEB.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816578/",
            "reporter": "c2hunter"
        }
    ],
    "3816577": [
        {
            "dateadded": "2026-04-11 23:47:07 UTC",
            "url": "https://tcp4-send.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816577/",
            "reporter": "anonymous"
        }
    ],
    "3816576": [
        {
            "dateadded": "2026-04-11 23:42:08 UTC",
            "url": "https://json3-io.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816576/",
            "reporter": "anonymous"
        }
    ],
    "3816575": [
        {
            "dateadded": "2026-04-11 23:38:10 UTC",
            "url": "http://105.224.66.250:45019/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816575/",
            "reporter": "geenensp"
        }
    ],
    "3816574": [
        {
            "dateadded": "2026-04-11 23:36:08 UTC",
            "url": "https://xml2-data.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816574/",
            "reporter": "anonymous"
        }
    ],
    "3816573": [
        {
            "dateadded": "2026-04-11 23:33:16 UTC",
            "url": "http://42.235.6.148:60969/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:14:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816573/",
            "reporter": "geenensp"
        }
    ],
    "3816572": [
        {
            "dateadded": "2026-04-11 23:30:14 UTC",
            "url": "https://bit1-flow.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816572/",
            "reporter": "anonymous"
        }
    ],
    "3816571": [
        {
            "dateadded": "2026-04-11 23:25:14 UTC",
            "url": "https://ssh6-port.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816571/",
            "reporter": "anonymous"
        }
    ],
    "3816570": [
        {
            "dateadded": "2026-04-11 23:20:21 UTC",
            "url": "http://123.5.150.52:35183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:20:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816570/",
            "reporter": "geenensp"
        }
    ],
    "3816569": [
        {
            "dateadded": "2026-04-11 23:20:08 UTC",
            "url": "https://git5-pull.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816569/",
            "reporter": "anonymous"
        }
    ],
    "3816568": [
        {
            "dateadded": "2026-04-11 23:17:22 UTC",
            "url": "http://116.138.206.235:50595/i",
            "url_status": "offline",
            "last_online": "2026-04-19 18:06:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816568/",
            "reporter": "geenensp"
        }
    ],
    "3816567": [
        {
            "dateadded": "2026-04-11 23:14:13 UTC",
            "url": "https://ops4-cache.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816567/",
            "reporter": "anonymous"
        }
    ],
    "3816566": [
        {
            "dateadded": "2026-04-11 23:08:13 UTC",
            "url": "https://dev3-track.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816566/",
            "reporter": "anonymous"
        }
    ],
    "3816565": [
        {
            "dateadded": "2026-04-11 23:03:12 UTC",
            "url": "https://api2-patch.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 23:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816565/",
            "reporter": "anonymous"
        }
    ],
    "3816564": [
        {
            "dateadded": "2026-04-11 22:57:16 UTC",
            "url": "https://key1-store.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:57:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816564/",
            "reporter": "anonymous"
        }
    ],
    "3816563": [
        {
            "dateadded": "2026-04-11 22:51:08 UTC",
            "url": "https://wan6-pipe.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816563/",
            "reporter": "anonymous"
        }
    ],
    "3816562": [
        {
            "dateadded": "2026-04-11 22:47:23 UTC",
            "url": "http://105.186.92.250:56453/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:47:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816562/",
            "reporter": "geenensp"
        }
    ],
    "3816561": [
        {
            "dateadded": "2026-04-11 22:46:18 UTC",
            "url": "http://182.116.216.152:43118/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816561/",
            "reporter": "geenensp"
        }
    ],
    "3816560": [
        {
            "dateadded": "2026-04-11 22:46:11 UTC",
            "url": "https://vpn5-line.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816560/",
            "reporter": "anonymous"
        }
    ],
    "3816559": [
        {
            "dateadded": "2026-04-11 22:40:15 UTC",
            "url": "https://lan4-tunnel.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816559/",
            "reporter": "anonymous"
        }
    ],
    "3816558": [
        {
            "dateadded": "2026-04-11 22:35:17 UTC",
            "url": "http://122.195.50.124:50673/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816558/",
            "reporter": "geenensp"
        }
    ],
    "3816557": [
        {
            "dateadded": "2026-04-11 22:34:13 UTC",
            "url": "https://db3-storage.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816557/",
            "reporter": "anonymous"
        }
    ],
    "3816556": [
        {
            "dateadded": "2026-04-11 22:29:20 UTC",
            "url": "http://222.139.75.213:35606/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:41:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816556/",
            "reporter": "geenensp"
        }
    ],
    "3816555": [
        {
            "dateadded": "2026-04-11 22:28:09 UTC",
            "url": "https://load2-bal.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816555/",
            "reporter": "anonymous"
        }
    ],
    "3816554": [
        {
            "dateadded": "2026-04-11 22:24:13 UTC",
            "url": "http://112.93.200.59:52583/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816554/",
            "reporter": "geenensp"
        }
    ],
    "3816553": [
        {
            "dateadded": "2026-04-11 22:23:17 UTC",
            "url": "https://part1-state.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816553/",
            "reporter": "anonymous"
        }
    ],
    "3816552": [
        {
            "dateadded": "2026-04-11 22:17:07 UTC",
            "url": "https://app6-router.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816552/",
            "reporter": "anonymous"
        }
    ],
    "3816551": [
        {
            "dateadded": "2026-04-11 22:13:12 UTC",
            "url": "https://log5-stream.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816551/",
            "reporter": "anonymous"
        }
    ],
    "3816550": [
        {
            "dateadded": "2026-04-11 22:06:12 UTC",
            "url": "https://web4-proxy.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816550/",
            "reporter": "anonymous"
        }
    ],
    "3816549": [
        {
            "dateadded": "2026-04-11 22:01:16 UTC",
            "url": "https://dns3-check.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 22:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816549/",
            "reporter": "anonymous"
        }
    ],
    "3816548": [
        {
            "dateadded": "2026-04-11 22:00:27 UTC",
            "url": "http://112.93.200.59:52583/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816548/",
            "reporter": "geenensp"
        }
    ],
    "3816547": [
        {
            "dateadded": "2026-04-11 21:56:24 UTC",
            "url": "http://105.186.92.250:56453/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:25:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816547/",
            "reporter": "geenensp"
        }
    ],
    "3816546": [
        {
            "dateadded": "2026-04-11 21:55:23 UTC",
            "url": "http://182.116.216.152:43118/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:19:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816546/",
            "reporter": "geenensp"
        }
    ],
    "3816545": [
        {
            "dateadded": "2026-04-11 21:55:13 UTC",
            "url": "https://cdn2-fetch.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816545/",
            "reporter": "anonymous"
        }
    ],
    "3816544": [
        {
            "dateadded": "2026-04-11 21:49:10 UTC",
            "url": "https://beam1-point.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816544/",
            "reporter": "anonymous"
        }
    ],
    "3816543": [
        {
            "dateadded": "2026-04-11 21:44:06 UTC",
            "url": "https://net6-access.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816543/",
            "reporter": "anonymous"
        }
    ],
    "3816542": [
        {
            "dateadded": "2026-04-11 21:42:12 UTC",
            "url": "https://o3pjh3hs.paragonbloomera.digital/?=check&&actmn=FfuLBgyoRJuFgJJz",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816542/",
            "reporter": "anonymous"
        }
    ],
    "3816541": [
        {
            "dateadded": "2026-04-11 21:39:16 UTC",
            "url": "https://site5-core.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:39:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816541/",
            "reporter": "anonymous"
        }
    ],
    "3816540": [
        {
            "dateadded": "2026-04-11 21:35:17 UTC",
            "url": "http://122.195.50.124:50673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 22:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816540/",
            "reporter": "geenensp"
        }
    ],
    "3816539": [
        {
            "dateadded": "2026-04-11 21:35:08 UTC",
            "url": "https://back4-unit.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816539/",
            "reporter": "anonymous"
        }
    ],
    "3816538": [
        {
            "dateadded": "2026-04-11 21:33:11 UTC",
            "url": "http://120.28.114.23:44897/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816538/",
            "reporter": "geenensp"
        }
    ],
    "3816537": [
        {
            "dateadded": "2026-04-11 21:27:11 UTC",
            "url": "https://srv3-bridge.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816537/",
            "reporter": "anonymous"
        }
    ],
    "3816536": [
        {
            "dateadded": "2026-04-11 21:27:07 UTC",
            "url": "http://27.215.59.163:54350/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816536/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816535": [
        {
            "dateadded": "2026-04-11 21:26:15 UTC",
            "url": "http://119.186.208.144:40839/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816535/",
            "reporter": "geenensp"
        }
    ],
    "3816534": [
        {
            "dateadded": "2026-04-11 21:22:09 UTC",
            "url": "https://host2-entry.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816534/",
            "reporter": "anonymous"
        }
    ],
    "3816533": [
        {
            "dateadded": "2026-04-11 21:22:07 UTC",
            "url": "http://42.179.11.151:39937/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:22:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816533/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816532": [
        {
            "dateadded": "2026-04-11 21:16:10 UTC",
            "url": "https://edge1-layer.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816532/",
            "reporter": "anonymous"
        }
    ],
    "3816531": [
        {
            "dateadded": "2026-04-11 21:11:10 UTC",
            "url": "https://velcreston.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816531/",
            "reporter": "anonymous"
        }
    ],
    "3816530": [
        {
            "dateadded": "2026-04-11 21:07:09 UTC",
            "url": "https://oew4ln.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816530/",
            "reporter": "anonymous"
        }
    ],
    "3816529": [
        {
            "dateadded": "2026-04-11 21:01:19 UTC",
            "url": "http://119.186.208.144:40839/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816529/",
            "reporter": "geenensp"
        }
    ],
    "3816528": [
        {
            "dateadded": "2026-04-11 21:00:21 UTC",
            "url": "http://110.36.19.101:50653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 10:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816528/",
            "reporter": "geenensp"
        }
    ],
    "3816527": [
        {
            "dateadded": "2026-04-11 21:00:16 UTC",
            "url": "https://obse1-cache.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 21:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816527/",
            "reporter": "anonymous"
        }
    ],
    "3816526": [
        {
            "dateadded": "2026-04-11 20:56:12 UTC",
            "url": "https://rp7gpk.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816526/",
            "reporter": "anonymous"
        }
    ],
    "3816525": [
        {
            "dateadded": "2026-04-11 20:55:11 UTC",
            "url": "http://182.123.176.198:38994/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816525/",
            "reporter": "geenensp"
        }
    ],
    "3816524": [
        {
            "dateadded": "2026-04-11 20:46:07 UTC",
            "url": "https://89gwwu.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816524/",
            "reporter": "anonymous"
        }
    ],
    "3816523": [
        {
            "dateadded": "2026-04-11 20:41:12 UTC",
            "url": "https://part1c2-flow.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816523/",
            "reporter": "anonymous"
        }
    ],
    "3816522": [
        {
            "dateadded": "2026-04-11 20:37:07 UTC",
            "url": "https://uwz7.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816522/",
            "reporter": "anonymous"
        }
    ],
    "3816521": [
        {
            "dateadded": "2026-04-11 20:34:12 UTC",
            "url": "https://cdecj.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816521/",
            "reporter": "anonymous"
        }
    ],
    "3816520": [
        {
            "dateadded": "2026-04-11 20:34:10 UTC",
            "url": "http://119.165.118.34:37735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816520/",
            "reporter": "geenensp"
        }
    ],
    "3816519": [
        {
            "dateadded": "2026-04-11 20:23:07 UTC",
            "url": "https://4sh-gate.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816519/",
            "reporter": "anonymous"
        }
    ],
    "3816518": [
        {
            "dateadded": "2026-04-11 20:18:11 UTC",
            "url": "https://valueink.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816518/",
            "reporter": "anonymous"
        }
    ],
    "3816517": [
        {
            "dateadded": "2026-04-11 20:12:10 UTC",
            "url": "https://d1rec-panel.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816517/",
            "reporter": "anonymous"
        }
    ],
    "3816516": [
        {
            "dateadded": "2026-04-11 20:10:20 UTC",
            "url": "http://42.57.183.231:46154/i",
            "url_status": "offline",
            "last_online": "2026-04-17 07:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816516/",
            "reporter": "geenensp"
        }
    ],
    "3816515": [
        {
            "dateadded": "2026-04-11 20:07:17 UTC",
            "url": "http://196.188.80.240:49217/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816515/",
            "reporter": "geenensp"
        }
    ],
    "3816514": [
        {
            "dateadded": "2026-04-11 20:07:09 UTC",
            "url": "https://45hd.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816514/",
            "reporter": "anonymous"
        }
    ],
    "3816513": [
        {
            "dateadded": "2026-04-11 20:04:18 UTC",
            "url": "http://196.191.137.44:35434/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816513/",
            "reporter": "geenensp"
        }
    ],
    "3816512": [
        {
            "dateadded": "2026-04-11 20:02:15 UTC",
            "url": "http://219.156.32.74:58733/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:04:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816512/",
            "reporter": "geenensp"
        }
    ],
    "3816511": [
        {
            "dateadded": "2026-04-11 20:02:13 UTC",
            "url": "https://tshrx.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 20:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816511/",
            "reporter": "anonymous"
        }
    ],
    "3816510": [
        {
            "dateadded": "2026-04-11 19:57:14 UTC",
            "url": "https://serlineex9.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816510/",
            "reporter": "anonymous"
        }
    ],
    "3816509": [
        {
            "dateadded": "2026-04-11 19:56:09 UTC",
            "url": "http://196.191.137.44:35434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 03:59:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816509/",
            "reporter": "geenensp"
        }
    ],
    "3816508": [
        {
            "dateadded": "2026-04-11 19:50:14 UTC",
            "url": "https://quarryaud.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816508/",
            "reporter": "anonymous"
        }
    ],
    "3816507": [
        {
            "dateadded": "2026-04-11 19:45:16 UTC",
            "url": "https://thorn2-mark.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:45:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816507/",
            "reporter": "anonymous"
        }
    ],
    "3816506": [
        {
            "dateadded": "2026-04-11 19:39:09 UTC",
            "url": "https://onp3.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816506/",
            "reporter": "anonymous"
        }
    ],
    "3816505": [
        {
            "dateadded": "2026-04-11 19:37:06 UTC",
            "url": "http://77.239.112.39:8080/payload.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "wraith-honeypot"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816505/",
            "reporter": "c2hunter"
        }
    ],
    "3816504": [
        {
            "dateadded": "2026-04-11 19:34:19 UTC",
            "url": "http://178.227.219.104:45584/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-11 22:20:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816504/",
            "reporter": "botnetkiller"
        }
    ],
    "3816503": [
        {
            "dateadded": "2026-04-11 19:33:12 UTC",
            "url": "https://misua.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816503/",
            "reporter": "anonymous"
        }
    ],
    "3816502": [
        {
            "dateadded": "2026-04-11 19:31:21 UTC",
            "url": "http://39.90.144.28:44445/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:46:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816502/",
            "reporter": "geenensp"
        }
    ],
    "3816501": [
        {
            "dateadded": "2026-04-11 19:30:21 UTC",
            "url": "http://196.188.80.240:49217/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:24:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816501/",
            "reporter": "geenensp"
        }
    ],
    "3816500": [
        {
            "dateadded": "2026-04-11 19:28:10 UTC",
            "url": "https://cl3a-leaf.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816500/",
            "reporter": "anonymous"
        }
    ],
    "3816499": [
        {
            "dateadded": "2026-04-11 19:23:15 UTC",
            "url": "http://115.62.146.193:37624/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816499/",
            "reporter": "geenensp"
        }
    ],
    "3816498": [
        {
            "dateadded": "2026-04-11 19:23:11 UTC",
            "url": "https://sercoreis.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816498/",
            "reporter": "anonymous"
        }
    ],
    "3816497": [
        {
            "dateadded": "2026-04-11 19:21:17 UTC",
            "url": "http://24.88.242.17:42778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 10:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816497/",
            "reporter": "geenensp"
        }
    ],
    "3816496": [
        {
            "dateadded": "2026-04-11 19:17:06 UTC",
            "url": "http://105.225.178.12:35167/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 19:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816496/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816495": [
        {
            "dateadded": "2026-04-11 19:16:08 UTC",
            "url": "https://c4nvas9-spool.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816495/",
            "reporter": "anonymous"
        }
    ],
    "3816494": [
        {
            "dateadded": "2026-04-11 19:11:12 UTC",
            "url": "https://wildsoc.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816494/",
            "reporter": "anonymous"
        }
    ],
    "3816493": [
        {
            "dateadded": "2026-04-11 19:05:14 UTC",
            "url": "https://geo-vi5ua.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 19:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816493/",
            "reporter": "anonymous"
        }
    ],
    "3816492": [
        {
            "dateadded": "2026-04-11 18:59:07 UTC",
            "url": "https://ancientrelay.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816492/",
            "reporter": "anonymous"
        }
    ],
    "3816491": [
        {
            "dateadded": "2026-04-11 18:55:18 UTC",
            "url": "http://115.62.146.193:37624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:22:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816491/",
            "reporter": "geenensp"
        }
    ],
    "3816490": [
        {
            "dateadded": "2026-04-11 18:55:13 UTC",
            "url": "https://tcf5.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816490/",
            "reporter": "anonymous"
        }
    ],
    "3816489": [
        {
            "dateadded": "2026-04-11 18:54:17 UTC",
            "url": "http://201.149.107.50:58319/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:45:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816489/",
            "reporter": "geenensp"
        }
    ],
    "3816488": [
        {
            "dateadded": "2026-04-11 18:48:07 UTC",
            "url": "https://g3norn-stream.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816488/",
            "reporter": "anonymous"
        }
    ],
    "3816487": [
        {
            "dateadded": "2026-04-11 18:46:05 UTC",
            "url": "http://85.239.147.6/files/6817977673/tAa2Ovs.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816487/",
            "reporter": "Bitsight"
        }
    ],
    "3816486": [
        {
            "dateadded": "2026-04-11 18:43:11 UTC",
            "url": "https://networkmatrix.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816486/",
            "reporter": "anonymous"
        }
    ],
    "3816485": [
        {
            "dateadded": "2026-04-11 18:41:15 UTC",
            "url": "http://103.232.213.24/z",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:34 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816485/",
            "reporter": "NDA0E"
        }
    ],
    "3816484": [
        {
            "dateadded": "2026-04-11 18:38:10 UTC",
            "url": "https://lumvalear.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816484/",
            "reporter": "anonymous"
        }
    ],
    "3816483": [
        {
            "dateadded": "2026-04-11 18:32:14 UTC",
            "url": "https://suddentermin.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816483/",
            "reporter": "anonymous"
        }
    ],
    "3816482": [
        {
            "dateadded": "2026-04-11 18:30:23 UTC",
            "url": "http://180.244.9.195:58615/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816482/",
            "reporter": "geenensp"
        }
    ],
    "3816481": [
        {
            "dateadded": "2026-04-11 18:26:15 UTC",
            "url": "https://trivenos.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816481/",
            "reporter": "anonymous"
        }
    ],
    "3816480": [
        {
            "dateadded": "2026-04-11 18:24:21 UTC",
            "url": "http://123.132.157.222:49384/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:10:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816480/",
            "reporter": "geenensp"
        }
    ],
    "3816479": [
        {
            "dateadded": "2026-04-11 18:21:10 UTC",
            "url": "https://kajsn.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816479/",
            "reporter": "anonymous"
        }
    ],
    "3816478": [
        {
            "dateadded": "2026-04-11 18:19:20 UTC",
            "url": "http://125.160.188.11:40042/i",
            "url_status": "offline",
            "last_online": "2026-04-12 08:41:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816478/",
            "reporter": "geenensp"
        }
    ],
    "3816477": [
        {
            "dateadded": "2026-04-11 18:17:06 UTC",
            "url": "http://115.48.19.207:58927/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816477/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816476": [
        {
            "dateadded": "2026-04-11 18:15:11 UTC",
            "url": "https://assay-hyp.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816476/",
            "reporter": "anonymous"
        }
    ],
    "3816472": [
        {
            "dateadded": "2026-04-11 18:12:06 UTC",
            "url": "http://115.48.19.207:58927/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816472/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816471": [
        {
            "dateadded": "2026-04-11 18:10:26 UTC",
            "url": "https://wzjc.ipwz.online/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 18:10:26 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816471/",
            "reporter": "NDA0E"
        }
    ],
    "3816470": [
        {
            "dateadded": "2026-04-11 18:10:14 UTC",
            "url": "https://cliorgan.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816470/",
            "reporter": "anonymous"
        }
    ],
    "3816469": [
        {
            "dateadded": "2026-04-11 18:09:32 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_mipsel",
            "url_status": "offline",
            "last_online": "2026-04-12 23:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816469/",
            "reporter": "NDA0E"
        }
    ],
    "3816466": [
        {
            "dateadded": "2026-04-11 18:09:26 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_amd64",
            "url_status": "offline",
            "last_online": "2026-04-12 23:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816466/",
            "reporter": "NDA0E"
        }
    ],
    "3816467": [
        {
            "dateadded": "2026-04-11 18:09:26 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_mips64el",
            "url_status": "offline",
            "last_online": "2026-04-12 23:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816467/",
            "reporter": "NDA0E"
        }
    ],
    "3816468": [
        {
            "dateadded": "2026-04-11 18:09:26 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_386",
            "url_status": "offline",
            "last_online": "2026-04-13 04:11:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816468/",
            "reporter": "NDA0E"
        }
    ],
    "3816464": [
        {
            "dateadded": "2026-04-11 18:09:25 UTC",
            "url": "https://wzjc.ipwz.online/client",
            "url_status": "offline",
            "last_online": "2026-04-11 18:09:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Melofee",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816464/",
            "reporter": "NDA0E"
        }
    ],
    "3816465": [
        {
            "dateadded": "2026-04-11 18:09:25 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_arm7",
            "url_status": "offline",
            "last_online": "2026-04-12 23:08:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816465/",
            "reporter": "NDA0E"
        }
    ],
    "3816463": [
        {
            "dateadded": "2026-04-11 18:09:21 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_arm6",
            "url_status": "offline",
            "last_online": "2026-04-12 22:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816463/",
            "reporter": "NDA0E"
        }
    ],
    "3816459": [
        {
            "dateadded": "2026-04-11 18:09:15 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_aarch64",
            "url_status": "offline",
            "last_online": "2026-04-12 23:02:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816459/",
            "reporter": "NDA0E"
        }
    ],
    "3816460": [
        {
            "dateadded": "2026-04-11 18:09:15 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_mips",
            "url_status": "offline",
            "last_online": "2026-04-12 22:38:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816460/",
            "reporter": "NDA0E"
        }
    ],
    "3816461": [
        {
            "dateadded": "2026-04-11 18:09:15 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_arm5",
            "url_status": "offline",
            "last_online": "2026-04-12 22:09:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816461/",
            "reporter": "NDA0E"
        }
    ],
    "3816462": [
        {
            "dateadded": "2026-04-11 18:09:15 UTC",
            "url": "http://s3.mgirbvre.top:8888/linux_mips64",
            "url_status": "offline",
            "last_online": "2026-04-12 23:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816462/",
            "reporter": "NDA0E"
        }
    ],
    "3816457": [
        {
            "dateadded": "2026-04-11 18:07:09 UTC",
            "url": "http://176.65.149.237/download.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:38:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Kaiji",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816457/",
            "reporter": "NDA0E"
        }
    ],
    "3816458": [
        {
            "dateadded": "2026-04-11 18:07:09 UTC",
            "url": "http://46.151.182.82/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 11:22:49 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816458/",
            "reporter": "NDA0E"
        }
    ],
    "3816456": [
        {
            "dateadded": "2026-04-11 18:06:46 UTC",
            "url": "http://64.89.163.182/s",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:02 UTC",
            "threat": "malware_download",
            "tags": [
                "CVE-2017-6074",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816456/",
            "reporter": "NDA0E"
        }
    ],
    "3816455": [
        {
            "dateadded": "2026-04-11 18:06:44 UTC",
            "url": "http://46.151.182.82/arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 11:07:16 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816455/",
            "reporter": "NDA0E"
        }
    ],
    "3816454": [
        {
            "dateadded": "2026-04-11 18:06:42 UTC",
            "url": "http://46.151.182.82/aarch64",
            "url_status": "offline",
            "last_online": "2026-04-19 10:41:33 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816454/",
            "reporter": "NDA0E"
        }
    ],
    "3816453": [
        {
            "dateadded": "2026-04-11 18:06:37 UTC",
            "url": "http://176.65.149.237/linux_arm7",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816453/",
            "reporter": "NDA0E"
        }
    ],
    "3816452": [
        {
            "dateadded": "2026-04-11 18:06:33 UTC",
            "url": "http://176.65.149.237/linux_amd64",
            "url_status": "offline",
            "last_online": "2026-04-13 16:35:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Kaiji",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816452/",
            "reporter": "NDA0E"
        }
    ],
    "3816451": [
        {
            "dateadded": "2026-04-11 18:03:30 UTC",
            "url": "http://180.244.9.195:58615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 23:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816451/",
            "reporter": "geenensp"
        }
    ],
    "3816450": [
        {
            "dateadded": "2026-04-11 18:03:07 UTC",
            "url": "https://canvoya.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 18:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816450/",
            "reporter": "anonymous"
        }
    ],
    "3816449": [
        {
            "dateadded": "2026-04-11 18:02:15 UTC",
            "url": "http://125.160.188.11:40042/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 06:41:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816449/",
            "reporter": "geenensp"
        }
    ],
    "3816448": [
        {
            "dateadded": "2026-04-11 17:58:07 UTC",
            "url": "https://neural-mem.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816448/",
            "reporter": "anonymous"
        }
    ],
    "3816447": [
        {
            "dateadded": "2026-04-11 17:53:07 UTC",
            "url": "https://yz16m.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816447/",
            "reporter": "anonymous"
        }
    ],
    "3816446": [
        {
            "dateadded": "2026-04-11 17:46:09 UTC",
            "url": "https://y26me.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816446/",
            "reporter": "anonymous"
        }
    ],
    "3816445": [
        {
            "dateadded": "2026-04-11 17:42:12 UTC",
            "url": "https://zencore2en.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816445/",
            "reporter": "anonymous"
        }
    ],
    "3816444": [
        {
            "dateadded": "2026-04-11 17:36:07 UTC",
            "url": "https://brandquo.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816444/",
            "reporter": "anonymous"
        }
    ],
    "3816443": [
        {
            "dateadded": "2026-04-11 17:29:14 UTC",
            "url": "https://rnacro-layer.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816443/",
            "reporter": "anonymous"
        }
    ],
    "3816442": [
        {
            "dateadded": "2026-04-11 17:25:11 UTC",
            "url": "https://stolively.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816442/",
            "reporter": "anonymous"
        }
    ],
    "3816441": [
        {
            "dateadded": "2026-04-11 17:19:40 UTC",
            "url": "https://vor-coreum.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:19:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816441/",
            "reporter": "anonymous"
        }
    ],
    "3816440": [
        {
            "dateadded": "2026-04-11 17:14:12 UTC",
            "url": "https://va1ue-hinge.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816440/",
            "reporter": "anonymous"
        }
    ],
    "3816439": [
        {
            "dateadded": "2026-04-11 17:08:16 UTC",
            "url": "https://7mpydp.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816439/",
            "reporter": "anonymous"
        }
    ],
    "3816438": [
        {
            "dateadded": "2026-04-11 17:07:23 UTC",
            "url": "http://182.116.112.142:42291/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816438/",
            "reporter": "geenensp"
        }
    ],
    "3816437": [
        {
            "dateadded": "2026-04-11 17:02:15 UTC",
            "url": "https://velv0-sync.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 17:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816437/",
            "reporter": "anonymous"
        }
    ],
    "3816436": [
        {
            "dateadded": "2026-04-11 16:56:12 UTC",
            "url": "https://solcoreal9.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816436/",
            "reporter": "anonymous"
        }
    ],
    "3816435": [
        {
            "dateadded": "2026-04-11 16:54:29 UTC",
            "url": "http://110.37.7.53:47629/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816435/",
            "reporter": "geenensp"
        }
    ],
    "3816434": [
        {
            "dateadded": "2026-04-11 16:51:20 UTC",
            "url": "https://vorspireal.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816434/",
            "reporter": "anonymous"
        }
    ],
    "3816433": [
        {
            "dateadded": "2026-04-11 16:45:18 UTC",
            "url": "https://cjree.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816433/",
            "reporter": "anonymous"
        }
    ],
    "3816432": [
        {
            "dateadded": "2026-04-11 16:45:16 UTC",
            "url": "http://182.124.132.73:57623/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:22:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816432/",
            "reporter": "geenensp"
        }
    ],
    "3816431": [
        {
            "dateadded": "2026-04-11 16:39:12 UTC",
            "url": "https://binaryrapid.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816431/",
            "reporter": "anonymous"
        }
    ],
    "3816430": [
        {
            "dateadded": "2026-04-11 16:38:29 UTC",
            "url": "http://113.69.157.35:57869/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:44:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816430/",
            "reporter": "geenensp"
        }
    ],
    "3816429": [
        {
            "dateadded": "2026-04-11 16:37:20 UTC",
            "url": "http://113.69.157.35:57869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:47:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816429/",
            "reporter": "geenensp"
        }
    ],
    "3816428": [
        {
            "dateadded": "2026-04-11 16:33:16 UTC",
            "url": "https://comp1le-mesh.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816428/",
            "reporter": "anonymous"
        }
    ],
    "3816427": [
        {
            "dateadded": "2026-04-11 16:29:12 UTC",
            "url": "https://ppb9.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816427/",
            "reporter": "anonymous"
        }
    ],
    "3816426": [
        {
            "dateadded": "2026-04-11 16:27:22 UTC",
            "url": "http://110.37.7.53:47629/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:08:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816426/",
            "reporter": "geenensp"
        }
    ],
    "3816425": [
        {
            "dateadded": "2026-04-11 16:27:07 UTC",
            "url": "http://85.239.147.6/files/5876083921/RvqcM8C.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816425/",
            "reporter": "Bitsight"
        }
    ],
    "3816424": [
        {
            "dateadded": "2026-04-11 16:23:15 UTC",
            "url": "https://portalproxy.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816424/",
            "reporter": "anonymous"
        }
    ],
    "3816423": [
        {
            "dateadded": "2026-04-11 16:21:25 UTC",
            "url": "http://182.124.132.73:57623/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:47:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816423/",
            "reporter": "geenensp"
        }
    ],
    "3816422": [
        {
            "dateadded": "2026-04-11 16:17:14 UTC",
            "url": "https://apcsw.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816422/",
            "reporter": "anonymous"
        }
    ],
    "3816421": [
        {
            "dateadded": "2026-04-11 16:12:20 UTC",
            "url": "http://150.255.251.198:55895/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816421/",
            "reporter": "geenensp"
        }
    ],
    "3816420": [
        {
            "dateadded": "2026-04-11 16:11:15 UTC",
            "url": "https://ewgbx.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816420/",
            "reporter": "anonymous"
        }
    ],
    "3816419": [
        {
            "dateadded": "2026-04-11 16:06:12 UTC",
            "url": "https://kelforgeum8.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816419/",
            "reporter": "anonymous"
        }
    ],
    "3816418": [
        {
            "dateadded": "2026-04-11 16:03:03 UTC",
            "url": "http://175.22.233.45:52647/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816418/",
            "reporter": "geenensp"
        }
    ],
    "3816417": [
        {
            "dateadded": "2026-04-11 16:01:17 UTC",
            "url": "https://l3tte-chain.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 16:01:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816417/",
            "reporter": "anonymous"
        }
    ],
    "3816416": [
        {
            "dateadded": "2026-04-11 15:55:09 UTC",
            "url": "https://vrtnte.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816416/",
            "reporter": "anonymous"
        }
    ],
    "3816415": [
        {
            "dateadded": "2026-04-11 15:49:06 UTC",
            "url": "https://hyper-wag0n.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:49:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816415/",
            "reporter": "anonymous"
        }
    ],
    "3816414": [
        {
            "dateadded": "2026-04-11 15:47:06 UTC",
            "url": "http://123.14.98.41:34483/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:06:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816414/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816413": [
        {
            "dateadded": "2026-04-11 15:43:13 UTC",
            "url": "https://l1gh-scope.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816413/",
            "reporter": "anonymous"
        }
    ],
    "3816412": [
        {
            "dateadded": "2026-04-11 15:38:21 UTC",
            "url": "http://105.224.228.87:54553/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816412/",
            "reporter": "geenensp"
        }
    ],
    "3816411": [
        {
            "dateadded": "2026-04-11 15:38:09 UTC",
            "url": "https://piloroo.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816411/",
            "reporter": "anonymous"
        }
    ],
    "3816410": [
        {
            "dateadded": "2026-04-11 15:34:41 UTC",
            "url": "http://175.22.233.45:52647/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 16:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816410/",
            "reporter": "geenensp"
        }
    ],
    "3816409": [
        {
            "dateadded": "2026-04-11 15:32:15 UTC",
            "url": "https://stri3-hold.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816409/",
            "reporter": "anonymous"
        }
    ],
    "3816408": [
        {
            "dateadded": "2026-04-11 15:29:05 UTC",
            "url": "http://85.239.147.6/files/889380751/9CfsjPu.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816408/",
            "reporter": "c2hunter"
        }
    ],
    "3816407": [
        {
            "dateadded": "2026-04-11 15:28:09 UTC",
            "url": "http://115.50.65.11:41095/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:29:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816407/",
            "reporter": "geenensp"
        }
    ],
    "3816406": [
        {
            "dateadded": "2026-04-11 15:27:07 UTC",
            "url": "http://113.229.103.178:46035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:33:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816406/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816405": [
        {
            "dateadded": "2026-04-11 15:26:08 UTC",
            "url": "https://mskho2rr.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816405/",
            "reporter": "anonymous"
        }
    ],
    "3816404": [
        {
            "dateadded": "2026-04-11 15:25:14 UTC",
            "url": "http://119.187.177.27:38986/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816404/",
            "reporter": "geenensp"
        }
    ],
    "3816403": [
        {
            "dateadded": "2026-04-11 15:24:13 UTC",
            "url": "http://182.127.29.5:35364/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816403/",
            "reporter": "geenensp"
        }
    ],
    "3816402": [
        {
            "dateadded": "2026-04-11 15:22:13 UTC",
            "url": "https://qu4rry0-track.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816402/",
            "reporter": "anonymous"
        }
    ],
    "3816401": [
        {
            "dateadded": "2026-04-11 15:22:07 UTC",
            "url": "http://123.14.98.41:34483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:45:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816401/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816400": [
        {
            "dateadded": "2026-04-11 15:17:17 UTC",
            "url": "http://105.224.228.87:54553/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:42:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816400/",
            "reporter": "geenensp"
        }
    ],
    "3816399": [
        {
            "dateadded": "2026-04-11 15:17:08 UTC",
            "url": "https://q16zhmu.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816399/",
            "reporter": "anonymous"
        }
    ],
    "3816398": [
        {
            "dateadded": "2026-04-11 15:14:09 UTC",
            "url": "https://dyn-markal.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816398/",
            "reporter": "anonymous"
        }
    ],
    "3816397": [
        {
            "dateadded": "2026-04-11 15:05:20 UTC",
            "url": "http://123.14.23.37:60333/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:34:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816397/",
            "reporter": "geenensp"
        }
    ],
    "3816396": [
        {
            "dateadded": "2026-04-11 15:04:10 UTC",
            "url": "https://fexbfw.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 15:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816396/",
            "reporter": "anonymous"
        }
    ],
    "3816395": [
        {
            "dateadded": "2026-04-11 15:03:19 UTC",
            "url": "http://119.187.177.27:38986/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816395/",
            "reporter": "geenensp"
        }
    ],
    "3816394": [
        {
            "dateadded": "2026-04-11 15:02:12 UTC",
            "url": "http://115.50.65.11:41095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816394/",
            "reporter": "geenensp"
        }
    ],
    "3816393": [
        {
            "dateadded": "2026-04-11 14:59:09 UTC",
            "url": "https://fs1zh.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816393/",
            "reporter": "anonymous"
        }
    ],
    "3816392": [
        {
            "dateadded": "2026-04-11 14:53:11 UTC",
            "url": "https://sapcave.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:53:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816392/",
            "reporter": "anonymous"
        }
    ],
    "3816391": [
        {
            "dateadded": "2026-04-11 14:52:19 UTC",
            "url": "http://39.86.234.170:52086/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:20:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816391/",
            "reporter": "geenensp"
        }
    ],
    "3816390": [
        {
            "dateadded": "2026-04-11 14:48:10 UTC",
            "url": "http://42.233.93.181:34596/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816390/",
            "reporter": "geenensp"
        }
    ],
    "3816389": [
        {
            "dateadded": "2026-04-11 14:48:07 UTC",
            "url": "https://lexckh.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816389/",
            "reporter": "anonymous"
        }
    ],
    "3816388": [
        {
            "dateadded": "2026-04-11 14:41:11 UTC",
            "url": "http://42.235.49.65:54893/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816388/",
            "reporter": "geenensp"
        }
    ],
    "3816387": [
        {
            "dateadded": "2026-04-11 14:41:10 UTC",
            "url": "https://banne-plate.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816387/",
            "reporter": "anonymous"
        }
    ],
    "3816386": [
        {
            "dateadded": "2026-04-11 14:38:07 UTC",
            "url": "http://furystaff.tech/download/net_launcher.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:36 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816386/",
            "reporter": "botnetkiller"
        }
    ],
    "3816385": [
        {
            "dateadded": "2026-04-11 14:37:08 UTC",
            "url": "https://setupproducts.com/download/woofer.rar",
            "url_status": "offline",
            "last_online": "2026-04-12 16:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816385/",
            "reporter": "botnetkiller"
        }
    ],
    "3816384": [
        {
            "dateadded": "2026-04-11 14:37:05 UTC",
            "url": "https://setupproducts.com/download/explorer.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "bat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816384/",
            "reporter": "botnetkiller"
        }
    ],
    "3816383": [
        {
            "dateadded": "2026-04-11 14:36:08 UTC",
            "url": "https://p1xel7-cast.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816383/",
            "reporter": "anonymous"
        }
    ],
    "3816382": [
        {
            "dateadded": "2026-04-11 14:35:19 UTC",
            "url": "http://123.14.23.37:60333/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816382/",
            "reporter": "geenensp"
        }
    ],
    "3816380": [
        {
            "dateadded": "2026-04-11 14:31:11 UTC",
            "url": "https://1una-glow.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816380/",
            "reporter": "anonymous"
        }
    ],
    "3816377": [
        {
            "dateadded": "2026-04-11 14:26:17 UTC",
            "url": "http://222.142.247.18:49926/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816377/",
            "reporter": "geenensp"
        }
    ],
    "3816378": [
        {
            "dateadded": "2026-04-11 14:26:17 UTC",
            "url": "http://175.147.225.242:41730/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816378/",
            "reporter": "geenensp"
        }
    ],
    "3816379": [
        {
            "dateadded": "2026-04-11 14:26:17 UTC",
            "url": "http://27.202.225.170:47550/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816379/",
            "reporter": "geenensp"
        }
    ],
    "3816376": [
        {
            "dateadded": "2026-04-11 14:24:13 UTC",
            "url": "http://58.37.0.5:39727/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:06:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816376/",
            "reporter": "geenensp"
        }
    ],
    "3816375": [
        {
            "dateadded": "2026-04-11 14:24:10 UTC",
            "url": "https://2hvdt1.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816375/",
            "reporter": "anonymous"
        }
    ],
    "3816374": [
        {
            "dateadded": "2026-04-11 14:23:29 UTC",
            "url": "http://216.126.86.5:47357/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 14:23:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816374/",
            "reporter": "geenensp"
        }
    ],
    "3816373": [
        {
            "dateadded": "2026-04-11 14:22:18 UTC",
            "url": "http://39.86.234.170:52086/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:03:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816373/",
            "reporter": "geenensp"
        }
    ],
    "3816372": [
        {
            "dateadded": "2026-04-11 14:20:19 UTC",
            "url": "http://42.233.93.181:34596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816372/",
            "reporter": "geenensp"
        }
    ],
    "3816371": [
        {
            "dateadded": "2026-04-11 14:19:12 UTC",
            "url": "https://neo-th1cket.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816371/",
            "reporter": "anonymous"
        }
    ],
    "3816370": [
        {
            "dateadded": "2026-04-11 14:15:31 UTC",
            "url": "http://116.25.132.77:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:07:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816370/",
            "reporter": "geenensp"
        }
    ],
    "3816365": [
        {
            "dateadded": "2026-04-11 14:13:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-runcd",
            "url_status": "offline",
            "last_online": "2026-04-12 22:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816365/",
            "reporter": "NDA0E"
        }
    ],
    "3816366": [
        {
            "dateadded": "2026-04-11 14:13:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-swarmd",
            "url_status": "offline",
            "last_online": "2026-04-12 23:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816366/",
            "reporter": "NDA0E"
        }
    ],
    "3816367": [
        {
            "dateadded": "2026-04-11 14:13:13 UTC",
            "url": "http://27.202.225.170:47550/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:21:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816367/",
            "reporter": "geenensp"
        }
    ],
    "3816356": [
        {
            "dateadded": "2026-04-11 14:13:12 UTC",
            "url": "https://convoynoble.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816356/",
            "reporter": "anonymous"
        }
    ],
    "3816348": [
        {
            "dateadded": "2026-04-11 14:12:17 UTC",
            "url": "http://176.65.148.112/cloud/redis-sbomd",
            "url_status": "offline",
            "last_online": "2026-04-12 23:07:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816348/",
            "reporter": "NDA0E"
        }
    ],
    "3816338": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-scoutd",
            "url_status": "offline",
            "last_online": "2026-04-12 23:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816338/",
            "reporter": "NDA0E"
        }
    ],
    "3816339": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-scand",
            "url_status": "offline",
            "last_online": "2026-04-12 22:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816339/",
            "reporter": "NDA0E"
        }
    ],
    "3816340": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-conteinerd",
            "url_status": "offline",
            "last_online": "2026-04-12 22:04:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816340/",
            "reporter": "NDA0E"
        }
    ],
    "3816341": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-conteinerd-shim",
            "url_status": "offline",
            "last_online": "2026-04-12 23:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816341/",
            "reporter": "NDA0E"
        }
    ],
    "3816342": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-initd",
            "url_status": "offline",
            "last_online": "2026-04-12 22:10:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816342/",
            "reporter": "NDA0E"
        }
    ],
    "3816343": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-proxyd",
            "url_status": "offline",
            "last_online": "2026-04-12 22:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816343/",
            "reporter": "NDA0E"
        }
    ],
    "3816344": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-buildxd",
            "url_status": "offline",
            "last_online": "2026-04-13 00:55:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816344/",
            "reporter": "NDA0E"
        }
    ],
    "3816345": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-credentiald",
            "url_status": "offline",
            "last_online": "2026-04-12 22:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816345/",
            "reporter": "NDA0E"
        }
    ],
    "3816346": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-daemon",
            "url_status": "offline",
            "last_online": "2026-04-13 01:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816346/",
            "reporter": "NDA0E"
        }
    ],
    "3816347": [
        {
            "dateadded": "2026-04-11 14:12:13 UTC",
            "url": "http://176.65.148.112/cloud/redis-composd",
            "url_status": "offline",
            "last_online": "2026-04-13 00:05:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816347/",
            "reporter": "NDA0E"
        }
    ],
    "3816337": [
        {
            "dateadded": "2026-04-11 14:12:11 UTC",
            "url": "http://176.65.148.112/cloud/redis-machined",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816337/",
            "reporter": "NDA0E"
        }
    ],
    "3816336": [
        {
            "dateadded": "2026-04-11 14:10:21 UTC",
            "url": "http://167.172.154.218/.kok/temp.tar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "tar",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816336/",
            "reporter": "NDA0E"
        }
    ],
    "3816335": [
        {
            "dateadded": "2026-04-11 14:10:17 UTC",
            "url": "http://2.26.98.67/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:43:47 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816335/",
            "reporter": "NDA0E"
        }
    ],
    "3816333": [
        {
            "dateadded": "2026-04-11 14:10:12 UTC",
            "url": "http://77.221.157.206/z",
            "url_status": "offline",
            "last_online": "2026-04-13 04:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816333/",
            "reporter": "NDA0E"
        }
    ],
    "3816334": [
        {
            "dateadded": "2026-04-11 14:10:12 UTC",
            "url": "http://77.221.157.206/downloads/bash",
            "url_status": "offline",
            "last_online": "2026-04-13 04:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ladvix",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816334/",
            "reporter": "NDA0E"
        }
    ],
    "3816332": [
        {
            "dateadded": "2026-04-11 14:10:11 UTC",
            "url": "http://176.65.148.112/start.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816332/",
            "reporter": "NDA0E"
        }
    ],
    "3816331": [
        {
            "dateadded": "2026-04-11 14:08:10 UTC",
            "url": "https://linric.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816331/",
            "reporter": "anonymous"
        }
    ],
    "3816330": [
        {
            "dateadded": "2026-04-11 14:06:20 UTC",
            "url": "http://142.248.80.172/arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816330/",
            "reporter": "NDA0E"
        }
    ],
    "3816329": [
        {
            "dateadded": "2026-04-11 14:05:20 UTC",
            "url": "http://45.66.228.93/linux_arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816329/",
            "reporter": "NDA0E"
        }
    ],
    "3816327": [
        {
            "dateadded": "2026-04-11 14:05:19 UTC",
            "url": "http://31.56.229.232/bot_x86",
            "url_status": "offline",
            "last_online": "2026-04-24 23:13:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816327/",
            "reporter": "NDA0E"
        }
    ],
    "3816328": [
        {
            "dateadded": "2026-04-11 14:05:19 UTC",
            "url": "http://176.65.150.26/a",
            "url_status": "offline",
            "last_online": "2026-04-15 22:38:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816328/",
            "reporter": "NDA0E"
        }
    ],
    "3816326": [
        {
            "dateadded": "2026-04-11 14:05:18 UTC",
            "url": "http://42.232.87.158:59658/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816326/",
            "reporter": "geenensp"
        }
    ],
    "3816321": [
        {
            "dateadded": "2026-04-11 14:05:16 UTC",
            "url": "http://2.26.98.67/aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816321/",
            "reporter": "NDA0E"
        }
    ],
    "3816322": [
        {
            "dateadded": "2026-04-11 14:05:16 UTC",
            "url": "http://2.26.98.67/mips",
            "url_status": "offline",
            "last_online": "2026-04-12 04:13:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816322/",
            "reporter": "NDA0E"
        }
    ],
    "3816323": [
        {
            "dateadded": "2026-04-11 14:05:16 UTC",
            "url": "http://2.26.98.67/ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816323/",
            "reporter": "NDA0E"
        }
    ],
    "3816324": [
        {
            "dateadded": "2026-04-11 14:05:16 UTC",
            "url": "http://2.26.98.67/sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816324/",
            "reporter": "NDA0E"
        }
    ],
    "3816325": [
        {
            "dateadded": "2026-04-11 14:05:16 UTC",
            "url": "http://2.26.98.67/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-12 04:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816325/",
            "reporter": "NDA0E"
        }
    ],
    "3816320": [
        {
            "dateadded": "2026-04-11 14:02:10 UTC",
            "url": "https://ciphersha.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 14:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816320/",
            "reporter": "anonymous"
        }
    ],
    "3816319": [
        {
            "dateadded": "2026-04-11 14:00:18 UTC",
            "url": "http://222.142.247.18:49926/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:10:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816319/",
            "reporter": "geenensp"
        }
    ],
    "3816318": [
        {
            "dateadded": "2026-04-11 13:58:20 UTC",
            "url": "http://175.147.225.242:41730/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:04:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816318/",
            "reporter": "geenensp"
        }
    ],
    "3816317": [
        {
            "dateadded": "2026-04-11 13:58:18 UTC",
            "url": "http://58.37.0.5:39727/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816317/",
            "reporter": "geenensp"
        }
    ],
    "3816316": [
        {
            "dateadded": "2026-04-11 13:58:17 UTC",
            "url": "https://gatewaybalance.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816316/",
            "reporter": "anonymous"
        }
    ],
    "3816315": [
        {
            "dateadded": "2026-04-11 13:57:06 UTC",
            "url": "http://27.207.37.194:59242/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:28:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816315/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816314": [
        {
            "dateadded": "2026-04-11 13:53:12 UTC",
            "url": "https://ctlxx5r.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816314/",
            "reporter": "anonymous"
        }
    ],
    "3816313": [
        {
            "dateadded": "2026-04-11 13:50:22 UTC",
            "url": "http://61.53.84.218:54139/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:27:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816313/",
            "reporter": "geenensp"
        }
    ],
    "3816312": [
        {
            "dateadded": "2026-04-11 13:50:11 UTC",
            "url": "https://vvest0-path.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816312/",
            "reporter": "anonymous"
        }
    ],
    "3816311": [
        {
            "dateadded": "2026-04-11 13:49:19 UTC",
            "url": "http://181.99.61.213:56167/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816311/",
            "reporter": "geenensp"
        }
    ],
    "3816310": [
        {
            "dateadded": "2026-04-11 13:43:13 UTC",
            "url": "http://42.232.87.158:59658/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816310/",
            "reporter": "geenensp"
        }
    ],
    "3816309": [
        {
            "dateadded": "2026-04-11 13:40:19 UTC",
            "url": "https://30qmgzf.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:40:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816309/",
            "reporter": "anonymous"
        }
    ],
    "3816308": [
        {
            "dateadded": "2026-04-11 13:38:08 UTC",
            "url": "http://42.235.99.98:39853/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 13:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816308/",
            "reporter": "geenensp"
        }
    ],
    "3816307": [
        {
            "dateadded": "2026-04-11 13:34:09 UTC",
            "url": "https://asse9-point.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816307/",
            "reporter": "anonymous"
        }
    ],
    "3816306": [
        {
            "dateadded": "2026-04-11 13:29:16 UTC",
            "url": "http://42.54.143.150:59490/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:27:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816306/",
            "reporter": "geenensp"
        }
    ],
    "3816305": [
        {
            "dateadded": "2026-04-11 13:29:12 UTC",
            "url": "https://nornexix2.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816305/",
            "reporter": "anonymous"
        }
    ],
    "3816304": [
        {
            "dateadded": "2026-04-11 13:27:20 UTC",
            "url": "http://95.106.18.251:4563/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816304/",
            "reporter": "geenensp"
        }
    ],
    "3816303": [
        {
            "dateadded": "2026-04-11 13:26:22 UTC",
            "url": "http://201.211.79.169:35501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:42:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816303/",
            "reporter": "geenensp"
        }
    ],
    "3816302": [
        {
            "dateadded": "2026-04-11 13:25:22 UTC",
            "url": "http://181.99.61.213:56167/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:45:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816302/",
            "reporter": "geenensp"
        }
    ],
    "3816301": [
        {
            "dateadded": "2026-04-11 13:24:21 UTC",
            "url": "http://61.53.84.218:54139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816301/",
            "reporter": "geenensp"
        }
    ],
    "3816300": [
        {
            "dateadded": "2026-04-11 13:23:12 UTC",
            "url": "https://sub-5ecure.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816300/",
            "reporter": "anonymous"
        }
    ],
    "3816299": [
        {
            "dateadded": "2026-04-11 13:22:08 UTC",
            "url": "http://27.19.217.24:51089/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816299/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816298": [
        {
            "dateadded": "2026-04-11 13:22:07 UTC",
            "url": "http://27.207.37.194:59242/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:02:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816298/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816297": [
        {
            "dateadded": "2026-04-11 13:18:11 UTC",
            "url": "https://tri-mesha.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816297/",
            "reporter": "anonymous"
        }
    ],
    "3816296": [
        {
            "dateadded": "2026-04-11 13:18:06 UTC",
            "url": "http://110.37.65.205:57231/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 13:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816296/",
            "reporter": "geenensp"
        }
    ],
    "3816295": [
        {
            "dateadded": "2026-04-11 13:14:15 UTC",
            "url": "http://27.206.135.93:46730/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816295/",
            "reporter": "geenensp"
        }
    ],
    "3816294": [
        {
            "dateadded": "2026-04-11 13:12:07 UTC",
            "url": "https://ntcecfct.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816294/",
            "reporter": "anonymous"
        }
    ],
    "3816293": [
        {
            "dateadded": "2026-04-11 13:12:05 UTC",
            "url": "http://85.239.147.6/files/1401316133/VSEFVUG.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816293/",
            "reporter": "c2hunter"
        }
    ],
    "3816292": [
        {
            "dateadded": "2026-04-11 13:07:19 UTC",
            "url": "http://112.239.98.137:59676/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:53:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816292/",
            "reporter": "geenensp"
        }
    ],
    "3816291": [
        {
            "dateadded": "2026-04-11 13:07:07 UTC",
            "url": "http://110.36.15.110:56283/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:02:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816291/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816290": [
        {
            "dateadded": "2026-04-11 13:06:09 UTC",
            "url": "https://harvestfern.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816290/",
            "reporter": "anonymous"
        }
    ],
    "3816289": [
        {
            "dateadded": "2026-04-11 13:00:15 UTC",
            "url": "https://qyfx7uy.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 13:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816289/",
            "reporter": "anonymous"
        }
    ],
    "3816288": [
        {
            "dateadded": "2026-04-11 13:00:14 UTC",
            "url": "http://110.38.201.196:54293/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816288/",
            "reporter": "geenensp"
        }
    ],
    "3816287": [
        {
            "dateadded": "2026-04-11 12:58:22 UTC",
            "url": "http://115.49.27.80:58830/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:11:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816287/",
            "reporter": "geenensp"
        }
    ],
    "3816286": [
        {
            "dateadded": "2026-04-11 12:57:14 UTC",
            "url": "http://61.54.253.228:48676/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:15:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816286/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816285": [
        {
            "dateadded": "2026-04-11 12:56:10 UTC",
            "url": "https://majofres.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816285/",
            "reporter": "anonymous"
        }
    ],
    "3816284": [
        {
            "dateadded": "2026-04-11 12:52:10 UTC",
            "url": "http://27.19.217.24:51089/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:37:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816284/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816283": [
        {
            "dateadded": "2026-04-11 12:52:08 UTC",
            "url": "http://123.157.162.220:37027/i",
            "url_status": "offline",
            "last_online": "2026-04-17 10:41:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816283/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816282": [
        {
            "dateadded": "2026-04-11 12:50:18 UTC",
            "url": "https://fixthicket.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816282/",
            "reporter": "anonymous"
        }
    ],
    "3816281": [
        {
            "dateadded": "2026-04-11 12:50:16 UTC",
            "url": "http://222.141.78.90:57451/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816281/",
            "reporter": "geenensp"
        }
    ],
    "3816280": [
        {
            "dateadded": "2026-04-11 12:47:19 UTC",
            "url": "http://110.37.38.88:58751/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:10:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816280/",
            "reporter": "geenensp"
        }
    ],
    "3816279": [
        {
            "dateadded": "2026-04-11 12:46:07 UTC",
            "url": "http://45.88.186.229/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "45-88-186-229",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816279/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816278": [
        {
            "dateadded": "2026-04-11 12:46:06 UTC",
            "url": "https://45.94.31.102/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "45-94-31-102",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816278/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816277": [
        {
            "dateadded": "2026-04-11 12:44:08 UTC",
            "url": "https://0blj.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-12 22:49:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816277/",
            "reporter": "anonymous"
        }
    ],
    "3816276": [
        {
            "dateadded": "2026-04-11 12:44:05 UTC",
            "url": "https://45.88.186.47/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-14 06:55:17 UTC",
            "threat": "malware_download",
            "tags": [
                "45-88-186-47",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816276/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816274": [
        {
            "dateadded": "2026-04-11 12:43:18 UTC",
            "url": "http://27.206.135.93:46730/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816274/",
            "reporter": "geenensp"
        }
    ],
    "3816275": [
        {
            "dateadded": "2026-04-11 12:43:18 UTC",
            "url": "http://112.239.98.137:59676/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 10:45:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816275/",
            "reporter": "geenensp"
        }
    ],
    "3816273": [
        {
            "dateadded": "2026-04-11 12:43:07 UTC",
            "url": "http://45.83.31.215/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "45-83-31-215",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816273/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816271": [
        {
            "dateadded": "2026-04-11 12:41:12 UTC",
            "url": "http://169.40.135.126/bins/sora.arm6",
            "url_status": "offline",
            "last_online": "2026-04-11 12:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816271/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816272": [
        {
            "dateadded": "2026-04-11 12:41:12 UTC",
            "url": "http://169.40.135.126/bins/sora.mips",
            "url_status": "offline",
            "last_online": "2026-04-11 12:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816272/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816269": [
        {
            "dateadded": "2026-04-11 12:41:07 UTC",
            "url": "https://45.138.16.142/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-16 16:17:55 UTC",
            "threat": "malware_download",
            "tags": [
                "45-138-16-142",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816269/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816270": [
        {
            "dateadded": "2026-04-11 12:41:07 UTC",
            "url": "https://45.83.28.4/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-14 10:40:34 UTC",
            "threat": "malware_download",
            "tags": [
                "45-83-28-4",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816270/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816268": [
        {
            "dateadded": "2026-04-11 12:41:06 UTC",
            "url": "https://45.141.215.100/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:41:06 UTC",
            "threat": "malware_download",
            "tags": [
                "45-141-215-100",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816268/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816266": [
        {
            "dateadded": "2026-04-11 12:40:13 UTC",
            "url": "http://169.40.135.126/bins/sora.ppc",
            "url_status": "offline",
            "last_online": "2026-04-11 12:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816266/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816267": [
        {
            "dateadded": "2026-04-11 12:40:13 UTC",
            "url": "http://169.40.135.126/bins/sora.sh4",
            "url_status": "offline",
            "last_online": "2026-04-11 12:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816267/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816265": [
        {
            "dateadded": "2026-04-11 12:39:11 UTC",
            "url": "https://vvi1d-line.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816265/",
            "reporter": "anonymous"
        }
    ],
    "3816263": [
        {
            "dateadded": "2026-04-11 12:39:07 UTC",
            "url": "http://169.40.135.126/bins/sora.arm",
            "url_status": "offline",
            "last_online": "2026-04-11 12:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816263/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816264": [
        {
            "dateadded": "2026-04-11 12:39:07 UTC",
            "url": "http://169.40.135.126/bins/sora.arm7",
            "url_status": "offline",
            "last_online": "2026-04-11 12:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816264/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816258": [
        {
            "dateadded": "2026-04-11 12:38:19 UTC",
            "url": "http://169.40.135.126/bins/sora.x86",
            "url_status": "offline",
            "last_online": "2026-04-11 12:38:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816258/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816259": [
        {
            "dateadded": "2026-04-11 12:38:19 UTC",
            "url": "http://169.40.135.126/bins/sora.m68k",
            "url_status": "offline",
            "last_online": "2026-04-11 12:38:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816259/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816260": [
        {
            "dateadded": "2026-04-11 12:38:19 UTC",
            "url": "http://169.40.135.126/bins/sora.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-11 12:38:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816260/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816261": [
        {
            "dateadded": "2026-04-11 12:38:19 UTC",
            "url": "http://169.40.135.126/bins/sora.arm5",
            "url_status": "offline",
            "last_online": "2026-04-11 12:38:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816261/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816262": [
        {
            "dateadded": "2026-04-11 12:38:19 UTC",
            "url": "http://169.40.135.126/bins/sora.spc",
            "url_status": "offline",
            "last_online": "2026-04-11 12:38:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816262/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816257": [
        {
            "dateadded": "2026-04-11 12:37:15 UTC",
            "url": "http://110.38.201.196:54293/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:52:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816257/",
            "reporter": "geenensp"
        }
    ],
    "3816256": [
        {
            "dateadded": "2026-04-11 12:37:10 UTC",
            "url": "http://110.36.94.0:50894/i",
            "url_status": "offline",
            "last_online": "2026-04-11 12:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816256/",
            "reporter": "geenensp"
        }
    ],
    "3816254": [
        {
            "dateadded": "2026-04-11 12:37:07 UTC",
            "url": "http://110.36.15.110:56283/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 12:37:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816254/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816255": [
        {
            "dateadded": "2026-04-11 12:37:07 UTC",
            "url": "http://194.26.192.153/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "194-26-192-153",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816255/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816252": [
        {
            "dateadded": "2026-04-11 12:36:07 UTC",
            "url": "https://192.159.99.119/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "192-159-99-119",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816252/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816253": [
        {
            "dateadded": "2026-04-11 12:36:07 UTC",
            "url": "https://193.26.115.225/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-26 18:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "193-26-115-225",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816253/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816251": [
        {
            "dateadded": "2026-04-11 12:33:11 UTC",
            "url": "https://bundleser.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816251/",
            "reporter": "anonymous"
        }
    ],
    "3816250": [
        {
            "dateadded": "2026-04-11 12:32:06 UTC",
            "url": "http://39.91.58.255:39381/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:51:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816250/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816249": [
        {
            "dateadded": "2026-04-11 12:30:18 UTC",
            "url": "http://179.43.182.70/psbcrnbaqk",
            "url_status": "offline",
            "last_online": "2026-04-16 11:53:15 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816249/",
            "reporter": "botnetkiller"
        }
    ],
    "3816248": [
        {
            "dateadded": "2026-04-11 12:29:26 UTC",
            "url": "http://179.43.182.70/i4z51e1kds",
            "url_status": "offline",
            "last_online": "2026-04-16 10:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816248/",
            "reporter": "botnetkiller"
        }
    ],
    "3816244": [
        {
            "dateadded": "2026-04-11 12:29:22 UTC",
            "url": "http://179.43.182.70/tztuz83uk4",
            "url_status": "offline",
            "last_online": "2026-04-16 11:16:42 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816244/",
            "reporter": "botnetkiller"
        }
    ],
    "3816245": [
        {
            "dateadded": "2026-04-11 12:29:22 UTC",
            "url": "http://179.43.182.70/k5gx9u07gi",
            "url_status": "offline",
            "last_online": "2026-04-16 10:19:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816245/",
            "reporter": "botnetkiller"
        }
    ],
    "3816246": [
        {
            "dateadded": "2026-04-11 12:29:22 UTC",
            "url": "http://179.43.182.70/3ln3lues0p",
            "url_status": "offline",
            "last_online": "2026-04-16 10:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816246/",
            "reporter": "botnetkiller"
        }
    ],
    "3816247": [
        {
            "dateadded": "2026-04-11 12:29:22 UTC",
            "url": "http://221.13.233.43:36502/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:12:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816247/",
            "reporter": "geenensp"
        }
    ],
    "3816238": [
        {
            "dateadded": "2026-04-11 12:29:11 UTC",
            "url": "http://179.43.182.70/bl1e67obm3",
            "url_status": "offline",
            "last_online": "2026-04-16 10:16:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816238/",
            "reporter": "botnetkiller"
        }
    ],
    "3816239": [
        {
            "dateadded": "2026-04-11 12:29:11 UTC",
            "url": "http://179.43.182.70/eo7un5no4d",
            "url_status": "offline",
            "last_online": "2026-04-16 10:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816239/",
            "reporter": "botnetkiller"
        }
    ],
    "3816240": [
        {
            "dateadded": "2026-04-11 12:29:11 UTC",
            "url": "http://179.43.182.70/u7455i1vg3",
            "url_status": "offline",
            "last_online": "2026-04-16 11:38:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816240/",
            "reporter": "botnetkiller"
        }
    ],
    "3816241": [
        {
            "dateadded": "2026-04-11 12:29:11 UTC",
            "url": "http://179.43.182.70/9sf2t3505q",
            "url_status": "offline",
            "last_online": "2026-04-16 10:39:25 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816241/",
            "reporter": "botnetkiller"
        }
    ],
    "3816242": [
        {
            "dateadded": "2026-04-11 12:29:11 UTC",
            "url": "http://179.43.182.70/jc4z4ut4mb",
            "url_status": "offline",
            "last_online": "2026-04-16 11:33:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816242/",
            "reporter": "botnetkiller"
        }
    ],
    "3816243": [
        {
            "dateadded": "2026-04-11 12:29:11 UTC",
            "url": "http://115.49.27.80:58830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816243/",
            "reporter": "geenensp"
        }
    ],
    "3816237": [
        {
            "dateadded": "2026-04-11 12:29:09 UTC",
            "url": "http://179.43.182.70/yl27ps.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816237/",
            "reporter": "botnetkiller"
        }
    ],
    "3816236": [
        {
            "dateadded": "2026-04-11 12:27:13 UTC",
            "url": "https://crateeast.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816236/",
            "reporter": "anonymous"
        }
    ],
    "3816235": [
        {
            "dateadded": "2026-04-11 12:24:10 UTC",
            "url": "https://arklith4os.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816235/",
            "reporter": "anonymous"
        }
    ],
    "3816234": [
        {
            "dateadded": "2026-04-11 12:24:07 UTC",
            "url": "http://2.58.56.51/putty.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 12:24:07 UTC",
            "threat": "malware_download",
            "tags": [
                "2-58-56-51",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816234/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816233": [
        {
            "dateadded": "2026-04-11 12:23:10 UTC",
            "url": "http://112.251.51.169:36593/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:27:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816233/",
            "reporter": "geenensp"
        }
    ],
    "3816232": [
        {
            "dateadded": "2026-04-11 12:20:17 UTC",
            "url": "http://110.37.38.88:58751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:18:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816232/",
            "reporter": "geenensp"
        }
    ],
    "3816231": [
        {
            "dateadded": "2026-04-11 12:17:19 UTC",
            "url": "http://211.158.40.164:34707/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816231/",
            "reporter": "geenensp"
        }
    ],
    "3816230": [
        {
            "dateadded": "2026-04-11 12:15:09 UTC",
            "url": "https://bwglxvk.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816230/",
            "reporter": "anonymous"
        }
    ],
    "3816229": [
        {
            "dateadded": "2026-04-11 12:12:07 UTC",
            "url": "http://39.91.58.255:39381/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816229/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816228": [
        {
            "dateadded": "2026-04-11 12:08:12 UTC",
            "url": "https://d3ns-sheet.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816228/",
            "reporter": "anonymous"
        }
    ],
    "3816227": [
        {
            "dateadded": "2026-04-11 12:03:12 UTC",
            "url": "https://03wc5c.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 12:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816227/",
            "reporter": "anonymous"
        }
    ],
    "3816226": [
        {
            "dateadded": "2026-04-11 12:00:18 UTC",
            "url": "http://221.13.233.43:36502/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:01:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816226/",
            "reporter": "geenensp"
        }
    ],
    "3816225": [
        {
            "dateadded": "2026-04-11 11:57:08 UTC",
            "url": "https://narr-que.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816225/",
            "reporter": "anonymous"
        }
    ],
    "3816224": [
        {
            "dateadded": "2026-04-11 11:55:16 UTC",
            "url": "http://110.36.94.0:50894/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816224/",
            "reporter": "geenensp"
        }
    ],
    "3816223": [
        {
            "dateadded": "2026-04-11 11:52:16 UTC",
            "url": "http://125.43.24.202:59456/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816223/",
            "reporter": "geenensp"
        }
    ],
    "3816222": [
        {
            "dateadded": "2026-04-11 11:51:12 UTC",
            "url": "https://npcmrc.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816222/",
            "reporter": "anonymous"
        }
    ],
    "3816221": [
        {
            "dateadded": "2026-04-11 11:48:36 UTC",
            "url": "http://112.251.51.169:36593/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:13:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816221/",
            "reporter": "geenensp"
        }
    ],
    "3816220": [
        {
            "dateadded": "2026-04-11 11:46:08 UTC",
            "url": "https://qbknlas.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816220/",
            "reporter": "anonymous"
        }
    ],
    "3816219": [
        {
            "dateadded": "2026-04-11 11:44:20 UTC",
            "url": "http://113.238.252.196:36319/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816219/",
            "reporter": "geenensp"
        }
    ],
    "3816218": [
        {
            "dateadded": "2026-04-11 11:40:17 UTC",
            "url": "https://cdr35.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816218/",
            "reporter": "anonymous"
        }
    ],
    "3816217": [
        {
            "dateadded": "2026-04-11 11:38:18 UTC",
            "url": "https://vvorke-core.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816217/",
            "reporter": "anonymous"
        }
    ],
    "3816216": [
        {
            "dateadded": "2026-04-11 11:36:14 UTC",
            "url": "http://112.109.218.22:54244/i",
            "url_status": "offline",
            "last_online": "2026-04-19 04:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816216/",
            "reporter": "geenensp"
        }
    ],
    "3816215": [
        {
            "dateadded": "2026-04-11 11:35:12 UTC",
            "url": "http://112.245.101.40:36806/i",
            "url_status": "offline",
            "last_online": "2026-04-17 05:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816215/",
            "reporter": "geenensp"
        }
    ],
    "3816214": [
        {
            "dateadded": "2026-04-11 11:33:23 UTC",
            "url": "http://211.158.40.164:34707/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 18:42:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816214/",
            "reporter": "geenensp"
        }
    ],
    "3816213": [
        {
            "dateadded": "2026-04-11 11:32:12 UTC",
            "url": "https://geyseropen.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816213/",
            "reporter": "anonymous"
        }
    ],
    "3816212": [
        {
            "dateadded": "2026-04-11 11:30:08 UTC",
            "url": "http://81.230.148.181:40958/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:06:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816212/",
            "reporter": "geenensp"
        }
    ],
    "3816211": [
        {
            "dateadded": "2026-04-11 11:25:24 UTC",
            "url": "http://27.215.84.176:39460/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816211/",
            "reporter": "geenensp"
        }
    ],
    "3816210": [
        {
            "dateadded": "2026-04-11 11:24:22 UTC",
            "url": "http://221.15.185.92:37402/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816210/",
            "reporter": "geenensp"
        }
    ],
    "3816209": [
        {
            "dateadded": "2026-04-11 11:24:13 UTC",
            "url": "https://fjordvine.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816209/",
            "reporter": "anonymous"
        }
    ],
    "3816208": [
        {
            "dateadded": "2026-04-11 11:18:08 UTC",
            "url": "https://reportmeadow.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816208/",
            "reporter": "anonymous"
        }
    ],
    "3816207": [
        {
            "dateadded": "2026-04-11 11:14:21 UTC",
            "url": "http://27.215.84.176:39460/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816207/",
            "reporter": "geenensp"
        }
    ],
    "3816206": [
        {
            "dateadded": "2026-04-11 11:11:16 UTC",
            "url": "https://wb9g.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816206/",
            "reporter": "anonymous"
        }
    ],
    "3816205": [
        {
            "dateadded": "2026-04-11 11:08:26 UTC",
            "url": "http://125.43.24.202:59456/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:11:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816205/",
            "reporter": "geenensp"
        }
    ],
    "3816204": [
        {
            "dateadded": "2026-04-11 11:07:10 UTC",
            "url": "http://171.213.163.167:45405/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:06:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816204/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816203": [
        {
            "dateadded": "2026-04-11 11:07:07 UTC",
            "url": "http://27.37.24.29:36056/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:37:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816203/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816202": [
        {
            "dateadded": "2026-04-11 11:05:25 UTC",
            "url": "http://221.15.185.92:37402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:05:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816202/",
            "reporter": "geenensp"
        }
    ],
    "3816201": [
        {
            "dateadded": "2026-04-11 11:04:07 UTC",
            "url": "https://alt-5hip.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 11:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816201/",
            "reporter": "anonymous"
        }
    ],
    "3816200": [
        {
            "dateadded": "2026-04-11 11:02:15 UTC",
            "url": "http://112.245.101.40:36806/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816200/",
            "reporter": "geenensp"
        }
    ],
    "3816199": [
        {
            "dateadded": "2026-04-11 10:58:18 UTC",
            "url": "https://epgl608r.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816199/",
            "reporter": "anonymous"
        }
    ],
    "3816198": [
        {
            "dateadded": "2026-04-11 10:55:23 UTC",
            "url": "http://27.156.139.209:50260/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:10:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816198/",
            "reporter": "geenensp"
        }
    ],
    "3816197": [
        {
            "dateadded": "2026-04-11 10:52:08 UTC",
            "url": "https://tokencouri.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816197/",
            "reporter": "anonymous"
        }
    ],
    "3816196": [
        {
            "dateadded": "2026-04-11 10:51:26 UTC",
            "url": "http://27.221.224.109:60594/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:14:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816196/",
            "reporter": "geenensp"
        }
    ],
    "3816195": [
        {
            "dateadded": "2026-04-11 10:45:13 UTC",
            "url": "https://lqwstnf.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816195/",
            "reporter": "anonymous"
        }
    ],
    "3816194": [
        {
            "dateadded": "2026-04-11 10:44:07 UTC",
            "url": "http://192.159.99.47/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 10:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "192-159-99-47",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816194/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816193": [
        {
            "dateadded": "2026-04-11 10:42:10 UTC",
            "url": "http://171.213.163.167:45405/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816193/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816192": [
        {
            "dateadded": "2026-04-11 10:39:13 UTC",
            "url": "https://51tcb.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816192/",
            "reporter": "anonymous"
        }
    ],
    "3816191": [
        {
            "dateadded": "2026-04-11 10:37:07 UTC",
            "url": "http://222.246.40.65:49846/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816191/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816190": [
        {
            "dateadded": "2026-04-11 10:35:32 UTC",
            "url": "http://112.113.129.64:48059/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:05:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816190/",
            "reporter": "geenensp"
        }
    ],
    "3816189": [
        {
            "dateadded": "2026-04-11 10:32:13 UTC",
            "url": "https://fjor-dis.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816189/",
            "reporter": "anonymous"
        }
    ],
    "3816188": [
        {
            "dateadded": "2026-04-11 10:31:23 UTC",
            "url": "http://42.59.234.72:40757/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:23:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816188/",
            "reporter": "geenensp"
        }
    ],
    "3816186": [
        {
            "dateadded": "2026-04-11 10:29:26 UTC",
            "url": "http://27.221.224.109:60594/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816186/",
            "reporter": "geenensp"
        }
    ],
    "3816187": [
        {
            "dateadded": "2026-04-11 10:29:26 UTC",
            "url": "http://27.156.139.209:50260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:10:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816187/",
            "reporter": "geenensp"
        }
    ],
    "3816185": [
        {
            "dateadded": "2026-04-11 10:27:09 UTC",
            "url": "http://60.208.242.90:34479/i",
            "url_status": "offline",
            "last_online": "2026-04-21 04:37:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816185/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816184": [
        {
            "dateadded": "2026-04-11 10:26:17 UTC",
            "url": "http://124.234.207.22:36146/i",
            "url_status": "offline",
            "last_online": "2026-04-18 04:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816184/",
            "reporter": "geenensp"
        }
    ],
    "3816183": [
        {
            "dateadded": "2026-04-11 10:26:15 UTC",
            "url": "https://rive-wag.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816183/",
            "reporter": "anonymous"
        }
    ],
    "3816182": [
        {
            "dateadded": "2026-04-11 10:20:10 UTC",
            "url": "https://tawg.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816182/",
            "reporter": "anonymous"
        }
    ],
    "3816180": [
        {
            "dateadded": "2026-04-11 10:19:09 UTC",
            "url": "https://124.198.131.52/bin/support.client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:35 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-131-52",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816180/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816181": [
        {
            "dateadded": "2026-04-11 10:19:09 UTC",
            "url": "http://124.198.131.149/bin/support.client.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 17:15:31 UTC",
            "threat": "malware_download",
            "tags": [
                "124-198-131-149",
                "connectwise",
                "exe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816181/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816173": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splppc",
            "url_status": "offline",
            "last_online": "2026-04-13 16:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816173/",
            "reporter": "botnetkiller"
        }
    ],
    "3816174": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splspc",
            "url_status": "offline",
            "last_online": "2026-04-13 16:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816174/",
            "reporter": "botnetkiller"
        }
    ],
    "3816175": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splmips",
            "url_status": "offline",
            "last_online": "2026-04-13 16:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816175/",
            "reporter": "botnetkiller"
        }
    ],
    "3816176": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splarm7",
            "url_status": "offline",
            "last_online": "2026-04-13 16:27:38 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816176/",
            "reporter": "botnetkiller"
        }
    ],
    "3816177": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splx86",
            "url_status": "offline",
            "last_online": "2026-04-13 16:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816177/",
            "reporter": "botnetkiller"
        }
    ],
    "3816178": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splarm5",
            "url_status": "offline",
            "last_online": "2026-04-13 16:27:44 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816178/",
            "reporter": "botnetkiller"
        }
    ],
    "3816179": [
        {
            "dateadded": "2026-04-11 10:18:25 UTC",
            "url": "http://141.98.10.64/splsh4",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816179/",
            "reporter": "botnetkiller"
        }
    ],
    "3816172": [
        {
            "dateadded": "2026-04-11 10:18:24 UTC",
            "url": "http://141.98.10.64/splarm",
            "url_status": "offline",
            "last_online": "2026-04-13 16:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816172/",
            "reporter": "botnetkiller"
        }
    ],
    "3816170": [
        {
            "dateadded": "2026-04-11 10:17:30 UTC",
            "url": "http://141.98.10.64/splmpsl",
            "url_status": "offline",
            "last_online": "2026-04-13 16:22:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816170/",
            "reporter": "botnetkiller"
        }
    ],
    "3816171": [
        {
            "dateadded": "2026-04-11 10:17:30 UTC",
            "url": "http://141.98.10.64/f",
            "url_status": "offline",
            "last_online": "2026-04-13 16:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816171/",
            "reporter": "botnetkiller"
        }
    ],
    "3816168": [
        {
            "dateadded": "2026-04-11 10:17:29 UTC",
            "url": "http://141.98.10.64/splm68k",
            "url_status": "offline",
            "last_online": "2026-04-13 17:00:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816168/",
            "reporter": "botnetkiller"
        }
    ],
    "3816169": [
        {
            "dateadded": "2026-04-11 10:17:29 UTC",
            "url": "http://141.98.10.64/splarm6",
            "url_status": "offline",
            "last_online": "2026-04-13 11:50:39 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816169/",
            "reporter": "botnetkiller"
        }
    ],
    "3816167": [
        {
            "dateadded": "2026-04-11 10:16:23 UTC",
            "url": "http://218.59.118.193:45863/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816167/",
            "reporter": "geenensp"
        }
    ],
    "3816166": [
        {
            "dateadded": "2026-04-11 10:16:09 UTC",
            "url": "https://c34pp.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816166/",
            "reporter": "anonymous"
        }
    ],
    "3816165": [
        {
            "dateadded": "2026-04-11 10:10:16 UTC",
            "url": "https://f3rn-dock.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816165/",
            "reporter": "anonymous"
        }
    ],
    "3816164": [
        {
            "dateadded": "2026-04-11 10:07:12 UTC",
            "url": "http://222.246.40.65:49846/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816164/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816163": [
        {
            "dateadded": "2026-04-11 10:07:08 UTC",
            "url": "http://223.151.75.81:34182/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:14:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816163/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816162": [
        {
            "dateadded": "2026-04-11 10:06:22 UTC",
            "url": "http://115.50.69.249:57171/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816162/",
            "reporter": "geenensp"
        }
    ],
    "3816161": [
        {
            "dateadded": "2026-04-11 10:06:07 UTC",
            "url": "https://processthor.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 10:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816161/",
            "reporter": "anonymous"
        }
    ],
    "3816160": [
        {
            "dateadded": "2026-04-11 10:03:22 UTC",
            "url": "http://42.59.234.72:40757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:52:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816160/",
            "reporter": "geenensp"
        }
    ],
    "3816159": [
        {
            "dateadded": "2026-04-11 10:02:09 UTC",
            "url": "http://182.127.122.47:60453/i",
            "url_status": "offline",
            "last_online": "2026-04-12 15:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816159/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816158": [
        {
            "dateadded": "2026-04-11 10:02:08 UTC",
            "url": "http://115.52.29.145:49989/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816158/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816157": [
        {
            "dateadded": "2026-04-11 09:58:31 UTC",
            "url": "http://124.234.207.22:36146/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 23:54:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816157/",
            "reporter": "geenensp"
        }
    ],
    "3816156": [
        {
            "dateadded": "2026-04-11 09:56:11 UTC",
            "url": "https://agentsca.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816156/",
            "reporter": "anonymous"
        }
    ],
    "3816155": [
        {
            "dateadded": "2026-04-11 09:55:07 UTC",
            "url": "http://85.239.147.6/files/6723359323/b3OTisk.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816155/",
            "reporter": "Bitsight"
        }
    ],
    "3816154": [
        {
            "dateadded": "2026-04-11 09:53:08 UTC",
            "url": "http://182.116.112.142:42291/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816154/",
            "reporter": "geenensp"
        }
    ],
    "3816153": [
        {
            "dateadded": "2026-04-11 09:50:16 UTC",
            "url": "https://svc5y.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816153/",
            "reporter": "anonymous"
        }
    ],
    "3816152": [
        {
            "dateadded": "2026-04-11 09:48:14 UTC",
            "url": "http://43.228.157.130/static/ciubuc_mips",
            "url_status": "offline",
            "last_online": "2026-04-20 06:45:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816152/",
            "reporter": "NDA0E"
        }
    ],
    "3816151": [
        {
            "dateadded": "2026-04-11 09:47:22 UTC",
            "url": "http://43.228.157.130/static/ciubuc_i486",
            "url_status": "offline",
            "last_online": "2026-04-20 06:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816151/",
            "reporter": "NDA0E"
        }
    ],
    "3816147": [
        {
            "dateadded": "2026-04-11 09:47:09 UTC",
            "url": "http://43.228.157.130/static/ciubuc_x86",
            "url_status": "offline",
            "last_online": "2026-04-20 06:34:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816147/",
            "reporter": "NDA0E"
        }
    ],
    "3816148": [
        {
            "dateadded": "2026-04-11 09:47:09 UTC",
            "url": "https://relay.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816148/",
            "reporter": "anonymous"
        }
    ],
    "3816149": [
        {
            "dateadded": "2026-04-11 09:47:09 UTC",
            "url": "http://43.228.157.130/static/ciubuc_arm5",
            "url_status": "offline",
            "last_online": "2026-04-20 06:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816149/",
            "reporter": "NDA0E"
        }
    ],
    "3816150": [
        {
            "dateadded": "2026-04-11 09:47:09 UTC",
            "url": "http://43.228.157.130/static/ciubuc_i686",
            "url_status": "offline",
            "last_online": "2026-04-20 06:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816150/",
            "reporter": "NDA0E"
        }
    ],
    "3816145": [
        {
            "dateadded": "2026-04-11 09:46:22 UTC",
            "url": "http://43.228.157.130/static/ciubuc_i586",
            "url_status": "offline",
            "last_online": "2026-04-20 04:43:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816145/",
            "reporter": "NDA0E"
        }
    ],
    "3816146": [
        {
            "dateadded": "2026-04-11 09:46:22 UTC",
            "url": "http://43.228.157.130/static/ciubuc_arm",
            "url_status": "offline",
            "last_online": "2026-04-20 05:23:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816146/",
            "reporter": "NDA0E"
        }
    ],
    "3816137": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_aarch64",
            "url_status": "offline",
            "last_online": "2026-04-20 04:47:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816137/",
            "reporter": "NDA0E"
        }
    ],
    "3816138": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_arm7",
            "url_status": "offline",
            "last_online": "2026-04-20 04:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816138/",
            "reporter": "NDA0E"
        }
    ],
    "3816139": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-20 06:15:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816139/",
            "reporter": "NDA0E"
        }
    ],
    "3816140": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_m68k",
            "url_status": "offline",
            "last_online": "2026-04-20 04:40:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816140/",
            "reporter": "NDA0E"
        }
    ],
    "3816141": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_sh4",
            "url_status": "offline",
            "last_online": "2026-04-20 06:29:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816141/",
            "reporter": "NDA0E"
        }
    ],
    "3816142": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_arm6",
            "url_status": "offline",
            "last_online": "2026-04-20 04:35:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816142/",
            "reporter": "NDA0E"
        }
    ],
    "3816143": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_mips64",
            "url_status": "offline",
            "last_online": "2026-04-20 06:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816143/",
            "reporter": "NDA0E"
        }
    ],
    "3816144": [
        {
            "dateadded": "2026-04-11 09:46:21 UTC",
            "url": "http://43.228.157.130/static/ciubuc_ppc",
            "url_status": "offline",
            "last_online": "2026-04-20 07:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816144/",
            "reporter": "NDA0E"
        }
    ],
    "3816136": [
        {
            "dateadded": "2026-04-11 09:46:20 UTC",
            "url": "http://43.228.157.130/static/ciubuc_spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816136/",
            "reporter": "NDA0E"
        }
    ],
    "3816135": [
        {
            "dateadded": "2026-04-11 09:39:16 UTC",
            "url": "http://106.7.235.144:42783/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:51:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816135/",
            "reporter": "geenensp"
        }
    ],
    "3816134": [
        {
            "dateadded": "2026-04-11 09:39:15 UTC",
            "url": "http://115.50.69.249:57171/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816134/",
            "reporter": "geenensp"
        }
    ],
    "3816133": [
        {
            "dateadded": "2026-04-11 09:37:17 UTC",
            "url": "http://103.249.199.4:37553/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816133/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816132": [
        {
            "dateadded": "2026-04-11 09:37:10 UTC",
            "url": "https://api.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816132/",
            "reporter": "anonymous"
        }
    ],
    "3816131": [
        {
            "dateadded": "2026-04-11 09:33:21 UTC",
            "url": "http://106.7.235.144:42783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816131/",
            "reporter": "geenensp"
        }
    ],
    "3816130": [
        {
            "dateadded": "2026-04-11 09:32:13 UTC",
            "url": "http://222.141.78.90:57451/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816130/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816129": [
        {
            "dateadded": "2026-04-11 09:32:08 UTC",
            "url": "http://115.52.29.145:49989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:25:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816129/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816128": [
        {
            "dateadded": "2026-04-11 09:29:19 UTC",
            "url": "http://119.179.254.188:33195/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:12:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816128/",
            "reporter": "geenensp"
        }
    ],
    "3816127": [
        {
            "dateadded": "2026-04-11 09:29:15 UTC",
            "url": "https://file.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816127/",
            "reporter": "anonymous"
        }
    ],
    "3816126": [
        {
            "dateadded": "2026-04-11 09:28:09 UTC",
            "url": "http://115.55.6.80:50950/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:41:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816126/",
            "reporter": "geenensp"
        }
    ],
    "3816125": [
        {
            "dateadded": "2026-04-11 09:27:06 UTC",
            "url": "http://42.233.105.79:52869/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:15:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816125/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816124": [
        {
            "dateadded": "2026-04-11 09:24:18 UTC",
            "url": "http://42.56.202.29:60383/i",
            "url_status": "offline",
            "last_online": "2026-04-17 22:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816124/",
            "reporter": "geenensp"
        }
    ],
    "3816122": [
        {
            "dateadded": "2026-04-11 09:22:14 UTC",
            "url": "http://61.53.132.194:34847/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816122/",
            "reporter": "geenensp"
        }
    ],
    "3816123": [
        {
            "dateadded": "2026-04-11 09:22:14 UTC",
            "url": "https://active.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816123/",
            "reporter": "anonymous"
        }
    ],
    "3816121": [
        {
            "dateadded": "2026-04-11 09:18:05 UTC",
            "url": "http://85.239.147.6/files/8788678720/nqGWEq6.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816121/",
            "reporter": "c2hunter"
        }
    ],
    "3816120": [
        {
            "dateadded": "2026-04-11 09:15:13 UTC",
            "url": "https://gate7.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 09:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816120/",
            "reporter": "anonymous"
        }
    ],
    "3816119": [
        {
            "dateadded": "2026-04-11 09:12:06 UTC",
            "url": "http://46.151.182.82/sh",
            "url_status": "offline",
            "last_online": "2026-04-19 11:33:33 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816119/",
            "reporter": "NDA0E"
        }
    ],
    "3816117": [
        {
            "dateadded": "2026-04-11 09:10:19 UTC",
            "url": "http://103.130.214.71:1212/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:28:30 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816117/",
            "reporter": "NDA0E"
        }
    ],
    "3816118": [
        {
            "dateadded": "2026-04-11 09:10:19 UTC",
            "url": "http://182.113.6.161:59854/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:54:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816118/",
            "reporter": "geenensp"
        }
    ],
    "3816116": [
        {
            "dateadded": "2026-04-11 09:02:13 UTC",
            "url": "http://115.55.6.80:50950/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:27:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816116/",
            "reporter": "geenensp"
        }
    ],
    "3816115": [
        {
            "dateadded": "2026-04-11 09:01:15 UTC",
            "url": "http://42.56.202.29:60383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 22:55:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816115/",
            "reporter": "geenensp"
        }
    ],
    "3816114": [
        {
            "dateadded": "2026-04-11 09:00:22 UTC",
            "url": "http://linchens.com/sex.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:31:36 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "gafgyt",
                "linchens-com",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816114/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816112": [
        {
            "dateadded": "2026-04-11 09:00:20 UTC",
            "url": "http://outel.linchens.com/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-11 11:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816112/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816113": [
        {
            "dateadded": "2026-04-11 09:00:20 UTC",
            "url": "http://outel.linchens.com/sex.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "gafgyt",
                "outel-linchens-com",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816113/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816111": [
        {
            "dateadded": "2026-04-11 09:00:10 UTC",
            "url": "http://125.41.224.148:44666/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:17:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816111/",
            "reporter": "geenensp"
        }
    ],
    "3816110": [
        {
            "dateadded": "2026-04-11 08:45:28 UTC",
            "url": "http://outel.linchens.com/i686",
            "url_status": "offline",
            "last_online": "2026-04-11 10:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816110/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816100": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://linchens.com/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-11 10:53:00 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816100/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816101": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://linchens.com/ppc",
            "url_status": "offline",
            "last_online": "2026-04-11 10:20:18 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816101/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816102": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://outel.linchens.com/m68k",
            "url_status": "offline",
            "last_online": "2026-04-11 10:26:03 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816102/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816103": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://linchens.com/dss",
            "url_status": "offline",
            "last_online": "2026-04-11 11:17:58 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816103/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816104": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://outel.linchens.com/sh4",
            "url_status": "offline",
            "last_online": "2026-04-11 11:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816104/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816105": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://outel.linchens.com/ppc",
            "url_status": "offline",
            "last_online": "2026-04-11 11:20:50 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816105/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816106": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://linchens.com/mips",
            "url_status": "offline",
            "last_online": "2026-04-11 11:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816106/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816107": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://outel.linchens.com/arm61",
            "url_status": "offline",
            "last_online": "2026-04-11 11:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816107/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816108": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://linchens.com/co",
            "url_status": "offline",
            "last_online": "2026-04-11 09:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816108/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816109": [
        {
            "dateadded": "2026-04-11 08:45:25 UTC",
            "url": "http://outel.linchens.com/mips",
            "url_status": "offline",
            "last_online": "2026-04-11 16:25:01 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816109/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816098": [
        {
            "dateadded": "2026-04-11 08:45:24 UTC",
            "url": "http://outel.linchens.com/co",
            "url_status": "offline",
            "last_online": "2026-04-11 11:11:45 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816098/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816099": [
        {
            "dateadded": "2026-04-11 08:45:24 UTC",
            "url": "http://linchens.com/586",
            "url_status": "offline",
            "last_online": "2026-04-11 11:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816099/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816093": [
        {
            "dateadded": "2026-04-11 08:45:23 UTC",
            "url": "http://linchens.com/arm61",
            "url_status": "offline",
            "last_online": "2026-04-11 10:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816093/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816094": [
        {
            "dateadded": "2026-04-11 08:45:23 UTC",
            "url": "http://outel.linchens.com/x86",
            "url_status": "offline",
            "last_online": "2026-04-11 11:11:48 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816094/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816095": [
        {
            "dateadded": "2026-04-11 08:45:23 UTC",
            "url": "http://outel.linchens.com/dc",
            "url_status": "offline",
            "last_online": "2026-04-11 10:21:47 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816095/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816096": [
        {
            "dateadded": "2026-04-11 08:45:23 UTC",
            "url": "http://outel.linchens.com/586",
            "url_status": "offline",
            "last_online": "2026-04-11 11:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816096/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816097": [
        {
            "dateadded": "2026-04-11 08:45:23 UTC",
            "url": "http://linchens.com/sh4",
            "url_status": "offline",
            "last_online": "2026-04-11 16:27:02 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816097/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816091": [
        {
            "dateadded": "2026-04-11 08:45:20 UTC",
            "url": "http://linchens.com/x86",
            "url_status": "offline",
            "last_online": "2026-04-11 10:20:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816091/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816092": [
        {
            "dateadded": "2026-04-11 08:45:20 UTC",
            "url": "http://linchens.com/i686",
            "url_status": "offline",
            "last_online": "2026-04-11 11:06:27 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816092/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816090": [
        {
            "dateadded": "2026-04-11 08:45:17 UTC",
            "url": "http://linchens.com/m68k",
            "url_status": "offline",
            "last_online": "2026-04-11 10:29:33 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816090/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816088": [
        {
            "dateadded": "2026-04-11 08:45:08 UTC",
            "url": "http://outel.linchens.com/dss",
            "url_status": "offline",
            "last_online": "2026-04-11 11:04:54 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "outel-linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816088/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816089": [
        {
            "dateadded": "2026-04-11 08:45:08 UTC",
            "url": "http://linchens.com/dc",
            "url_status": "offline",
            "last_online": "2026-04-11 10:50:53 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "elf",
                "gafgyt",
                "linchens-com",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816089/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816087": [
        {
            "dateadded": "2026-04-11 08:40:20 UTC",
            "url": "http://45.156.87.140/dc",
            "url_status": "offline",
            "last_online": "2026-04-17 17:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816087/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816086": [
        {
            "dateadded": "2026-04-11 08:39:18 UTC",
            "url": "http://45.156.87.140/sex.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 17:23:22 UTC",
            "threat": "malware_download",
            "tags": [
                "45-156-87-140",
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816086/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816084": [
        {
            "dateadded": "2026-04-11 08:37:16 UTC",
            "url": "http://85.11.167.182/iran.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-21 11:52:03 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816084/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816085": [
        {
            "dateadded": "2026-04-11 08:37:16 UTC",
            "url": "http://85.11.167.182/iran.arc",
            "url_status": "offline",
            "last_online": "2026-04-23 17:16:04 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816085/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816083": [
        {
            "dateadded": "2026-04-11 08:37:15 UTC",
            "url": "http://85.11.167.182/iran.sparc",
            "url_status": "offline",
            "last_online": "2026-04-21 11:12:44 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816083/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816070": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.i486",
            "url_status": "offline",
            "last_online": "2026-04-21 11:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816070/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816071": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-21 10:59:48 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816071/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816072": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-23 17:21:40 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816072/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816073": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.m68k",
            "url_status": "offline",
            "last_online": "2026-04-23 17:06:16 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816073/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816074": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-23 17:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816074/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816075": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.armv5l",
            "url_status": "offline",
            "last_online": "2026-04-21 11:15:34 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816075/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816076": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-21 12:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816076/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816077": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-21 11:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816077/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816078": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-21 11:56:58 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816078/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816079": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 11:35:48 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816079/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816080": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.mipsrouter",
            "url_status": "offline",
            "last_online": "2026-04-23 17:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816080/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816081": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.mips",
            "url_status": "offline",
            "last_online": "2026-04-21 13:20:42 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816081/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816082": [
        {
            "dateadded": "2026-04-11 08:36:21 UTC",
            "url": "http://85.11.167.182/iran.sh4",
            "url_status": "offline",
            "last_online": "2026-04-21 12:06:47 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-182",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816082/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816068": [
        {
            "dateadded": "2026-04-11 08:35:17 UTC",
            "url": "http://45.156.87.140/co",
            "url_status": "offline",
            "last_online": "2026-04-17 17:11:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816068/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816069": [
        {
            "dateadded": "2026-04-11 08:35:17 UTC",
            "url": "http://45.156.87.140/i686",
            "url_status": "offline",
            "last_online": "2026-04-17 16:56:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816069/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816059": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/x86",
            "url_status": "offline",
            "last_online": "2026-04-17 17:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816059/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816060": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/586",
            "url_status": "offline",
            "last_online": "2026-04-17 17:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816060/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816061": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/sh4",
            "url_status": "offline",
            "last_online": "2026-04-17 17:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816061/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816062": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/m68k",
            "url_status": "offline",
            "last_online": "2026-04-17 16:33:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816062/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816063": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/ppc",
            "url_status": "offline",
            "last_online": "2026-04-17 17:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816063/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816064": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/dss",
            "url_status": "offline",
            "last_online": "2026-04-17 17:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816064/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816065": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/arm61",
            "url_status": "offline",
            "last_online": "2026-04-17 17:05:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816065/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816066": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/mips",
            "url_status": "offline",
            "last_online": "2026-04-17 16:45:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816066/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816067": [
        {
            "dateadded": "2026-04-11 08:34:15 UTC",
            "url": "http://45.156.87.140/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-17 16:27:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816067/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3816058": [
        {
            "dateadded": "2026-04-11 08:33:09 UTC",
            "url": "http://38.49.217.42/lk/mhIOdh1.bin",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816058/",
            "reporter": "abuse_ch"
        }
    ],
    "3816057": [
        {
            "dateadded": "2026-04-11 08:32:08 UTC",
            "url": "http://42.229.118.220:54296/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:20:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816057/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816056": [
        {
            "dateadded": "2026-04-11 08:27:22 UTC",
            "url": "http://112.113.206.200:58442/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816056/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3816055": [
        {
            "dateadded": "2026-04-11 08:27:19 UTC",
            "url": "http://110.36.65.9:53520/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816055/",
            "reporter": "geenensp"
        }
    ],
    "3816054": [
        {
            "dateadded": "2026-04-11 08:25:15 UTC",
            "url": "https://gate6-way.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 08:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816054/",
            "reporter": "anonymous"
        }
    ],
    "3816053": [
        {
            "dateadded": "2026-04-11 08:20:13 UTC",
            "url": "https://svc5-relay.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 08:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816053/",
            "reporter": "anonymous"
        }
    ],
    "3816052": [
        {
            "dateadded": "2026-04-11 08:18:16 UTC",
            "url": "http://45.164.179.97:11581/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:52:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816052/",
            "reporter": "geenensp"
        }
    ],
    "3816051": [
        {
            "dateadded": "2026-04-11 08:16:10 UTC",
            "url": "https://vault4-root.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 08:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816051/",
            "reporter": "anonymous"
        }
    ],
    "3816050": [
        {
            "dateadded": "2026-04-11 08:12:10 UTC",
            "url": "https://api3-arch.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 08:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816050/",
            "reporter": "anonymous"
        }
    ],
    "3816049": [
        {
            "dateadded": "2026-04-11 08:04:13 UTC",
            "url": "https://node2-draw.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 08:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816049/",
            "reporter": "anonymous"
        }
    ],
    "3816048": [
        {
            "dateadded": "2026-04-11 07:58:15 UTC",
            "url": "https://plan1-data.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816048/",
            "reporter": "anonymous"
        }
    ],
    "3816047": [
        {
            "dateadded": "2026-04-11 07:56:12 UTC",
            "url": "http://27.215.213.203:33749/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:18:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816047/",
            "reporter": "geenensp"
        }
    ],
    "3816046": [
        {
            "dateadded": "2026-04-11 07:54:22 UTC",
            "url": "http://182.121.40.73:38263/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816046/",
            "reporter": "geenensp"
        }
    ],
    "3816045": [
        {
            "dateadded": "2026-04-11 07:51:12 UTC",
            "url": "https://hub6-main.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816045/",
            "reporter": "anonymous"
        }
    ],
    "3816044": [
        {
            "dateadded": "2026-04-11 07:46:10 UTC",
            "url": "https://svc5-relay.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816044/",
            "reporter": "anonymous"
        }
    ],
    "3816043": [
        {
            "dateadded": "2026-04-11 07:40:13 UTC",
            "url": "https://vault4-file.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816043/",
            "reporter": "anonymous"
        }
    ],
    "3816042": [
        {
            "dateadded": "2026-04-11 07:35:14 UTC",
            "url": "https://api3-gate.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816042/",
            "reporter": "anonymous"
        }
    ],
    "3816041": [
        {
            "dateadded": "2026-04-11 07:31:21 UTC",
            "url": "http://27.215.213.203:33749/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816041/",
            "reporter": "geenensp"
        }
    ],
    "3816040": [
        {
            "dateadded": "2026-04-11 07:29:08 UTC",
            "url": "https://node2-sync.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816040/",
            "reporter": "anonymous"
        }
    ],
    "3816037": [
        {
            "dateadded": "2026-04-11 07:28:07 UTC",
            "url": "http://139.99.75.86/Kharon_https_443.x64.svc.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 07:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "139-99-75-86",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816037/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816038": [
        {
            "dateadded": "2026-04-11 07:28:07 UTC",
            "url": "http://139.99.75.86/Kharon_https_443.x64.exe",
            "url_status": "offline",
            "last_online": "2026-04-11 07:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "139-99-75-86",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816038/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816039": [
        {
            "dateadded": "2026-04-11 07:28:07 UTC",
            "url": "http://139.99.75.86/Kharon_https_443.x64.dll",
            "url_status": "offline",
            "last_online": "2026-04-11 07:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "139-99-75-86",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816039/",
            "reporter": "BlinkzSec"
        }
    ],
    "3816036": [
        {
            "dateadded": "2026-04-11 07:24:15 UTC",
            "url": "https://web1-media.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816036/",
            "reporter": "anonymous"
        }
    ],
    "3816034": [
        {
            "dateadded": "2026-04-11 07:19:21 UTC",
            "url": "https://hub6-gate.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816034/",
            "reporter": "anonymous"
        }
    ],
    "3816035": [
        {
            "dateadded": "2026-04-11 07:19:21 UTC",
            "url": "http://27.202.184.191:39115/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816035/",
            "reporter": "geenensp"
        }
    ],
    "3816033": [
        {
            "dateadded": "2026-04-11 07:17:21 UTC",
            "url": "http://42.227.150.184:43309/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:53:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816033/",
            "reporter": "geenensp"
        }
    ],
    "3816029": [
        {
            "dateadded": "2026-04-11 07:15:38 UTC",
            "url": "http://176.65.139.81/atomic/main.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816029/",
            "reporter": "abuse_ch"
        }
    ],
    "3816030": [
        {
            "dateadded": "2026-04-11 07:15:38 UTC",
            "url": "http://176.65.139.81/atomic/main.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816030/",
            "reporter": "abuse_ch"
        }
    ],
    "3816031": [
        {
            "dateadded": "2026-04-11 07:15:38 UTC",
            "url": "http://176.65.139.81/atomic/main.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816031/",
            "reporter": "abuse_ch"
        }
    ],
    "3816032": [
        {
            "dateadded": "2026-04-11 07:15:38 UTC",
            "url": "http://176.65.139.81/atomic/main.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816032/",
            "reporter": "abuse_ch"
        }
    ],
    "3816022": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816022/",
            "reporter": "abuse_ch"
        }
    ],
    "3816023": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816023/",
            "reporter": "abuse_ch"
        }
    ],
    "3816024": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816024/",
            "reporter": "abuse_ch"
        }
    ],
    "3816025": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816025/",
            "reporter": "abuse_ch"
        }
    ],
    "3816026": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816026/",
            "reporter": "abuse_ch"
        }
    ],
    "3816027": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816027/",
            "reporter": "abuse_ch"
        }
    ],
    "3816028": [
        {
            "dateadded": "2026-04-11 07:15:37 UTC",
            "url": "http://176.65.139.81/atomic/main.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816028/",
            "reporter": "abuse_ch"
        }
    ],
    "3816018": [
        {
            "dateadded": "2026-04-11 07:15:36 UTC",
            "url": "http://176.65.139.81/atomic/main.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816018/",
            "reporter": "abuse_ch"
        }
    ],
    "3816019": [
        {
            "dateadded": "2026-04-11 07:15:36 UTC",
            "url": "http://176.65.139.81/atomic/main.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816019/",
            "reporter": "abuse_ch"
        }
    ],
    "3816020": [
        {
            "dateadded": "2026-04-11 07:15:36 UTC",
            "url": "http://176.65.139.81/atomic/main.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816020/",
            "reporter": "abuse_ch"
        }
    ],
    "3816021": [
        {
            "dateadded": "2026-04-11 07:15:36 UTC",
            "url": "http://176.65.139.81/atomic/main.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816021/",
            "reporter": "abuse_ch"
        }
    ],
    "3816016": [
        {
            "dateadded": "2026-04-11 07:15:24 UTC",
            "url": "http://45.83.207.105/mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816016/",
            "reporter": "abuse_ch"
        }
    ],
    "3816017": [
        {
            "dateadded": "2026-04-11 07:15:24 UTC",
            "url": "http://45.83.207.105/sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816017/",
            "reporter": "abuse_ch"
        }
    ],
    "3816015": [
        {
            "dateadded": "2026-04-11 07:13:24 UTC",
            "url": "https://svc5-relay.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816015/",
            "reporter": "anonymous"
        }
    ],
    "3816011": [
        {
            "dateadded": "2026-04-11 07:10:39 UTC",
            "url": "https://dows.1v5s.com/zh/letsvpn-latestX64.zip",
            "url_status": "offline",
            "last_online": "2026-04-11 07:10:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SilverFox"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816011/",
            "reporter": "Ling"
        }
    ],
    "3816006": [
        {
            "dateadded": "2026-04-11 07:08:08 UTC",
            "url": "http://178.16.52.82/htgghrehtherthreth/1234.exe",
            "url_status": "offline",
            "last_online": "2026-04-23 11:28:01 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "exe",
                "xmrig"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816006/",
            "reporter": "burger"
        }
    ],
    "3816005": [
        {
            "dateadded": "2026-04-11 07:07:08 UTC",
            "url": "https://vault4-safe.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816005/",
            "reporter": "anonymous"
        }
    ],
    "3816004": [
        {
            "dateadded": "2026-04-11 07:06:26 UTC",
            "url": "http://110.36.15.1:49127/i",
            "url_status": "offline",
            "last_online": "2026-04-15 06:10:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816004/",
            "reporter": "geenensp"
        }
    ],
    "3816003": [
        {
            "dateadded": "2026-04-11 07:02:09 UTC",
            "url": "https://api3-audit.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 07:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816003/",
            "reporter": "anonymous"
        }
    ],
    "3816002": [
        {
            "dateadded": "2026-04-11 06:59:20 UTC",
            "url": "http://125.41.224.148:44666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816002/",
            "reporter": "geenensp"
        }
    ],
    "3816001": [
        {
            "dateadded": "2026-04-11 06:55:12 UTC",
            "url": "https://node2-info.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816001/",
            "reporter": "anonymous"
        }
    ],
    "3816000": [
        {
            "dateadded": "2026-04-11 06:54:29 UTC",
            "url": "http://27.202.184.191:39115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:50:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3816000/",
            "reporter": "geenensp"
        }
    ],
    "3815999": [
        {
            "dateadded": "2026-04-11 06:50:14 UTC",
            "url": "https://test1-api.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815999/",
            "reporter": "anonymous"
        }
    ],
    "3815998": [
        {
            "dateadded": "2026-04-11 06:46:23 UTC",
            "url": "http://42.227.150.184:43309/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:25:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815998/",
            "reporter": "geenensp"
        }
    ],
    "3815997": [
        {
            "dateadded": "2026-04-11 06:44:23 UTC",
            "url": "http://110.36.15.1:49127/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 05:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815997/",
            "reporter": "geenensp"
        }
    ],
    "3815996": [
        {
            "dateadded": "2026-04-11 06:44:14 UTC",
            "url": "https://gate6-main.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815996/",
            "reporter": "anonymous"
        }
    ],
    "3815995": [
        {
            "dateadded": "2026-04-11 06:37:12 UTC",
            "url": "http://115.202.178.70:53373/i",
            "url_status": "offline",
            "last_online": "2026-04-11 06:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815995/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815994": [
        {
            "dateadded": "2026-04-11 06:37:07 UTC",
            "url": "http://42.224.123.247:37347/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815994/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815992": [
        {
            "dateadded": "2026-04-11 06:33:08 UTC",
            "url": "https://vault4-sync.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815992/",
            "reporter": "anonymous"
        }
    ],
    "3815993": [
        {
            "dateadded": "2026-04-11 06:33:08 UTC",
            "url": "http://85.11.167.129/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-129",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815993/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815991": [
        {
            "dateadded": "2026-04-11 06:33:07 UTC",
            "url": "http://85.11.167.129/bins/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-129",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815991/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815990": [
        {
            "dateadded": "2026-04-11 06:32:08 UTC",
            "url": "http://105.225.178.12:35167/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:45:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815990/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815989": [
        {
            "dateadded": "2026-04-11 06:29:18 UTC",
            "url": "http://85.11.167.129/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-15 16:32:53 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-129",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815989/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815988": [
        {
            "dateadded": "2026-04-11 06:29:17 UTC",
            "url": "http://85.11.167.129/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-15 17:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "85-11-167-129",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815988/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815987": [
        {
            "dateadded": "2026-04-11 06:28:12 UTC",
            "url": "https://api3-chart.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815987/",
            "reporter": "anonymous"
        }
    ],
    "3815986": [
        {
            "dateadded": "2026-04-11 06:22:11 UTC",
            "url": "https://node2-area.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815986/",
            "reporter": "anonymous"
        }
    ],
    "3815985": [
        {
            "dateadded": "2026-04-11 06:22:08 UTC",
            "url": "http://182.127.29.5:35364/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:00:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815985/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815984": [
        {
            "dateadded": "2026-04-11 06:14:16 UTC",
            "url": "http://113.236.153.5:33447/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815984/",
            "reporter": "geenensp"
        }
    ],
    "3815983": [
        {
            "dateadded": "2026-04-11 06:10:10 UTC",
            "url": "https://hub6-gate.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815983/",
            "reporter": "anonymous"
        }
    ],
    "3815977": [
        {
            "dateadded": "2026-04-11 06:08:20 UTC",
            "url": "http://45.83.207.105/arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 11:21:49 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815977/",
            "reporter": "botnetkiller"
        }
    ],
    "3815978": [
        {
            "dateadded": "2026-04-11 06:08:20 UTC",
            "url": "http://45.83.207.105/ppc",
            "url_status": "offline",
            "last_online": "2026-04-18 12:02:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815978/",
            "reporter": "botnetkiller"
        }
    ],
    "3815979": [
        {
            "dateadded": "2026-04-11 06:08:20 UTC",
            "url": "http://45.83.207.105/arm",
            "url_status": "offline",
            "last_online": "2026-04-18 10:24:38 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815979/",
            "reporter": "botnetkiller"
        }
    ],
    "3815980": [
        {
            "dateadded": "2026-04-11 06:08:20 UTC",
            "url": "http://45.83.207.105/arm7",
            "url_status": "offline",
            "last_online": "2026-04-18 10:50:45 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815980/",
            "reporter": "botnetkiller"
        }
    ],
    "3815981": [
        {
            "dateadded": "2026-04-11 06:08:20 UTC",
            "url": "http://45.83.207.105/arc",
            "url_status": "offline",
            "last_online": "2026-04-18 11:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815981/",
            "reporter": "botnetkiller"
        }
    ],
    "3815982": [
        {
            "dateadded": "2026-04-11 06:08:20 UTC",
            "url": "http://45.83.207.105/sh4",
            "url_status": "offline",
            "last_online": "2026-04-18 11:32:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815982/",
            "reporter": "botnetkiller"
        }
    ],
    "3815972": [
        {
            "dateadded": "2026-04-11 06:08:19 UTC",
            "url": "http://45.83.207.105/arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 10:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815972/",
            "reporter": "botnetkiller"
        }
    ],
    "3815973": [
        {
            "dateadded": "2026-04-11 06:08:19 UTC",
            "url": "http://45.83.207.105/x86",
            "url_status": "offline",
            "last_online": "2026-04-18 10:38:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815973/",
            "reporter": "botnetkiller"
        }
    ],
    "3815974": [
        {
            "dateadded": "2026-04-11 06:08:19 UTC",
            "url": "http://45.83.207.105/i686",
            "url_status": "offline",
            "last_online": "2026-04-18 11:27:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815974/",
            "reporter": "botnetkiller"
        }
    ],
    "3815975": [
        {
            "dateadded": "2026-04-11 06:08:19 UTC",
            "url": "http://45.83.207.105/m68k",
            "url_status": "offline",
            "last_online": "2026-04-18 11:58:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815975/",
            "reporter": "botnetkiller"
        }
    ],
    "3815976": [
        {
            "dateadded": "2026-04-11 06:08:19 UTC",
            "url": "http://45.83.207.105/spc",
            "url_status": "offline",
            "last_online": "2026-04-18 11:02:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815976/",
            "reporter": "botnetkiller"
        }
    ],
    "3815971": [
        {
            "dateadded": "2026-04-11 06:07:07 UTC",
            "url": "http://42.55.209.112:44937/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:43:38 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815971/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815970": [
        {
            "dateadded": "2026-04-11 06:05:10 UTC",
            "url": "https://svc5-relay.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815970/",
            "reporter": "anonymous"
        }
    ],
    "3815969": [
        {
            "dateadded": "2026-04-11 06:02:08 UTC",
            "url": "http://42.224.123.247:37347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815969/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815968": [
        {
            "dateadded": "2026-04-11 06:00:15 UTC",
            "url": "https://vault4-file.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 06:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815968/",
            "reporter": "anonymous"
        }
    ],
    "3815967": [
        {
            "dateadded": "2026-04-11 05:59:18 UTC",
            "url": "http://36.69.90.35:35122/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:02:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815967/",
            "reporter": "geenensp"
        }
    ],
    "3815966": [
        {
            "dateadded": "2026-04-11 05:58:11 UTC",
            "url": "http://219.154.39.52:57431/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:19:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815966/",
            "reporter": "geenensp"
        }
    ],
    "3815965": [
        {
            "dateadded": "2026-04-11 05:53:07 UTC",
            "url": "https://api3-work.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815965/",
            "reporter": "anonymous"
        }
    ],
    "3815964": [
        {
            "dateadded": "2026-04-11 05:48:11 UTC",
            "url": "https://node2-task.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815964/",
            "reporter": "anonymous"
        }
    ],
    "3815961": [
        {
            "dateadded": "2026-04-11 05:42:07 UTC",
            "url": "http://218.29.31.215:40030/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:20:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815961/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815962": [
        {
            "dateadded": "2026-04-11 05:42:07 UTC",
            "url": "https://job1-sync.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815962/",
            "reporter": "anonymous"
        }
    ],
    "3815963": [
        {
            "dateadded": "2026-04-11 05:42:07 UTC",
            "url": "http://42.55.209.112:44937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 18:14:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815963/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815960": [
        {
            "dateadded": "2026-04-11 05:39:11 UTC",
            "url": "http://42.227.172.83:48142/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815960/",
            "reporter": "geenensp"
        }
    ],
    "3815959": [
        {
            "dateadded": "2026-04-11 05:37:13 UTC",
            "url": "https://gate6-way.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815959/",
            "reporter": "anonymous"
        }
    ],
    "3815958": [
        {
            "dateadded": "2026-04-11 05:37:09 UTC",
            "url": "http://59.96.141.191:58368/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:27:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815958/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815957": [
        {
            "dateadded": "2026-04-11 05:37:06 UTC",
            "url": "http://115.48.128.202:42634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:44:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815957/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815956": [
        {
            "dateadded": "2026-04-11 05:32:07 UTC",
            "url": "https://svc5-relay.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815956/",
            "reporter": "anonymous"
        }
    ],
    "3815955": [
        {
            "dateadded": "2026-04-11 05:30:22 UTC",
            "url": "http://180.157.47.179:33973/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815955/",
            "reporter": "geenensp"
        }
    ],
    "3815954": [
        {
            "dateadded": "2026-04-11 05:26:14 UTC",
            "url": "https://vault4-sync.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815954/",
            "reporter": "anonymous"
        }
    ],
    "3815953": [
        {
            "dateadded": "2026-04-11 05:20:09 UTC",
            "url": "https://api3-trace.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815953/",
            "reporter": "anonymous"
        }
    ],
    "3815952": [
        {
            "dateadded": "2026-04-11 05:17:07 UTC",
            "url": "http://123.8.56.206:58800/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:13:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815952/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815951": [
        {
            "dateadded": "2026-04-11 05:14:10 UTC",
            "url": "https://node2-map.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815951/",
            "reporter": "anonymous"
        }
    ],
    "3815950": [
        {
            "dateadded": "2026-04-11 05:13:15 UTC",
            "url": "http://27.11.175.246:43403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 04:55:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815950/",
            "reporter": "geenensp"
        }
    ],
    "3815949": [
        {
            "dateadded": "2026-04-11 05:09:26 UTC",
            "url": "http://42.227.172.83:48142/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815949/",
            "reporter": "geenensp"
        }
    ],
    "3815948": [
        {
            "dateadded": "2026-04-11 05:08:10 UTC",
            "url": "https://trip1-point.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815948/",
            "reporter": "anonymous"
        }
    ],
    "3815947": [
        {
            "dateadded": "2026-04-11 05:03:10 UTC",
            "url": "https://hub6-gate.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 05:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815947/",
            "reporter": "anonymous"
        }
    ],
    "3815946": [
        {
            "dateadded": "2026-04-11 05:01:22 UTC",
            "url": "http://182.123.176.198:38994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:31:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815946/",
            "reporter": "geenensp"
        }
    ],
    "3815945": [
        {
            "dateadded": "2026-04-11 04:58:22 UTC",
            "url": "http://27.215.48.189:51357/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:01:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815945/",
            "reporter": "geenensp"
        }
    ],
    "3815944": [
        {
            "dateadded": "2026-04-11 04:58:13 UTC",
            "url": "https://svc5-relay.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815944/",
            "reporter": "anonymous"
        }
    ],
    "3815943": [
        {
            "dateadded": "2026-04-11 04:57:27 UTC",
            "url": "http://112.248.106.68:45407/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:57:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815943/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815942": [
        {
            "dateadded": "2026-04-11 04:52:14 UTC",
            "url": "https://vault4-root.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815942/",
            "reporter": "anonymous"
        }
    ],
    "3815941": [
        {
            "dateadded": "2026-04-11 04:49:18 UTC",
            "url": "http://119.185.139.167:36776/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815941/",
            "reporter": "geenensp"
        }
    ],
    "3815940": [
        {
            "dateadded": "2026-04-11 04:47:11 UTC",
            "url": "https://api3-trade.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815940/",
            "reporter": "anonymous"
        }
    ],
    "3815939": [
        {
            "dateadded": "2026-04-11 04:41:07 UTC",
            "url": "https://node2-list.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815939/",
            "reporter": "anonymous"
        }
    ],
    "3815938": [
        {
            "dateadded": "2026-04-11 04:35:16 UTC",
            "url": "https://shop1-data.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815938/",
            "reporter": "anonymous"
        }
    ],
    "3815937": [
        {
            "dateadded": "2026-04-11 04:30:21 UTC",
            "url": "http://42.230.249.155:49133/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:28:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815937/",
            "reporter": "geenensp"
        }
    ],
    "3815936": [
        {
            "dateadded": "2026-04-11 04:29:12 UTC",
            "url": "https://gate6-way.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815936/",
            "reporter": "anonymous"
        }
    ],
    "3815935": [
        {
            "dateadded": "2026-04-11 04:25:27 UTC",
            "url": "http://119.185.139.167:36776/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815935/",
            "reporter": "geenensp"
        }
    ],
    "3815934": [
        {
            "dateadded": "2026-04-11 04:23:16 UTC",
            "url": "https://svc5-relay.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815934/",
            "reporter": "anonymous"
        }
    ],
    "3815933": [
        {
            "dateadded": "2026-04-11 04:18:08 UTC",
            "url": "https://vault4-info.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815933/",
            "reporter": "anonymous"
        }
    ],
    "3815932": [
        {
            "dateadded": "2026-04-11 04:13:12 UTC",
            "url": "https://api3-safe.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815932/",
            "reporter": "anonymous"
        }
    ],
    "3815931": [
        {
            "dateadded": "2026-04-11 04:12:21 UTC",
            "url": "http://123.148.192.89:43983/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815931/",
            "reporter": "geenensp"
        }
    ],
    "3815930": [
        {
            "dateadded": "2026-04-11 04:09:12 UTC",
            "url": "https://node2-check.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815930/",
            "reporter": "anonymous"
        }
    ],
    "3815929": [
        {
            "dateadded": "2026-04-11 04:06:12 UTC",
            "url": "https://home1-verify.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 04:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815929/",
            "reporter": "anonymous"
        }
    ],
    "3815928": [
        {
            "dateadded": "2026-04-11 04:05:29 UTC",
            "url": "http://42.230.249.155:49133/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:00:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815928/",
            "reporter": "geenensp"
        }
    ],
    "3815927": [
        {
            "dateadded": "2026-04-11 04:02:19 UTC",
            "url": "http://85.11.167.129/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-15 16:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815927/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815926": [
        {
            "dateadded": "2026-04-11 03:57:07 UTC",
            "url": "http://218.29.31.215:40030/i",
            "url_status": "offline",
            "last_online": "2026-04-11 06:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815926/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815925": [
        {
            "dateadded": "2026-04-11 03:56:18 UTC",
            "url": "https://hub6-relay.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:56:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815925/",
            "reporter": "anonymous"
        }
    ],
    "3815924": [
        {
            "dateadded": "2026-04-11 03:55:21 UTC",
            "url": "http://42.229.100.3:50977/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:53:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815924/",
            "reporter": "geenensp"
        }
    ],
    "3815923": [
        {
            "dateadded": "2026-04-11 03:52:20 UTC",
            "url": "http://105.184.32.252:44183/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:26:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815923/",
            "reporter": "geenensp"
        }
    ],
    "3815922": [
        {
            "dateadded": "2026-04-11 03:52:18 UTC",
            "url": "http://115.57.249.185:58168/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:28:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815922/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815921": [
        {
            "dateadded": "2026-04-11 03:50:14 UTC",
            "url": "https://svc5-solar.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815921/",
            "reporter": "anonymous"
        }
    ],
    "3815920": [
        {
            "dateadded": "2026-04-11 03:47:13 UTC",
            "url": "http://115.57.249.185:58168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:29:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815920/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815919": [
        {
            "dateadded": "2026-04-11 03:45:09 UTC",
            "url": "https://vault4-data.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815919/",
            "reporter": "anonymous"
        }
    ],
    "3815918": [
        {
            "dateadded": "2026-04-11 03:39:07 UTC",
            "url": "https://api3-grid.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815918/",
            "reporter": "anonymous"
        }
    ],
    "3815917": [
        {
            "dateadded": "2026-04-11 03:37:22 UTC",
            "url": "http://123.134.56.149:50142/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815917/",
            "reporter": "geenensp"
        }
    ],
    "3815916": [
        {
            "dateadded": "2026-04-11 03:35:09 UTC",
            "url": "https://node2-power.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815916/",
            "reporter": "anonymous"
        }
    ],
    "3815915": [
        {
            "dateadded": "2026-04-11 03:32:07 UTC",
            "url": "http://27.220.89.216:38241/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:22:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815915/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815914": [
        {
            "dateadded": "2026-04-11 03:31:17 UTC",
            "url": "http://119.185.159.195:35403/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:50:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815914/",
            "reporter": "geenensp"
        }
    ],
    "3815913": [
        {
            "dateadded": "2026-04-11 03:28:13 UTC",
            "url": "https://eco1-trace.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815913/",
            "reporter": "anonymous"
        }
    ],
    "3815912": [
        {
            "dateadded": "2026-04-11 03:27:11 UTC",
            "url": "http://105.184.32.252:44183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:22:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815912/",
            "reporter": "geenensp"
        }
    ],
    "3815911": [
        {
            "dateadded": "2026-04-11 03:27:07 UTC",
            "url": "http://124.29.223.148:58205/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815911/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815910": [
        {
            "dateadded": "2026-04-11 03:22:10 UTC",
            "url": "https://hub6-main.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815910/",
            "reporter": "anonymous"
        }
    ],
    "3815909": [
        {
            "dateadded": "2026-04-11 03:22:08 UTC",
            "url": "http://182.124.137.90:58886/i",
            "url_status": "offline",
            "last_online": "2026-04-11 03:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815909/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815908": [
        {
            "dateadded": "2026-04-11 03:17:07 UTC",
            "url": "https://svc5-relay.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815908/",
            "reporter": "anonymous"
        }
    ],
    "3815907": [
        {
            "dateadded": "2026-04-11 03:10:08 UTC",
            "url": "https://vault4-file.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815907/",
            "reporter": "anonymous"
        }
    ],
    "3815906": [
        {
            "dateadded": "2026-04-11 03:07:08 UTC",
            "url": "http://123.13.50.197:35044/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:33:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815906/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815905": [
        {
            "dateadded": "2026-04-11 03:05:20 UTC",
            "url": "https://api3-auth.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:05:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815905/",
            "reporter": "anonymous"
        }
    ],
    "3815904": [
        {
            "dateadded": "2026-04-11 03:02:23 UTC",
            "url": "http://119.185.159.195:35403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815904/",
            "reporter": "geenensp"
        }
    ],
    "3815903": [
        {
            "dateadded": "2026-04-11 03:02:09 UTC",
            "url": "http://119.165.118.34:37735/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:03:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815903/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815902": [
        {
            "dateadded": "2026-04-11 03:01:18 UTC",
            "url": "http://36.88.136.194:49427/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815902/",
            "reporter": "geenensp"
        }
    ],
    "3815901": [
        {
            "dateadded": "2026-04-11 03:01:09 UTC",
            "url": "https://node2-desk.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 03:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815901/",
            "reporter": "anonymous"
        }
    ],
    "3815900": [
        {
            "dateadded": "2026-04-11 02:57:11 UTC",
            "url": "https://help1-sync.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:57:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815900/",
            "reporter": "anonymous"
        }
    ],
    "3815899": [
        {
            "dateadded": "2026-04-11 02:57:07 UTC",
            "url": "http://27.220.89.216:38241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815899/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815898": [
        {
            "dateadded": "2026-04-11 02:53:18 UTC",
            "url": "http://182.119.69.113:54434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:54:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815898/",
            "reporter": "geenensp"
        }
    ],
    "3815897": [
        {
            "dateadded": "2026-04-11 02:47:19 UTC",
            "url": "http://119.185.130.116:40160/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:04:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815897/",
            "reporter": "geenensp"
        }
    ],
    "3815896": [
        {
            "dateadded": "2026-04-11 02:47:10 UTC",
            "url": "https://gate6-way.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815896/",
            "reporter": "anonymous"
        }
    ],
    "3815895": [
        {
            "dateadded": "2026-04-11 02:47:07 UTC",
            "url": "http://121.9.69.240:54022/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815895/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815894": [
        {
            "dateadded": "2026-04-11 02:42:12 UTC",
            "url": "http://36.88.136.194:49427/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815894/",
            "reporter": "geenensp"
        }
    ],
    "3815893": [
        {
            "dateadded": "2026-04-11 02:42:07 UTC",
            "url": "http://123.13.50.197:35044/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 05:07:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815893/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815892": [
        {
            "dateadded": "2026-04-11 02:41:09 UTC",
            "url": "https://hub5-base.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815892/",
            "reporter": "anonymous"
        }
    ],
    "3815891": [
        {
            "dateadded": "2026-04-11 02:35:10 UTC",
            "url": "https://svc4-relay.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815891/",
            "reporter": "anonymous"
        }
    ],
    "3815890": [
        {
            "dateadded": "2026-04-11 02:30:09 UTC",
            "url": "https://vault3-info.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815890/",
            "reporter": "anonymous"
        }
    ],
    "3815889": [
        {
            "dateadded": "2026-04-11 02:25:09 UTC",
            "url": "https://node2-soft.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815889/",
            "reporter": "anonymous"
        }
    ],
    "3815888": [
        {
            "dateadded": "2026-04-11 02:22:08 UTC",
            "url": "http://121.9.69.240:54022/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:50:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815888/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815887": [
        {
            "dateadded": "2026-04-11 02:19:18 UTC",
            "url": "http://119.185.130.116:40160/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815887/",
            "reporter": "geenensp"
        }
    ],
    "3815886": [
        {
            "dateadded": "2026-04-11 02:18:07 UTC",
            "url": "https://clean1-api.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815886/",
            "reporter": "anonymous"
        }
    ],
    "3815885": [
        {
            "dateadded": "2026-04-11 02:13:06 UTC",
            "url": "https://gate6-hub.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815885/",
            "reporter": "anonymous"
        }
    ],
    "3815884": [
        {
            "dateadded": "2026-04-11 02:12:06 UTC",
            "url": "http://119.179.254.188:33195/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:25:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815884/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815883": [
        {
            "dateadded": "2026-04-11 02:07:08 UTC",
            "url": "https://svc5-match.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815883/",
            "reporter": "anonymous"
        }
    ],
    "3815882": [
        {
            "dateadded": "2026-04-11 02:03:18 UTC",
            "url": "http://115.50.220.84:55633/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:29:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815882/",
            "reporter": "geenensp"
        }
    ],
    "3815881": [
        {
            "dateadded": "2026-04-11 02:01:09 UTC",
            "url": "https://vault4-data.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 02:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815881/",
            "reporter": "anonymous"
        }
    ],
    "3815880": [
        {
            "dateadded": "2026-04-11 01:56:08 UTC",
            "url": "https://node3-play.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815880/",
            "reporter": "anonymous"
        }
    ],
    "3815879": [
        {
            "dateadded": "2026-04-11 01:53:18 UTC",
            "url": "http://110.36.19.101:50653/i",
            "url_status": "offline",
            "last_online": "2026-04-17 11:55:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815879/",
            "reporter": "geenensp"
        }
    ],
    "3815878": [
        {
            "dateadded": "2026-04-11 01:52:06 UTC",
            "url": "http://95.32.41.127:56362/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:00:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815878/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815877": [
        {
            "dateadded": "2026-04-11 01:51:12 UTC",
            "url": "https://api2-score.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:51:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815877/",
            "reporter": "anonymous"
        }
    ],
    "3815876": [
        {
            "dateadded": "2026-04-11 01:45:10 UTC",
            "url": "https://game1-log.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815876/",
            "reporter": "anonymous"
        }
    ],
    "3815875": [
        {
            "dateadded": "2026-04-11 01:42:07 UTC",
            "url": "http://60.23.235.117:43628/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:31:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815875/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815874": [
        {
            "dateadded": "2026-04-11 01:39:13 UTC",
            "url": "http://115.50.220.84:55633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:56:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815874/",
            "reporter": "geenensp"
        }
    ],
    "3815873": [
        {
            "dateadded": "2026-04-11 01:39:08 UTC",
            "url": "https://point6-svc.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815873/",
            "reporter": "anonymous"
        }
    ],
    "3815872": [
        {
            "dateadded": "2026-04-11 01:35:08 UTC",
            "url": "https://hub5-gate.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815872/",
            "reporter": "anonymous"
        }
    ],
    "3815871": [
        {
            "dateadded": "2026-04-11 01:29:14 UTC",
            "url": "https://svc4-relay.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815871/",
            "reporter": "anonymous"
        }
    ],
    "3815870": [
        {
            "dateadded": "2026-04-11 01:28:24 UTC",
            "url": "http://42.235.102.27:43115/i",
            "url_status": "offline",
            "last_online": "2026-04-12 19:56:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815870/",
            "reporter": "geenensp"
        }
    ],
    "3815869": [
        {
            "dateadded": "2026-04-11 01:22:08 UTC",
            "url": "https://vault3-io.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815869/",
            "reporter": "anonymous"
        }
    ],
    "3815868": [
        {
            "dateadded": "2026-04-11 01:16:08 UTC",
            "url": "https://node2-info.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815868/",
            "reporter": "anonymous"
        }
    ],
    "3815867": [
        {
            "dateadded": "2026-04-11 01:14:06 UTC",
            "url": "http://42.228.125.212:42256/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:02:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815867/",
            "reporter": "geenensp"
        }
    ],
    "3815866": [
        {
            "dateadded": "2026-04-11 01:12:12 UTC",
            "url": "https://test1-api.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815866/",
            "reporter": "anonymous"
        }
    ],
    "3815864": [
        {
            "dateadded": "2026-04-11 01:11:15 UTC",
            "url": "http://46.236.65.51:60916/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:10:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815864/",
            "reporter": "geenensp"
        }
    ],
    "3815865": [
        {
            "dateadded": "2026-04-11 01:11:15 UTC",
            "url": "http://80.67.33.209:43188/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:59:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815865/",
            "reporter": "geenensp"
        }
    ],
    "3815863": [
        {
            "dateadded": "2026-04-11 01:05:09 UTC",
            "url": "https://gate6-hub.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815863/",
            "reporter": "anonymous"
        }
    ],
    "3815862": [
        {
            "dateadded": "2026-04-11 01:02:07 UTC",
            "url": "http://39.90.184.170:52670/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:38:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815862/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815861": [
        {
            "dateadded": "2026-04-11 01:00:16 UTC",
            "url": "https://svc5-base.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 01:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815861/",
            "reporter": "anonymous"
        }
    ],
    "3815860": [
        {
            "dateadded": "2026-04-11 00:59:09 UTC",
            "url": "http://42.235.102.27:43115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:22:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815860/",
            "reporter": "geenensp"
        }
    ],
    "3815859": [
        {
            "dateadded": "2026-04-11 00:55:09 UTC",
            "url": "https://vault4-root.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815859/",
            "reporter": "anonymous"
        }
    ],
    "3815858": [
        {
            "dateadded": "2026-04-11 00:53:05 UTC",
            "url": "http://85.239.147.6/files/7900572318/dh9skIh.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815858/",
            "reporter": "Bitsight"
        }
    ],
    "3815857": [
        {
            "dateadded": "2026-04-11 00:49:08 UTC",
            "url": "https://node3-link.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815857/",
            "reporter": "anonymous"
        }
    ],
    "3815856": [
        {
            "dateadded": "2026-04-11 00:42:10 UTC",
            "url": "https://api2-unit.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815856/",
            "reporter": "anonymous"
        }
    ],
    "3815855": [
        {
            "dateadded": "2026-04-11 00:38:06 UTC",
            "url": "https://team1-work.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815855/",
            "reporter": "anonymous"
        }
    ],
    "3815854": [
        {
            "dateadded": "2026-04-11 00:32:08 UTC",
            "url": "https://hub6-secure.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815854/",
            "reporter": "anonymous"
        }
    ],
    "3815853": [
        {
            "dateadded": "2026-04-11 00:27:12 UTC",
            "url": "https://svc5-mark.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815853/",
            "reporter": "anonymous"
        }
    ],
    "3815852": [
        {
            "dateadded": "2026-04-11 00:24:20 UTC",
            "url": "http://77.247.88.88:37256/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:20:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815852/",
            "reporter": "geenensp"
        }
    ],
    "3815851": [
        {
            "dateadded": "2026-04-11 00:21:08 UTC",
            "url": "https://vault4-file.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815851/",
            "reporter": "anonymous"
        }
    ],
    "3815850": [
        {
            "dateadded": "2026-04-11 00:17:17 UTC",
            "url": "http://117.252.119.164:53450/i",
            "url_status": "offline",
            "last_online": "2026-04-11 00:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815850/",
            "reporter": "geenensp"
        }
    ],
    "3815849": [
        {
            "dateadded": "2026-04-11 00:15:08 UTC",
            "url": "https://node3-view.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815849/",
            "reporter": "anonymous"
        }
    ],
    "3815848": [
        {
            "dateadded": "2026-04-11 00:11:08 UTC",
            "url": "https://api2-knot.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815848/",
            "reporter": "anonymous"
        }
    ],
    "3815847": [
        {
            "dateadded": "2026-04-11 00:04:09 UTC",
            "url": "https://show1-data.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-11 00:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815847/",
            "reporter": "anonymous"
        }
    ],
    "3815846": [
        {
            "dateadded": "2026-04-10 23:58:07 UTC",
            "url": "https://gate6-point.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815846/",
            "reporter": "anonymous"
        }
    ],
    "3815845": [
        {
            "dateadded": "2026-04-10 23:53:06 UTC",
            "url": "https://svc5-hub.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815845/",
            "reporter": "anonymous"
        }
    ],
    "3815844": [
        {
            "dateadded": "2026-04-10 23:50:22 UTC",
            "url": "http://182.116.20.121:40675/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:46:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815844/",
            "reporter": "geenensp"
        }
    ],
    "3815843": [
        {
            "dateadded": "2026-04-10 23:47:08 UTC",
            "url": "https://vault4-sync.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815843/",
            "reporter": "anonymous"
        }
    ],
    "3815842": [
        {
            "dateadded": "2026-04-10 23:45:14 UTC",
            "url": "http://119.166.231.98:41528/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815842/",
            "reporter": "geenensp"
        }
    ],
    "3815841": [
        {
            "dateadded": "2026-04-10 23:42:11 UTC",
            "url": "https://node3-base.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815841/",
            "reporter": "anonymous"
        }
    ],
    "3815840": [
        {
            "dateadded": "2026-04-10 23:38:05 UTC",
            "url": "http://85.239.147.6/files/1781548144/iRROsSM.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815840/",
            "reporter": "Bitsight"
        }
    ],
    "3815839": [
        {
            "dateadded": "2026-04-10 23:36:10 UTC",
            "url": "https://study2-api.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815839/",
            "reporter": "anonymous"
        }
    ],
    "3815838": [
        {
            "dateadded": "2026-04-10 23:35:22 UTC",
            "url": "http://85.15.123.94:44205/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815838/",
            "reporter": "geenensp"
        }
    ],
    "3815837": [
        {
            "dateadded": "2026-04-10 23:34:05 UTC",
            "url": "http://85.239.147.6/files/7782139129/Dt0jmHC.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815837/",
            "reporter": "Bitsight"
        }
    ],
    "3815836": [
        {
            "dateadded": "2026-04-10 23:30:17 UTC",
            "url": "https://learn1-app.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:30:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815836/",
            "reporter": "anonymous"
        }
    ],
    "3815835": [
        {
            "dateadded": "2026-04-10 23:30:10 UTC",
            "url": "http://105.224.37.14:38785/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:27:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815835/",
            "reporter": "geenensp"
        }
    ],
    "3815834": [
        {
            "dateadded": "2026-04-10 23:26:26 UTC",
            "url": "http://182.116.20.121:40675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:37:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815834/",
            "reporter": "geenensp"
        }
    ],
    "3815833": [
        {
            "dateadded": "2026-04-10 23:25:17 UTC",
            "url": "https://main6-gate.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815833/",
            "reporter": "anonymous"
        }
    ],
    "3815832": [
        {
            "dateadded": "2026-04-10 23:23:11 UTC",
            "url": "http://115.56.65.255:44451/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815832/",
            "reporter": "geenensp"
        }
    ],
    "3815831": [
        {
            "dateadded": "2026-04-10 23:20:09 UTC",
            "url": "https://hub5-relay.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815831/",
            "reporter": "anonymous"
        }
    ],
    "3815830": [
        {
            "dateadded": "2026-04-10 23:19:17 UTC",
            "url": "http://123.10.55.176:59697/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:14:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815830/",
            "reporter": "geenensp"
        }
    ],
    "3815829": [
        {
            "dateadded": "2026-04-10 23:17:21 UTC",
            "url": "http://123.10.55.176:59697/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:50:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815829/",
            "reporter": "geenensp"
        }
    ],
    "3815828": [
        {
            "dateadded": "2026-04-10 23:14:14 UTC",
            "url": "https://file4-svc.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815828/",
            "reporter": "anonymous"
        }
    ],
    "3815827": [
        {
            "dateadded": "2026-04-10 23:09:07 UTC",
            "url": "https://node3-vault.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815827/",
            "reporter": "anonymous"
        }
    ],
    "3815826": [
        {
            "dateadded": "2026-04-10 23:06:26 UTC",
            "url": "http://85.15.123.94:44205/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815826/",
            "reporter": "geenensp"
        }
    ],
    "3815825": [
        {
            "dateadded": "2026-04-10 23:04:21 UTC",
            "url": "http://182.121.43.182:46214/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:04:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815825/",
            "reporter": "geenensp"
        }
    ],
    "3815824": [
        {
            "dateadded": "2026-04-10 23:04:19 UTC",
            "url": "http://105.224.37.14:38785/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815824/",
            "reporter": "geenensp"
        }
    ],
    "3815823": [
        {
            "dateadded": "2026-04-10 23:02:10 UTC",
            "url": "https://api2-cloud.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 23:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815823/",
            "reporter": "anonymous"
        }
    ],
    "3815822": [
        {
            "dateadded": "2026-04-10 23:01:25 UTC",
            "url": "http://42.238.169.132:52783/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815822/",
            "reporter": "geenensp"
        }
    ],
    "3815821": [
        {
            "dateadded": "2026-04-10 22:56:15 UTC",
            "url": "https://track1-io.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815821/",
            "reporter": "anonymous"
        }
    ],
    "3815820": [
        {
            "dateadded": "2026-04-10 22:55:13 UTC",
            "url": "http://42.228.45.116:34766/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:30:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815820/",
            "reporter": "geenensp"
        }
    ],
    "3815819": [
        {
            "dateadded": "2026-04-10 22:50:18 UTC",
            "url": "https://gate6-main.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815819/",
            "reporter": "anonymous"
        }
    ],
    "3815818": [
        {
            "dateadded": "2026-04-10 22:49:24 UTC",
            "url": "http://112.246.81.187:49792/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:01:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815818/",
            "reporter": "geenensp"
        }
    ],
    "3815817": [
        {
            "dateadded": "2026-04-10 22:46:19 UTC",
            "url": "http://61.137.202.1:55169/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:59:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815817/",
            "reporter": "geenensp"
        }
    ],
    "3815816": [
        {
            "dateadded": "2026-04-10 22:46:09 UTC",
            "url": "https://svc5-secure.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815816/",
            "reporter": "anonymous"
        }
    ],
    "3815815": [
        {
            "dateadded": "2026-04-10 22:42:07 UTC",
            "url": "http://222.141.73.146:40948/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815815/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815814": [
        {
            "dateadded": "2026-04-10 22:41:45 UTC",
            "url": "http://112.246.81.187:49792/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:02:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815814/",
            "reporter": "geenensp"
        }
    ],
    "3815813": [
        {
            "dateadded": "2026-04-10 22:39:54 UTC",
            "url": "https://info4-vault.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815813/",
            "reporter": "anonymous"
        }
    ],
    "3815812": [
        {
            "dateadded": "2026-04-10 22:37:21 UTC",
            "url": "http://42.237.45.84:60855/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:04:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815812/",
            "reporter": "geenensp"
        }
    ],
    "3815811": [
        {
            "dateadded": "2026-04-10 22:37:20 UTC",
            "url": "http://182.121.43.182:46214/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815811/",
            "reporter": "geenensp"
        }
    ],
    "3815810": [
        {
            "dateadded": "2026-04-10 22:37:07 UTC",
            "url": "http://219.155.239.70:33402/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815810/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815809": [
        {
            "dateadded": "2026-04-10 22:34:08 UTC",
            "url": "https://data3-node.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815809/",
            "reporter": "anonymous"
        }
    ],
    "3815808": [
        {
            "dateadded": "2026-04-10 22:29:14 UTC",
            "url": "https://flow2-api.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815808/",
            "reporter": "anonymous"
        }
    ],
    "3815807": [
        {
            "dateadded": "2026-04-10 22:27:08 UTC",
            "url": "http://222.142.197.166:43506/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815807/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815806": [
        {
            "dateadded": "2026-04-10 22:27:07 UTC",
            "url": "http://42.235.100.33:43991/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:28:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815806/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815805": [
        {
            "dateadded": "2026-04-10 22:27:06 UTC",
            "url": "http://85.239.147.6/files/8115679349/h00DkaU.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815805/",
            "reporter": "Bitsight"
        }
    ],
    "3815804": [
        {
            "dateadded": "2026-04-10 22:24:12 UTC",
            "url": "http://42.228.45.116:34766/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:24:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815804/",
            "reporter": "geenensp"
        }
    ],
    "3815803": [
        {
            "dateadded": "2026-04-10 22:23:26 UTC",
            "url": "http://110.186.228.86:54618/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:40:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815803/",
            "reporter": "geenensp"
        }
    ],
    "3815802": [
        {
            "dateadded": "2026-04-10 22:23:14 UTC",
            "url": "https://web1-state.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815802/",
            "reporter": "anonymous"
        }
    ],
    "3815801": [
        {
            "dateadded": "2026-04-10 22:19:14 UTC",
            "url": "https://hub6-gate.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815801/",
            "reporter": "anonymous"
        }
    ],
    "3815800": [
        {
            "dateadded": "2026-04-10 22:16:14 UTC",
            "url": "https://svc5-relay.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815800/",
            "reporter": "anonymous"
        }
    ],
    "3815799": [
        {
            "dateadded": "2026-04-10 22:15:24 UTC",
            "url": "http://115.48.26.47:37624/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815799/",
            "reporter": "geenensp"
        }
    ],
    "3815798": [
        {
            "dateadded": "2026-04-10 22:14:12 UTC",
            "url": "http://123.134.56.149:50142/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:42:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815798/",
            "reporter": "geenensp"
        }
    ],
    "3815797": [
        {
            "dateadded": "2026-04-10 22:14:11 UTC",
            "url": "http://221.15.93.6:57772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815797/",
            "reporter": "geenensp"
        }
    ],
    "3815796": [
        {
            "dateadded": "2026-04-10 22:13:25 UTC",
            "url": "http://115.48.26.47:37624/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:13:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815796/",
            "reporter": "geenensp"
        }
    ],
    "3815795": [
        {
            "dateadded": "2026-04-10 22:10:07 UTC",
            "url": "http://85.239.147.6/files/8115679349/h00DkaU.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815795/",
            "reporter": "Bitsight"
        }
    ],
    "3815794": [
        {
            "dateadded": "2026-04-10 22:07:08 UTC",
            "url": "http://219.155.239.70:33402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815794/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815791": [
        {
            "dateadded": "2026-04-10 22:05:13 UTC",
            "url": "https://base4-vault.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815791/",
            "reporter": "anonymous"
        }
    ],
    "3815792": [
        {
            "dateadded": "2026-04-10 22:05:13 UTC",
            "url": "http://94.156.152.67:83/manji.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-22 18:24:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815792/",
            "reporter": "botnetkiller"
        }
    ],
    "3815793": [
        {
            "dateadded": "2026-04-10 22:05:13 UTC",
            "url": "http://94.156.152.67:83/manji.arm",
            "url_status": "offline",
            "last_online": "2026-04-22 17:57:05 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815793/",
            "reporter": "botnetkiller"
        }
    ],
    "3815789": [
        {
            "dateadded": "2026-04-10 22:04:24 UTC",
            "url": "http://94.156.152.67:83/manji.mips",
            "url_status": "offline",
            "last_online": "2026-04-22 16:49:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815789/",
            "reporter": "botnetkiller"
        }
    ],
    "3815790": [
        {
            "dateadded": "2026-04-10 22:04:24 UTC",
            "url": "http://94.156.152.67:83/manji.arm6",
            "url_status": "offline",
            "last_online": "2026-04-22 16:50:32 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815790/",
            "reporter": "botnetkiller"
        }
    ],
    "3815787": [
        {
            "dateadded": "2026-04-10 22:03:19 UTC",
            "url": "http://42.238.169.132:52783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 05:37:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815787/",
            "reporter": "geenensp"
        }
    ],
    "3815788": [
        {
            "dateadded": "2026-04-10 22:03:19 UTC",
            "url": "http://94.156.152.67:83/manji.m68k",
            "url_status": "offline",
            "last_online": "2026-04-22 17:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815788/",
            "reporter": "botnetkiller"
        }
    ],
    "3815786": [
        {
            "dateadded": "2026-04-10 22:01:14 UTC",
            "url": "https://tool3-node.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815786/",
            "reporter": "anonymous"
        }
    ],
    "3815785": [
        {
            "dateadded": "2026-04-10 21:58:11 UTC",
            "url": "http://61.53.132.194:34847/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815785/",
            "reporter": "geenensp"
        }
    ],
    "3815784": [
        {
            "dateadded": "2026-04-10 21:57:16 UTC",
            "url": "http://27.215.209.43:35001/i",
            "url_status": "offline",
            "last_online": "2026-04-10 21:57:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815784/",
            "reporter": "geenensp"
        }
    ],
    "3815783": [
        {
            "dateadded": "2026-04-10 21:57:08 UTC",
            "url": "http://42.235.100.33:43991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:54:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815783/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815782": [
        {
            "dateadded": "2026-04-10 21:55:22 UTC",
            "url": "http://119.102.18.69:46789/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:54:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815782/",
            "reporter": "geenensp"
        }
    ],
    "3815781": [
        {
            "dateadded": "2026-04-10 21:54:11 UTC",
            "url": "https://sharp2-api.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815781/",
            "reporter": "anonymous"
        }
    ],
    "3815780": [
        {
            "dateadded": "2026-04-10 21:48:20 UTC",
            "url": "http://115.57.228.87:33000/i",
            "url_status": "offline",
            "last_online": "2026-04-11 09:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815780/",
            "reporter": "geenensp"
        }
    ],
    "3815778": [
        {
            "dateadded": "2026-04-10 21:48:13 UTC",
            "url": "https://cut1-point.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815778/",
            "reporter": "anonymous"
        }
    ],
    "3815779": [
        {
            "dateadded": "2026-04-10 21:48:13 UTC",
            "url": "http://42.228.125.212:42256/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 06:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815779/",
            "reporter": "geenensp"
        }
    ],
    "3815777": [
        {
            "dateadded": "2026-04-10 21:47:07 UTC",
            "url": "http://123.4.240.33:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815777/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815776": [
        {
            "dateadded": "2026-04-10 21:43:07 UTC",
            "url": "https://gate6-way.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815776/",
            "reporter": "anonymous"
        }
    ],
    "3815775": [
        {
            "dateadded": "2026-04-10 21:40:19 UTC",
            "url": "http://115.57.228.87:33000/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815775/",
            "reporter": "geenensp"
        }
    ],
    "3815774": [
        {
            "dateadded": "2026-04-10 21:39:20 UTC",
            "url": "http://27.37.89.75:42797/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815774/",
            "reporter": "geenensp"
        }
    ],
    "3815773": [
        {
            "dateadded": "2026-04-10 21:38:07 UTC",
            "url": "https://audio-hub5.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815773/",
            "reporter": "anonymous"
        }
    ],
    "3815772": [
        {
            "dateadded": "2026-04-10 21:36:20 UTC",
            "url": "http://114.228.191.23:39589/i",
            "url_status": "offline",
            "last_online": "2026-04-17 16:45:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815772/",
            "reporter": "geenensp"
        }
    ],
    "3815771": [
        {
            "dateadded": "2026-04-10 21:32:13 UTC",
            "url": "http://27.215.126.166:53120/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815771/",
            "reporter": "geenensp"
        }
    ],
    "3815770": [
        {
            "dateadded": "2026-04-10 21:32:08 UTC",
            "url": "https://vault-svc4.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815770/",
            "reporter": "anonymous"
        }
    ],
    "3815769": [
        {
            "dateadded": "2026-04-10 21:26:08 UTC",
            "url": "https://node3-call.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815769/",
            "reporter": "anonymous"
        }
    ],
    "3815768": [
        {
            "dateadded": "2026-04-10 21:22:05 UTC",
            "url": "http://85.239.147.6/files/8115679349/5jhRKXx.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815768/",
            "reporter": "c2hunter"
        }
    ],
    "3815767": [
        {
            "dateadded": "2026-04-10 21:21:08 UTC",
            "url": "https://talk-api2.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815767/",
            "reporter": "anonymous"
        }
    ],
    "3815766": [
        {
            "dateadded": "2026-04-10 21:18:04 UTC",
            "url": "http://85.239.147.6/files/6560547276/8RtmSh6.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815766/",
            "reporter": "Bitsight"
        }
    ],
    "3815765": [
        {
            "dateadded": "2026-04-10 21:15:12 UTC",
            "url": "https://voice1-sync.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815765/",
            "reporter": "anonymous"
        }
    ],
    "3815764": [
        {
            "dateadded": "2026-04-10 21:09:08 UTC",
            "url": "https://stoneroad.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815764/",
            "reporter": "anonymous"
        }
    ],
    "3815763": [
        {
            "dateadded": "2026-04-10 21:08:16 UTC",
            "url": "http://114.228.191.23:39589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 16:44:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815763/",
            "reporter": "geenensp"
        }
    ],
    "3815762": [
        {
            "dateadded": "2026-04-10 21:04:22 UTC",
            "url": "https://sesdigitalsolutions.com/files/EventVPcardSC_PU1KQZvw_installer.msi",
            "url_status": "offline",
            "last_online": "2026-04-13 04:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815762/",
            "reporter": "Bitsight"
        }
    ],
    "3815761": [
        {
            "dateadded": "2026-04-10 21:03:06 UTC",
            "url": "https://8cnv5b.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 21:03:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815761/",
            "reporter": "anonymous"
        }
    ],
    "3815760": [
        {
            "dateadded": "2026-04-10 21:01:12 UTC",
            "url": "http://182.117.70.1:56404/i",
            "url_status": "offline",
            "last_online": "2026-04-12 14:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815760/",
            "reporter": "geenensp"
        }
    ],
    "3815759": [
        {
            "dateadded": "2026-04-10 20:58:07 UTC",
            "url": "https://balance-ring.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815759/",
            "reporter": "anonymous"
        }
    ],
    "3815758": [
        {
            "dateadded": "2026-04-10 20:54:18 UTC",
            "url": "http://182.117.70.1:56404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 14:52:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815758/",
            "reporter": "geenensp"
        }
    ],
    "3815757": [
        {
            "dateadded": "2026-04-10 20:53:10 UTC",
            "url": "https://mndchnr.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815757/",
            "reporter": "anonymous"
        }
    ],
    "3815756": [
        {
            "dateadded": "2026-04-10 20:48:09 UTC",
            "url": "https://rpmfki.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815756/",
            "reporter": "anonymous"
        }
    ],
    "3815755": [
        {
            "dateadded": "2026-04-10 20:41:10 UTC",
            "url": "https://pc7il3.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815755/",
            "reporter": "anonymous"
        }
    ],
    "3815754": [
        {
            "dateadded": "2026-04-10 20:37:08 UTC",
            "url": "https://vjdxcj1y.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815754/",
            "reporter": "anonymous"
        }
    ],
    "3815753": [
        {
            "dateadded": "2026-04-10 20:34:09 UTC",
            "url": "https://ser-marken.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815753/",
            "reporter": "anonymous"
        }
    ],
    "3815752": [
        {
            "dateadded": "2026-04-10 20:32:05 UTC",
            "url": "http://85.239.147.6/files/1202156955/oazZTCM.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815752/",
            "reporter": "Bitsight"
        }
    ],
    "3815751": [
        {
            "dateadded": "2026-04-10 20:25:24 UTC",
            "url": "http://42.231.228.171:58708/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 20:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815751/",
            "reporter": "geenensp"
        }
    ],
    "3815750": [
        {
            "dateadded": "2026-04-10 20:25:14 UTC",
            "url": "https://vor-litha.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815750/",
            "reporter": "anonymous"
        }
    ],
    "3815749": [
        {
            "dateadded": "2026-04-10 20:18:06 UTC",
            "url": "https://west-reach.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815749/",
            "reporter": "anonymous"
        }
    ],
    "3815748": [
        {
            "dateadded": "2026-04-10 20:17:06 UTC",
            "url": "http://125.44.254.245:54450/i",
            "url_status": "offline",
            "last_online": "2026-04-10 21:55:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815748/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815747": [
        {
            "dateadded": "2026-04-10 20:13:06 UTC",
            "url": "https://endpo7-port.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815747/",
            "reporter": "anonymous"
        }
    ],
    "3815746": [
        {
            "dateadded": "2026-04-10 20:09:04 UTC",
            "url": "http://85.239.147.6/files/8366134864/z69rt8Z.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815746/",
            "reporter": "c2hunter"
        }
    ],
    "3815745": [
        {
            "dateadded": "2026-04-10 20:07:10 UTC",
            "url": "https://cach-route.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815745/",
            "reporter": "anonymous"
        }
    ],
    "3815744": [
        {
            "dateadded": "2026-04-10 20:02:14 UTC",
            "url": "http://125.44.254.245:54450/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 20:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815744/",
            "reporter": "geenensp"
        }
    ],
    "3815743": [
        {
            "dateadded": "2026-04-10 20:02:12 UTC",
            "url": "https://byte-mesh.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 20:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815743/",
            "reporter": "anonymous"
        }
    ],
    "3815742": [
        {
            "dateadded": "2026-04-10 19:56:10 UTC",
            "url": "https://vvind-frame.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815742/",
            "reporter": "anonymous"
        }
    ],
    "3815741": [
        {
            "dateadded": "2026-04-10 19:54:07 UTC",
            "url": "http://123.4.144.180:55762/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815741/",
            "reporter": "geenensp"
        }
    ],
    "3815740": [
        {
            "dateadded": "2026-04-10 19:51:09 UTC",
            "url": "https://rs8ize.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815740/",
            "reporter": "anonymous"
        }
    ],
    "3815739": [
        {
            "dateadded": "2026-04-10 19:50:18 UTC",
            "url": "http://42.235.80.228:39637/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:24:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815739/",
            "reporter": "geenensp"
        }
    ],
    "3815738": [
        {
            "dateadded": "2026-04-10 19:46:11 UTC",
            "url": "https://moraltest.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815738/",
            "reporter": "anonymous"
        }
    ],
    "3815737": [
        {
            "dateadded": "2026-04-10 19:45:12 UTC",
            "url": "http://110.37.120.17:47595/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815737/",
            "reporter": "geenensp"
        }
    ],
    "3815736": [
        {
            "dateadded": "2026-04-10 19:41:20 UTC",
            "url": "http://185.149.120.3/download/launcher.dll",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "dll"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815736/",
            "reporter": "botnetkiller"
        }
    ],
    "3815734": [
        {
            "dateadded": "2026-04-10 19:40:08 UTC",
            "url": "https://unilink.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815734/",
            "reporter": "anonymous"
        }
    ],
    "3815735": [
        {
            "dateadded": "2026-04-10 19:40:08 UTC",
            "url": "https://setupproducts.com/download/net_launcher.exe",
            "url_status": "offline",
            "last_online": "2026-04-10 22:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815735/",
            "reporter": "botnetkiller"
        }
    ],
    "3815733": [
        {
            "dateadded": "2026-04-10 19:36:05 UTC",
            "url": "http://85.239.147.6/files/joshua/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815733/",
            "reporter": "Bitsight"
        }
    ],
    "3815732": [
        {
            "dateadded": "2026-04-10 19:35:12 UTC",
            "url": "https://tr4ce5-trail.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815732/",
            "reporter": "anonymous"
        }
    ],
    "3815731": [
        {
            "dateadded": "2026-04-10 19:29:12 UTC",
            "url": "https://mhspcr.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815731/",
            "reporter": "anonymous"
        }
    ],
    "3815730": [
        {
            "dateadded": "2026-04-10 19:24:21 UTC",
            "url": "http://123.4.144.180:55762/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:26:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815730/",
            "reporter": "geenensp"
        }
    ],
    "3815729": [
        {
            "dateadded": "2026-04-10 19:23:13 UTC",
            "url": "https://castgrove.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815729/",
            "reporter": "anonymous"
        }
    ],
    "3815728": [
        {
            "dateadded": "2026-04-10 19:22:20 UTC",
            "url": "http://42.235.80.228:39637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:17:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815728/",
            "reporter": "geenensp"
        }
    ],
    "3815727": [
        {
            "dateadded": "2026-04-10 19:18:06 UTC",
            "url": "https://si1ent-dock.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815727/",
            "reporter": "anonymous"
        }
    ],
    "3815726": [
        {
            "dateadded": "2026-04-10 19:16:21 UTC",
            "url": "http://182.119.69.113:54434/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:20:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815726/",
            "reporter": "geenensp"
        }
    ],
    "3815725": [
        {
            "dateadded": "2026-04-10 19:11:07 UTC",
            "url": "https://arklith0os.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815725/",
            "reporter": "anonymous"
        }
    ],
    "3815719": [
        {
            "dateadded": "2026-04-10 19:08:19 UTC",
            "url": "http://77.110.96.200/123/scan.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hacktool",
                "opendir",
                "py"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815719/",
            "reporter": "botnetkiller"
        }
    ],
    "3815720": [
        {
            "dateadded": "2026-04-10 19:08:19 UTC",
            "url": "http://77.110.96.200/n1/q1.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hacktool",
                "opendir",
                "py"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815720/",
            "reporter": "botnetkiller"
        }
    ],
    "3815721": [
        {
            "dateadded": "2026-04-10 19:08:19 UTC",
            "url": "http://77.110.96.200/c/py.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hacktool",
                "opendir",
                "py"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815721/",
            "reporter": "botnetkiller"
        }
    ],
    "3815722": [
        {
            "dateadded": "2026-04-10 19:08:19 UTC",
            "url": "http://77.110.96.200/New/scanner.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hacktool",
                "opendir",
                "py"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815722/",
            "reporter": "botnetkiller"
        }
    ],
    "3815723": [
        {
            "dateadded": "2026-04-10 19:08:19 UTC",
            "url": "http://77.110.96.200/sc/py.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hacktool",
                "opendir",
                "py"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815723/",
            "reporter": "botnetkiller"
        }
    ],
    "3815724": [
        {
            "dateadded": "2026-04-10 19:08:19 UTC",
            "url": "http://77.110.96.200/sc/scan.py",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hacktool",
                "opendir",
                "py"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815724/",
            "reporter": "botnetkiller"
        }
    ],
    "3815718": [
        {
            "dateadded": "2026-04-10 19:08:16 UTC",
            "url": "https://finalatom.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815718/",
            "reporter": "anonymous"
        }
    ],
    "3815717": [
        {
            "dateadded": "2026-04-10 19:06:04 UTC",
            "url": "http://85.239.147.6/files/7900572318/Ew8thEw.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815717/",
            "reporter": "Bitsight"
        }
    ],
    "3815716": [
        {
            "dateadded": "2026-04-10 19:05:14 UTC",
            "url": "https://exposedeep.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 19:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815716/",
            "reporter": "anonymous"
        }
    ],
    "3815715": [
        {
            "dateadded": "2026-04-10 19:04:22 UTC",
            "url": "http://77.110.96.200/xmr.gz",
            "url_status": "offline",
            "last_online": "2026-04-10 22:56:28 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815715/",
            "reporter": "botnetkiller"
        }
    ],
    "3815714": [
        {
            "dateadded": "2026-04-10 19:04:17 UTC",
            "url": "http://77.110.96.200/lmm.gz",
            "url_status": "offline",
            "last_online": "2026-04-10 23:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815714/",
            "reporter": "botnetkiller"
        }
    ],
    "3815712": [
        {
            "dateadded": "2026-04-10 19:04:11 UTC",
            "url": "http://77.110.96.200/min1.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815712/",
            "reporter": "botnetkiller"
        }
    ],
    "3815713": [
        {
            "dateadded": "2026-04-10 19:04:11 UTC",
            "url": "http://77.110.96.200/ghost.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:06:33 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815713/",
            "reporter": "botnetkiller"
        }
    ],
    "3815711": [
        {
            "dateadded": "2026-04-10 19:02:21 UTC",
            "url": "https://94.154.32.12/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:14:51 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815711/",
            "reporter": "anonymous"
        }
    ],
    "3815707": [
        {
            "dateadded": "2026-04-10 19:02:20 UTC",
            "url": "https://195.177.94.41/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 22:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815707/",
            "reporter": "anonymous"
        }
    ],
    "3815708": [
        {
            "dateadded": "2026-04-10 19:02:20 UTC",
            "url": "https://104.249.10.37/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 22:57:21 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815708/",
            "reporter": "anonymous"
        }
    ],
    "3815709": [
        {
            "dateadded": "2026-04-10 19:02:20 UTC",
            "url": "https://195.177.94.30/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:20:01 UTC",
            "threat": "malware_download",
            "tags": [
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815709/",
            "reporter": "anonymous"
        }
    ],
    "3815710": [
        {
            "dateadded": "2026-04-10 19:02:20 UTC",
            "url": "https://94.154.32.32/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 22:00:58 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815710/",
            "reporter": "anonymous"
        }
    ],
    "3815703": [
        {
            "dateadded": "2026-04-10 19:02:19 UTC",
            "url": "http://94.154.32.74:8040/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 22:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815703/",
            "reporter": "anonymous"
        }
    ],
    "3815704": [
        {
            "dateadded": "2026-04-10 19:02:19 UTC",
            "url": "https://94.154.32.12/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 22:00:31 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815704/",
            "reporter": "anonymous"
        }
    ],
    "3815705": [
        {
            "dateadded": "2026-04-10 19:02:19 UTC",
            "url": "https://94.154.32.29/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-13 10:23:04 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815705/",
            "reporter": "anonymous"
        }
    ],
    "3815706": [
        {
            "dateadded": "2026-04-10 19:02:19 UTC",
            "url": "https://195.177.94.30/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 22:12:42 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815706/",
            "reporter": "anonymous"
        }
    ],
    "3815701": [
        {
            "dateadded": "2026-04-10 19:02:18 UTC",
            "url": "http://94.154.32.74:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815701/",
            "reporter": "anonymous"
        }
    ],
    "3815702": [
        {
            "dateadded": "2026-04-10 19:02:18 UTC",
            "url": "https://195.177.94.74/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815702/",
            "reporter": "anonymous"
        }
    ],
    "3815697": [
        {
            "dateadded": "2026-04-10 19:02:14 UTC",
            "url": "https://195.177.94.41/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815697/",
            "reporter": "anonymous"
        }
    ],
    "3815698": [
        {
            "dateadded": "2026-04-10 19:02:14 UTC",
            "url": "https://104.249.10.37/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 21:54:39 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815698/",
            "reporter": "anonymous"
        }
    ],
    "3815699": [
        {
            "dateadded": "2026-04-10 19:02:14 UTC",
            "url": "https://195.177.94.74/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:20:25 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815699/",
            "reporter": "anonymous"
        }
    ],
    "3815700": [
        {
            "dateadded": "2026-04-10 19:02:14 UTC",
            "url": "http://94.154.32.80:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-13 10:39:54 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815700/",
            "reporter": "anonymous"
        }
    ],
    "3815696": [
        {
            "dateadded": "2026-04-10 19:02:13 UTC",
            "url": "https://94.154.32.32/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-10 23:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815696/",
            "reporter": "anonymous"
        }
    ],
    "3815694": [
        {
            "dateadded": "2026-04-10 19:02:12 UTC",
            "url": "https://94.154.32.29/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-13 11:18:16 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815694/",
            "reporter": "anonymous"
        }
    ],
    "3815695": [
        {
            "dateadded": "2026-04-10 19:02:12 UTC",
            "url": "http://94.154.32.80:8040/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-13 11:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815695/",
            "reporter": "anonymous"
        }
    ],
    "3815693": [
        {
            "dateadded": "2026-04-10 18:59:12 UTC",
            "url": "http://61.137.131.185:36372/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:23:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815693/",
            "reporter": "geenensp"
        }
    ],
    "3815692": [
        {
            "dateadded": "2026-04-10 18:59:11 UTC",
            "url": "http://81.230.148.181:40958/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:10:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815692/",
            "reporter": "geenensp"
        }
    ],
    "3815691": [
        {
            "dateadded": "2026-04-10 18:55:09 UTC",
            "url": "https://60moi.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815691/",
            "reporter": "anonymous"
        }
    ],
    "3815690": [
        {
            "dateadded": "2026-04-10 18:52:06 UTC",
            "url": "http://175.173.68.153:33929/i",
            "url_status": "offline",
            "last_online": "2026-04-16 18:30:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815690/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815689": [
        {
            "dateadded": "2026-04-10 18:50:13 UTC",
            "url": "https://asset5-track.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815689/",
            "reporter": "anonymous"
        }
    ],
    "3815688": [
        {
            "dateadded": "2026-04-10 18:48:08 UTC",
            "url": "http://110.37.120.17:47595/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 23:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815688/",
            "reporter": "geenensp"
        }
    ],
    "3815687": [
        {
            "dateadded": "2026-04-10 18:47:19 UTC",
            "url": "http://222.141.27.195:57775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 18:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815687/",
            "reporter": "geenensp"
        }
    ],
    "3815686": [
        {
            "dateadded": "2026-04-10 18:45:12 UTC",
            "url": "http://117.200.80.127:52757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 18:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815686/",
            "reporter": "geenensp"
        }
    ],
    "3815685": [
        {
            "dateadded": "2026-04-10 18:43:16 UTC",
            "url": "http://113.237.98.66:48539/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 19:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815685/",
            "reporter": "geenensp"
        }
    ],
    "3815684": [
        {
            "dateadded": "2026-04-10 18:43:10 UTC",
            "url": "https://solcoreal5.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815684/",
            "reporter": "anonymous"
        }
    ],
    "3815683": [
        {
            "dateadded": "2026-04-10 18:38:07 UTC",
            "url": "https://soundencode.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815683/",
            "reporter": "anonymous"
        }
    ],
    "3815682": [
        {
            "dateadded": "2026-04-10 18:37:10 UTC",
            "url": "http://115.48.160.182:53130/i",
            "url_status": "offline",
            "last_online": "2026-04-10 18:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815682/",
            "reporter": "geenensp"
        }
    ],
    "3815680": [
        {
            "dateadded": "2026-04-10 18:37:06 UTC",
            "url": "http://123.12.227.40:57085/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:29:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815680/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815681": [
        {
            "dateadded": "2026-04-10 18:37:06 UTC",
            "url": "http://115.48.12.65:55732/i",
            "url_status": "offline",
            "last_online": "2026-04-13 06:16:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815681/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815679": [
        {
            "dateadded": "2026-04-10 18:33:08 UTC",
            "url": "https://ubped.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815679/",
            "reporter": "anonymous"
        }
    ],
    "3815678": [
        {
            "dateadded": "2026-04-10 18:30:12 UTC",
            "url": "http://60.19.178.187:57547/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:03:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815678/",
            "reporter": "geenensp"
        }
    ],
    "3815677": [
        {
            "dateadded": "2026-04-10 18:27:09 UTC",
            "url": "https://meta-5udd.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815677/",
            "reporter": "anonymous"
        }
    ],
    "3815676": [
        {
            "dateadded": "2026-04-10 18:27:04 UTC",
            "url": "http://85.239.147.6/files/7742504508/3nUJ75T.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815676/",
            "reporter": "c2hunter"
        }
    ],
    "3815675": [
        {
            "dateadded": "2026-04-10 18:24:10 UTC",
            "url": "https://reef-drive.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815675/",
            "reporter": "anonymous"
        }
    ],
    "3815674": [
        {
            "dateadded": "2026-04-10 18:21:20 UTC",
            "url": "http://113.94.31.231:56330/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815674/",
            "reporter": "geenensp"
        }
    ],
    "3815673": [
        {
            "dateadded": "2026-04-10 18:20:12 UTC",
            "url": "https://ultra-gr4nit.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815673/",
            "reporter": "anonymous"
        }
    ],
    "3815672": [
        {
            "dateadded": "2026-04-10 18:20:07 UTC",
            "url": "http://62.60.226.159/clpr.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 17:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815672/",
            "reporter": "Bitsight"
        }
    ],
    "3815669": [
        {
            "dateadded": "2026-04-10 18:19:06 UTC",
            "url": "http://104.249.10.200/zpubeYnbswoZNHK172.bin",
            "url_status": "offline",
            "last_online": "2026-04-10 22:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815669/",
            "reporter": "anonymous"
        }
    ],
    "3815670": [
        {
            "dateadded": "2026-04-10 18:19:06 UTC",
            "url": "http://104.249.10.200/KxxysbztQp98.bin",
            "url_status": "offline",
            "last_online": "2026-04-10 23:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815670/",
            "reporter": "anonymous"
        }
    ],
    "3815671": [
        {
            "dateadded": "2026-04-10 18:19:06 UTC",
            "url": "http://104.249.10.200/uWSHeXISRSNrlvjgYdTuuuuAkQR204.bin",
            "url_status": "offline",
            "last_online": "2026-04-10 22:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815671/",
            "reporter": "anonymous"
        }
    ],
    "3815668": [
        {
            "dateadded": "2026-04-10 18:18:16 UTC",
            "url": "http://123.9.241.198:37586/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815668/",
            "reporter": "geenensp"
        }
    ],
    "3815667": [
        {
            "dateadded": "2026-04-10 18:18:06 UTC",
            "url": "http://104.249.10.200/hRRdnXoFrVemzG85.bin",
            "url_status": "offline",
            "last_online": "2026-04-10 22:04:18 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815667/",
            "reporter": "anonymous"
        }
    ],
    "3815666": [
        {
            "dateadded": "2026-04-10 18:15:27 UTC",
            "url": "http://119.166.231.98:41528/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815666/",
            "reporter": "geenensp"
        }
    ],
    "3815664": [
        {
            "dateadded": "2026-04-10 18:12:06 UTC",
            "url": "http://125.40.158.1:51186/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:47:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815664/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815665": [
        {
            "dateadded": "2026-04-10 18:12:06 UTC",
            "url": "http://123.12.227.40:57085/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815665/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815663": [
        {
            "dateadded": "2026-04-10 18:10:10 UTC",
            "url": "https://yssym17.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815663/",
            "reporter": "anonymous"
        }
    ],
    "3815662": [
        {
            "dateadded": "2026-04-10 18:07:07 UTC",
            "url": "http://42.235.49.65:54893/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:19:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815662/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815661": [
        {
            "dateadded": "2026-04-10 18:05:15 UTC",
            "url": "https://loosematrix.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 18:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815661/",
            "reporter": "anonymous"
        }
    ],
    "3815660": [
        {
            "dateadded": "2026-04-10 18:03:31 UTC",
            "url": "http://60.19.178.187:57547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815660/",
            "reporter": "geenensp"
        }
    ],
    "3815659": [
        {
            "dateadded": "2026-04-10 17:58:10 UTC",
            "url": "https://formatmeas.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815659/",
            "reporter": "anonymous"
        }
    ],
    "3815658": [
        {
            "dateadded": "2026-04-10 17:53:12 UTC",
            "url": "https://impo-casc.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815658/",
            "reporter": "anonymous"
        }
    ],
    "3815657": [
        {
            "dateadded": "2026-04-10 17:48:10 UTC",
            "url": "https://5csau02h.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815657/",
            "reporter": "anonymous"
        }
    ],
    "3815656": [
        {
            "dateadded": "2026-04-10 17:42:16 UTC",
            "url": "https://suyjbrc.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:42:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815656/",
            "reporter": "anonymous"
        }
    ],
    "3815655": [
        {
            "dateadded": "2026-04-10 17:42:07 UTC",
            "url": "http://125.45.66.210:49543/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:09:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815655/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815654": [
        {
            "dateadded": "2026-04-10 17:37:14 UTC",
            "url": "https://0hyb.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815654/",
            "reporter": "anonymous"
        }
    ],
    "3815653": [
        {
            "dateadded": "2026-04-10 17:37:12 UTC",
            "url": "http://175.149.87.163:46674/i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:36:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815653/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815652": [
        {
            "dateadded": "2026-04-10 17:31:09 UTC",
            "url": "https://b4rk-craft.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815652/",
            "reporter": "anonymous"
        }
    ],
    "3815651": [
        {
            "dateadded": "2026-04-10 17:25:20 UTC",
            "url": "https://passivedusk.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815651/",
            "reporter": "anonymous"
        }
    ],
    "3815650": [
        {
            "dateadded": "2026-04-10 17:24:19 UTC",
            "url": "http://222.127.226.53:49648/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815650/",
            "reporter": "geenensp"
        }
    ],
    "3815649": [
        {
            "dateadded": "2026-04-10 17:24:12 UTC",
            "url": "https://j84f4g0p.quantumharbinger.digital/?=check&&actmn=hLFCadDSZIRfXDrK",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815649/",
            "reporter": "anonymous"
        }
    ],
    "3815648": [
        {
            "dateadded": "2026-04-10 17:22:15 UTC",
            "url": "http://123.9.241.198:37586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:35:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815648/",
            "reporter": "geenensp"
        }
    ],
    "3815647": [
        {
            "dateadded": "2026-04-10 17:20:12 UTC",
            "url": "https://freightdynam.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815647/",
            "reporter": "anonymous"
        }
    ],
    "3815646": [
        {
            "dateadded": "2026-04-10 17:19:19 UTC",
            "url": "http://219.68.168.193:45872/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815646/",
            "reporter": "NDA0E"
        }
    ],
    "3815645": [
        {
            "dateadded": "2026-04-10 17:16:17 UTC",
            "url": "http://61.53.236.99:55276/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815645/",
            "reporter": "geenensp"
        }
    ],
    "3815644": [
        {
            "dateadded": "2026-04-10 17:14:14 UTC",
            "url": "https://clear-hinge.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815644/",
            "reporter": "anonymous"
        }
    ],
    "3815643": [
        {
            "dateadded": "2026-04-10 17:12:09 UTC",
            "url": "http://117.205.163.91:48234/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:50:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815643/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815642": [
        {
            "dateadded": "2026-04-10 17:08:18 UTC",
            "url": "https://sercrestos9.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 17:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815642/",
            "reporter": "anonymous"
        }
    ],
    "3815641": [
        {
            "dateadded": "2026-04-10 17:02:20 UTC",
            "url": "http://175.151.119.192:43772/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815641/",
            "reporter": "geenensp"
        }
    ],
    "3815640": [
        {
            "dateadded": "2026-04-10 16:57:06 UTC",
            "url": "http://125.45.66.210:49543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 09:59:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815640/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815639": [
        {
            "dateadded": "2026-04-10 16:49:24 UTC",
            "url": "http://61.53.236.99:55276/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815639/",
            "reporter": "geenensp"
        }
    ],
    "3815638": [
        {
            "dateadded": "2026-04-10 16:40:17 UTC",
            "url": "https://hyper-5i1ver.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815638/",
            "reporter": "anonymous"
        }
    ],
    "3815637": [
        {
            "dateadded": "2026-04-10 16:34:25 UTC",
            "url": "http://175.151.119.192:43772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:54:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815637/",
            "reporter": "geenensp"
        }
    ],
    "3815636": [
        {
            "dateadded": "2026-04-10 16:34:07 UTC",
            "url": "https://primpartn.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815636/",
            "reporter": "anonymous"
        }
    ],
    "3815635": [
        {
            "dateadded": "2026-04-10 16:28:20 UTC",
            "url": "https://lab3l-node.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:28:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815635/",
            "reporter": "anonymous"
        }
    ],
    "3815634": [
        {
            "dateadded": "2026-04-10 16:23:14 UTC",
            "url": "https://rh0zttub.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815634/",
            "reporter": "anonymous"
        }
    ],
    "3815633": [
        {
            "dateadded": "2026-04-10 16:17:17 UTC",
            "url": "https://serven0ix.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815633/",
            "reporter": "anonymous"
        }
    ],
    "3815632": [
        {
            "dateadded": "2026-04-10 16:12:20 UTC",
            "url": "https://importsnow.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:12:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815632/",
            "reporter": "anonymous"
        }
    ],
    "3815631": [
        {
            "dateadded": "2026-04-10 16:06:26 UTC",
            "url": "http://94.156.166.84:59922/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815631/",
            "reporter": "geenensp"
        }
    ],
    "3815630": [
        {
            "dateadded": "2026-04-10 16:06:12 UTC",
            "url": "https://zenvaleex.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:06:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815630/",
            "reporter": "anonymous"
        }
    ],
    "3815629": [
        {
            "dateadded": "2026-04-10 16:00:19 UTC",
            "url": "https://updv1.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 16:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815629/",
            "reporter": "anonymous"
        }
    ],
    "3815628": [
        {
            "dateadded": "2026-04-10 15:57:18 UTC",
            "url": "https://851xsk.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815628/",
            "reporter": "anonymous"
        }
    ],
    "3815627": [
        {
            "dateadded": "2026-04-10 15:52:18 UTC",
            "url": "http://125.40.27.52:34429/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815627/",
            "reporter": "geenensp"
        }
    ],
    "3815626": [
        {
            "dateadded": "2026-04-10 15:50:20 UTC",
            "url": "http://125.41.228.26:43318/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815626/",
            "reporter": "geenensp"
        }
    ],
    "3815624": [
        {
            "dateadded": "2026-04-10 15:47:07 UTC",
            "url": "http://119.114.12.58:35723/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:13:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815624/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815625": [
        {
            "dateadded": "2026-04-10 15:47:07 UTC",
            "url": "https://ligfleet.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815625/",
            "reporter": "anonymous"
        }
    ],
    "3815623": [
        {
            "dateadded": "2026-04-10 15:44:07 UTC",
            "url": "https://valley-con.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815623/",
            "reporter": "anonymous"
        }
    ],
    "3815622": [
        {
            "dateadded": "2026-04-10 15:40:15 UTC",
            "url": "https://fleestrict.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815622/",
            "reporter": "anonymous"
        }
    ],
    "3815621": [
        {
            "dateadded": "2026-04-10 15:39:15 UTC",
            "url": "http://176.65.139.105/rebirth.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:55 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-105",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815621/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815620": [
        {
            "dateadded": "2026-04-10 15:38:12 UTC",
            "url": "http://176.65.139.105/rebirth.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-105",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815620/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815616": [
        {
            "dateadded": "2026-04-10 15:38:09 UTC",
            "url": "http://176.65.139.105/rebirth.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-105",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815616/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815617": [
        {
            "dateadded": "2026-04-10 15:38:09 UTC",
            "url": "http://176.65.139.105/rebirth.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-105",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815617/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815618": [
        {
            "dateadded": "2026-04-10 15:38:09 UTC",
            "url": "http://176.65.139.105/rebirth.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-105",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815618/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815619": [
        {
            "dateadded": "2026-04-10 15:38:09 UTC",
            "url": "http://176.65.139.105/rebirth.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-105",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815619/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815615": [
        {
            "dateadded": "2026-04-10 15:37:06 UTC",
            "url": "http://222.142.254.166:56230/i",
            "url_status": "offline",
            "last_online": "2026-04-10 21:56:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815615/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815614": [
        {
            "dateadded": "2026-04-10 15:35:11 UTC",
            "url": "http://61.53.126.185:58896/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:52:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815614/",
            "reporter": "geenensp"
        }
    ],
    "3815611": [
        {
            "dateadded": "2026-04-10 15:31:10 UTC",
            "url": "http://125.43.230.72:51959/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815611/",
            "reporter": "geenensp"
        }
    ],
    "3815612": [
        {
            "dateadded": "2026-04-10 15:31:10 UTC",
            "url": "http://119.164.29.156:58869/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815612/",
            "reporter": "geenensp"
        }
    ],
    "3815613": [
        {
            "dateadded": "2026-04-10 15:31:10 UTC",
            "url": "http://125.40.27.52:34429/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815613/",
            "reporter": "geenensp"
        }
    ],
    "3815610": [
        {
            "dateadded": "2026-04-10 15:30:21 UTC",
            "url": "http://125.43.230.72:51959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815610/",
            "reporter": "geenensp"
        }
    ],
    "3815609": [
        {
            "dateadded": "2026-04-10 15:30:07 UTC",
            "url": "https://vi5u4l-branch.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:30:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815609/",
            "reporter": "anonymous"
        }
    ],
    "3815608": [
        {
            "dateadded": "2026-04-10 15:24:21 UTC",
            "url": "http://125.43.252.161:55541/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815608/",
            "reporter": "geenensp"
        }
    ],
    "3815607": [
        {
            "dateadded": "2026-04-10 15:24:20 UTC",
            "url": "http://61.53.126.185:58896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815607/",
            "reporter": "geenensp"
        }
    ],
    "3815606": [
        {
            "dateadded": "2026-04-10 15:24:10 UTC",
            "url": "https://dynvenor.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815606/",
            "reporter": "anonymous"
        }
    ],
    "3815605": [
        {
            "dateadded": "2026-04-10 15:19:09 UTC",
            "url": "https://porter.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815605/",
            "reporter": "anonymous"
        }
    ],
    "3815604": [
        {
            "dateadded": "2026-04-10 15:17:14 UTC",
            "url": "http://42.177.23.145:48269/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815604/",
            "reporter": "geenensp"
        }
    ],
    "3815603": [
        {
            "dateadded": "2026-04-10 15:17:07 UTC",
            "url": "http://222.142.254.166:56230/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:26:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815603/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815602": [
        {
            "dateadded": "2026-04-10 15:14:17 UTC",
            "url": "http://222.138.104.65:54173/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815602/",
            "reporter": "geenensp"
        }
    ],
    "3815601": [
        {
            "dateadded": "2026-04-10 15:13:10 UTC",
            "url": "https://iktol.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815601/",
            "reporter": "anonymous"
        }
    ],
    "3815600": [
        {
            "dateadded": "2026-04-10 15:08:08 UTC",
            "url": "https://hsp96wn.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815600/",
            "reporter": "anonymous"
        }
    ],
    "3815599": [
        {
            "dateadded": "2026-04-10 15:05:21 UTC",
            "url": "http://119.164.29.156:58869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815599/",
            "reporter": "geenensp"
        }
    ],
    "3815598": [
        {
            "dateadded": "2026-04-10 15:02:13 UTC",
            "url": "https://decodebran.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 15:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815598/",
            "reporter": "anonymous"
        }
    ],
    "3815597": [
        {
            "dateadded": "2026-04-10 14:59:15 UTC",
            "url": "http://42.85.103.29:58979/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:49:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815597/",
            "reporter": "geenensp"
        }
    ],
    "3815596": [
        {
            "dateadded": "2026-04-10 14:56:10 UTC",
            "url": "https://289rabl.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815596/",
            "reporter": "anonymous"
        }
    ],
    "3815595": [
        {
            "dateadded": "2026-04-10 14:52:14 UTC",
            "url": "https://p4rtn0-forge.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815595/",
            "reporter": "anonymous"
        }
    ],
    "3815594": [
        {
            "dateadded": "2026-04-10 14:51:16 UTC",
            "url": "http://42.177.23.145:48269/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:06:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815594/",
            "reporter": "geenensp"
        }
    ],
    "3815593": [
        {
            "dateadded": "2026-04-10 14:50:06 UTC",
            "url": "http://85.239.147.6/files/7640890992/DHiKU6L.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815593/",
            "reporter": "c2hunter"
        }
    ],
    "3815592": [
        {
            "dateadded": "2026-04-10 14:46:15 UTC",
            "url": "https://composerefine.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815592/",
            "reporter": "anonymous"
        }
    ],
    "3815590": [
        {
            "dateadded": "2026-04-10 14:41:18 UTC",
            "url": "http://42.233.166.218:53675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:26:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815590/",
            "reporter": "geenensp"
        }
    ],
    "3815591": [
        {
            "dateadded": "2026-04-10 14:41:18 UTC",
            "url": "http://175.150.7.48:36353/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:03:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815591/",
            "reporter": "geenensp"
        }
    ],
    "3815589": [
        {
            "dateadded": "2026-04-10 14:40:17 UTC",
            "url": "http://222.138.104.65:54173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815589/",
            "reporter": "geenensp"
        }
    ],
    "3815588": [
        {
            "dateadded": "2026-04-10 14:40:15 UTC",
            "url": "https://metri-oak.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815588/",
            "reporter": "anonymous"
        }
    ],
    "3815587": [
        {
            "dateadded": "2026-04-10 14:34:07 UTC",
            "url": "https://d1sc4-wave.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815587/",
            "reporter": "anonymous"
        }
    ],
    "3815586": [
        {
            "dateadded": "2026-04-10 14:30:14 UTC",
            "url": "https://st4bi-spool.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815586/",
            "reporter": "anonymous"
        }
    ],
    "3815585": [
        {
            "dateadded": "2026-04-10 14:27:17 UTC",
            "url": "http://42.85.103.29:58979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 22:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815585/",
            "reporter": "geenensp"
        }
    ],
    "3815584": [
        {
            "dateadded": "2026-04-10 14:27:16 UTC",
            "url": "http://182.127.178.183:47003/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815584/",
            "reporter": "geenensp"
        }
    ],
    "3815583": [
        {
            "dateadded": "2026-04-10 14:27:12 UTC",
            "url": "https://lumvalea.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815583/",
            "reporter": "anonymous"
        }
    ],
    "3815582": [
        {
            "dateadded": "2026-04-10 14:27:07 UTC",
            "url": "http://115.48.128.202:42634/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815582/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815581": [
        {
            "dateadded": "2026-04-10 14:18:10 UTC",
            "url": "https://equity-colum.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815581/",
            "reporter": "anonymous"
        }
    ],
    "3815580": [
        {
            "dateadded": "2026-04-10 14:13:07 UTC",
            "url": "https://ngwq.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815580/",
            "reporter": "anonymous"
        }
    ],
    "3815579": [
        {
            "dateadded": "2026-04-10 14:05:16 UTC",
            "url": "https://ultglyp.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 14:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815579/",
            "reporter": "anonymous"
        }
    ],
    "3815578": [
        {
            "dateadded": "2026-04-10 14:05:07 UTC",
            "url": "http://85.239.147.6/files/1401316133/joG1SDT.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815578/",
            "reporter": "Bitsight"
        }
    ],
    "3815577": [
        {
            "dateadded": "2026-04-10 14:03:10 UTC",
            "url": "http://61.52.156.2:52946/i",
            "url_status": "offline",
            "last_online": "2026-04-10 14:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815577/",
            "reporter": "geenensp"
        }
    ],
    "3815576": [
        {
            "dateadded": "2026-04-10 14:00:20 UTC",
            "url": "http://182.127.178.183:47003/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815576/",
            "reporter": "geenensp"
        }
    ],
    "3815575": [
        {
            "dateadded": "2026-04-10 13:58:12 UTC",
            "url": "https://geysermars.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815575/",
            "reporter": "anonymous"
        }
    ],
    "3815574": [
        {
            "dateadded": "2026-04-10 13:57:06 UTC",
            "url": "http://42.231.79.44:50610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 13:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815574/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815573": [
        {
            "dateadded": "2026-04-10 13:53:15 UTC",
            "url": "https://norforge2ar.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:53:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815573/",
            "reporter": "anonymous"
        }
    ],
    "3815572": [
        {
            "dateadded": "2026-04-10 13:47:12 UTC",
            "url": "https://80ycuu.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815572/",
            "reporter": "anonymous"
        }
    ],
    "3815571": [
        {
            "dateadded": "2026-04-10 13:42:06 UTC",
            "url": "https://q6ivtu.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:42:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815571/",
            "reporter": "anonymous"
        }
    ],
    "3815570": [
        {
            "dateadded": "2026-04-10 13:38:19 UTC",
            "url": "http://123.129.134.11:41117/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:17:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815570/",
            "reporter": "geenensp"
        }
    ],
    "3815569": [
        {
            "dateadded": "2026-04-10 13:36:13 UTC",
            "url": "https://velvale7on.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815569/",
            "reporter": "anonymous"
        }
    ],
    "3815568": [
        {
            "dateadded": "2026-04-10 13:35:08 UTC",
            "url": "http://62.60.226.159/kk.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 17:00:28 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "dropped-by-amadey",
                "RedLineStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815568/",
            "reporter": "Bitsight"
        }
    ],
    "3815567": [
        {
            "dateadded": "2026-04-10 13:32:07 UTC",
            "url": "http://113.94.31.231:56330/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815567/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815566": [
        {
            "dateadded": "2026-04-10 13:31:12 UTC",
            "url": "https://tradesyn.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815566/",
            "reporter": "anonymous"
        }
    ],
    "3815565": [
        {
            "dateadded": "2026-04-10 13:24:18 UTC",
            "url": "http://39.74.98.237:51262/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815565/",
            "reporter": "geenensp"
        }
    ],
    "3815564": [
        {
            "dateadded": "2026-04-10 13:24:12 UTC",
            "url": "https://neuralvau.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815564/",
            "reporter": "anonymous"
        }
    ],
    "3815563": [
        {
            "dateadded": "2026-04-10 13:20:06 UTC",
            "url": "https://4zure-hold.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:20:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815563/",
            "reporter": "anonymous"
        }
    ],
    "3815562": [
        {
            "dateadded": "2026-04-10 13:18:14 UTC",
            "url": "http://77.236.74.65:58704/i",
            "url_status": "offline",
            "last_online": "2026-04-13 11:08:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815562/",
            "reporter": "geenensp"
        }
    ],
    "3815561": [
        {
            "dateadded": "2026-04-10 13:17:07 UTC",
            "url": "http://42.231.228.171:58708/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:18:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815561/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815560": [
        {
            "dateadded": "2026-04-10 13:14:06 UTC",
            "url": "https://v31vet0-sheet.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:14:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815560/",
            "reporter": "anonymous"
        }
    ],
    "3815559": [
        {
            "dateadded": "2026-04-10 13:09:14 UTC",
            "url": "http://42.229.168.199:45770/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 13:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815559/",
            "reporter": "geenensp"
        }
    ],
    "3815558": [
        {
            "dateadded": "2026-04-10 13:08:16 UTC",
            "url": "http://123.129.134.11:41117/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:22:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815558/",
            "reporter": "geenensp"
        }
    ],
    "3815557": [
        {
            "dateadded": "2026-04-10 13:08:09 UTC",
            "url": "https://lum-tidear.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815557/",
            "reporter": "anonymous"
        }
    ],
    "3815556": [
        {
            "dateadded": "2026-04-10 13:02:10 UTC",
            "url": "https://trans-vocal.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 13:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815556/",
            "reporter": "anonymous"
        }
    ],
    "3815555": [
        {
            "dateadded": "2026-04-10 12:56:09 UTC",
            "url": "https://xpprcq.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815555/",
            "reporter": "anonymous"
        }
    ],
    "3815554": [
        {
            "dateadded": "2026-04-10 12:51:11 UTC",
            "url": "https://xgi87u.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815554/",
            "reporter": "anonymous"
        }
    ],
    "3815553": [
        {
            "dateadded": "2026-04-10 12:49:19 UTC",
            "url": "http://77.236.74.65:58704/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:49:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815553/",
            "reporter": "geenensp"
        }
    ],
    "3815552": [
        {
            "dateadded": "2026-04-10 12:46:15 UTC",
            "url": "https://equitytorre.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815552/",
            "reporter": "anonymous"
        }
    ],
    "3815551": [
        {
            "dateadded": "2026-04-10 12:40:11 UTC",
            "url": "https://slatedraft.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815551/",
            "reporter": "anonymous"
        }
    ],
    "3815550": [
        {
            "dateadded": "2026-04-10 12:35:08 UTC",
            "url": "https://dyncresten9.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815550/",
            "reporter": "anonymous"
        }
    ],
    "3815549": [
        {
            "dateadded": "2026-04-10 12:28:07 UTC",
            "url": "https://sub-ch3c.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815549/",
            "reporter": "anonymous"
        }
    ],
    "3815548": [
        {
            "dateadded": "2026-04-10 12:25:12 UTC",
            "url": "http://39.74.98.237:51262/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815548/",
            "reporter": "geenensp"
        }
    ],
    "3815547": [
        {
            "dateadded": "2026-04-10 12:24:15 UTC",
            "url": "https://arkfluxal.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815547/",
            "reporter": "anonymous"
        }
    ],
    "3815546": [
        {
            "dateadded": "2026-04-10 12:19:18 UTC",
            "url": "http://105.186.165.4:38905/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:15:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815546/",
            "reporter": "geenensp"
        }
    ],
    "3815545": [
        {
            "dateadded": "2026-04-10 12:17:08 UTC",
            "url": "https://vaultwagon.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815545/",
            "reporter": "anonymous"
        }
    ],
    "3815544": [
        {
            "dateadded": "2026-04-10 12:14:13 UTC",
            "url": "https://trai0-plate.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815544/",
            "reporter": "anonymous"
        }
    ],
    "3815543": [
        {
            "dateadded": "2026-04-10 12:09:17 UTC",
            "url": "http://125.43.32.252:60171/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815543/",
            "reporter": "geenensp"
        }
    ],
    "3815542": [
        {
            "dateadded": "2026-04-10 12:08:09 UTC",
            "url": "https://videovit.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815542/",
            "reporter": "anonymous"
        }
    ],
    "3815541": [
        {
            "dateadded": "2026-04-10 12:03:14 UTC",
            "url": "https://7mic.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 12:03:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815541/",
            "reporter": "anonymous"
        }
    ],
    "3815540": [
        {
            "dateadded": "2026-04-10 11:59:17 UTC",
            "url": "http://105.186.165.4:38905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:42:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815540/",
            "reporter": "geenensp"
        }
    ],
    "3815539": [
        {
            "dateadded": "2026-04-10 11:57:09 UTC",
            "url": "https://xmkzarzz.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815539/",
            "reporter": "anonymous"
        }
    ],
    "3815538": [
        {
            "dateadded": "2026-04-10 11:57:07 UTC",
            "url": "http://61.52.174.69:47311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 06:51:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815538/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815529": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-15 17:11:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815529/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815530": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-15 16:53:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815530/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815531": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-15 18:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815531/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815532": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-15 16:45:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815532/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815533": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-15 19:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815533/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815534": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-15 16:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815534/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815535": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-15 17:31:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815535/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815536": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-15 17:10:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815536/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815537": [
        {
            "dateadded": "2026-04-10 11:51:18 UTC",
            "url": "http://85.11.167.129/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-15 17:53:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815537/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815528": [
        {
            "dateadded": "2026-04-10 11:51:09 UTC",
            "url": "https://jxoov.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815528/",
            "reporter": "anonymous"
        }
    ],
    "3815526": [
        {
            "dateadded": "2026-04-10 11:46:20 UTC",
            "url": "http://27.207.206.160:43384/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815526/",
            "reporter": "geenensp"
        }
    ],
    "3815527": [
        {
            "dateadded": "2026-04-10 11:46:20 UTC",
            "url": "http://125.43.32.252:60171/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:49:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815527/",
            "reporter": "geenensp"
        }
    ],
    "3815525": [
        {
            "dateadded": "2026-04-10 11:46:14 UTC",
            "url": "https://wtnbx.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815525/",
            "reporter": "anonymous"
        }
    ],
    "3815524": [
        {
            "dateadded": "2026-04-10 11:39:18 UTC",
            "url": "http://123.10.224.243:33035/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815524/",
            "reporter": "geenensp"
        }
    ],
    "3815523": [
        {
            "dateadded": "2026-04-10 11:39:12 UTC",
            "url": "https://cleanbind.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815523/",
            "reporter": "anonymous"
        }
    ],
    "3815522": [
        {
            "dateadded": "2026-04-10 11:34:13 UTC",
            "url": "https://geo-hyp3r.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815522/",
            "reporter": "anonymous"
        }
    ],
    "3815521": [
        {
            "dateadded": "2026-04-10 11:28:08 UTC",
            "url": "https://869n.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815521/",
            "reporter": "anonymous"
        }
    ],
    "3815520": [
        {
            "dateadded": "2026-04-10 11:23:19 UTC",
            "url": "https://talvenos2.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815520/",
            "reporter": "anonymous"
        }
    ],
    "3815519": [
        {
            "dateadded": "2026-04-10 11:18:09 UTC",
            "url": "https://celllaunch.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815519/",
            "reporter": "anonymous"
        }
    ],
    "3815518": [
        {
            "dateadded": "2026-04-10 11:16:21 UTC",
            "url": "http://123.10.224.243:33035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815518/",
            "reporter": "geenensp"
        }
    ],
    "3815517": [
        {
            "dateadded": "2026-04-10 11:15:07 UTC",
            "url": "http://85.239.147.6/files/376289280/zZdnqAK.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815517/",
            "reporter": "Bitsight"
        }
    ],
    "3815516": [
        {
            "dateadded": "2026-04-10 11:13:12 UTC",
            "url": "http://111.88.7.48:34063/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815516/",
            "reporter": "geenensp"
        }
    ],
    "3815515": [
        {
            "dateadded": "2026-04-10 11:11:11 UTC",
            "url": "https://0izjx27i.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815515/",
            "reporter": "anonymous"
        }
    ],
    "3815514": [
        {
            "dateadded": "2026-04-10 11:07:13 UTC",
            "url": "https://daevia.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815514/",
            "reporter": "anonymous"
        }
    ],
    "3815513": [
        {
            "dateadded": "2026-04-10 11:01:15 UTC",
            "url": "https://01bdp.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 11:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815513/",
            "reporter": "anonymous"
        }
    ],
    "3815512": [
        {
            "dateadded": "2026-04-10 10:55:15 UTC",
            "url": "https://neo-3xpo.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815512/",
            "reporter": "anonymous"
        }
    ],
    "3815511": [
        {
            "dateadded": "2026-04-10 10:51:07 UTC",
            "url": "https://sync6-signal.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815511/",
            "reporter": "anonymous"
        }
    ],
    "3815510": [
        {
            "dateadded": "2026-04-10 10:49:18 UTC",
            "url": "http://111.88.7.48:34063/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815510/",
            "reporter": "geenensp"
        }
    ],
    "3815509": [
        {
            "dateadded": "2026-04-10 10:45:15 UTC",
            "url": "https://alignsort.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815509/",
            "reporter": "anonymous"
        }
    ],
    "3815508": [
        {
            "dateadded": "2026-04-10 10:41:14 UTC",
            "url": "http://176.65.139.25/bins/jew.arm6",
            "url_status": "offline",
            "last_online": "2026-04-25 05:17:41 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815508/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815499": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.arm",
            "url_status": "offline",
            "last_online": "2026-04-25 06:25:34 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815499/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815500": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.arm5",
            "url_status": "offline",
            "last_online": "2026-04-25 07:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815500/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815501": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.sh4",
            "url_status": "offline",
            "last_online": "2026-04-25 04:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815501/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815502": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 05:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815502/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815503": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.spc",
            "url_status": "offline",
            "last_online": "2026-04-12 11:43:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815503/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815504": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 05:48:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815504/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815505": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 06:23:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815505/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815506": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 05:17:42 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815506/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815507": [
        {
            "dateadded": "2026-04-10 10:40:13 UTC",
            "url": "http://176.65.139.25/bins/jew.mips",
            "url_status": "offline",
            "last_online": "2026-04-25 05:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-25",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815507/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815498": [
        {
            "dateadded": "2026-04-10 10:39:14 UTC",
            "url": "https://guardfierce.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815498/",
            "reporter": "anonymous"
        }
    ],
    "3815497": [
        {
            "dateadded": "2026-04-10 10:37:07 UTC",
            "url": "http://61.52.174.69:47311/i",
            "url_status": "offline",
            "last_online": "2026-04-11 06:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815497/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815496": [
        {
            "dateadded": "2026-04-10 10:34:12 UTC",
            "url": "https://autu-grid.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815496/",
            "reporter": "anonymous"
        }
    ],
    "3815495": [
        {
            "dateadded": "2026-04-10 10:33:15 UTC",
            "url": "http://182.113.6.161:59854/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815495/",
            "reporter": "geenensp"
        }
    ],
    "3815494": [
        {
            "dateadded": "2026-04-10 10:27:10 UTC",
            "url": "https://mark-roo.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815494/",
            "reporter": "anonymous"
        }
    ],
    "3815493": [
        {
            "dateadded": "2026-04-10 10:22:17 UTC",
            "url": "https://sudden-lab.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815493/",
            "reporter": "anonymous"
        }
    ],
    "3815492": [
        {
            "dateadded": "2026-04-10 10:22:06 UTC",
            "url": "http://81.215.173.87:54797/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:19:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815492/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815491": [
        {
            "dateadded": "2026-04-10 10:17:06 UTC",
            "url": "http://81.215.173.87:54797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:04:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815491/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815490": [
        {
            "dateadded": "2026-04-10 10:16:19 UTC",
            "url": "https://ouya691.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815490/",
            "reporter": "anonymous"
        }
    ],
    "3815489": [
        {
            "dateadded": "2026-04-10 09:42:19 UTC",
            "url": "http://122.151.156.198:57421/i",
            "url_status": "offline",
            "last_online": "2026-04-11 06:49:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815489/",
            "reporter": "geenensp"
        }
    ],
    "3815488": [
        {
            "dateadded": "2026-04-10 09:35:08 UTC",
            "url": "https://qy55tnaq.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815488/",
            "reporter": "anonymous"
        }
    ],
    "3815487": [
        {
            "dateadded": "2026-04-10 09:29:14 UTC",
            "url": "https://nordraa8.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815487/",
            "reporter": "anonymous"
        }
    ],
    "3815486": [
        {
            "dateadded": "2026-04-10 09:27:07 UTC",
            "url": "http://182.116.75.76:47445/i",
            "url_status": "offline",
            "last_online": "2026-04-10 09:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815486/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815485": [
        {
            "dateadded": "2026-04-10 09:24:11 UTC",
            "url": "https://pbpx.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815485/",
            "reporter": "anonymous"
        }
    ],
    "3815484": [
        {
            "dateadded": "2026-04-10 09:22:08 UTC",
            "url": "http://182.119.218.118:35172/i",
            "url_status": "offline",
            "last_online": "2026-04-10 21:57:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815484/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815483": [
        {
            "dateadded": "2026-04-10 09:18:10 UTC",
            "url": "https://dense3-trail.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815483/",
            "reporter": "anonymous"
        }
    ],
    "3815482": [
        {
            "dateadded": "2026-04-10 09:15:11 UTC",
            "url": "http://122.151.156.198:57421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 06:44:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815482/",
            "reporter": "geenensp"
        }
    ],
    "3815481": [
        {
            "dateadded": "2026-04-10 09:13:15 UTC",
            "url": "https://scenevivid.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815481/",
            "reporter": "anonymous"
        }
    ],
    "3815480": [
        {
            "dateadded": "2026-04-10 09:10:14 UTC",
            "url": "http://27.215.126.166:53120/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:50:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815480/",
            "reporter": "geenensp"
        }
    ],
    "3815479": [
        {
            "dateadded": "2026-04-10 09:07:18 UTC",
            "url": "http://123.11.241.15:36989/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815479/",
            "reporter": "geenensp"
        }
    ],
    "3815478": [
        {
            "dateadded": "2026-04-10 09:06:07 UTC",
            "url": "https://rapivelv.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815478/",
            "reporter": "anonymous"
        }
    ],
    "3815477": [
        {
            "dateadded": "2026-04-10 09:01:14 UTC",
            "url": "https://jv0nel9.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 09:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815477/",
            "reporter": "anonymous"
        }
    ],
    "3815476": [
        {
            "dateadded": "2026-04-10 08:56:10 UTC",
            "url": "https://meadow-bro.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815476/",
            "reporter": "anonymous"
        }
    ],
    "3815475": [
        {
            "dateadded": "2026-04-10 08:50:07 UTC",
            "url": "https://rhexjd.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:50:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815475/",
            "reporter": "anonymous"
        }
    ],
    "3815474": [
        {
            "dateadded": "2026-04-10 08:45:13 UTC",
            "url": "https://gr1m2-vault.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815474/",
            "reporter": "anonymous"
        }
    ],
    "3815473": [
        {
            "dateadded": "2026-04-10 08:44:19 UTC",
            "url": "http://123.11.241.15:36989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:43:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815473/",
            "reporter": "geenensp"
        }
    ],
    "3815472": [
        {
            "dateadded": "2026-04-10 08:42:21 UTC",
            "url": "http://121.231.183.50:42511/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815472/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815471": [
        {
            "dateadded": "2026-04-10 08:39:15 UTC",
            "url": "https://extendplain.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815471/",
            "reporter": "anonymous"
        }
    ],
    "3815470": [
        {
            "dateadded": "2026-04-10 08:35:13 UTC",
            "url": "http://115.56.67.4:44451/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815470/",
            "reporter": "geenensp"
        }
    ],
    "3815469": [
        {
            "dateadded": "2026-04-10 08:34:11 UTC",
            "url": "https://expor-sor.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815469/",
            "reporter": "anonymous"
        }
    ],
    "3815468": [
        {
            "dateadded": "2026-04-10 08:30:19 UTC",
            "url": "http://115.52.30.27:49989/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:20:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815468/",
            "reporter": "geenensp"
        }
    ],
    "3815467": [
        {
            "dateadded": "2026-04-10 08:27:09 UTC",
            "url": "https://factoryserver.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815467/",
            "reporter": "anonymous"
        }
    ],
    "3815466": [
        {
            "dateadded": "2026-04-10 08:22:06 UTC",
            "url": "http://115.63.187.43:41421/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:03:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815466/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815465": [
        {
            "dateadded": "2026-04-10 08:21:07 UTC",
            "url": "https://sparkecho.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815465/",
            "reporter": "anonymous"
        }
    ],
    "3815464": [
        {
            "dateadded": "2026-04-10 08:18:18 UTC",
            "url": "http://42.234.136.170:43884/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:45:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815464/",
            "reporter": "geenensp"
        }
    ],
    "3815463": [
        {
            "dateadded": "2026-04-10 08:17:14 UTC",
            "url": "https://alt-so11d.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815463/",
            "reporter": "anonymous"
        }
    ],
    "3815462": [
        {
            "dateadded": "2026-04-10 08:11:08 UTC",
            "url": "https://fressolar.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815462/",
            "reporter": "anonymous"
        }
    ],
    "3815461": [
        {
            "dateadded": "2026-04-10 08:06:07 UTC",
            "url": "https://campaigndecode.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815461/",
            "reporter": "anonymous"
        }
    ],
    "3815460": [
        {
            "dateadded": "2026-04-10 08:04:10 UTC",
            "url": "http://125.42.116.76:50468/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:17:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815460/",
            "reporter": "geenensp"
        }
    ],
    "3815459": [
        {
            "dateadded": "2026-04-10 08:03:17 UTC",
            "url": "http://115.56.67.4:44451/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:10:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815459/",
            "reporter": "geenensp"
        }
    ],
    "3815458": [
        {
            "dateadded": "2026-04-10 08:00:10 UTC",
            "url": "https://vorvale7um.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 08:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815458/",
            "reporter": "anonymous"
        }
    ],
    "3815457": [
        {
            "dateadded": "2026-04-10 07:57:07 UTC",
            "url": "http://115.63.187.43:41421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815457/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815455": [
        {
            "dateadded": "2026-04-10 07:54:17 UTC",
            "url": "http://110.37.107.203:44292/i",
            "url_status": "offline",
            "last_online": "2026-04-10 15:55:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815455/",
            "reporter": "geenensp"
        }
    ],
    "3815456": [
        {
            "dateadded": "2026-04-10 07:54:17 UTC",
            "url": "http://110.37.53.25:54436/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815456/",
            "reporter": "geenensp"
        }
    ],
    "3815454": [
        {
            "dateadded": "2026-04-10 07:54:13 UTC",
            "url": "https://hubsyntax.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815454/",
            "reporter": "anonymous"
        }
    ],
    "3815453": [
        {
            "dateadded": "2026-04-10 07:51:18 UTC",
            "url": "http://42.234.136.170:43884/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:46:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815453/",
            "reporter": "geenensp"
        }
    ],
    "3815452": [
        {
            "dateadded": "2026-04-10 07:48:07 UTC",
            "url": "https://msez.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815452/",
            "reporter": "anonymous"
        }
    ],
    "3815451": [
        {
            "dateadded": "2026-04-10 07:45:20 UTC",
            "url": "http://115.52.30.27:49989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:56:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815451/",
            "reporter": "geenensp"
        }
    ],
    "3815450": [
        {
            "dateadded": "2026-04-10 07:42:07 UTC",
            "url": "https://mixech.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815450/",
            "reporter": "anonymous"
        }
    ],
    "3815449": [
        {
            "dateadded": "2026-04-10 07:41:14 UTC",
            "url": "http://179.43.182.70/6nyoswt3ky",
            "url_status": "offline",
            "last_online": "2026-04-16 11:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "64-bit",
                "elf",
                "x86-64"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815449/",
            "reporter": "geenensp"
        }
    ],
    "3815448": [
        {
            "dateadded": "2026-04-10 07:39:09 UTC",
            "url": "https://dzgcdhze.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815448/",
            "reporter": "anonymous"
        }
    ],
    "3815447": [
        {
            "dateadded": "2026-04-10 07:36:27 UTC",
            "url": "http://112.113.247.136:40649/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 17:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815447/",
            "reporter": "geenensp"
        }
    ],
    "3815446": [
        {
            "dateadded": "2026-04-10 07:36:07 UTC",
            "url": "https://falc0n0-phase.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815446/",
            "reporter": "anonymous"
        }
    ],
    "3815444": [
        {
            "dateadded": "2026-04-10 07:32:06 UTC",
            "url": "http://221.1.109.243:49253/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:58:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815444/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815445": [
        {
            "dateadded": "2026-04-10 07:32:06 UTC",
            "url": "http://221.1.109.243:49253/i",
            "url_status": "offline",
            "last_online": "2026-04-14 20:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815445/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815443": [
        {
            "dateadded": "2026-04-10 07:26:19 UTC",
            "url": "http://36.89.252.178:52003/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:05:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815443/",
            "reporter": "geenensp"
        }
    ],
    "3815442": [
        {
            "dateadded": "2026-04-10 07:26:18 UTC",
            "url": "http://110.37.107.203:44292/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815442/",
            "reporter": "geenensp"
        }
    ],
    "3815441": [
        {
            "dateadded": "2026-04-10 07:25:08 UTC",
            "url": "https://securesocket.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815441/",
            "reporter": "anonymous"
        }
    ],
    "3815440": [
        {
            "dateadded": "2026-04-10 07:22:06 UTC",
            "url": "http://115.49.203.28:38061/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:07:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815440/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815439": [
        {
            "dateadded": "2026-04-10 07:20:22 UTC",
            "url": "http://150.255.251.198:55895/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:40:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815439/",
            "reporter": "geenensp"
        }
    ],
    "3815438": [
        {
            "dateadded": "2026-04-10 07:20:16 UTC",
            "url": "https://p4cket-stack.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815438/",
            "reporter": "anonymous"
        }
    ],
    "3815437": [
        {
            "dateadded": "2026-04-10 07:19:20 UTC",
            "url": "http://123.14.218.190:49735/i",
            "url_status": "offline",
            "last_online": "2026-04-10 07:19:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815437/",
            "reporter": "geenensp"
        }
    ],
    "3815436": [
        {
            "dateadded": "2026-04-10 07:15:11 UTC",
            "url": "https://lunopen.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815436/",
            "reporter": "anonymous"
        }
    ],
    "3815435": [
        {
            "dateadded": "2026-04-10 07:10:13 UTC",
            "url": "https://velcoreal.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815435/",
            "reporter": "anonymous"
        }
    ],
    "3815434": [
        {
            "dateadded": "2026-04-10 07:05:09 UTC",
            "url": "http://113.230.28.252:33856/i",
            "url_status": "offline",
            "last_online": "2026-04-20 11:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815434/",
            "reporter": "geenensp"
        }
    ],
    "3815433": [
        {
            "dateadded": "2026-04-10 07:03:12 UTC",
            "url": "https://sdkpasture.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 07:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815433/",
            "reporter": "anonymous"
        }
    ],
    "3815432": [
        {
            "dateadded": "2026-04-10 07:03:08 UTC",
            "url": "http://219.155.192.169:46787/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815432/",
            "reporter": "geenensp"
        }
    ],
    "3815431": [
        {
            "dateadded": "2026-04-10 06:59:07 UTC",
            "url": "https://lichensparrow.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815431/",
            "reporter": "anonymous"
        }
    ],
    "3815430": [
        {
            "dateadded": "2026-04-10 06:54:20 UTC",
            "url": "http://154.242.0.41:41347/i",
            "url_status": "offline",
            "last_online": "2026-04-10 06:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815430/",
            "reporter": "geenensp"
        }
    ],
    "3815429": [
        {
            "dateadded": "2026-04-10 06:52:09 UTC",
            "url": "https://sgqh.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815429/",
            "reporter": "anonymous"
        }
    ],
    "3815428": [
        {
            "dateadded": "2026-04-10 06:47:08 UTC",
            "url": "https://root-gate.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815428/",
            "reporter": "anonymous"
        }
    ],
    "3815427": [
        {
            "dateadded": "2026-04-10 06:47:07 UTC",
            "url": "http://222.140.230.50:60113/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:58:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815427/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815426": [
        {
            "dateadded": "2026-04-10 06:46:13 UTC",
            "url": "http://211.158.212.205:54405/i",
            "url_status": "offline",
            "last_online": "2026-04-16 16:35:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815426/",
            "reporter": "geenensp"
        }
    ],
    "3815425": [
        {
            "dateadded": "2026-04-10 06:45:19 UTC",
            "url": "http://182.116.39.179:52857/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815425/",
            "reporter": "geenensp"
        }
    ],
    "3815424": [
        {
            "dateadded": "2026-04-10 06:44:17 UTC",
            "url": "http://113.230.28.252:33856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 17:56:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815424/",
            "reporter": "geenensp"
        }
    ],
    "3815423": [
        {
            "dateadded": "2026-04-10 06:41:11 UTC",
            "url": "https://sky-hub.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815423/",
            "reporter": "anonymous"
        }
    ],
    "3815422": [
        {
            "dateadded": "2026-04-10 06:37:09 UTC",
            "url": "http://121.226.225.157:58901/i",
            "url_status": "offline",
            "last_online": "2026-04-10 15:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815422/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815421": [
        {
            "dateadded": "2026-04-10 06:36:07 UTC",
            "url": "https://star-svc.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815421/",
            "reporter": "anonymous"
        }
    ],
    "3815420": [
        {
            "dateadded": "2026-04-10 06:30:24 UTC",
            "url": "http://112.248.160.182:44053/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:56:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815420/",
            "reporter": "geenensp"
        }
    ],
    "3815419": [
        {
            "dateadded": "2026-04-10 06:30:14 UTC",
            "url": "https://light-vault.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815419/",
            "reporter": "anonymous"
        }
    ],
    "3815418": [
        {
            "dateadded": "2026-04-10 06:29:08 UTC",
            "url": "http://154.242.0.41:41347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 06:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815418/",
            "reporter": "geenensp"
        }
    ],
    "3815417": [
        {
            "dateadded": "2026-04-10 06:27:19 UTC",
            "url": "http://182.116.39.179:52857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815417/",
            "reporter": "geenensp"
        }
    ],
    "3815416": [
        {
            "dateadded": "2026-04-10 06:27:11 UTC",
            "url": "https://sam-node.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815416/",
            "reporter": "anonymous"
        }
    ],
    "3815415": [
        {
            "dateadded": "2026-04-10 06:27:07 UTC",
            "url": "http://222.140.230.50:60113/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:46:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815415/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815414": [
        {
            "dateadded": "2026-04-10 06:24:14 UTC",
            "url": "http://124.66.32.186:51237/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815414/",
            "reporter": "geenensp"
        }
    ],
    "3815413": [
        {
            "dateadded": "2026-04-10 06:23:11 UTC",
            "url": "https://aura-api.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 22:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815413/",
            "reporter": "anonymous"
        }
    ],
    "3815412": [
        {
            "dateadded": "2026-04-10 06:22:08 UTC",
            "url": "http://42.224.118.112:49622/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815412/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815411": [
        {
            "dateadded": "2026-04-10 06:22:07 UTC",
            "url": "http://39.65.244.250:52606/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:38:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815411/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815410": [
        {
            "dateadded": "2026-04-10 06:19:18 UTC",
            "url": "http://105.186.248.140:38035/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:05:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815410/",
            "reporter": "geenensp"
        }
    ],
    "3815409": [
        {
            "dateadded": "2026-04-10 06:14:16 UTC",
            "url": "https://gate-check.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815409/",
            "reporter": "anonymous"
        }
    ],
    "3815408": [
        {
            "dateadded": "2026-04-10 06:08:12 UTC",
            "url": "https://hub-relay.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815408/",
            "reporter": "anonymous"
        }
    ],
    "3815407": [
        {
            "dateadded": "2026-04-10 06:02:09 UTC",
            "url": "https://hone-svc.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 06:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815407/",
            "reporter": "anonymous"
        }
    ],
    "3815406": [
        {
            "dateadded": "2026-04-10 05:59:18 UTC",
            "url": "http://122.191.182.209:57195/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815406/",
            "reporter": "geenensp"
        }
    ],
    "3815405": [
        {
            "dateadded": "2026-04-10 05:56:09 UTC",
            "url": "https://up-vault.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815405/",
            "reporter": "anonymous"
        }
    ],
    "3815404": [
        {
            "dateadded": "2026-04-10 05:51:09 UTC",
            "url": "https://war-node.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815404/",
            "reporter": "anonymous"
        }
    ],
    "3815403": [
        {
            "dateadded": "2026-04-10 05:48:15 UTC",
            "url": "http://112.255.209.142:43329/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:02:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815403/",
            "reporter": "geenensp"
        }
    ],
    "3815402": [
        {
            "dateadded": "2026-04-10 05:45:13 UTC",
            "url": "https://set-api.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815402/",
            "reporter": "anonymous"
        }
    ],
    "3815401": [
        {
            "dateadded": "2026-04-10 05:41:19 UTC",
            "url": "http://27.215.179.0:55199/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:29:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815401/",
            "reporter": "geenensp"
        }
    ],
    "3815400": [
        {
            "dateadded": "2026-04-10 05:39:12 UTC",
            "url": "https://gate-node.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815400/",
            "reporter": "anonymous"
        }
    ],
    "3815399": [
        {
            "dateadded": "2026-04-10 05:36:12 UTC",
            "url": "https://menu-hub.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815399/",
            "reporter": "anonymous"
        }
    ],
    "3815398": [
        {
            "dateadded": "2026-04-10 05:32:20 UTC",
            "url": "https://pamp-svc.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815398/",
            "reporter": "anonymous"
        }
    ],
    "3815397": [
        {
            "dateadded": "2026-04-10 05:32:08 UTC",
            "url": "http://182.119.229.66:49082/i",
            "url_status": "offline",
            "last_online": "2026-04-10 09:57:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815397/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815396": [
        {
            "dateadded": "2026-04-10 05:30:24 UTC",
            "url": "http://122.191.182.209:57195/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:28:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815396/",
            "reporter": "geenensp"
        }
    ],
    "3815395": [
        {
            "dateadded": "2026-04-10 05:26:23 UTC",
            "url": "http://42.229.221.54:40260/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815395/",
            "reporter": "geenensp"
        }
    ],
    "3815394": [
        {
            "dateadded": "2026-04-10 05:23:09 UTC",
            "url": "https://timp-vault.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 10:29:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815394/",
            "reporter": "anonymous"
        }
    ],
    "3815393": [
        {
            "dateadded": "2026-04-10 05:17:14 UTC",
            "url": "https://cook-node.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815393/",
            "reporter": "anonymous"
        }
    ],
    "3815392": [
        {
            "dateadded": "2026-04-10 05:16:24 UTC",
            "url": "http://27.215.179.0:55199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:42:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815392/",
            "reporter": "geenensp"
        }
    ],
    "3815391": [
        {
            "dateadded": "2026-04-10 05:12:13 UTC",
            "url": "https://food-api.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815391/",
            "reporter": "anonymous"
        }
    ],
    "3815390": [
        {
            "dateadded": "2026-04-10 05:05:32 UTC",
            "url": "http://112.248.160.182:44053/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815390/",
            "reporter": "geenensp"
        }
    ],
    "3815389": [
        {
            "dateadded": "2026-04-10 05:05:15 UTC",
            "url": "https://gate-api.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815389/",
            "reporter": "anonymous"
        }
    ],
    "3815388": [
        {
            "dateadded": "2026-04-10 05:03:38 UTC",
            "url": "http://112.255.209.142:43329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:13:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815388/",
            "reporter": "geenensp"
        }
    ],
    "3815387": [
        {
            "dateadded": "2026-04-10 05:00:15 UTC",
            "url": "https://host-hub.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 05:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815387/",
            "reporter": "anonymous"
        }
    ],
    "3815386": [
        {
            "dateadded": "2026-04-10 04:58:19 UTC",
            "url": "http://123.53.111.132:46052/i",
            "url_status": "offline",
            "last_online": "2026-04-16 04:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815386/",
            "reporter": "geenensp"
        }
    ],
    "3815385": [
        {
            "dateadded": "2026-04-10 04:57:08 UTC",
            "url": "http://119.189.213.101:51421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815385/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815384": [
        {
            "dateadded": "2026-04-10 04:56:12 UTC",
            "url": "https://safe-svc.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815384/",
            "reporter": "anonymous"
        }
    ],
    "3815383": [
        {
            "dateadded": "2026-04-10 04:53:13 UTC",
            "url": "https://visit-vault.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815383/",
            "reporter": "anonymous"
        }
    ],
    "3815382": [
        {
            "dateadded": "2026-04-10 04:44:13 UTC",
            "url": "https://guest-node.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815382/",
            "reporter": "anonymous"
        }
    ],
    "3815381": [
        {
            "dateadded": "2026-04-10 04:41:18 UTC",
            "url": "http://42.233.166.218:53675/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:58:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815381/",
            "reporter": "geenensp"
        }
    ],
    "3815380": [
        {
            "dateadded": "2026-04-10 04:37:12 UTC",
            "url": "https://stay-api.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815380/",
            "reporter": "anonymous"
        }
    ],
    "3815379": [
        {
            "dateadded": "2026-04-10 04:37:07 UTC",
            "url": "http://39.90.151.154:45258/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815379/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815378": [
        {
            "dateadded": "2026-04-10 04:36:19 UTC",
            "url": "http://220.202.91.133:50681/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:16:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815378/",
            "reporter": "geenensp"
        }
    ],
    "3815377": [
        {
            "dateadded": "2026-04-10 04:36:18 UTC",
            "url": "http://110.36.89.2:46272/i",
            "url_status": "offline",
            "last_online": "2026-04-13 00:55:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815377/",
            "reporter": "geenensp"
        }
    ],
    "3815376": [
        {
            "dateadded": "2026-04-10 04:33:11 UTC",
            "url": "https://root-gate.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815376/",
            "reporter": "anonymous"
        }
    ],
    "3815375": [
        {
            "dateadded": "2026-04-10 04:32:21 UTC",
            "url": "http://115.56.170.143:33252/i",
            "url_status": "offline",
            "last_online": "2026-04-10 15:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815375/",
            "reporter": "geenensp"
        }
    ],
    "3815374": [
        {
            "dateadded": "2026-04-10 04:29:20 UTC",
            "url": "http://123.53.111.132:46052/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 06:15:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815374/",
            "reporter": "geenensp"
        }
    ],
    "3815373": [
        {
            "dateadded": "2026-04-10 04:28:15 UTC",
            "url": "https://site-hub.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815373/",
            "reporter": "anonymous"
        }
    ],
    "3815372": [
        {
            "dateadded": "2026-04-10 04:22:22 UTC",
            "url": "http://42.229.221.54:40260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815372/",
            "reporter": "geenensp"
        }
    ],
    "3815371": [
        {
            "dateadded": "2026-04-10 04:21:13 UTC",
            "url": "https://task-svc.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815371/",
            "reporter": "anonymous"
        }
    ],
    "3815370": [
        {
            "dateadded": "2026-04-10 04:17:30 UTC",
            "url": "http://125.43.2.167:43556/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815370/",
            "reporter": "geenensp"
        }
    ],
    "3815369": [
        {
            "dateadded": "2026-04-10 04:16:20 UTC",
            "url": "http://125.41.3.240:45000/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815369/",
            "reporter": "geenensp"
        }
    ],
    "3815368": [
        {
            "dateadded": "2026-04-10 04:16:09 UTC",
            "url": "https://scum-vault.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815368/",
            "reporter": "anonymous"
        }
    ],
    "3815367": [
        {
            "dateadded": "2026-04-10 04:11:24 UTC",
            "url": "http://222.137.145.88:40963/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815367/",
            "reporter": "geenensp"
        }
    ],
    "3815366": [
        {
            "dateadded": "2026-04-10 04:09:13 UTC",
            "url": "https://focus-node.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815366/",
            "reporter": "anonymous"
        }
    ],
    "3815365": [
        {
            "dateadded": "2026-04-10 04:08:17 UTC",
            "url": "http://110.36.89.2:46272/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 23:39:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815365/",
            "reporter": "geenensp"
        }
    ],
    "3815364": [
        {
            "dateadded": "2026-04-10 04:08:16 UTC",
            "url": "http://115.56.170.143:33252/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:11:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815364/",
            "reporter": "geenensp"
        }
    ],
    "3815363": [
        {
            "dateadded": "2026-04-10 04:04:07 UTC",
            "url": "https://mind-api.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 04:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815363/",
            "reporter": "anonymous"
        }
    ],
    "3815362": [
        {
            "dateadded": "2026-04-10 04:01:26 UTC",
            "url": "http://27.37.115.234:52061/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815362/",
            "reporter": "geenensp"
        }
    ],
    "3815361": [
        {
            "dateadded": "2026-04-10 03:58:23 UTC",
            "url": "http://182.127.179.138:57330/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:01:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815361/",
            "reporter": "geenensp"
        }
    ],
    "3815360": [
        {
            "dateadded": "2026-04-10 03:58:13 UTC",
            "url": "https://gate-svc.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815360/",
            "reporter": "anonymous"
        }
    ],
    "3815359": [
        {
            "dateadded": "2026-04-10 03:54:14 UTC",
            "url": "https://unit-hub.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815359/",
            "reporter": "anonymous"
        }
    ],
    "3815358": [
        {
            "dateadded": "2026-04-10 03:48:10 UTC",
            "url": "https://shrew-svc.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815358/",
            "reporter": "anonymous"
        }
    ],
    "3815357": [
        {
            "dateadded": "2026-04-10 03:47:08 UTC",
            "url": "http://39.90.151.154:45258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 11:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815357/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815356": [
        {
            "dateadded": "2026-04-10 03:43:09 UTC",
            "url": "https://dance-vault.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815356/",
            "reporter": "anonymous"
        }
    ],
    "3815355": [
        {
            "dateadded": "2026-04-10 03:41:25 UTC",
            "url": "http://125.47.57.222:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815355/",
            "reporter": "geenensp"
        }
    ],
    "3815354": [
        {
            "dateadded": "2026-04-10 03:41:08 UTC",
            "url": "https://step-node.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815354/",
            "reporter": "anonymous"
        }
    ],
    "3815353": [
        {
            "dateadded": "2026-04-10 03:40:16 UTC",
            "url": "http://176.65.139.25/bins/jew.x86",
            "url_status": "offline",
            "last_online": "2026-04-25 06:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mirai",
                "x86-32"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815353/",
            "reporter": "geenensp"
        }
    ],
    "3815352": [
        {
            "dateadded": "2026-04-10 03:35:18 UTC",
            "url": "http://115.202.183.48:43250/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 15:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815352/",
            "reporter": "geenensp"
        }
    ],
    "3815351": [
        {
            "dateadded": "2026-04-10 03:35:15 UTC",
            "url": "http://115.59.234.253:39317/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:51:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815351/",
            "reporter": "geenensp"
        }
    ],
    "3815350": [
        {
            "dateadded": "2026-04-10 03:31:07 UTC",
            "url": "https://art-api.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815350/",
            "reporter": "anonymous"
        }
    ],
    "3815349": [
        {
            "dateadded": "2026-04-10 03:30:13 UTC",
            "url": "http://38.156.90.30:45109/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815349/",
            "reporter": "geenensp"
        }
    ],
    "3815348": [
        {
            "dateadded": "2026-04-10 03:26:08 UTC",
            "url": "https://link-gate.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815348/",
            "reporter": "anonymous"
        }
    ],
    "3815347": [
        {
            "dateadded": "2026-04-10 03:24:12 UTC",
            "url": "http://125.47.222.153:35159/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:04:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815347/",
            "reporter": "geenensp"
        }
    ],
    "3815346": [
        {
            "dateadded": "2026-04-10 03:20:12 UTC",
            "url": "https://site-hub.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815346/",
            "reporter": "anonymous"
        }
    ],
    "3815345": [
        {
            "dateadded": "2026-04-10 03:13:07 UTC",
            "url": "https://clean-svc.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815345/",
            "reporter": "anonymous"
        }
    ],
    "3815344": [
        {
            "dateadded": "2026-04-10 03:12:19 UTC",
            "url": "http://83.209.254.248:45662/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815344/",
            "reporter": "geenensp"
        }
    ],
    "3815343": [
        {
            "dateadded": "2026-04-10 03:08:09 UTC",
            "url": "https://wash-vault.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815343/",
            "reporter": "anonymous"
        }
    ],
    "3815342": [
        {
            "dateadded": "2026-04-10 03:07:21 UTC",
            "url": "http://120.28.114.23:44897/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 04:06:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815342/",
            "reporter": "geenensp"
        }
    ],
    "3815341": [
        {
            "dateadded": "2026-04-10 03:04:21 UTC",
            "url": "http://61.176.68.96:39370/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815341/",
            "reporter": "geenensp"
        }
    ],
    "3815340": [
        {
            "dateadded": "2026-04-10 03:04:06 UTC",
            "url": "http://115.49.5.94:46851/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815340/",
            "reporter": "geenensp"
        }
    ],
    "3815339": [
        {
            "dateadded": "2026-04-10 03:03:07 UTC",
            "url": "https://event-node.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 03:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815339/",
            "reporter": "anonymous"
        }
    ],
    "3815337": [
        {
            "dateadded": "2026-04-10 03:00:20 UTC",
            "url": "http://176.65.139.67/powerpc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815337/",
            "reporter": "botnetkiller"
        }
    ],
    "3815338": [
        {
            "dateadded": "2026-04-10 03:00:20 UTC",
            "url": "http://176.65.139.67/sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815338/",
            "reporter": "botnetkiller"
        }
    ],
    "3815336": [
        {
            "dateadded": "2026-04-10 02:59:17 UTC",
            "url": "http://62.164.130.55/Clipz.arm5",
            "url_status": "offline",
            "last_online": "2026-04-10 04:25:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815336/",
            "reporter": "botnetkiller"
        }
    ],
    "3815321": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.spc",
            "url_status": "offline",
            "last_online": "2026-04-10 04:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815321/",
            "reporter": "botnetkiller"
        }
    ],
    "3815322": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-10 04:08:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815322/",
            "reporter": "botnetkiller"
        }
    ],
    "3815323": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.arc",
            "url_status": "offline",
            "last_online": "2026-04-10 04:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815323/",
            "reporter": "botnetkiller"
        }
    ],
    "3815324": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.arm7",
            "url_status": "offline",
            "last_online": "2026-04-10 04:40:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815324/",
            "reporter": "botnetkiller"
        }
    ],
    "3815325": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.x86",
            "url_status": "offline",
            "last_online": "2026-04-10 04:13:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815325/",
            "reporter": "botnetkiller"
        }
    ],
    "3815326": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.ppc-440fp",
            "url_status": "offline",
            "last_online": "2026-04-10 04:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815326/",
            "reporter": "botnetkiller"
        }
    ],
    "3815327": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.m68k",
            "url_status": "offline",
            "last_online": "2026-04-10 04:41:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815327/",
            "reporter": "botnetkiller"
        }
    ],
    "3815328": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.arm6",
            "url_status": "offline",
            "last_online": "2026-04-10 05:05:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815328/",
            "reporter": "botnetkiller"
        }
    ],
    "3815329": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.ppc",
            "url_status": "offline",
            "last_online": "2026-04-10 04:48:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815329/",
            "reporter": "botnetkiller"
        }
    ],
    "3815330": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.arm4",
            "url_status": "offline",
            "last_online": "2026-04-10 03:57:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815330/",
            "reporter": "botnetkiller"
        }
    ],
    "3815331": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.mips",
            "url_status": "offline",
            "last_online": "2026-04-10 04:29:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815331/",
            "reporter": "botnetkiller"
        }
    ],
    "3815332": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.i486",
            "url_status": "offline",
            "last_online": "2026-04-10 05:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815332/",
            "reporter": "botnetkiller"
        }
    ],
    "3815333": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.i686",
            "url_status": "offline",
            "last_online": "2026-04-10 05:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815333/",
            "reporter": "botnetkiller"
        }
    ],
    "3815334": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.i586",
            "url_status": "offline",
            "last_online": "2026-04-10 04:49:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815334/",
            "reporter": "botnetkiller"
        }
    ],
    "3815335": [
        {
            "dateadded": "2026-04-10 02:58:13 UTC",
            "url": "http://62.164.130.55/Clipz.sh4",
            "url_status": "offline",
            "last_online": "2026-04-10 04:29:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815335/",
            "reporter": "botnetkiller"
        }
    ],
    "3815320": [
        {
            "dateadded": "2026-04-10 02:57:08 UTC",
            "url": "https://talk-api.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815320/",
            "reporter": "anonymous"
        }
    ],
    "3815319": [
        {
            "dateadded": "2026-04-10 02:52:12 UTC",
            "url": "https://main-gate.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815319/",
            "reporter": "anonymous"
        }
    ],
    "3815318": [
        {
            "dateadded": "2026-04-10 02:48:15 UTC",
            "url": "http://160.30.142.2:38824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:23:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815318/",
            "reporter": "geenensp"
        }
    ],
    "3815317": [
        {
            "dateadded": "2026-04-10 02:47:07 UTC",
            "url": "http://175.175.107.58:44279/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:33:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815317/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815316": [
        {
            "dateadded": "2026-04-10 02:46:12 UTC",
            "url": "https://club-hub.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815316/",
            "reporter": "anonymous"
        }
    ],
    "3815315": [
        {
            "dateadded": "2026-04-10 02:44:20 UTC",
            "url": "http://115.49.127.44:40062/i",
            "url_status": "offline",
            "last_online": "2026-04-18 22:29:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815315/",
            "reporter": "geenensp"
        }
    ],
    "3815314": [
        {
            "dateadded": "2026-04-10 02:42:15 UTC",
            "url": "http://83.209.254.248:45662/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:44:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815314/",
            "reporter": "geenensp"
        }
    ],
    "3815313": [
        {
            "dateadded": "2026-04-10 02:40:10 UTC",
            "url": "https://run-svc.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815313/",
            "reporter": "anonymous"
        }
    ],
    "3815312": [
        {
            "dateadded": "2026-04-10 02:37:31 UTC",
            "url": "http://27.215.48.204:52051/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:51:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815312/",
            "reporter": "geenensp"
        }
    ],
    "3815311": [
        {
            "dateadded": "2026-04-10 02:35:20 UTC",
            "url": "http://115.49.5.94:46851/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:06:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815311/",
            "reporter": "geenensp"
        }
    ],
    "3815310": [
        {
            "dateadded": "2026-04-10 02:34:07 UTC",
            "url": "https://sport-vault.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815310/",
            "reporter": "anonymous"
        }
    ],
    "3815309": [
        {
            "dateadded": "2026-04-10 02:32:07 UTC",
            "url": "http://175.175.107.58:44279/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:54:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815309/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815308": [
        {
            "dateadded": "2026-04-10 02:29:09 UTC",
            "url": "https://crew-node.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815308/",
            "reporter": "anonymous"
        }
    ],
    "3815307": [
        {
            "dateadded": "2026-04-10 02:26:19 UTC",
            "url": "http://115.55.54.216:60744/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 06:57:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815307/",
            "reporter": "geenensp"
        }
    ],
    "3815306": [
        {
            "dateadded": "2026-04-10 02:23:09 UTC",
            "url": "https://team-api.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815306/",
            "reporter": "anonymous"
        }
    ],
    "3815305": [
        {
            "dateadded": "2026-04-10 02:18:07 UTC",
            "url": "https://read-gate.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815305/",
            "reporter": "anonymous"
        }
    ],
    "3815304": [
        {
            "dateadded": "2026-04-10 02:16:18 UTC",
            "url": "http://115.49.127.44:40062/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 00:01:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815304/",
            "reporter": "geenensp"
        }
    ],
    "3815303": [
        {
            "dateadded": "2026-04-10 02:12:07 UTC",
            "url": "https://book-hub.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815303/",
            "reporter": "anonymous"
        }
    ],
    "3815302": [
        {
            "dateadded": "2026-04-10 02:07:17 UTC",
            "url": "http://62.164.130.55/O.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:47:51 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815302/",
            "reporter": "botnetkiller"
        }
    ],
    "3815301": [
        {
            "dateadded": "2026-04-10 02:06:11 UTC",
            "url": "https://text-svc.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815301/",
            "reporter": "anonymous"
        }
    ],
    "3815300": [
        {
            "dateadded": "2026-04-10 02:06:09 UTC",
            "url": "http://178.16.54.109/gold.exe",
            "url_status": "offline",
            "last_online": "2026-04-18 11:22:24 UTC",
            "threat": "malware_download",
            "tags": [
                "DeepLoad",
                "dropped-by-Phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815300/",
            "reporter": "Bitsight"
        }
    ],
    "3815299": [
        {
            "dateadded": "2026-04-10 02:01:07 UTC",
            "url": "https://page-vault.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 02:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815299/",
            "reporter": "anonymous"
        }
    ],
    "3815298": [
        {
            "dateadded": "2026-04-10 01:58:17 UTC",
            "url": "http://90.251.127.200:49949/i",
            "url_status": "offline",
            "last_online": "2026-04-10 05:06:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815298/",
            "reporter": "geenensp"
        }
    ],
    "3815297": [
        {
            "dateadded": "2026-04-10 01:55:12 UTC",
            "url": "https://tale-node.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815297/",
            "reporter": "anonymous"
        }
    ],
    "3815296": [
        {
            "dateadded": "2026-04-10 01:49:08 UTC",
            "url": "https://story-api.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815296/",
            "reporter": "anonymous"
        }
    ],
    "3815295": [
        {
            "dateadded": "2026-04-10 01:46:10 UTC",
            "url": "http://182.121.191.143:42362/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:20:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815295/",
            "reporter": "geenensp"
        }
    ],
    "3815294": [
        {
            "dateadded": "2026-04-10 01:44:09 UTC",
            "url": "https://gate-node.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815294/",
            "reporter": "anonymous"
        }
    ],
    "3815293": [
        {
            "dateadded": "2026-04-10 01:39:12 UTC",
            "url": "https://pack-hub.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815293/",
            "reporter": "anonymous"
        }
    ],
    "3815292": [
        {
            "dateadded": "2026-04-10 01:36:17 UTC",
            "url": "http://90.251.127.200:49949/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 03:54:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815292/",
            "reporter": "geenensp"
        }
    ],
    "3815291": [
        {
            "dateadded": "2026-04-10 01:32:09 UTC",
            "url": "https://alpha-svc.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815291/",
            "reporter": "anonymous"
        }
    ],
    "3815290": [
        {
            "dateadded": "2026-04-10 01:27:07 UTC",
            "url": "https://beast-vault.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815290/",
            "reporter": "anonymous"
        }
    ],
    "3815289": [
        {
            "dateadded": "2026-04-10 01:21:08 UTC",
            "url": "https://track-node.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815289/",
            "reporter": "anonymous"
        }
    ],
    "3815288": [
        {
            "dateadded": "2026-04-10 01:18:10 UTC",
            "url": "https://wild-api.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815288/",
            "reporter": "anonymous"
        }
    ],
    "3815287": [
        {
            "dateadded": "2026-04-10 01:08:24 UTC",
            "url": "http://182.121.191.143:42362/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:01:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815287/",
            "reporter": "geenensp"
        }
    ],
    "3815286": [
        {
            "dateadded": "2026-04-10 01:06:09 UTC",
            "url": "https://tencreek.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815286/",
            "reporter": "anonymous"
        }
    ],
    "3815285": [
        {
            "dateadded": "2026-04-10 01:01:07 UTC",
            "url": "https://ancientpipeline.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 01:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815285/",
            "reporter": "anonymous"
        }
    ],
    "3815284": [
        {
            "dateadded": "2026-04-10 00:54:08 UTC",
            "url": "https://trispire1ar.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815284/",
            "reporter": "anonymous"
        }
    ],
    "3815283": [
        {
            "dateadded": "2026-04-10 00:52:21 UTC",
            "url": "http://85.11.167.101/Makefile",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815283/",
            "reporter": "botnetkiller"
        }
    ],
    "3815282": [
        {
            "dateadded": "2026-04-10 00:50:20 UTC",
            "url": "http://182.183.165.146:41705/i",
            "url_status": "offline",
            "last_online": "2026-04-10 00:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815282/",
            "reporter": "geenensp"
        }
    ],
    "3815281": [
        {
            "dateadded": "2026-04-10 00:50:08 UTC",
            "url": "https://sol-lithum.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815281/",
            "reporter": "anonymous"
        }
    ],
    "3815280": [
        {
            "dateadded": "2026-04-10 00:47:07 UTC",
            "url": "http://110.37.15.58:48671/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:18:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815280/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815279": [
        {
            "dateadded": "2026-04-10 00:44:10 UTC",
            "url": "https://kb0xbi23.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815279/",
            "reporter": "anonymous"
        }
    ],
    "3815278": [
        {
            "dateadded": "2026-04-10 00:39:07 UTC",
            "url": "https://ambe8-trace.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815278/",
            "reporter": "anonymous"
        }
    ],
    "3815277": [
        {
            "dateadded": "2026-04-10 00:34:18 UTC",
            "url": "http://27.211.8.28:51097/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815277/",
            "reporter": "geenensp"
        }
    ],
    "3815276": [
        {
            "dateadded": "2026-04-10 00:32:11 UTC",
            "url": "https://inkcoo.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815276/",
            "reporter": "anonymous"
        }
    ],
    "3815275": [
        {
            "dateadded": "2026-04-10 00:28:08 UTC",
            "url": "https://genomedeco.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815275/",
            "reporter": "anonymous"
        }
    ],
    "3815274": [
        {
            "dateadded": "2026-04-10 00:24:21 UTC",
            "url": "http://182.183.165.146:41705/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 00:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815274/",
            "reporter": "geenensp"
        }
    ],
    "3815273": [
        {
            "dateadded": "2026-04-10 00:22:15 UTC",
            "url": "http://182.121.253.4:54201/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:19:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815273/",
            "reporter": "geenensp"
        }
    ],
    "3815272": [
        {
            "dateadded": "2026-04-10 00:22:12 UTC",
            "url": "https://price-basic.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815272/",
            "reporter": "anonymous"
        }
    ],
    "3815271": [
        {
            "dateadded": "2026-04-10 00:17:16 UTC",
            "url": "http://182.121.253.4:54201/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:06:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815271/",
            "reporter": "geenensp"
        }
    ],
    "3815270": [
        {
            "dateadded": "2026-04-10 00:16:10 UTC",
            "url": "https://ew59tugm.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815270/",
            "reporter": "anonymous"
        }
    ],
    "3815269": [
        {
            "dateadded": "2026-04-10 00:13:13 UTC",
            "url": "http://115.54.135.147:57431/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:36:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815269/",
            "reporter": "geenensp"
        }
    ],
    "3815268": [
        {
            "dateadded": "2026-04-10 00:10:13 UTC",
            "url": "https://serforgea.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815268/",
            "reporter": "anonymous"
        }
    ],
    "3815267": [
        {
            "dateadded": "2026-04-10 00:07:07 UTC",
            "url": "http://219.156.124.121:55488/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815267/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815266": [
        {
            "dateadded": "2026-04-10 00:05:10 UTC",
            "url": "https://pqxyg.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-10 00:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815266/",
            "reporter": "anonymous"
        }
    ],
    "3815265": [
        {
            "dateadded": "2026-04-10 00:04:18 UTC",
            "url": "http://27.211.8.28:51097/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815265/",
            "reporter": "geenensp"
        }
    ],
    "3815264": [
        {
            "dateadded": "2026-04-10 00:00:39 UTC",
            "url": "http://115.54.135.147:57431/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:21:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815264/",
            "reporter": "geenensp"
        }
    ],
    "3815263": [
        {
            "dateadded": "2026-04-09 23:59:11 UTC",
            "url": "https://zigstdj.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815263/",
            "reporter": "anonymous"
        }
    ],
    "3815262": [
        {
            "dateadded": "2026-04-09 23:53:12 UTC",
            "url": "https://patternreed.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815262/",
            "reporter": "anonymous"
        }
    ],
    "3815261": [
        {
            "dateadded": "2026-04-09 23:50:17 UTC",
            "url": "http://42.87.138.126:34258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:36:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815261/",
            "reporter": "geenensp"
        }
    ],
    "3815260": [
        {
            "dateadded": "2026-04-09 23:48:11 UTC",
            "url": "https://m4r5-scope.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815260/",
            "reporter": "anonymous"
        }
    ],
    "3815259": [
        {
            "dateadded": "2026-04-09 23:47:17 UTC",
            "url": "http://123.132.186.172:49888/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 22:55:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815259/",
            "reporter": "geenensp"
        }
    ],
    "3815258": [
        {
            "dateadded": "2026-04-09 23:44:18 UTC",
            "url": "http://117.193.111.194:54440/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815258/",
            "reporter": "geenensp"
        }
    ],
    "3815257": [
        {
            "dateadded": "2026-04-09 23:44:14 UTC",
            "url": "http://27.215.48.189:51357/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:09:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815257/",
            "reporter": "geenensp"
        }
    ],
    "3815256": [
        {
            "dateadded": "2026-04-09 23:42:11 UTC",
            "url": "https://freshclinic.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815256/",
            "reporter": "anonymous"
        }
    ],
    "3815255": [
        {
            "dateadded": "2026-04-09 23:40:13 UTC",
            "url": "http://145.223.68.170/bins/sora.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815255/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815254": [
        {
            "dateadded": "2026-04-09 23:40:12 UTC",
            "url": "http://145.223.68.170/bins/sora.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815254/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815246": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815246/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815247": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815247/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815248": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815248/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815249": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815249/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815250": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815250/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815251": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815251/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815252": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815252/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815253": [
        {
            "dateadded": "2026-04-09 23:40:11 UTC",
            "url": "http://145.223.68.170/bins/sora.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815253/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3815245": [
        {
            "dateadded": "2026-04-09 23:37:14 UTC",
            "url": "http://182.121.114.247:56362/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815245/",
            "reporter": "geenensp"
        }
    ],
    "3815244": [
        {
            "dateadded": "2026-04-09 23:36:09 UTC",
            "url": "https://primesun.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815244/",
            "reporter": "anonymous"
        }
    ],
    "3815243": [
        {
            "dateadded": "2026-04-09 23:36:08 UTC",
            "url": "http://42.7.236.21:46174/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:16:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815243/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815242": [
        {
            "dateadded": "2026-04-09 23:33:21 UTC",
            "url": "http://42.230.41.119:50135/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815242/",
            "reporter": "geenensp"
        }
    ],
    "3815241": [
        {
            "dateadded": "2026-04-09 23:33:06 UTC",
            "url": "http://123.11.79.188:32865/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:31:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815241/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815240": [
        {
            "dateadded": "2026-04-09 23:32:11 UTC",
            "url": "http://42.230.41.119:50135/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:58:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815240/",
            "reporter": "geenensp"
        }
    ],
    "3815239": [
        {
            "dateadded": "2026-04-09 23:32:10 UTC",
            "url": "http://182.127.113.244:59310/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:58:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815239/",
            "reporter": "geenensp"
        }
    ],
    "3815238": [
        {
            "dateadded": "2026-04-09 23:32:07 UTC",
            "url": "http://42.7.236.21:46174/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 18:50:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815238/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815237": [
        {
            "dateadded": "2026-04-09 23:31:11 UTC",
            "url": "https://z55hx.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815237/",
            "reporter": "anonymous"
        }
    ],
    "3815236": [
        {
            "dateadded": "2026-04-09 23:27:08 UTC",
            "url": "http://123.11.79.188:32865/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:10:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815236/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815235": [
        {
            "dateadded": "2026-04-09 23:26:19 UTC",
            "url": "http://182.127.113.244:59310/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:19:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815235/",
            "reporter": "geenensp"
        }
    ],
    "3815234": [
        {
            "dateadded": "2026-04-09 23:25:15 UTC",
            "url": "https://zenlithex.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815234/",
            "reporter": "anonymous"
        }
    ],
    "3815233": [
        {
            "dateadded": "2026-04-09 23:20:14 UTC",
            "url": "https://42ck8.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815233/",
            "reporter": "anonymous"
        }
    ],
    "3815232": [
        {
            "dateadded": "2026-04-09 23:19:19 UTC",
            "url": "http://182.121.114.247:56362/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815232/",
            "reporter": "geenensp"
        }
    ],
    "3815231": [
        {
            "dateadded": "2026-04-09 23:17:08 UTC",
            "url": "http://219.156.124.121:55488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:32:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815231/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815230": [
        {
            "dateadded": "2026-04-09 23:16:09 UTC",
            "url": "http://62.60.226.159/runer.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 18:16:45 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815230/",
            "reporter": "Bitsight"
        }
    ],
    "3815229": [
        {
            "dateadded": "2026-04-09 23:15:10 UTC",
            "url": "http://62.60.226.159/Ni9n3sIO.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 17:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "dropped-by-amadey",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815229/",
            "reporter": "Bitsight"
        }
    ],
    "3815228": [
        {
            "dateadded": "2026-04-09 23:14:15 UTC",
            "url": "https://c1ip-signal.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815228/",
            "reporter": "anonymous"
        }
    ],
    "3815227": [
        {
            "dateadded": "2026-04-09 23:08:11 UTC",
            "url": "https://matri-node.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815227/",
            "reporter": "anonymous"
        }
    ],
    "3815226": [
        {
            "dateadded": "2026-04-09 23:07:21 UTC",
            "url": "http://115.56.153.199:52507/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815226/",
            "reporter": "geenensp"
        }
    ],
    "3815225": [
        {
            "dateadded": "2026-04-09 23:03:24 UTC",
            "url": "http://222.142.65.106:55671/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:01:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815225/",
            "reporter": "geenensp"
        }
    ],
    "3815224": [
        {
            "dateadded": "2026-04-09 23:03:09 UTC",
            "url": "https://3af4dq.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 23:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815224/",
            "reporter": "anonymous"
        }
    ],
    "3815223": [
        {
            "dateadded": "2026-04-09 22:58:10 UTC",
            "url": "https://vortide5ix.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815223/",
            "reporter": "anonymous"
        }
    ],
    "3815222": [
        {
            "dateadded": "2026-04-09 22:53:07 UTC",
            "url": "http://42.231.79.44:50610/i",
            "url_status": "offline",
            "last_online": "2026-04-10 09:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815222/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815221": [
        {
            "dateadded": "2026-04-09 22:52:13 UTC",
            "url": "https://ivorysta.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815221/",
            "reporter": "anonymous"
        }
    ],
    "3815220": [
        {
            "dateadded": "2026-04-09 22:52:07 UTC",
            "url": "http://119.116.32.249:50983/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:36:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815220/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815219": [
        {
            "dateadded": "2026-04-09 22:47:12 UTC",
            "url": "https://portastora.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815219/",
            "reporter": "anonymous"
        }
    ],
    "3815218": [
        {
            "dateadded": "2026-04-09 22:45:18 UTC",
            "url": "http://125.42.75.71:46694/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:54:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815218/",
            "reporter": "geenensp"
        }
    ],
    "3815217": [
        {
            "dateadded": "2026-04-09 22:44:24 UTC",
            "url": "http://222.142.65.106:55671/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815217/",
            "reporter": "geenensp"
        }
    ],
    "3815215": [
        {
            "dateadded": "2026-04-09 22:42:23 UTC",
            "url": "http://125.47.237.161:51635/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815215/",
            "reporter": "geenensp"
        }
    ],
    "3815216": [
        {
            "dateadded": "2026-04-09 22:42:23 UTC",
            "url": "http://115.56.153.199:52507/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:25:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815216/",
            "reporter": "geenensp"
        }
    ],
    "3815214": [
        {
            "dateadded": "2026-04-09 22:42:09 UTC",
            "url": "http://119.116.32.249:50983/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:42:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815214/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815213": [
        {
            "dateadded": "2026-04-09 22:41:14 UTC",
            "url": "https://biomeharvest.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815213/",
            "reporter": "anonymous"
        }
    ],
    "3815212": [
        {
            "dateadded": "2026-04-09 22:35:23 UTC",
            "url": "http://182.123.191.32:46174/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815212/",
            "reporter": "geenensp"
        }
    ],
    "3815211": [
        {
            "dateadded": "2026-04-09 22:35:15 UTC",
            "url": "https://61cyrs.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815211/",
            "reporter": "anonymous"
        }
    ],
    "3815210": [
        {
            "dateadded": "2026-04-09 22:30:22 UTC",
            "url": "http://182.124.26.32:34403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:30:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815210/",
            "reporter": "geenensp"
        }
    ],
    "3815209": [
        {
            "dateadded": "2026-04-09 22:29:14 UTC",
            "url": "https://uefvnscr.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815209/",
            "reporter": "anonymous"
        }
    ],
    "3815208": [
        {
            "dateadded": "2026-04-09 22:25:17 UTC",
            "url": "https://6tyjqgjx.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815208/",
            "reporter": "anonymous"
        }
    ],
    "3815207": [
        {
            "dateadded": "2026-04-09 22:22:09 UTC",
            "url": "https://agentunite.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815207/",
            "reporter": "anonymous"
        }
    ],
    "3815205": [
        {
            "dateadded": "2026-04-09 22:16:23 UTC",
            "url": "http://125.43.145.226:39009/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815205/",
            "reporter": "geenensp"
        }
    ],
    "3815206": [
        {
            "dateadded": "2026-04-09 22:16:23 UTC",
            "url": "http://125.42.75.71:46694/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:13:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815206/",
            "reporter": "geenensp"
        }
    ],
    "3815204": [
        {
            "dateadded": "2026-04-09 22:13:12 UTC",
            "url": "https://uigjpx.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815204/",
            "reporter": "anonymous"
        }
    ],
    "3815203": [
        {
            "dateadded": "2026-04-09 22:13:10 UTC",
            "url": "http://94.156.166.84:59922/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815203/",
            "reporter": "geenensp"
        }
    ],
    "3815202": [
        {
            "dateadded": "2026-04-09 22:12:07 UTC",
            "url": "http://61.53.87.165:34443/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815202/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815201": [
        {
            "dateadded": "2026-04-09 22:09:18 UTC",
            "url": "http://182.123.191.32:46174/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815201/",
            "reporter": "geenensp"
        }
    ],
    "3815200": [
        {
            "dateadded": "2026-04-09 22:07:18 UTC",
            "url": "https://bl0om-dock.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815200/",
            "reporter": "anonymous"
        }
    ],
    "3815199": [
        {
            "dateadded": "2026-04-09 22:01:12 UTC",
            "url": "https://ip085.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815199/",
            "reporter": "anonymous"
        }
    ],
    "3815198": [
        {
            "dateadded": "2026-04-09 21:55:15 UTC",
            "url": "https://5ynt4x2-logic.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815198/",
            "reporter": "anonymous"
        }
    ],
    "3815197": [
        {
            "dateadded": "2026-04-09 21:53:23 UTC",
            "url": "http://182.123.208.104:55808/i",
            "url_status": "offline",
            "last_online": "2026-04-12 14:11:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815197/",
            "reporter": "geenensp"
        }
    ],
    "3815196": [
        {
            "dateadded": "2026-04-09 21:50:12 UTC",
            "url": "https://nor-forgeor.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815196/",
            "reporter": "anonymous"
        }
    ],
    "3815195": [
        {
            "dateadded": "2026-04-09 21:48:21 UTC",
            "url": "http://182.123.208.104:55808/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 10:12:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815195/",
            "reporter": "geenensp"
        }
    ],
    "3815194": [
        {
            "dateadded": "2026-04-09 21:45:17 UTC",
            "url": "https://alt-cort3.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815194/",
            "reporter": "anonymous"
        }
    ],
    "3815193": [
        {
            "dateadded": "2026-04-09 21:42:06 UTC",
            "url": "http://61.53.87.165:34443/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815193/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815192": [
        {
            "dateadded": "2026-04-09 21:41:24 UTC",
            "url": "http://112.248.60.227:49301/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:14:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815192/",
            "reporter": "geenensp"
        }
    ],
    "3815191": [
        {
            "dateadded": "2026-04-09 21:38:10 UTC",
            "url": "https://retaine2-drive.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815191/",
            "reporter": "anonymous"
        }
    ],
    "3815190": [
        {
            "dateadded": "2026-04-09 21:35:16 UTC",
            "url": "http://42.226.67.166:51230/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815190/",
            "reporter": "geenensp"
        }
    ],
    "3815189": [
        {
            "dateadded": "2026-04-09 21:33:10 UTC",
            "url": "https://quorlithon3.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815189/",
            "reporter": "anonymous"
        }
    ],
    "3815188": [
        {
            "dateadded": "2026-04-09 21:28:18 UTC",
            "url": "http://222.127.251.163:48644/i",
            "url_status": "offline",
            "last_online": "2026-04-14 05:21:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815188/",
            "reporter": "geenensp"
        }
    ],
    "3815187": [
        {
            "dateadded": "2026-04-09 21:27:10 UTC",
            "url": "https://ia22i03.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815187/",
            "reporter": "anonymous"
        }
    ],
    "3815186": [
        {
            "dateadded": "2026-04-09 21:23:07 UTC",
            "url": "https://gr4n-panel.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815186/",
            "reporter": "anonymous"
        }
    ],
    "3815185": [
        {
            "dateadded": "2026-04-09 21:21:17 UTC",
            "url": "http://91.147.100.200:48345/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815185/",
            "reporter": "geenensp"
        }
    ],
    "3815184": [
        {
            "dateadded": "2026-04-09 21:17:15 UTC",
            "url": "https://client-gro.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:17:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815184/",
            "reporter": "anonymous"
        }
    ],
    "3815183": [
        {
            "dateadded": "2026-04-09 21:14:10 UTC",
            "url": "http://175.149.93.118:40202/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:12:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815183/",
            "reporter": "geenensp"
        }
    ],
    "3815182": [
        {
            "dateadded": "2026-04-09 21:13:27 UTC",
            "url": "http://113.116.218.59:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:44:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815182/",
            "reporter": "geenensp"
        }
    ],
    "3815181": [
        {
            "dateadded": "2026-04-09 21:11:09 UTC",
            "url": "https://hyper-s0lid.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815181/",
            "reporter": "anonymous"
        }
    ],
    "3815180": [
        {
            "dateadded": "2026-04-09 21:06:07 UTC",
            "url": "https://bann3-hinge.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815180/",
            "reporter": "anonymous"
        }
    ],
    "3815179": [
        {
            "dateadded": "2026-04-09 21:05:17 UTC",
            "url": "http://221.15.142.138:52609/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:31:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815179/",
            "reporter": "geenensp"
        }
    ],
    "3815178": [
        {
            "dateadded": "2026-04-09 21:02:16 UTC",
            "url": "http://42.224.5.252:59456/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815178/",
            "reporter": "geenensp"
        }
    ],
    "3815177": [
        {
            "dateadded": "2026-04-09 21:00:09 UTC",
            "url": "https://shadowneural.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 21:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815177/",
            "reporter": "anonymous"
        }
    ],
    "3815176": [
        {
            "dateadded": "2026-04-09 20:59:05 UTC",
            "url": "http://85.239.147.6/files/6749237131/WjRZCsK.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815176/",
            "reporter": "c2hunter"
        }
    ],
    "3815175": [
        {
            "dateadded": "2026-04-09 20:58:04 UTC",
            "url": "http://85.239.147.6/files/1781548144/cWyzSxe.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815175/",
            "reporter": "Bitsight"
        }
    ],
    "3815174": [
        {
            "dateadded": "2026-04-09 20:54:11 UTC",
            "url": "https://17qaxj2h.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815174/",
            "reporter": "anonymous"
        }
    ],
    "3815172": [
        {
            "dateadded": "2026-04-09 20:48:11 UTC",
            "url": "http://115.49.200.17:51782/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:20:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815172/",
            "reporter": "geenensp"
        }
    ],
    "3815173": [
        {
            "dateadded": "2026-04-09 20:48:11 UTC",
            "url": "https://ultra-tr4d.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815173/",
            "reporter": "anonymous"
        }
    ],
    "3815170": [
        {
            "dateadded": "2026-04-09 20:47:12 UTC",
            "url": "http://94.156.152.67:83/manji.arm5",
            "url_status": "offline",
            "last_online": "2026-04-22 17:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815170/",
            "reporter": "botnetkiller"
        }
    ],
    "3815171": [
        {
            "dateadded": "2026-04-09 20:47:12 UTC",
            "url": "http://94.156.152.67:83/manji.arm7",
            "url_status": "offline",
            "last_online": "2026-04-22 17:59:31 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815171/",
            "reporter": "botnetkiller"
        }
    ],
    "3815167": [
        {
            "dateadded": "2026-04-09 20:46:18 UTC",
            "url": "http://94.156.152.67:83/manji.dbg",
            "url_status": "offline",
            "last_online": "2026-04-22 16:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815167/",
            "reporter": "botnetkiller"
        }
    ],
    "3815168": [
        {
            "dateadded": "2026-04-09 20:46:18 UTC",
            "url": "http://94.156.152.67:83/00101010101001/o.xml",
            "url_status": "offline",
            "last_online": "2026-04-22 18:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget",
                "xml"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815168/",
            "reporter": "botnetkiller"
        }
    ],
    "3815169": [
        {
            "dateadded": "2026-04-09 20:46:18 UTC",
            "url": "http://94.156.152.67:83/manji.x86",
            "url_status": "offline",
            "last_online": "2026-04-22 17:03:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815169/",
            "reporter": "botnetkiller"
        }
    ],
    "3815166": [
        {
            "dateadded": "2026-04-09 20:43:07 UTC",
            "url": "https://v1de0-mark.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815166/",
            "reporter": "anonymous"
        }
    ],
    "3815165": [
        {
            "dateadded": "2026-04-09 20:40:06 UTC",
            "url": "http://85.239.147.6/files/6749237131/WjRZCsK.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815165/",
            "reporter": "Bitsight"
        }
    ],
    "3815164": [
        {
            "dateadded": "2026-04-09 20:38:13 UTC",
            "url": "http://42.224.5.252:59456/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815164/",
            "reporter": "geenensp"
        }
    ],
    "3815163": [
        {
            "dateadded": "2026-04-09 20:38:10 UTC",
            "url": "https://btvpo7.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815163/",
            "reporter": "anonymous"
        }
    ],
    "3815162": [
        {
            "dateadded": "2026-04-09 20:32:08 UTC",
            "url": "https://9tdrxs7.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815162/",
            "reporter": "anonymous"
        }
    ],
    "3815161": [
        {
            "dateadded": "2026-04-09 20:28:19 UTC",
            "url": "http://110.37.5.60:34068/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815161/",
            "reporter": "geenensp"
        }
    ],
    "3815160": [
        {
            "dateadded": "2026-04-09 20:27:06 UTC",
            "url": "http://119.186.206.112:37162/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:04:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815160/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815159": [
        {
            "dateadded": "2026-04-09 20:26:18 UTC",
            "url": "http://42.229.183.96:57623/i",
            "url_status": "offline",
            "last_online": "2026-04-09 20:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815159/",
            "reporter": "geenensp"
        }
    ],
    "3815158": [
        {
            "dateadded": "2026-04-09 20:26:10 UTC",
            "url": "https://goldgeyse.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815158/",
            "reporter": "anonymous"
        }
    ],
    "3815157": [
        {
            "dateadded": "2026-04-09 20:21:11 UTC",
            "url": "https://etttiinm.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815157/",
            "reporter": "anonymous"
        }
    ],
    "3815156": [
        {
            "dateadded": "2026-04-09 20:15:19 UTC",
            "url": "https://k0ejxai.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815156/",
            "reporter": "anonymous"
        }
    ],
    "3815155": [
        {
            "dateadded": "2026-04-09 20:11:12 UTC",
            "url": "http://125.47.71.155:39266/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815155/",
            "reporter": "geenensp"
        }
    ],
    "3815154": [
        {
            "dateadded": "2026-04-09 20:10:12 UTC",
            "url": "http://96.245.232.47:54940/i",
            "url_status": "offline",
            "last_online": "2026-04-24 12:20:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815154/",
            "reporter": "geenensp"
        }
    ],
    "3815153": [
        {
            "dateadded": "2026-04-09 20:09:11 UTC",
            "url": "https://rough9-point.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815153/",
            "reporter": "anonymous"
        }
    ],
    "3815152": [
        {
            "dateadded": "2026-04-09 20:05:17 UTC",
            "url": "http://176.65.139.67/gpon.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:51:53 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815152/",
            "reporter": "botnetkiller"
        }
    ],
    "3815151": [
        {
            "dateadded": "2026-04-09 20:04:17 UTC",
            "url": "http://110.37.5.60:34068/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815151/",
            "reporter": "geenensp"
        }
    ],
    "3815150": [
        {
            "dateadded": "2026-04-09 20:04:07 UTC",
            "url": "https://bajla4.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 20:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815150/",
            "reporter": "anonymous"
        }
    ],
    "3815149": [
        {
            "dateadded": "2026-04-09 20:03:08 UTC",
            "url": "http://115.49.200.17:51782/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 21:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815149/",
            "reporter": "geenensp"
        }
    ],
    "3815148": [
        {
            "dateadded": "2026-04-09 20:02:19 UTC",
            "url": "http://42.229.183.96:57623/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 20:02:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815148/",
            "reporter": "geenensp"
        }
    ],
    "3815147": [
        {
            "dateadded": "2026-04-09 19:57:09 UTC",
            "url": "https://marshfiel.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815147/",
            "reporter": "anonymous"
        }
    ],
    "3815146": [
        {
            "dateadded": "2026-04-09 19:57:06 UTC",
            "url": "http://119.186.206.112:37162/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:28:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815146/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815145": [
        {
            "dateadded": "2026-04-09 19:52:11 UTC",
            "url": "https://tens-forge.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815145/",
            "reporter": "anonymous"
        }
    ],
    "3815144": [
        {
            "dateadded": "2026-04-09 19:47:12 UTC",
            "url": "https://pipe1-trail.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815144/",
            "reporter": "anonymous"
        }
    ],
    "3815143": [
        {
            "dateadded": "2026-04-09 19:45:10 UTC",
            "url": "http://125.40.158.1:51186/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:57:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815143/",
            "reporter": "geenensp"
        }
    ],
    "3815142": [
        {
            "dateadded": "2026-04-09 19:44:19 UTC",
            "url": "http://110.37.28.119:50091/i",
            "url_status": "offline",
            "last_online": "2026-04-09 19:44:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815142/",
            "reporter": "geenensp"
        }
    ],
    "3815141": [
        {
            "dateadded": "2026-04-09 19:41:11 UTC",
            "url": "https://yj6t.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815141/",
            "reporter": "anonymous"
        }
    ],
    "3815140": [
        {
            "dateadded": "2026-04-09 19:41:05 UTC",
            "url": "http://85.239.147.6/files/1202156955/jagqzHE.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815140/",
            "reporter": "c2hunter"
        }
    ],
    "3815139": [
        {
            "dateadded": "2026-04-09 19:39:20 UTC",
            "url": "http://59.88.241.174:57799/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 19:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815139/",
            "reporter": "geenensp"
        }
    ],
    "3815138": [
        {
            "dateadded": "2026-04-09 19:38:11 UTC",
            "url": "https://talvenal7.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815138/",
            "reporter": "anonymous"
        }
    ],
    "3815137": [
        {
            "dateadded": "2026-04-09 19:32:09 UTC",
            "url": "http://36.69.90.35:35122/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:00:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815137/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815136": [
        {
            "dateadded": "2026-04-09 19:30:06 UTC",
            "url": "http://85.239.147.6/files/7742504508/96f9Qz3.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815136/",
            "reporter": "Bitsight"
        }
    ],
    "3815135": [
        {
            "dateadded": "2026-04-09 19:27:06 UTC",
            "url": "http://1.10.209.143:37698/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 11:26:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815135/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815134": [
        {
            "dateadded": "2026-04-09 19:22:50 UTC",
            "url": "http://114.139.213.60:46092/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815134/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815133": [
        {
            "dateadded": "2026-04-09 19:18:38 UTC",
            "url": "http://110.37.28.119:50091/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815133/",
            "reporter": "geenensp"
        }
    ],
    "3815132": [
        {
            "dateadded": "2026-04-09 19:18:23 UTC",
            "url": "https://sparrowhones.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:18:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815132/",
            "reporter": "anonymous"
        }
    ],
    "3815131": [
        {
            "dateadded": "2026-04-09 19:17:22 UTC",
            "url": "http://sparrowhones.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815131/",
            "reporter": "anonymous"
        }
    ],
    "3815130": [
        {
            "dateadded": "2026-04-09 19:13:09 UTC",
            "url": "http://42.229.168.199:45770/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815130/",
            "reporter": "geenensp"
        }
    ],
    "3815129": [
        {
            "dateadded": "2026-04-09 19:12:07 UTC",
            "url": "https://vor-lineet.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815129/",
            "reporter": "anonymous"
        }
    ],
    "3815128": [
        {
            "dateadded": "2026-04-09 19:07:11 UTC",
            "url": "https://grid8-glow.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815128/",
            "reporter": "anonymous"
        }
    ],
    "3815127": [
        {
            "dateadded": "2026-04-09 19:06:08 UTC",
            "url": "http://125.43.25.32:39935/i",
            "url_status": "offline",
            "last_online": "2026-04-09 19:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815127/",
            "reporter": "geenensp"
        }
    ],
    "3815126": [
        {
            "dateadded": "2026-04-09 19:04:18 UTC",
            "url": "http://125.41.174.71:49912/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:16:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815126/",
            "reporter": "geenensp"
        }
    ],
    "3815125": [
        {
            "dateadded": "2026-04-09 19:01:13 UTC",
            "url": "https://t57294m.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 19:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815125/",
            "reporter": "anonymous"
        }
    ],
    "3815124": [
        {
            "dateadded": "2026-04-09 19:00:20 UTC",
            "url": "http://72.194.227.46:50880/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815124/",
            "reporter": "geenensp"
        }
    ],
    "3815123": [
        {
            "dateadded": "2026-04-09 18:57:12 UTC",
            "url": "https://ruralgrove.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 18:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815123/",
            "reporter": "anonymous"
        }
    ],
    "3815122": [
        {
            "dateadded": "2026-04-09 18:57:11 UTC",
            "url": "http://114.139.213.60:46092/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815122/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815121": [
        {
            "dateadded": "2026-04-09 18:54:18 UTC",
            "url": "https://tag3s.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 18:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815121/",
            "reporter": "anonymous"
        }
    ],
    "3815120": [
        {
            "dateadded": "2026-04-09 18:53:17 UTC",
            "url": "http://42.55.1.114:60968/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815120/",
            "reporter": "geenensp"
        }
    ],
    "3815119": [
        {
            "dateadded": "2026-04-09 18:52:06 UTC",
            "url": "http://115.55.80.213:52488/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:05:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815119/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815118": [
        {
            "dateadded": "2026-04-09 18:44:08 UTC",
            "url": "https://arkvale0ex.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 18:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815118/",
            "reporter": "anonymous"
        }
    ],
    "3815117": [
        {
            "dateadded": "2026-04-09 18:37:07 UTC",
            "url": "https://streamerspectrum.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 18:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815117/",
            "reporter": "anonymous"
        }
    ],
    "3815116": [
        {
            "dateadded": "2026-04-09 18:36:18 UTC",
            "url": "http://125.41.174.71:49912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815116/",
            "reporter": "geenensp"
        }
    ],
    "3815115": [
        {
            "dateadded": "2026-04-09 18:36:10 UTC",
            "url": "http://125.43.25.32:39935/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 18:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815115/",
            "reporter": "geenensp"
        }
    ],
    "3815114": [
        {
            "dateadded": "2026-04-09 18:33:10 UTC",
            "url": "https://227p0.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 18:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815114/",
            "reporter": "anonymous"
        }
    ],
    "3815113": [
        {
            "dateadded": "2026-04-09 18:30:18 UTC",
            "url": "http://27.213.177.46:52383/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815113/",
            "reporter": "geenensp"
        }
    ],
    "3815112": [
        {
            "dateadded": "2026-04-09 18:27:07 UTC",
            "url": "http://115.55.80.213:52488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815112/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815111": [
        {
            "dateadded": "2026-04-09 18:07:19 UTC",
            "url": "http://27.213.177.46:52383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:16:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815111/",
            "reporter": "geenensp"
        }
    ],
    "3815110": [
        {
            "dateadded": "2026-04-09 18:05:14 UTC",
            "url": "http://183.23.135.140:35197/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:04:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815110/",
            "reporter": "geenensp"
        }
    ],
    "3815109": [
        {
            "dateadded": "2026-04-09 18:02:19 UTC",
            "url": "http://115.56.110.171:46019/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815109/",
            "reporter": "geenensp"
        }
    ],
    "3815108": [
        {
            "dateadded": "2026-04-09 17:53:13 UTC",
            "url": "https://tren-sta.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815108/",
            "reporter": "anonymous"
        }
    ],
    "3815107": [
        {
            "dateadded": "2026-04-09 17:51:22 UTC",
            "url": "http://115.56.110.171:46019/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:21:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815107/",
            "reporter": "geenensp"
        }
    ],
    "3815106": [
        {
            "dateadded": "2026-04-09 17:48:09 UTC",
            "url": "https://mist-sub.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815106/",
            "reporter": "anonymous"
        }
    ],
    "3815105": [
        {
            "dateadded": "2026-04-09 17:43:08 UTC",
            "url": "https://dyndra1is.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815105/",
            "reporter": "anonymous"
        }
    ],
    "3815104": [
        {
            "dateadded": "2026-04-09 17:40:25 UTC",
            "url": "http://182.126.89.204:37505/i",
            "url_status": "offline",
            "last_online": "2026-04-13 23:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815104/",
            "reporter": "geenensp"
        }
    ],
    "3815103": [
        {
            "dateadded": "2026-04-09 17:40:09 UTC",
            "url": "https://pdwex6.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815103/",
            "reporter": "anonymous"
        }
    ],
    "3815102": [
        {
            "dateadded": "2026-04-09 17:37:51 UTC",
            "url": "http://124.235.249.74:39147/i",
            "url_status": "offline",
            "last_online": "2026-04-18 17:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815102/",
            "reporter": "geenensp"
        }
    ],
    "3815101": [
        {
            "dateadded": "2026-04-09 17:31:19 UTC",
            "url": "http://36.249.194.99:58270/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:24:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815101/",
            "reporter": "geenensp"
        }
    ],
    "3815100": [
        {
            "dateadded": "2026-04-09 17:31:18 UTC",
            "url": "http://105.224.82.210:55255/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:37:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815100/",
            "reporter": "geenensp"
        }
    ],
    "3815099": [
        {
            "dateadded": "2026-04-09 17:31:12 UTC",
            "url": "https://sfu2.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815099/",
            "reporter": "anonymous"
        }
    ],
    "3815098": [
        {
            "dateadded": "2026-04-09 17:24:14 UTC",
            "url": "https://6ud07.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815098/",
            "reporter": "anonymous"
        }
    ],
    "3815097": [
        {
            "dateadded": "2026-04-09 17:20:22 UTC",
            "url": "http://118.232.137.101:59704/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:53:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815097/",
            "reporter": "geenensp"
        }
    ],
    "3815096": [
        {
            "dateadded": "2026-04-09 17:20:12 UTC",
            "url": "https://ikpxa.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815096/",
            "reporter": "anonymous"
        }
    ],
    "3815095": [
        {
            "dateadded": "2026-04-09 17:20:07 UTC",
            "url": "http://85.239.147.6/files/6849343518/nXPvMW4.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815095/",
            "reporter": "Bitsight"
        }
    ],
    "3815094": [
        {
            "dateadded": "2026-04-09 17:19:21 UTC",
            "url": "http://42.227.201.205:35235/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:53:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815094/",
            "reporter": "geenensp"
        }
    ],
    "3815093": [
        {
            "dateadded": "2026-04-09 17:14:15 UTC",
            "url": "https://lanepla.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815093/",
            "reporter": "anonymous"
        }
    ],
    "3815092": [
        {
            "dateadded": "2026-04-09 17:10:22 UTC",
            "url": "http://182.126.89.204:37505/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815092/",
            "reporter": "geenensp"
        }
    ],
    "3815091": [
        {
            "dateadded": "2026-04-09 17:09:12 UTC",
            "url": "https://mervale8on.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815091/",
            "reporter": "anonymous"
        }
    ],
    "3815090": [
        {
            "dateadded": "2026-04-09 17:04:05 UTC",
            "url": "http://85.239.147.6/files/6849343518/NCp6USn.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815090/",
            "reporter": "Bitsight"
        }
    ],
    "3815089": [
        {
            "dateadded": "2026-04-09 17:03:09 UTC",
            "url": "https://dustdefend.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 17:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815089/",
            "reporter": "anonymous"
        }
    ],
    "3815088": [
        {
            "dateadded": "2026-04-09 17:02:23 UTC",
            "url": "http://105.224.82.210:55255/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815088/",
            "reporter": "geenensp"
        }
    ],
    "3815087": [
        {
            "dateadded": "2026-04-09 16:59:21 UTC",
            "url": "http://112.248.184.156:47027/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:55:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815087/",
            "reporter": "geenensp"
        }
    ],
    "3815086": [
        {
            "dateadded": "2026-04-09 16:56:08 UTC",
            "url": "https://capita-stack.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815086/",
            "reporter": "anonymous"
        }
    ],
    "3815085": [
        {
            "dateadded": "2026-04-09 16:54:22 UTC",
            "url": "http://112.248.184.156:47027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815085/",
            "reporter": "geenensp"
        }
    ],
    "3815084": [
        {
            "dateadded": "2026-04-09 16:51:08 UTC",
            "url": "https://kel-coreex.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815084/",
            "reporter": "anonymous"
        }
    ],
    "3815083": [
        {
            "dateadded": "2026-04-09 16:50:19 UTC",
            "url": "http://42.227.201.205:35235/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:44:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815083/",
            "reporter": "geenensp"
        }
    ],
    "3815082": [
        {
            "dateadded": "2026-04-09 16:47:17 UTC",
            "url": "http://61.52.110.141:40162/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815082/",
            "reporter": "geenensp"
        }
    ],
    "3815081": [
        {
            "dateadded": "2026-04-09 16:46:13 UTC",
            "url": "https://compres0-watch.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815081/",
            "reporter": "anonymous"
        }
    ],
    "3815080": [
        {
            "dateadded": "2026-04-09 16:41:12 UTC",
            "url": "https://talspireor.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815080/",
            "reporter": "anonymous"
        }
    ],
    "3815079": [
        {
            "dateadded": "2026-04-09 16:35:13 UTC",
            "url": "https://proto-n1mb.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815079/",
            "reporter": "anonymous"
        }
    ],
    "3815078": [
        {
            "dateadded": "2026-04-09 16:29:18 UTC",
            "url": "https://pale-beam.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:29:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815078/",
            "reporter": "anonymous"
        }
    ],
    "3815077": [
        {
            "dateadded": "2026-04-09 16:26:21 UTC",
            "url": "http://123.12.25.132:42309/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815077/",
            "reporter": "geenensp"
        }
    ],
    "3815076": [
        {
            "dateadded": "2026-04-09 16:23:16 UTC",
            "url": "https://observernet.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815076/",
            "reporter": "anonymous"
        }
    ],
    "3815075": [
        {
            "dateadded": "2026-04-09 16:18:33 UTC",
            "url": "http://182.127.100.228:40948/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:02:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815075/",
            "reporter": "geenensp"
        }
    ],
    "3815074": [
        {
            "dateadded": "2026-04-09 16:18:14 UTC",
            "url": "https://canyondeliver.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815074/",
            "reporter": "anonymous"
        }
    ],
    "3815073": [
        {
            "dateadded": "2026-04-09 16:17:07 UTC",
            "url": "http://39.65.244.250:52606/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:24:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815073/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815072": [
        {
            "dateadded": "2026-04-09 16:12:13 UTC",
            "url": "https://5hor-line.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815072/",
            "reporter": "anonymous"
        }
    ],
    "3815071": [
        {
            "dateadded": "2026-04-09 16:07:15 UTC",
            "url": "https://ebqje.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815071/",
            "reporter": "anonymous"
        }
    ],
    "3815070": [
        {
            "dateadded": "2026-04-09 16:05:17 UTC",
            "url": "https://hp301u.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 16:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815070/",
            "reporter": "anonymous"
        }
    ],
    "3815069": [
        {
            "dateadded": "2026-04-09 15:59:16 UTC",
            "url": "http://123.173.88.51:52537/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:06:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815069/",
            "reporter": "geenensp"
        }
    ],
    "3815068": [
        {
            "dateadded": "2026-04-09 15:57:20 UTC",
            "url": "http://61.52.110.141:40162/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815068/",
            "reporter": "geenensp"
        }
    ],
    "3815067": [
        {
            "dateadded": "2026-04-09 15:56:16 UTC",
            "url": "https://quor-forgear.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815067/",
            "reporter": "anonymous"
        }
    ],
    "3815066": [
        {
            "dateadded": "2026-04-09 15:52:08 UTC",
            "url": "http://42.4.109.33:48569/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:51:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815066/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815065": [
        {
            "dateadded": "2026-04-09 15:50:16 UTC",
            "url": "https://rhuhgz.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815065/",
            "reporter": "anonymous"
        }
    ],
    "3815064": [
        {
            "dateadded": "2026-04-09 15:49:12 UTC",
            "url": "http://27.215.143.159:47932/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815064/",
            "reporter": "geenensp"
        }
    ],
    "3815063": [
        {
            "dateadded": "2026-04-09 15:44:13 UTC",
            "url": "https://cre5t-port.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815063/",
            "reporter": "anonymous"
        }
    ],
    "3815062": [
        {
            "dateadded": "2026-04-09 15:38:17 UTC",
            "url": "https://lum-draar.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:38:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815062/",
            "reporter": "anonymous"
        }
    ],
    "3815061": [
        {
            "dateadded": "2026-04-09 15:37:06 UTC",
            "url": "http://42.4.109.33:48569/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:24:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815061/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815060": [
        {
            "dateadded": "2026-04-09 15:35:10 UTC",
            "url": "https://i61l.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815060/",
            "reporter": "anonymous"
        }
    ],
    "3815059": [
        {
            "dateadded": "2026-04-09 15:32:08 UTC",
            "url": "https://majorloca.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815059/",
            "reporter": "anonymous"
        }
    ],
    "3815058": [
        {
            "dateadded": "2026-04-09 15:30:16 UTC",
            "url": "http://123.173.88.51:52537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815058/",
            "reporter": "geenensp"
        }
    ],
    "3815057": [
        {
            "dateadded": "2026-04-09 15:26:20 UTC",
            "url": "http://123.11.12.39:60892/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815057/",
            "reporter": "geenensp"
        }
    ],
    "3815056": [
        {
            "dateadded": "2026-04-09 15:25:12 UTC",
            "url": "http://182.116.33.28:47168/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:21:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815056/",
            "reporter": "geenensp"
        }
    ],
    "3815055": [
        {
            "dateadded": "2026-04-09 15:24:11 UTC",
            "url": "https://5trea-crest.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815055/",
            "reporter": "anonymous"
        }
    ],
    "3815054": [
        {
            "dateadded": "2026-04-09 15:22:21 UTC",
            "url": "http://123.11.12.39:60892/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815054/",
            "reporter": "geenensp"
        }
    ],
    "3815053": [
        {
            "dateadded": "2026-04-09 15:20:14 UTC",
            "url": "https://rep4-signal.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815053/",
            "reporter": "anonymous"
        }
    ],
    "3815052": [
        {
            "dateadded": "2026-04-09 15:17:10 UTC",
            "url": "http://110.36.80.169:43560/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:00:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815052/",
            "reporter": "geenensp"
        }
    ],
    "3815051": [
        {
            "dateadded": "2026-04-09 15:17:08 UTC",
            "url": "http://150.255.173.32:34957/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815051/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815050": [
        {
            "dateadded": "2026-04-09 15:15:21 UTC",
            "url": "http://59.47.188.236:45324/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815050/",
            "reporter": "geenensp"
        }
    ],
    "3815049": [
        {
            "dateadded": "2026-04-09 15:10:09 UTC",
            "url": "https://velmarkis.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815049/",
            "reporter": "anonymous"
        }
    ],
    "3815048": [
        {
            "dateadded": "2026-04-09 15:08:09 UTC",
            "url": "https://zen-venen.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815048/",
            "reporter": "anonymous"
        }
    ],
    "3815047": [
        {
            "dateadded": "2026-04-09 15:03:10 UTC",
            "url": "https://713c.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 15:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815047/",
            "reporter": "anonymous"
        }
    ],
    "3815046": [
        {
            "dateadded": "2026-04-09 15:02:15 UTC",
            "url": "http://27.215.143.159:47932/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815046/",
            "reporter": "geenensp"
        }
    ],
    "3815045": [
        {
            "dateadded": "2026-04-09 15:01:13 UTC",
            "url": "http://kerryglow.info/",
            "url_status": "offline",
            "last_online": "2026-04-21 10:46:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ua-ps"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815045/",
            "reporter": "abuse_ch"
        }
    ],
    "3815044": [
        {
            "dateadded": "2026-04-09 15:00:23 UTC",
            "url": "http://106.58.118.149:33480/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815044/",
            "reporter": "geenensp"
        }
    ],
    "3815043": [
        {
            "dateadded": "2026-04-09 14:59:05 UTC",
            "url": "http://163.5.102.97/oD1Zv/gluedig.hta",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815043/",
            "reporter": "abuse_ch"
        }
    ],
    "3815042": [
        {
            "dateadded": "2026-04-09 14:57:07 UTC",
            "url": "http://122.148.184.156:49641/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:23:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815042/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815041": [
        {
            "dateadded": "2026-04-09 14:56:10 UTC",
            "url": "https://stawel.terrae.rest/?1/_x",
            "url_status": "offline",
            "last_online": "2026-04-09 14:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Astaroth",
                "BRA",
                "geofenced",
                "Guildma",
                "js"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815041/",
            "reporter": "abuse_ch"
        }
    ],
    "3815040": [
        {
            "dateadded": "2026-04-09 14:54:19 UTC",
            "url": "http://115.59.234.253:39317/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:30:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815040/",
            "reporter": "geenensp"
        }
    ],
    "3815039": [
        {
            "dateadded": "2026-04-09 14:54:08 UTC",
            "url": "https://tide-dock.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815039/",
            "reporter": "anonymous"
        }
    ],
    "3815038": [
        {
            "dateadded": "2026-04-09 14:53:17 UTC",
            "url": "http://42.87.138.126:34258/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:57:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815038/",
            "reporter": "geenensp"
        }
    ],
    "3815037": [
        {
            "dateadded": "2026-04-09 14:52:08 UTC",
            "url": "http://150.255.173.32:34957/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 17:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815037/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3815036": [
        {
            "dateadded": "2026-04-09 14:51:07 UTC",
            "url": "http://163.5.102.97/gs321RR/horrorreamer.hta",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815036/",
            "reporter": "abuse_ch"
        }
    ],
    "3815035": [
        {
            "dateadded": "2026-04-09 14:50:11 UTC",
            "url": "http://110.36.80.169:43560/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815035/",
            "reporter": "geenensp"
        }
    ],
    "3815034": [
        {
            "dateadded": "2026-04-09 14:48:10 UTC",
            "url": "https://deeppublic.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815034/",
            "reporter": "anonymous"
        }
    ],
    "3815033": [
        {
            "dateadded": "2026-04-09 14:42:18 UTC",
            "url": "http://200.59.83.65:45907/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:53:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815033/",
            "reporter": "geenensp"
        }
    ],
    "3815032": [
        {
            "dateadded": "2026-04-09 14:42:11 UTC",
            "url": "https://formsola.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815032/",
            "reporter": "anonymous"
        }
    ],
    "3815031": [
        {
            "dateadded": "2026-04-09 14:37:12 UTC",
            "url": "https://lumvenor1.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815031/",
            "reporter": "anonymous"
        }
    ],
    "3815030": [
        {
            "dateadded": "2026-04-09 14:37:08 UTC",
            "url": "http://42.231.94.86:55388/i",
            "url_status": "offline",
            "last_online": "2026-04-09 21:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815030/",
            "reporter": "geenensp"
        }
    ],
    "3815029": [
        {
            "dateadded": "2026-04-09 14:34:08 UTC",
            "url": "http://182.126.115.128:36606/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:38:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815029/",
            "reporter": "geenensp"
        }
    ],
    "3815028": [
        {
            "dateadded": "2026-04-09 14:31:08 UTC",
            "url": "https://rapidgold.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815028/",
            "reporter": "anonymous"
        }
    ],
    "3815027": [
        {
            "dateadded": "2026-04-09 14:30:34 UTC",
            "url": "http://106.58.118.149:33480/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:11:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815027/",
            "reporter": "geenensp"
        }
    ],
    "3815025": [
        {
            "dateadded": "2026-04-09 14:30:20 UTC",
            "url": "http://182.116.33.28:47168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:57:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815025/",
            "reporter": "geenensp"
        }
    ],
    "3815026": [
        {
            "dateadded": "2026-04-09 14:30:20 UTC",
            "url": "http://222.127.77.227:46777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815026/",
            "reporter": "geenensp"
        }
    ],
    "3815024": [
        {
            "dateadded": "2026-04-09 14:26:08 UTC",
            "url": "https://sh13l-mount.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815024/",
            "reporter": "anonymous"
        }
    ],
    "3815023": [
        {
            "dateadded": "2026-04-09 14:23:19 UTC",
            "url": "http://42.231.94.86:55388/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:02:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815023/",
            "reporter": "geenensp"
        }
    ],
    "3815022": [
        {
            "dateadded": "2026-04-09 14:20:12 UTC",
            "url": "https://breeze2-lab.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815022/",
            "reporter": "anonymous"
        }
    ],
    "3815021": [
        {
            "dateadded": "2026-04-09 14:17:20 UTC",
            "url": "http://110.37.24.11:52717/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815021/",
            "reporter": "geenensp"
        }
    ],
    "3815020": [
        {
            "dateadded": "2026-04-09 14:16:18 UTC",
            "url": "http://175.165.133.140:52433/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:47:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815020/",
            "reporter": "geenensp"
        }
    ],
    "3815019": [
        {
            "dateadded": "2026-04-09 14:14:09 UTC",
            "url": "https://2vw0eqz.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815019/",
            "reporter": "anonymous"
        }
    ],
    "3815018": [
        {
            "dateadded": "2026-04-09 14:11:09 UTC",
            "url": "http://147.93.3.139/sexogaycomtravesti/bkp/chrome_update_old.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 11:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "147-93-3-139",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815018/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815017": [
        {
            "dateadded": "2026-04-09 14:10:09 UTC",
            "url": "http://147.93.3.139/sexogaycomtravesti/bkp/chrome_update.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 12:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "147-93-3-139",
                "njRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815017/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815016": [
        {
            "dateadded": "2026-04-09 14:09:13 UTC",
            "url": "https://pbby.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815016/",
            "reporter": "anonymous"
        }
    ],
    "3815015": [
        {
            "dateadded": "2026-04-09 14:05:15 UTC",
            "url": "http://147.93.3.139/sexogaycomtravesti/main.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 12:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "147-93-3-139",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815015/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815014": [
        {
            "dateadded": "2026-04-09 14:03:08 UTC",
            "url": "http://147.93.3.139/sexogaycomtravesti/chrome_update.exe",
            "url_status": "offline",
            "last_online": "2026-04-25 12:19:33 UTC",
            "threat": "malware_download",
            "tags": [
                "147-93-3-139",
                "njRAT",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815014/",
            "reporter": "BlinkzSec"
        }
    ],
    "3815013": [
        {
            "dateadded": "2026-04-09 14:02:10 UTC",
            "url": "https://gwryxarc.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 14:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815013/",
            "reporter": "anonymous"
        }
    ],
    "3815012": [
        {
            "dateadded": "2026-04-09 13:59:11 UTC",
            "url": "http://115.58.149.218:51408/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 21:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815012/",
            "reporter": "geenensp"
        }
    ],
    "3815011": [
        {
            "dateadded": "2026-04-09 13:58:12 UTC",
            "url": "https://northdusk.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815011/",
            "reporter": "anonymous"
        }
    ],
    "3815010": [
        {
            "dateadded": "2026-04-09 13:55:06 UTC",
            "url": "http://85.239.147.6/files/1980571880/t6u2Tbq.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815010/",
            "reporter": "c2hunter"
        }
    ],
    "3815009": [
        {
            "dateadded": "2026-04-09 13:54:28 UTC",
            "url": "http://112.113.247.136:40649/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815009/",
            "reporter": "geenensp"
        }
    ],
    "3815008": [
        {
            "dateadded": "2026-04-09 13:54:08 UTC",
            "url": "https://gbfezss.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815008/",
            "reporter": "anonymous"
        }
    ],
    "3815007": [
        {
            "dateadded": "2026-04-09 13:51:18 UTC",
            "url": "http://110.37.24.11:52717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 13:51:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815007/",
            "reporter": "geenensp"
        }
    ],
    "3815006": [
        {
            "dateadded": "2026-04-09 13:51:10 UTC",
            "url": "https://cascadeaudit.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815006/",
            "reporter": "anonymous"
        }
    ],
    "3815005": [
        {
            "dateadded": "2026-04-09 13:43:16 UTC",
            "url": "http://115.58.97.250:59697/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815005/",
            "reporter": "geenensp"
        }
    ],
    "3815004": [
        {
            "dateadded": "2026-04-09 13:41:09 UTC",
            "url": "https://tal-lineis.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815004/",
            "reporter": "anonymous"
        }
    ],
    "3815003": [
        {
            "dateadded": "2026-04-09 13:36:19 UTC",
            "url": "http://115.58.97.250:59697/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 13:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815003/",
            "reporter": "geenensp"
        }
    ],
    "3815002": [
        {
            "dateadded": "2026-04-09 13:36:11 UTC",
            "url": "https://curiousport.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815002/",
            "reporter": "anonymous"
        }
    ],
    "3815001": [
        {
            "dateadded": "2026-04-09 13:32:16 UTC",
            "url": "http://115.49.203.28:38061/i",
            "url_status": "offline",
            "last_online": "2026-04-10 21:58:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815001/",
            "reporter": "geenensp"
        }
    ],
    "3815000": [
        {
            "dateadded": "2026-04-09 13:29:07 UTC",
            "url": "https://learnmed.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3815000/",
            "reporter": "anonymous"
        }
    ],
    "3814999": [
        {
            "dateadded": "2026-04-09 13:26:32 UTC",
            "url": "http://27.215.87.104:48687/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:15:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814999/",
            "reporter": "geenensp"
        }
    ],
    "3814998": [
        {
            "dateadded": "2026-04-09 13:24:08 UTC",
            "url": "https://travelconvoy.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814998/",
            "reporter": "anonymous"
        }
    ],
    "3814996": [
        {
            "dateadded": "2026-04-09 13:23:17 UTC",
            "url": "http://129.213.9.74:1339/arm64",
            "url_status": "offline",
            "last_online": "2026-04-11 04:58:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814996/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814997": [
        {
            "dateadded": "2026-04-09 13:23:17 UTC",
            "url": "http://129.213.9.74:1339/arm",
            "url_status": "offline",
            "last_online": "2026-04-11 06:48:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814997/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814995": [
        {
            "dateadded": "2026-04-09 13:22:18 UTC",
            "url": "http://129.213.9.74:1339/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-11 05:18:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814995/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814991": [
        {
            "dateadded": "2026-04-09 13:21:21 UTC",
            "url": "http://129.213.9.74:1339/riscv64",
            "url_status": "offline",
            "last_online": "2026-04-11 03:59:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814991/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814992": [
        {
            "dateadded": "2026-04-09 13:21:21 UTC",
            "url": "http://129.213.9.74:1339/mips",
            "url_status": "offline",
            "last_online": "2026-04-11 05:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814992/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814993": [
        {
            "dateadded": "2026-04-09 13:21:21 UTC",
            "url": "http://129.213.9.74:1339/ppc",
            "url_status": "offline",
            "last_online": "2026-04-11 04:13:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814993/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814994": [
        {
            "dateadded": "2026-04-09 13:21:21 UTC",
            "url": "http://129.213.9.74:1339/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-11 05:13:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814994/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814990": [
        {
            "dateadded": "2026-04-09 13:18:13 UTC",
            "url": "https://jgmwuf2l.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814990/",
            "reporter": "anonymous"
        }
    ],
    "3814989": [
        {
            "dateadded": "2026-04-09 13:17:07 UTC",
            "url": "http://182.122.221.104:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:10:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814989/",
            "reporter": "geenensp"
        }
    ],
    "3814988": [
        {
            "dateadded": "2026-04-09 13:15:15 UTC",
            "url": "http://182.121.225.87:34367/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:32:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814988/",
            "reporter": "geenensp"
        }
    ],
    "3814987": [
        {
            "dateadded": "2026-04-09 13:12:10 UTC",
            "url": "https://4gzx0ikx.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814987/",
            "reporter": "anonymous"
        }
    ],
    "3814986": [
        {
            "dateadded": "2026-04-09 13:08:10 UTC",
            "url": "https://shapefinal.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814986/",
            "reporter": "anonymous"
        }
    ],
    "3814985": [
        {
            "dateadded": "2026-04-09 13:04:41 UTC",
            "url": "http://42.230.30.70:42675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:20:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814985/",
            "reporter": "geenensp"
        }
    ],
    "3814984": [
        {
            "dateadded": "2026-04-09 13:02:15 UTC",
            "url": "https://kerneldiscov.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 13:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814984/",
            "reporter": "anonymous"
        }
    ],
    "3814983": [
        {
            "dateadded": "2026-04-09 13:02:08 UTC",
            "url": "http://123.9.87.108:58800/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:11:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814983/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814982": [
        {
            "dateadded": "2026-04-09 12:59:21 UTC",
            "url": "http://120.28.137.87:59140/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814982/",
            "reporter": "geenensp"
        }
    ],
    "3814981": [
        {
            "dateadded": "2026-04-09 12:56:07 UTC",
            "url": "https://enzyrne-craft.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814981/",
            "reporter": "anonymous"
        }
    ],
    "3814980": [
        {
            "dateadded": "2026-04-09 12:55:20 UTC",
            "url": "http://201.211.79.169:35501/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814980/",
            "reporter": "geenensp"
        }
    ],
    "3814979": [
        {
            "dateadded": "2026-04-09 12:54:37 UTC",
            "url": "http://125.41.241.51:35659/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:06:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814979/",
            "reporter": "geenensp"
        }
    ],
    "3814978": [
        {
            "dateadded": "2026-04-09 12:52:07 UTC",
            "url": "http://123.9.87.108:58800/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:35:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814978/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814977": [
        {
            "dateadded": "2026-04-09 12:51:10 UTC",
            "url": "https://geo-pay1.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814977/",
            "reporter": "anonymous"
        }
    ],
    "3814976": [
        {
            "dateadded": "2026-04-09 12:47:06 UTC",
            "url": "https://i.postimg.cc/L8vbLxGY/image1.png",
            "url_status": "offline",
            "last_online": "2026-04-09 12:47:06 UTC",
            "threat": "malware_download",
            "tags": [
                "DarkCloud"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814976/",
            "reporter": "abuse_ch"
        }
    ],
    "3814975": [
        {
            "dateadded": "2026-04-09 12:46:11 UTC",
            "url": "https://i.postimg.cc/Y06d8kLH/image4.png",
            "url_status": "offline",
            "last_online": "2026-04-09 12:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814975/",
            "reporter": "abuse_ch"
        }
    ],
    "3814974": [
        {
            "dateadded": "2026-04-09 12:46:09 UTC",
            "url": "https://pastefy.app/SHSuwC5f/raw?part=obrmdAn.txt",
            "url_status": "offline",
            "last_online": "2026-04-09 12:46:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814974/",
            "reporter": "abuse_ch"
        }
    ],
    "3814973": [
        {
            "dateadded": "2026-04-09 12:45:08 UTC",
            "url": "https://stackstone.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814973/",
            "reporter": "anonymous"
        }
    ],
    "3814972": [
        {
            "dateadded": "2026-04-09 12:43:44 UTC",
            "url": "http://115.63.44.29:56257/i",
            "url_status": "offline",
            "last_online": "2026-04-09 21:59:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814972/",
            "reporter": "geenensp"
        }
    ],
    "3814971": [
        {
            "dateadded": "2026-04-09 12:39:11 UTC",
            "url": "https://5uv69r.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814971/",
            "reporter": "anonymous"
        }
    ],
    "3814970": [
        {
            "dateadded": "2026-04-09 12:36:14 UTC",
            "url": "http://115.48.160.182:53130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814970/",
            "reporter": "geenensp"
        }
    ],
    "3814969": [
        {
            "dateadded": "2026-04-09 12:34:13 UTC",
            "url": "http://115.54.156.173:60855/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814969/",
            "reporter": "geenensp"
        }
    ],
    "3814968": [
        {
            "dateadded": "2026-04-09 12:33:14 UTC",
            "url": "https://i.postimg.cc/N0GCyfBK/image1.png",
            "url_status": "offline",
            "last_online": "2026-04-09 12:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "DarkCloud"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814968/",
            "reporter": "abuse_ch"
        }
    ],
    "3814967": [
        {
            "dateadded": "2026-04-09 12:33:09 UTC",
            "url": "https://convertamp.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814967/",
            "reporter": "anonymous"
        }
    ],
    "3814966": [
        {
            "dateadded": "2026-04-09 12:28:17 UTC",
            "url": "https://kggm.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:28:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814966/",
            "reporter": "anonymous"
        }
    ],
    "3814965": [
        {
            "dateadded": "2026-04-09 12:23:13 UTC",
            "url": "https://bannerfor.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814965/",
            "reporter": "anonymous"
        }
    ],
    "3814964": [
        {
            "dateadded": "2026-04-09 12:20:11 UTC",
            "url": "https://alt-m1x.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814964/",
            "reporter": "anonymous"
        }
    ],
    "3814963": [
        {
            "dateadded": "2026-04-09 12:17:18 UTC",
            "url": "http://105.184.32.199:35807/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:17:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814963/",
            "reporter": "geenensp"
        }
    ],
    "3814962": [
        {
            "dateadded": "2026-04-09 12:13:09 UTC",
            "url": "http://175.154.118.223:55863/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814962/",
            "reporter": "geenensp"
        }
    ],
    "3814961": [
        {
            "dateadded": "2026-04-09 12:11:06 UTC",
            "url": "https://cr4ft-pulse.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814961/",
            "reporter": "anonymous"
        }
    ],
    "3814960": [
        {
            "dateadded": "2026-04-09 12:09:37 UTC",
            "url": "http://115.54.156.173:60855/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:04:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814960/",
            "reporter": "geenensp"
        }
    ],
    "3814958": [
        {
            "dateadded": "2026-04-09 12:09:16 UTC",
            "url": "http://176.65.139.96/bins/m68k",
            "url_status": "offline",
            "last_online": "2026-04-12 16:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814958/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814959": [
        {
            "dateadded": "2026-04-09 12:09:16 UTC",
            "url": "http://176.65.139.96/bins/sh4",
            "url_status": "offline",
            "last_online": "2026-04-12 16:46:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814959/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814957": [
        {
            "dateadded": "2026-04-09 12:08:18 UTC",
            "url": "http://176.65.139.96/bins/x86",
            "url_status": "offline",
            "last_online": "2026-04-12 17:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814957/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814952": [
        {
            "dateadded": "2026-04-09 12:07:17 UTC",
            "url": "http://176.65.139.96/bins/arm6",
            "url_status": "offline",
            "last_online": "2026-04-13 16:21:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814952/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814953": [
        {
            "dateadded": "2026-04-09 12:07:17 UTC",
            "url": "http://176.65.139.96/bins/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-12 16:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814953/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814954": [
        {
            "dateadded": "2026-04-09 12:07:17 UTC",
            "url": "http://176.65.139.96/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-13 16:07:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814954/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814955": [
        {
            "dateadded": "2026-04-09 12:07:17 UTC",
            "url": "http://176.65.139.96/bins/spc",
            "url_status": "offline",
            "last_online": "2026-04-13 16:16:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814955/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814956": [
        {
            "dateadded": "2026-04-09 12:07:17 UTC",
            "url": "http://176.65.139.96/bins/ppc",
            "url_status": "offline",
            "last_online": "2026-04-13 16:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814956/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814951": [
        {
            "dateadded": "2026-04-09 12:06:18 UTC",
            "url": "http://120.28.137.87:59140/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:48:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814951/",
            "reporter": "geenensp"
        }
    ],
    "3814947": [
        {
            "dateadded": "2026-04-09 12:06:17 UTC",
            "url": "http://176.65.139.96/bins/mips",
            "url_status": "offline",
            "last_online": "2026-04-12 17:31:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814947/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814948": [
        {
            "dateadded": "2026-04-09 12:06:17 UTC",
            "url": "http://176.65.139.96/bins/arm",
            "url_status": "offline",
            "last_online": "2026-04-13 16:26:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814948/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814949": [
        {
            "dateadded": "2026-04-09 12:06:17 UTC",
            "url": "http://176.65.139.96/bins/arm5",
            "url_status": "offline",
            "last_online": "2026-04-12 22:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814949/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814950": [
        {
            "dateadded": "2026-04-09 12:06:17 UTC",
            "url": "http://176.65.139.96/bins/arm7",
            "url_status": "offline",
            "last_online": "2026-04-12 22:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-96",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814950/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814946": [
        {
            "dateadded": "2026-04-09 12:05:09 UTC",
            "url": "https://proto-1oad.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814946/",
            "reporter": "anonymous"
        }
    ],
    "3814945": [
        {
            "dateadded": "2026-04-09 12:04:20 UTC",
            "url": "http://110.37.39.234:42795/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 09:56:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814945/",
            "reporter": "geenensp"
        }
    ],
    "3814944": [
        {
            "dateadded": "2026-04-09 12:04:17 UTC",
            "url": "http://176.65.139.48/n.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 11:56:39 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-48",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814944/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814943": [
        {
            "dateadded": "2026-04-09 12:03:17 UTC",
            "url": "http://125.41.241.51:35659/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:30:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814943/",
            "reporter": "geenensp"
        }
    ],
    "3814942": [
        {
            "dateadded": "2026-04-09 12:02:19 UTC",
            "url": "http://110.36.65.132:44475/i",
            "url_status": "offline",
            "last_online": "2026-04-09 12:02:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814942/",
            "reporter": "geenensp"
        }
    ],
    "3814941": [
        {
            "dateadded": "2026-04-09 12:01:09 UTC",
            "url": "https://fdode.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 12:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814941/",
            "reporter": "anonymous"
        }
    ],
    "3814940": [
        {
            "dateadded": "2026-04-09 11:56:07 UTC",
            "url": "https://road-gate.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814940/",
            "reporter": "anonymous"
        }
    ],
    "3814939": [
        {
            "dateadded": "2026-04-09 11:49:18 UTC",
            "url": "https://next-svc.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814939/",
            "reporter": "anonymous"
        }
    ],
    "3814938": [
        {
            "dateadded": "2026-04-09 11:47:06 UTC",
            "url": "http://125.44.220.143:34386/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:47:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814938/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814937": [
        {
            "dateadded": "2026-04-09 11:45:11 UTC",
            "url": "https://task-vault.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814937/",
            "reporter": "anonymous"
        }
    ],
    "3814936": [
        {
            "dateadded": "2026-04-09 11:40:25 UTC",
            "url": "http://72.255.30.244:60520/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:25:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814936/",
            "reporter": "geenensp"
        }
    ],
    "3814935": [
        {
            "dateadded": "2026-04-09 11:39:10 UTC",
            "url": "http://110.37.39.234:42795/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814935/",
            "reporter": "geenensp"
        }
    ],
    "3814934": [
        {
            "dateadded": "2026-04-09 11:38:18 UTC",
            "url": "http://72.255.30.244:60520/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814934/",
            "reporter": "geenensp"
        }
    ],
    "3814933": [
        {
            "dateadded": "2026-04-09 11:38:10 UTC",
            "url": "https://mark-node.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814933/",
            "reporter": "anonymous"
        }
    ],
    "3814932": [
        {
            "dateadded": "2026-04-09 11:37:18 UTC",
            "url": "http://110.36.65.132:44475/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 11:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814932/",
            "reporter": "geenensp"
        }
    ],
    "3814931": [
        {
            "dateadded": "2026-04-09 11:33:09 UTC",
            "url": "https://plan-api.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814931/",
            "reporter": "anonymous"
        }
    ],
    "3814930": [
        {
            "dateadded": "2026-04-09 11:30:24 UTC",
            "url": "http://42.55.215.79:59775/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814930/",
            "reporter": "geenensp"
        }
    ],
    "3814929": [
        {
            "dateadded": "2026-04-09 11:28:20 UTC",
            "url": "http://111.35.78.2:23117/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:34:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814929/",
            "reporter": "geenensp"
        }
    ],
    "3814928": [
        {
            "dateadded": "2026-04-09 11:28:15 UTC",
            "url": "https://time-step.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:28:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814928/",
            "reporter": "anonymous"
        }
    ],
    "3814927": [
        {
            "dateadded": "2026-04-09 11:22:17 UTC",
            "url": "https://trace-gate.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814927/",
            "reporter": "anonymous"
        }
    ],
    "3814926": [
        {
            "dateadded": "2026-04-09 11:16:14 UTC",
            "url": "https://street-svc.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814926/",
            "reporter": "anonymous"
        }
    ],
    "3814925": [
        {
            "dateadded": "2026-04-09 11:13:14 UTC",
            "url": "https://map-vault.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814925/",
            "reporter": "anonymous"
        }
    ],
    "3814924": [
        {
            "dateadded": "2026-04-09 11:12:24 UTC",
            "url": "http://112.242.11.200:54370/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814924/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814923": [
        {
            "dateadded": "2026-04-09 11:10:10 UTC",
            "url": "https://i.postimg.cc/g2hvSzD8/image.png",
            "url_status": "offline",
            "last_online": "2026-04-09 11:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814923/",
            "reporter": "abuse_ch"
        }
    ],
    "3814922": [
        {
            "dateadded": "2026-04-09 11:09:16 UTC",
            "url": "http://42.230.34.192:38802/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814922/",
            "reporter": "geenensp"
        }
    ],
    "3814921": [
        {
            "dateadded": "2026-04-09 11:09:14 UTC",
            "url": "https://i.postimg.cc/tgpG7gvd/image1.png",
            "url_status": "offline",
            "last_online": "2026-04-09 11:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814921/",
            "reporter": "abuse_ch"
        }
    ],
    "3814920": [
        {
            "dateadded": "2026-04-09 11:09:12 UTC",
            "url": "https://site-node.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814920/",
            "reporter": "anonymous"
        }
    ],
    "3814919": [
        {
            "dateadded": "2026-04-09 11:09:11 UTC",
            "url": "https://i.postimg.cc/44j9qKxj/image.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814919/",
            "reporter": "abuse_ch"
        }
    ],
    "3814918": [
        {
            "dateadded": "2026-04-09 11:09:10 UTC",
            "url": "https://crowe-avvens.site/newoworkable/newoworkable.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814918/",
            "reporter": "abuse_ch"
        }
    ],
    "3814917": [
        {
            "dateadded": "2026-04-09 11:08:12 UTC",
            "url": "https://www.hna-ksa.com/STA/mint.txt",
            "url_status": "offline",
            "last_online": "2026-04-09 15:52:06 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814917/",
            "reporter": "abuse_ch"
        }
    ],
    "3814915": [
        {
            "dateadded": "2026-04-09 11:08:08 UTC",
            "url": "https://www.hna-ksa.com/STA/ikp.txt",
            "url_status": "offline",
            "last_online": "2026-04-09 16:33:24 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814915/",
            "reporter": "abuse_ch"
        }
    ],
    "3814916": [
        {
            "dateadded": "2026-04-09 11:08:08 UTC",
            "url": "https://grupomcperu.com/elementos/mhdcbdc.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:25 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814916/",
            "reporter": "abuse_ch"
        }
    ],
    "3814914": [
        {
            "dateadded": "2026-04-09 11:07:22 UTC",
            "url": "http://42.234.233.150:40641/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:07:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814914/",
            "reporter": "geenensp"
        }
    ],
    "3814913": [
        {
            "dateadded": "2026-04-09 11:07:13 UTC",
            "url": "https://od.lk/d/MTVfODE0Nzg0OTFf/adn.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814913/",
            "reporter": "abuse_ch"
        }
    ],
    "3814912": [
        {
            "dateadded": "2026-04-09 11:06:11 UTC",
            "url": "https://selyoptik.ro/swt3D/DIPS.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814912/",
            "reporter": "abuse_ch"
        }
    ],
    "3814911": [
        {
            "dateadded": "2026-04-09 11:00:17 UTC",
            "url": "https://city-api.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 11:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814911/",
            "reporter": "anonymous"
        }
    ],
    "3814910": [
        {
            "dateadded": "2026-04-09 10:57:23 UTC",
            "url": "http://117.216.13.12:39153/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:57:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814910/",
            "reporter": "geenensp"
        }
    ],
    "3814909": [
        {
            "dateadded": "2026-04-09 10:57:07 UTC",
            "url": "http://5.165.92.80:33719/i",
            "url_status": "offline",
            "last_online": "2026-04-26 05:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814909/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814908": [
        {
            "dateadded": "2026-04-09 10:53:18 UTC",
            "url": "https://area-check.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:53:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814908/",
            "reporter": "anonymous"
        }
    ],
    "3814907": [
        {
            "dateadded": "2026-04-09 10:52:21 UTC",
            "url": "http://123.11.66.141:58535/i",
            "url_status": "offline",
            "last_online": "2026-04-09 15:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814907/",
            "reporter": "geenensp"
        }
    ],
    "3814906": [
        {
            "dateadded": "2026-04-09 10:48:23 UTC",
            "url": "http://42.234.233.150:40641/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:48:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814906/",
            "reporter": "geenensp"
        }
    ],
    "3814905": [
        {
            "dateadded": "2026-04-09 10:48:12 UTC",
            "url": "https://main-gate.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814905/",
            "reporter": "anonymous"
        }
    ],
    "3814904": [
        {
            "dateadded": "2026-04-09 10:45:21 UTC",
            "url": "http://42.242.128.174:43145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814904/",
            "reporter": "geenensp"
        }
    ],
    "3814903": [
        {
            "dateadded": "2026-04-09 10:43:13 UTC",
            "url": "https://info-svc.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814903/",
            "reporter": "anonymous"
        }
    ],
    "3814902": [
        {
            "dateadded": "2026-04-09 10:37:13 UTC",
            "url": "https://page-vault.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814902/",
            "reporter": "anonymous"
        }
    ],
    "3814901": [
        {
            "dateadded": "2026-04-09 10:35:22 UTC",
            "url": "http://115.63.13.122:46533/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814901/",
            "reporter": "geenensp"
        }
    ],
    "3814900": [
        {
            "dateadded": "2026-04-09 10:32:18 UTC",
            "url": "https://word-node.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:32:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814900/",
            "reporter": "anonymous"
        }
    ],
    "3814899": [
        {
            "dateadded": "2026-04-09 10:31:34 UTC",
            "url": "http://117.216.13.12:39153/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:31:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814899/",
            "reporter": "geenensp"
        }
    ],
    "3814897": [
        {
            "dateadded": "2026-04-09 10:27:09 UTC",
            "url": "http://110.37.5.37:53724/i",
            "url_status": "offline",
            "last_online": "2026-04-10 05:17:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814897/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814898": [
        {
            "dateadded": "2026-04-09 10:27:09 UTC",
            "url": "http://222.220.145.217:46710/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:12:42 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814898/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814896": [
        {
            "dateadded": "2026-04-09 10:26:10 UTC",
            "url": "https://book-api.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814896/",
            "reporter": "anonymous"
        }
    ],
    "3814895": [
        {
            "dateadded": "2026-04-09 10:23:13 UTC",
            "url": "http://110.37.1.162:58224/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814895/",
            "reporter": "geenensp"
        }
    ],
    "3814894": [
        {
            "dateadded": "2026-04-09 10:21:15 UTC",
            "url": "https://text-read.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814894/",
            "reporter": "anonymous"
        }
    ],
    "3814893": [
        {
            "dateadded": "2026-04-09 10:14:17 UTC",
            "url": "https://trust-gate.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814893/",
            "reporter": "anonymous"
        }
    ],
    "3814891": [
        {
            "dateadded": "2026-04-09 10:12:08 UTC",
            "url": "http://123.10.144.19:36103/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814891/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814892": [
        {
            "dateadded": "2026-04-09 10:12:08 UTC",
            "url": "http://123.10.144.19:36103/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814892/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814890": [
        {
            "dateadded": "2026-04-09 10:09:14 UTC",
            "url": "https://pay-svc.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814890/",
            "reporter": "anonymous"
        }
    ],
    "3814889": [
        {
            "dateadded": "2026-04-09 10:07:09 UTC",
            "url": "http://222.220.145.217:46710/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 18:44:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814889/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814888": [
        {
            "dateadded": "2026-04-09 10:03:13 UTC",
            "url": "https://safe-vault.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 10:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814888/",
            "reporter": "anonymous"
        }
    ],
    "3814887": [
        {
            "dateadded": "2026-04-09 09:58:26 UTC",
            "url": "http://117.214.87.9:46869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 21:58:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814887/",
            "reporter": "geenensp"
        }
    ],
    "3814886": [
        {
            "dateadded": "2026-04-09 09:58:14 UTC",
            "url": "https://bank-node.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814886/",
            "reporter": "anonymous"
        }
    ],
    "3814885": [
        {
            "dateadded": "2026-04-09 09:52:12 UTC",
            "url": "https://loan-api.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814885/",
            "reporter": "anonymous"
        }
    ],
    "3814884": [
        {
            "dateadded": "2026-04-09 09:51:17 UTC",
            "url": "http://125.41.227.10:54799/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:05:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814884/",
            "reporter": "geenensp"
        }
    ],
    "3814883": [
        {
            "dateadded": "2026-04-09 09:47:12 UTC",
            "url": "https://cash-flow.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814883/",
            "reporter": "anonymous"
        }
    ],
    "3814882": [
        {
            "dateadded": "2026-04-09 09:41:12 UTC",
            "url": "https://mark-gate.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814882/",
            "reporter": "anonymous"
        }
    ],
    "3814881": [
        {
            "dateadded": "2026-04-09 09:38:09 UTC",
            "url": "https://file-svc.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814881/",
            "reporter": "anonymous"
        }
    ],
    "3814880": [
        {
            "dateadded": "2026-04-09 09:38:08 UTC",
            "url": "http://125.41.227.10:54799/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814880/",
            "reporter": "geenensp"
        }
    ],
    "3814879": [
        {
            "dateadded": "2026-04-09 09:34:07 UTC",
            "url": "https://pack-vault.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814879/",
            "reporter": "anonymous"
        }
    ],
    "3814878": [
        {
            "dateadded": "2026-04-09 09:29:20 UTC",
            "url": "http://222.140.215.115:53324/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814878/",
            "reporter": "geenensp"
        }
    ],
    "3814877": [
        {
            "dateadded": "2026-04-09 09:26:19 UTC",
            "url": "http://110.37.106.206:52727/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:53:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814877/",
            "reporter": "geenensp"
        }
    ],
    "3814876": [
        {
            "dateadded": "2026-04-09 09:24:11 UTC",
            "url": "https://soft-node.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814876/",
            "reporter": "anonymous"
        }
    ],
    "3814875": [
        {
            "dateadded": "2026-04-09 09:23:26 UTC",
            "url": "https://aona.s3.cubbit.eu/FgAkmfI.txt",
            "url_status": "offline",
            "last_online": "2026-04-09 10:52:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "PhantomStealer",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814875/",
            "reporter": "abuse_ch"
        }
    ],
    "3814874": [
        {
            "dateadded": "2026-04-09 09:23:18 UTC",
            "url": "https://vault88x.secure-efficient2.su/MSI_105759.png",
            "url_status": "offline",
            "last_online": "2026-04-21 10:48:50 UTC",
            "threat": "malware_download",
            "tags": [
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814874/",
            "reporter": "abuse_ch"
        }
    ],
    "3814873": [
        {
            "dateadded": "2026-04-09 09:23:11 UTC",
            "url": "https://vault88x.secure-efficient2.su/img_085027.png",
            "url_status": "offline",
            "last_online": "2026-04-21 12:01:49 UTC",
            "threat": "malware_download",
            "tags": [
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814873/",
            "reporter": "abuse_ch"
        }
    ],
    "3814872": [
        {
            "dateadded": "2026-04-09 09:23:08 UTC",
            "url": "https://nrmlogistics.ro/img_174236.png",
            "url_status": "offline",
            "last_online": "2026-04-09 10:02:27 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814872/",
            "reporter": "abuse_ch"
        }
    ],
    "3814871": [
        {
            "dateadded": "2026-04-09 09:22:13 UTC",
            "url": "http://115.57.8.219:60615/i",
            "url_status": "offline",
            "last_online": "2026-04-10 05:21:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814871/",
            "reporter": "geenensp"
        }
    ],
    "3814870": [
        {
            "dateadded": "2026-04-09 09:22:12 UTC",
            "url": "https://nrmlogistics.ro/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-20 06:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814870/",
            "reporter": "abuse_ch"
        }
    ],
    "3814869": [
        {
            "dateadded": "2026-04-09 09:22:06 UTC",
            "url": "http://110.37.28.65:57907/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:13:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814869/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814868": [
        {
            "dateadded": "2026-04-09 09:21:11 UTC",
            "url": "https://aona.s3.cubbit.eu/igkjakc.txt",
            "url_status": "offline",
            "last_online": "2026-04-09 11:26:29 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814868/",
            "reporter": "abuse_ch"
        }
    ],
    "3814867": [
        {
            "dateadded": "2026-04-09 09:20:17 UTC",
            "url": "https://crowe-avvens.site/newoworkable/aegbFib.txt",
            "url_status": "offline",
            "last_online": "2026-04-09 09:20:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814867/",
            "reporter": "abuse_ch"
        }
    ],
    "3814866": [
        {
            "dateadded": "2026-04-09 09:20:13 UTC",
            "url": "https://i.postimg.cc/x12dc3zT/image.png",
            "url_status": "offline",
            "last_online": "2026-04-09 09:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814866/",
            "reporter": "abuse_ch"
        }
    ],
    "3814865": [
        {
            "dateadded": "2026-04-09 09:19:14 UTC",
            "url": "https://innovspora.co.zw/1314242/DIPS.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "opendir",
                "powershell",
                "ps1",
                "VIPKeylogger"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814865/",
            "reporter": "abuse_ch"
        }
    ],
    "3814864": [
        {
            "dateadded": "2026-04-09 09:19:11 UTC",
            "url": "https://wrap-api.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814864/",
            "reporter": "anonymous"
        }
    ],
    "3814863": [
        {
            "dateadded": "2026-04-09 09:17:10 UTC",
            "url": "http://178.16.53.75/mp/rbgrdcf.txt",
            "url_status": "offline",
            "last_online": "2026-04-11 06:47:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "rev-base64-loader",
                "StrelaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814863/",
            "reporter": "abuse_ch"
        }
    ],
    "3814862": [
        {
            "dateadded": "2026-04-09 09:16:06 UTC",
            "url": "https://hasteb.in/ii5PfCz83aTcDgK",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "StrelaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814862/",
            "reporter": "abuse_ch"
        }
    ],
    "3814861": [
        {
            "dateadded": "2026-04-09 09:13:08 UTC",
            "url": "https://fold-sync.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814861/",
            "reporter": "anonymous"
        }
    ],
    "3814860": [
        {
            "dateadded": "2026-04-09 09:12:07 UTC",
            "url": "http://222.138.150.240:34110/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:30:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814860/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814859": [
        {
            "dateadded": "2026-04-09 09:09:14 UTC",
            "url": "https://i.postimg.cc/R0B3TQyB/image-1.png",
            "url_status": "offline",
            "last_online": "2026-04-09 09:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814859/",
            "reporter": "abuse_ch"
        }
    ],
    "3814858": [
        {
            "dateadded": "2026-04-09 09:08:15 UTC",
            "url": "https://files.catbox.moe/7esw3p.dat",
            "url_status": "offline",
            "last_online": "2026-04-10 04:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "StrelaStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814858/",
            "reporter": "abuse_ch"
        }
    ],
    "3814857": [
        {
            "dateadded": "2026-04-09 09:07:14 UTC",
            "url": "https://path-hub.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814857/",
            "reporter": "anonymous"
        }
    ],
    "3814856": [
        {
            "dateadded": "2026-04-09 09:05:14 UTC",
            "url": "https://accessible-peach-termite.myfilebase.com/ipfs/QmVzGgstGZeBYcqnvndsS3fDWp8Dixo4UAX1exjGmSaSVn?download=true&filename=7777778.txt",
            "url_status": "offline",
            "last_online": "2026-04-10 17:32:38 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814856/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814854": [
        {
            "dateadded": "2026-04-09 09:05:11 UTC",
            "url": "http://119.179.215.101:56241/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:19:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814854/",
            "reporter": "geenensp"
        }
    ],
    "3814855": [
        {
            "dateadded": "2026-04-09 09:05:11 UTC",
            "url": "https://accessible-peach-termite.myfilebase.com/ipfs/QmVzGgstGZeBYcqnvndsS3fDWp8Dixo4UAX1exjGmSaSVn?",
            "url_status": "offline",
            "last_online": "2026-04-10 16:54:23 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814855/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814853": [
        {
            "dateadded": "2026-04-09 09:04:15 UTC",
            "url": "http://222.140.215.115:53324/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814853/",
            "reporter": "geenensp"
        }
    ],
    "3814852": [
        {
            "dateadded": "2026-04-09 09:03:18 UTC",
            "url": "http://124.66.32.186:51237/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814852/",
            "reporter": "geenensp"
        }
    ],
    "3814851": [
        {
            "dateadded": "2026-04-09 09:03:09 UTC",
            "url": "https://site-svc.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 09:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814851/",
            "reporter": "anonymous"
        }
    ],
    "3814850": [
        {
            "dateadded": "2026-04-09 09:00:29 UTC",
            "url": "http://113.221.13.156:38728/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814850/",
            "reporter": "geenensp"
        }
    ],
    "3814849": [
        {
            "dateadded": "2026-04-09 08:57:08 UTC",
            "url": "http://222.138.150.240:34110/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 15:55:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814849/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814848": [
        {
            "dateadded": "2026-04-09 08:56:14 UTC",
            "url": "https://dry-vault.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814848/",
            "reporter": "anonymous"
        }
    ],
    "3814847": [
        {
            "dateadded": "2026-04-09 08:51:15 UTC",
            "url": "https://map-node.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:51:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814847/",
            "reporter": "anonymous"
        }
    ],
    "3814846": [
        {
            "dateadded": "2026-04-09 08:47:12 UTC",
            "url": "http://119.179.215.101:56241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814846/",
            "reporter": "geenensp"
        }
    ],
    "3814845": [
        {
            "dateadded": "2026-04-09 08:46:19 UTC",
            "url": "http://123.12.244.173:37166/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:49:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814845/",
            "reporter": "geenensp"
        }
    ],
    "3814844": [
        {
            "dateadded": "2026-04-09 08:44:07 UTC",
            "url": "https://area-api.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814844/",
            "reporter": "anonymous"
        }
    ],
    "3814843": [
        {
            "dateadded": "2026-04-09 08:41:11 UTC",
            "url": "http://115.57.8.219:60615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:58:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814843/",
            "reporter": "geenensp"
        }
    ],
    "3814842": [
        {
            "dateadded": "2026-04-09 08:40:15 UTC",
            "url": "https://sand-logic.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814842/",
            "reporter": "anonymous"
        }
    ],
    "3814841": [
        {
            "dateadded": "2026-04-09 08:36:17 UTC",
            "url": "http://182.148.204.134:58675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:40:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814841/",
            "reporter": "geenensp"
        }
    ],
    "3814840": [
        {
            "dateadded": "2026-04-09 08:34:13 UTC",
            "url": "https://grid-gate.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814840/",
            "reporter": "anonymous"
        }
    ],
    "3814839": [
        {
            "dateadded": "2026-04-09 08:33:18 UTC",
            "url": "http://113.221.13.156:38728/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 16:36:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814839/",
            "reporter": "geenensp"
        }
    ],
    "3814838": [
        {
            "dateadded": "2026-04-09 08:29:19 UTC",
            "url": "http://182.121.228.151:41095/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:43:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814838/",
            "reporter": "geenensp"
        }
    ],
    "3814837": [
        {
            "dateadded": "2026-04-09 08:29:13 UTC",
            "url": "https://micro-svc.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814837/",
            "reporter": "anonymous"
        }
    ],
    "3814836": [
        {
            "dateadded": "2026-04-09 08:29:11 UTC",
            "url": "https://res.cloudinary.com/dkylpyldt/image/upload/v1775485198/rump_clyv7g.jpg",
            "url_status": "offline",
            "last_online": "2026-04-13 04:21:57 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814836/",
            "reporter": "abuse_ch"
        }
    ],
    "3814835": [
        {
            "dateadded": "2026-04-09 08:29:07 UTC",
            "url": "https://res.cloudinary.com/dkylpyldt/image/upload/v1775485483/origin_kaqiyp.jpg",
            "url_status": "offline",
            "last_online": "2026-04-13 10:10:50 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814835/",
            "reporter": "abuse_ch"
        }
    ],
    "3814834": [
        {
            "dateadded": "2026-04-09 08:28:10 UTC",
            "url": "https://firebasestorage.googleapis.com/v0/b/spenglercomics.firebasestorage.app/o/task.txt?alt=media&token=f162f5ce-52f7-4407-8cc4-dd96cedd9b0e",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "AsyncRAT",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814834/",
            "reporter": "abuse_ch"
        }
    ],
    "3814833": [
        {
            "dateadded": "2026-04-09 08:27:16 UTC",
            "url": "https://accessible-peach-termite.myfilebase.com/ipfs/QmVcz1Lehhbv5V72FZqhKicrAFKg9j1erVeSHXLs2QMqCP",
            "url_status": "offline",
            "last_online": "2026-04-10 16:22:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Formbook",
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814833/",
            "reporter": "abuse_ch"
        }
    ],
    "3814832": [
        {
            "dateadded": "2026-04-09 08:26:18 UTC",
            "url": "https://accessible-peach-termite.myfilebase.com/ipfs/QmWHGWhRiZ1Fp5tMV32NUNcNkozWxETxQAc38xn7DuvyXR",
            "url_status": "offline",
            "last_online": "2026-04-10 16:55:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "base64-loader",
                "Formbook"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814832/",
            "reporter": "abuse_ch"
        }
    ],
    "3814831": [
        {
            "dateadded": "2026-04-09 08:25:34 UTC",
            "url": "http://107.175.246.40/Skifteda.deploy",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:06 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "Encoded",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814831/",
            "reporter": "abuse_ch"
        }
    ],
    "3814830": [
        {
            "dateadded": "2026-04-09 08:25:33 UTC",
            "url": "http://107.175.246.40/idfWcHWVXIWe19.bin",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:27 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814830/",
            "reporter": "abuse_ch"
        }
    ],
    "3814829": [
        {
            "dateadded": "2026-04-09 08:22:07 UTC",
            "url": "http://115.52.19.44:39122/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:11:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814829/",
            "reporter": "geenensp"
        }
    ],
    "3814828": [
        {
            "dateadded": "2026-04-09 08:22:06 UTC",
            "url": "https://cell-vault.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814828/",
            "reporter": "anonymous"
        }
    ],
    "3814827": [
        {
            "dateadded": "2026-04-09 08:17:22 UTC",
            "url": "https://unit-node.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814827/",
            "reporter": "anonymous"
        }
    ],
    "3814826": [
        {
            "dateadded": "2026-04-09 08:11:11 UTC",
            "url": "https://small-api.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814826/",
            "reporter": "anonymous"
        }
    ],
    "3814825": [
        {
            "dateadded": "2026-04-09 08:09:20 UTC",
            "url": "http://123.12.244.173:37166/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:30:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814825/",
            "reporter": "geenensp"
        }
    ],
    "3814824": [
        {
            "dateadded": "2026-04-09 08:06:13 UTC",
            "url": "https://nano-tech.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814824/",
            "reporter": "anonymous"
        }
    ],
    "3814823": [
        {
            "dateadded": "2026-04-09 08:02:18 UTC",
            "url": "http://123.12.192.5:38611/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:29:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814823/",
            "reporter": "geenensp"
        }
    ],
    "3814822": [
        {
            "dateadded": "2026-04-09 08:00:20 UTC",
            "url": "http://119.163.183.73:33363/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:24:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814822/",
            "reporter": "geenensp"
        }
    ],
    "3814821": [
        {
            "dateadded": "2026-04-09 08:00:13 UTC",
            "url": "https://root-gate.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 08:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814821/",
            "reporter": "anonymous"
        }
    ],
    "3814820": [
        {
            "dateadded": "2026-04-09 07:58:08 UTC",
            "url": "http://172.245.95.24/festusfile.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:05:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814820/",
            "reporter": "abuse_ch"
        }
    ],
    "3814819": [
        {
            "dateadded": "2026-04-09 07:58:07 UTC",
            "url": "http://172.245.95.24/rump.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814819/",
            "reporter": "abuse_ch"
        }
    ],
    "3814818": [
        {
            "dateadded": "2026-04-09 07:54:13 UTC",
            "url": "https://trade-svc.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814818/",
            "reporter": "anonymous"
        }
    ],
    "3814816": [
        {
            "dateadded": "2026-04-09 07:50:18 UTC",
            "url": "http://115.52.19.44:39122/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814816/",
            "reporter": "geenensp"
        }
    ],
    "3814817": [
        {
            "dateadded": "2026-04-09 07:50:18 UTC",
            "url": "http://42.229.155.79:56863/i",
            "url_status": "offline",
            "last_online": "2026-04-11 06:45:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814817/",
            "reporter": "geenensp"
        }
    ],
    "3814815": [
        {
            "dateadded": "2026-04-09 07:49:10 UTC",
            "url": "https://store-vault.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814815/",
            "reporter": "anonymous"
        }
    ],
    "3814814": [
        {
            "dateadded": "2026-04-09 07:47:06 UTC",
            "url": "http://125.47.227.12:40682/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814814/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814813": [
        {
            "dateadded": "2026-04-09 07:37:06 UTC",
            "url": "https://farm-api.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:37:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814813/",
            "reporter": "anonymous"
        }
    ],
    "3814812": [
        {
            "dateadded": "2026-04-09 07:33:10 UTC",
            "url": "https://grain-log.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814812/",
            "reporter": "anonymous"
        }
    ],
    "3814811": [
        {
            "dateadded": "2026-04-09 07:32:20 UTC",
            "url": "http://42.229.155.79:56863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814811/",
            "reporter": "geenensp"
        }
    ],
    "3814810": [
        {
            "dateadded": "2026-04-09 07:32:19 UTC",
            "url": "http://182.121.228.151:41095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814810/",
            "reporter": "geenensp"
        }
    ],
    "3814809": [
        {
            "dateadded": "2026-04-09 07:30:23 UTC",
            "url": "http://119.163.183.73:33363/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814809/",
            "reporter": "geenensp"
        }
    ],
    "3814808": [
        {
            "dateadded": "2026-04-09 07:27:06 UTC",
            "url": "https://soil-hub.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814808/",
            "reporter": "anonymous"
        }
    ],
    "3814807": [
        {
            "dateadded": "2026-04-09 07:24:08 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.arm5",
            "url_status": "offline",
            "last_online": "2026-04-09 07:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814807/",
            "reporter": "adliwahid"
        }
    ],
    "3814803": [
        {
            "dateadded": "2026-04-09 07:23:12 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814803/",
            "reporter": "adliwahid"
        }
    ],
    "3814804": [
        {
            "dateadded": "2026-04-09 07:23:12 UTC",
            "url": "http://206.189.93.37/Hammz.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814804/",
            "reporter": "adliwahid"
        }
    ],
    "3814805": [
        {
            "dateadded": "2026-04-09 07:23:12 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.arm7",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814805/",
            "reporter": "adliwahid"
        }
    ],
    "3814806": [
        {
            "dateadded": "2026-04-09 07:23:12 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.mips",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814806/",
            "reporter": "adliwahid"
        }
    ],
    "3814801": [
        {
            "dateadded": "2026-04-09 07:23:11 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.arm6",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814801/",
            "reporter": "adliwahid"
        }
    ],
    "3814802": [
        {
            "dateadded": "2026-04-09 07:23:11 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.x86",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814802/",
            "reporter": "adliwahid"
        }
    ],
    "3814793": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.ppc",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814793/",
            "reporter": "adliwahid"
        }
    ],
    "3814794": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.arm",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814794/",
            "reporter": "adliwahid"
        }
    ],
    "3814795": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814795/",
            "reporter": "adliwahid"
        }
    ],
    "3814796": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.arc",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814796/",
            "reporter": "adliwahid"
        }
    ],
    "3814797": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.i686",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814797/",
            "reporter": "adliwahid"
        }
    ],
    "3814798": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.sh4",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814798/",
            "reporter": "adliwahid"
        }
    ],
    "3814799": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.m68k",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814799/",
            "reporter": "adliwahid"
        }
    ],
    "3814800": [
        {
            "dateadded": "2026-04-09 07:23:10 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.spc",
            "url_status": "offline",
            "last_online": "2026-04-09 07:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814800/",
            "reporter": "adliwahid"
        }
    ],
    "3814792": [
        {
            "dateadded": "2026-04-09 07:22:07 UTC",
            "url": "https://base-svc.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814792/",
            "reporter": "anonymous"
        }
    ],
    "3814791": [
        {
            "dateadded": "2026-04-09 07:19:10 UTC",
            "url": "https://pub-2ac530845a0b40f68c46df8146d4315a.r2.dev/scamily.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814791/",
            "reporter": "abuse_ch"
        }
    ],
    "3814790": [
        {
            "dateadded": "2026-04-09 07:17:09 UTC",
            "url": "http://222.139.226.86:41102/i",
            "url_status": "offline",
            "last_online": "2026-04-09 07:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814790/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814789": [
        {
            "dateadded": "2026-04-09 07:16:07 UTC",
            "url": "https://grow-vault.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814789/",
            "reporter": "anonymous"
        }
    ],
    "3814788": [
        {
            "dateadded": "2026-04-09 07:15:20 UTC",
            "url": "http://206.189.93.37/Hammz/Hammz.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814788/",
            "reporter": "abuse_ch"
        }
    ],
    "3814787": [
        {
            "dateadded": "2026-04-09 07:14:08 UTC",
            "url": "http://38.240.58.33:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
            "url_status": "offline",
            "last_online": "2026-04-09 11:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814787/",
            "reporter": "abuse_ch"
        }
    ],
    "3814786": [
        {
            "dateadded": "2026-04-09 07:13:20 UTC",
            "url": "http://182.122.221.104:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-10 03:58:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814786/",
            "reporter": "geenensp"
        }
    ],
    "3814785": [
        {
            "dateadded": "2026-04-09 07:09:06 UTC",
            "url": "https://land-node.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:09:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814785/",
            "reporter": "anonymous"
        }
    ],
    "3814784": [
        {
            "dateadded": "2026-04-09 07:04:06 UTC",
            "url": "https://crop-api.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 07:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814784/",
            "reporter": "anonymous"
        }
    ],
    "3814782": [
        {
            "dateadded": "2026-04-09 07:02:08 UTC",
            "url": "http://107.175.246.40/rlfOXsZxho57.bin",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:29 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814782/",
            "reporter": "abuse_ch"
        }
    ],
    "3814783": [
        {
            "dateadded": "2026-04-09 07:02:08 UTC",
            "url": "http://107.175.246.40/Hist.deploy",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:31 UTC",
            "threat": "malware_download",
            "tags": [
                "AgentTesla",
                "ascii",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814783/",
            "reporter": "abuse_ch"
        }
    ],
    "3814781": [
        {
            "dateadded": "2026-04-09 07:00:21 UTC",
            "url": "http://61.53.125.145:34847/i",
            "url_status": "offline",
            "last_online": "2026-04-09 21:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814781/",
            "reporter": "geenensp"
        }
    ],
    "3814780": [
        {
            "dateadded": "2026-04-09 06:53:12 UTC",
            "url": "https://sync-hub.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814780/",
            "reporter": "anonymous"
        }
    ],
    "3814779": [
        {
            "dateadded": "2026-04-09 06:52:13 UTC",
            "url": "http://115.59.237.1:39398/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:28:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814779/",
            "reporter": "geenensp"
        }
    ],
    "3814778": [
        {
            "dateadded": "2026-04-09 06:50:17 UTC",
            "url": "http://105.184.32.53:44183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 15:52:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814778/",
            "reporter": "geenensp"
        }
    ],
    "3814777": [
        {
            "dateadded": "2026-04-09 06:48:09 UTC",
            "url": "https://svc-relay.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814777/",
            "reporter": "anonymous"
        }
    ],
    "3814776": [
        {
            "dateadded": "2026-04-09 06:48:07 UTC",
            "url": "http://219.156.97.19:41501/i",
            "url_status": "offline",
            "last_online": "2026-04-10 03:57:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814776/",
            "reporter": "adliwahid"
        }
    ],
    "3814775": [
        {
            "dateadded": "2026-04-09 06:47:12 UTC",
            "url": "http://60.178.147.73:45208/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814775/",
            "reporter": "adliwahid"
        }
    ],
    "3814773": [
        {
            "dateadded": "2026-04-09 06:47:11 UTC",
            "url": "http://190.55.14.216:38506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 06:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814773/",
            "reporter": "adliwahid"
        }
    ],
    "3814774": [
        {
            "dateadded": "2026-04-09 06:47:11 UTC",
            "url": "http://175.173.81.202:60789/i",
            "url_status": "offline",
            "last_online": "2026-04-09 06:47:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814774/",
            "reporter": "adliwahid"
        }
    ],
    "3814770": [
        {
            "dateadded": "2026-04-09 06:47:10 UTC",
            "url": "http://105.184.9.215:46369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 15:49:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814770/",
            "reporter": "adliwahid"
        }
    ],
    "3814771": [
        {
            "dateadded": "2026-04-09 06:47:10 UTC",
            "url": "http://61.52.39.11:37402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:28:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814771/",
            "reporter": "adliwahid"
        }
    ],
    "3814772": [
        {
            "dateadded": "2026-04-09 06:47:10 UTC",
            "url": "http://219.156.97.19:41501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814772/",
            "reporter": "adliwahid"
        }
    ],
    "3814762": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://42.228.32.25:34766/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 06:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814762/",
            "reporter": "adliwahid"
        }
    ],
    "3814763": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://117.245.136.13:38147/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814763/",
            "reporter": "adliwahid"
        }
    ],
    "3814764": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://42.228.32.25:34766/i",
            "url_status": "offline",
            "last_online": "2026-04-09 06:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814764/",
            "reporter": "adliwahid"
        }
    ],
    "3814765": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://121.167.209.164:40197/.i",
            "url_status": "online",
            "last_online": "2026-04-27 11:50:27 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814765/",
            "reporter": "adliwahid"
        }
    ],
    "3814766": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://46.6.10.120:16726/.i",
            "url_status": "offline",
            "last_online": "2026-04-26 23:17:43 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814766/",
            "reporter": "adliwahid"
        }
    ],
    "3814767": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://182.96.165.76:40517/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:56:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814767/",
            "reporter": "adliwahid"
        }
    ],
    "3814768": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://182.96.165.76:40517/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814768/",
            "reporter": "adliwahid"
        }
    ],
    "3814769": [
        {
            "dateadded": "2026-04-09 06:47:09 UTC",
            "url": "http://61.52.39.11:37402/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:33:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814769/",
            "reporter": "adliwahid"
        }
    ],
    "3814761": [
        {
            "dateadded": "2026-04-09 06:47:08 UTC",
            "url": "http://178.165.125.212:41472/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 04:50:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814761/",
            "reporter": "adliwahid"
        }
    ],
    "3814760": [
        {
            "dateadded": "2026-04-09 06:44:11 UTC",
            "url": "http://182.121.77.87:60007/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:57:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814760/",
            "reporter": "geenensp"
        }
    ],
    "3814759": [
        {
            "dateadded": "2026-04-09 06:42:18 UTC",
            "url": "https://data-vault.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814759/",
            "reporter": "anonymous"
        }
    ],
    "3814758": [
        {
            "dateadded": "2026-04-09 06:42:08 UTC",
            "url": "http://125.47.227.12:40682/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 18:57:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814758/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814757": [
        {
            "dateadded": "2026-04-09 06:37:05 UTC",
            "url": "http://85.239.147.6/files/8329928896/7OtV2gJ.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814757/",
            "reporter": "Bitsight"
        }
    ],
    "3814756": [
        {
            "dateadded": "2026-04-09 06:36:11 UTC",
            "url": "https://host-node.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814756/",
            "reporter": "anonymous"
        }
    ],
    "3814755": [
        {
            "dateadded": "2026-04-09 06:30:13 UTC",
            "url": "https://core-api.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814755/",
            "reporter": "anonymous"
        }
    ],
    "3814754": [
        {
            "dateadded": "2026-04-09 06:28:17 UTC",
            "url": "http://182.121.77.87:60007/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814754/",
            "reporter": "geenensp"
        }
    ],
    "3814753": [
        {
            "dateadded": "2026-04-09 06:28:09 UTC",
            "url": "http://105.184.32.199:35807/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:42:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814753/",
            "reporter": "geenensp"
        }
    ],
    "3814752": [
        {
            "dateadded": "2026-04-09 06:25:14 UTC",
            "url": "https://main-gate.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814752/",
            "reporter": "anonymous"
        }
    ],
    "3814751": [
        {
            "dateadded": "2026-04-09 06:20:09 UTC",
            "url": "https://vector-gate.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814751/",
            "reporter": "anonymous"
        }
    ],
    "3814750": [
        {
            "dateadded": "2026-04-09 06:19:19 UTC",
            "url": "http://115.59.237.1:39398/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814750/",
            "reporter": "geenensp"
        }
    ],
    "3814749": [
        {
            "dateadded": "2026-04-09 06:18:20 UTC",
            "url": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/encrypted.hta",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta",
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814749/",
            "reporter": "abuse_ch"
        }
    ],
    "3814747": [
        {
            "dateadded": "2026-04-09 06:18:10 UTC",
            "url": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/WindowsLogonService.bat",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "bat",
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814747/",
            "reporter": "abuse_ch"
        }
    ],
    "3814748": [
        {
            "dateadded": "2026-04-09 06:18:10 UTC",
            "url": "https://github.com/demarcusnofatherington420-a11y/ScriptInstaller/raw/refs/heads/main/Pulsar-Client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:39:49 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "njRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814748/",
            "reporter": "abuse_ch"
        }
    ],
    "3814746": [
        {
            "dateadded": "2026-04-09 06:18:07 UTC",
            "url": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/MaybeWorking.hta",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814746/",
            "reporter": "abuse_ch"
        }
    ],
    "3814745": [
        {
            "dateadded": "2026-04-09 06:17:18 UTC",
            "url": "http://38.226.161.86:49549/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:59:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814745/",
            "reporter": "geenensp"
        }
    ],
    "3814744": [
        {
            "dateadded": "2026-04-09 06:17:14 UTC",
            "url": "https://github.com/demarcusnofatherington420-a11y/ScriptInstaller/raw/refs/heads/main/test/123123.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:55 UTC",
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814744/",
            "reporter": "abuse_ch"
        }
    ],
    "3814742": [
        {
            "dateadded": "2026-04-09 06:17:10 UTC",
            "url": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/RickOwens/refs/heads/main/encrypted.hta",
            "url_status": "online",
            "last_online": "2026-04-27 12:18:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta",
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814742/",
            "reporter": "abuse_ch"
        }
    ],
    "3814743": [
        {
            "dateadded": "2026-04-09 06:17:10 UTC",
            "url": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/DetectionRateTesting.hta",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta",
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814743/",
            "reporter": "abuse_ch"
        }
    ],
    "3814741": [
        {
            "dateadded": "2026-04-09 06:17:09 UTC",
            "url": "https://github.com/demarcusnofatherington420-a11y/RickOwens/raw/refs/heads/main/Pulsar-Client.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:58 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "njRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814741/",
            "reporter": "abuse_ch"
        }
    ],
    "3814740": [
        {
            "dateadded": "2026-04-09 06:17:06 UTC",
            "url": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/test/encrypted.hta",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "hta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814740/",
            "reporter": "abuse_ch"
        }
    ],
    "3814739": [
        {
            "dateadded": "2026-04-09 06:13:11 UTC",
            "url": "https://think-hub.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814739/",
            "reporter": "anonymous"
        }
    ],
    "3814738": [
        {
            "dateadded": "2026-04-09 06:07:08 UTC",
            "url": "https://brain-svc.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814738/",
            "reporter": "anonymous"
        }
    ],
    "3814737": [
        {
            "dateadded": "2026-04-09 06:03:09 UTC",
            "url": "https://sense-vault.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 06:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814737/",
            "reporter": "anonymous"
        }
    ],
    "3814736": [
        {
            "dateadded": "2026-04-09 05:57:07 UTC",
            "url": "http://75.1.240.64:60897/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:28:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814736/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814735": [
        {
            "dateadded": "2026-04-09 05:56:08 UTC",
            "url": "https://neural-node.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814735/",
            "reporter": "anonymous"
        }
    ],
    "3814734": [
        {
            "dateadded": "2026-04-09 05:53:25 UTC",
            "url": "http://42.226.207.100:57576/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814734/",
            "reporter": "geenensp"
        }
    ],
    "3814733": [
        {
            "dateadded": "2026-04-09 05:52:12 UTC",
            "url": "https://flux-api.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814733/",
            "reporter": "anonymous"
        }
    ],
    "3814732": [
        {
            "dateadded": "2026-04-09 05:52:07 UTC",
            "url": "http://160.30.142.2:38824/i",
            "url_status": "offline",
            "last_online": "2026-04-15 05:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814732/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814731": [
        {
            "dateadded": "2026-04-09 05:49:09 UTC",
            "url": "http://83.219.1.198:33984/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814731/",
            "reporter": "geenensp"
        }
    ],
    "3814730": [
        {
            "dateadded": "2026-04-09 05:47:13 UTC",
            "url": "https://main-gate.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814730/",
            "reporter": "anonymous"
        }
    ],
    "3814729": [
        {
            "dateadded": "2026-04-09 05:40:11 UTC",
            "url": "https://core-hub.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814729/",
            "reporter": "anonymous"
        }
    ],
    "3814728": [
        {
            "dateadded": "2026-04-09 05:34:08 UTC",
            "url": "https://order-svc.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814728/",
            "reporter": "anonymous"
        }
    ],
    "3814727": [
        {
            "dateadded": "2026-04-09 05:32:09 UTC",
            "url": "http://75.1.240.64:60897/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:03:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814727/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814725": [
        {
            "dateadded": "2026-04-09 05:29:12 UTC",
            "url": "http://27.215.52.126:44803/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:07:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814725/",
            "reporter": "geenensp"
        }
    ],
    "3814726": [
        {
            "dateadded": "2026-04-09 05:29:12 UTC",
            "url": "https://matrix-vault.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814726/",
            "reporter": "anonymous"
        }
    ],
    "3814724": [
        {
            "dateadded": "2026-04-09 05:28:07 UTC",
            "url": "http://104.249.10.200/ak/zpubeYnbswoZNHK172.bin",
            "url_status": "offline",
            "last_online": "2026-04-09 16:44:18 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814724/",
            "reporter": "abuse_ch"
        }
    ],
    "3814723": [
        {
            "dateadded": "2026-04-09 05:22:08 UTC",
            "url": "https://rule-node.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814723/",
            "reporter": "anonymous"
        }
    ],
    "3814722": [
        {
            "dateadded": "2026-04-09 05:21:35 UTC",
            "url": "https://boost.newrock.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-09 05:21:35 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814722/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3814721": [
        {
            "dateadded": "2026-04-09 05:21:13 UTC",
            "url": "https://quickly.newrock.life/DivineX.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814721/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3814720": [
        {
            "dateadded": "2026-04-09 05:21:12 UTC",
            "url": "https://fast.newrock.life/DivineX.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814720/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3814719": [
        {
            "dateadded": "2026-04-09 05:21:07 UTC",
            "url": "https://stone.newrock.life/DivineX.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814719/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3814716": [
        {
            "dateadded": "2026-04-09 05:21:06 UTC",
            "url": "http://79.124.59.142/index",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814716/",
            "reporter": "Gi7w0rm"
        }
    ],
    "3814717": [
        {
            "dateadded": "2026-04-09 05:21:06 UTC",
            "url": "http://219.156.96.201:38245/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814717/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814718": [
        {
            "dateadded": "2026-04-09 05:21:06 UTC",
            "url": "http://87.121.112.57/mass",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814718/",
            "reporter": "geenensp"
        }
    ],
    "3814715": [
        {
            "dateadded": "2026-04-09 05:20:40 UTC",
            "url": "https://go6.my/app.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "ua-powershell"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814715/",
            "reporter": "anonymous"
        }
    ],
    "3814714": [
        {
            "dateadded": "2026-04-09 05:20:20 UTC",
            "url": "http://115.57.233.21:44882/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:58:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814714/",
            "reporter": "geenensp"
        }
    ],
    "3814713": [
        {
            "dateadded": "2026-04-09 05:20:14 UTC",
            "url": "https://go5z.my/file.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "ua-powershell"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814713/",
            "reporter": "anonymous"
        }
    ],
    "3814712": [
        {
            "dateadded": "2026-04-09 05:20:09 UTC",
            "url": "https://ojemoneyyy.free.nf/img_050138.png",
            "url_status": "offline",
            "last_online": "2026-04-09 05:20:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814712/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814710": [
        {
            "dateadded": "2026-04-09 05:20:07 UTC",
            "url": "http://79.124.59.142/task",
            "url_status": "online",
            "last_online": "2026-04-27 11:20:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814710/",
            "reporter": "Gi7w0rm"
        }
    ],
    "3814709": [
        {
            "dateadded": "2026-04-09 05:18:21 UTC",
            "url": "http://83.219.1.198:33984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:22:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814709/",
            "reporter": "geenensp"
        }
    ],
    "3814708": [
        {
            "dateadded": "2026-04-09 05:17:09 UTC",
            "url": "https://engine-api.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-14 19:56:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "GuLoader",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814708/",
            "reporter": "anonymous"
        }
    ],
    "3814704": [
        {
            "dateadded": "2026-04-09 05:16:12 UTC",
            "url": "https://especially-acrobat-rouge-dominant.trycloudflare.com/oa.wsh",
            "url_status": "offline",
            "last_online": "2026-04-09 05:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "wsh"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814704/",
            "reporter": "abuse_ch"
        }
    ],
    "3814705": [
        {
            "dateadded": "2026-04-09 05:16:12 UTC",
            "url": "https://especially-acrobat-rouge-dominant.trycloudflare.com/go.bat",
            "url_status": "offline",
            "last_online": "2026-04-09 05:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "bat",
                "opendir",
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814705/",
            "reporter": "abuse_ch"
        }
    ],
    "3814706": [
        {
            "dateadded": "2026-04-09 05:16:12 UTC",
            "url": "https://especially-acrobat-rouge-dominant.trycloudflare.com/pol.bat",
            "url_status": "offline",
            "last_online": "2026-04-09 05:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "bat",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814706/",
            "reporter": "abuse_ch"
        }
    ],
    "3814707": [
        {
            "dateadded": "2026-04-09 05:16:12 UTC",
            "url": "https://especially-acrobat-rouge-dominant.trycloudflare.com/vwo.zip",
            "url_status": "offline",
            "last_online": "2026-04-09 05:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814707/",
            "reporter": "abuse_ch"
        }
    ],
    "3814703": [
        {
            "dateadded": "2026-04-09 05:15:13 UTC",
            "url": "https://especially-acrobat-rouge-dominant.trycloudflare.com/DOCUMENT/Toll_Group_Co%201200.pdf.lnk",
            "url_status": "offline",
            "last_online": "2026-04-09 05:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "lnk",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814703/",
            "reporter": "abuse_ch"
        }
    ],
    "3814702": [
        {
            "dateadded": "2026-04-09 05:15:12 UTC",
            "url": "https://www.dropbox.com/scl/fi/tkrvswcf5jo4s5oosdc4n/BELL-INV-4521-CA-.pdf.zip?rlkey=6bne1aom7tnf7me6j88b85bng&st=h396xfm6&dl=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814702/",
            "reporter": "abuse_ch"
        }
    ],
    "3814701": [
        {
            "dateadded": "2026-04-09 05:15:10 UTC",
            "url": "https://especially-acrobat-rouge-dominant.trycloudflare.com/ccv.js",
            "url_status": "offline",
            "last_online": "2026-04-09 05:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "js",
                "opendir"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814701/",
            "reporter": "abuse_ch"
        }
    ],
    "3814700": [
        {
            "dateadded": "2026-04-09 05:12:07 UTC",
            "url": "https://space-gate.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814700/",
            "reporter": "anonymous"
        }
    ],
    "3814699": [
        {
            "dateadded": "2026-04-09 05:06:11 UTC",
            "url": "https://point-hub.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814699/",
            "reporter": "anonymous"
        }
    ],
    "3814698": [
        {
            "dateadded": "2026-04-09 05:05:26 UTC",
            "url": "http://27.215.52.126:44803/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:02:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814698/",
            "reporter": "geenensp"
        }
    ],
    "3814697": [
        {
            "dateadded": "2026-04-09 05:00:27 UTC",
            "url": "http://113.236.94.93:47019/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 05:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814697/",
            "reporter": "geenensp"
        }
    ],
    "3814696": [
        {
            "dateadded": "2026-04-09 05:00:15 UTC",
            "url": "https://theory-svc.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 05:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814696/",
            "reporter": "anonymous"
        }
    ],
    "3814695": [
        {
            "dateadded": "2026-04-09 04:57:08 UTC",
            "url": "https://view-vault.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814695/",
            "reporter": "anonymous"
        }
    ],
    "3814694": [
        {
            "dateadded": "2026-04-09 04:55:22 UTC",
            "url": "http://196.191.104.3:40484/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:49:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814694/",
            "reporter": "geenensp"
        }
    ],
    "3814693": [
        {
            "dateadded": "2026-04-09 04:54:06 UTC",
            "url": "https://model-node.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814693/",
            "reporter": "anonymous"
        }
    ],
    "3814692": [
        {
            "dateadded": "2026-04-09 04:52:09 UTC",
            "url": "http://115.57.233.21:44882/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814692/",
            "reporter": "geenensp"
        }
    ],
    "3814691": [
        {
            "dateadded": "2026-04-09 04:49:08 UTC",
            "url": "http://115.49.6.169:36728/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814691/",
            "reporter": "geenensp"
        }
    ],
    "3814690": [
        {
            "dateadded": "2026-04-09 04:44:09 UTC",
            "url": "http://115.49.6.169:36728/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814690/",
            "reporter": "geenensp"
        }
    ],
    "3814689": [
        {
            "dateadded": "2026-04-09 04:43:12 UTC",
            "url": "https://vector-api.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814689/",
            "reporter": "anonymous"
        }
    ],
    "3814688": [
        {
            "dateadded": "2026-04-09 04:42:09 UTC",
            "url": "http://59.47.188.236:45324/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814688/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814687": [
        {
            "dateadded": "2026-04-09 04:39:13 UTC",
            "url": "https://gate-secure.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814687/",
            "reporter": "anonymous"
        }
    ],
    "3814686": [
        {
            "dateadded": "2026-04-09 04:38:16 UTC",
            "url": "http://219.156.181.123:38655/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:18:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814686/",
            "reporter": "geenensp"
        }
    ],
    "3814685": [
        {
            "dateadded": "2026-04-09 04:33:08 UTC",
            "url": "https://link-hub.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814685/",
            "reporter": "anonymous"
        }
    ],
    "3814684": [
        {
            "dateadded": "2026-04-09 04:29:22 UTC",
            "url": "http://124.29.223.148:58205/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:05:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814684/",
            "reporter": "geenensp"
        }
    ],
    "3814683": [
        {
            "dateadded": "2026-04-09 04:28:16 UTC",
            "url": "http://196.191.104.3:40484/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 09:53:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814683/",
            "reporter": "geenensp"
        }
    ],
    "3814682": [
        {
            "dateadded": "2026-04-09 04:26:06 UTC",
            "url": "https://rank-svc.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:26:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814682/",
            "reporter": "anonymous"
        }
    ],
    "3814681": [
        {
            "dateadded": "2026-04-09 04:22:09 UTC",
            "url": "http://110.37.102.129:42865/i",
            "url_status": "offline",
            "last_online": "2026-04-09 06:55:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814681/",
            "reporter": "geenensp"
        }
    ],
    "3814679": [
        {
            "dateadded": "2026-04-09 04:22:08 UTC",
            "url": "http://61.53.125.145:34847/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814679/",
            "reporter": "geenensp"
        }
    ],
    "3814680": [
        {
            "dateadded": "2026-04-09 04:22:08 UTC",
            "url": "http://182.113.203.51:57983/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814680/",
            "reporter": "geenensp"
        }
    ],
    "3814678": [
        {
            "dateadded": "2026-04-09 04:22:07 UTC",
            "url": "http://182.119.60.108:38299/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814678/",
            "reporter": "geenensp"
        }
    ],
    "3814677": [
        {
            "dateadded": "2026-04-09 04:21:12 UTC",
            "url": "https://hub-secure.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814677/",
            "reporter": "anonymous"
        }
    ],
    "3814676": [
        {
            "dateadded": "2026-04-09 04:16:13 UTC",
            "url": "https://trace-node.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814676/",
            "reporter": "anonymous"
        }
    ],
    "3814675": [
        {
            "dateadded": "2026-04-09 04:11:13 UTC",
            "url": "https://infer-api.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814675/",
            "reporter": "anonymous"
        }
    ],
    "3814674": [
        {
            "dateadded": "2026-04-09 04:07:14 UTC",
            "url": "https://logic-gate.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814674/",
            "reporter": "anonymous"
        }
    ],
    "3814673": [
        {
            "dateadded": "2026-04-09 04:03:16 UTC",
            "url": "https://debate-hub.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 04:03:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814673/",
            "reporter": "anonymous"
        }
    ],
    "3814672": [
        {
            "dateadded": "2026-04-09 03:56:09 UTC",
            "url": "http://115.63.204.71:46266/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:29:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814672/",
            "reporter": "geenensp"
        }
    ],
    "3814671": [
        {
            "dateadded": "2026-04-09 03:55:14 UTC",
            "url": "https://step-svc.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814671/",
            "reporter": "anonymous"
        }
    ],
    "3814670": [
        {
            "dateadded": "2026-04-09 03:52:12 UTC",
            "url": "https://thesis-vault.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814670/",
            "reporter": "anonymous"
        }
    ],
    "3814669": [
        {
            "dateadded": "2026-04-09 03:49:12 UTC",
            "url": "http://182.126.124.205:45589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814669/",
            "reporter": "geenensp"
        }
    ],
    "3814668": [
        {
            "dateadded": "2026-04-09 03:42:13 UTC",
            "url": "https://synth-node.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 22:00:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814668/",
            "reporter": "anonymous"
        }
    ],
    "3814667": [
        {
            "dateadded": "2026-04-09 03:42:06 UTC",
            "url": "http://61.53.82.61:51804/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:50:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814667/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814666": [
        {
            "dateadded": "2026-04-09 03:36:08 UTC",
            "url": "https://forge-api.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814666/",
            "reporter": "anonymous"
        }
    ],
    "3814665": [
        {
            "dateadded": "2026-04-09 03:35:16 UTC",
            "url": "http://117.90.54.196:43323/i",
            "url_status": "offline",
            "last_online": "2026-04-25 06:28:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814665/",
            "reporter": "geenensp"
        }
    ],
    "3814664": [
        {
            "dateadded": "2026-04-09 03:32:13 UTC",
            "url": "http://123.13.156.75:36235/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:19:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814664/",
            "reporter": "geenensp"
        }
    ],
    "3814663": [
        {
            "dateadded": "2026-04-09 03:31:07 UTC",
            "url": "https://point-gate.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814663/",
            "reporter": "anonymous"
        }
    ],
    "3814662": [
        {
            "dateadded": "2026-04-09 03:26:08 UTC",
            "url": "https://unit-hub.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814662/",
            "reporter": "anonymous"
        }
    ],
    "3814661": [
        {
            "dateadded": "2026-04-09 03:24:16 UTC",
            "url": "http://222.127.152.164:57130/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:59:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814661/",
            "reporter": "geenensp"
        }
    ],
    "3814660": [
        {
            "dateadded": "2026-04-09 03:20:14 UTC",
            "url": "https://stream-svc.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814660/",
            "reporter": "anonymous"
        }
    ],
    "3814659": [
        {
            "dateadded": "2026-04-09 03:15:09 UTC",
            "url": "https://shift-node.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814659/",
            "reporter": "anonymous"
        }
    ],
    "3814658": [
        {
            "dateadded": "2026-04-09 03:13:09 UTC",
            "url": "http://182.119.60.108:38299/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:22:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814658/",
            "reporter": "geenensp"
        }
    ],
    "3814657": [
        {
            "dateadded": "2026-04-09 03:12:11 UTC",
            "url": "http://222.142.208.17:36803/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814657/",
            "reporter": "geenensp"
        }
    ],
    "3814656": [
        {
            "dateadded": "2026-04-09 03:09:07 UTC",
            "url": "https://data-api.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814656/",
            "reporter": "anonymous"
        }
    ],
    "3814655": [
        {
            "dateadded": "2026-04-09 03:05:12 UTC",
            "url": "http://115.56.148.197:56404/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814655/",
            "reporter": "geenensp"
        }
    ],
    "3814654": [
        {
            "dateadded": "2026-04-09 03:03:08 UTC",
            "url": "https://matrix-flow.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 03:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814654/",
            "reporter": "anonymous"
        }
    ],
    "3814653": [
        {
            "dateadded": "2026-04-09 03:02:14 UTC",
            "url": "http://117.90.54.196:43323/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 05:18:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814653/",
            "reporter": "geenensp"
        }
    ],
    "3814652": [
        {
            "dateadded": "2026-04-09 03:02:13 UTC",
            "url": "http://96.246.230.97:41323/i",
            "url_status": "offline",
            "last_online": "2026-04-22 07:37:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814652/",
            "reporter": "geenensp"
        }
    ],
    "3814651": [
        {
            "dateadded": "2026-04-09 02:57:09 UTC",
            "url": "https://link-gate.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814651/",
            "reporter": "anonymous"
        }
    ],
    "3814650": [
        {
            "dateadded": "2026-04-09 02:53:16 UTC",
            "url": "http://222.127.152.164:57130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:18:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814650/",
            "reporter": "geenensp"
        }
    ],
    "3814649": [
        {
            "dateadded": "2026-04-09 02:53:07 UTC",
            "url": "https://main-hub.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814649/",
            "reporter": "anonymous"
        }
    ],
    "3814648": [
        {
            "dateadded": "2026-04-09 02:51:07 UTC",
            "url": "http://182.124.195.206:60488/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:00:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814648/",
            "reporter": "geenensp"
        }
    ],
    "3814647": [
        {
            "dateadded": "2026-04-09 02:49:14 UTC",
            "url": "http://110.37.91.29:53327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 07:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814647/",
            "reporter": "geenensp"
        }
    ],
    "3814646": [
        {
            "dateadded": "2026-04-09 02:46:07 UTC",
            "url": "https://root-svc.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814646/",
            "reporter": "anonymous"
        }
    ],
    "3814645": [
        {
            "dateadded": "2026-04-09 02:43:12 UTC",
            "url": "https://cell-vault.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814645/",
            "reporter": "anonymous"
        }
    ],
    "3814644": [
        {
            "dateadded": "2026-04-09 02:42:15 UTC",
            "url": "http://219.156.181.123:38655/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814644/",
            "reporter": "geenensp"
        }
    ],
    "3814643": [
        {
            "dateadded": "2026-04-09 02:39:08 UTC",
            "url": "http://115.56.148.197:56404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 21:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814643/",
            "reporter": "geenensp"
        }
    ],
    "3814642": [
        {
            "dateadded": "2026-04-09 02:39:07 UTC",
            "url": "https://entity-node.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814642/",
            "reporter": "anonymous"
        }
    ],
    "3814641": [
        {
            "dateadded": "2026-04-09 02:35:14 UTC",
            "url": "http://37.13.63.14:42212/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:58:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814641/",
            "reporter": "geenensp"
        }
    ],
    "3814640": [
        {
            "dateadded": "2026-04-09 02:32:15 UTC",
            "url": "http://96.246.230.97:41323/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 07:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814640/",
            "reporter": "geenensp"
        }
    ],
    "3814639": [
        {
            "dateadded": "2026-04-09 02:29:10 UTC",
            "url": "https://core-api.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814639/",
            "reporter": "anonymous"
        }
    ],
    "3814638": [
        {
            "dateadded": "2026-04-09 02:25:17 UTC",
            "url": "http://123.13.156.75:36235/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:34:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814638/",
            "reporter": "geenensp"
        }
    ],
    "3814637": [
        {
            "dateadded": "2026-04-09 02:24:22 UTC",
            "url": "http://36.64.184.26:55139/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814637/",
            "reporter": "geenensp"
        }
    ],
    "3814636": [
        {
            "dateadded": "2026-04-09 02:24:11 UTC",
            "url": "https://path-gate.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814636/",
            "reporter": "anonymous"
        }
    ],
    "3814635": [
        {
            "dateadded": "2026-04-09 02:18:10 UTC",
            "url": "http://182.124.195.206:60488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:06:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814635/",
            "reporter": "geenensp"
        }
    ],
    "3814634": [
        {
            "dateadded": "2026-04-09 02:17:09 UTC",
            "url": "https://audit-hub.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814634/",
            "reporter": "anonymous"
        }
    ],
    "3814633": [
        {
            "dateadded": "2026-04-09 02:12:11 UTC",
            "url": "https://root-svc.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814633/",
            "reporter": "anonymous"
        }
    ],
    "3814632": [
        {
            "dateadded": "2026-04-09 02:09:18 UTC",
            "url": "http://110.38.201.35:55530/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:56:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814632/",
            "reporter": "geenensp"
        }
    ],
    "3814631": [
        {
            "dateadded": "2026-04-09 02:08:08 UTC",
            "url": "https://secure-node.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814631/",
            "reporter": "anonymous"
        }
    ],
    "3814630": [
        {
            "dateadded": "2026-04-09 02:06:12 UTC",
            "url": "http://42.233.107.184:44779/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 11:17:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814630/",
            "reporter": "geenensp"
        }
    ],
    "3814629": [
        {
            "dateadded": "2026-04-09 02:03:07 UTC",
            "url": "https://info-api.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814629/",
            "reporter": "anonymous"
        }
    ],
    "3814628": [
        {
            "dateadded": "2026-04-09 02:00:10 UTC",
            "url": "https://base-vault.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 02:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814628/",
            "reporter": "anonymous"
        }
    ],
    "3814627": [
        {
            "dateadded": "2026-04-09 01:49:07 UTC",
            "url": "https://base-gate.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814627/",
            "reporter": "anonymous"
        }
    ],
    "3814626": [
        {
            "dateadded": "2026-04-09 01:48:11 UTC",
            "url": "http://182.117.55.53:49133/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:36:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814626/",
            "reporter": "geenensp"
        }
    ],
    "3814625": [
        {
            "dateadded": "2026-04-09 01:45:07 UTC",
            "url": "https://flux-svc.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:45:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814625/",
            "reporter": "anonymous"
        }
    ],
    "3814624": [
        {
            "dateadded": "2026-04-09 01:39:08 UTC",
            "url": "https://drift-vault.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814624/",
            "reporter": "anonymous"
        }
    ],
    "3814623": [
        {
            "dateadded": "2026-04-09 01:37:07 UTC",
            "url": "http://125.47.34.217:46486/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814623/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814622": [
        {
            "dateadded": "2026-04-09 01:34:12 UTC",
            "url": "https://shift-node.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814622/",
            "reporter": "anonymous"
        }
    ],
    "3814621": [
        {
            "dateadded": "2026-04-09 01:28:12 UTC",
            "url": "https://know-api.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814621/",
            "reporter": "anonymous"
        }
    ],
    "3814620": [
        {
            "dateadded": "2026-04-09 01:27:18 UTC",
            "url": "http://60.23.234.163:57807/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:18:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814620/",
            "reporter": "geenensp"
        }
    ],
    "3814619": [
        {
            "dateadded": "2026-04-09 01:21:07 UTC",
            "url": "https://flow-data.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814619/",
            "reporter": "anonymous"
        }
    ],
    "3814618": [
        {
            "dateadded": "2026-04-09 01:16:12 UTC",
            "url": "https://global-gate.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814618/",
            "reporter": "anonymous"
        }
    ],
    "3814617": [
        {
            "dateadded": "2026-04-09 01:12:07 UTC",
            "url": "http://125.47.34.217:46486/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814617/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814616": [
        {
            "dateadded": "2026-04-09 01:11:07 UTC",
            "url": "https://pure-svc.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814616/",
            "reporter": "anonymous"
        }
    ],
    "3814615": [
        {
            "dateadded": "2026-04-09 01:06:07 UTC",
            "url": "https://logic-vault.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 01:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814615/",
            "reporter": "anonymous"
        }
    ],
    "3814614": [
        {
            "dateadded": "2026-04-09 00:59:09 UTC",
            "url": "https://sphere-node.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814614/",
            "reporter": "anonymous"
        }
    ],
    "3814613": [
        {
            "dateadded": "2026-04-09 00:53:12 UTC",
            "url": "https://thought-api.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814613/",
            "reporter": "anonymous"
        }
    ],
    "3814612": [
        {
            "dateadded": "2026-04-09 00:49:07 UTC",
            "url": "https://mind-sync.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814612/",
            "reporter": "anonymous"
        }
    ],
    "3814611": [
        {
            "dateadded": "2026-04-09 00:38:19 UTC",
            "url": "http://42.85.51.149:50787/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814611/",
            "reporter": "geenensp"
        }
    ],
    "3814610": [
        {
            "dateadded": "2026-04-09 00:38:07 UTC",
            "url": "https://brain-gate.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814610/",
            "reporter": "anonymous"
        }
    ],
    "3814609": [
        {
            "dateadded": "2026-04-09 00:32:08 UTC",
            "url": "https://vector-svc.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814609/",
            "reporter": "anonymous"
        }
    ],
    "3814608": [
        {
            "dateadded": "2026-04-09 00:32:06 UTC",
            "url": "http://115.57.232.183:43345/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 11:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814608/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814607": [
        {
            "dateadded": "2026-04-09 00:27:07 UTC",
            "url": "https://think-node.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814607/",
            "reporter": "anonymous"
        }
    ],
    "3814606": [
        {
            "dateadded": "2026-04-09 00:27:06 UTC",
            "url": "http://115.58.173.66:45571/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:53:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814606/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814605": [
        {
            "dateadded": "2026-04-09 00:20:12 UTC",
            "url": "https://sense-log.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814605/",
            "reporter": "anonymous"
        }
    ],
    "3814604": [
        {
            "dateadded": "2026-04-09 00:19:21 UTC",
            "url": "http://125.47.237.161:51635/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814604/",
            "reporter": "geenensp"
        }
    ],
    "3814603": [
        {
            "dateadded": "2026-04-09 00:18:16 UTC",
            "url": "http://113.228.152.43:54237/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814603/",
            "reporter": "geenensp"
        }
    ],
    "3814602": [
        {
            "dateadded": "2026-04-09 00:17:07 UTC",
            "url": "http://115.58.173.66:45571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814602/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814601": [
        {
            "dateadded": "2026-04-09 00:15:15 UTC",
            "url": "http://119.179.236.13:52644/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:10:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814601/",
            "reporter": "geenensp"
        }
    ],
    "3814600": [
        {
            "dateadded": "2026-04-09 00:15:09 UTC",
            "url": "https://neural-api.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814600/",
            "reporter": "anonymous"
        }
    ],
    "3814599": [
        {
            "dateadded": "2026-04-09 00:09:12 UTC",
            "url": "https://mind-hub.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814599/",
            "reporter": "anonymous"
        }
    ],
    "3814598": [
        {
            "dateadded": "2026-04-09 00:04:14 UTC",
            "url": "https://path-gate.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814598/",
            "reporter": "anonymous"
        }
    ],
    "3814597": [
        {
            "dateadded": "2026-04-09 00:03:13 UTC",
            "url": "http://42.55.238.186:52416/i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:43:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814597/",
            "reporter": "geenensp"
        }
    ],
    "3814596": [
        {
            "dateadded": "2026-04-09 00:00:23 UTC",
            "url": "https://file-hub.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-09 00:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814596/",
            "reporter": "anonymous"
        }
    ],
    "3814595": [
        {
            "dateadded": "2026-04-08 23:59:20 UTC",
            "url": "http://115.57.232.183:43345/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814595/",
            "reporter": "geenensp"
        }
    ],
    "3814594": [
        {
            "dateadded": "2026-04-08 23:59:16 UTC",
            "url": "http://42.85.51.149:50787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:25:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814594/",
            "reporter": "geenensp"
        }
    ],
    "3814593": [
        {
            "dateadded": "2026-04-08 23:58:08 UTC",
            "url": "http://61.53.119.3:40689/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:57:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814593/",
            "reporter": "geenensp"
        }
    ],
    "3814592": [
        {
            "dateadded": "2026-04-08 23:57:09 UTC",
            "url": "https://stream-svc.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814592/",
            "reporter": "anonymous"
        }
    ],
    "3814591": [
        {
            "dateadded": "2026-04-08 23:57:07 UTC",
            "url": "http://119.179.236.13:52644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814591/",
            "reporter": "geenensp"
        }
    ],
    "3814590": [
        {
            "dateadded": "2026-04-08 23:56:20 UTC",
            "url": "http://123.5.155.180:43622/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:48:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814590/",
            "reporter": "geenensp"
        }
    ],
    "3814589": [
        {
            "dateadded": "2026-04-08 23:49:08 UTC",
            "url": "https://rank-node.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814589/",
            "reporter": "anonymous"
        }
    ],
    "3814588": [
        {
            "dateadded": "2026-04-08 23:46:17 UTC",
            "url": "http://125.40.121.37:34795/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814588/",
            "reporter": "geenensp"
        }
    ],
    "3814587": [
        {
            "dateadded": "2026-04-08 23:45:17 UTC",
            "url": "https://order-api.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814587/",
            "reporter": "anonymous"
        }
    ],
    "3814586": [
        {
            "dateadded": "2026-04-08 23:41:29 UTC",
            "url": "http://42.55.238.186:52416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 23:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814586/",
            "reporter": "geenensp"
        }
    ],
    "3814585": [
        {
            "dateadded": "2026-04-08 23:36:08 UTC",
            "url": "https://matrix-flow.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814585/",
            "reporter": "anonymous"
        }
    ],
    "3814584": [
        {
            "dateadded": "2026-04-08 23:32:10 UTC",
            "url": "http://59.182.219.217:37783/i",
            "url_status": "offline",
            "last_online": "2026-04-09 03:54:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814584/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814583": [
        {
            "dateadded": "2026-04-08 23:30:21 UTC",
            "url": "http://42.230.18.82:53379/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:12:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814583/",
            "reporter": "geenensp"
        }
    ],
    "3814582": [
        {
            "dateadded": "2026-04-08 23:30:09 UTC",
            "url": "https://hub-gate.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814582/",
            "reporter": "anonymous"
        }
    ],
    "3814581": [
        {
            "dateadded": "2026-04-08 23:27:07 UTC",
            "url": "http://42.224.101.5:36891/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:18:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814581/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814580": [
        {
            "dateadded": "2026-04-08 23:26:21 UTC",
            "url": "http://125.40.121.37:34795/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:42:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814580/",
            "reporter": "geenensp"
        }
    ],
    "3814579": [
        {
            "dateadded": "2026-04-08 23:24:08 UTC",
            "url": "https://view-svc.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814579/",
            "reporter": "anonymous"
        }
    ],
    "3814578": [
        {
            "dateadded": "2026-04-08 23:19:07 UTC",
            "url": "https://space-node.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814578/",
            "reporter": "anonymous"
        }
    ],
    "3814577": [
        {
            "dateadded": "2026-04-08 23:17:07 UTC",
            "url": "http://42.224.101.5:36891/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 03:55:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814577/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814576": [
        {
            "dateadded": "2026-04-08 23:15:23 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-11 11:42:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814576/",
            "reporter": "tolisec"
        }
    ],
    "3814566": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.ppc",
            "url_status": "offline",
            "last_online": "2026-04-11 11:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814566/",
            "reporter": "tolisec"
        }
    ],
    "3814567": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.arm6",
            "url_status": "offline",
            "last_online": "2026-04-11 11:01:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814567/",
            "reporter": "tolisec"
        }
    ],
    "3814568": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.sh4",
            "url_status": "offline",
            "last_online": "2026-04-11 10:48:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814568/",
            "reporter": "tolisec"
        }
    ],
    "3814569": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.spc",
            "url_status": "offline",
            "last_online": "2026-04-11 10:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814569/",
            "reporter": "tolisec"
        }
    ],
    "3814570": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.m68k",
            "url_status": "offline",
            "last_online": "2026-04-11 11:30:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814570/",
            "reporter": "tolisec"
        }
    ],
    "3814571": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.mips",
            "url_status": "offline",
            "last_online": "2026-04-11 10:51:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814571/",
            "reporter": "tolisec"
        }
    ],
    "3814572": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.arm7",
            "url_status": "offline",
            "last_online": "2026-04-11 11:32:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814572/",
            "reporter": "tolisec"
        }
    ],
    "3814573": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.arm5",
            "url_status": "offline",
            "last_online": "2026-04-11 10:15:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814573/",
            "reporter": "tolisec"
        }
    ],
    "3814574": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.x86",
            "url_status": "offline",
            "last_online": "2026-04-11 11:04:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814574/",
            "reporter": "tolisec"
        }
    ],
    "3814575": [
        {
            "dateadded": "2026-04-08 23:14:20 UTC",
            "url": "http://45.145.225.160/AB4g5/Josho.arm",
            "url_status": "offline",
            "last_online": "2026-04-11 11:07:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814575/",
            "reporter": "tolisec"
        }
    ],
    "3814565": [
        {
            "dateadded": "2026-04-08 23:13:12 UTC",
            "url": "https://abstract-log.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814565/",
            "reporter": "anonymous"
        }
    ],
    "3814564": [
        {
            "dateadded": "2026-04-08 23:12:08 UTC",
            "url": "http://59.182.219.217:37783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:46:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814564/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814563": [
        {
            "dateadded": "2026-04-08 23:08:14 UTC",
            "url": "https://model-api.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814563/",
            "reporter": "anonymous"
        }
    ],
    "3814562": [
        {
            "dateadded": "2026-04-08 23:07:15 UTC",
            "url": "http://42.230.18.82:53379/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:10:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814562/",
            "reporter": "geenensp"
        }
    ],
    "3814561": [
        {
            "dateadded": "2026-04-08 23:02:09 UTC",
            "url": "https://layer-io.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 23:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814561/",
            "reporter": "anonymous"
        }
    ],
    "3814560": [
        {
            "dateadded": "2026-04-08 22:57:11 UTC",
            "url": "https://point-gate.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:57:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814560/",
            "reporter": "anonymous"
        }
    ],
    "3814559": [
        {
            "dateadded": "2026-04-08 22:51:09 UTC",
            "url": "https://data-svc.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814559/",
            "reporter": "anonymous"
        }
    ],
    "3814558": [
        {
            "dateadded": "2026-04-08 22:45:14 UTC",
            "url": "https://flux-node.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814558/",
            "reporter": "anonymous"
        }
    ],
    "3814557": [
        {
            "dateadded": "2026-04-08 22:39:13 UTC",
            "url": "https://trace-log.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814557/",
            "reporter": "anonymous"
        }
    ],
    "3814556": [
        {
            "dateadded": "2026-04-08 22:38:18 UTC",
            "url": "http://115.63.12.243:36096/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814556/",
            "reporter": "geenensp"
        }
    ],
    "3814555": [
        {
            "dateadded": "2026-04-08 22:34:08 UTC",
            "url": "https://step-api.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814555/",
            "reporter": "anonymous"
        }
    ],
    "3814554": [
        {
            "dateadded": "2026-04-08 22:28:13 UTC",
            "url": "https://infer-unit.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814554/",
            "reporter": "anonymous"
        }
    ],
    "3814553": [
        {
            "dateadded": "2026-04-08 22:27:16 UTC",
            "url": "http://117.251.18.126:57231/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:52:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814553/",
            "reporter": "geenensp"
        }
    ],
    "3814552": [
        {
            "dateadded": "2026-04-08 22:24:20 UTC",
            "url": "http://182.115.234.195:52519/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814552/",
            "reporter": "geenensp"
        }
    ],
    "3814551": [
        {
            "dateadded": "2026-04-08 22:22:13 UTC",
            "url": "https://logic-gate.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:22:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814551/",
            "reporter": "anonymous"
        }
    ],
    "3814550": [
        {
            "dateadded": "2026-04-08 22:18:14 UTC",
            "url": "https://debate-hub.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814550/",
            "reporter": "anonymous"
        }
    ],
    "3814549": [
        {
            "dateadded": "2026-04-08 22:12:07 UTC",
            "url": "http://182.118.147.46:46267/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:45:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814549/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814548": [
        {
            "dateadded": "2026-04-08 22:11:11 UTC",
            "url": "https://state-svc.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814548/",
            "reporter": "anonymous"
        }
    ],
    "3814547": [
        {
            "dateadded": "2026-04-08 22:06:14 UTC",
            "url": "https://thesis-log.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814547/",
            "reporter": "anonymous"
        }
    ],
    "3814546": [
        {
            "dateadded": "2026-04-08 22:03:25 UTC",
            "url": "http://115.49.211.109:39020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 17:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814546/",
            "reporter": "geenensp"
        }
    ],
    "3814545": [
        {
            "dateadded": "2026-04-08 22:02:09 UTC",
            "url": "http://117.209.20.49:54386/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814545/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814544": [
        {
            "dateadded": "2026-04-08 22:01:37 UTC",
            "url": "http://182.115.234.195:52519/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814544/",
            "reporter": "geenensp"
        }
    ],
    "3814543": [
        {
            "dateadded": "2026-04-08 22:00:13 UTC",
            "url": "https://talk-node.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 22:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814543/",
            "reporter": "anonymous"
        }
    ],
    "3814542": [
        {
            "dateadded": "2026-04-08 21:57:06 UTC",
            "url": "http://175.147.243.47:34666/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:49:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814542/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814541": [
        {
            "dateadded": "2026-04-08 21:55:16 UTC",
            "url": "https://sphere-api.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814541/",
            "reporter": "anonymous"
        }
    ],
    "3814540": [
        {
            "dateadded": "2026-04-08 21:48:14 UTC",
            "url": "http://87.255.10.22:55776/i",
            "url_status": "offline",
            "last_online": "2026-04-15 16:31:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814540/",
            "reporter": "geenensp"
        }
    ],
    "3814539": [
        {
            "dateadded": "2026-04-08 21:48:13 UTC",
            "url": "https://matrix-hub.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814539/",
            "reporter": "anonymous"
        }
    ],
    "3814538": [
        {
            "dateadded": "2026-04-08 21:47:08 UTC",
            "url": "http://175.147.243.47:34666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:46:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814538/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814537": [
        {
            "dateadded": "2026-04-08 21:44:09 UTC",
            "url": "https://rule-svc.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814537/",
            "reporter": "anonymous"
        }
    ],
    "3814536": [
        {
            "dateadded": "2026-04-08 21:42:19 UTC",
            "url": "http://117.209.20.49:54386/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 21:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814536/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814535": [
        {
            "dateadded": "2026-04-08 21:42:18 UTC",
            "url": "http://112.248.114.218:50669/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814535/",
            "reporter": "geenensp"
        }
    ],
    "3814534": [
        {
            "dateadded": "2026-04-08 21:42:07 UTC",
            "url": "http://119.114.12.58:35723/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:32:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814534/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814533": [
        {
            "dateadded": "2026-04-08 21:38:07 UTC",
            "url": "https://unit-vault.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814533/",
            "reporter": "anonymous"
        }
    ],
    "3814532": [
        {
            "dateadded": "2026-04-08 21:34:19 UTC",
            "url": "https://mhatuminerals.africa/wp-admin/js/scc.msi",
            "url_status": "offline",
            "last_online": "2026-04-08 22:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "connectwise",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814532/",
            "reporter": "c2hunter"
        }
    ],
    "3814531": [
        {
            "dateadded": "2026-04-08 21:32:11 UTC",
            "url": "http://111.38.106.19:49550/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814531/",
            "reporter": "geenensp"
        }
    ],
    "3814530": [
        {
            "dateadded": "2026-04-08 21:32:10 UTC",
            "url": "https://fixed-node.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814530/",
            "reporter": "anonymous"
        }
    ],
    "3814529": [
        {
            "dateadded": "2026-04-08 21:28:19 UTC",
            "url": "http://219.157.58.1:43951/i",
            "url_status": "offline",
            "last_online": "2026-04-10 03:52:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814529/",
            "reporter": "geenensp"
        }
    ],
    "3814528": [
        {
            "dateadded": "2026-04-08 21:27:07 UTC",
            "url": "http://182.117.15.172:40133/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:15:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814528/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814527": [
        {
            "dateadded": "2026-04-08 21:26:07 UTC",
            "url": "https://law-check.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814527/",
            "reporter": "anonymous"
        }
    ],
    "3814526": [
        {
            "dateadded": "2026-04-08 21:21:08 UTC",
            "url": "https://engine-io.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814526/",
            "reporter": "anonymous"
        }
    ],
    "3814525": [
        {
            "dateadded": "2026-04-08 21:20:21 UTC",
            "url": "http://87.255.10.22:55776/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 21:31:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814525/",
            "reporter": "geenensp"
        }
    ],
    "3814523": [
        {
            "dateadded": "2026-04-08 21:17:07 UTC",
            "url": "http://182.117.15.172:40133/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:46:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814523/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814524": [
        {
            "dateadded": "2026-04-08 21:17:07 UTC",
            "url": "http://115.52.35.67:34774/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:29:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814524/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814522": [
        {
            "dateadded": "2026-04-08 21:15:09 UTC",
            "url": "https://space-gate.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814522/",
            "reporter": "anonymous"
        }
    ],
    "3814521": [
        {
            "dateadded": "2026-04-08 21:12:08 UTC",
            "url": "http://115.52.35.67:34774/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 03:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814521/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814520": [
        {
            "dateadded": "2026-04-08 21:10:08 UTC",
            "url": "https://verse-svc.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814520/",
            "reporter": "anonymous"
        }
    ],
    "3814519": [
        {
            "dateadded": "2026-04-08 21:06:39 UTC",
            "url": "http://112.248.114.218:50669/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:56:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814519/",
            "reporter": "geenensp"
        }
    ],
    "3814518": [
        {
            "dateadded": "2026-04-08 21:06:08 UTC",
            "url": "https://entity-node.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814518/",
            "reporter": "anonymous"
        }
    ],
    "3814517": [
        {
            "dateadded": "2026-04-08 21:05:12 UTC",
            "url": "http://111.38.106.19:49550/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814517/",
            "reporter": "geenensp"
        }
    ],
    "3814516": [
        {
            "dateadded": "2026-04-08 21:03:07 UTC",
            "url": "https://map-log.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 21:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814516/",
            "reporter": "anonymous"
        }
    ],
    "3814515": [
        {
            "dateadded": "2026-04-08 21:02:13 UTC",
            "url": "http://24.88.242.17:42778/i",
            "url_status": "offline",
            "last_online": "2026-04-19 12:31:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814515/",
            "reporter": "geenensp"
        }
    ],
    "3814513": [
        {
            "dateadded": "2026-04-08 20:57:07 UTC",
            "url": "http://123.129.132.67:43514/i",
            "url_status": "offline",
            "last_online": "2026-04-08 20:57:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814513/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814514": [
        {
            "dateadded": "2026-04-08 20:57:07 UTC",
            "url": "http://59.101.213.99:42905/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:58:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814514/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814512": [
        {
            "dateadded": "2026-04-08 20:53:08 UTC",
            "url": "https://world-api.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814512/",
            "reporter": "anonymous"
        }
    ],
    "3814511": [
        {
            "dateadded": "2026-04-08 20:49:17 UTC",
            "url": "http://182.126.124.205:45589/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814511/",
            "reporter": "geenensp"
        }
    ],
    "3814510": [
        {
            "dateadded": "2026-04-08 20:47:10 UTC",
            "url": "http://59.101.213.99:42905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:53:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814510/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814509": [
        {
            "dateadded": "2026-04-08 20:47:08 UTC",
            "url": "https://grid-core.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814509/",
            "reporter": "anonymous"
        }
    ],
    "3814508": [
        {
            "dateadded": "2026-04-08 20:42:06 UTC",
            "url": "http://27.215.123.47:40680/i",
            "url_status": "offline",
            "last_online": "2026-04-09 03:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814508/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814507": [
        {
            "dateadded": "2026-04-08 20:41:07 UTC",
            "url": "https://drift-gate.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814507/",
            "reporter": "anonymous"
        }
    ],
    "3814506": [
        {
            "dateadded": "2026-04-08 20:36:09 UTC",
            "url": "https://shift-svc.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814506/",
            "reporter": "anonymous"
        }
    ],
    "3814505": [
        {
            "dateadded": "2026-04-08 20:31:06 UTC",
            "url": "https://truth-node.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814505/",
            "reporter": "anonymous"
        }
    ],
    "3814504": [
        {
            "dateadded": "2026-04-08 20:26:08 UTC",
            "url": "http://71.56.88.23:41926/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:07:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814504/",
            "reporter": "geenensp"
        }
    ],
    "3814502": [
        {
            "dateadded": "2026-04-08 20:26:07 UTC",
            "url": "http://175.150.201.48:40944/i",
            "url_status": "offline",
            "last_online": "2026-04-11 17:21:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814502/",
            "reporter": "geenensp"
        }
    ],
    "3814503": [
        {
            "dateadded": "2026-04-08 20:26:07 UTC",
            "url": "http://123.12.25.132:42309/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:21:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814503/",
            "reporter": "geenensp"
        }
    ],
    "3814501": [
        {
            "dateadded": "2026-04-08 20:24:15 UTC",
            "url": "https://sync-vault.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814501/",
            "reporter": "anonymous"
        }
    ],
    "3814500": [
        {
            "dateadded": "2026-04-08 20:24:06 UTC",
            "url": "http://85.239.147.6/files/8550280707/ZChUqwg.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814500/",
            "reporter": "Bitsight"
        }
    ],
    "3814499": [
        {
            "dateadded": "2026-04-08 20:20:12 UTC",
            "url": "https://mesh-api.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814499/",
            "reporter": "anonymous"
        }
    ],
    "3814498": [
        {
            "dateadded": "2026-04-08 20:16:09 UTC",
            "url": "http://219.157.58.1:43951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 21:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814498/",
            "reporter": "geenensp"
        }
    ],
    "3814497": [
        {
            "dateadded": "2026-04-08 20:15:15 UTC",
            "url": "http://182.119.3.168:53888/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:30:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814497/",
            "reporter": "geenensp"
        }
    ],
    "3814496": [
        {
            "dateadded": "2026-04-08 20:13:17 UTC",
            "url": "http://27.11.175.246:43403/i",
            "url_status": "offline",
            "last_online": "2026-04-19 06:10:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814496/",
            "reporter": "geenensp"
        }
    ],
    "3814495": [
        {
            "dateadded": "2026-04-08 20:13:08 UTC",
            "url": "https://flow-data.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814495/",
            "reporter": "anonymous"
        }
    ],
    "3814494": [
        {
            "dateadded": "2026-04-08 20:08:11 UTC",
            "url": "https://base-gate.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814494/",
            "reporter": "anonymous"
        }
    ],
    "3814493": [
        {
            "dateadded": "2026-04-08 20:07:14 UTC",
            "url": "http://175.150.201.48:40944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 17:31:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814493/",
            "reporter": "geenensp"
        }
    ],
    "3814492": [
        {
            "dateadded": "2026-04-08 20:02:08 UTC",
            "url": "https://path-svc.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 20:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814492/",
            "reporter": "anonymous"
        }
    ],
    "3814491": [
        {
            "dateadded": "2026-04-08 19:56:07 UTC",
            "url": "https://know-node.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814491/",
            "reporter": "anonymous"
        }
    ],
    "3814490": [
        {
            "dateadded": "2026-04-08 19:52:18 UTC",
            "url": "http://125.47.71.155:39266/i",
            "url_status": "offline",
            "last_online": "2026-04-10 05:02:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814490/",
            "reporter": "geenensp"
        }
    ],
    "3814489": [
        {
            "dateadded": "2026-04-08 19:51:06 UTC",
            "url": "https://vector-hub.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814489/",
            "reporter": "anonymous"
        }
    ],
    "3814488": [
        {
            "dateadded": "2026-04-08 19:47:21 UTC",
            "url": "http://115.57.255.87:37402/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814488/",
            "reporter": "geenensp"
        }
    ],
    "3814487": [
        {
            "dateadded": "2026-04-08 19:47:06 UTC",
            "url": "http://42.230.38.139:40675/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814487/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814486": [
        {
            "dateadded": "2026-04-08 19:45:10 UTC",
            "url": "https://smart-api.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814486/",
            "reporter": "anonymous"
        }
    ],
    "3814485": [
        {
            "dateadded": "2026-04-08 19:42:08 UTC",
            "url": "http://42.230.38.139:40675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:56:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814485/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814484": [
        {
            "dateadded": "2026-04-08 19:40:10 UTC",
            "url": "https://trace-point.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814484/",
            "reporter": "anonymous"
        }
    ],
    "3814483": [
        {
            "dateadded": "2026-04-08 19:39:22 UTC",
            "url": "http://87.110.15.80:41932/i",
            "url_status": "offline",
            "last_online": "2026-04-15 10:54:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814483/",
            "reporter": "geenensp"
        }
    ],
    "3814482": [
        {
            "dateadded": "2026-04-08 19:34:09 UTC",
            "url": "https://shell-svc.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814482/",
            "reporter": "anonymous"
        }
    ],
    "3814481": [
        {
            "dateadded": "2026-04-08 19:29:08 UTC",
            "url": "https://logic-node.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814481/",
            "reporter": "anonymous"
        }
    ],
    "3814480": [
        {
            "dateadded": "2026-04-08 19:27:23 UTC",
            "url": "http://112.198.135.172:39688/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814480/",
            "reporter": "geenensp"
        }
    ],
    "3814479": [
        {
            "dateadded": "2026-04-08 19:27:19 UTC",
            "url": "http://122.193.144.30:40331/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:08:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814479/",
            "reporter": "geenensp"
        }
    ],
    "3814478": [
        {
            "dateadded": "2026-04-08 19:27:06 UTC",
            "url": "http://123.5.125.8:51962/i",
            "url_status": "offline",
            "last_online": "2026-04-08 19:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814478/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814477": [
        {
            "dateadded": "2026-04-08 19:23:11 UTC",
            "url": "https://core-vault.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814477/",
            "reporter": "anonymous"
        }
    ],
    "3814476": [
        {
            "dateadded": "2026-04-08 19:18:10 UTC",
            "url": "https://thought-api.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814476/",
            "reporter": "anonymous"
        }
    ],
    "3814475": [
        {
            "dateadded": "2026-04-08 19:16:17 UTC",
            "url": "http://42.234.232.37:33853/i",
            "url_status": "offline",
            "last_online": "2026-04-11 08:09:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814475/",
            "reporter": "geenensp"
        }
    ],
    "3814474": [
        {
            "dateadded": "2026-04-08 19:14:06 UTC",
            "url": "http://87.110.15.80:41932/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 11:12:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814474/",
            "reporter": "geenensp"
        }
    ],
    "3814473": [
        {
            "dateadded": "2026-04-08 19:12:09 UTC",
            "url": "https://global-io.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814473/",
            "reporter": "anonymous"
        }
    ],
    "3814472": [
        {
            "dateadded": "2026-04-08 19:07:07 UTC",
            "url": "https://mind-sync.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814472/",
            "reporter": "anonymous"
        }
    ],
    "3814471": [
        {
            "dateadded": "2026-04-08 19:03:19 UTC",
            "url": "http://122.193.144.30:40331/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:26:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814471/",
            "reporter": "geenensp"
        }
    ],
    "3814470": [
        {
            "dateadded": "2026-04-08 19:01:14 UTC",
            "url": "https://magic-hub.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 19:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814470/",
            "reporter": "anonymous"
        }
    ],
    "3814469": [
        {
            "dateadded": "2026-04-08 19:00:22 UTC",
            "url": "http://115.52.241.15:40030/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 19:00:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814469/",
            "reporter": "geenensp"
        }
    ],
    "3814468": [
        {
            "dateadded": "2026-04-08 18:58:18 UTC",
            "url": "http://178.163.34.244:64487/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:54:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814468/",
            "reporter": "geenensp"
        }
    ],
    "3814467": [
        {
            "dateadded": "2026-04-08 18:55:10 UTC",
            "url": "https://story-gate.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814467/",
            "reporter": "anonymous"
        }
    ],
    "3814466": [
        {
            "dateadded": "2026-04-08 18:52:13 UTC",
            "url": "http://123.5.125.8:51962/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 18:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814466/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814465": [
        {
            "dateadded": "2026-04-08 18:50:09 UTC",
            "url": "https://tale-svc.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814465/",
            "reporter": "anonymous"
        }
    ],
    "3814464": [
        {
            "dateadded": "2026-04-08 18:47:07 UTC",
            "url": "http://222.127.77.227:46777/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814464/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814463": [
        {
            "dateadded": "2026-04-08 18:44:06 UTC",
            "url": "https://fair-node.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814463/",
            "reporter": "anonymous"
        }
    ],
    "3814462": [
        {
            "dateadded": "2026-04-08 18:38:09 UTC",
            "url": "https://dream-api.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814462/",
            "reporter": "anonymous"
        }
    ],
    "3814461": [
        {
            "dateadded": "2026-04-08 18:33:14 UTC",
            "url": "https://myth-logic.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814461/",
            "reporter": "anonymous"
        }
    ],
    "3814460": [
        {
            "dateadded": "2026-04-08 18:30:16 UTC",
            "url": "http://39.90.87.7:44145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 17:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814460/",
            "reporter": "geenensp"
        }
    ],
    "3814458": [
        {
            "dateadded": "2026-04-08 18:27:08 UTC",
            "url": "http://42.228.189.140:54296/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:56:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814458/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814459": [
        {
            "dateadded": "2026-04-08 18:27:08 UTC",
            "url": "https://root-hub.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814459/",
            "reporter": "anonymous"
        }
    ],
    "3814457": [
        {
            "dateadded": "2026-04-08 18:25:19 UTC",
            "url": "http://222.127.73.23:44449/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814457/",
            "reporter": "geenensp"
        }
    ],
    "3814456": [
        {
            "dateadded": "2026-04-08 18:22:07 UTC",
            "url": "https://mark-gate.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814456/",
            "reporter": "anonymous"
        }
    ],
    "3814455": [
        {
            "dateadded": "2026-04-08 18:21:11 UTC",
            "url": "http://123.132.186.172:49888/i",
            "url_status": "offline",
            "last_online": "2026-04-11 23:07:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814455/",
            "reporter": "geenensp"
        }
    ],
    "3814454": [
        {
            "dateadded": "2026-04-08 18:15:10 UTC",
            "url": "https://test-svc.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814454/",
            "reporter": "anonymous"
        }
    ],
    "3814453": [
        {
            "dateadded": "2026-04-08 18:14:22 UTC",
            "url": "http://117.215.56.147:40089/i",
            "url_status": "offline",
            "last_online": "2026-04-08 18:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814453/",
            "reporter": "geenensp"
        }
    ],
    "3814452": [
        {
            "dateadded": "2026-04-08 18:11:07 UTC",
            "url": "https://best-node.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814452/",
            "reporter": "anonymous"
        }
    ],
    "3814451": [
        {
            "dateadded": "2026-04-08 18:10:10 UTC",
            "url": "http://158.94.210.158/WORK200",
            "url_status": "offline",
            "last_online": "2026-04-10 16:53:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814451/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814450": [
        {
            "dateadded": "2026-04-08 18:10:07 UTC",
            "url": "http://158.94.210.158/Ficiyolov",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814450/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814449": [
        {
            "dateadded": "2026-04-08 18:05:09 UTC",
            "url": "https://data-api.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814449/",
            "reporter": "anonymous"
        }
    ],
    "3814448": [
        {
            "dateadded": "2026-04-08 18:00:11 UTC",
            "url": "https://win-point.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 18:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814448/",
            "reporter": "anonymous"
        }
    ],
    "3814447": [
        {
            "dateadded": "2026-04-08 17:53:08 UTC",
            "url": "https://load-hub.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814447/",
            "reporter": "anonymous"
        }
    ],
    "3814446": [
        {
            "dateadded": "2026-04-08 17:51:12 UTC",
            "url": "http://42.234.204.183:45670/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:28:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814446/",
            "reporter": "geenensp"
        }
    ],
    "3814445": [
        {
            "dateadded": "2026-04-08 17:48:07 UTC",
            "url": "https://core-gate.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814445/",
            "reporter": "anonymous"
        }
    ],
    "3814444": [
        {
            "dateadded": "2026-04-08 17:47:08 UTC",
            "url": "http://178.16.55.23/chromedriver.exe",
            "url_status": "offline",
            "last_online": "2026-04-10 16:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-23",
                "njRAT",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814444/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814442": [
        {
            "dateadded": "2026-04-08 17:47:07 UTC",
            "url": "http://178.16.54.149/33333.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "178-16-54-149",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814442/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814443": [
        {
            "dateadded": "2026-04-08 17:47:07 UTC",
            "url": "http://27.204.225.246:35523/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:11:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814443/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814441": [
        {
            "dateadded": "2026-04-08 17:47:06 UTC",
            "url": "http://178.16.54.149/31agosto.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "178-16-54-149",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814441/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814440": [
        {
            "dateadded": "2026-04-08 17:42:10 UTC",
            "url": "https://peak-svc.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814440/",
            "reporter": "anonymous"
        }
    ],
    "3814439": [
        {
            "dateadded": "2026-04-08 17:42:09 UTC",
            "url": "http://42.234.204.183:45670/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814439/",
            "reporter": "geenensp"
        }
    ],
    "3814438": [
        {
            "dateadded": "2026-04-08 17:39:08 UTC",
            "url": "http://115.55.239.151:49191/i",
            "url_status": "offline",
            "last_online": "2026-04-10 03:57:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814438/",
            "reporter": "geenensp"
        }
    ],
    "3814437": [
        {
            "dateadded": "2026-04-08 17:36:07 UTC",
            "url": "https://shift-node.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814437/",
            "reporter": "anonymous"
        }
    ],
    "3814436": [
        {
            "dateadded": "2026-04-08 17:35:14 UTC",
            "url": "http://117.216.31.158:38637/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814436/",
            "reporter": "geenensp"
        }
    ],
    "3814435": [
        {
            "dateadded": "2026-04-08 17:33:10 UTC",
            "url": "http://115.63.13.122:46533/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:52:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814435/",
            "reporter": "geenensp"
        }
    ],
    "3814434": [
        {
            "dateadded": "2026-04-08 17:32:10 UTC",
            "url": "https://take-api.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814434/",
            "reporter": "anonymous"
        }
    ],
    "3814430": [
        {
            "dateadded": "2026-04-08 17:29:07 UTC",
            "url": "http://178.16.55.80/TaskSvc.vbs",
            "url_status": "offline",
            "last_online": "2026-04-25 14:16:50 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-80",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814430/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814431": [
        {
            "dateadded": "2026-04-08 17:29:07 UTC",
            "url": "http://178.16.55.80/procesos.vbs",
            "url_status": "offline",
            "last_online": "2026-04-25 15:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-80",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814431/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814432": [
        {
            "dateadded": "2026-04-08 17:29:07 UTC",
            "url": "http://178.16.55.80/Task.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "178-16-55-80",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814432/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814433": [
        {
            "dateadded": "2026-04-08 17:29:07 UTC",
            "url": "http://178.16.55.80/SysTask.vbs",
            "url_status": "offline",
            "last_online": "2026-04-25 15:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-55-80",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814433/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814429": [
        {
            "dateadded": "2026-04-08 17:28:17 UTC",
            "url": "http://112.123.44.210:40109/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:28:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814429/",
            "reporter": "geenensp"
        }
    ],
    "3814428": [
        {
            "dateadded": "2026-04-08 17:27:18 UTC",
            "url": "http://46.116.177.76:59843/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:49:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814428/",
            "reporter": "geenensp"
        }
    ],
    "3814427": [
        {
            "dateadded": "2026-04-08 17:27:09 UTC",
            "url": "https://top-logic.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814427/",
            "reporter": "anonymous"
        }
    ],
    "3814426": [
        {
            "dateadded": "2026-04-08 17:24:14 UTC",
            "url": "https://link-hub.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814426/",
            "reporter": "anonymous"
        }
    ],
    "3814425": [
        {
            "dateadded": "2026-04-08 17:21:22 UTC",
            "url": "http://123.5.155.180:43622/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 17:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814425/",
            "reporter": "geenensp"
        }
    ],
    "3814424": [
        {
            "dateadded": "2026-04-08 17:18:24 UTC",
            "url": "http://115.55.239.151:49191/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:14:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814424/",
            "reporter": "geenensp"
        }
    ],
    "3814423": [
        {
            "dateadded": "2026-04-08 17:17:11 UTC",
            "url": "http://123.189.145.160:39046/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:10:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814423/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814422": [
        {
            "dateadded": "2026-04-08 17:17:08 UTC",
            "url": "http://27.204.225.246:35523/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:21:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814422/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814421": [
        {
            "dateadded": "2026-04-08 17:15:14 UTC",
            "url": "https://match-gate.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814421/",
            "reporter": "anonymous"
        }
    ],
    "3814420": [
        {
            "dateadded": "2026-04-08 17:13:15 UTC",
            "url": "http://46.116.177.76:59843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814420/",
            "reporter": "geenensp"
        }
    ],
    "3814419": [
        {
            "dateadded": "2026-04-08 17:09:12 UTC",
            "url": "https://item-svc.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814419/",
            "reporter": "anonymous"
        }
    ],
    "3814418": [
        {
            "dateadded": "2026-04-08 17:06:23 UTC",
            "url": "http://61.53.85.113:59799/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:06:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814418/",
            "reporter": "geenensp"
        }
    ],
    "3814417": [
        {
            "dateadded": "2026-04-08 17:02:09 UTC",
            "url": "https://step-node.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 17:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814417/",
            "reporter": "anonymous"
        }
    ],
    "3814416": [
        {
            "dateadded": "2026-04-08 17:00:30 UTC",
            "url": "http://61.53.85.113:59799/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 17:00:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814416/",
            "reporter": "geenensp"
        }
    ],
    "3814415": [
        {
            "dateadded": "2026-04-08 16:58:12 UTC",
            "url": "https://dual-api.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814415/",
            "reporter": "anonymous"
        }
    ],
    "3814414": [
        {
            "dateadded": "2026-04-08 16:51:07 UTC",
            "url": "https://best-pair.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814414/",
            "reporter": "anonymous"
        }
    ],
    "3814413": [
        {
            "dateadded": "2026-04-08 16:46:08 UTC",
            "url": "https://base-vault.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814413/",
            "reporter": "anonymous"
        }
    ],
    "3814412": [
        {
            "dateadded": "2026-04-08 16:41:07 UTC",
            "url": "https://hist-svc.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814412/",
            "reporter": "anonymous"
        }
    ],
    "3814411": [
        {
            "dateadded": "2026-04-08 16:35:09 UTC",
            "url": "https://crown-node.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814411/",
            "reporter": "anonymous"
        }
    ],
    "3814410": [
        {
            "dateadded": "2026-04-08 16:32:06 UTC",
            "url": "http://115.53.218.123:38316/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814410/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814409": [
        {
            "dateadded": "2026-04-08 16:30:14 UTC",
            "url": "https://rule-check.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814409/",
            "reporter": "anonymous"
        }
    ],
    "3814408": [
        {
            "dateadded": "2026-04-08 16:29:23 UTC",
            "url": "http://105.184.29.36:33225/i",
            "url_status": "offline",
            "last_online": "2026-04-09 03:50:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814408/",
            "reporter": "geenensp"
        }
    ],
    "3814407": [
        {
            "dateadded": "2026-04-08 16:23:15 UTC",
            "url": "https://past-api.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814407/",
            "reporter": "anonymous"
        }
    ],
    "3814406": [
        {
            "dateadded": "2026-04-08 16:19:15 UTC",
            "url": "https://king-logic.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:19:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814406/",
            "reporter": "anonymous"
        }
    ],
    "3814405": [
        {
            "dateadded": "2026-04-08 16:13:12 UTC",
            "url": "https://message-hub.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814405/",
            "reporter": "anonymous"
        }
    ],
    "3814404": [
        {
            "dateadded": "2026-04-08 16:07:14 UTC",
            "url": "https://clear-gate.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814404/",
            "reporter": "anonymous"
        }
    ],
    "3814403": [
        {
            "dateadded": "2026-04-08 16:01:30 UTC",
            "url": "http://105.184.29.36:33225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 03:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814403/",
            "reporter": "geenensp"
        }
    ],
    "3814402": [
        {
            "dateadded": "2026-04-08 16:01:13 UTC",
            "url": "https://soft-svc.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 16:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814402/",
            "reporter": "anonymous"
        }
    ],
    "3814401": [
        {
            "dateadded": "2026-04-08 15:57:07 UTC",
            "url": "http://115.53.218.123:38316/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 17:00:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814401/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814400": [
        {
            "dateadded": "2026-04-08 15:55:14 UTC",
            "url": "https://truth-node.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814400/",
            "reporter": "anonymous"
        }
    ],
    "3814399": [
        {
            "dateadded": "2026-04-08 15:53:23 UTC",
            "url": "http://178.165.125.212:41472/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814399/",
            "reporter": "geenensp"
        }
    ],
    "3814398": [
        {
            "dateadded": "2026-04-08 15:51:13 UTC",
            "url": "https://link-api.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814398/",
            "reporter": "anonymous"
        }
    ],
    "3814397": [
        {
            "dateadded": "2026-04-08 15:47:12 UTC",
            "url": "https://send-relay.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814397/",
            "reporter": "anonymous"
        }
    ],
    "3814396": [
        {
            "dateadded": "2026-04-08 15:37:11 UTC",
            "url": "https://ftpemails.com/MSI_145003.png",
            "url_status": "offline",
            "last_online": "2026-04-08 15:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "stego"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814396/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814395": [
        {
            "dateadded": "2026-04-08 15:37:09 UTC",
            "url": "https://magina.online/MSI_091731.png",
            "url_status": "offline",
            "last_online": "2026-04-16 05:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "stego"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814395/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814394": [
        {
            "dateadded": "2026-04-08 15:37:06 UTC",
            "url": "http://vagner.site/MSI_095306.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "stego"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814394/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814393": [
        {
            "dateadded": "2026-04-08 15:36:07 UTC",
            "url": "https://port-hub.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814393/",
            "reporter": "anonymous"
        }
    ],
    "3814392": [
        {
            "dateadded": "2026-04-08 15:33:06 UTC",
            "url": "https://iridiacheats.dev/install",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "NetSupport",
                "rat",
                "ua-ps1"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814392/",
            "reporter": "abuse_ch"
        }
    ],
    "3814391": [
        {
            "dateadded": "2026-04-08 15:32:06 UTC",
            "url": "http://222.138.102.241:54139/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814391/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814390": [
        {
            "dateadded": "2026-04-08 15:31:06 UTC",
            "url": "https://coat-svc.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814390/",
            "reporter": "anonymous"
        }
    ],
    "3814389": [
        {
            "dateadded": "2026-04-08 15:27:08 UTC",
            "url": "http://123.133.209.194:48095/i",
            "url_status": "offline",
            "last_online": "2026-04-14 23:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814389/",
            "reporter": "geenensp"
        }
    ],
    "3814388": [
        {
            "dateadded": "2026-04-08 15:25:10 UTC",
            "url": "https://safe-node.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814388/",
            "reporter": "anonymous"
        }
    ],
    "3814387": [
        {
            "dateadded": "2026-04-08 15:20:09 UTC",
            "url": "https://slot-api.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814387/",
            "reporter": "anonymous"
        }
    ],
    "3814386": [
        {
            "dateadded": "2026-04-08 15:17:09 UTC",
            "url": "https://google-services.cc/base.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814386/",
            "reporter": "abuse_ch"
        }
    ],
    "3814385": [
        {
            "dateadded": "2026-04-08 15:17:08 UTC",
            "url": "http://222.138.102.241:54139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:14:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814385/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814384": [
        {
            "dateadded": "2026-04-08 15:14:10 UTC",
            "url": "https://time-check.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814384/",
            "reporter": "anonymous"
        }
    ],
    "3814383": [
        {
            "dateadded": "2026-04-08 15:09:09 UTC",
            "url": "https://wrap-logic.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814383/",
            "reporter": "anonymous"
        }
    ],
    "3814382": [
        {
            "dateadded": "2026-04-08 15:06:18 UTC",
            "url": "http://182.117.8.232:41777/i",
            "url_status": "offline",
            "last_online": "2026-04-08 21:47:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814382/",
            "reporter": "geenensp"
        }
    ],
    "3814381": [
        {
            "dateadded": "2026-04-08 15:04:12 UTC",
            "url": "https://rest-gate.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 15:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814381/",
            "reporter": "anonymous"
        }
    ],
    "3814380": [
        {
            "dateadded": "2026-04-08 14:58:08 UTC",
            "url": "https://speech-svc.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814380/",
            "reporter": "anonymous"
        }
    ],
    "3814379": [
        {
            "dateadded": "2026-04-08 14:56:08 UTC",
            "url": "https://prennixo.com//pnpm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814379/",
            "reporter": "Lenard"
        }
    ],
    "3814378": [
        {
            "dateadded": "2026-04-08 14:56:06 UTC",
            "url": "https://prennixo.com/react",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814378/",
            "reporter": "Lenard"
        }
    ],
    "3814377": [
        {
            "dateadded": "2026-04-08 14:54:13 UTC",
            "url": "http://123.133.209.194:48095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 23:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814377/",
            "reporter": "geenensp"
        }
    ],
    "3814376": [
        {
            "dateadded": "2026-04-08 14:52:07 UTC",
            "url": "http://182.119.226.59:49082/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:11:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814376/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814375": [
        {
            "dateadded": "2026-04-08 14:51:09 UTC",
            "url": "https://quiet-node.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814375/",
            "reporter": "anonymous"
        }
    ],
    "3814374": [
        {
            "dateadded": "2026-04-08 14:46:20 UTC",
            "url": "http://123.134.59.106:39556/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814374/",
            "reporter": "geenensp"
        }
    ],
    "3814373": [
        {
            "dateadded": "2026-04-08 14:46:07 UTC",
            "url": "https://term-log.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814373/",
            "reporter": "anonymous"
        }
    ],
    "3814372": [
        {
            "dateadded": "2026-04-08 14:42:07 UTC",
            "url": "http://61.163.158.152:60615/i",
            "url_status": "offline",
            "last_online": "2026-04-08 14:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814372/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814371": [
        {
            "dateadded": "2026-04-08 14:41:10 UTC",
            "url": "https://word-api.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814371/",
            "reporter": "anonymous"
        }
    ],
    "3814370": [
        {
            "dateadded": "2026-04-08 14:35:09 UTC",
            "url": "https://talk-sync.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814370/",
            "reporter": "anonymous"
        }
    ],
    "3814369": [
        {
            "dateadded": "2026-04-08 14:32:08 UTC",
            "url": "http://124.11.64.11:49875/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:01:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814369/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814368": [
        {
            "dateadded": "2026-04-08 14:29:12 UTC",
            "url": "https://frame-hub.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814368/",
            "reporter": "anonymous"
        }
    ],
    "3814367": [
        {
            "dateadded": "2026-04-08 14:27:07 UTC",
            "url": "http://182.119.226.59:49082/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 17:05:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814367/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814366": [
        {
            "dateadded": "2026-04-08 14:23:08 UTC",
            "url": "https://solid-svc.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814366/",
            "reporter": "anonymous"
        }
    ],
    "3814365": [
        {
            "dateadded": "2026-04-08 14:22:07 UTC",
            "url": "http://125.41.1.165:44071/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:40:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814365/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814364": [
        {
            "dateadded": "2026-04-08 14:18:08 UTC",
            "url": "https://mesh-node.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814364/",
            "reporter": "anonymous"
        }
    ],
    "3814363": [
        {
            "dateadded": "2026-04-08 14:15:10 UTC",
            "url": "https://geo-api.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814363/",
            "reporter": "anonymous"
        }
    ],
    "3814362": [
        {
            "dateadded": "2026-04-08 14:11:08 UTC",
            "url": "https://base-point.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814362/",
            "reporter": "anonymous"
        }
    ],
    "3814361": [
        {
            "dateadded": "2026-04-08 14:04:13 UTC",
            "url": "http://115.54.164.160:46338/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814361/",
            "reporter": "geenensp"
        }
    ],
    "3814359": [
        {
            "dateadded": "2026-04-08 14:03:21 UTC",
            "url": "http://182.127.80.25:59854/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:03:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814359/",
            "reporter": "geenensp"
        }
    ],
    "3814360": [
        {
            "dateadded": "2026-04-08 14:03:21 UTC",
            "url": "http://222.138.64.12:41955/i",
            "url_status": "offline",
            "last_online": "2026-04-12 23:10:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814360/",
            "reporter": "geenensp"
        }
    ],
    "3814358": [
        {
            "dateadded": "2026-04-08 14:02:08 UTC",
            "url": "https://form-check.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 14:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814358/",
            "reporter": "anonymous"
        }
    ],
    "3814357": [
        {
            "dateadded": "2026-04-08 13:56:07 UTC",
            "url": "https://sign-gate.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 13:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814357/",
            "reporter": "anonymous"
        }
    ],
    "3814356": [
        {
            "dateadded": "2026-04-08 13:54:10 UTC",
            "url": "http://42.229.165.25:55762/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814356/",
            "reporter": "geenensp"
        }
    ],
    "3814355": [
        {
            "dateadded": "2026-04-08 13:54:05 UTC",
            "url": "http://85.239.147.6/files/7655527200/UUUMyLr.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814355/",
            "reporter": "Bitsight"
        }
    ],
    "3814354": [
        {
            "dateadded": "2026-04-08 13:51:11 UTC",
            "url": "https://art-svc.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 13:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814354/",
            "reporter": "anonymous"
        }
    ],
    "3814353": [
        {
            "dateadded": "2026-04-08 13:46:52 UTC",
            "url": "http://175.22.235.64:52647/i",
            "url_status": "offline",
            "last_online": "2026-04-09 21:43:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814353/",
            "reporter": "geenensp"
        }
    ],
    "3814352": [
        {
            "dateadded": "2026-04-08 13:46:06 UTC",
            "url": "http://125.41.1.165:44071/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:10:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814352/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814351": [
        {
            "dateadded": "2026-04-08 13:45:12 UTC",
            "url": "https://draw-node.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 13:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814351/",
            "reporter": "anonymous"
        }
    ],
    "3814350": [
        {
            "dateadded": "2026-04-08 13:41:10 UTC",
            "url": "http://61.52.86.36:52242/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:43:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814350/",
            "reporter": "geenensp"
        }
    ],
    "3814349": [
        {
            "dateadded": "2026-04-08 13:41:06 UTC",
            "url": "https://view-hub.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 13:41:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814349/",
            "reporter": "anonymous"
        }
    ],
    "3814348": [
        {
            "dateadded": "2026-04-08 13:40:20 UTC",
            "url": "http://182.127.80.25:59854/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 17:19:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814348/",
            "reporter": "geenensp"
        }
    ],
    "3814347": [
        {
            "dateadded": "2026-04-08 13:38:09 UTC",
            "url": "https://image-api.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 13:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814347/",
            "reporter": "anonymous"
        }
    ],
    "3814346": [
        {
            "dateadded": "2026-04-08 13:37:06 UTC",
            "url": "http://171.127.139.236:51817/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814346/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814345": [
        {
            "dateadded": "2026-04-08 13:36:15 UTC",
            "url": "http://182.126.92.120:38077/i",
            "url_status": "offline",
            "last_online": "2026-04-11 00:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814345/",
            "reporter": "geenensp"
        }
    ],
    "3814344": [
        {
            "dateadded": "2026-04-08 13:33:19 UTC",
            "url": "http://222.138.64.12:41955/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 23:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814344/",
            "reporter": "geenensp"
        }
    ],
    "3814343": [
        {
            "dateadded": "2026-04-08 13:32:08 UTC",
            "url": "http://171.127.139.236:51817/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814343/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814342": [
        {
            "dateadded": "2026-04-08 13:28:08 UTC",
            "url": "https://pixel-trace.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 13:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814342/",
            "reporter": "anonymous"
        }
    ],
    "3814341": [
        {
            "dateadded": "2026-04-08 13:27:18 UTC",
            "url": "http://59.97.251.171:39070/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:17:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814341/",
            "reporter": "geenensp"
        }
    ],
    "3814340": [
        {
            "dateadded": "2026-04-08 13:24:11 UTC",
            "url": "http://175.22.235.64:52647/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:06:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814340/",
            "reporter": "geenensp"
        }
    ],
    "3814339": [
        {
            "dateadded": "2026-04-08 13:20:09 UTC",
            "url": "http://42.55.0.149:38376/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814339/",
            "reporter": "geenensp"
        }
    ],
    "3814338": [
        {
            "dateadded": "2026-04-08 13:17:21 UTC",
            "url": "http://42.55.0.149:38376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:09:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814338/",
            "reporter": "geenensp"
        }
    ],
    "3814337": [
        {
            "dateadded": "2026-04-08 13:12:17 UTC",
            "url": "http://182.126.92.120:38077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 21:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814337/",
            "reporter": "geenensp"
        }
    ],
    "3814336": [
        {
            "dateadded": "2026-04-08 13:12:07 UTC",
            "url": "http://61.53.119.3:40689/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:33:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814336/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814335": [
        {
            "dateadded": "2026-04-08 13:02:07 UTC",
            "url": "http://61.53.82.61:51804/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:51:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814335/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814334": [
        {
            "dateadded": "2026-04-08 13:00:15 UTC",
            "url": "http://59.97.251.171:39070/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:09:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814334/",
            "reporter": "geenensp"
        }
    ],
    "3814330": [
        {
            "dateadded": "2026-04-08 12:35:20 UTC",
            "url": "http://110.36.20.85:40051/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814330/",
            "reporter": "geenensp"
        }
    ],
    "3814329": [
        {
            "dateadded": "2026-04-08 12:25:26 UTC",
            "url": "http://115.55.237.251:34948/i",
            "url_status": "offline",
            "last_online": "2026-04-09 03:59:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814329/",
            "reporter": "geenensp"
        }
    ],
    "3814328": [
        {
            "dateadded": "2026-04-08 12:14:16 UTC",
            "url": "http://115.61.116.72:42291/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814328/",
            "reporter": "geenensp"
        }
    ],
    "3814327": [
        {
            "dateadded": "2026-04-08 12:12:22 UTC",
            "url": "http://221.15.189.66:39201/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814327/",
            "reporter": "geenensp"
        }
    ],
    "3814325": [
        {
            "dateadded": "2026-04-08 11:57:22 UTC",
            "url": "http://27.202.191.53:52275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:20:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814325/",
            "reporter": "geenensp"
        }
    ],
    "3814326": [
        {
            "dateadded": "2026-04-08 11:57:22 UTC",
            "url": "http://115.55.237.251:34948/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 23:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814326/",
            "reporter": "geenensp"
        }
    ],
    "3814324": [
        {
            "dateadded": "2026-04-08 11:47:07 UTC",
            "url": "http://222.137.82.113:38476/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814324/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814323": [
        {
            "dateadded": "2026-04-08 11:42:22 UTC",
            "url": "http://123.8.81.192:41615/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:48:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814323/",
            "reporter": "geenensp"
        }
    ],
    "3814322": [
        {
            "dateadded": "2026-04-08 11:39:28 UTC",
            "url": "http://115.61.116.72:42291/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 14:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814322/",
            "reporter": "geenensp"
        }
    ],
    "3814321": [
        {
            "dateadded": "2026-04-08 11:37:08 UTC",
            "url": "http://27.215.47.176:49969/i",
            "url_status": "offline",
            "last_online": "2026-04-08 18:41:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814321/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814320": [
        {
            "dateadded": "2026-04-08 11:35:19 UTC",
            "url": "http://221.15.189.66:39201/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:25:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814320/",
            "reporter": "geenensp"
        }
    ],
    "3814319": [
        {
            "dateadded": "2026-04-08 11:22:27 UTC",
            "url": "http://115.63.43.101:36878/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:11:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814319/",
            "reporter": "geenensp"
        }
    ],
    "3814318": [
        {
            "dateadded": "2026-04-08 11:22:07 UTC",
            "url": "http://182.121.45.199:50943/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814318/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814317": [
        {
            "dateadded": "2026-04-08 11:09:20 UTC",
            "url": "http://110.36.18.167:35874/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814317/",
            "reporter": "geenensp"
        }
    ],
    "3814312": [
        {
            "dateadded": "2026-04-08 11:06:10 UTC",
            "url": "https://vvind-point.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814312/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814313": [
        {
            "dateadded": "2026-04-08 11:06:10 UTC",
            "url": "https://ktnceg.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814313/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814314": [
        {
            "dateadded": "2026-04-08 11:06:10 UTC",
            "url": "https://cleaaudit.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814314/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814315": [
        {
            "dateadded": "2026-04-08 11:06:10 UTC",
            "url": "https://ser-fluxex.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814315/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814316": [
        {
            "dateadded": "2026-04-08 11:06:10 UTC",
            "url": "https://hyper-tru5.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814316/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814311": [
        {
            "dateadded": "2026-04-08 11:05:16 UTC",
            "url": "https://top-team.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814311/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814310": [
        {
            "dateadded": "2026-04-08 11:05:15 UTC",
            "url": "https://rest-log.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814310/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814304": [
        {
            "dateadded": "2026-04-08 11:05:14 UTC",
            "url": "https://round-svc.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814304/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814305": [
        {
            "dateadded": "2026-04-08 11:05:14 UTC",
            "url": "https://cargo-hub.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814305/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814306": [
        {
            "dateadded": "2026-04-08 11:05:14 UTC",
            "url": "https://game-api.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814306/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814307": [
        {
            "dateadded": "2026-04-08 11:05:14 UTC",
            "url": "https://score-board.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814307/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814308": [
        {
            "dateadded": "2026-04-08 11:05:14 UTC",
            "url": "https://point-scan.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814308/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814309": [
        {
            "dateadded": "2026-04-08 11:05:14 UTC",
            "url": "https://point-api.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814309/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814296": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://main-route.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814296/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814297": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://count-log.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814297/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814298": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://heavy-weight.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814298/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814299": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://trimeshet.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814299/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814300": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://stat-render.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814300/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814301": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://break-down.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814301/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814302": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://dock-svc.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814302/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814303": [
        {
            "dateadded": "2026-04-08 11:05:13 UTC",
            "url": "https://truck-line.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814303/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814295": [
        {
            "dateadded": "2026-04-08 11:05:10 UTC",
            "url": "https://match-hub.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814295/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814294": [
        {
            "dateadded": "2026-04-08 11:05:08 UTC",
            "url": "https://bread-wine.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814294/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814291": [
        {
            "dateadded": "2026-04-08 11:04:16 UTC",
            "url": "https://ravoqqux.top/admin/signup-worker.js",
            "url_status": "offline",
            "last_online": "2026-04-08 22:03:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814291/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814292": [
        {
            "dateadded": "2026-04-08 11:04:16 UTC",
            "url": "https://hsgeowvi.com/032.txt",
            "url_status": "offline",
            "last_online": "2026-04-08 11:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814292/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814293": [
        {
            "dateadded": "2026-04-08 11:04:16 UTC",
            "url": "https://hint-api.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814293/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814289": [
        {
            "dateadded": "2026-04-08 11:04:15 UTC",
            "url": "https://motion-svc.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814289/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814290": [
        {
            "dateadded": "2026-04-08 11:04:15 UTC",
            "url": "https://data-split.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814290/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814287": [
        {
            "dateadded": "2026-04-08 11:04:14 UTC",
            "url": "https://outer-reach.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814287/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814288": [
        {
            "dateadded": "2026-04-08 11:04:14 UTC",
            "url": "https://lab-access.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814288/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814272": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://ideal-node.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814272/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814273": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://step-wise.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814273/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814274": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://word-map.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814274/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814275": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://waste-node.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814275/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814276": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://sense-data.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814276/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814277": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://wave-point.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814277/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814278": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://surface-api.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814278/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814279": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://model-check.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814279/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814280": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://load-sync.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814280/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814281": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://floor-node.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814281/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814282": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://trend-api.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814282/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814283": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://core-logic.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814283/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814284": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://iridiacheats.dev/fal.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "NetSupport",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814284/",
            "reporter": "burger"
        }
    ],
    "3814285": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://mega-vault.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814285/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814286": [
        {
            "dateadded": "2026-04-08 11:04:13 UTC",
            "url": "https://line-secure.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814286/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814269": [
        {
            "dateadded": "2026-04-08 11:04:12 UTC",
            "url": "https://water-log.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814269/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814270": [
        {
            "dateadded": "2026-04-08 11:04:12 UTC",
            "url": "https://hero-svc.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814270/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814271": [
        {
            "dateadded": "2026-04-08 11:04:12 UTC",
            "url": "https://fall-check.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814271/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814268": [
        {
            "dateadded": "2026-04-08 11:04:11 UTC",
            "url": "https://pure-node.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814268/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814267": [
        {
            "dateadded": "2026-04-08 11:04:10 UTC",
            "url": "https://order-logic.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814267/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814260": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "https://base-audit.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814260/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814261": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "https://lead-trace.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814261/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814262": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "https://debate-log.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814262/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814263": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "http://iridiacheats.dev/install",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "NetSupport",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814263/",
            "reporter": "burger"
        }
    ],
    "3814264": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "https://iridiacheats.dev/gggs.7z",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "NetSupport",
                "rat"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814264/",
            "reporter": "burger"
        }
    ],
    "3814265": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "https://low-io.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814265/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814266": [
        {
            "dateadded": "2026-04-08 11:04:09 UTC",
            "url": "https://micro-svc.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814266/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814255": [
        {
            "dateadded": "2026-04-08 11:04:08 UTC",
            "url": "https://perception-svc.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814255/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814256": [
        {
            "dateadded": "2026-04-08 11:04:08 UTC",
            "url": "https://map-route.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814256/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814257": [
        {
            "dateadded": "2026-04-08 11:04:08 UTC",
            "url": "https://small-step.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814257/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814258": [
        {
            "dateadded": "2026-04-08 11:04:08 UTC",
            "url": "https://blast-zone.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814258/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814259": [
        {
            "dateadded": "2026-04-08 11:04:08 UTC",
            "url": "https://frame-api.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814259/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814251": [
        {
            "dateadded": "2026-04-08 11:04:07 UTC",
            "url": "https://rule-set.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814251/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814253": [
        {
            "dateadded": "2026-04-08 11:04:07 UTC",
            "url": "https://stat-portal.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814253/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814254": [
        {
            "dateadded": "2026-04-08 11:04:07 UTC",
            "url": "https://space-time.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814254/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814247": [
        {
            "dateadded": "2026-04-08 11:04:06 UTC",
            "url": "https://flow-object.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814247/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814248": [
        {
            "dateadded": "2026-04-08 11:04:06 UTC",
            "url": "https://infer-unit.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814248/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814249": [
        {
            "dateadded": "2026-04-08 11:04:06 UTC",
            "url": "https://archive-hub.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814249/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814250": [
        {
            "dateadded": "2026-04-08 11:04:06 UTC",
            "url": "https://logic-vault.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "verification-google"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814250/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3814246": [
        {
            "dateadded": "2026-04-08 11:03:12 UTC",
            "url": "http://123.13.117.136:38308/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814246/",
            "reporter": "geenensp"
        }
    ],
    "3814245": [
        {
            "dateadded": "2026-04-08 11:02:08 UTC",
            "url": "http://182.121.45.199:50943/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814245/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814244": [
        {
            "dateadded": "2026-04-08 10:59:13 UTC",
            "url": "https://style-log.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814244/",
            "reporter": "anonymous"
        }
    ],
    "3814243": [
        {
            "dateadded": "2026-04-08 10:54:13 UTC",
            "url": "https://item-svc.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814243/",
            "reporter": "anonymous"
        }
    ],
    "3814242": [
        {
            "dateadded": "2026-04-08 10:48:14 UTC",
            "url": "https://stock-node.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814242/",
            "reporter": "anonymous"
        }
    ],
    "3814241": [
        {
            "dateadded": "2026-04-08 10:43:13 UTC",
            "url": "https://shop-hub.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814241/",
            "reporter": "anonymous"
        }
    ],
    "3814240": [
        {
            "dateadded": "2026-04-08 10:37:16 UTC",
            "url": "https://wear-api.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814240/",
            "reporter": "anonymous"
        }
    ],
    "3814239": [
        {
            "dateadded": "2026-04-08 10:33:20 UTC",
            "url": "http://222.140.131.243:53574/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:02:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814239/",
            "reporter": "geenensp"
        }
    ],
    "3814238": [
        {
            "dateadded": "2026-04-08 10:32:11 UTC",
            "url": "https://coat-check.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814238/",
            "reporter": "anonymous"
        }
    ],
    "3814237": [
        {
            "dateadded": "2026-04-08 10:30:22 UTC",
            "url": "http://42.55.189.59:41488/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:33:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814237/",
            "reporter": "geenensp"
        }
    ],
    "3814236": [
        {
            "dateadded": "2026-04-08 10:30:20 UTC",
            "url": "http://110.36.18.167:35874/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:30:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814236/",
            "reporter": "geenensp"
        }
    ],
    "3814235": [
        {
            "dateadded": "2026-04-08 10:30:07 UTC",
            "url": "http://85.239.147.6/files/7942715918/RBZABPF.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814235/",
            "reporter": "Bitsight"
        }
    ],
    "3814233": [
        {
            "dateadded": "2026-04-08 10:26:15 UTC",
            "url": "http://123.8.81.192:41615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:18:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814233/",
            "reporter": "geenensp"
        }
    ],
    "3814234": [
        {
            "dateadded": "2026-04-08 10:26:15 UTC",
            "url": "https://matrix-svc.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814234/",
            "reporter": "anonymous"
        }
    ],
    "3814232": [
        {
            "dateadded": "2026-04-08 10:22:21 UTC",
            "url": "http://182.53.98.121:50518/i",
            "url_status": "offline",
            "last_online": "2026-04-11 05:28:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814232/",
            "reporter": "geenensp"
        }
    ],
    "3814231": [
        {
            "dateadded": "2026-04-08 10:21:27 UTC",
            "url": "http://123.13.117.136:38308/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814231/",
            "reporter": "geenensp"
        }
    ],
    "3814230": [
        {
            "dateadded": "2026-04-08 10:21:14 UTC",
            "url": "https://quick-io.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814230/",
            "reporter": "anonymous"
        }
    ],
    "3814228": [
        {
            "dateadded": "2026-04-08 10:17:07 UTC",
            "url": "http://182.114.32.163:42919/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:42:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814228/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814229": [
        {
            "dateadded": "2026-04-08 10:17:07 UTC",
            "url": "http://45.166.191.8:57062/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:19:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814229/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814227": [
        {
            "dateadded": "2026-04-08 10:14:12 UTC",
            "url": "https://unit-node.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814227/",
            "reporter": "anonymous"
        }
    ],
    "3814226": [
        {
            "dateadded": "2026-04-08 10:09:12 UTC",
            "url": "https://core-api.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814226/",
            "reporter": "anonymous"
        }
    ],
    "3814225": [
        {
            "dateadded": "2026-04-08 10:05:26 UTC",
            "url": "http://222.140.131.243:53574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:09:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814225/",
            "reporter": "geenensp"
        }
    ],
    "3814224": [
        {
            "dateadded": "2026-04-08 10:03:24 UTC",
            "url": "http://42.229.165.25:55762/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 17:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814224/",
            "reporter": "geenensp"
        }
    ],
    "3814223": [
        {
            "dateadded": "2026-04-08 10:03:23 UTC",
            "url": "http://42.55.189.59:41488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814223/",
            "reporter": "geenensp"
        }
    ],
    "3814222": [
        {
            "dateadded": "2026-04-08 10:03:08 UTC",
            "url": "https://base-point.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 10:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814222/",
            "reporter": "anonymous"
        }
    ],
    "3814221": [
        {
            "dateadded": "2026-04-08 09:57:14 UTC",
            "url": "https://mesh-static.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814221/",
            "reporter": "anonymous"
        }
    ],
    "3814220": [
        {
            "dateadded": "2026-04-08 09:57:06 UTC",
            "url": "http://39.90.149.255:36524/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814220/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814219": [
        {
            "dateadded": "2026-04-08 09:52:12 UTC",
            "url": "https://line-vault.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814219/",
            "reporter": "anonymous"
        }
    ],
    "3814218": [
        {
            "dateadded": "2026-04-08 09:47:12 UTC",
            "url": "http://219.157.51.87:38148/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:33:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814218/",
            "reporter": "geenensp"
        }
    ],
    "3814217": [
        {
            "dateadded": "2026-04-08 09:47:06 UTC",
            "url": "http://85.239.147.6/files/7900572318/KaAa3H0.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814217/",
            "reporter": "Bitsight"
        }
    ],
    "3814216": [
        {
            "dateadded": "2026-04-08 09:46:22 UTC",
            "url": "http://182.53.98.121:50518/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:41:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814216/",
            "reporter": "geenensp"
        }
    ],
    "3814215": [
        {
            "dateadded": "2026-04-08 09:46:13 UTC",
            "url": "https://hard-svc.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814215/",
            "reporter": "anonymous"
        }
    ],
    "3814214": [
        {
            "dateadded": "2026-04-08 09:42:14 UTC",
            "url": "http://219.157.51.87:38148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 12:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814214/",
            "reporter": "geenensp"
        }
    ],
    "3814213": [
        {
            "dateadded": "2026-04-08 09:41:11 UTC",
            "url": "https://mood-log.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814213/",
            "reporter": "anonymous"
        }
    ],
    "3814212": [
        {
            "dateadded": "2026-04-08 09:35:08 UTC",
            "url": "https://dark-node.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814212/",
            "reporter": "anonymous"
        }
    ],
    "3814211": [
        {
            "dateadded": "2026-04-08 09:30:09 UTC",
            "url": "https://text-api.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814211/",
            "reporter": "anonymous"
        }
    ],
    "3814210": [
        {
            "dateadded": "2026-04-08 09:27:08 UTC",
            "url": "http://39.90.149.255:36524/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814210/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814209": [
        {
            "dateadded": "2026-04-08 09:25:21 UTC",
            "url": "http://110.139.33.199:58565/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814209/",
            "reporter": "geenensp"
        }
    ],
    "3814208": [
        {
            "dateadded": "2026-04-08 09:24:11 UTC",
            "url": "https://word-check.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814208/",
            "reporter": "anonymous"
        }
    ],
    "3814207": [
        {
            "dateadded": "2026-04-08 09:18:07 UTC",
            "url": "https://live-svc.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814207/",
            "reporter": "anonymous"
        }
    ],
    "3814206": [
        {
            "dateadded": "2026-04-08 09:14:14 UTC",
            "url": "http://87.121.84.78/massload",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814206/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814205": [
        {
            "dateadded": "2026-04-08 09:12:17 UTC",
            "url": "http://87.121.84.78/c.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814205/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814204": [
        {
            "dateadded": "2026-04-08 09:12:11 UTC",
            "url": "https://ranch-hub.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814204/",
            "reporter": "anonymous"
        }
    ],
    "3814203": [
        {
            "dateadded": "2026-04-08 09:12:07 UTC",
            "url": "http://125.47.86.0:43366/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814203/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814202": [
        {
            "dateadded": "2026-04-08 09:08:07 UTC",
            "url": "https://land-vault.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814202/",
            "reporter": "anonymous"
        }
    ],
    "3814201": [
        {
            "dateadded": "2026-04-08 09:06:10 UTC",
            "url": "http://27.15.119.98:43267/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:42:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814201/",
            "reporter": "geenensp"
        }
    ],
    "3814200": [
        {
            "dateadded": "2026-04-08 09:02:07 UTC",
            "url": "http://182.114.32.163:42919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:00:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814200/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814199": [
        {
            "dateadded": "2026-04-08 09:01:07 UTC",
            "url": "https://field-node.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 09:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814199/",
            "reporter": "anonymous"
        }
    ],
    "3814198": [
        {
            "dateadded": "2026-04-08 08:55:07 UTC",
            "url": "https://crop-api.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:55:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814198/",
            "reporter": "anonymous"
        }
    ],
    "3814197": [
        {
            "dateadded": "2026-04-08 08:53:07 UTC",
            "url": "http://195.178.110.204/n",
            "url_status": "offline",
            "last_online": "2026-04-15 04:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "195-178-110-204",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814197/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814188": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.arm6",
            "url_status": "offline",
            "last_online": "2026-04-09 16:01:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814188/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814189": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.spc",
            "url_status": "offline",
            "last_online": "2026-04-09 17:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814189/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814190": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.arc",
            "url_status": "offline",
            "last_online": "2026-04-09 16:26:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814190/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814191": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.arm",
            "url_status": "offline",
            "last_online": "2026-04-09 16:53:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814191/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814192": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-09 16:49:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814192/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814193": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.arm5",
            "url_status": "offline",
            "last_online": "2026-04-09 16:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814193/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814194": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.sh4",
            "url_status": "offline",
            "last_online": "2026-04-09 16:29:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814194/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814195": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.arm7",
            "url_status": "offline",
            "last_online": "2026-04-09 15:51:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814195/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814196": [
        {
            "dateadded": "2026-04-08 08:51:16 UTC",
            "url": "http://176.65.139.25/bins/tony.ppc",
            "url_status": "offline",
            "last_online": "2026-04-09 17:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814196/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814187": [
        {
            "dateadded": "2026-04-08 08:51:10 UTC",
            "url": "https://farm-logic.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814187/",
            "reporter": "anonymous"
        }
    ],
    "3814186": [
        {
            "dateadded": "2026-04-08 08:46:18 UTC",
            "url": "http://176.65.139.67/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-12 10:38:53 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-67",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814186/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814182": [
        {
            "dateadded": "2026-04-08 08:44:15 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814182/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814183": [
        {
            "dateadded": "2026-04-08 08:44:15 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 15:20:30 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814183/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814184": [
        {
            "dateadded": "2026-04-08 08:44:15 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814184/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814185": [
        {
            "dateadded": "2026-04-08 08:44:15 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 15:18:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814185/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814181": [
        {
            "dateadded": "2026-04-08 08:44:12 UTC",
            "url": "https://data-svc.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814181/",
            "reporter": "anonymous"
        }
    ],
    "3814180": [
        {
            "dateadded": "2026-04-08 08:43:19 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814180/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814173": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.41/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-25 06:08:52 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814173/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814174": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 14:10:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814174/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814175": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 15:20:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814175/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814176": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.41/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-25 05:57:41 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814176/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814177": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:35:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814177/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814178": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.52/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 14:59:03 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814178/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814179": [
        {
            "dateadded": "2026-04-08 08:43:18 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:12:05 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814179/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814170": [
        {
            "dateadded": "2026-04-08 08:43:12 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:18:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814170/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814171": [
        {
            "dateadded": "2026-04-08 08:43:12 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 14:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814171/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814172": [
        {
            "dateadded": "2026-04-08 08:43:12 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 16:42:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814172/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814168": [
        {
            "dateadded": "2026-04-08 08:43:08 UTC",
            "url": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": "2026-04-12 15:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814168/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814169": [
        {
            "dateadded": "2026-04-08 08:43:08 UTC",
            "url": "http://105.225.32.15:46311/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:13:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814169/",
            "reporter": "geenensp"
        }
    ],
    "3814166": [
        {
            "dateadded": "2026-04-08 08:42:13 UTC",
            "url": "http://176.65.139.41/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-25 05:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814166/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814167": [
        {
            "dateadded": "2026-04-08 08:42:13 UTC",
            "url": "http://176.65.139.41/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-25 05:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814167/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814160": [
        {
            "dateadded": "2026-04-08 08:41:17 UTC",
            "url": "http://176.65.139.41/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-25 05:41:51 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814160/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814161": [
        {
            "dateadded": "2026-04-08 08:41:17 UTC",
            "url": "http://176.65.139.41/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-25 05:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814161/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814162": [
        {
            "dateadded": "2026-04-08 08:41:17 UTC",
            "url": "http://176.65.139.41/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-25 06:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814162/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814163": [
        {
            "dateadded": "2026-04-08 08:41:17 UTC",
            "url": "http://176.65.139.41/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-25 06:05:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814163/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814164": [
        {
            "dateadded": "2026-04-08 08:41:17 UTC",
            "url": "http://176.65.139.41/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-25 04:59:40 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814164/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814165": [
        {
            "dateadded": "2026-04-08 08:41:17 UTC",
            "url": "http://176.65.139.41/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-25 06:01:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814165/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814159": [
        {
            "dateadded": "2026-04-08 08:40:13 UTC",
            "url": "http://176.65.139.41/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-25 06:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814159/",
            "reporter": "BlinkzSec"
        }
    ],
    "3814158": [
        {
            "dateadded": "2026-04-08 08:39:10 UTC",
            "url": "https://smart-io.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814158/",
            "reporter": "anonymous"
        }
    ],
    "3814157": [
        {
            "dateadded": "2026-04-08 08:38:05 UTC",
            "url": "http://85.239.147.6/files/8756257131/zCfWbdD.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814157/",
            "reporter": "Bitsight"
        }
    ],
    "3814156": [
        {
            "dateadded": "2026-04-08 08:34:06 UTC",
            "url": "https://fact-vault.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:34:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814156/",
            "reporter": "anonymous"
        }
    ],
    "3814155": [
        {
            "dateadded": "2026-04-08 08:28:07 UTC",
            "url": "https://study-node.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814155/",
            "reporter": "anonymous"
        }
    ],
    "3814154": [
        {
            "dateadded": "2026-04-08 08:23:18 UTC",
            "url": "http://42.238.169.158:52941/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814154/",
            "reporter": "geenensp"
        }
    ],
    "3814153": [
        {
            "dateadded": "2026-04-08 08:22:09 UTC",
            "url": "https://test-api.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814153/",
            "reporter": "anonymous"
        }
    ],
    "3814152": [
        {
            "dateadded": "2026-04-08 08:17:13 UTC",
            "url": "https://lab-check.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814152/",
            "reporter": "anonymous"
        }
    ],
    "3814151": [
        {
            "dateadded": "2026-04-08 08:16:18 UTC",
            "url": "http://42.177.182.151:34349/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:48:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814151/",
            "reporter": "geenensp"
        }
    ],
    "3814150": [
        {
            "dateadded": "2026-04-08 08:11:08 UTC",
            "url": "https://open-log.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814150/",
            "reporter": "anonymous"
        }
    ],
    "3814149": [
        {
            "dateadded": "2026-04-08 08:08:21 UTC",
            "url": "http://42.224.193.8:55633/i",
            "url_status": "offline",
            "last_online": "2026-04-08 15:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814149/",
            "reporter": "geenensp"
        }
    ],
    "3814148": [
        {
            "dateadded": "2026-04-08 08:06:07 UTC",
            "url": "https://trace-svc.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814148/",
            "reporter": "anonymous"
        }
    ],
    "3814147": [
        {
            "dateadded": "2026-04-08 08:06:06 UTC",
            "url": "http://85.239.147.6/files/8756257131/zCfWbdD.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814147/",
            "reporter": "c2hunter"
        }
    ],
    "3814146": [
        {
            "dateadded": "2026-04-08 08:04:08 UTC",
            "url": "http://39.88.7.211:43286/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:57:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814146/",
            "reporter": "geenensp"
        }
    ],
    "3814145": [
        {
            "dateadded": "2026-04-08 08:02:12 UTC",
            "url": "http://42.238.169.158:52941/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 11:14:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814145/",
            "reporter": "geenensp"
        }
    ],
    "3814144": [
        {
            "dateadded": "2026-04-08 08:02:06 UTC",
            "url": "http://115.58.36.223:54421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 08:02:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814144/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814143": [
        {
            "dateadded": "2026-04-08 08:00:10 UTC",
            "url": "https://file-node.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 08:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814143/",
            "reporter": "anonymous"
        }
    ],
    "3814142": [
        {
            "dateadded": "2026-04-08 07:55:19 UTC",
            "url": "http://113.233.112.124:60978/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814142/",
            "reporter": "geenensp"
        }
    ],
    "3814141": [
        {
            "dateadded": "2026-04-08 07:55:12 UTC",
            "url": "https://view-hub.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814141/",
            "reporter": "anonymous"
        }
    ],
    "3814140": [
        {
            "dateadded": "2026-04-08 07:52:23 UTC",
            "url": "http://42.224.193.8:55633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 15:48:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814140/",
            "reporter": "geenensp"
        }
    ],
    "3814139": [
        {
            "dateadded": "2026-04-08 07:52:06 UTC",
            "url": "http://123.5.21.145:40870/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:03:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814139/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814138": [
        {
            "dateadded": "2026-04-08 07:49:29 UTC",
            "url": "http://182.126.95.117:49543/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814138/",
            "reporter": "geenensp"
        }
    ],
    "3814137": [
        {
            "dateadded": "2026-04-08 07:48:13 UTC",
            "url": "https://read-api.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814137/",
            "reporter": "anonymous"
        }
    ],
    "3814136": [
        {
            "dateadded": "2026-04-08 07:47:08 UTC",
            "url": "http://105.225.32.15:46311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:09:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814136/",
            "reporter": "geenensp"
        }
    ],
    "3814135": [
        {
            "dateadded": "2026-04-08 07:47:06 UTC",
            "url": "http://113.221.99.7:55536/i",
            "url_status": "offline",
            "last_online": "2026-04-09 21:52:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814135/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814134": [
        {
            "dateadded": "2026-04-08 07:45:15 UTC",
            "url": "http://112.248.112.236:54669/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814134/",
            "reporter": "geenensp"
        }
    ],
    "3814133": [
        {
            "dateadded": "2026-04-08 07:44:10 UTC",
            "url": "https://scan-gate.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814133/",
            "reporter": "anonymous"
        }
    ],
    "3814132": [
        {
            "dateadded": "2026-04-08 07:42:20 UTC",
            "url": "http://113.221.99.7:55536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:51:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814132/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814131": [
        {
            "dateadded": "2026-04-08 07:42:05 UTC",
            "url": "http://77.247.88.124:34192/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:30:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814131/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814130": [
        {
            "dateadded": "2026-04-08 07:38:06 UTC",
            "url": "https://fast-log.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814130/",
            "reporter": "anonymous"
        }
    ],
    "3814128": [
        {
            "dateadded": "2026-04-08 07:37:07 UTC",
            "url": "http://39.88.7.211:43286/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:50:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814128/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814129": [
        {
            "dateadded": "2026-04-08 07:37:07 UTC",
            "url": "http://123.5.21.145:40870/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:19:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814129/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814127": [
        {
            "dateadded": "2026-04-08 07:32:06 UTC",
            "url": "https://kinetic-io.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:32:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814127/",
            "reporter": "anonymous"
        }
    ],
    "3814126": [
        {
            "dateadded": "2026-04-08 07:31:07 UTC",
            "url": "http://109.108.38.224:56084/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:27:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814126/",
            "reporter": "geenensp"
        }
    ],
    "3814125": [
        {
            "dateadded": "2026-04-08 07:27:15 UTC",
            "url": "http://220.201.24.199:35060/i",
            "url_status": "offline",
            "last_online": "2026-04-13 16:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814125/",
            "reporter": "geenensp"
        }
    ],
    "3814124": [
        {
            "dateadded": "2026-04-08 07:26:08 UTC",
            "url": "https://drive-node.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814124/",
            "reporter": "anonymous"
        }
    ],
    "3814123": [
        {
            "dateadded": "2026-04-08 07:23:09 UTC",
            "url": "http://112.248.112.236:54669/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:08:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814123/",
            "reporter": "geenensp"
        }
    ],
    "3814122": [
        {
            "dateadded": "2026-04-08 07:22:09 UTC",
            "url": "http://182.126.95.117:49543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:47:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814122/",
            "reporter": "geenensp"
        }
    ],
    "3814121": [
        {
            "dateadded": "2026-04-08 07:21:10 UTC",
            "url": "https://shift-svc.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814121/",
            "reporter": "anonymous"
        }
    ],
    "3814120": [
        {
            "dateadded": "2026-04-08 07:18:14 UTC",
            "url": "https://power-api.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814120/",
            "reporter": "anonymous"
        }
    ],
    "3814119": [
        {
            "dateadded": "2026-04-08 07:15:15 UTC",
            "url": "https://force-point.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814119/",
            "reporter": "anonymous"
        }
    ],
    "3814118": [
        {
            "dateadded": "2026-04-08 07:12:09 UTC",
            "url": "http://42.232.235.86:41497/i",
            "url_status": "offline",
            "last_online": "2026-04-08 07:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814118/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814117": [
        {
            "dateadded": "2026-04-08 07:12:07 UTC",
            "url": "http://77.247.88.124:34192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814117/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814116": [
        {
            "dateadded": "2026-04-08 07:05:21 UTC",
            "url": "http://58.47.16.120:47363/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814116/",
            "reporter": "geenensp"
        }
    ],
    "3814114": [
        {
            "dateadded": "2026-04-08 07:05:20 UTC",
            "url": "http://42.58.167.27:60366/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814114/",
            "reporter": "geenensp"
        }
    ],
    "3814115": [
        {
            "dateadded": "2026-04-08 07:05:20 UTC",
            "url": "http://222.138.119.126:48943/i",
            "url_status": "offline",
            "last_online": "2026-04-09 21:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814115/",
            "reporter": "geenensp"
        }
    ],
    "3814113": [
        {
            "dateadded": "2026-04-08 07:04:09 UTC",
            "url": "https://main-svc.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 07:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814113/",
            "reporter": "anonymous"
        }
    ],
    "3814112": [
        {
            "dateadded": "2026-04-08 07:01:20 UTC",
            "url": "http://109.108.38.224:56084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 15:47:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814112/",
            "reporter": "geenensp"
        }
    ],
    "3814111": [
        {
            "dateadded": "2026-04-08 07:00:21 UTC",
            "url": "http://220.201.24.199:35060/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:30:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814111/",
            "reporter": "geenensp"
        }
    ],
    "3814110": [
        {
            "dateadded": "2026-04-08 06:59:11 UTC",
            "url": "https://user-hub.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814110/",
            "reporter": "anonymous"
        }
    ],
    "3814109": [
        {
            "dateadded": "2026-04-08 06:53:08 UTC",
            "url": "https://task-api.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814109/",
            "reporter": "anonymous"
        }
    ],
    "3814108": [
        {
            "dateadded": "2026-04-08 06:47:10 UTC",
            "url": "https://run-log.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814108/",
            "reporter": "anonymous"
        }
    ],
    "3814107": [
        {
            "dateadded": "2026-04-08 06:44:20 UTC",
            "url": "https://github.com/craftpedro62-debug/_s/raw/refs/heads/master/sass/utilities/conhost.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814107/",
            "reporter": "burger"
        }
    ],
    "3814105": [
        {
            "dateadded": "2026-04-08 06:44:11 UTC",
            "url": "https://wbanking.coop15abril.fin.ec/15onLine/inicio.jsf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "magecart",
                "stealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814105/",
            "reporter": "anonymous"
        }
    ],
    "3814106": [
        {
            "dateadded": "2026-04-08 06:44:11 UTC",
            "url": "https://winstonchurchill.rf.gd/MSI_142506.png",
            "url_status": "offline",
            "last_online": "2026-04-08 06:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814106/",
            "reporter": "burger"
        }
    ],
    "3814102": [
        {
            "dateadded": "2026-04-08 06:44:09 UTC",
            "url": "http://94.26.90.19:6600/6u4qx637/PGWXEIBP.msi",
            "url_status": "offline",
            "last_online": "2026-04-08 06:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "HijackLoader",
                "LummaStealer",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814102/",
            "reporter": "burger"
        }
    ],
    "3814103": [
        {
            "dateadded": "2026-04-08 06:44:09 UTC",
            "url": "http://goynetfiles.duckdns.org/loader.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 06:44:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814103/",
            "reporter": "adliwahid"
        }
    ],
    "3814104": [
        {
            "dateadded": "2026-04-08 06:44:09 UTC",
            "url": "https://github.com/craftpedro62-debug/_s/raw/refs/heads/master/sass/utilities/randll32.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:44 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "github",
                "SalatStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814104/",
            "reporter": "burger"
        }
    ],
    "3814101": [
        {
            "dateadded": "2026-04-08 06:44:08 UTC",
            "url": "https://winstonchurchill.rf.gd/img_175626.png",
            "url_status": "offline",
            "last_online": "2026-04-08 06:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814101/",
            "reporter": "burger"
        }
    ],
    "3814100": [
        {
            "dateadded": "2026-04-08 06:44:07 UTC",
            "url": "http://ampgg.bossjy.cc.cd/bot.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814100/",
            "reporter": "geenensp"
        }
    ],
    "3814098": [
        {
            "dateadded": "2026-04-08 06:42:09 UTC",
            "url": "https://work-flow.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814098/",
            "reporter": "anonymous"
        }
    ],
    "3814099": [
        {
            "dateadded": "2026-04-08 06:42:09 UTC",
            "url": "http://196.189.98.77:46702/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:01:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814099/",
            "reporter": "geenensp"
        }
    ],
    "3814097": [
        {
            "dateadded": "2026-04-08 06:41:16 UTC",
            "url": "http://42.58.167.27:60366/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814097/",
            "reporter": "geenensp"
        }
    ],
    "3814096": [
        {
            "dateadded": "2026-04-08 06:40:18 UTC",
            "url": "http://222.138.119.126:48943/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:19:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814096/",
            "reporter": "geenensp"
        }
    ],
    "3814095": [
        {
            "dateadded": "2026-04-08 06:36:09 UTC",
            "url": "https://step-io.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814095/",
            "reporter": "anonymous"
        }
    ],
    "3814094": [
        {
            "dateadded": "2026-04-08 06:30:09 UTC",
            "url": "https://track-hub.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814094/",
            "reporter": "anonymous"
        }
    ],
    "3814093": [
        {
            "dateadded": "2026-04-08 06:25:10 UTC",
            "url": "https://scale-svc.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814093/",
            "reporter": "anonymous"
        }
    ],
    "3814091": [
        {
            "dateadded": "2026-04-08 06:22:13 UTC",
            "url": "http://39.90.144.156:46840/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814091/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814092": [
        {
            "dateadded": "2026-04-08 06:22:13 UTC",
            "url": "http://222.141.73.174:53866/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814092/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814090": [
        {
            "dateadded": "2026-04-08 06:18:18 UTC",
            "url": "http://196.189.98.77:46702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 10:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814090/",
            "reporter": "geenensp"
        }
    ],
    "3814089": [
        {
            "dateadded": "2026-04-08 06:18:09 UTC",
            "url": "https://egg-vault.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814089/",
            "reporter": "anonymous"
        }
    ],
    "3814088": [
        {
            "dateadded": "2026-04-08 06:14:11 UTC",
            "url": "https://cold-api.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814088/",
            "reporter": "anonymous"
        }
    ],
    "3814087": [
        {
            "dateadded": "2026-04-08 06:12:07 UTC",
            "url": "http://42.234.235.129:34755/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:51:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814087/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814086": [
        {
            "dateadded": "2026-04-08 06:08:14 UTC",
            "url": "https://green-node.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814086/",
            "reporter": "anonymous"
        }
    ],
    "3814085": [
        {
            "dateadded": "2026-04-08 06:07:08 UTC",
            "url": "http://222.141.73.174:53866/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 03:50:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814085/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814084": [
        {
            "dateadded": "2026-04-08 06:06:20 UTC",
            "url": "http://123.10.70.44:60783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 06:06:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814084/",
            "reporter": "geenensp"
        }
    ],
    "3814083": [
        {
            "dateadded": "2026-04-08 06:03:08 UTC",
            "url": "https://skin-check.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814083/",
            "reporter": "anonymous"
        }
    ],
    "3814082": [
        {
            "dateadded": "2026-04-08 06:00:12 UTC",
            "url": "https://mark-svc.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 06:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814082/",
            "reporter": "anonymous"
        }
    ],
    "3814081": [
        {
            "dateadded": "2026-04-08 05:57:07 UTC",
            "url": "http://39.90.144.156:46840/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814081/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814080": [
        {
            "dateadded": "2026-04-08 05:56:19 UTC",
            "url": "http://113.229.103.178:46035/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814080/",
            "reporter": "geenensp"
        }
    ],
    "3814079": [
        {
            "dateadded": "2026-04-08 05:49:18 UTC",
            "url": "http://60.17.80.138:46688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:58:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814079/",
            "reporter": "geenensp"
        }
    ],
    "3814078": [
        {
            "dateadded": "2026-04-08 05:49:08 UTC",
            "url": "https://site-vault.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814078/",
            "reporter": "anonymous"
        }
    ],
    "3814077": [
        {
            "dateadded": "2026-04-08 05:47:07 UTC",
            "url": "http://105.186.111.196:54539/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814077/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814076": [
        {
            "dateadded": "2026-04-08 05:46:18 UTC",
            "url": "http://219.157.18.46:37347/i",
            "url_status": "offline",
            "last_online": "2026-04-08 15:56:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814076/",
            "reporter": "geenensp"
        }
    ],
    "3814075": [
        {
            "dateadded": "2026-04-08 05:45:16 UTC",
            "url": "http://219.157.18.46:37347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814075/",
            "reporter": "geenensp"
        }
    ],
    "3814074": [
        {
            "dateadded": "2026-04-08 05:44:50 UTC",
            "url": "http://113.221.56.82:36883/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814074/",
            "reporter": "geenensp"
        }
    ],
    "3814073": [
        {
            "dateadded": "2026-04-08 05:44:08 UTC",
            "url": "https://pillar-node.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814073/",
            "reporter": "anonymous"
        }
    ],
    "3814072": [
        {
            "dateadded": "2026-04-08 05:38:06 UTC",
            "url": "https://stone-api.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814072/",
            "reporter": "anonymous"
        }
    ],
    "3814071": [
        {
            "dateadded": "2026-04-08 05:37:10 UTC",
            "url": "http://182.117.0.99:47760/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814071/",
            "reporter": "geenensp"
        }
    ],
    "3814070": [
        {
            "dateadded": "2026-04-08 05:37:06 UTC",
            "url": "http://42.234.235.129:34755/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 12:25:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814070/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814068": [
        {
            "dateadded": "2026-04-08 05:36:21 UTC",
            "url": "http://180.245.60.245:35502/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814068/",
            "reporter": "geenensp"
        }
    ],
    "3814069": [
        {
            "dateadded": "2026-04-08 05:36:21 UTC",
            "url": "http://182.52.205.167:58619/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:26:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814069/",
            "reporter": "geenensp"
        }
    ],
    "3814067": [
        {
            "dateadded": "2026-04-08 05:33:08 UTC",
            "url": "https://tower-sync.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814067/",
            "reporter": "anonymous"
        }
    ],
    "3814066": [
        {
            "dateadded": "2026-04-08 05:30:19 UTC",
            "url": "http://115.63.204.71:46266/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:40:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814066/",
            "reporter": "geenensp"
        }
    ],
    "3814065": [
        {
            "dateadded": "2026-04-08 05:27:09 UTC",
            "url": "https://base-point.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814065/",
            "reporter": "anonymous"
        }
    ],
    "3814064": [
        {
            "dateadded": "2026-04-08 05:27:08 UTC",
            "url": "http://105.186.111.196:54539/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814064/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814063": [
        {
            "dateadded": "2026-04-08 05:27:07 UTC",
            "url": "http://110.36.26.130:52873/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814063/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814062": [
        {
            "dateadded": "2026-04-08 05:25:21 UTC",
            "url": "http://79.106.225.176:36721/i",
            "url_status": "offline",
            "last_online": "2026-04-14 17:03:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814062/",
            "reporter": "geenensp"
        }
    ],
    "3814061": [
        {
            "dateadded": "2026-04-08 05:21:12 UTC",
            "url": "https://brain-log.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814061/",
            "reporter": "anonymous"
        }
    ],
    "3814060": [
        {
            "dateadded": "2026-04-08 05:17:24 UTC",
            "url": "http://180.245.60.245:35502/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814060/",
            "reporter": "geenensp"
        }
    ],
    "3814059": [
        {
            "dateadded": "2026-04-08 05:16:21 UTC",
            "url": "http://115.58.36.223:54421/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814059/",
            "reporter": "geenensp"
        }
    ],
    "3814058": [
        {
            "dateadded": "2026-04-08 05:15:10 UTC",
            "url": "https://vector-svc.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814058/",
            "reporter": "anonymous"
        }
    ],
    "3814057": [
        {
            "dateadded": "2026-04-08 05:09:13 UTC",
            "url": "https://sense-api.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814057/",
            "reporter": "anonymous"
        }
    ],
    "3814056": [
        {
            "dateadded": "2026-04-08 05:03:07 UTC",
            "url": "https://neural-io.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 05:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814056/",
            "reporter": "anonymous"
        }
    ],
    "3814055": [
        {
            "dateadded": "2026-04-08 05:00:18 UTC",
            "url": "http://182.113.193.82:52488/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814055/",
            "reporter": "geenensp"
        }
    ],
    "3814054": [
        {
            "dateadded": "2026-04-08 04:58:07 UTC",
            "url": "https://think-node.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814054/",
            "reporter": "anonymous"
        }
    ],
    "3814053": [
        {
            "dateadded": "2026-04-08 04:57:08 UTC",
            "url": "http://110.36.26.130:52873/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814053/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814052": [
        {
            "dateadded": "2026-04-08 04:57:07 UTC",
            "url": "http://42.238.252.228:51488/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814052/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814050": [
        {
            "dateadded": "2026-04-08 04:53:24 UTC",
            "url": "http://124.131.2.132:39784/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:12:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814050/",
            "reporter": "geenensp"
        }
    ],
    "3814051": [
        {
            "dateadded": "2026-04-08 04:53:24 UTC",
            "url": "http://116.139.42.208:59802/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:22:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814051/",
            "reporter": "geenensp"
        }
    ],
    "3814049": [
        {
            "dateadded": "2026-04-08 04:53:23 UTC",
            "url": "http://79.106.225.176:36721/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 17:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814049/",
            "reporter": "geenensp"
        }
    ],
    "3814048": [
        {
            "dateadded": "2026-04-08 04:53:14 UTC",
            "url": "https://smart-point.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:53:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814048/",
            "reporter": "anonymous"
        }
    ],
    "3814047": [
        {
            "dateadded": "2026-04-08 04:48:12 UTC",
            "url": "https://main-route.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814047/",
            "reporter": "anonymous"
        }
    ],
    "3814046": [
        {
            "dateadded": "2026-04-08 04:43:14 UTC",
            "url": "http://113.236.94.93:47019/i",
            "url_status": "offline",
            "last_online": "2026-04-14 09:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814046/",
            "reporter": "geenensp"
        }
    ],
    "3814045": [
        {
            "dateadded": "2026-04-08 04:41:07 UTC",
            "url": "https://order-svc.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814045/",
            "reporter": "anonymous"
        }
    ],
    "3814044": [
        {
            "dateadded": "2026-04-08 04:37:12 UTC",
            "url": "https://rank-index.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814044/",
            "reporter": "anonymous"
        }
    ],
    "3814043": [
        {
            "dateadded": "2026-04-08 04:37:07 UTC",
            "url": "http://180.243.177.10:57694/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814043/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814042": [
        {
            "dateadded": "2026-04-08 04:35:20 UTC",
            "url": "http://124.131.2.132:39784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814042/",
            "reporter": "geenensp"
        }
    ],
    "3814041": [
        {
            "dateadded": "2026-04-08 04:31:14 UTC",
            "url": "https://archive-hub.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814041/",
            "reporter": "anonymous"
        }
    ],
    "3814040": [
        {
            "dateadded": "2026-04-08 04:26:14 UTC",
            "url": "http://182.113.193.82:52488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814040/",
            "reporter": "geenensp"
        }
    ],
    "3814039": [
        {
            "dateadded": "2026-04-08 04:25:16 UTC",
            "url": "https://file-stack.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814039/",
            "reporter": "anonymous"
        }
    ],
    "3814038": [
        {
            "dateadded": "2026-04-08 04:22:08 UTC",
            "url": "http://140.237.39.113:53906/i",
            "url_status": "offline",
            "last_online": "2026-04-10 07:27:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814038/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814037": [
        {
            "dateadded": "2026-04-08 04:20:15 UTC",
            "url": "https://layer-check.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814037/",
            "reporter": "anonymous"
        }
    ],
    "3814036": [
        {
            "dateadded": "2026-04-08 04:19:20 UTC",
            "url": "http://168.195.7.106:58653/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814036/",
            "reporter": "geenensp"
        }
    ],
    "3814035": [
        {
            "dateadded": "2026-04-08 04:17:06 UTC",
            "url": "http://178.163.34.244:64487/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:29:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814035/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814034": [
        {
            "dateadded": "2026-04-08 04:16:13 UTC",
            "url": "http://116.139.42.208:59802/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814034/",
            "reporter": "geenensp"
        }
    ],
    "3814033": [
        {
            "dateadded": "2026-04-08 04:14:12 UTC",
            "url": "https://theory-log.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814033/",
            "reporter": "anonymous"
        }
    ],
    "3814032": [
        {
            "dateadded": "2026-04-08 04:09:21 UTC",
            "url": "http://180.243.177.10:57694/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814032/",
            "reporter": "geenensp"
        }
    ],
    "3814031": [
        {
            "dateadded": "2026-04-08 04:09:12 UTC",
            "url": "https://space-unit.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814031/",
            "reporter": "anonymous"
        }
    ],
    "3814030": [
        {
            "dateadded": "2026-04-08 04:02:11 UTC",
            "url": "https://view-port.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 04:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814030/",
            "reporter": "anonymous"
        }
    ],
    "3814029": [
        {
            "dateadded": "2026-04-08 03:59:10 UTC",
            "url": "https://abstract-io.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814029/",
            "reporter": "anonymous"
        }
    ],
    "3814027": [
        {
            "dateadded": "2026-04-08 03:56:30 UTC",
            "url": "http://163.61.39.140/bins/jew.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-08 11:02:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814027/",
            "reporter": "botnetkiller"
        }
    ],
    "3814028": [
        {
            "dateadded": "2026-04-08 03:56:30 UTC",
            "url": "http://163.61.39.140/bins/jew.arm6",
            "url_status": "offline",
            "last_online": "2026-04-08 11:45:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814028/",
            "reporter": "botnetkiller"
        }
    ],
    "3814026": [
        {
            "dateadded": "2026-04-08 03:56:29 UTC",
            "url": "http://163.61.39.140/bins/jew.sh4",
            "url_status": "offline",
            "last_online": "2026-04-08 12:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814026/",
            "reporter": "botnetkiller"
        }
    ],
    "3814025": [
        {
            "dateadded": "2026-04-08 03:56:14 UTC",
            "url": "https://model-check.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814025/",
            "reporter": "anonymous"
        }
    ],
    "3814023": [
        {
            "dateadded": "2026-04-08 03:55:24 UTC",
            "url": "http://163.61.39.140/bins/jew.arm",
            "url_status": "offline",
            "last_online": "2026-04-08 11:48:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814023/",
            "reporter": "botnetkiller"
        }
    ],
    "3814024": [
        {
            "dateadded": "2026-04-08 03:55:24 UTC",
            "url": "http://163.61.39.140/bins/jew.arm5",
            "url_status": "offline",
            "last_online": "2026-04-08 11:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814024/",
            "reporter": "botnetkiller"
        }
    ],
    "3814020": [
        {
            "dateadded": "2026-04-08 03:55:23 UTC",
            "url": "http://163.61.39.140/bins/jew.m68k",
            "url_status": "offline",
            "last_online": "2026-04-08 11:30:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814020/",
            "reporter": "botnetkiller"
        }
    ],
    "3814021": [
        {
            "dateadded": "2026-04-08 03:55:23 UTC",
            "url": "http://163.61.39.140/bins/jew.mips",
            "url_status": "offline",
            "last_online": "2026-04-08 11:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814021/",
            "reporter": "botnetkiller"
        }
    ],
    "3814022": [
        {
            "dateadded": "2026-04-08 03:55:23 UTC",
            "url": "http://163.61.39.140/bins/jew.ppc",
            "url_status": "offline",
            "last_online": "2026-04-08 12:00:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814022/",
            "reporter": "botnetkiller"
        }
    ],
    "3814017": [
        {
            "dateadded": "2026-04-08 03:55:21 UTC",
            "url": "http://163.61.39.140/bins/jew.spc",
            "url_status": "offline",
            "last_online": "2026-04-08 12:23:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814017/",
            "reporter": "botnetkiller"
        }
    ],
    "3814018": [
        {
            "dateadded": "2026-04-08 03:55:21 UTC",
            "url": "http://163.61.39.140/bins/jew.x86",
            "url_status": "offline",
            "last_online": "2026-04-08 11:44:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814018/",
            "reporter": "botnetkiller"
        }
    ],
    "3814019": [
        {
            "dateadded": "2026-04-08 03:55:21 UTC",
            "url": "http://163.61.39.140/bins/jew.arm7",
            "url_status": "offline",
            "last_online": "2026-04-08 11:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814019/",
            "reporter": "botnetkiller"
        }
    ],
    "3814016": [
        {
            "dateadded": "2026-04-08 03:50:20 UTC",
            "url": "http://168.195.7.106:58653/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 10:02:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814016/",
            "reporter": "geenensp"
        }
    ],
    "3814015": [
        {
            "dateadded": "2026-04-08 03:47:28 UTC",
            "url": "http://112.252.198.237:38241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:49:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814015/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814014": [
        {
            "dateadded": "2026-04-08 03:46:13 UTC",
            "url": "https://hub-secure.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814014/",
            "reporter": "anonymous"
        }
    ],
    "3814013": [
        {
            "dateadded": "2026-04-08 03:40:19 UTC",
            "url": "http://60.162.206.215:43250/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814013/",
            "reporter": "geenensp"
        }
    ],
    "3814012": [
        {
            "dateadded": "2026-04-08 03:40:07 UTC",
            "url": "https://logic-vault.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:40:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814012/",
            "reporter": "anonymous"
        }
    ],
    "3814011": [
        {
            "dateadded": "2026-04-08 03:37:07 UTC",
            "url": "http://110.37.118.66:54586/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:31:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814011/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814010": [
        {
            "dateadded": "2026-04-08 03:35:13 UTC",
            "url": "https://step-wise.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814010/",
            "reporter": "anonymous"
        }
    ],
    "3814009": [
        {
            "dateadded": "2026-04-08 03:29:08 UTC",
            "url": "https://grid-api.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814009/",
            "reporter": "anonymous"
        }
    ],
    "3814008": [
        {
            "dateadded": "2026-04-08 03:27:32 UTC",
            "url": "http://59.101.252.145:42905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814008/",
            "reporter": "geenensp"
        }
    ],
    "3814007": [
        {
            "dateadded": "2026-04-08 03:23:11 UTC",
            "url": "https://data-mesh.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814007/",
            "reporter": "anonymous"
        }
    ],
    "3814006": [
        {
            "dateadded": "2026-04-08 03:18:07 UTC",
            "url": "http://110.37.118.66:54586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:42:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814006/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814005": [
        {
            "dateadded": "2026-04-08 03:17:07 UTC",
            "url": "https://trace-node.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814005/",
            "reporter": "anonymous"
        }
    ],
    "3814004": [
        {
            "dateadded": "2026-04-08 03:13:19 UTC",
            "url": "http://182.127.108.234:34944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814004/",
            "reporter": "geenensp"
        }
    ],
    "3814003": [
        {
            "dateadded": "2026-04-08 03:12:10 UTC",
            "url": "https://infer-unit.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814003/",
            "reporter": "anonymous"
        }
    ],
    "3814002": [
        {
            "dateadded": "2026-04-08 03:12:07 UTC",
            "url": "http://222.127.49.161:56858/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 00:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814002/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3814001": [
        {
            "dateadded": "2026-04-08 03:10:18 UTC",
            "url": "http://196.191.231.12:36198/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:27:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814001/",
            "reporter": "geenensp"
        }
    ],
    "3814000": [
        {
            "dateadded": "2026-04-08 03:07:18 UTC",
            "url": "http://196.191.231.12:36198/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3814000/",
            "reporter": "geenensp"
        }
    ],
    "3813999": [
        {
            "dateadded": "2026-04-08 03:07:13 UTC",
            "url": "https://logic-gate.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813999/",
            "reporter": "anonymous"
        }
    ],
    "3813998": [
        {
            "dateadded": "2026-04-08 03:04:19 UTC",
            "url": "http://182.127.108.234:34944/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:02:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813998/",
            "reporter": "geenensp"
        }
    ],
    "3813997": [
        {
            "dateadded": "2026-04-08 03:01:09 UTC",
            "url": "https://thesis-log.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 03:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813997/",
            "reporter": "anonymous"
        }
    ],
    "3813996": [
        {
            "dateadded": "2026-04-08 02:57:10 UTC",
            "url": "http://117.209.26.181:58616/i",
            "url_status": "offline",
            "last_online": "2026-04-08 02:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813996/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813995": [
        {
            "dateadded": "2026-04-08 02:56:08 UTC",
            "url": "https://debate-hub.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813995/",
            "reporter": "anonymous"
        }
    ],
    "3813994": [
        {
            "dateadded": "2026-04-08 02:50:08 UTC",
            "url": "https://step-check.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813994/",
            "reporter": "anonymous"
        }
    ],
    "3813993": [
        {
            "dateadded": "2026-04-08 02:45:10 UTC",
            "url": "https://synth-io.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813993/",
            "reporter": "anonymous"
        }
    ],
    "3813992": [
        {
            "dateadded": "2026-04-08 02:38:08 UTC",
            "url": "https://forge-svc.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813992/",
            "reporter": "anonymous"
        }
    ],
    "3813991": [
        {
            "dateadded": "2026-04-08 02:33:07 UTC",
            "url": "https://order-node.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813991/",
            "reporter": "anonymous"
        }
    ],
    "3813990": [
        {
            "dateadded": "2026-04-08 02:27:07 UTC",
            "url": "https://unit-vault.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813990/",
            "reporter": "anonymous"
        }
    ],
    "3813989": [
        {
            "dateadded": "2026-04-08 02:22:08 UTC",
            "url": "https://base-logic.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813989/",
            "reporter": "anonymous"
        }
    ],
    "3813988": [
        {
            "dateadded": "2026-04-08 02:21:24 UTC",
            "url": "http://124.235.130.176:35507/i",
            "url_status": "offline",
            "last_online": "2026-04-13 05:20:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813988/",
            "reporter": "geenensp"
        }
    ],
    "3813986": [
        {
            "dateadded": "2026-04-08 02:17:08 UTC",
            "url": "https://fixed-point.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813986/",
            "reporter": "anonymous"
        }
    ],
    "3813987": [
        {
            "dateadded": "2026-04-08 02:17:08 UTC",
            "url": "http://115.49.88.187:38331/i",
            "url_status": "offline",
            "last_online": "2026-04-08 02:17:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813987/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813985": [
        {
            "dateadded": "2026-04-08 02:16:17 UTC",
            "url": "http://112.242.21.149:40518/i",
            "url_status": "offline",
            "last_online": "2026-04-08 09:50:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813985/",
            "reporter": "geenensp"
        }
    ],
    "3813983": [
        {
            "dateadded": "2026-04-08 02:12:13 UTC",
            "url": "http://14.178.109.75:33095/i",
            "url_status": "offline",
            "last_online": "2026-04-08 23:16:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813983/",
            "reporter": "adliwahid"
        }
    ],
    "3813984": [
        {
            "dateadded": "2026-04-08 02:12:13 UTC",
            "url": "http://14.178.109.75:33095/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 23:18:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813984/",
            "reporter": "adliwahid"
        }
    ],
    "3813981": [
        {
            "dateadded": "2026-04-08 02:12:11 UTC",
            "url": "http://36.70.69.90:32894/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:24:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813981/",
            "reporter": "adliwahid"
        }
    ],
    "3813982": [
        {
            "dateadded": "2026-04-08 02:12:11 UTC",
            "url": "http://117.24.141.207:47976/i",
            "url_status": "offline",
            "last_online": "2026-04-10 10:08:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813982/",
            "reporter": "adliwahid"
        }
    ],
    "3813977": [
        {
            "dateadded": "2026-04-08 02:12:09 UTC",
            "url": "http://113.221.56.82:36883/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:54:56 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813977/",
            "reporter": "adliwahid"
        }
    ],
    "3813978": [
        {
            "dateadded": "2026-04-08 02:12:09 UTC",
            "url": "http://123.10.70.44:60783/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813978/",
            "reporter": "adliwahid"
        }
    ],
    "3813979": [
        {
            "dateadded": "2026-04-08 02:12:09 UTC",
            "url": "http://175.168.205.127:39991/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:28:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813979/",
            "reporter": "adliwahid"
        }
    ],
    "3813980": [
        {
            "dateadded": "2026-04-08 02:12:09 UTC",
            "url": "http://36.70.69.90:32894/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:01:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813980/",
            "reporter": "adliwahid"
        }
    ],
    "3813975": [
        {
            "dateadded": "2026-04-08 02:12:08 UTC",
            "url": "http://27.215.120.57:36912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 02:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813975/",
            "reporter": "adliwahid"
        }
    ],
    "3813976": [
        {
            "dateadded": "2026-04-08 02:12:08 UTC",
            "url": "http://42.55.215.35:48784/i",
            "url_status": "offline",
            "last_online": "2026-04-08 02:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813976/",
            "reporter": "adliwahid"
        }
    ],
    "3813974": [
        {
            "dateadded": "2026-04-08 02:12:07 UTC",
            "url": "http://175.146.247.67:32873/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:10:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813974/",
            "reporter": "adliwahid"
        }
    ],
    "3813973": [
        {
            "dateadded": "2026-04-08 02:10:10 UTC",
            "url": "https://law-check.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813973/",
            "reporter": "anonymous"
        }
    ],
    "3813972": [
        {
            "dateadded": "2026-04-08 02:06:11 UTC",
            "url": "https://sphere-api.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 02:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813972/",
            "reporter": "anonymous"
        }
    ],
    "3813971": [
        {
            "dateadded": "2026-04-08 02:00:25 UTC",
            "url": "http://124.235.130.176:35507/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 05:53:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813971/",
            "reporter": "geenensp"
        }
    ],
    "3813970": [
        {
            "dateadded": "2026-04-08 02:00:20 UTC",
            "url": "http://202.155.8.56/XRLD",
            "url_status": "offline",
            "last_online": "2026-04-27 05:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813970/",
            "reporter": "botnetkiller"
        }
    ],
    "3813956": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/XVSD",
            "url_status": "offline",
            "last_online": "2026-04-27 06:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813956/",
            "reporter": "botnetkiller"
        }
    ],
    "3813957": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/NKOQ",
            "url_status": "offline",
            "last_online": "2026-04-27 06:10:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813957/",
            "reporter": "botnetkiller"
        }
    ],
    "3813958": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/WDRN",
            "url_status": "offline",
            "last_online": "2026-04-27 05:50:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813958/",
            "reporter": "botnetkiller"
        }
    ],
    "3813959": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/SKYA",
            "url_status": "offline",
            "last_online": "2026-04-27 06:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813959/",
            "reporter": "botnetkiller"
        }
    ],
    "3813960": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/NSYE",
            "url_status": "offline",
            "last_online": "2026-04-27 05:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813960/",
            "reporter": "botnetkiller"
        }
    ],
    "3813961": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/KALL",
            "url_status": "offline",
            "last_online": "2026-04-27 05:31:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813961/",
            "reporter": "botnetkiller"
        }
    ],
    "3813962": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/WHKH",
            "url_status": "offline",
            "last_online": "2026-04-27 05:22:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813962/",
            "reporter": "botnetkiller"
        }
    ],
    "3813963": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/GZRN",
            "url_status": "offline",
            "last_online": "2026-04-27 06:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813963/",
            "reporter": "botnetkiller"
        }
    ],
    "3813964": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/TSFJ",
            "url_status": "offline",
            "last_online": "2026-04-27 04:59:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813964/",
            "reporter": "botnetkiller"
        }
    ],
    "3813965": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/REIU",
            "url_status": "offline",
            "last_online": "2026-04-27 05:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813965/",
            "reporter": "botnetkiller"
        }
    ],
    "3813966": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/QBAH",
            "url_status": "offline",
            "last_online": "2026-04-27 05:12:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813966/",
            "reporter": "botnetkiller"
        }
    ],
    "3813967": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/KEWW",
            "url_status": "offline",
            "last_online": "2026-04-27 05:07:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813967/",
            "reporter": "botnetkiller"
        }
    ],
    "3813968": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/QSZX",
            "url_status": "offline",
            "last_online": "2026-04-27 05:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813968/",
            "reporter": "botnetkiller"
        }
    ],
    "3813969": [
        {
            "dateadded": "2026-04-08 02:00:13 UTC",
            "url": "http://202.155.8.56/GWVG",
            "url_status": "offline",
            "last_online": "2026-04-27 05:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813969/",
            "reporter": "botnetkiller"
        }
    ],
    "3813955": [
        {
            "dateadded": "2026-04-08 02:00:08 UTC",
            "url": "http://202.155.8.56/CJXI",
            "url_status": "offline",
            "last_online": "2026-04-27 05:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813955/",
            "reporter": "botnetkiller"
        }
    ],
    "3813954": [
        {
            "dateadded": "2026-04-08 01:59:07 UTC",
            "url": "https://entity-hub.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813954/",
            "reporter": "anonymous"
        }
    ],
    "3813953": [
        {
            "dateadded": "2026-04-08 01:54:17 UTC",
            "url": "http://112.242.21.149:40518/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:46:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813953/",
            "reporter": "geenensp"
        }
    ],
    "3813952": [
        {
            "dateadded": "2026-04-08 01:54:07 UTC",
            "url": "https://drift-svc.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813952/",
            "reporter": "anonymous"
        }
    ],
    "3813951": [
        {
            "dateadded": "2026-04-08 01:49:07 UTC",
            "url": "http://112.248.60.109:39995/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813951/",
            "reporter": "geenensp"
        }
    ],
    "3813950": [
        {
            "dateadded": "2026-04-08 01:48:09 UTC",
            "url": "https://shift-node.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813950/",
            "reporter": "anonymous"
        }
    ],
    "3813949": [
        {
            "dateadded": "2026-04-08 01:47:07 UTC",
            "url": "http://36.88.136.194:52249/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813949/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813948": [
        {
            "dateadded": "2026-04-08 01:43:09 UTC",
            "url": "https://being-log.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813948/",
            "reporter": "anonymous"
        }
    ],
    "3813947": [
        {
            "dateadded": "2026-04-08 01:42:10 UTC",
            "url": "http://202.155.8.56/WSW0",
            "url_status": "offline",
            "last_online": "2026-04-27 06:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813947/",
            "reporter": "botnetkiller"
        }
    ],
    "3813946": [
        {
            "dateadded": "2026-04-08 01:37:12 UTC",
            "url": "https://real-io.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813946/",
            "reporter": "anonymous"
        }
    ],
    "3813945": [
        {
            "dateadded": "2026-04-08 01:32:10 UTC",
            "url": "https://flux-gate.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813945/",
            "reporter": "anonymous"
        }
    ],
    "3813944": [
        {
            "dateadded": "2026-04-08 01:32:06 UTC",
            "url": "http://123.11.76.223:32865/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:06:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813944/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813943": [
        {
            "dateadded": "2026-04-08 01:29:09 UTC",
            "url": "http://62.60.226.159/mercy.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 16:43:42 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "Amadey",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813943/",
            "reporter": "Bitsight"
        }
    ],
    "3813942": [
        {
            "dateadded": "2026-04-08 01:27:40 UTC",
            "url": "http://112.248.60.109:39995/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:03:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813942/",
            "reporter": "geenensp"
        }
    ],
    "3813941": [
        {
            "dateadded": "2026-04-08 01:26:08 UTC",
            "url": "https://grid-portal.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813941/",
            "reporter": "anonymous"
        }
    ],
    "3813940": [
        {
            "dateadded": "2026-04-08 01:23:17 UTC",
            "url": "http://115.52.38.3:34774/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 01:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813940/",
            "reporter": "geenensp"
        }
    ],
    "3813939": [
        {
            "dateadded": "2026-04-08 01:20:13 UTC",
            "url": "https://data-vault.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813939/",
            "reporter": "anonymous"
        }
    ],
    "3813938": [
        {
            "dateadded": "2026-04-08 01:17:07 UTC",
            "url": "http://36.88.136.194:52249/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 15:58:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813938/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813937": [
        {
            "dateadded": "2026-04-08 01:15:20 UTC",
            "url": "http://113.228.130.87:45402/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:06:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813937/",
            "reporter": "geenensp"
        }
    ],
    "3813936": [
        {
            "dateadded": "2026-04-08 01:14:07 UTC",
            "url": "https://sync-node.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813936/",
            "reporter": "anonymous"
        }
    ],
    "3813935": [
        {
            "dateadded": "2026-04-08 01:09:13 UTC",
            "url": "https://matrix-api.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813935/",
            "reporter": "anonymous"
        }
    ],
    "3813934": [
        {
            "dateadded": "2026-04-08 01:08:08 UTC",
            "url": "http://222.138.180.83:47190/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:38:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813934/",
            "reporter": "geenensp"
        }
    ],
    "3813933": [
        {
            "dateadded": "2026-04-08 01:07:19 UTC",
            "url": "http://42.235.103.117:43991/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813933/",
            "reporter": "geenensp"
        }
    ],
    "3813932": [
        {
            "dateadded": "2026-04-08 01:03:06 UTC",
            "url": "https://cell-logic.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 01:03:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813932/",
            "reporter": "anonymous"
        }
    ],
    "3813931": [
        {
            "dateadded": "2026-04-08 01:00:18 UTC",
            "url": "http://125.44.45.141:54173/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813931/",
            "reporter": "geenensp"
        }
    ],
    "3813930": [
        {
            "dateadded": "2026-04-08 00:58:09 UTC",
            "url": "https://mesh-point.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813930/",
            "reporter": "anonymous"
        }
    ],
    "3813929": [
        {
            "dateadded": "2026-04-08 00:52:07 UTC",
            "url": "https://truth-svc.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813929/",
            "reporter": "anonymous"
        }
    ],
    "3813928": [
        {
            "dateadded": "2026-04-08 00:47:07 UTC",
            "url": "http://115.58.170.166:45571/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813928/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813927": [
        {
            "dateadded": "2026-04-08 00:46:23 UTC",
            "url": "http://115.49.211.109:39020/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:18:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813927/",
            "reporter": "geenensp"
        }
    ],
    "3813926": [
        {
            "dateadded": "2026-04-08 00:46:07 UTC",
            "url": "https://source-hub.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813926/",
            "reporter": "anonymous"
        }
    ],
    "3813925": [
        {
            "dateadded": "2026-04-08 00:45:19 UTC",
            "url": "http://42.235.103.117:43991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 17:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813925/",
            "reporter": "geenensp"
        }
    ],
    "3813924": [
        {
            "dateadded": "2026-04-08 00:41:20 UTC",
            "url": "http://222.138.180.83:47190/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:46:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813924/",
            "reporter": "geenensp"
        }
    ],
    "3813923": [
        {
            "dateadded": "2026-04-08 00:41:13 UTC",
            "url": "https://core-secure.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813923/",
            "reporter": "anonymous"
        }
    ],
    "3813922": [
        {
            "dateadded": "2026-04-08 00:39:08 UTC",
            "url": "http://113.228.130.87:45402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813922/",
            "reporter": "geenensp"
        }
    ],
    "3813921": [
        {
            "dateadded": "2026-04-08 00:37:08 UTC",
            "url": "http://115.58.170.166:45571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:43:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813921/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813920": [
        {
            "dateadded": "2026-04-08 00:35:21 UTC",
            "url": "http://125.44.45.141:54173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813920/",
            "reporter": "geenensp"
        }
    ],
    "3813919": [
        {
            "dateadded": "2026-04-08 00:33:10 UTC",
            "url": "https://know-logic.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813919/",
            "reporter": "anonymous"
        }
    ],
    "3813918": [
        {
            "dateadded": "2026-04-08 00:28:12 UTC",
            "url": "https://base-audit.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813918/",
            "reporter": "anonymous"
        }
    ],
    "3813917": [
        {
            "dateadded": "2026-04-08 00:25:13 UTC",
            "url": "http://42.235.145.181:45140/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813917/",
            "reporter": "geenensp"
        }
    ],
    "3813914": [
        {
            "dateadded": "2026-04-08 00:22:10 UTC",
            "url": "http://110.36.25.33:57432/i",
            "url_status": "offline",
            "last_online": "2026-04-10 12:44:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813914/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813915": [
        {
            "dateadded": "2026-04-08 00:22:10 UTC",
            "url": "http://110.36.25.33:57432/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:20:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813915/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813916": [
        {
            "dateadded": "2026-04-08 00:22:10 UTC",
            "url": "https://root-vault.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813916/",
            "reporter": "anonymous"
        }
    ],
    "3813913": [
        {
            "dateadded": "2026-04-08 00:19:18 UTC",
            "url": "http://115.63.43.101:36878/i",
            "url_status": "offline",
            "last_online": "2026-04-08 23:09:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813913/",
            "reporter": "geenensp"
        }
    ],
    "3813912": [
        {
            "dateadded": "2026-04-08 00:17:16 UTC",
            "url": "http://1.10.209.143:37698/i",
            "url_status": "offline",
            "last_online": "2026-04-13 10:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813912/",
            "reporter": "geenensp"
        }
    ],
    "3813911": [
        {
            "dateadded": "2026-04-08 00:17:07 UTC",
            "url": "http://118.232.137.101:36762/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:32:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813911/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813910": [
        {
            "dateadded": "2026-04-08 00:16:08 UTC",
            "url": "https://stream-gate.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813910/",
            "reporter": "anonymous"
        }
    ],
    "3813909": [
        {
            "dateadded": "2026-04-08 00:11:07 UTC",
            "url": "https://logic-api.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813909/",
            "reporter": "anonymous"
        }
    ],
    "3813908": [
        {
            "dateadded": "2026-04-08 00:09:07 UTC",
            "url": "https://thickentributary.digital/script.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "macOS",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813908/",
            "reporter": "botnetkiller"
        }
    ],
    "3813907": [
        {
            "dateadded": "2026-04-08 00:05:11 UTC",
            "url": "https://sense-node.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813907/",
            "reporter": "anonymous"
        }
    ],
    "3813906": [
        {
            "dateadded": "2026-04-08 00:02:06 UTC",
            "url": "https://pure-io.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-08 00:02:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813906/",
            "reporter": "anonymous"
        }
    ],
    "3813904": [
        {
            "dateadded": "2026-04-08 00:00:20 UTC",
            "url": "http://216.107.139.197/VCPG",
            "url_status": "offline",
            "last_online": "2026-04-22 17:45:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813904/",
            "reporter": "botnetkiller"
        }
    ],
    "3813905": [
        {
            "dateadded": "2026-04-08 00:00:20 UTC",
            "url": "http://216.107.139.197/YIJF",
            "url_status": "offline",
            "last_online": "2026-04-22 18:02:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813905/",
            "reporter": "botnetkiller"
        }
    ],
    "3813893": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/JXQJ",
            "url_status": "offline",
            "last_online": "2026-04-22 16:50:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813893/",
            "reporter": "botnetkiller"
        }
    ],
    "3813894": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/MPSX",
            "url_status": "offline",
            "last_online": "2026-04-22 16:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813894/",
            "reporter": "botnetkiller"
        }
    ],
    "3813895": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/HVAH",
            "url_status": "offline",
            "last_online": "2026-04-22 17:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813895/",
            "reporter": "botnetkiller"
        }
    ],
    "3813896": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/QJSF",
            "url_status": "offline",
            "last_online": "2026-04-22 16:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813896/",
            "reporter": "botnetkiller"
        }
    ],
    "3813897": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/CSBU",
            "url_status": "offline",
            "last_online": "2026-04-22 17:59:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813897/",
            "reporter": "botnetkiller"
        }
    ],
    "3813898": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/VKZF",
            "url_status": "offline",
            "last_online": "2026-04-22 18:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813898/",
            "reporter": "botnetkiller"
        }
    ],
    "3813899": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/MGZJ",
            "url_status": "offline",
            "last_online": "2026-04-22 17:31:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813899/",
            "reporter": "botnetkiller"
        }
    ],
    "3813900": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/YJPA",
            "url_status": "offline",
            "last_online": "2026-04-22 17:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813900/",
            "reporter": "botnetkiller"
        }
    ],
    "3813901": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/UKRP",
            "url_status": "offline",
            "last_online": "2026-04-22 18:13:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813901/",
            "reporter": "botnetkiller"
        }
    ],
    "3813902": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/EUTP",
            "url_status": "offline",
            "last_online": "2026-04-22 16:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813902/",
            "reporter": "botnetkiller"
        }
    ],
    "3813903": [
        {
            "dateadded": "2026-04-07 23:59:13 UTC",
            "url": "http://216.107.139.197/AWMJ",
            "url_status": "offline",
            "last_online": "2026-04-22 16:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813903/",
            "reporter": "botnetkiller"
        }
    ],
    "3813890": [
        {
            "dateadded": "2026-04-07 23:59:10 UTC",
            "url": "http://216.107.139.197/XSDX",
            "url_status": "offline",
            "last_online": "2026-04-22 16:57:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "Ngioweb",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813890/",
            "reporter": "botnetkiller"
        }
    ],
    "3813891": [
        {
            "dateadded": "2026-04-07 23:59:10 UTC",
            "url": "http://216.107.139.197/JUIX",
            "url_status": "offline",
            "last_online": "2026-04-22 17:01:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813891/",
            "reporter": "botnetkiller"
        }
    ],
    "3813892": [
        {
            "dateadded": "2026-04-07 23:59:10 UTC",
            "url": "http://216.107.139.197/WZQU",
            "url_status": "offline",
            "last_online": "2026-04-22 16:46:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813892/",
            "reporter": "botnetkiller"
        }
    ],
    "3813889": [
        {
            "dateadded": "2026-04-07 23:58:08 UTC",
            "url": "https://mind-data.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813889/",
            "reporter": "anonymous"
        }
    ],
    "3813888": [
        {
            "dateadded": "2026-04-07 23:57:08 UTC",
            "url": "http://42.235.145.181:45140/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 05:18:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813888/",
            "reporter": "geenensp"
        }
    ],
    "3813887": [
        {
            "dateadded": "2026-04-07 23:49:07 UTC",
            "url": "https://flow-sync.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813887/",
            "reporter": "anonymous"
        }
    ],
    "3813886": [
        {
            "dateadded": "2026-04-07 23:43:09 UTC",
            "url": "https://map-node.theorematicsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813886/",
            "reporter": "anonymous"
        }
    ],
    "3813885": [
        {
            "dateadded": "2026-04-07 23:40:17 UTC",
            "url": "http://103.209.65.74:50347/i",
            "url_status": "offline",
            "last_online": "2026-04-25 05:12:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813885/",
            "reporter": "geenensp"
        }
    ],
    "3813884": [
        {
            "dateadded": "2026-04-07 23:39:12 UTC",
            "url": "https://view-gate.theorematicsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813884/",
            "reporter": "anonymous"
        }
    ],
    "3813883": [
        {
            "dateadded": "2026-04-07 23:36:13 UTC",
            "url": "https://abstract-io.theorematicsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813883/",
            "reporter": "anonymous"
        }
    ],
    "3813882": [
        {
            "dateadded": "2026-04-07 23:25:10 UTC",
            "url": "https://model-svc.theorematicsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813882/",
            "reporter": "anonymous"
        }
    ],
    "3813881": [
        {
            "dateadded": "2026-04-07 23:20:14 UTC",
            "url": "https://sphere-api.theorematicsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813881/",
            "reporter": "anonymous"
        }
    ],
    "3813880": [
        {
            "dateadded": "2026-04-07 23:15:16 UTC",
            "url": "https://space-unit.theorematicsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813880/",
            "reporter": "anonymous"
        }
    ],
    "3813879": [
        {
            "dateadded": "2026-04-07 23:09:13 UTC",
            "url": "https://clear-log.rationalisvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813879/",
            "reporter": "anonymous"
        }
    ],
    "3813878": [
        {
            "dateadded": "2026-04-07 23:06:18 UTC",
            "url": "http://182.126.205.25:60979/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:26:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813878/",
            "reporter": "geenensp"
        }
    ],
    "3813877": [
        {
            "dateadded": "2026-04-07 23:03:13 UTC",
            "url": "https://stat-hub.rationalisvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 23:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813877/",
            "reporter": "anonymous"
        }
    ],
    "3813876": [
        {
            "dateadded": "2026-04-07 22:58:14 UTC",
            "url": "https://calc-api.rationalisvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813876/",
            "reporter": "anonymous"
        }
    ],
    "3813875": [
        {
            "dateadded": "2026-04-07 22:52:11 UTC",
            "url": "https://vector-svc.rationalisvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813875/",
            "reporter": "anonymous"
        }
    ],
    "3813874": [
        {
            "dateadded": "2026-04-07 22:47:08 UTC",
            "url": "https://think-node.rationalisvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813874/",
            "reporter": "anonymous"
        }
    ],
    "3813873": [
        {
            "dateadded": "2026-04-07 22:42:06 UTC",
            "url": "http://222.141.22.50:49622/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:42:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813873/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813872": [
        {
            "dateadded": "2026-04-07 22:41:13 UTC",
            "url": "https://smart-point.rationalisvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813872/",
            "reporter": "anonymous"
        }
    ],
    "3813871": [
        {
            "dateadded": "2026-04-07 22:36:13 UTC",
            "url": "https://brain-api.cognifabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813871/",
            "reporter": "anonymous"
        }
    ],
    "3813870": [
        {
            "dateadded": "2026-04-07 22:30:10 UTC",
            "url": "https://layer-check.cognifabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813870/",
            "reporter": "anonymous"
        }
    ],
    "3813869": [
        {
            "dateadded": "2026-04-07 22:24:10 UTC",
            "url": "https://fabric-svc.cognifabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813869/",
            "reporter": "anonymous"
        }
    ],
    "3813868": [
        {
            "dateadded": "2026-04-07 22:19:13 UTC",
            "url": "https://sense-data.cognifabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813868/",
            "reporter": "anonymous"
        }
    ],
    "3813867": [
        {
            "dateadded": "2026-04-07 22:17:08 UTC",
            "url": "http://222.141.22.50:49622/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813867/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813866": [
        {
            "dateadded": "2026-04-07 22:14:13 UTC",
            "url": "https://neural-io.cognifabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:14:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813866/",
            "reporter": "anonymous"
        }
    ],
    "3813865": [
        {
            "dateadded": "2026-04-07 22:08:13 UTC",
            "url": "https://mind-weave.cognifabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813865/",
            "reporter": "anonymous"
        }
    ],
    "3813864": [
        {
            "dateadded": "2026-04-07 22:02:07 UTC",
            "url": "http://115.59.59.244:55298/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813864/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813863": [
        {
            "dateadded": "2026-04-07 22:01:15 UTC",
            "url": "https://link-node.systematrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 22:01:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813863/",
            "reporter": "anonymous"
        }
    ],
    "3813862": [
        {
            "dateadded": "2026-04-07 21:56:12 UTC",
            "url": "https://hub-secure.systematrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813862/",
            "reporter": "anonymous"
        }
    ],
    "3813861": [
        {
            "dateadded": "2026-04-07 21:54:22 UTC",
            "url": "http://115.57.166.170:57514/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:54:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813861/",
            "reporter": "geenensp"
        }
    ],
    "3813860": [
        {
            "dateadded": "2026-04-07 21:51:14 UTC",
            "url": "https://rank-log.systematrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813860/",
            "reporter": "anonymous"
        }
    ],
    "3813859": [
        {
            "dateadded": "2026-04-07 21:45:14 UTC",
            "url": "https://matrix-api.systematrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813859/",
            "reporter": "anonymous"
        }
    ],
    "3813858": [
        {
            "dateadded": "2026-04-07 21:39:07 UTC",
            "url": "https://order-svc.systematrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813858/",
            "reporter": "anonymous"
        }
    ],
    "3813857": [
        {
            "dateadded": "2026-04-07 21:34:07 UTC",
            "url": "https://main-frame.systematrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813857/",
            "reporter": "anonymous"
        }
    ],
    "3813856": [
        {
            "dateadded": "2026-04-07 21:29:06 UTC",
            "url": "https://logic-vault.inferentiaforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:29:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813856/",
            "reporter": "anonymous"
        }
    ],
    "3813855": [
        {
            "dateadded": "2026-04-07 21:28:21 UTC",
            "url": "http://171.81.100.3:36295/i",
            "url_status": "offline",
            "last_online": "2026-04-16 17:12:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813855/",
            "reporter": "geenensp"
        }
    ],
    "3813854": [
        {
            "dateadded": "2026-04-07 21:23:16 UTC",
            "url": "http://110.36.19.101:49274/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 10:26:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813854/",
            "reporter": "geenensp"
        }
    ],
    "3813853": [
        {
            "dateadded": "2026-04-07 21:23:07 UTC",
            "url": "https://hint-gate.inferentiaforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813853/",
            "reporter": "anonymous"
        }
    ],
    "3813852": [
        {
            "dateadded": "2026-04-07 21:20:13 UTC",
            "url": "http://175.165.78.107:42379/i",
            "url_status": "offline",
            "last_online": "2026-04-11 10:40:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813852/",
            "reporter": "geenensp"
        }
    ],
    "3813851": [
        {
            "dateadded": "2026-04-07 21:17:07 UTC",
            "url": "https://step-wise.inferentiaforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813851/",
            "reporter": "anonymous"
        }
    ],
    "3813850": [
        {
            "dateadded": "2026-04-07 21:13:10 UTC",
            "url": "https://forge-svc.inferentiaforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813850/",
            "reporter": "anonymous"
        }
    ],
    "3813849": [
        {
            "dateadded": "2026-04-07 21:10:09 UTC",
            "url": "https://guess-node.inferentiaforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google",
            "url_status": "offline",
            "last_online": "2026-04-07 21:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813849/",
            "reporter": "anonymous"
        }
    ],
    "3813848": [
        {
            "dateadded": "2026-04-07 21:05:20 UTC",
            "url": "http://45.92.1.50/rondo.aqg.sh?=6a64bdd8",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813848/",
            "reporter": "NDA0E"
        }
    ],
    "3813847": [
        {
            "dateadded": "2026-04-07 21:03:23 UTC",
            "url": "http://171.81.100.3:36295/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 15:57:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813847/",
            "reporter": "geenensp"
        }
    ],
    "3813846": [
        {
            "dateadded": "2026-04-07 21:03:14 UTC",
            "url": "http://45.92.1.50/rondo.aqg.sh?=``6a64bd80",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813846/",
            "reporter": "NDA0E"
        }
    ],
    "3813845": [
        {
            "dateadded": "2026-04-07 21:03:06 UTC",
            "url": "http://85.239.147.6/files/7655527200/PocBtoN.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813845/",
            "reporter": "c2hunter"
        }
    ],
    "3813844": [
        {
            "dateadded": "2026-04-07 20:59:08 UTC",
            "url": "https://lead-trace.inferentiaforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813844/",
            "reporter": "anonymous"
        }
    ],
    "3813843": [
        {
            "dateadded": "2026-04-07 20:54:07 UTC",
            "url": "https://vh47kmg3.nexuspatronage.digital/?=check&&actmn=EgkqhhvkjKJrJZXR",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813843/",
            "reporter": "anonymous"
        }
    ],
    "3813842": [
        {
            "dateadded": "2026-04-07 20:53:10 UTC",
            "url": "https://engine-hub.dialectrixengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813842/",
            "reporter": "anonymous"
        }
    ],
    "3813841": [
        {
            "dateadded": "2026-04-07 20:49:12 UTC",
            "url": "https://process-io.dialectrixengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813841/",
            "reporter": "anonymous"
        }
    ],
    "3813840": [
        {
            "dateadded": "2026-04-07 20:45:07 UTC",
            "url": "http://85.239.147.6/files/7024015129/0kEEdMR.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813840/",
            "reporter": "Bitsight"
        }
    ],
    "3813839": [
        {
            "dateadded": "2026-04-07 20:42:07 UTC",
            "url": "https://state-api.dialectrixengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813839/",
            "reporter": "anonymous"
        }
    ],
    "3813838": [
        {
            "dateadded": "2026-04-07 20:37:08 UTC",
            "url": "https://opp-check.dialectrixengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813838/",
            "reporter": "anonymous"
        }
    ],
    "3813837": [
        {
            "dateadded": "2026-04-07 20:32:16 UTC",
            "url": "http://124.235.248.214:47464/i",
            "url_status": "offline",
            "last_online": "2026-04-24 17:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813837/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813836": [
        {
            "dateadded": "2026-04-07 20:32:07 UTC",
            "url": "http://219.156.33.166:35172/i",
            "url_status": "offline",
            "last_online": "2026-04-10 05:25:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813836/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813835": [
        {
            "dateadded": "2026-04-07 20:31:11 UTC",
            "url": "https://logic-unit.dialectrixengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813835/",
            "reporter": "anonymous"
        }
    ],
    "3813834": [
        {
            "dateadded": "2026-04-07 20:26:08 UTC",
            "url": "https://synth-logic.dialectrixengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813834/",
            "reporter": "anonymous"
        }
    ],
    "3813833": [
        {
            "dateadded": "2026-04-07 20:20:11 UTC",
            "url": "https://norm-node.axiologyflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813833/",
            "reporter": "anonymous"
        }
    ],
    "3813832": [
        {
            "dateadded": "2026-04-07 20:14:09 UTC",
            "url": "https://flux-gate.axiologyflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813832/",
            "reporter": "anonymous"
        }
    ],
    "3813831": [
        {
            "dateadded": "2026-04-07 20:09:18 UTC",
            "url": "http://176.65.139.34/fish4.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813831/",
            "reporter": "botnetkiller"
        }
    ],
    "3813830": [
        {
            "dateadded": "2026-04-07 20:08:12 UTC",
            "url": "https://trend-svc.axiologyflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813830/",
            "reporter": "anonymous"
        }
    ],
    "3813829": [
        {
            "dateadded": "2026-04-07 20:06:20 UTC",
            "url": "http://123.12.23.99:34565/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813829/",
            "reporter": "geenensp"
        }
    ],
    "3813827": [
        {
            "dateadded": "2026-04-07 20:02:07 UTC",
            "url": "https://drift-log.axiologyflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 20:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813827/",
            "reporter": "anonymous"
        }
    ],
    "3813828": [
        {
            "dateadded": "2026-04-07 20:02:07 UTC",
            "url": "http://117.217.47.77:60516/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813828/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813826": [
        {
            "dateadded": "2026-04-07 19:59:22 UTC",
            "url": "http://110.139.33.199:58565/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813826/",
            "reporter": "geenensp"
        }
    ],
    "3813825": [
        {
            "dateadded": "2026-04-07 19:58:07 UTC",
            "url": "https://shift-ctrl.axiologyflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813825/",
            "reporter": "anonymous"
        }
    ],
    "3813824": [
        {
            "dateadded": "2026-04-07 19:54:17 UTC",
            "url": "http://42.226.91.72:53379/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813824/",
            "reporter": "geenensp"
        }
    ],
    "3813823": [
        {
            "dateadded": "2026-04-07 19:51:10 UTC",
            "url": "https://value-point.axiologyflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813823/",
            "reporter": "anonymous"
        }
    ],
    "3813822": [
        {
            "dateadded": "2026-04-07 19:50:20 UTC",
            "url": "http://60.18.122.213:45482/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813822/",
            "reporter": "geenensp"
        }
    ],
    "3813821": [
        {
            "dateadded": "2026-04-07 19:48:13 UTC",
            "url": "http://176.65.139.81/all.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 19:48:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813821/",
            "reporter": "botnetkiller"
        }
    ],
    "3813820": [
        {
            "dateadded": "2026-04-07 19:47:06 UTC",
            "url": "http://105.224.64.166:46279/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 19:47:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813820/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813819": [
        {
            "dateadded": "2026-04-07 19:46:08 UTC",
            "url": "https://bio-node.ontogenesiscore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813819/",
            "reporter": "anonymous"
        }
    ],
    "3813818": [
        {
            "dateadded": "2026-04-07 19:43:11 UTC",
            "url": "http://216.107.139.197/WSW0",
            "url_status": "offline",
            "last_online": "2026-04-22 17:55:29 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813818/",
            "reporter": "botnetkiller"
        }
    ],
    "3813817": [
        {
            "dateadded": "2026-04-07 19:42:07 UTC",
            "url": "http://110.36.29.195:47183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:55:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813817/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813816": [
        {
            "dateadded": "2026-04-07 19:40:12 UTC",
            "url": "https://origin-svc.ontogenesiscore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813816/",
            "reporter": "anonymous"
        }
    ],
    "3813815": [
        {
            "dateadded": "2026-04-07 19:37:15 UTC",
            "url": "http://117.217.47.77:60516/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:58:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813815/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813814": [
        {
            "dateadded": "2026-04-07 19:37:12 UTC",
            "url": "http://27.215.177.223:32913/i",
            "url_status": "offline",
            "last_online": "2026-04-09 03:57:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813814/",
            "reporter": "geenensp"
        }
    ],
    "3813813": [
        {
            "dateadded": "2026-04-07 19:37:10 UTC",
            "url": "http://216.107.139.197/RBW0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813813/",
            "reporter": "botnetkiller"
        }
    ],
    "3813812": [
        {
            "dateadded": "2026-04-07 19:35:16 UTC",
            "url": "http://216.107.139.197/RSW0",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813812/",
            "reporter": "botnetkiller"
        }
    ],
    "3813811": [
        {
            "dateadded": "2026-04-07 19:35:09 UTC",
            "url": "https://growth-hub.ontogenesiscore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813811/",
            "reporter": "anonymous"
        }
    ],
    "3813810": [
        {
            "dateadded": "2026-04-07 19:30:09 UTC",
            "url": "https://cell-logic.ontogenesiscore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813810/",
            "reporter": "anonymous"
        }
    ],
    "3813809": [
        {
            "dateadded": "2026-04-07 19:25:25 UTC",
            "url": "http://60.18.122.213:45482/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:24:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813809/",
            "reporter": "geenensp"
        }
    ],
    "3813808": [
        {
            "dateadded": "2026-04-07 19:24:45 UTC",
            "url": "https://life-cycle.ontogenesiscore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:24:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813808/",
            "reporter": "anonymous"
        }
    ],
    "3813807": [
        {
            "dateadded": "2026-04-07 19:22:14 UTC",
            "url": "http://179.108.89.220:52631/Mozi.a",
            "url_status": "offline",
            "last_online": "2026-04-07 19:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813807/",
            "reporter": "botnetkiller"
        }
    ],
    "3813806": [
        {
            "dateadded": "2026-04-07 19:21:14 UTC",
            "url": "http://179.108.89.220:52631/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-07 19:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813806/",
            "reporter": "botnetkiller"
        }
    ],
    "3813805": [
        {
            "dateadded": "2026-04-07 19:18:07 UTC",
            "url": "https://root-source.ontogenesiscore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813805/",
            "reporter": "anonymous"
        }
    ],
    "3813804": [
        {
            "dateadded": "2026-04-07 19:16:11 UTC",
            "url": "http://27.215.177.223:32913/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813804/",
            "reporter": "geenensp"
        }
    ],
    "3813803": [
        {
            "dateadded": "2026-04-07 19:14:26 UTC",
            "url": "http://113.116.150.14:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:01:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813803/",
            "reporter": "geenensp"
        }
    ],
    "3813802": [
        {
            "dateadded": "2026-04-07 19:13:09 UTC",
            "url": "https://proof-api.epistemegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813802/",
            "reporter": "anonymous"
        }
    ],
    "3813800": [
        {
            "dateadded": "2026-04-07 19:09:22 UTC",
            "url": "http://115.58.132.100:53671/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:24:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813800/",
            "reporter": "geenensp"
        }
    ],
    "3813801": [
        {
            "dateadded": "2026-04-07 19:09:22 UTC",
            "url": "http://200.115.102.14:56289/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:21:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813801/",
            "reporter": "geenensp"
        }
    ],
    "3813799": [
        {
            "dateadded": "2026-04-07 19:07:15 UTC",
            "url": "http://61.53.132.250:33249/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813799/",
            "reporter": "geenensp"
        }
    ],
    "3813798": [
        {
            "dateadded": "2026-04-07 19:07:08 UTC",
            "url": "https://grid-core.epistemegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813798/",
            "reporter": "anonymous"
        }
    ],
    "3813797": [
        {
            "dateadded": "2026-04-07 19:01:09 UTC",
            "url": "https://sync-gate.epistemegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 19:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813797/",
            "reporter": "anonymous"
        }
    ],
    "3813796": [
        {
            "dateadded": "2026-04-07 18:56:07 UTC",
            "url": "https://base-vault.epistemegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813796/",
            "reporter": "anonymous"
        }
    ],
    "3813795": [
        {
            "dateadded": "2026-04-07 18:49:08 UTC",
            "url": "https://info-mesh.epistemegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813795/",
            "reporter": "anonymous"
        }
    ],
    "3813794": [
        {
            "dateadded": "2026-04-07 18:45:20 UTC",
            "url": "http://115.58.132.100:53671/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:29:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813794/",
            "reporter": "geenensp"
        }
    ],
    "3813793": [
        {
            "dateadded": "2026-04-07 18:44:07 UTC",
            "url": "https://truth-map.epistemegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813793/",
            "reporter": "anonymous"
        }
    ],
    "3813792": [
        {
            "dateadded": "2026-04-07 18:42:23 UTC",
            "url": "http://61.53.132.250:33249/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:01:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813792/",
            "reporter": "geenensp"
        }
    ],
    "3813791": [
        {
            "dateadded": "2026-04-07 18:42:06 UTC",
            "url": "http://27.202.117.67:58193/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 11:19:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813791/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813790": [
        {
            "dateadded": "2026-04-07 18:39:07 UTC",
            "url": "https://audit-node.metalogicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813790/",
            "reporter": "anonymous"
        }
    ],
    "3813789": [
        {
            "dateadded": "2026-04-07 18:33:11 UTC",
            "url": "https://stream-io.metalogicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813789/",
            "reporter": "anonymous"
        }
    ],
    "3813788": [
        {
            "dateadded": "2026-04-07 18:29:24 UTC",
            "url": "http://27.202.245.95:45823/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813788/",
            "reporter": "geenensp"
        }
    ],
    "3813787": [
        {
            "dateadded": "2026-04-07 18:28:08 UTC",
            "url": "https://rule-engine.metalogicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813787/",
            "reporter": "anonymous"
        }
    ],
    "3813786": [
        {
            "dateadded": "2026-04-07 18:22:11 UTC",
            "url": "https://logic-trace.metalogicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813786/",
            "reporter": "anonymous"
        }
    ],
    "3813784": [
        {
            "dateadded": "2026-04-07 18:17:07 UTC",
            "url": "http://27.202.117.67:58193/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:23:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813784/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813785": [
        {
            "dateadded": "2026-04-07 18:17:07 UTC",
            "url": "http://123.4.245.239:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813785/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813783": [
        {
            "dateadded": "2026-04-07 18:16:11 UTC",
            "url": "https://data-path.metalogicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813783/",
            "reporter": "anonymous"
        }
    ],
    "3813782": [
        {
            "dateadded": "2026-04-07 18:10:11 UTC",
            "url": "https://meta-flow.metalogicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813782/",
            "reporter": "anonymous"
        }
    ],
    "3813781": [
        {
            "dateadded": "2026-04-07 18:05:10 UTC",
            "url": "https://6qhzzl.estonianscree.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 18:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813781/",
            "reporter": "anonymous"
        }
    ],
    "3813780": [
        {
            "dateadded": "2026-04-07 17:59:08 UTC",
            "url": "https://livelybridge.estonianscree.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813780/",
            "reporter": "anonymous"
        }
    ],
    "3813779": [
        {
            "dateadded": "2026-04-07 17:58:18 UTC",
            "url": "http://124.94.153.235:43018/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:20:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813779/",
            "reporter": "geenensp"
        }
    ],
    "3813778": [
        {
            "dateadded": "2026-04-07 17:54:10 UTC",
            "url": "https://fresh9-sheet.estonianscree.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813778/",
            "reporter": "anonymous"
        }
    ],
    "3813777": [
        {
            "dateadded": "2026-04-07 17:48:07 UTC",
            "url": "https://curr3n-drive.estonianscree.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813777/",
            "reporter": "anonymous"
        }
    ],
    "3813776": [
        {
            "dateadded": "2026-04-07 17:42:18 UTC",
            "url": "http://124.94.153.235:43018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813776/",
            "reporter": "geenensp"
        }
    ],
    "3813775": [
        {
            "dateadded": "2026-04-07 17:42:08 UTC",
            "url": "https://zentide3ar.estonianscree.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813775/",
            "reporter": "anonymous"
        }
    ],
    "3813774": [
        {
            "dateadded": "2026-04-07 17:38:12 UTC",
            "url": "https://arktideos4.estonianscree.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813774/",
            "reporter": "anonymous"
        }
    ],
    "3813773": [
        {
            "dateadded": "2026-04-07 17:32:10 UTC",
            "url": "https://eetvfoqv.abyssrevue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813773/",
            "reporter": "anonymous"
        }
    ],
    "3813772": [
        {
            "dateadded": "2026-04-07 17:29:18 UTC",
            "url": "http://222.140.215.72:53324/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:41:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813772/",
            "reporter": "geenensp"
        }
    ],
    "3813771": [
        {
            "dateadded": "2026-04-07 17:26:11 UTC",
            "url": "https://imageextend.abyssrevue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813771/",
            "reporter": "anonymous"
        }
    ],
    "3813770": [
        {
            "dateadded": "2026-04-07 17:20:18 UTC",
            "url": "https://kel-markis.abyssrevue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:20:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813770/",
            "reporter": "anonymous"
        }
    ],
    "3813769": [
        {
            "dateadded": "2026-04-07 17:15:14 UTC",
            "url": "https://danwd.abyssrevue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813769/",
            "reporter": "anonymous"
        }
    ],
    "3813768": [
        {
            "dateadded": "2026-04-07 17:14:19 UTC",
            "url": "http://61.163.158.60:47311/i",
            "url_status": "offline",
            "last_online": "2026-04-09 03:59:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813768/",
            "reporter": "geenensp"
        }
    ],
    "3813767": [
        {
            "dateadded": "2026-04-07 17:12:14 UTC",
            "url": "https://airw5-field.abyssrevue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813767/",
            "reporter": "anonymous"
        }
    ],
    "3813766": [
        {
            "dateadded": "2026-04-07 17:04:13 UTC",
            "url": "https://rnl2.abyssrevue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 17:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813766/",
            "reporter": "anonymous"
        }
    ],
    "3813765": [
        {
            "dateadded": "2026-04-07 17:01:19 UTC",
            "url": "http://175.148.57.127:45797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 21:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813765/",
            "reporter": "geenensp"
        }
    ],
    "3813764": [
        {
            "dateadded": "2026-04-07 16:59:24 UTC",
            "url": "http://182.123.208.67:43651/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813764/",
            "reporter": "geenensp"
        }
    ],
    "3813763": [
        {
            "dateadded": "2026-04-07 16:57:09 UTC",
            "url": "https://dense-graph.aeromechsadn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813763/",
            "reporter": "anonymous"
        }
    ],
    "3813762": [
        {
            "dateadded": "2026-04-07 16:56:20 UTC",
            "url": "http://222.140.215.72:53324/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 15:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813762/",
            "reporter": "geenensp"
        }
    ],
    "3813761": [
        {
            "dateadded": "2026-04-07 16:52:12 UTC",
            "url": "https://z3vrw7.aeromechsadn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813761/",
            "reporter": "anonymous"
        }
    ],
    "3813760": [
        {
            "dateadded": "2026-04-07 16:47:13 UTC",
            "url": "https://dyntideor8.aeromechsadn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813760/",
            "reporter": "anonymous"
        }
    ],
    "3813759": [
        {
            "dateadded": "2026-04-07 16:41:13 UTC",
            "url": "https://velcoreet8.aeromechsadn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813759/",
            "reporter": "anonymous"
        }
    ],
    "3813758": [
        {
            "dateadded": "2026-04-07 16:35:08 UTC",
            "url": "https://ancientmoss.aeromechsadn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813758/",
            "reporter": "anonymous"
        }
    ],
    "3813757": [
        {
            "dateadded": "2026-04-07 16:31:22 UTC",
            "url": "http://61.52.57.39:51661/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813757/",
            "reporter": "geenensp"
        }
    ],
    "3813756": [
        {
            "dateadded": "2026-04-07 16:30:21 UTC",
            "url": "http://182.123.208.67:43651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813756/",
            "reporter": "geenensp"
        }
    ],
    "3813755": [
        {
            "dateadded": "2026-04-07 16:29:13 UTC",
            "url": "https://outletstead.aeromechsadn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813755/",
            "reporter": "anonymous"
        }
    ],
    "3813754": [
        {
            "dateadded": "2026-04-07 16:25:15 UTC",
            "url": "https://zen-spireor.beacostolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813754/",
            "reporter": "anonymous"
        }
    ],
    "3813752": [
        {
            "dateadded": "2026-04-07 16:22:09 UTC",
            "url": "http://219.157.246.244:57322/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:52:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813752/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813753": [
        {
            "dateadded": "2026-04-07 16:22:09 UTC",
            "url": "https://observetoken.beacostolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813753/",
            "reporter": "anonymous"
        }
    ],
    "3813751": [
        {
            "dateadded": "2026-04-07 16:21:07 UTC",
            "url": "https://hlr407.beacostolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813751/",
            "reporter": "anonymous"
        }
    ],
    "3813750": [
        {
            "dateadded": "2026-04-07 16:17:08 UTC",
            "url": "http://61.53.133.127:34847/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:47:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813750/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813749": [
        {
            "dateadded": "2026-04-07 16:12:26 UTC",
            "url": "http://61.52.57.39:51661/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:12:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813749/",
            "reporter": "geenensp"
        }
    ],
    "3813748": [
        {
            "dateadded": "2026-04-07 16:12:10 UTC",
            "url": "http://61.53.133.127:34847/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813748/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813747": [
        {
            "dateadded": "2026-04-07 16:12:09 UTC",
            "url": "http://219.157.246.244:57322/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 12:41:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813747/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813746": [
        {
            "dateadded": "2026-04-07 16:08:13 UTC",
            "url": "https://nor-nexar.beacostolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813746/",
            "reporter": "anonymous"
        }
    ],
    "3813745": [
        {
            "dateadded": "2026-04-07 16:07:12 UTC",
            "url": "http://42.56.167.101:49208/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813745/",
            "reporter": "geenensp"
        }
    ],
    "3813744": [
        {
            "dateadded": "2026-04-07 16:07:11 UTC",
            "url": "http://123.8.50.55:57431/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:52:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813744/",
            "reporter": "geenensp"
        }
    ],
    "3813743": [
        {
            "dateadded": "2026-04-07 16:01:19 UTC",
            "url": "https://geo-4sset.beacostolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:01:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813743/",
            "reporter": "anonymous"
        }
    ],
    "3813742": [
        {
            "dateadded": "2026-04-07 15:57:11 UTC",
            "url": "https://logisttheor.beacostolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:57:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813742/",
            "reporter": "anonymous"
        }
    ],
    "3813741": [
        {
            "dateadded": "2026-04-07 15:51:14 UTC",
            "url": "https://gloss-branch.bolettreatise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813741/",
            "reporter": "anonymous"
        }
    ],
    "3813740": [
        {
            "dateadded": "2026-04-07 15:48:15 UTC",
            "url": "https://7fsjtcf.bolettreatise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813740/",
            "reporter": "anonymous"
        }
    ],
    "3813739": [
        {
            "dateadded": "2026-04-07 15:44:14 UTC",
            "url": "https://merfluxal.bolettreatise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813739/",
            "reporter": "anonymous"
        }
    ],
    "3813738": [
        {
            "dateadded": "2026-04-07 15:40:26 UTC",
            "url": "http://123.8.50.55:57431/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:48:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813738/",
            "reporter": "geenensp"
        }
    ],
    "3813737": [
        {
            "dateadded": "2026-04-07 15:34:12 UTC",
            "url": "https://xubon.bolettreatise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813737/",
            "reporter": "anonymous"
        }
    ],
    "3813736": [
        {
            "dateadded": "2026-04-07 15:32:21 UTC",
            "url": "http://113.239.120.41:52340/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 21:57:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813736/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813735": [
        {
            "dateadded": "2026-04-07 15:27:14 UTC",
            "url": "http://115.52.241.15:40030/i",
            "url_status": "offline",
            "last_online": "2026-04-08 19:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813735/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813734": [
        {
            "dateadded": "2026-04-07 15:27:11 UTC",
            "url": "https://part1c-spool.bolettreatise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813734/",
            "reporter": "anonymous"
        }
    ],
    "3813733": [
        {
            "dateadded": "2026-04-07 15:23:20 UTC",
            "url": "http://42.56.167.101:49208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:16:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813733/",
            "reporter": "geenensp"
        }
    ],
    "3813732": [
        {
            "dateadded": "2026-04-07 15:23:10 UTC",
            "url": "https://circuitrans.bolettreatise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813732/",
            "reporter": "anonymous"
        }
    ],
    "3813731": [
        {
            "dateadded": "2026-04-07 15:19:14 UTC",
            "url": "https://dark7-dock.exceptionpong.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:19:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813731/",
            "reporter": "anonymous"
        }
    ],
    "3813730": [
        {
            "dateadded": "2026-04-07 15:16:11 UTC",
            "url": "https://peakship.exceptionpong.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813730/",
            "reporter": "anonymous"
        }
    ],
    "3813729": [
        {
            "dateadded": "2026-04-07 15:12:18 UTC",
            "url": "http://183.214.149.164:40255/i",
            "url_status": "offline",
            "last_online": "2026-04-10 11:30:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813729/",
            "reporter": "geenensp"
        }
    ],
    "3813728": [
        {
            "dateadded": "2026-04-07 15:06:11 UTC",
            "url": "https://tok3-array.exceptionpong.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813728/",
            "reporter": "anonymous"
        }
    ],
    "3813727": [
        {
            "dateadded": "2026-04-07 15:01:14 UTC",
            "url": "https://3cfjxj.exceptionpong.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 15:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813727/",
            "reporter": "anonymous"
        }
    ],
    "3813726": [
        {
            "dateadded": "2026-04-07 14:59:11 UTC",
            "url": "http://110.37.91.29:53327/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:54:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813726/",
            "reporter": "geenensp"
        }
    ],
    "3813725": [
        {
            "dateadded": "2026-04-07 14:58:22 UTC",
            "url": "http://113.233.112.124:60978/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:00:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813725/",
            "reporter": "geenensp"
        }
    ],
    "3813724": [
        {
            "dateadded": "2026-04-07 14:55:10 UTC",
            "url": "https://sernexa6.exceptionpong.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813724/",
            "reporter": "anonymous"
        }
    ],
    "3813723": [
        {
            "dateadded": "2026-04-07 14:49:10 UTC",
            "url": "https://forestcraft.exceptionpong.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813723/",
            "reporter": "anonymous"
        }
    ],
    "3813722": [
        {
            "dateadded": "2026-04-07 14:43:19 UTC",
            "url": "http://183.214.149.164:40255/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 10:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813722/",
            "reporter": "geenensp"
        }
    ],
    "3813721": [
        {
            "dateadded": "2026-04-07 14:43:13 UTC",
            "url": "https://norlithex2.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813721/",
            "reporter": "anonymous"
        }
    ],
    "3813720": [
        {
            "dateadded": "2026-04-07 14:38:10 UTC",
            "url": "https://zuzho.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813720/",
            "reporter": "anonymous"
        }
    ],
    "3813719": [
        {
            "dateadded": "2026-04-07 14:32:09 UTC",
            "url": "https://hyper-tru5.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813719/",
            "reporter": "anonymous"
        }
    ],
    "3813718": [
        {
            "dateadded": "2026-04-07 14:26:12 UTC",
            "url": "https://ser-fluxex.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813718/",
            "reporter": "anonymous"
        }
    ],
    "3813717": [
        {
            "dateadded": "2026-04-07 14:24:10 UTC",
            "url": "http://42.234.149.59:45670/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:16:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813717/",
            "reporter": "geenensp"
        }
    ],
    "3813716": [
        {
            "dateadded": "2026-04-07 14:20:17 UTC",
            "url": "https://vel-tideen.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:20:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813716/",
            "reporter": "anonymous"
        }
    ],
    "3813715": [
        {
            "dateadded": "2026-04-07 14:16:17 UTC",
            "url": "https://jaido.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813715/",
            "reporter": "anonymous"
        }
    ],
    "3813714": [
        {
            "dateadded": "2026-04-07 14:15:22 UTC",
            "url": "http://27.215.51.84:41356/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:06:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813714/",
            "reporter": "geenensp"
        }
    ],
    "3813713": [
        {
            "dateadded": "2026-04-07 14:09:11 UTC",
            "url": "https://fl7qf.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813713/",
            "reporter": "anonymous"
        }
    ],
    "3813712": [
        {
            "dateadded": "2026-04-07 14:07:08 UTC",
            "url": "http://42.226.91.72:53379/i",
            "url_status": "offline",
            "last_online": "2026-04-07 23:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813712/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813711": [
        {
            "dateadded": "2026-04-07 14:04:08 UTC",
            "url": "https://51ojrcjj.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 14:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813711/",
            "reporter": "anonymous"
        }
    ],
    "3813710": [
        {
            "dateadded": "2026-04-07 14:02:20 UTC",
            "url": "http://113.238.223.172:60731/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 23:03:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813710/",
            "reporter": "geenensp"
        }
    ],
    "3813709": [
        {
            "dateadded": "2026-04-07 14:01:20 UTC",
            "url": "http://113.228.145.25:59275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 23:15:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813709/",
            "reporter": "geenensp"
        }
    ],
    "3813708": [
        {
            "dateadded": "2026-04-07 14:01:06 UTC",
            "url": "http://85.239.147.6/files/77546367/agcd2pP.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813708/",
            "reporter": "Bitsight"
        }
    ],
    "3813707": [
        {
            "dateadded": "2026-04-07 13:59:14 UTC",
            "url": "https://ktnceg.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813707/",
            "reporter": "anonymous"
        }
    ],
    "3813706": [
        {
            "dateadded": "2026-04-07 13:56:20 UTC",
            "url": "http://42.229.160.161:45770/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813706/",
            "reporter": "geenensp"
        }
    ],
    "3813705": [
        {
            "dateadded": "2026-04-07 13:52:08 UTC",
            "url": "http://182.119.250.63:35172/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:03:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813705/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813704": [
        {
            "dateadded": "2026-04-07 13:52:07 UTC",
            "url": "https://jfsiqmo.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813704/",
            "reporter": "anonymous"
        }
    ],
    "3813703": [
        {
            "dateadded": "2026-04-07 13:47:11 UTC",
            "url": "https://trimeshet.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813703/",
            "reporter": "anonymous"
        }
    ],
    "3813702": [
        {
            "dateadded": "2026-04-07 13:42:10 UTC",
            "url": "https://layerpine.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813702/",
            "reporter": "anonymous"
        }
    ],
    "3813701": [
        {
            "dateadded": "2026-04-07 13:36:19 UTC",
            "url": "http://42.229.160.161:45770/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 23:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813701/",
            "reporter": "geenensp"
        }
    ],
    "3813700": [
        {
            "dateadded": "2026-04-07 13:36:07 UTC",
            "url": "https://cleaaudit.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813700/",
            "reporter": "anonymous"
        }
    ],
    "3813699": [
        {
            "dateadded": "2026-04-07 13:31:08 UTC",
            "url": "https://vvind-point.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813699/",
            "reporter": "anonymous"
        }
    ],
    "3813698": [
        {
            "dateadded": "2026-04-07 13:24:09 UTC",
            "url": "https://rainfreig.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813698/",
            "reporter": "anonymous"
        }
    ],
    "3813697": [
        {
            "dateadded": "2026-04-07 13:23:18 UTC",
            "url": "http://42.177.236.185:49952/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:01:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813697/",
            "reporter": "geenensp"
        }
    ],
    "3813696": [
        {
            "dateadded": "2026-04-07 13:19:11 UTC",
            "url": "https://rmvofu.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813696/",
            "reporter": "anonymous"
        }
    ],
    "3813695": [
        {
            "dateadded": "2026-04-07 13:13:09 UTC",
            "url": "https://public-line.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813695/",
            "reporter": "anonymous"
        }
    ],
    "3813694": [
        {
            "dateadded": "2026-04-07 13:08:07 UTC",
            "url": "https://assashap.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813694/",
            "reporter": "anonymous"
        }
    ],
    "3813693": [
        {
            "dateadded": "2026-04-07 13:02:09 UTC",
            "url": "https://zkfw.eskimotsutsik.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 13:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813693/",
            "reporter": "anonymous"
        }
    ],
    "3813692": [
        {
            "dateadded": "2026-04-07 13:01:20 UTC",
            "url": "http://182.126.205.25:60979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813692/",
            "reporter": "geenensp"
        }
    ],
    "3813691": [
        {
            "dateadded": "2026-04-07 12:59:12 UTC",
            "url": "https://theorysandbox.eskimotsutsik.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813691/",
            "reporter": "anonymous"
        }
    ],
    "3813690": [
        {
            "dateadded": "2026-04-07 12:57:14 UTC",
            "url": "http://42.177.236.185:49952/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:36:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813690/",
            "reporter": "geenensp"
        }
    ],
    "3813689": [
        {
            "dateadded": "2026-04-07 12:57:07 UTC",
            "url": "http://123.14.47.254:56064/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:44:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813689/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813688": [
        {
            "dateadded": "2026-04-07 12:55:10 UTC",
            "url": "https://sheree.eskimotsutsik.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813688/",
            "reporter": "anonymous"
        }
    ],
    "3813687": [
        {
            "dateadded": "2026-04-07 12:51:17 UTC",
            "url": "http://27.215.51.84:41356/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:17:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813687/",
            "reporter": "geenensp"
        }
    ],
    "3813686": [
        {
            "dateadded": "2026-04-07 12:47:12 UTC",
            "url": "https://rail-glaci.eskimotsutsik.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813686/",
            "reporter": "anonymous"
        }
    ],
    "3813685": [
        {
            "dateadded": "2026-04-07 12:40:16 UTC",
            "url": "https://illurn-plate.eskimotsutsik.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813685/",
            "reporter": "anonymous"
        }
    ],
    "3813684": [
        {
            "dateadded": "2026-04-07 12:34:09 UTC",
            "url": "https://jzus3j.eskimotsutsik.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813684/",
            "reporter": "anonymous"
        }
    ],
    "3813683": [
        {
            "dateadded": "2026-04-07 12:30:12 UTC",
            "url": "https://zone-static.nicequiet.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813683/",
            "reporter": "anonymous"
        }
    ],
    "3813682": [
        {
            "dateadded": "2026-04-07 12:27:10 UTC",
            "url": "http://123.14.47.254:56064/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 10:15:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813682/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813681": [
        {
            "dateadded": "2026-04-07 12:22:27 UTC",
            "url": "https://soft-hub.nicequiet.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:22:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813681/",
            "reporter": "anonymous"
        }
    ],
    "3813680": [
        {
            "dateadded": "2026-04-07 12:21:16 UTC",
            "url": "https://cdn.discordapp.com/attachments/1488149515692150997/1491005258346795148/FACTURA.js?ex=69d61e5b&is=69d4ccdb&hm=7dec44f6517f5de4372dce0831626cd9e6a97158aa944368b01d24808dd99e63&",
            "url_status": "offline",
            "last_online": "2026-04-08 05:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "js"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813680/",
            "reporter": "abuse_ch"
        }
    ],
    "3813679": [
        {
            "dateadded": "2026-04-07 12:21:15 UTC",
            "url": "https://cdn.discordapp.com/attachments/1488149515692150997/1491033581819138350/factura.js?ex=69d638bb&is=69d4e73b&hm=e2ab3959d654d785e20f205d06bb87981464b75be361e1167a1905db5742f0fa&",
            "url_status": "offline",
            "last_online": "2026-04-08 10:56:34 UTC",
            "threat": "malware_download",
            "tags": [
                "js",
                "PhantomStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813679/",
            "reporter": "abuse_ch"
        }
    ],
    "3813678": [
        {
            "dateadded": "2026-04-07 12:17:09 UTC",
            "url": "https://mute-gate.nicequiet.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813678/",
            "reporter": "anonymous"
        }
    ],
    "3813677": [
        {
            "dateadded": "2026-04-07 12:17:07 UTC",
            "url": "http://222.139.44.180:40976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:39:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813677/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813676": [
        {
            "dateadded": "2026-04-07 12:12:13 UTC",
            "url": "https://calm-svc.nicequiet.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813676/",
            "reporter": "anonymous"
        }
    ],
    "3813675": [
        {
            "dateadded": "2026-04-07 12:12:12 UTC",
            "url": "http://222.139.42.174:49092/i",
            "url_status": "offline",
            "last_online": "2026-04-07 12:12:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813675/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813674": [
        {
            "dateadded": "2026-04-07 12:06:08 UTC",
            "url": "https://peace-api.nicequiet.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813674/",
            "reporter": "anonymous"
        }
    ],
    "3813673": [
        {
            "dateadded": "2026-04-07 12:02:07 UTC",
            "url": "http://222.139.42.174:49092/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813673/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813672": [
        {
            "dateadded": "2026-04-07 12:01:06 UTC",
            "url": "https://silent-node.nicequiet.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 12:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813672/",
            "reporter": "anonymous"
        }
    ],
    "3813671": [
        {
            "dateadded": "2026-04-07 11:59:18 UTC",
            "url": "http://175.150.112.37:46226/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:13:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813671/",
            "reporter": "geenensp"
        }
    ],
    "3813670": [
        {
            "dateadded": "2026-04-07 11:57:21 UTC",
            "url": "http://179.108.89.220:52631/i",
            "url_status": "offline",
            "last_online": "2026-04-07 15:42:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813670/",
            "reporter": "geenensp"
        }
    ],
    "3813669": [
        {
            "dateadded": "2026-04-07 11:55:08 UTC",
            "url": "https://rest-log.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813669/",
            "reporter": "anonymous"
        }
    ],
    "3813668": [
        {
            "dateadded": "2026-04-07 11:54:20 UTC",
            "url": "http://182.240.38.159:45980/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:04:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813668/",
            "reporter": "geenensp"
        }
    ],
    "3813667": [
        {
            "dateadded": "2026-04-07 11:50:10 UTC",
            "url": "https://lab-svc.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813667/",
            "reporter": "anonymous"
        }
    ],
    "3813666": [
        {
            "dateadded": "2026-04-07 11:43:06 UTC",
            "url": "https://med-node.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813666/",
            "reporter": "anonymous"
        }
    ],
    "3813663": [
        {
            "dateadded": "2026-04-07 11:41:09 UTC",
            "url": "http://94.156.152.233/bins/nx686",
            "url_status": "offline",
            "last_online": "2026-04-10 23:01:19 UTC",
            "threat": "malware_download",
            "tags": [
                "94-156-152-233",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813663/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813664": [
        {
            "dateadded": "2026-04-07 11:41:09 UTC",
            "url": "http://94.156.152.233/bins/nppc440",
            "url_status": "offline",
            "last_online": "2026-04-10 23:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "94-156-152-233",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813664/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813665": [
        {
            "dateadded": "2026-04-07 11:41:09 UTC",
            "url": "http://94.156.152.233/bins/nx486",
            "url_status": "offline",
            "last_online": "2026-04-10 23:32:53 UTC",
            "threat": "malware_download",
            "tags": [
                "94-156-152-233",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813665/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813662": [
        {
            "dateadded": "2026-04-07 11:38:17 UTC",
            "url": "http://61.52.58.117:35587/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:03:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813662/",
            "reporter": "geenensp"
        }
    ],
    "3813661": [
        {
            "dateadded": "2026-04-07 11:38:06 UTC",
            "url": "https://doc-portal.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:38:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813661/",
            "reporter": "anonymous"
        }
    ],
    "3813660": [
        {
            "dateadded": "2026-04-07 11:36:14 UTC",
            "url": "http://179.108.89.220:52631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813660/",
            "reporter": "geenensp"
        }
    ],
    "3813659": [
        {
            "dateadded": "2026-04-07 11:35:20 UTC",
            "url": "http://61.52.58.117:35587/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:56:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813659/",
            "reporter": "geenensp"
        }
    ],
    "3813658": [
        {
            "dateadded": "2026-04-07 11:32:13 UTC",
            "url": "http://42.228.44.149:53251/i",
            "url_status": "offline",
            "last_online": "2026-04-08 03:53:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813658/",
            "reporter": "geenensp"
        }
    ],
    "3813657": [
        {
            "dateadded": "2026-04-07 11:32:09 UTC",
            "url": "https://care-api.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813657/",
            "reporter": "anonymous"
        }
    ],
    "3813656": [
        {
            "dateadded": "2026-04-07 11:32:06 UTC",
            "url": "http://27.215.176.29:45407/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:04:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813656/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813655": [
        {
            "dateadded": "2026-04-07 11:27:06 UTC",
            "url": "https://health-check.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813655/",
            "reporter": "anonymous"
        }
    ],
    "3813654": [
        {
            "dateadded": "2026-04-07 11:26:28 UTC",
            "url": "http://182.240.38.159:45980/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 12:49:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813654/",
            "reporter": "geenensp"
        }
    ],
    "3813653": [
        {
            "dateadded": "2026-04-07 11:25:12 UTC",
            "url": "http://45.95.147.178/x",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:49 UTC",
            "threat": "malware_download",
            "tags": [
                "45-95-147-178",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813653/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813652": [
        {
            "dateadded": "2026-04-07 11:24:18 UTC",
            "url": "http://175.150.112.37:46226/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813652/",
            "reporter": "geenensp"
        }
    ],
    "3813651": [
        {
            "dateadded": "2026-04-07 11:21:17 UTC",
            "url": "http://94.156.152.233/bins/nsh4",
            "url_status": "offline",
            "last_online": "2026-04-10 23:09:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813651/",
            "reporter": "abuse_ch"
        }
    ],
    "3813650": [
        {
            "dateadded": "2026-04-07 11:21:10 UTC",
            "url": "https://meta-hub.ashstatistic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813650/",
            "reporter": "anonymous"
        }
    ],
    "3813649": [
        {
            "dateadded": "2026-04-07 11:20:41 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813649/",
            "reporter": "abuse_ch"
        }
    ],
    "3813648": [
        {
            "dateadded": "2026-04-07 11:20:38 UTC",
            "url": "http://103.130.214.71:1212/zyre.i486",
            "url_status": "offline",
            "last_online": "2026-04-11 11:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813648/",
            "reporter": "abuse_ch"
        }
    ],
    "3813647": [
        {
            "dateadded": "2026-04-07 11:20:35 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813647/",
            "reporter": "abuse_ch"
        }
    ],
    "3813632": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://94.156.152.233/bins/narm7",
            "url_status": "offline",
            "last_online": "2026-04-08 17:21:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813632/",
            "reporter": "abuse_ch"
        }
    ],
    "3813633": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://94.156.152.233/bins/nx86_64",
            "url_status": "offline",
            "last_online": "2026-04-10 22:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813633/",
            "reporter": "abuse_ch"
        }
    ],
    "3813634": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813634/",
            "reporter": "abuse_ch"
        }
    ],
    "3813635": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://94.156.152.233/bins/narm",
            "url_status": "offline",
            "last_online": "2026-04-10 22:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813635/",
            "reporter": "abuse_ch"
        }
    ],
    "3813636": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.arc",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813636/",
            "reporter": "abuse_ch"
        }
    ],
    "3813637": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.x86",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813637/",
            "reporter": "abuse_ch"
        }
    ],
    "3813638": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813638/",
            "reporter": "abuse_ch"
        }
    ],
    "3813639": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813639/",
            "reporter": "abuse_ch"
        }
    ],
    "3813640": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813640/",
            "reporter": "abuse_ch"
        }
    ],
    "3813641": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://94.156.152.233/bins/narm6",
            "url_status": "offline",
            "last_online": "2026-04-10 23:22:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813641/",
            "reporter": "abuse_ch"
        }
    ],
    "3813642": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813642/",
            "reporter": "abuse_ch"
        }
    ],
    "3813643": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://94.156.152.233/bins/nmpsl",
            "url_status": "offline",
            "last_online": "2026-04-11 01:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813643/",
            "reporter": "abuse_ch"
        }
    ],
    "3813644": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://94.156.152.233/bins/nx86",
            "url_status": "offline",
            "last_online": "2026-04-10 22:23:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813644/",
            "reporter": "abuse_ch"
        }
    ],
    "3813645": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813645/",
            "reporter": "abuse_ch"
        }
    ],
    "3813646": [
        {
            "dateadded": "2026-04-07 11:20:28 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813646/",
            "reporter": "abuse_ch"
        }
    ],
    "3813626": [
        {
            "dateadded": "2026-04-07 11:20:27 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813626/",
            "reporter": "abuse_ch"
        }
    ],
    "3813627": [
        {
            "dateadded": "2026-04-07 11:20:27 UTC",
            "url": "http://94.156.152.233/bins/nm68k",
            "url_status": "offline",
            "last_online": "2026-04-11 03:18:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813627/",
            "reporter": "abuse_ch"
        }
    ],
    "3813628": [
        {
            "dateadded": "2026-04-07 11:20:27 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813628/",
            "reporter": "abuse_ch"
        }
    ],
    "3813629": [
        {
            "dateadded": "2026-04-07 11:20:27 UTC",
            "url": "http://94.156.152.233/bins/nmips",
            "url_status": "offline",
            "last_online": "2026-04-10 17:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813629/",
            "reporter": "abuse_ch"
        }
    ],
    "3813630": [
        {
            "dateadded": "2026-04-07 11:20:27 UTC",
            "url": "http://94.156.152.233/bins/narm5",
            "url_status": "offline",
            "last_online": "2026-04-10 22:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813630/",
            "reporter": "abuse_ch"
        }
    ],
    "3813631": [
        {
            "dateadded": "2026-04-07 11:20:27 UTC",
            "url": "http://94.156.152.233/bins/nppc",
            "url_status": "offline",
            "last_online": "2026-04-10 21:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813631/",
            "reporter": "abuse_ch"
        }
    ],
    "3813622": [
        {
            "dateadded": "2026-04-07 11:20:24 UTC",
            "url": "http://103.130.214.71:1212/zyre.x64",
            "url_status": "offline",
            "last_online": "2026-04-11 11:20:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813622/",
            "reporter": "abuse_ch"
        }
    ],
    "3813623": [
        {
            "dateadded": "2026-04-07 11:20:24 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813623/",
            "reporter": "abuse_ch"
        }
    ],
    "3813624": [
        {
            "dateadded": "2026-04-07 11:20:24 UTC",
            "url": "http://144.225.93.12/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813624/",
            "reporter": "abuse_ch"
        }
    ],
    "3813625": [
        {
            "dateadded": "2026-04-07 11:20:24 UTC",
            "url": "http://103.130.214.71:1212/zyre.x86",
            "url_status": "offline",
            "last_online": "2026-04-11 10:22:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813625/",
            "reporter": "abuse_ch"
        }
    ],
    "3813611": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.m68k",
            "url_status": "offline",
            "last_online": "2026-04-11 10:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813611/",
            "reporter": "abuse_ch"
        }
    ],
    "3813612": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.arm7",
            "url_status": "offline",
            "last_online": "2026-04-11 14:38:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813612/",
            "reporter": "abuse_ch"
        }
    ],
    "3813613": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.arm5",
            "url_status": "offline",
            "last_online": "2026-04-11 09:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813613/",
            "reporter": "abuse_ch"
        }
    ],
    "3813614": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.i686",
            "url_status": "offline",
            "last_online": "2026-04-11 16:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813614/",
            "reporter": "abuse_ch"
        }
    ],
    "3813615": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-11 16:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813615/",
            "reporter": "abuse_ch"
        }
    ],
    "3813616": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://94.156.152.233/bins/nspc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813616/",
            "reporter": "abuse_ch"
        }
    ],
    "3813617": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.arm4",
            "url_status": "offline",
            "last_online": "2026-04-11 10:04:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813617/",
            "reporter": "abuse_ch"
        }
    ],
    "3813618": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.mips",
            "url_status": "offline",
            "last_online": "2026-04-11 16:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813618/",
            "reporter": "abuse_ch"
        }
    ],
    "3813619": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.spc",
            "url_status": "offline",
            "last_online": "2026-04-11 10:49:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813619/",
            "reporter": "abuse_ch"
        }
    ],
    "3813620": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813620/",
            "reporter": "abuse_ch"
        }
    ],
    "3813621": [
        {
            "dateadded": "2026-04-07 11:20:23 UTC",
            "url": "http://103.130.214.71:1212/zyre.arm6",
            "url_status": "offline",
            "last_online": "2026-04-11 11:10:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813621/",
            "reporter": "abuse_ch"
        }
    ],
    "3813610": [
        {
            "dateadded": "2026-04-07 11:20:22 UTC",
            "url": "http://103.130.214.71:1212/zyre.sh4",
            "url_status": "offline",
            "last_online": "2026-04-11 10:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813610/",
            "reporter": "abuse_ch"
        }
    ],
    "3813608": [
        {
            "dateadded": "2026-04-07 11:20:21 UTC",
            "url": "http://103.130.214.71:1212/zyre.dbg",
            "url_status": "offline",
            "last_online": "2026-04-11 10:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813608/",
            "reporter": "abuse_ch"
        }
    ],
    "3813609": [
        {
            "dateadded": "2026-04-07 11:20:21 UTC",
            "url": "http://103.130.214.71:1212/zyre.apk",
            "url_status": "offline",
            "last_online": "2026-04-11 16:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813609/",
            "reporter": "abuse_ch"
        }
    ],
    "3813607": [
        {
            "dateadded": "2026-04-07 11:19:23 UTC",
            "url": "http://222.138.149.64:53462/i",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813607/",
            "reporter": "geenensp"
        }
    ],
    "3813606": [
        {
            "dateadded": "2026-04-07 11:17:13 UTC",
            "url": "https://sum-svc.ashstatistic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813606/",
            "reporter": "anonymous"
        }
    ],
    "3813605": [
        {
            "dateadded": "2026-04-07 11:17:08 UTC",
            "url": "http://27.215.176.29:45407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:45:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813605/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813604": [
        {
            "dateadded": "2026-04-07 11:15:14 UTC",
            "url": "https://plot-node.ashstatistic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813604/",
            "reporter": "anonymous"
        }
    ],
    "3813603": [
        {
            "dateadded": "2026-04-07 11:14:14 UTC",
            "url": "http://81.228.61.65:44334/i",
            "url_status": "offline",
            "last_online": "2026-04-21 16:52:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813603/",
            "reporter": "geenensp"
        }
    ],
    "3813602": [
        {
            "dateadded": "2026-04-07 11:13:21 UTC",
            "url": "http://45.95.147.178/k.php",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:31 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813602/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813601": [
        {
            "dateadded": "2026-04-07 11:13:20 UTC",
            "url": "http://176.65.139.42/who.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "miner",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813601/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813600": [
        {
            "dateadded": "2026-04-07 11:08:17 UTC",
            "url": "http://42.228.44.149:53251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:57:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813600/",
            "reporter": "geenensp"
        }
    ],
    "3813599": [
        {
            "dateadded": "2026-04-07 11:05:14 UTC",
            "url": "https://trend-log.ashstatistic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813599/",
            "reporter": "anonymous"
        }
    ],
    "3813598": [
        {
            "dateadded": "2026-04-07 11:02:14 UTC",
            "url": "https://data-view.ashstatistic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813598/",
            "reporter": "anonymous"
        }
    ],
    "3813597": [
        {
            "dateadded": "2026-04-07 10:57:12 UTC",
            "url": "https://chart-api.ashstatistic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813597/",
            "reporter": "anonymous"
        }
    ],
    "3813596": [
        {
            "dateadded": "2026-04-07 10:55:20 UTC",
            "url": "http://160.119.69.4/x",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:46 UTC",
            "threat": "malware_download",
            "tags": [
                "160-119-69-4",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813596/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813595": [
        {
            "dateadded": "2026-04-07 10:53:15 UTC",
            "url": "http://59.180.160.57:58012/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813595/",
            "reporter": "geenensp"
        }
    ],
    "3813594": [
        {
            "dateadded": "2026-04-07 10:51:23 UTC",
            "url": "http://222.138.149.64:53462/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813594/",
            "reporter": "geenensp"
        }
    ],
    "3813593": [
        {
            "dateadded": "2026-04-07 10:51:11 UTC",
            "url": "https://dream-hub.blindersyawn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813593/",
            "reporter": "anonymous"
        }
    ],
    "3813592": [
        {
            "dateadded": "2026-04-07 10:46:25 UTC",
            "url": "http://123.13.32.65:38308/i",
            "url_status": "offline",
            "last_online": "2026-04-07 15:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813592/",
            "reporter": "geenensp"
        }
    ],
    "3813591": [
        {
            "dateadded": "2026-04-07 10:45:09 UTC",
            "url": "https://sleep-node.blindersyawn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813591/",
            "reporter": "anonymous"
        }
    ],
    "3813590": [
        {
            "dateadded": "2026-04-07 10:40:16 UTC",
            "url": "https://silent-svc.blindersyawn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813590/",
            "reporter": "anonymous"
        }
    ],
    "3813589": [
        {
            "dateadded": "2026-04-07 10:34:11 UTC",
            "url": "https://rest-api.blindersyawn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813589/",
            "reporter": "anonymous"
        }
    ],
    "3813588": [
        {
            "dateadded": "2026-04-07 10:29:13 UTC",
            "url": "https://dark-mode.blindersyawn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813588/",
            "reporter": "anonymous"
        }
    ],
    "3813587": [
        {
            "dateadded": "2026-04-07 10:25:20 UTC",
            "url": "http://182.127.177.8:53520/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:57:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813587/",
            "reporter": "geenensp"
        }
    ],
    "3813586": [
        {
            "dateadded": "2026-04-07 10:23:09 UTC",
            "url": "https://eye-cover.blindersyawn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813586/",
            "reporter": "anonymous"
        }
    ],
    "3813583": [
        {
            "dateadded": "2026-04-07 10:22:16 UTC",
            "url": "https://magina.online/MSI_111454.png",
            "url_status": "offline",
            "last_online": "2026-04-16 05:07:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813583/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813584": [
        {
            "dateadded": "2026-04-07 10:22:16 UTC",
            "url": "https://estirarsobrelivro.online/MSI_092557.png",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813584/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813585": [
        {
            "dateadded": "2026-04-07 10:22:16 UTC",
            "url": "https://estirarsobrelivro.online/MSI_093921.png",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813585/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813579": [
        {
            "dateadded": "2026-04-07 10:22:15 UTC",
            "url": "https://voltamos.site/MSI_102519.png",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813579/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813580": [
        {
            "dateadded": "2026-04-07 10:22:15 UTC",
            "url": "https://voltamos.site/MSI_084028.png",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813580/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813581": [
        {
            "dateadded": "2026-04-07 10:22:15 UTC",
            "url": "https://vagner.site/MSI_095306.png",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813581/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813582": [
        {
            "dateadded": "2026-04-07 10:22:15 UTC",
            "url": "https://voltamos.site/MSI_105610.png",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813582/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813576": [
        {
            "dateadded": "2026-04-07 10:22:12 UTC",
            "url": "https://marchcap28.blogspot.com/phukli.docx",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813576/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813577": [
        {
            "dateadded": "2026-04-07 10:22:12 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_067d5a752c594e7184b856b08dc34069.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813577/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813578": [
        {
            "dateadded": "2026-04-07 10:22:12 UTC",
            "url": "https://www.blogger.com/feeds/4350113143311731351/posts/default?alt=atom",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813578/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813573": [
        {
            "dateadded": "2026-04-07 10:22:11 UTC",
            "url": "https://marchcap28.blogspot.com/atom.xml?m=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813573/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813574": [
        {
            "dateadded": "2026-04-07 10:22:11 UTC",
            "url": "http://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_40213e6629914369be3e0bff1ca5bc6d.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813574/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813575": [
        {
            "dateadded": "2026-04-07 10:22:11 UTC",
            "url": "https://17marchdoomerg.blogspot.com/lipawaka.otd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813575/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813569": [
        {
            "dateadded": "2026-04-07 10:22:10 UTC",
            "url": "https://gadomamada.com/MSI_111308.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813569/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813570": [
        {
            "dateadded": "2026-04-07 10:22:10 UTC",
            "url": "https://gadomamada.com/MSI_220302.png",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813570/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813571": [
        {
            "dateadded": "2026-04-07 10:22:10 UTC",
            "url": "http://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_067d5a752c594e7184b856b08dc34069.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813571/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813572": [
        {
            "dateadded": "2026-04-07 10:22:10 UTC",
            "url": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_40213e6629914369be3e0bff1ca5bc6d.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813572/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813567": [
        {
            "dateadded": "2026-04-07 10:22:07 UTC",
            "url": "http://144.225.93.12/ohshit.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813567/",
            "reporter": "uwucutecatgirl"
        }
    ],
    "3813568": [
        {
            "dateadded": "2026-04-07 10:22:07 UTC",
            "url": "http://163.61.39.140/bins/jew.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 12:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813568/",
            "reporter": "uwucutecatgirl"
        }
    ],
    "3813566": [
        {
            "dateadded": "2026-04-07 10:22:06 UTC",
            "url": "https://marchcap28.blogspot.com/atom.xml",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813566/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813563": [
        {
            "dateadded": "2026-04-07 10:22:05 UTC",
            "url": "https://documents.lat/MSI_110303.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813563/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813564": [
        {
            "dateadded": "2026-04-07 10:22:05 UTC",
            "url": "https://estudarebomai.com/MSI_124340.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813564/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813565": [
        {
            "dateadded": "2026-04-07 10:22:05 UTC",
            "url": "https://marchcap28.blogspot.com/phukli.docx?m=1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813565/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813562": [
        {
            "dateadded": "2026-04-07 10:21:24 UTC",
            "url": "http://182.127.177.8:53520/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:46:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813562/",
            "reporter": "geenensp"
        }
    ],
    "3813561": [
        {
            "dateadded": "2026-04-07 10:17:10 UTC",
            "url": "https://port-gate.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813561/",
            "reporter": "anonymous"
        }
    ],
    "3813560": [
        {
            "dateadded": "2026-04-07 10:16:16 UTC",
            "url": "http://154.53.37.227/windyloveyou/debug",
            "url_status": "offline",
            "last_online": "2026-04-07 16:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "154-53-37-227",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813560/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813559": [
        {
            "dateadded": "2026-04-07 10:13:13 UTC",
            "url": "https://mass-logic.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813559/",
            "reporter": "anonymous"
        }
    ],
    "3813558": [
        {
            "dateadded": "2026-04-07 10:12:23 UTC",
            "url": "http://61.163.158.60:47311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:26:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813558/",
            "reporter": "geenensp"
        }
    ],
    "3813557": [
        {
            "dateadded": "2026-04-07 10:07:13 UTC",
            "url": "https://dock-svc.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813557/",
            "reporter": "anonymous"
        }
    ],
    "3813556": [
        {
            "dateadded": "2026-04-07 10:05:24 UTC",
            "url": "http://14.202.8.1:39683/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813556/",
            "reporter": "geenensp"
        }
    ],
    "3813555": [
        {
            "dateadded": "2026-04-07 10:02:07 UTC",
            "url": "http://171.36.117.116:53826/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:49:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813555/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813554": [
        {
            "dateadded": "2026-04-07 10:01:18 UTC",
            "url": "http://125.44.59.95:34660/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:53:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813554/",
            "reporter": "geenensp"
        }
    ],
    "3813553": [
        {
            "dateadded": "2026-04-07 10:00:13 UTC",
            "url": "https://cargo-hub.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 10:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813553/",
            "reporter": "anonymous"
        }
    ],
    "3813552": [
        {
            "dateadded": "2026-04-07 09:58:25 UTC",
            "url": "http://27.37.88.66:39246/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813552/",
            "reporter": "geenensp"
        }
    ],
    "3813551": [
        {
            "dateadded": "2026-04-07 09:58:15 UTC",
            "url": "http://125.44.59.95:34660/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 23:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813551/",
            "reporter": "geenensp"
        }
    ],
    "3813550": [
        {
            "dateadded": "2026-04-07 09:55:15 UTC",
            "url": "https://truck-line.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813550/",
            "reporter": "anonymous"
        }
    ],
    "3813549": [
        {
            "dateadded": "2026-04-07 09:53:19 UTC",
            "url": "http://182.119.226.234:39033/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:01:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813549/",
            "reporter": "geenensp"
        }
    ],
    "3813548": [
        {
            "dateadded": "2026-04-07 09:52:07 UTC",
            "url": "http://125.42.33.117:40367/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:03:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813548/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813547": [
        {
            "dateadded": "2026-04-07 09:49:15 UTC",
            "url": "https://heavy-weight.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813547/",
            "reporter": "anonymous"
        }
    ],
    "3813546": [
        {
            "dateadded": "2026-04-07 09:45:31 UTC",
            "url": "http://93.123.109.117/rebirth.arm6",
            "url_status": "offline",
            "last_online": "2026-04-08 04:50:40 UTC",
            "threat": "malware_download",
            "tags": [
                "93-123-109-117",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813546/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813542": [
        {
            "dateadded": "2026-04-07 09:45:28 UTC",
            "url": "http://93.123.109.117/rebirth.arm7",
            "url_status": "offline",
            "last_online": "2026-04-08 04:49:01 UTC",
            "threat": "malware_download",
            "tags": [
                "93-123-109-117",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813542/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813543": [
        {
            "dateadded": "2026-04-07 09:45:28 UTC",
            "url": "http://93.123.109.117/rebirth.mips",
            "url_status": "offline",
            "last_online": "2026-04-08 05:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "93-123-109-117",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813543/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813544": [
        {
            "dateadded": "2026-04-07 09:45:28 UTC",
            "url": "http://93.123.109.117/rebirth.arm",
            "url_status": "offline",
            "last_online": "2026-04-08 05:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "93-123-109-117",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813544/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813545": [
        {
            "dateadded": "2026-04-07 09:45:28 UTC",
            "url": "http://93.123.109.117/rebirth.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-08 04:11:49 UTC",
            "threat": "malware_download",
            "tags": [
                "93-123-109-117",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813545/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813541": [
        {
            "dateadded": "2026-04-07 09:45:11 UTC",
            "url": "http://93.123.109.117/rebirth.arm5",
            "url_status": "offline",
            "last_online": "2026-04-08 04:21:21 UTC",
            "threat": "malware_download",
            "tags": [
                "93-123-109-117",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813541/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813540": [
        {
            "dateadded": "2026-04-07 09:44:12 UTC",
            "url": "https://match-hub.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813540/",
            "reporter": "anonymous"
        }
    ],
    "3813539": [
        {
            "dateadded": "2026-04-07 09:41:26 UTC",
            "url": "http://14.202.8.1:39683/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:08:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813539/",
            "reporter": "geenensp"
        }
    ],
    "3813538": [
        {
            "dateadded": "2026-04-07 09:41:24 UTC",
            "url": "http://176.65.139.52/bins/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 17:09:23 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813538/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813526": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-07 16:22:05 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813526/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813527": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:01 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813527/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813528": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-07 16:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813528/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813529": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 16:09:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813529/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813530": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-07 15:41:55 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813530/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813531": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 16:47:31 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813531/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813532": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-07 16:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813532/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813533": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-07 15:43:26 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813533/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813534": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-07 16:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813534/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813535": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-07 16:18:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813535/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813536": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-07 16:08:53 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813536/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813537": [
        {
            "dateadded": "2026-04-07 09:40:19 UTC",
            "url": "http://176.65.139.52/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-07 15:57:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-52",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813537/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813525": [
        {
            "dateadded": "2026-04-07 09:38:08 UTC",
            "url": "https://top-team.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813525/",
            "reporter": "anonymous"
        }
    ],
    "3813524": [
        {
            "dateadded": "2026-04-07 09:37:18 UTC",
            "url": "http://115.55.195.212:51230/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:45:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813524/",
            "reporter": "geenensp"
        }
    ],
    "3813523": [
        {
            "dateadded": "2026-04-07 09:35:11 UTC",
            "url": "http://182.118.245.149:33591/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:53:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813523/",
            "reporter": "geenensp"
        }
    ],
    "3813522": [
        {
            "dateadded": "2026-04-07 09:32:10 UTC",
            "url": "https://round-svc.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813522/",
            "reporter": "anonymous"
        }
    ],
    "3813521": [
        {
            "dateadded": "2026-04-07 09:32:09 UTC",
            "url": "http://125.42.33.117:40367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 21:58:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813521/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813519": [
        {
            "dateadded": "2026-04-07 09:30:16 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.arc",
            "url_status": "offline",
            "last_online": "2026-04-24 05:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813519/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813520": [
        {
            "dateadded": "2026-04-07 09:30:16 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.i686",
            "url_status": "offline",
            "last_online": "2026-04-24 05:04:04 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813520/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813508": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.spc",
            "url_status": "offline",
            "last_online": "2026-04-24 05:19:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813508/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813509": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.mips",
            "url_status": "offline",
            "last_online": "2026-04-24 05:37:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813509/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813510": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 04:48:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813510/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813511": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 04:56:44 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813511/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813512": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 05:19:41 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813512/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813513": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.ppc",
            "url_status": "offline",
            "last_online": "2026-04-24 09:01:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813513/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813514": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.m68k",
            "url_status": "offline",
            "last_online": "2026-04-24 08:18:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813514/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813515": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.arm",
            "url_status": "offline",
            "last_online": "2026-04-24 06:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813515/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813516": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 05:00:25 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813516/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813517": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 05:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813517/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813518": [
        {
            "dateadded": "2026-04-07 09:30:15 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.sh4",
            "url_status": "offline",
            "last_online": "2026-04-24 05:46:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-114",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813518/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813507": [
        {
            "dateadded": "2026-04-07 09:30:08 UTC",
            "url": "http://176.65.139.114/hiddenbin/Space.x86",
            "url_status": "offline",
            "last_online": "2026-04-24 04:57:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813507/",
            "reporter": "uwucutecatgirl"
        }
    ],
    "3813506": [
        {
            "dateadded": "2026-04-07 09:26:10 UTC",
            "url": "https://game-api.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813506/",
            "reporter": "anonymous"
        }
    ],
    "3813505": [
        {
            "dateadded": "2026-04-07 09:22:08 UTC",
            "url": "http://101.21.1.170:35381/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:43:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813505/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813504": [
        {
            "dateadded": "2026-04-07 09:21:07 UTC",
            "url": "https://count-log.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:49:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813504/",
            "reporter": "anonymous"
        }
    ],
    "3813503": [
        {
            "dateadded": "2026-04-07 09:16:09 UTC",
            "url": "http://175.148.167.185:44286/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813503/",
            "reporter": "geenensp"
        }
    ],
    "3813502": [
        {
            "dateadded": "2026-04-07 09:15:14 UTC",
            "url": "https://score-board.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813502/",
            "reporter": "anonymous"
        }
    ],
    "3813501": [
        {
            "dateadded": "2026-04-07 09:12:10 UTC",
            "url": "http://115.55.195.212:51230/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:59:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813501/",
            "reporter": "geenensp"
        }
    ],
    "3813500": [
        {
            "dateadded": "2026-04-07 09:10:09 UTC",
            "url": "https://main-route.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813500/",
            "reporter": "anonymous"
        }
    ],
    "3813497": [
        {
            "dateadded": "2026-04-07 09:06:19 UTC",
            "url": "http://176.65.139.35/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-17 07:18:03 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813497/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813498": [
        {
            "dateadded": "2026-04-07 09:06:19 UTC",
            "url": "http://176.65.139.35/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-17 07:23:28 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813498/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813499": [
        {
            "dateadded": "2026-04-07 09:06:19 UTC",
            "url": "http://176.65.139.35/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-17 07:48:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813499/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813489": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/pppc",
            "url_status": "offline",
            "last_online": "2026-04-17 07:34:35 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813489/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813490": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-17 07:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813490/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813491": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-17 07:11:32 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813491/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813492": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-17 06:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813492/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813493": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-17 07:50:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813493/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813494": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-17 07:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813494/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813495": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-17 06:17:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813495/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813496": [
        {
            "dateadded": "2026-04-07 09:06:18 UTC",
            "url": "http://176.65.139.35/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-17 07:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-35",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813496/",
            "reporter": "BlinkzSec"
        }
    ],
    "3813488": [
        {
            "dateadded": "2026-04-07 09:04:11 UTC",
            "url": "https://branch-node.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 09:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813488/",
            "reporter": "anonymous"
        }
    ],
    "3813487": [
        {
            "dateadded": "2026-04-07 09:03:09 UTC",
            "url": "http://123.145.125.35:48723/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:42:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813487/",
            "reporter": "geenensp"
        }
    ],
    "3813486": [
        {
            "dateadded": "2026-04-07 09:02:07 UTC",
            "url": "http://101.21.1.170:35381/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:01:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813486/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813485": [
        {
            "dateadded": "2026-04-07 08:59:06 UTC",
            "url": "https://send-relay.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813485/",
            "reporter": "anonymous"
        }
    ],
    "3813484": [
        {
            "dateadded": "2026-04-07 08:55:11 UTC",
            "url": "http://182.119.226.234:39033/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813484/",
            "reporter": "geenensp"
        }
    ],
    "3813483": [
        {
            "dateadded": "2026-04-07 08:53:08 UTC",
            "url": "https://pack-svc.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813483/",
            "reporter": "anonymous"
        }
    ],
    "3813482": [
        {
            "dateadded": "2026-04-07 08:48:07 UTC",
            "url": "https://load-sync.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813482/",
            "reporter": "anonymous"
        }
    ],
    "3813481": [
        {
            "dateadded": "2026-04-07 08:47:18 UTC",
            "url": "http://42.235.54.53:54343/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813481/",
            "reporter": "geenensp"
        }
    ],
    "3813480": [
        {
            "dateadded": "2026-04-07 08:42:08 UTC",
            "url": "https://share-point.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813480/",
            "reporter": "anonymous"
        }
    ],
    "3813479": [
        {
            "dateadded": "2026-04-07 08:42:07 UTC",
            "url": "http://182.116.55.17:58132/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813479/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813478": [
        {
            "dateadded": "2026-04-07 08:37:09 UTC",
            "url": "https://broad-cast.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813478/",
            "reporter": "anonymous"
        }
    ],
    "3813477": [
        {
            "dateadded": "2026-04-07 08:32:07 UTC",
            "url": "https://alpha-hub.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813477/",
            "reporter": "anonymous"
        }
    ],
    "3813476": [
        {
            "dateadded": "2026-04-07 08:27:18 UTC",
            "url": "http://115.56.64.89:44451/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813476/",
            "reporter": "geenensp"
        }
    ],
    "3813475": [
        {
            "dateadded": "2026-04-07 08:25:20 UTC",
            "url": "http://42.235.54.53:54343/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:44:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813475/",
            "reporter": "geenensp"
        }
    ],
    "3813474": [
        {
            "dateadded": "2026-04-07 08:25:14 UTC",
            "url": "https://end-point.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813474/",
            "reporter": "anonymous"
        }
    ],
    "3813473": [
        {
            "dateadded": "2026-04-07 08:19:10 UTC",
            "url": "https://mega-vault.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813473/",
            "reporter": "anonymous"
        }
    ],
    "3813472": [
        {
            "dateadded": "2026-04-07 08:14:08 UTC",
            "url": "https://outer-reach.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813472/",
            "reporter": "anonymous"
        }
    ],
    "3813471": [
        {
            "dateadded": "2026-04-07 08:12:08 UTC",
            "url": "http://182.116.55.17:58132/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:50:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813471/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813470": [
        {
            "dateadded": "2026-04-07 08:12:07 UTC",
            "url": "http://125.41.168.58:49795/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813470/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813469": [
        {
            "dateadded": "2026-04-07 08:09:08 UTC",
            "url": "https://limit-less.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813469/",
            "reporter": "anonymous"
        }
    ],
    "3813468": [
        {
            "dateadded": "2026-04-07 08:04:19 UTC",
            "url": "http://182.117.70.189:51804/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813468/",
            "reporter": "geenensp"
        }
    ],
    "3813467": [
        {
            "dateadded": "2026-04-07 08:03:06 UTC",
            "url": "https://prime-logic.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 08:03:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813467/",
            "reporter": "anonymous"
        }
    ],
    "3813466": [
        {
            "dateadded": "2026-04-07 07:57:20 UTC",
            "url": "http://123.13.32.65:38308/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 15:58:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813466/",
            "reporter": "geenensp"
        }
    ],
    "3813465": [
        {
            "dateadded": "2026-04-07 07:57:09 UTC",
            "url": "https://hero-svc.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813465/",
            "reporter": "anonymous"
        }
    ],
    "3813464": [
        {
            "dateadded": "2026-04-07 07:52:08 UTC",
            "url": "https://star-track.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813464/",
            "reporter": "anonymous"
        }
    ],
    "3813463": [
        {
            "dateadded": "2026-04-07 07:52:07 UTC",
            "url": "http://222.139.44.180:40976/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:39:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813463/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813462": [
        {
            "dateadded": "2026-04-07 07:46:18 UTC",
            "url": "http://113.239.72.79:49373/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:19:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813462/",
            "reporter": "geenensp"
        }
    ],
    "3813461": [
        {
            "dateadded": "2026-04-07 07:45:09 UTC",
            "url": "https://bright-node.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813461/",
            "reporter": "anonymous"
        }
    ],
    "3813460": [
        {
            "dateadded": "2026-04-07 07:44:17 UTC",
            "url": "http://42.228.221.19:40285/i",
            "url_status": "offline",
            "last_online": "2026-04-08 03:57:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813460/",
            "reporter": "geenensp"
        }
    ],
    "3813459": [
        {
            "dateadded": "2026-04-07 07:43:07 UTC",
            "url": "http://219.154.37.39:36529/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:06:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813459/",
            "reporter": "geenensp"
        }
    ],
    "3813458": [
        {
            "dateadded": "2026-04-07 07:41:16 UTC",
            "url": "http://112.229.166.70:44836/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813458/",
            "reporter": "geenensp"
        }
    ],
    "3813457": [
        {
            "dateadded": "2026-04-07 07:41:10 UTC",
            "url": "https://fame-api.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813457/",
            "reporter": "anonymous"
        }
    ],
    "3813456": [
        {
            "dateadded": "2026-04-07 07:34:07 UTC",
            "url": "https://young-style.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813456/",
            "reporter": "anonymous"
        }
    ],
    "3813455": [
        {
            "dateadded": "2026-04-07 07:32:08 UTC",
            "url": "http://222.140.135.154:49049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 07:32:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813455/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813454": [
        {
            "dateadded": "2026-04-07 07:30:21 UTC",
            "url": "http://120.28.119.54:35214/i",
            "url_status": "offline",
            "last_online": "2026-04-22 16:50:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813454/",
            "reporter": "geenensp"
        }
    ],
    "3813453": [
        {
            "dateadded": "2026-04-07 07:29:09 UTC",
            "url": "https://core-point.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:29:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813453/",
            "reporter": "anonymous"
        }
    ],
    "3813452": [
        {
            "dateadded": "2026-04-07 07:27:21 UTC",
            "url": "http://60.23.235.112:47883/i",
            "url_status": "offline",
            "last_online": "2026-04-07 07:27:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813452/",
            "reporter": "geenensp"
        }
    ],
    "3813451": [
        {
            "dateadded": "2026-04-07 07:27:19 UTC",
            "url": "http://119.116.131.182:41876/i",
            "url_status": "offline",
            "last_online": "2026-04-21 10:45:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813451/",
            "reporter": "geenensp"
        }
    ],
    "3813450": [
        {
            "dateadded": "2026-04-07 07:26:21 UTC",
            "url": "http://182.117.70.189:51804/i",
            "url_status": "offline",
            "last_online": "2026-04-07 15:52:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813450/",
            "reporter": "geenensp"
        }
    ],
    "3813449": [
        {
            "dateadded": "2026-04-07 07:26:20 UTC",
            "url": "http://222.138.214.238:46721/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813449/",
            "reporter": "geenensp"
        }
    ],
    "3813448": [
        {
            "dateadded": "2026-04-07 07:24:10 UTC",
            "url": "https://water-log.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813448/",
            "reporter": "anonymous"
        }
    ],
    "3813447": [
        {
            "dateadded": "2026-04-07 07:22:11 UTC",
            "url": "http://125.41.4.53:58778/i",
            "url_status": "offline",
            "last_online": "2026-04-09 17:01:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813447/",
            "reporter": "geenensp"
        }
    ],
    "3813446": [
        {
            "dateadded": "2026-04-07 07:21:09 UTC",
            "url": "http://113.239.72.79:49373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 17:10:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813446/",
            "reporter": "geenensp"
        }
    ],
    "3813445": [
        {
            "dateadded": "2026-04-07 07:19:20 UTC",
            "url": "http://219.154.37.39:36529/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 15:52:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813445/",
            "reporter": "geenensp"
        }
    ],
    "3813444": [
        {
            "dateadded": "2026-04-07 07:17:09 UTC",
            "url": "https://pool-access.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813444/",
            "reporter": "anonymous"
        }
    ],
    "3813443": [
        {
            "dateadded": "2026-04-07 07:16:19 UTC",
            "url": "http://123.5.178.48:43484/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813443/",
            "reporter": "geenensp"
        }
    ],
    "3813442": [
        {
            "dateadded": "2026-04-07 07:15:20 UTC",
            "url": "http://115.54.105.175:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:05:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813442/",
            "reporter": "geenensp"
        }
    ],
    "3813441": [
        {
            "dateadded": "2026-04-07 07:14:05 UTC",
            "url": "http://85.239.147.6/files/7655527200/yy6JfAz.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813441/",
            "reporter": "Bitsight"
        }
    ],
    "3813440": [
        {
            "dateadded": "2026-04-07 07:12:09 UTC",
            "url": "https://jump-gate.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813440/",
            "reporter": "anonymous"
        }
    ],
    "3813439": [
        {
            "dateadded": "2026-04-07 07:10:40 UTC",
            "url": "http://112.229.166.70:44836/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 21:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813439/",
            "reporter": "geenensp"
        }
    ],
    "3813438": [
        {
            "dateadded": "2026-04-07 07:10:21 UTC",
            "url": "http://42.228.221.19:40285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:18:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813438/",
            "reporter": "geenensp"
        }
    ],
    "3813437": [
        {
            "dateadded": "2026-04-07 07:07:08 UTC",
            "url": "https://deep-dive.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813437/",
            "reporter": "anonymous"
        }
    ],
    "3813436": [
        {
            "dateadded": "2026-04-07 07:03:16 UTC",
            "url": "http://222.138.214.238:46721/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 23:11:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813436/",
            "reporter": "geenensp"
        }
    ],
    "3813435": [
        {
            "dateadded": "2026-04-07 07:01:10 UTC",
            "url": "https://small-step.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 07:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813435/",
            "reporter": "anonymous"
        }
    ],
    "3813434": [
        {
            "dateadded": "2026-04-07 06:58:17 UTC",
            "url": "http://119.116.131.182:41876/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 10:40:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813434/",
            "reporter": "geenensp"
        }
    ],
    "3813433": [
        {
            "dateadded": "2026-04-07 06:57:15 UTC",
            "url": "http://66.212.185.81:37815/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813433/",
            "reporter": "geenensp"
        }
    ],
    "3813432": [
        {
            "dateadded": "2026-04-07 06:55:09 UTC",
            "url": "https://decision-svc.ratiocore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813432/",
            "reporter": "anonymous"
        }
    ],
    "3813431": [
        {
            "dateadded": "2026-04-07 06:53:19 UTC",
            "url": "http://123.5.178.48:43484/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 12:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813431/",
            "reporter": "geenensp"
        }
    ],
    "3813430": [
        {
            "dateadded": "2026-04-07 06:49:07 UTC",
            "url": "https://calc-logic.ratiocore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:49:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813430/",
            "reporter": "anonymous"
        }
    ],
    "3813429": [
        {
            "dateadded": "2026-04-07 06:45:10 UTC",
            "url": "http://66.212.185.81:37815/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 21:01:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813429/",
            "reporter": "geenensp"
        }
    ],
    "3813428": [
        {
            "dateadded": "2026-04-07 06:45:08 UTC",
            "url": "https://cloth-net.technofabric.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813428/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813414": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://cgnnhw.catalystventure.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813414/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813415": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://hash-store.cryptolayer.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813415/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813416": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://bit-stream.logicstream.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813416/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813417": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://code-gate.logicstream.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813417/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813418": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://main-frame.logicstream.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813418/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813419": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://weave-sync.technofabric.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813419/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813420": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://c0lo-scope.vectorharbinger.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813420/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813421": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://trivenen2.catalystventure.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813421/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813422": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://packet-flow.logicstream.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813422/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813423": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://rule-engine.logicstream.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813423/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813424": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://step-check.logicstream.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813424/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813425": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://ultra-r0ug.vectorharbinger.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813425/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813426": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://anon-auth.cryptolayer.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813426/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813427": [
        {
            "dateadded": "2026-04-07 06:45:06 UTC",
            "url": "https://secure-key.cryptolayer.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813427/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813413": [
        {
            "dateadded": "2026-04-07 06:44:20 UTC",
            "url": "http://fdsafa.best/deploy_mirai.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813413/",
            "reporter": "adliwahid"
        }
    ],
    "3813412": [
        {
            "dateadded": "2026-04-07 06:44:13 UTC",
            "url": "http://onlinetenderconfirmation.vip:8080/file/RateConfirmation.exe",
            "url_status": "offline",
            "last_online": "2026-04-09 04:16:29 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813412/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813409": [
        {
            "dateadded": "2026-04-07 06:44:12 UTC",
            "url": "https://velflux0or.tockentrue.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813409/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813410": [
        {
            "dateadded": "2026-04-07 06:44:12 UTC",
            "url": "http://onlinetenderconfirmation.vip/file/RateConfirmation.exe",
            "url_status": "offline",
            "last_online": "2026-04-09 10:01:05 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813410/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813411": [
        {
            "dateadded": "2026-04-07 06:44:12 UTC",
            "url": "https://optic5-dock.paragonbloomera.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813411/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813408": [
        {
            "dateadded": "2026-04-07 06:44:11 UTC",
            "url": "https://cfp1laq8.productter.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813408/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813398": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.m68k",
            "url_status": "offline",
            "last_online": "2026-04-07 17:06:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813398/",
            "reporter": "adliwahid"
        }
    ],
    "3813399": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.mips",
            "url_status": "offline",
            "last_online": "2026-04-07 17:15:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813399/",
            "reporter": "adliwahid"
        }
    ],
    "3813400": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 15:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813400/",
            "reporter": "adliwahid"
        }
    ],
    "3813401": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.i686",
            "url_status": "offline",
            "last_online": "2026-04-07 17:10:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813401/",
            "reporter": "adliwahid"
        }
    ],
    "3813402": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.arc",
            "url_status": "offline",
            "last_online": "2026-04-07 16:48:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813402/",
            "reporter": "adliwahid"
        }
    ],
    "3813403": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "https://dockswitch.matchexact.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813403/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813404": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "https://spirit.ashgrove.icu/pcicapi.bin",
            "url_status": "offline",
            "last_online": "2026-04-07 06:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813404/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813405": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 15:41:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813405/",
            "reporter": "adliwahid"
        }
    ],
    "3813406": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "https://clear-head.ratiocore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813406/",
            "reporter": "anonymous"
        }
    ],
    "3813407": [
        {
            "dateadded": "2026-04-07 06:44:10 UTC",
            "url": "https://arkline9ar.quantumharbinger.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813407/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813389": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "https://2woz.quantumharbinger.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813389/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813390": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.sh4",
            "url_status": "offline",
            "last_online": "2026-04-07 16:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813390/",
            "reporter": "adliwahid"
        }
    ],
    "3813391": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 15:57:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813391/",
            "reporter": "adliwahid"
        }
    ],
    "3813392": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.ppc",
            "url_status": "offline",
            "last_online": "2026-04-07 15:49:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813392/",
            "reporter": "adliwahid"
        }
    ],
    "3813393": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.x86",
            "url_status": "offline",
            "last_online": "2026-04-07 16:19:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813393/",
            "reporter": "adliwahid"
        }
    ],
    "3813394": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "https://duskgrand.paragonbloomera.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813394/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813395": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "https://daemondeli.chromeflack.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813395/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813396": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.arm",
            "url_status": "offline",
            "last_online": "2026-04-07 17:17:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813396/",
            "reporter": "adliwahid"
        }
    ],
    "3813397": [
        {
            "dateadded": "2026-04-07 06:44:09 UTC",
            "url": "https://pol43-plate.nexuspatronage.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813397/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813387": [
        {
            "dateadded": "2026-04-07 06:44:08 UTC",
            "url": "http://154.53.37.227/1.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 15:43:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813387/",
            "reporter": "adliwahid"
        }
    ],
    "3813388": [
        {
            "dateadded": "2026-04-07 06:44:08 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 15:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813388/",
            "reporter": "adliwahid"
        }
    ],
    "3813384": [
        {
            "dateadded": "2026-04-07 06:44:07 UTC",
            "url": "https://sun-line.cloudfloot.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813384/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813385": [
        {
            "dateadded": "2026-04-07 06:44:07 UTC",
            "url": "https://oi52ewc.dockhype.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813385/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813386": [
        {
            "dateadded": "2026-04-07 06:44:07 UTC",
            "url": "http://193.111.117.17:8080/file/RateConfirmation.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813386/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813382": [
        {
            "dateadded": "2026-04-07 06:44:06 UTC",
            "url": "https://c0upon1-sheet.latticepatronage.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813382/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813383": [
        {
            "dateadded": "2026-04-07 06:44:06 UTC",
            "url": "https://dyn-coreal.hostyard.in.net/verification.google/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813383/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3813380": [
        {
            "dateadded": "2026-04-07 06:43:20 UTC",
            "url": "http://fdsafa.best/bots/mirai.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813380/",
            "reporter": "adliwahid"
        }
    ],
    "3813381": [
        {
            "dateadded": "2026-04-07 06:43:20 UTC",
            "url": "http://fdsafa.best/bots/mirai.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813381/",
            "reporter": "adliwahid"
        }
    ],
    "3813378": [
        {
            "dateadded": "2026-04-07 06:43:07 UTC",
            "url": "https://tree.immortalday.life/DivineX.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813378/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3813376": [
        {
            "dateadded": "2026-04-07 06:43:06 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 17:25:43 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813376/",
            "reporter": "adliwahid"
        }
    ],
    "3813377": [
        {
            "dateadded": "2026-04-07 06:43:06 UTC",
            "url": "http://154.53.37.227/windyloveyou/windy.spc",
            "url_status": "offline",
            "last_online": "2026-04-07 17:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813377/",
            "reporter": "adliwahid"
        }
    ],
    "3813375": [
        {
            "dateadded": "2026-04-07 06:43:05 UTC",
            "url": "http://89.190.156.14/mao_http.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 05:40:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813375/",
            "reporter": "geenensp"
        }
    ],
    "3813374": [
        {
            "dateadded": "2026-04-07 06:38:08 UTC",
            "url": "https://think-tank.ratiocore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813374/",
            "reporter": "anonymous"
        }
    ],
    "3813372": [
        {
            "dateadded": "2026-04-07 06:32:07 UTC",
            "url": "https://smart-node.ratiocore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813372/",
            "reporter": "anonymous"
        }
    ],
    "3813373": [
        {
            "dateadded": "2026-04-07 06:32:07 UTC",
            "url": "http://39.74.83.183:60630/i",
            "url_status": "offline",
            "last_online": "2026-04-07 06:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813373/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813371": [
        {
            "dateadded": "2026-04-07 06:27:16 UTC",
            "url": "http://219.156.59.5:52609/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:33:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813371/",
            "reporter": "geenensp"
        }
    ],
    "3813370": [
        {
            "dateadded": "2026-04-07 06:27:10 UTC",
            "url": "https://ratio-point.ratiocore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813370/",
            "reporter": "anonymous"
        }
    ],
    "3813369": [
        {
            "dateadded": "2026-04-07 06:27:08 UTC",
            "url": "http://125.41.4.53:58778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 16:06:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813369/",
            "reporter": "geenensp"
        }
    ],
    "3813368": [
        {
            "dateadded": "2026-04-07 06:22:15 UTC",
            "url": "http://175.165.82.163:57823/i",
            "url_status": "offline",
            "last_online": "2026-04-07 06:22:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813368/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813367": [
        {
            "dateadded": "2026-04-07 06:22:10 UTC",
            "url": "https://trace-result.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813367/",
            "reporter": "anonymous"
        }
    ],
    "3813366": [
        {
            "dateadded": "2026-04-07 06:16:10 UTC",
            "url": "https://meta-track.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813366/",
            "reporter": "anonymous"
        }
    ],
    "3813365": [
        {
            "dateadded": "2026-04-07 06:13:07 UTC",
            "url": "http://124.89.121.42:61335/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813365/",
            "reporter": "geenensp"
        }
    ],
    "3813364": [
        {
            "dateadded": "2026-04-07 06:11:10 UTC",
            "url": "https://data-split.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813364/",
            "reporter": "anonymous"
        }
    ],
    "3813363": [
        {
            "dateadded": "2026-04-07 06:07:07 UTC",
            "url": "https://point-scan.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813363/",
            "reporter": "anonymous"
        }
    ],
    "3813362": [
        {
            "dateadded": "2026-04-07 06:04:07 UTC",
            "url": "https://stat-render.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 06:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813362/",
            "reporter": "anonymous"
        }
    ],
    "3813361": [
        {
            "dateadded": "2026-04-07 06:02:21 UTC",
            "url": "http://112.113.129.64:48059/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:51:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813361/",
            "reporter": "adliwahid"
        }
    ],
    "3813360": [
        {
            "dateadded": "2026-04-07 05:59:14 UTC",
            "url": "http://119.166.39.137:51626/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813360/",
            "reporter": "adliwahid"
        }
    ],
    "3813359": [
        {
            "dateadded": "2026-04-07 05:59:10 UTC",
            "url": "http://219.156.59.5:52609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813359/",
            "reporter": "geenensp"
        }
    ],
    "3813358": [
        {
            "dateadded": "2026-04-07 05:59:09 UTC",
            "url": "http://175.165.133.140:52433/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:50:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813358/",
            "reporter": "adliwahid"
        }
    ],
    "3813356": [
        {
            "dateadded": "2026-04-07 05:59:08 UTC",
            "url": "http://112.198.178.17:58199/i",
            "url_status": "offline",
            "last_online": "2026-04-15 23:24:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813356/",
            "reporter": "adliwahid"
        }
    ],
    "3813357": [
        {
            "dateadded": "2026-04-07 05:59:08 UTC",
            "url": "http://175.150.7.48:36353/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:06:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813357/",
            "reporter": "adliwahid"
        }
    ],
    "3813354": [
        {
            "dateadded": "2026-04-07 05:58:11 UTC",
            "url": "http://123.183.196.222:57863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:16:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813354/",
            "reporter": "adliwahid"
        }
    ],
    "3813355": [
        {
            "dateadded": "2026-04-07 05:58:11 UTC",
            "url": "http://123.183.196.222:57863/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:09:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813355/",
            "reporter": "adliwahid"
        }
    ],
    "3813352": [
        {
            "dateadded": "2026-04-07 05:58:09 UTC",
            "url": "http://123.145.125.35:48723/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:28:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813352/",
            "reporter": "adliwahid"
        }
    ],
    "3813353": [
        {
            "dateadded": "2026-04-07 05:58:09 UTC",
            "url": "http://58.54.35.222:38425/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:25:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813353/",
            "reporter": "adliwahid"
        }
    ],
    "3813350": [
        {
            "dateadded": "2026-04-07 05:58:07 UTC",
            "url": "http://42.57.38.224:44762/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:23:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813350/",
            "reporter": "adliwahid"
        }
    ],
    "3813351": [
        {
            "dateadded": "2026-04-07 05:58:07 UTC",
            "url": "http://158.255.83.250:53693/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:14:03 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813351/",
            "reporter": "adliwahid"
        }
    ],
    "3813349": [
        {
            "dateadded": "2026-04-07 05:57:06 UTC",
            "url": "http://115.52.17.193:39122/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813349/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813348": [
        {
            "dateadded": "2026-04-07 05:54:06 UTC",
            "url": "https://break-down.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813348/",
            "reporter": "anonymous"
        }
    ],
    "3813347": [
        {
            "dateadded": "2026-04-07 05:50:20 UTC",
            "url": "http://110.36.27.186:54483/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:48:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813347/",
            "reporter": "geenensp"
        }
    ],
    "3813346": [
        {
            "dateadded": "2026-04-07 05:48:10 UTC",
            "url": "https://perception-svc.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813346/",
            "reporter": "anonymous"
        }
    ],
    "3813345": [
        {
            "dateadded": "2026-04-07 05:47:08 UTC",
            "url": "http://123.12.23.99:34565/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:43:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813345/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813344": [
        {
            "dateadded": "2026-04-07 05:47:07 UTC",
            "url": "http://123.9.119.204:53675/i",
            "url_status": "offline",
            "last_online": "2026-04-08 18:01:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813344/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813343": [
        {
            "dateadded": "2026-04-07 05:46:17 UTC",
            "url": "http://125.43.124.91:38952/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:29:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813343/",
            "reporter": "geenensp"
        }
    ],
    "3813342": [
        {
            "dateadded": "2026-04-07 05:42:08 UTC",
            "url": "https://sense-data.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813342/",
            "reporter": "anonymous"
        }
    ],
    "3813341": [
        {
            "dateadded": "2026-04-07 05:37:11 UTC",
            "url": "https://mind-web.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813341/",
            "reporter": "anonymous"
        }
    ],
    "3813340": [
        {
            "dateadded": "2026-04-07 05:36:13 UTC",
            "url": "http://110.36.77.19:51832/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813340/",
            "reporter": "geenensp"
        }
    ],
    "3813338": [
        {
            "dateadded": "2026-04-07 05:32:07 UTC",
            "url": "http://115.52.17.193:39122/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:48:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813338/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813339": [
        {
            "dateadded": "2026-04-07 05:32:07 UTC",
            "url": "https://neural-link.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813339/",
            "reporter": "anonymous"
        }
    ],
    "3813337": [
        {
            "dateadded": "2026-04-07 05:25:21 UTC",
            "url": "http://110.36.27.186:54483/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 11:08:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813337/",
            "reporter": "geenensp"
        }
    ],
    "3813336": [
        {
            "dateadded": "2026-04-07 05:25:11 UTC",
            "url": "https://thought-api.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813336/",
            "reporter": "anonymous"
        }
    ],
    "3813335": [
        {
            "dateadded": "2026-04-07 05:22:09 UTC",
            "url": "http://125.41.169.0:34795/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 05:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813335/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813334": [
        {
            "dateadded": "2026-04-07 05:19:12 UTC",
            "url": "https://brain-weave.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813334/",
            "reporter": "anonymous"
        }
    ],
    "3813333": [
        {
            "dateadded": "2026-04-07 05:18:07 UTC",
            "url": "http://86.249.132.66:33487/.i",
            "url_status": "offline",
            "last_online": "2026-04-13 07:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813333/",
            "reporter": "geenensp"
        }
    ],
    "3813332": [
        {
            "dateadded": "2026-04-07 05:17:09 UTC",
            "url": "http://27.202.191.53:52275/i",
            "url_status": "offline",
            "last_online": "2026-04-08 21:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813332/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813331": [
        {
            "dateadded": "2026-04-07 05:17:08 UTC",
            "url": "http://123.9.119.204:53675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:49:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813331/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813330": [
        {
            "dateadded": "2026-04-07 05:15:12 UTC",
            "url": "https://line-secure.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813330/",
            "reporter": "anonymous"
        }
    ],
    "3813329": [
        {
            "dateadded": "2026-04-07 05:09:10 UTC",
            "url": "https://archive-hub.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813329/",
            "reporter": "anonymous"
        }
    ],
    "3813328": [
        {
            "dateadded": "2026-04-07 05:08:24 UTC",
            "url": "http://110.37.39.146:45282/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:28:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813328/",
            "reporter": "geenensp"
        }
    ],
    "3813327": [
        {
            "dateadded": "2026-04-07 05:04:13 UTC",
            "url": "https://file-stack.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 05:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813327/",
            "reporter": "anonymous"
        }
    ],
    "3813326": [
        {
            "dateadded": "2026-04-07 04:57:12 UTC",
            "url": "https://rank-index.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813326/",
            "reporter": "anonymous"
        }
    ],
    "3813325": [
        {
            "dateadded": "2026-04-07 04:52:07 UTC",
            "url": "https://step-monitor.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813325/",
            "reporter": "anonymous"
        }
    ],
    "3813324": [
        {
            "dateadded": "2026-04-07 04:51:16 UTC",
            "url": "http://222.140.132.113:51408/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813324/",
            "reporter": "geenensp"
        }
    ],
    "3813323": [
        {
            "dateadded": "2026-04-07 04:49:13 UTC",
            "url": "https://order-logic.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813323/",
            "reporter": "anonymous"
        }
    ],
    "3813322": [
        {
            "dateadded": "2026-04-07 04:45:14 UTC",
            "url": "https://frame-api.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813322/",
            "reporter": "anonymous"
        }
    ],
    "3813321": [
        {
            "dateadded": "2026-04-07 04:39:20 UTC",
            "url": "http://182.116.50.199:40948/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:16:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813321/",
            "reporter": "geenensp"
        }
    ],
    "3813320": [
        {
            "dateadded": "2026-04-07 04:36:23 UTC",
            "url": "http://119.178.190.21:33229/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:36:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813320/",
            "reporter": "geenensp"
        }
    ],
    "3813319": [
        {
            "dateadded": "2026-04-07 04:35:10 UTC",
            "url": "https://space-time.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813319/",
            "reporter": "anonymous"
        }
    ],
    "3813318": [
        {
            "dateadded": "2026-04-07 04:31:14 UTC",
            "url": "http://222.140.132.113:51408/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 23:21:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813318/",
            "reporter": "geenensp"
        }
    ],
    "3813317": [
        {
            "dateadded": "2026-04-07 04:29:13 UTC",
            "url": "https://ideal-node.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813317/",
            "reporter": "anonymous"
        }
    ],
    "3813316": [
        {
            "dateadded": "2026-04-07 04:24:14 UTC",
            "url": "https://map-project.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:24:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813316/",
            "reporter": "anonymous"
        }
    ],
    "3813315": [
        {
            "dateadded": "2026-04-07 04:22:25 UTC",
            "url": "http://182.116.50.199:40948/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813315/",
            "reporter": "geenensp"
        }
    ],
    "3813314": [
        {
            "dateadded": "2026-04-07 04:22:23 UTC",
            "url": "http://222.137.23.43:55488/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:13:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813314/",
            "reporter": "geenensp"
        }
    ],
    "3813313": [
        {
            "dateadded": "2026-04-07 04:18:13 UTC",
            "url": "https://model-check.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813313/",
            "reporter": "anonymous"
        }
    ],
    "3813312": [
        {
            "dateadded": "2026-04-07 04:16:10 UTC",
            "url": "http://119.178.190.21:33229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813312/",
            "reporter": "geenensp"
        }
    ],
    "3813311": [
        {
            "dateadded": "2026-04-07 04:13:12 UTC",
            "url": "https://abstract-io.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813311/",
            "reporter": "anonymous"
        }
    ],
    "3813310": [
        {
            "dateadded": "2026-04-07 04:10:15 UTC",
            "url": "http://182.121.192.150:53096/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:52:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813310/",
            "reporter": "geenensp"
        }
    ],
    "3813309": [
        {
            "dateadded": "2026-04-07 04:06:14 UTC",
            "url": "https://step-wise.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813309/",
            "reporter": "anonymous"
        }
    ],
    "3813308": [
        {
            "dateadded": "2026-04-07 04:01:13 UTC",
            "url": "https://guess-node.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 04:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813308/",
            "reporter": "anonymous"
        }
    ],
    "3813307": [
        {
            "dateadded": "2026-04-07 03:57:12 UTC",
            "url": "https://hint-api.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813307/",
            "reporter": "anonymous"
        }
    ],
    "3813306": [
        {
            "dateadded": "2026-04-07 03:53:30 UTC",
            "url": "http://37.52.254.41:52387/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:53:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813306/",
            "reporter": "geenensp"
        }
    ],
    "3813305": [
        {
            "dateadded": "2026-04-07 03:50:14 UTC",
            "url": "https://logic-vault.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813305/",
            "reporter": "anonymous"
        }
    ],
    "3813304": [
        {
            "dateadded": "2026-04-07 03:45:26 UTC",
            "url": "http://218.28.230.61:44221/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813304/",
            "reporter": "geenensp"
        }
    ],
    "3813303": [
        {
            "dateadded": "2026-04-07 03:44:14 UTC",
            "url": "https://lead-trace.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:44:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813303/",
            "reporter": "anonymous"
        }
    ],
    "3813302": [
        {
            "dateadded": "2026-04-07 03:42:17 UTC",
            "url": "http://125.47.59.216:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813302/",
            "reporter": "geenensp"
        }
    ],
    "3813301": [
        {
            "dateadded": "2026-04-07 03:39:07 UTC",
            "url": "https://infer-unit.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813301/",
            "reporter": "anonymous"
        }
    ],
    "3813300": [
        {
            "dateadded": "2026-04-07 03:35:14 UTC",
            "url": "http://182.126.247.110:55617/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813300/",
            "reporter": "geenensp"
        }
    ],
    "3813299": [
        {
            "dateadded": "2026-04-07 03:33:07 UTC",
            "url": "https://motion-svc.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813299/",
            "reporter": "anonymous"
        }
    ],
    "3813297": [
        {
            "dateadded": "2026-04-07 03:32:12 UTC",
            "url": "http://110.37.119.220:42682/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813297/",
            "reporter": "geenensp"
        }
    ],
    "3813298": [
        {
            "dateadded": "2026-04-07 03:32:12 UTC",
            "url": "http://125.44.213.12:54948/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:47:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813298/",
            "reporter": "geenensp"
        }
    ],
    "3813296": [
        {
            "dateadded": "2026-04-07 03:28:12 UTC",
            "url": "https://shift-point.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813296/",
            "reporter": "anonymous"
        }
    ],
    "3813295": [
        {
            "dateadded": "2026-04-07 03:28:05 UTC",
            "url": "http://85.239.147.6/files/5714214406/aSoMVYa.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813295/",
            "reporter": "Bitsight"
        }
    ],
    "3813294": [
        {
            "dateadded": "2026-04-07 03:24:17 UTC",
            "url": "http://218.28.230.61:44221/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 03:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813294/",
            "reporter": "geenensp"
        }
    ],
    "3813291": [
        {
            "dateadded": "2026-04-07 03:23:19 UTC",
            "url": "http://37.52.254.41:52387/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 03:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813291/",
            "reporter": "geenensp"
        }
    ],
    "3813292": [
        {
            "dateadded": "2026-04-07 03:23:19 UTC",
            "url": "http://110.37.40.215:50270/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:50:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813292/",
            "reporter": "geenensp"
        }
    ],
    "3813293": [
        {
            "dateadded": "2026-04-07 03:23:19 UTC",
            "url": "http://116.139.187.150:53084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:15:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813293/",
            "reporter": "geenensp"
        }
    ],
    "3813290": [
        {
            "dateadded": "2026-04-07 03:23:09 UTC",
            "url": "https://debate-log.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813290/",
            "reporter": "anonymous"
        }
    ],
    "3813289": [
        {
            "dateadded": "2026-04-07 03:22:08 UTC",
            "url": "http://115.57.166.170:57514/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813289/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813288": [
        {
            "dateadded": "2026-04-07 03:17:07 UTC",
            "url": "https://synth-portal.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813288/",
            "reporter": "anonymous"
        }
    ],
    "3813287": [
        {
            "dateadded": "2026-04-07 03:11:07 UTC",
            "url": "https://anti-node.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813287/",
            "reporter": "anonymous"
        }
    ],
    "3813286": [
        {
            "dateadded": "2026-04-07 03:09:16 UTC",
            "url": "http://110.37.119.220:42682/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:33:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813286/",
            "reporter": "geenensp"
        }
    ],
    "3813285": [
        {
            "dateadded": "2026-04-07 03:05:10 UTC",
            "url": "https://thesis-sync.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 03:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813285/",
            "reporter": "anonymous"
        }
    ],
    "3813284": [
        {
            "dateadded": "2026-04-07 02:59:05 UTC",
            "url": "https://law-check.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813284/",
            "reporter": "anonymous"
        }
    ],
    "3813283": [
        {
            "dateadded": "2026-04-07 02:53:07 UTC",
            "url": "https://base-matrix.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813283/",
            "reporter": "anonymous"
        }
    ],
    "3813282": [
        {
            "dateadded": "2026-04-07 02:48:07 UTC",
            "url": "https://fixed-point.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813282/",
            "reporter": "anonymous"
        }
    ],
    "3813281": [
        {
            "dateadded": "2026-04-07 02:43:07 UTC",
            "url": "https://mesh-static.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813281/",
            "reporter": "anonymous"
        }
    ],
    "3813280": [
        {
            "dateadded": "2026-04-07 02:37:09 UTC",
            "url": "https://core-logic.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813280/",
            "reporter": "anonymous"
        }
    ],
    "3813279": [
        {
            "dateadded": "2026-04-07 02:35:11 UTC",
            "url": "http://117.254.96.157:32782/i",
            "url_status": "offline",
            "last_online": "2026-04-07 02:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813279/",
            "reporter": "geenensp"
        }
    ],
    "3813278": [
        {
            "dateadded": "2026-04-07 02:32:16 UTC",
            "url": "http://110.39.226.242:43214/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:20:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813278/",
            "reporter": "geenensp"
        }
    ],
    "3813277": [
        {
            "dateadded": "2026-04-07 02:32:09 UTC",
            "url": "https://rule-set.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813277/",
            "reporter": "anonymous"
        }
    ],
    "3813276": [
        {
            "dateadded": "2026-04-07 02:27:17 UTC",
            "url": "http://27.156.176.175:50260/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:46:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813276/",
            "reporter": "geenensp"
        }
    ],
    "3813275": [
        {
            "dateadded": "2026-04-07 02:26:07 UTC",
            "url": "https://exist-api.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813275/",
            "reporter": "anonymous"
        }
    ],
    "3813274": [
        {
            "dateadded": "2026-04-07 02:23:19 UTC",
            "url": "http://115.48.152.54:37505/i",
            "url_status": "offline",
            "last_online": "2026-04-07 23:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813274/",
            "reporter": "geenensp"
        }
    ],
    "3813273": [
        {
            "dateadded": "2026-04-07 02:22:07 UTC",
            "url": "http://119.114.139.117:60383/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:12:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813273/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813272": [
        {
            "dateadded": "2026-04-07 02:20:10 UTC",
            "url": "https://source-data.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813272/",
            "reporter": "anonymous"
        }
    ],
    "3813271": [
        {
            "dateadded": "2026-04-07 02:15:07 UTC",
            "url": "https://real-time-io.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:15:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813271/",
            "reporter": "anonymous"
        }
    ],
    "3813270": [
        {
            "dateadded": "2026-04-07 02:13:18 UTC",
            "url": "http://115.48.152.54:37505/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813270/",
            "reporter": "geenensp"
        }
    ],
    "3813269": [
        {
            "dateadded": "2026-04-07 02:09:09 UTC",
            "url": "https://being-node.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813269/",
            "reporter": "anonymous"
        }
    ],
    "3813268": [
        {
            "dateadded": "2026-04-07 02:08:08 UTC",
            "url": "http://110.39.226.242:43214/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813268/",
            "reporter": "geenensp"
        }
    ],
    "3813267": [
        {
            "dateadded": "2026-04-07 02:03:09 UTC",
            "url": "https://flow-object.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813267/",
            "reporter": "anonymous"
        }
    ],
    "3813266": [
        {
            "dateadded": "2026-04-07 02:01:20 UTC",
            "url": "http://27.156.176.175:50260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 05:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813266/",
            "reporter": "geenensp"
        }
    ],
    "3813265": [
        {
            "dateadded": "2026-04-07 02:00:10 UTC",
            "url": "https://entity-map.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 02:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813265/",
            "reporter": "anonymous"
        }
    ],
    "3813264": [
        {
            "dateadded": "2026-04-07 01:57:07 UTC",
            "url": "https://study-sync.epistemologycore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813264/",
            "reporter": "anonymous"
        }
    ],
    "3813263": [
        {
            "dateadded": "2026-04-07 01:48:10 UTC",
            "url": "https://mind-vault.epistemologycore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813263/",
            "reporter": "anonymous"
        }
    ],
    "3813262": [
        {
            "dateadded": "2026-04-07 01:47:09 UTC",
            "url": "http://59.42.88.104:56735/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:53:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813262/",
            "reporter": "geenensp"
        }
    ],
    "3813261": [
        {
            "dateadded": "2026-04-07 01:47:08 UTC",
            "url": "http://112.140.191.204:43468/i",
            "url_status": "offline",
            "last_online": "2026-04-07 01:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813261/",
            "reporter": "geenensp"
        }
    ],
    "3813260": [
        {
            "dateadded": "2026-04-07 01:46:18 UTC",
            "url": "http://117.81.38.146:42927/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 12:09:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813260/",
            "reporter": "geenensp"
        }
    ],
    "3813259": [
        {
            "dateadded": "2026-04-07 01:45:22 UTC",
            "url": "http://61.53.84.216:45589/i",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813259/",
            "reporter": "geenensp"
        }
    ],
    "3813258": [
        {
            "dateadded": "2026-04-07 01:45:12 UTC",
            "url": "https://proof-engine.epistemologycore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813258/",
            "reporter": "anonymous"
        }
    ],
    "3813257": [
        {
            "dateadded": "2026-04-07 01:41:08 UTC",
            "url": "http://115.58.143.129:45447/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:09:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813257/",
            "reporter": "geenensp"
        }
    ],
    "3813256": [
        {
            "dateadded": "2026-04-07 01:37:17 UTC",
            "url": "http://110.37.53.25:48657/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:55:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813256/",
            "reporter": "geenensp"
        }
    ],
    "3813255": [
        {
            "dateadded": "2026-04-07 01:37:07 UTC",
            "url": "http://115.55.195.164:34944/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813255/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813254": [
        {
            "dateadded": "2026-04-07 01:36:09 UTC",
            "url": "https://base-theory.epistemologycore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813254/",
            "reporter": "anonymous"
        }
    ],
    "3813253": [
        {
            "dateadded": "2026-04-07 01:30:10 UTC",
            "url": "https://logic-audit.epistemologycore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813253/",
            "reporter": "anonymous"
        }
    ],
    "3813252": [
        {
            "dateadded": "2026-04-07 01:24:10 UTC",
            "url": "https://truth-verify.epistemologycore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813252/",
            "reporter": "anonymous"
        }
    ],
    "3813251": [
        {
            "dateadded": "2026-04-07 01:18:06 UTC",
            "url": "https://gate-svc.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813251/",
            "reporter": "anonymous"
        }
    ],
    "3813250": [
        {
            "dateadded": "2026-04-07 01:15:22 UTC",
            "url": "http://61.53.84.216:45589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813250/",
            "reporter": "geenensp"
        }
    ],
    "3813249": [
        {
            "dateadded": "2026-04-07 01:14:09 UTC",
            "url": "https://local-api.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813249/",
            "reporter": "anonymous"
        }
    ],
    "3813248": [
        {
            "dateadded": "2026-04-07 01:08:07 UTC",
            "url": "https://path-logic.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813248/",
            "reporter": "anonymous"
        }
    ],
    "3813247": [
        {
            "dateadded": "2026-04-07 01:04:20 UTC",
            "url": "http://115.58.143.129:45447/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813247/",
            "reporter": "geenensp"
        }
    ],
    "3813246": [
        {
            "dateadded": "2026-04-07 01:02:11 UTC",
            "url": "https://point-site.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 01:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813246/",
            "reporter": "anonymous"
        }
    ],
    "3813245": [
        {
            "dateadded": "2026-04-07 00:56:09 UTC",
            "url": "https://travel-hub.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813245/",
            "reporter": "anonymous"
        }
    ],
    "3813244": [
        {
            "dateadded": "2026-04-07 00:53:12 UTC",
            "url": "http://182.114.255.4:46851/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813244/",
            "reporter": "geenensp"
        }
    ],
    "3813243": [
        {
            "dateadded": "2026-04-07 00:50:08 UTC",
            "url": "https://map-route.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813243/",
            "reporter": "anonymous"
        }
    ],
    "3813242": [
        {
            "dateadded": "2026-04-07 00:45:08 UTC",
            "url": "https://future-log.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813242/",
            "reporter": "anonymous"
        }
    ],
    "3813241": [
        {
            "dateadded": "2026-04-07 00:42:14 UTC",
            "url": "http://115.57.182.159:39266/i",
            "url_status": "offline",
            "last_online": "2026-04-07 15:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813241/",
            "reporter": "geenensp"
        }
    ],
    "3813240": [
        {
            "dateadded": "2026-04-07 00:40:13 UTC",
            "url": "https://low-io.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813240/",
            "reporter": "anonymous"
        }
    ],
    "3813239": [
        {
            "dateadded": "2026-04-07 00:39:13 UTC",
            "url": "http://101.21.22.211:34266/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813239/",
            "reporter": "geenensp"
        }
    ],
    "3813238": [
        {
            "dateadded": "2026-04-07 00:34:08 UTC",
            "url": "https://floor-node.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813238/",
            "reporter": "anonymous"
        }
    ],
    "3813237": [
        {
            "dateadded": "2026-04-07 00:29:09 UTC",
            "url": "http://87.121.112.57/kkk.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813237/",
            "reporter": "botnetkiller"
        }
    ],
    "3813236": [
        {
            "dateadded": "2026-04-07 00:28:07 UTC",
            "url": "https://stat-portal.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813236/",
            "reporter": "anonymous"
        }
    ],
    "3813235": [
        {
            "dateadded": "2026-04-07 00:27:08 UTC",
            "url": "http://119.180.244.133:57725/i",
            "url_status": "offline",
            "last_online": "2026-04-09 10:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813235/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813234": [
        {
            "dateadded": "2026-04-07 00:24:07 UTC",
            "url": "https://trend-api.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:24:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813234/",
            "reporter": "anonymous"
        }
    ],
    "3813233": [
        {
            "dateadded": "2026-04-07 00:22:18 UTC",
            "url": "http://182.114.255.4:46851/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 19:51:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813233/",
            "reporter": "geenensp"
        }
    ],
    "3813232": [
        {
            "dateadded": "2026-04-07 00:21:10 UTC",
            "url": "https://fall-check.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813232/",
            "reporter": "anonymous"
        }
    ],
    "3813231": [
        {
            "dateadded": "2026-04-07 00:14:09 UTC",
            "url": "http://115.57.182.159:39266/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813231/",
            "reporter": "geenensp"
        }
    ],
    "3813230": [
        {
            "dateadded": "2026-04-07 00:12:09 UTC",
            "url": "https://micro-svc.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813230/",
            "reporter": "anonymous"
        }
    ],
    "3813229": [
        {
            "dateadded": "2026-04-07 00:06:11 UTC",
            "url": "https://lab-access.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813229/",
            "reporter": "anonymous"
        }
    ],
    "3813228": [
        {
            "dateadded": "2026-04-07 00:01:07 UTC",
            "url": "https://pure-node.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 00:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813228/",
            "reporter": "anonymous"
        }
    ],
    "3813226": [
        {
            "dateadded": "2026-04-07 00:00:21 UTC",
            "url": "http://61.53.84.137:54139/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:54:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813226/",
            "reporter": "geenensp"
        }
    ],
    "3813227": [
        {
            "dateadded": "2026-04-07 00:00:21 UTC",
            "url": "http://101.21.22.211:34266/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813227/",
            "reporter": "geenensp"
        }
    ],
    "3813225": [
        {
            "dateadded": "2026-04-06 23:57:06 UTC",
            "url": "http://219.156.125.8:36772/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813225/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813224": [
        {
            "dateadded": "2026-04-06 23:56:21 UTC",
            "url": "http://119.99.250.185:40861/i",
            "url_status": "offline",
            "last_online": "2026-04-14 16:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813224/",
            "reporter": "geenensp"
        }
    ],
    "3813223": [
        {
            "dateadded": "2026-04-06 23:56:20 UTC",
            "url": "http://77.39.19.233:33556/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813223/",
            "reporter": "geenensp"
        }
    ],
    "3813222": [
        {
            "dateadded": "2026-04-06 23:55:09 UTC",
            "url": "https://growth-hub.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813222/",
            "reporter": "anonymous"
        }
    ],
    "3813221": [
        {
            "dateadded": "2026-04-06 23:50:17 UTC",
            "url": "http://115.57.195.247:48735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:25:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813221/",
            "reporter": "geenensp"
        }
    ],
    "3813220": [
        {
            "dateadded": "2026-04-06 23:49:14 UTC",
            "url": "http://42.227.197.154:41343/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813220/",
            "reporter": "geenensp"
        }
    ],
    "3813219": [
        {
            "dateadded": "2026-04-06 23:49:09 UTC",
            "url": "https://cell-logic.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813219/",
            "reporter": "anonymous"
        }
    ],
    "3813218": [
        {
            "dateadded": "2026-04-06 23:44:08 UTC",
            "url": "https://bio-trace.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813218/",
            "reporter": "anonymous"
        }
    ],
    "3813217": [
        {
            "dateadded": "2026-04-06 23:42:07 UTC",
            "url": "http://219.156.125.8:36772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 23:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813217/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813216": [
        {
            "dateadded": "2026-04-06 23:38:09 UTC",
            "url": "https://point-api.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813216/",
            "reporter": "anonymous"
        }
    ],
    "3813215": [
        {
            "dateadded": "2026-04-06 23:35:19 UTC",
            "url": "http://77.247.92.12:47602/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813215/",
            "reporter": "geenensp"
        }
    ],
    "3813214": [
        {
            "dateadded": "2026-04-06 23:33:10 UTC",
            "url": "https://stop-logic.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813214/",
            "reporter": "anonymous"
        }
    ],
    "3813213": [
        {
            "dateadded": "2026-04-06 23:32:18 UTC",
            "url": "http://119.99.250.185:40861/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 16:32:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813213/",
            "reporter": "geenensp"
        }
    ],
    "3813212": [
        {
            "dateadded": "2026-04-06 23:32:08 UTC",
            "url": "http://77.247.93.176:50053/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813212/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813211": [
        {
            "dateadded": "2026-04-06 23:27:18 UTC",
            "url": "http://77.39.19.233:33556/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:47:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813211/",
            "reporter": "geenensp"
        }
    ],
    "3813210": [
        {
            "dateadded": "2026-04-06 23:27:08 UTC",
            "url": "http://119.180.244.133:57725/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 13:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813210/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813209": [
        {
            "dateadded": "2026-04-06 23:26:10 UTC",
            "url": "https://test-engine.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-07 16:23:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813209/",
            "reporter": "anonymous"
        }
    ],
    "3813208": [
        {
            "dateadded": "2026-04-06 23:25:20 UTC",
            "url": "http://61.53.84.137:54139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:23:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813208/",
            "reporter": "geenensp"
        }
    ],
    "3813207": [
        {
            "dateadded": "2026-04-06 23:24:21 UTC",
            "url": "http://61.53.123.174:56631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:19:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813207/",
            "reporter": "geenensp"
        }
    ],
    "3813206": [
        {
            "dateadded": "2026-04-06 23:21:08 UTC",
            "url": "https://hard-check.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813206/",
            "reporter": "anonymous"
        }
    ],
    "3813205": [
        {
            "dateadded": "2026-04-06 23:15:17 UTC",
            "url": "http://115.57.195.247:48735/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:13:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813205/",
            "reporter": "geenensp"
        }
    ],
    "3813204": [
        {
            "dateadded": "2026-04-06 23:15:14 UTC",
            "url": "https://base-audit.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813204/",
            "reporter": "anonymous"
        }
    ],
    "3813203": [
        {
            "dateadded": "2026-04-06 23:14:20 UTC",
            "url": "http://77.247.92.71:34106/i",
            "url_status": "offline",
            "last_online": "2026-04-11 07:07:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813203/",
            "reporter": "geenensp"
        }
    ],
    "3813202": [
        {
            "dateadded": "2026-04-06 23:10:18 UTC",
            "url": "https://rule-block.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:10:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813202/",
            "reporter": "anonymous"
        }
    ],
    "3813201": [
        {
            "dateadded": "2026-04-06 23:04:11 UTC",
            "url": "https://open-end.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 23:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813201/",
            "reporter": "anonymous"
        }
    ],
    "3813200": [
        {
            "dateadded": "2026-04-06 23:01:09 UTC",
            "url": "http://61.52.37.20:57984/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:43:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813200/",
            "reporter": "geenensp"
        }
    ],
    "3813199": [
        {
            "dateadded": "2026-04-06 22:59:10 UTC",
            "url": "https://guess-api.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813199/",
            "reporter": "anonymous"
        }
    ],
    "3813198": [
        {
            "dateadded": "2026-04-06 22:53:07 UTC",
            "url": "https://hint-node.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813198/",
            "reporter": "anonymous"
        }
    ],
    "3813197": [
        {
            "dateadded": "2026-04-06 22:52:08 UTC",
            "url": "http://115.54.225.141:49227/i",
            "url_status": "offline",
            "last_online": "2026-04-13 17:21:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813197/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813196": [
        {
            "dateadded": "2026-04-06 22:47:10 UTC",
            "url": "https://call-sign.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813196/",
            "reporter": "anonymous"
        }
    ],
    "3813195": [
        {
            "dateadded": "2026-04-06 22:47:06 UTC",
            "url": "http://61.53.118.240:45045/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813195/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813194": [
        {
            "dateadded": "2026-04-06 22:42:24 UTC",
            "url": "http://77.247.92.71:34106/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813194/",
            "reporter": "geenensp"
        }
    ],
    "3813193": [
        {
            "dateadded": "2026-04-06 22:42:12 UTC",
            "url": "https://risk-check.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813193/",
            "reporter": "anonymous"
        }
    ],
    "3813192": [
        {
            "dateadded": "2026-04-06 22:42:07 UTC",
            "url": "http://61.53.118.240:45045/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 17:06:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813192/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813191": [
        {
            "dateadded": "2026-04-06 22:36:13 UTC",
            "url": "https://wave-point.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813191/",
            "reporter": "anonymous"
        }
    ],
    "3813190": [
        {
            "dateadded": "2026-04-06 22:35:18 UTC",
            "url": "http://61.52.37.20:57984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:44:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813190/",
            "reporter": "geenensp"
        }
    ],
    "3813189": [
        {
            "dateadded": "2026-04-06 22:31:14 UTC",
            "url": "https://user-pool.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813189/",
            "reporter": "anonymous"
        }
    ],
    "3813187": [
        {
            "dateadded": "2026-04-06 22:27:09 UTC",
            "url": "http://42.239.170.147:52941/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:27:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813187/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813188": [
        {
            "dateadded": "2026-04-06 22:27:09 UTC",
            "url": "http://115.54.225.141:49227/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:46:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813188/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813186": [
        {
            "dateadded": "2026-04-06 22:26:13 UTC",
            "url": "https://limit-gate.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813186/",
            "reporter": "anonymous"
        }
    ],
    "3813185": [
        {
            "dateadded": "2026-04-06 22:19:07 UTC",
            "url": "https://track-hub.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813185/",
            "reporter": "anonymous"
        }
    ],
    "3813183": [
        {
            "dateadded": "2026-04-06 22:16:24 UTC",
            "url": "http://182.118.245.149:33591/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813183/",
            "reporter": "geenensp"
        }
    ],
    "3813184": [
        {
            "dateadded": "2026-04-06 22:16:24 UTC",
            "url": "http://221.15.8.123:35319/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:49:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813184/",
            "reporter": "geenensp"
        }
    ],
    "3813182": [
        {
            "dateadded": "2026-04-06 22:13:10 UTC",
            "url": "https://spend-api.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813182/",
            "reporter": "anonymous"
        }
    ],
    "3813181": [
        {
            "dateadded": "2026-04-06 22:09:08 UTC",
            "url": "https://loss-monitor.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813181/",
            "reporter": "anonymous"
        }
    ],
    "3813180": [
        {
            "dateadded": "2026-04-06 22:03:08 UTC",
            "url": "https://waste-node.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 22:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813180/",
            "reporter": "anonymous"
        }
    ],
    "3813179": [
        {
            "dateadded": "2026-04-06 21:57:13 UTC",
            "url": "https://boom-logic.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813179/",
            "reporter": "anonymous"
        }
    ],
    "3813178": [
        {
            "dateadded": "2026-04-06 21:51:09 UTC",
            "url": "https://plant-api.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813178/",
            "reporter": "anonymous"
        }
    ],
    "3813177": [
        {
            "dateadded": "2026-04-06 21:47:23 UTC",
            "url": "http://42.227.148.182:58793/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813177/",
            "reporter": "geenensp"
        }
    ],
    "3813176": [
        {
            "dateadded": "2026-04-06 21:47:13 UTC",
            "url": "https://green-core.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813176/",
            "reporter": "anonymous"
        }
    ],
    "3813174": [
        {
            "dateadded": "2026-04-06 21:47:07 UTC",
            "url": "http://115.48.151.21:44071/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813174/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813175": [
        {
            "dateadded": "2026-04-06 21:47:07 UTC",
            "url": "http://115.48.151.21:44071/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813175/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813173": [
        {
            "dateadded": "2026-04-06 21:42:12 UTC",
            "url": "https://wood-trace.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813173/",
            "reporter": "anonymous"
        }
    ],
    "3813172": [
        {
            "dateadded": "2026-04-06 21:39:12 UTC",
            "url": "https://fire-wall.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:39:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813172/",
            "reporter": "anonymous"
        }
    ],
    "3813171": [
        {
            "dateadded": "2026-04-06 21:33:19 UTC",
            "url": "http://222.127.49.161:39460/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:43:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813171/",
            "reporter": "geenensp"
        }
    ],
    "3813170": [
        {
            "dateadded": "2026-04-06 21:31:09 UTC",
            "url": "http://60.17.74.18:46811/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:50:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813170/",
            "reporter": "geenensp"
        }
    ],
    "3813169": [
        {
            "dateadded": "2026-04-06 21:29:08 UTC",
            "url": "https://blast-zone.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813169/",
            "reporter": "anonymous"
        }
    ],
    "3813168": [
        {
            "dateadded": "2026-04-06 21:29:07 UTC",
            "url": "http://42.227.148.182:58793/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813168/",
            "reporter": "geenensp"
        }
    ],
    "3813167": [
        {
            "dateadded": "2026-04-06 21:24:15 UTC",
            "url": "https://data-form.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813167/",
            "reporter": "anonymous"
        }
    ],
    "3813166": [
        {
            "dateadded": "2026-04-06 21:20:19 UTC",
            "url": "http://182.117.30.6:52717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 12:11:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813166/",
            "reporter": "geenensp"
        }
    ],
    "3813165": [
        {
            "dateadded": "2026-04-06 21:19:21 UTC",
            "url": "http://175.175.104.45:44279/i",
            "url_status": "offline",
            "last_online": "2026-04-07 15:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813165/",
            "reporter": "geenensp"
        }
    ],
    "3813164": [
        {
            "dateadded": "2026-04-06 21:18:10 UTC",
            "url": "https://client-gate.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813164/",
            "reporter": "anonymous"
        }
    ],
    "3813163": [
        {
            "dateadded": "2026-04-06 21:12:13 UTC",
            "url": "https://search-svc.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813163/",
            "reporter": "anonymous"
        }
    ],
    "3813162": [
        {
            "dateadded": "2026-04-06 21:08:05 UTC",
            "url": "http://85.239.147.6/files/8301037712/ODdofh9.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813162/",
            "reporter": "Bitsight"
        }
    ],
    "3813161": [
        {
            "dateadded": "2026-04-06 21:07:07 UTC",
            "url": "http://123.9.247.90:37586/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:40:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813161/",
            "reporter": "geenensp"
        }
    ],
    "3813160": [
        {
            "dateadded": "2026-04-06 21:06:11 UTC",
            "url": "https://help-desk.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813160/",
            "reporter": "anonymous"
        }
    ],
    "3813159": [
        {
            "dateadded": "2026-04-06 21:05:18 UTC",
            "url": "http://222.127.49.161:39460/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:27:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813159/",
            "reporter": "geenensp"
        }
    ],
    "3813158": [
        {
            "dateadded": "2026-04-06 21:01:08 UTC",
            "url": "https://request-io.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 21:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813158/",
            "reporter": "anonymous"
        }
    ],
    "3813157": [
        {
            "dateadded": "2026-04-06 20:55:09 UTC",
            "url": "https://query-hub.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813157/",
            "reporter": "anonymous"
        }
    ],
    "3813156": [
        {
            "dateadded": "2026-04-06 20:49:12 UTC",
            "url": "https://fix-node.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813156/",
            "reporter": "anonymous"
        }
    ],
    "3813155": [
        {
            "dateadded": "2026-04-06 20:45:11 UTC",
            "url": "https://coat-logic.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813155/",
            "reporter": "anonymous"
        }
    ],
    "3813154": [
        {
            "dateadded": "2026-04-06 20:42:07 UTC",
            "url": "http://61.53.123.174:56631/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:06:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813154/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813153": [
        {
            "dateadded": "2026-04-06 20:40:20 UTC",
            "url": "http://123.9.247.90:37586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 21:56:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813153/",
            "reporter": "geenensp"
        }
    ],
    "3813152": [
        {
            "dateadded": "2026-04-06 20:39:05 UTC",
            "url": "http://85.239.147.6/files/7359455182/Et5cbkQ.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813152/",
            "reporter": "Bitsight"
        }
    ],
    "3813151": [
        {
            "dateadded": "2026-04-06 20:38:09 UTC",
            "url": "https://surface-api.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813151/",
            "reporter": "anonymous"
        }
    ],
    "3813150": [
        {
            "dateadded": "2026-04-06 20:33:10 UTC",
            "url": "https://pin-storage.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813150/",
            "reporter": "anonymous"
        }
    ],
    "3813149": [
        {
            "dateadded": "2026-04-06 20:27:18 UTC",
            "url": "http://42.230.224.40:32953/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:53:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813149/",
            "reporter": "geenensp"
        }
    ],
    "3813148": [
        {
            "dateadded": "2026-04-06 20:27:09 UTC",
            "url": "https://hard-point.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813148/",
            "reporter": "anonymous"
        }
    ],
    "3813147": [
        {
            "dateadded": "2026-04-06 20:21:08 UTC",
            "url": "https://gloss-check.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813147/",
            "reporter": "anonymous"
        }
    ],
    "3813146": [
        {
            "dateadded": "2026-04-06 20:16:25 UTC",
            "url": "http://117.223.142.255:54185/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813146/",
            "reporter": "geenensp"
        }
    ],
    "3813145": [
        {
            "dateadded": "2026-04-06 20:16:11 UTC",
            "url": "https://relay-svc.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813145/",
            "reporter": "anonymous"
        }
    ],
    "3813144": [
        {
            "dateadded": "2026-04-06 20:14:06 UTC",
            "url": "http://85.239.147.6/files/7362035837/aREfDTa.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813144/",
            "reporter": "Bitsight"
        }
    ],
    "3813143": [
        {
            "dateadded": "2026-04-06 20:12:06 UTC",
            "url": "http://42.232.176.25:48828/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:27:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813143/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813142": [
        {
            "dateadded": "2026-04-06 20:11:23 UTC",
            "url": "http://150.255.55.138:56605/i",
            "url_status": "offline",
            "last_online": "2026-04-07 23:05:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813142/",
            "reporter": "geenensp"
        }
    ],
    "3813141": [
        {
            "dateadded": "2026-04-06 20:11:15 UTC",
            "url": "https://sync-logic.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813141/",
            "reporter": "anonymous"
        }
    ],
    "3813140": [
        {
            "dateadded": "2026-04-06 20:05:10 UTC",
            "url": "https://alert-node.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 20:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813140/",
            "reporter": "anonymous"
        }
    ],
    "3813139": [
        {
            "dateadded": "2026-04-06 19:59:14 UTC",
            "url": "https://push-notify.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813139/",
            "reporter": "anonymous"
        }
    ],
    "3813138": [
        {
            "dateadded": "2026-04-06 19:54:09 UTC",
            "url": "https://voice-api.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813138/",
            "reporter": "anonymous"
        }
    ],
    "3813137": [
        {
            "dateadded": "2026-04-06 19:53:11 UTC",
            "url": "http://117.223.142.255:54185/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 03:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813137/",
            "reporter": "geenensp"
        }
    ],
    "3813136": [
        {
            "dateadded": "2026-04-06 19:50:09 UTC",
            "url": "http://85.239.147.6/files/7362035837/aREfDTa.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813136/",
            "reporter": "Bitsight"
        }
    ],
    "3813135": [
        {
            "dateadded": "2026-04-06 19:48:09 UTC",
            "url": "https://call-center.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813135/",
            "reporter": "anonymous"
        }
    ],
    "3813134": [
        {
            "dateadded": "2026-04-06 19:47:08 UTC",
            "url": "http://42.232.176.25:48828/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:55:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813134/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813133": [
        {
            "dateadded": "2026-04-06 19:42:14 UTC",
            "url": "https://master-index.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813133/",
            "reporter": "anonymous"
        }
    ],
    "3813132": [
        {
            "dateadded": "2026-04-06 19:40:12 UTC",
            "url": "http://222.137.23.43:55488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:09:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813132/",
            "reporter": "geenensp"
        }
    ],
    "3813131": [
        {
            "dateadded": "2026-04-06 19:37:11 UTC",
            "url": "https://sketch-node.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813131/",
            "reporter": "anonymous"
        }
    ],
    "3813130": [
        {
            "dateadded": "2026-04-06 19:31:14 UTC",
            "url": "https://view-port.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813130/",
            "reporter": "anonymous"
        }
    ],
    "3813129": [
        {
            "dateadded": "2026-04-06 19:26:12 UTC",
            "url": "https://cloud-draft.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813129/",
            "reporter": "anonymous"
        }
    ],
    "3813128": [
        {
            "dateadded": "2026-04-06 19:20:11 UTC",
            "url": "https://root-source.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813128/",
            "reporter": "anonymous"
        }
    ],
    "3813127": [
        {
            "dateadded": "2026-04-06 19:13:09 UTC",
            "url": "https://entity-hub.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813127/",
            "reporter": "anonymous"
        }
    ],
    "3813126": [
        {
            "dateadded": "2026-04-06 19:12:22 UTC",
            "url": "http://60.215.22.234:54945/i",
            "url_status": "offline",
            "last_online": "2026-04-08 14:22:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813126/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813125": [
        {
            "dateadded": "2026-04-06 19:09:10 UTC",
            "url": "https://ghost-api.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813125/",
            "reporter": "anonymous"
        }
    ],
    "3813124": [
        {
            "dateadded": "2026-04-06 19:05:15 UTC",
            "url": "https://theory-svc.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813124/",
            "reporter": "anonymous"
        }
    ],
    "3813123": [
        {
            "dateadded": "2026-04-06 19:02:08 UTC",
            "url": "https://pure-node.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 19:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813123/",
            "reporter": "anonymous"
        }
    ],
    "3813122": [
        {
            "dateadded": "2026-04-06 18:52:33 UTC",
            "url": "http://105.184.50.50:55125/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813122/",
            "reporter": "geenensp"
        }
    ],
    "3813121": [
        {
            "dateadded": "2026-04-06 18:52:26 UTC",
            "url": "https://blank-space.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:52:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813121/",
            "reporter": "anonymous"
        }
    ],
    "3813118": [
        {
            "dateadded": "2026-04-06 18:51:50 UTC",
            "url": "https://pub-3f298b361d774ae0a68be902f3ed9d89.r2.dev/4.31507MQ.zip",
            "url_status": "offline",
            "last_online": "2026-04-06 18:51:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SilverFox"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813118/",
            "reporter": "Ling"
        }
    ],
    "3813112": [
        {
            "dateadded": "2026-04-06 18:49:11 UTC",
            "url": "http://113.233.117.15:51846/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 05:11:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813112/",
            "reporter": "geenensp"
        }
    ],
    "3813111": [
        {
            "dateadded": "2026-04-06 18:48:09 UTC",
            "url": "https://model-check.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813111/",
            "reporter": "anonymous"
        }
    ],
    "3813110": [
        {
            "dateadded": "2026-04-06 18:45:14 UTC",
            "url": "http://85.11.167.101/arm7",
            "url_status": "offline",
            "last_online": "2026-04-13 10:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813110/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813109": [
        {
            "dateadded": "2026-04-06 18:45:11 UTC",
            "url": "https://idea-vault.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813109/",
            "reporter": "anonymous"
        }
    ],
    "3813105": [
        {
            "dateadded": "2026-04-06 18:44:17 UTC",
            "url": "http://85.11.167.101/arm6",
            "url_status": "offline",
            "last_online": "2026-04-09 15:56:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813105/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813106": [
        {
            "dateadded": "2026-04-06 18:44:17 UTC",
            "url": "http://85.11.167.101/arm5",
            "url_status": "offline",
            "last_online": "2026-04-09 16:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813106/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813107": [
        {
            "dateadded": "2026-04-06 18:44:17 UTC",
            "url": "http://85.11.167.101/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-11 06:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813107/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813108": [
        {
            "dateadded": "2026-04-06 18:44:17 UTC",
            "url": "http://85.11.167.101/mips",
            "url_status": "offline",
            "last_online": "2026-04-11 07:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813108/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813103": [
        {
            "dateadded": "2026-04-06 18:44:07 UTC",
            "url": "http://85.11.167.101/arm",
            "url_status": "offline",
            "last_online": "2026-04-09 16:27:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813103/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813104": [
        {
            "dateadded": "2026-04-06 18:44:07 UTC",
            "url": "http://85.11.167.101/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-08 16:54:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813104/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3813102": [
        {
            "dateadded": "2026-04-06 18:34:12 UTC",
            "url": "https://load-api.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813102/",
            "reporter": "anonymous"
        }
    ],
    "3813101": [
        {
            "dateadded": "2026-04-06 18:29:07 UTC",
            "url": "https://stress-node.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813101/",
            "reporter": "anonymous"
        }
    ],
    "3813100": [
        {
            "dateadded": "2026-04-06 18:27:08 UTC",
            "url": "http://123.11.203.83:52121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 17:16:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813100/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813099": [
        {
            "dateadded": "2026-04-06 18:23:10 UTC",
            "url": "https://base-support.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813099/",
            "reporter": "anonymous"
        }
    ],
    "3813098": [
        {
            "dateadded": "2026-04-06 18:18:07 UTC",
            "url": "https://solid-store.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813098/",
            "reporter": "anonymous"
        }
    ],
    "3813097": [
        {
            "dateadded": "2026-04-06 18:13:18 UTC",
            "url": "http://123.11.171.85:54017/i",
            "url_status": "offline",
            "last_online": "2026-04-10 07:02:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813097/",
            "reporter": "geenensp"
        }
    ],
    "3813096": [
        {
            "dateadded": "2026-04-06 18:13:11 UTC",
            "url": "https://beam-logic.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813096/",
            "reporter": "anonymous"
        }
    ],
    "3813095": [
        {
            "dateadded": "2026-04-06 18:07:10 UTC",
            "url": "https://frame-build.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813095/",
            "reporter": "anonymous"
        }
    ],
    "3813094": [
        {
            "dateadded": "2026-04-06 18:02:11 UTC",
            "url": "https://meta-point.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 18:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813094/",
            "reporter": "anonymous"
        }
    ],
    "3813093": [
        {
            "dateadded": "2026-04-06 17:59:15 UTC",
            "url": "http://120.2.196.255:41225/i",
            "url_status": "offline",
            "last_online": "2026-04-15 17:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813093/",
            "reporter": "geenensp"
        }
    ],
    "3813092": [
        {
            "dateadded": "2026-04-06 17:58:22 UTC",
            "url": "http://123.11.171.85:54017/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 04:42:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813092/",
            "reporter": "geenensp"
        }
    ],
    "3813091": [
        {
            "dateadded": "2026-04-06 17:57:19 UTC",
            "url": "http://182.117.122.124:53839/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:34:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813091/",
            "reporter": "geenensp"
        }
    ],
    "3813090": [
        {
            "dateadded": "2026-04-06 17:56:09 UTC",
            "url": "https://link-trace.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813090/",
            "reporter": "anonymous"
        }
    ],
    "3813089": [
        {
            "dateadded": "2026-04-06 17:50:12 UTC",
            "url": "https://tag-portal.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813089/",
            "reporter": "anonymous"
        }
    ],
    "3813088": [
        {
            "dateadded": "2026-04-06 17:46:20 UTC",
            "url": "http://219.156.28.216:52542/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813088/",
            "reporter": "geenensp"
        }
    ],
    "3813087": [
        {
            "dateadded": "2026-04-06 17:45:12 UTC",
            "url": "https://meaning-svc.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813087/",
            "reporter": "anonymous"
        }
    ],
    "3813086": [
        {
            "dateadded": "2026-04-06 17:39:10 UTC",
            "url": "https://term-index.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813086/",
            "reporter": "anonymous"
        }
    ],
    "3813085": [
        {
            "dateadded": "2026-04-06 17:35:09 UTC",
            "url": "http://124.129.91.47:55421/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:11:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813085/",
            "reporter": "geenensp"
        }
    ],
    "3813084": [
        {
            "dateadded": "2026-04-06 17:33:12 UTC",
            "url": "https://word-map.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813084/",
            "reporter": "anonymous"
        }
    ],
    "3813068": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "https://vision-node.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:27:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813068/",
            "reporter": "anonymous"
        }
    ],
    "3813069": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/get%20files/client",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813069/",
            "reporter": "botnetkiller"
        }
    ],
    "3813070": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.sh4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813070/",
            "reporter": "botnetkiller"
        }
    ],
    "3813071": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 03:50:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813071/",
            "reporter": "botnetkiller"
        }
    ],
    "3813072": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.apk",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813072/",
            "reporter": "botnetkiller"
        }
    ],
    "3813073": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.i686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:19:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813073/",
            "reporter": "botnetkiller"
        }
    ],
    "3813074": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.x64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813074/",
            "reporter": "botnetkiller"
        }
    ],
    "3813075": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.arm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813075/",
            "reporter": "botnetkiller"
        }
    ],
    "3813076": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.x86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813076/",
            "reporter": "botnetkiller"
        }
    ],
    "3813077": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813077/",
            "reporter": "botnetkiller"
        }
    ],
    "3813078": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.i486",
            "url_status": "offline",
            "last_online": "2026-04-07 05:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813078/",
            "reporter": "botnetkiller"
        }
    ],
    "3813079": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.mips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813079/",
            "reporter": "botnetkiller"
        }
    ],
    "3813080": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.spc",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813080/",
            "reporter": "botnetkiller"
        }
    ],
    "3813081": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.m68k",
            "url_status": "offline",
            "last_online": "2026-04-07 11:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813081/",
            "reporter": "botnetkiller"
        }
    ],
    "3813082": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813082/",
            "reporter": "botnetkiller"
        }
    ],
    "3813083": [
        {
            "dateadded": "2026-04-06 17:27:45 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.dbg",
            "url_status": "offline",
            "last_online": "2026-04-07 04:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813083/",
            "reporter": "botnetkiller"
        }
    ],
    "3813067": [
        {
            "dateadded": "2026-04-06 17:27:29 UTC",
            "url": "http://103.130.214.71:4949/binss/zyre.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813067/",
            "reporter": "botnetkiller"
        }
    ],
    "3813066": [
        {
            "dateadded": "2026-04-06 17:26:17 UTC",
            "url": "http://185.97.113.40:50942/i",
            "url_status": "offline",
            "last_online": "2026-04-08 03:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813066/",
            "reporter": "geenensp"
        }
    ],
    "3813065": [
        {
            "dateadded": "2026-04-06 17:23:27 UTC",
            "url": "http://120.2.196.255:41225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 17:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813065/",
            "reporter": "geenensp"
        }
    ],
    "3813064": [
        {
            "dateadded": "2026-04-06 17:22:16 UTC",
            "url": "https://brain-api.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813064/",
            "reporter": "anonymous"
        }
    ],
    "3813063": [
        {
            "dateadded": "2026-04-06 17:16:14 UTC",
            "url": "https://sense-gate.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813063/",
            "reporter": "anonymous"
        }
    ],
    "3813062": [
        {
            "dateadded": "2026-04-06 17:12:09 UTC",
            "url": "http://125.43.36.108:36740/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:54:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813062/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813061": [
        {
            "dateadded": "2026-04-06 17:11:09 UTC",
            "url": "https://neural-io.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813061/",
            "reporter": "anonymous"
        }
    ],
    "3813060": [
        {
            "dateadded": "2026-04-06 17:07:23 UTC",
            "url": "http://185.97.113.40:50942/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:11:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813060/",
            "reporter": "geenensp"
        }
    ],
    "3813059": [
        {
            "dateadded": "2026-04-06 17:07:20 UTC",
            "url": "http://124.129.91.47:55421/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813059/",
            "reporter": "geenensp"
        }
    ],
    "3813058": [
        {
            "dateadded": "2026-04-06 17:05:15 UTC",
            "url": "https://thought-hub.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 17:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813058/",
            "reporter": "anonymous"
        }
    ],
    "3813057": [
        {
            "dateadded": "2026-04-06 17:03:23 UTC",
            "url": "http://177.39.122.214:55049/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:03:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813057/",
            "reporter": "geenensp"
        }
    ],
    "3813056": [
        {
            "dateadded": "2026-04-06 16:59:13 UTC",
            "url": "https://mind-stack.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813056/",
            "reporter": "anonymous"
        }
    ],
    "3813055": [
        {
            "dateadded": "2026-04-06 16:57:09 UTC",
            "url": "http://123.5.130.5:34795/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:39:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813055/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813054": [
        {
            "dateadded": "2026-04-06 16:54:15 UTC",
            "url": "https://core-net.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813054/",
            "reporter": "anonymous"
        }
    ],
    "3813053": [
        {
            "dateadded": "2026-04-06 16:48:10 UTC",
            "url": "https://stitch-api.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813053/",
            "reporter": "anonymous"
        }
    ],
    "3813052": [
        {
            "dateadded": "2026-04-06 16:42:14 UTC",
            "url": "https://thread-svc.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813052/",
            "reporter": "anonymous"
        }
    ],
    "3813051": [
        {
            "dateadded": "2026-04-06 16:42:09 UTC",
            "url": "http://125.43.36.108:36740/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813051/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813050": [
        {
            "dateadded": "2026-04-06 16:41:09 UTC",
            "url": "http://115.55.53.218:41063/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813050/",
            "reporter": "geenensp"
        }
    ],
    "3813049": [
        {
            "dateadded": "2026-04-06 16:37:13 UTC",
            "url": "https://mesh-router.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813049/",
            "reporter": "anonymous"
        }
    ],
    "3813048": [
        {
            "dateadded": "2026-04-06 16:36:23 UTC",
            "url": "http://182.52.205.167:58619/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:12:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813048/",
            "reporter": "geenensp"
        }
    ],
    "3813047": [
        {
            "dateadded": "2026-04-06 16:36:22 UTC",
            "url": "http://177.39.122.214:55049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813047/",
            "reporter": "geenensp"
        }
    ],
    "3813046": [
        {
            "dateadded": "2026-04-06 16:31:09 UTC",
            "url": "https://gate-secure.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813046/",
            "reporter": "anonymous"
        }
    ],
    "3813045": [
        {
            "dateadded": "2026-04-06 16:30:21 UTC",
            "url": "http://113.239.120.41:52340/i",
            "url_status": "offline",
            "last_online": "2026-04-08 21:50:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813045/",
            "reporter": "geenensp"
        }
    ],
    "3813044": [
        {
            "dateadded": "2026-04-06 16:28:20 UTC",
            "url": "http://42.85.164.254:47652/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813044/",
            "reporter": "geenensp"
        }
    ],
    "3813043": [
        {
            "dateadded": "2026-04-06 16:25:20 UTC",
            "url": "https://bit-weave.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813043/",
            "reporter": "anonymous"
        }
    ],
    "3813042": [
        {
            "dateadded": "2026-04-06 16:22:09 UTC",
            "url": "http://182.117.122.124:53839/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:03:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813042/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813041": [
        {
            "dateadded": "2026-04-06 16:21:14 UTC",
            "url": "https://point-drift.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813041/",
            "reporter": "anonymous"
        }
    ],
    "3813040": [
        {
            "dateadded": "2026-04-06 16:16:24 UTC",
            "url": "http://222.141.44.32:53485/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813040/",
            "reporter": "geenensp"
        }
    ],
    "3813039": [
        {
            "dateadded": "2026-04-06 16:14:14 UTC",
            "url": "https://flux-scan.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813039/",
            "reporter": "anonymous"
        }
    ],
    "3813038": [
        {
            "dateadded": "2026-04-06 16:09:12 UTC",
            "url": "https://likely-hood.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813038/",
            "reporter": "anonymous"
        }
    ],
    "3813037": [
        {
            "dateadded": "2026-04-06 16:04:15 UTC",
            "url": "https://trend-sensor.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813037/",
            "reporter": "anonymous"
        }
    ],
    "3813036": [
        {
            "dateadded": "2026-04-06 16:03:34 UTC",
            "url": "http://115.55.53.218:41063/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:53:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813036/",
            "reporter": "geenensp"
        }
    ],
    "3813035": [
        {
            "dateadded": "2026-04-06 16:03:27 UTC",
            "url": "http://125.41.0.51:57452/i",
            "url_status": "offline",
            "last_online": "2026-04-09 07:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813035/",
            "reporter": "geenensp"
        }
    ],
    "3813034": [
        {
            "dateadded": "2026-04-06 15:58:20 UTC",
            "url": "http://105.184.68.80:42363/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813034/",
            "reporter": "geenensp"
        }
    ],
    "3813033": [
        {
            "dateadded": "2026-04-06 15:57:13 UTC",
            "url": "https://data-guess.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813033/",
            "reporter": "anonymous"
        }
    ],
    "3813031": [
        {
            "dateadded": "2026-04-06 15:54:25 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/rduiqsxg66",
            "url_status": "offline",
            "last_online": "2026-04-09 10:21:45 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813031/",
            "reporter": "botnetkiller"
        }
    ],
    "3813032": [
        {
            "dateadded": "2026-04-06 15:54:25 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/547e510g2m",
            "url_status": "offline",
            "last_online": "2026-04-09 11:22:44 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813032/",
            "reporter": "botnetkiller"
        }
    ],
    "3813030": [
        {
            "dateadded": "2026-04-06 15:54:10 UTC",
            "url": "https://pattern-dev.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813030/",
            "reporter": "anonymous"
        }
    ],
    "3813027": [
        {
            "dateadded": "2026-04-06 15:53:23 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/zlr01030u5",
            "url_status": "offline",
            "last_online": "2026-04-09 10:15:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813027/",
            "reporter": "botnetkiller"
        }
    ],
    "3813028": [
        {
            "dateadded": "2026-04-06 15:53:23 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/rh1ele5p8l",
            "url_status": "offline",
            "last_online": "2026-04-09 11:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813028/",
            "reporter": "botnetkiller"
        }
    ],
    "3813029": [
        {
            "dateadded": "2026-04-06 15:53:23 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/3yahbbprg4",
            "url_status": "offline",
            "last_online": "2026-04-09 10:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813029/",
            "reporter": "botnetkiller"
        }
    ],
    "3813024": [
        {
            "dateadded": "2026-04-06 15:53:21 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/rt6l46cwdn",
            "url_status": "offline",
            "last_online": "2026-04-09 10:56:44 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813024/",
            "reporter": "botnetkiller"
        }
    ],
    "3813025": [
        {
            "dateadded": "2026-04-06 15:53:21 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/5u6pbsspr6",
            "url_status": "offline",
            "last_online": "2026-04-09 10:24:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813025/",
            "reporter": "botnetkiller"
        }
    ],
    "3813026": [
        {
            "dateadded": "2026-04-06 15:53:21 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/aygbsqq0c4",
            "url_status": "offline",
            "last_online": "2026-04-09 10:42:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813026/",
            "reporter": "botnetkiller"
        }
    ],
    "3813021": [
        {
            "dateadded": "2026-04-06 15:53:20 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/ln8cw1ox1f",
            "url_status": "offline",
            "last_online": "2026-04-09 10:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813021/",
            "reporter": "botnetkiller"
        }
    ],
    "3813022": [
        {
            "dateadded": "2026-04-06 15:53:20 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/3vrtjbxplo",
            "url_status": "offline",
            "last_online": "2026-04-09 09:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813022/",
            "reporter": "botnetkiller"
        }
    ],
    "3813023": [
        {
            "dateadded": "2026-04-06 15:53:20 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/rigdtn0fpm",
            "url_status": "offline",
            "last_online": "2026-04-09 11:10:21 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813023/",
            "reporter": "botnetkiller"
        }
    ],
    "3813020": [
        {
            "dateadded": "2026-04-06 15:53:19 UTC",
            "url": "http://179.43.182.70/payload/ne4769eap2uv/xurc7j.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813020/",
            "reporter": "botnetkiller"
        }
    ],
    "3813019": [
        {
            "dateadded": "2026-04-06 15:51:14 UTC",
            "url": "https://unit-logic.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813019/",
            "reporter": "anonymous"
        }
    ],
    "3813018": [
        {
            "dateadded": "2026-04-06 15:49:22 UTC",
            "url": "http://222.141.44.32:53485/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:49:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813018/",
            "reporter": "geenensp"
        }
    ],
    "3813017": [
        {
            "dateadded": "2026-04-06 15:47:07 UTC",
            "url": "http://125.43.231.44:51959/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:43:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813017/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3813016": [
        {
            "dateadded": "2026-04-06 15:41:17 UTC",
            "url": "https://base-extract.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813016/",
            "reporter": "anonymous"
        }
    ],
    "3813015": [
        {
            "dateadded": "2026-04-06 15:38:22 UTC",
            "url": "http://125.41.0.51:57452/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 03:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813015/",
            "reporter": "geenensp"
        }
    ],
    "3813014": [
        {
            "dateadded": "2026-04-06 15:36:08 UTC",
            "url": "https://law-verify.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813014/",
            "reporter": "anonymous"
        }
    ],
    "3813013": [
        {
            "dateadded": "2026-04-06 15:33:17 UTC",
            "url": "http://110.186.230.160:41348/i",
            "url_status": "offline",
            "last_online": "2026-04-08 15:58:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813013/",
            "reporter": "geenensp"
        }
    ],
    "3813012": [
        {
            "dateadded": "2026-04-06 15:30:15 UTC",
            "url": "https://proof-static.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813012/",
            "reporter": "anonymous"
        }
    ],
    "3813011": [
        {
            "dateadded": "2026-04-06 15:24:12 UTC",
            "url": "https://result-node.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813011/",
            "reporter": "anonymous"
        }
    ],
    "3813010": [
        {
            "dateadded": "2026-04-06 15:18:14 UTC",
            "url": "https://top-down-io.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813010/",
            "reporter": "anonymous"
        }
    ],
    "3813008": [
        {
            "dateadded": "2026-04-06 15:13:11 UTC",
            "url": "http://115.46.83.29:60673/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:38:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813008/",
            "reporter": "geenensp"
        }
    ],
    "3813009": [
        {
            "dateadded": "2026-04-06 15:13:11 UTC",
            "url": "http://36.64.184.26:53971/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813009/",
            "reporter": "geenensp"
        }
    ],
    "3813007": [
        {
            "dateadded": "2026-04-06 15:13:08 UTC",
            "url": "https://axis-portal.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813007/",
            "reporter": "anonymous"
        }
    ],
    "3813006": [
        {
            "dateadded": "2026-04-06 15:12:18 UTC",
            "url": "http://115.46.83.29:60673/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 09:46:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813006/",
            "reporter": "geenensp"
        }
    ],
    "3813005": [
        {
            "dateadded": "2026-04-06 15:08:08 UTC",
            "url": "https://norm-engine.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813005/",
            "reporter": "anonymous"
        }
    ],
    "3813004": [
        {
            "dateadded": "2026-04-06 15:05:14 UTC",
            "url": "http://110.186.230.160:41348/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 18:03:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813004/",
            "reporter": "geenensp"
        }
    ],
    "3813003": [
        {
            "dateadded": "2026-04-06 15:05:13 UTC",
            "url": "http://27.37.25.95:35908/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:16:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813003/",
            "reporter": "geenensp"
        }
    ],
    "3813002": [
        {
            "dateadded": "2026-04-06 15:02:12 UTC",
            "url": "https://check-point.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 15:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813002/",
            "reporter": "anonymous"
        }
    ],
    "3813001": [
        {
            "dateadded": "2026-04-06 14:56:08 UTC",
            "url": "https://proof-vault.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813001/",
            "reporter": "anonymous"
        }
    ],
    "3813000": [
        {
            "dateadded": "2026-04-06 14:51:10 UTC",
            "url": "https://base-syntax.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3813000/",
            "reporter": "anonymous"
        }
    ],
    "3812999": [
        {
            "dateadded": "2026-04-06 14:46:23 UTC",
            "url": "http://77.247.92.106:54615/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812999/",
            "reporter": "geenensp"
        }
    ],
    "3812998": [
        {
            "dateadded": "2026-04-06 14:45:10 UTC",
            "url": "https://strict-code.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812998/",
            "reporter": "anonymous"
        }
    ],
    "3812997": [
        {
            "dateadded": "2026-04-06 14:42:20 UTC",
            "url": "http://42.239.231.45:54260/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:48:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812997/",
            "reporter": "geenensp"
        }
    ],
    "3812996": [
        {
            "dateadded": "2026-04-06 14:39:07 UTC",
            "url": "https://seq-manager.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812996/",
            "reporter": "anonymous"
        }
    ],
    "3812995": [
        {
            "dateadded": "2026-04-06 14:36:16 UTC",
            "url": "http://42.239.231.45:54260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 05:16:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812995/",
            "reporter": "geenensp"
        }
    ],
    "3812994": [
        {
            "dateadded": "2026-04-06 14:35:12 UTC",
            "url": "http://123.11.76.223:32865/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812994/",
            "reporter": "geenensp"
        }
    ],
    "3812993": [
        {
            "dateadded": "2026-04-06 14:34:09 UTC",
            "url": "https://rule-monitor.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812993/",
            "reporter": "anonymous"
        }
    ],
    "3812992": [
        {
            "dateadded": "2026-04-06 14:30:13 UTC",
            "url": "http://5.101.82.22:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&t=massspamming&c=massspamming&c=&c=&c=&c=&c=&c=&c=",
            "url_status": "offline",
            "last_online": "2026-04-08 11:52:46 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812992/",
            "reporter": "abuse_ch"
        }
    ],
    "3812991": [
        {
            "dateadded": "2026-04-06 14:28:13 UTC",
            "url": "https://path-logic.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812991/",
            "reporter": "anonymous"
        }
    ],
    "3812990": [
        {
            "dateadded": "2026-04-06 14:26:20 UTC",
            "url": "http://219.157.17.133:52065/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:00:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812990/",
            "reporter": "geenensp"
        }
    ],
    "3812989": [
        {
            "dateadded": "2026-04-06 14:25:13 UTC",
            "url": "http://167.148.195.30/ffa.txt",
            "url_status": "offline",
            "last_online": "2026-04-26 19:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812989/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3812988": [
        {
            "dateadded": "2026-04-06 14:24:30 UTC",
            "url": "https://one.immortalday.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-06 14:24:30 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812988/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3812986": [
        {
            "dateadded": "2026-04-06 14:24:13 UTC",
            "url": "http://176.65.144.108/i88.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:45:17 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812986/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3812987": [
        {
            "dateadded": "2026-04-06 14:24:13 UTC",
            "url": "https://i.postimg.cc/PJMG3BXJ/image.png",
            "url_status": "offline",
            "last_online": "2026-04-06 14:24:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812987/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3812985": [
        {
            "dateadded": "2026-04-06 14:24:10 UTC",
            "url": "https://i.postimg.cc/ydZXHTFS/image.png",
            "url_status": "offline",
            "last_online": "2026-04-06 14:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "stego"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812985/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3812984": [
        {
            "dateadded": "2026-04-06 14:24:09 UTC",
            "url": "http://77.91.97.92/032.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:44 UTC",
            "threat": "malware_download",
            "tags": [
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812984/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3812983": [
        {
            "dateadded": "2026-04-06 14:22:11 UTC",
            "url": "https://trace-audit.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812983/",
            "reporter": "anonymous"
        }
    ],
    "3812982": [
        {
            "dateadded": "2026-04-06 14:18:11 UTC",
            "url": "https://flow-order.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812982/",
            "reporter": "anonymous"
        }
    ],
    "3812981": [
        {
            "dateadded": "2026-04-06 14:15:12 UTC",
            "url": "https://step-sync.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812981/",
            "reporter": "anonymous"
        }
    ],
    "3812980": [
        {
            "dateadded": "2026-04-06 14:10:14 UTC",
            "url": "http://42.237.61.101:49876/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:07:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812980/",
            "reporter": "geenensp"
        }
    ],
    "3812978": [
        {
            "dateadded": "2026-04-06 14:07:10 UTC",
            "url": "http://118.125.7.77:59115/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812978/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812979": [
        {
            "dateadded": "2026-04-06 14:07:10 UTC",
            "url": "https://trace-result.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812979/",
            "reporter": "anonymous"
        }
    ],
    "3812977": [
        {
            "dateadded": "2026-04-06 14:04:10 UTC",
            "url": "https://meta-track.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 14:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812977/",
            "reporter": "anonymous"
        }
    ],
    "3812976": [
        {
            "dateadded": "2026-04-06 13:59:18 UTC",
            "url": "http://219.157.17.133:52065/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812976/",
            "reporter": "geenensp"
        }
    ],
    "3812975": [
        {
            "dateadded": "2026-04-06 13:53:10 UTC",
            "url": "https://data-split.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812975/",
            "reporter": "anonymous"
        }
    ],
    "3812974": [
        {
            "dateadded": "2026-04-06 13:53:05 UTC",
            "url": "http://85.239.147.6/files/7362035837/LalmHOj.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812974/",
            "reporter": "c2hunter"
        }
    ],
    "3812973": [
        {
            "dateadded": "2026-04-06 13:48:11 UTC",
            "url": "https://point-scan.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812973/",
            "reporter": "anonymous"
        }
    ],
    "3812972": [
        {
            "dateadded": "2026-04-06 13:45:22 UTC",
            "url": "http://115.50.19.26:57470/i",
            "url_status": "offline",
            "last_online": "2026-04-07 05:08:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812972/",
            "reporter": "geenensp"
        }
    ],
    "3812971": [
        {
            "dateadded": "2026-04-06 13:42:08 UTC",
            "url": "http://118.125.7.77:59115/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:24:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812971/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812970": [
        {
            "dateadded": "2026-04-06 13:40:12 UTC",
            "url": "https://stat-render.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812970/",
            "reporter": "anonymous"
        }
    ],
    "3812969": [
        {
            "dateadded": "2026-04-06 13:35:19 UTC",
            "url": "http://42.237.61.101:49876/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812969/",
            "reporter": "geenensp"
        }
    ],
    "3812968": [
        {
            "dateadded": "2026-04-06 13:34:09 UTC",
            "url": "https://break-down.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812968/",
            "reporter": "anonymous"
        }
    ],
    "3812967": [
        {
            "dateadded": "2026-04-06 13:33:12 UTC",
            "url": "http://67.20.225.220:41113/i",
            "url_status": "offline",
            "last_online": "2026-04-16 23:23:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812967/",
            "reporter": "geenensp"
        }
    ],
    "3812966": [
        {
            "dateadded": "2026-04-06 13:28:11 UTC",
            "url": "https://decision-svc.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812966/",
            "reporter": "anonymous"
        }
    ],
    "3812965": [
        {
            "dateadded": "2026-04-06 13:25:11 UTC",
            "url": "https://calc-logic.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812965/",
            "reporter": "anonymous"
        }
    ],
    "3812964": [
        {
            "dateadded": "2026-04-06 13:14:12 UTC",
            "url": "https://clear-head.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812964/",
            "reporter": "anonymous"
        }
    ],
    "3812963": [
        {
            "dateadded": "2026-04-06 13:12:16 UTC",
            "url": "http://115.50.19.26:57470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812963/",
            "reporter": "geenensp"
        }
    ],
    "3812962": [
        {
            "dateadded": "2026-04-06 13:08:10 UTC",
            "url": "https://think-tank.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812962/",
            "reporter": "anonymous"
        }
    ],
    "3812961": [
        {
            "dateadded": "2026-04-06 13:02:11 UTC",
            "url": "https://smart-node.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 13:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812961/",
            "reporter": "anonymous"
        }
    ],
    "3812960": [
        {
            "dateadded": "2026-04-06 13:02:09 UTC",
            "url": "http://42.225.207.134:34110/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812960/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812959": [
        {
            "dateadded": "2026-04-06 12:57:19 UTC",
            "url": "http://42.239.228.215:43855/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812959/",
            "reporter": "geenensp"
        }
    ],
    "3812958": [
        {
            "dateadded": "2026-04-06 12:54:18 UTC",
            "url": "https://ratio-point.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812958/",
            "reporter": "anonymous"
        }
    ],
    "3812957": [
        {
            "dateadded": "2026-04-06 12:52:07 UTC",
            "url": "http://221.15.188.139:39201/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:19:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812957/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812956": [
        {
            "dateadded": "2026-04-06 12:48:20 UTC",
            "url": "http://77.247.92.213:44773/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:46:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812956/",
            "reporter": "geenensp"
        }
    ],
    "3812955": [
        {
            "dateadded": "2026-04-06 12:47:19 UTC",
            "url": "https://perception-svc.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:47:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812955/",
            "reporter": "anonymous"
        }
    ],
    "3812954": [
        {
            "dateadded": "2026-04-06 12:47:09 UTC",
            "url": "http://110.36.86.83:36165/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812954/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812953": [
        {
            "dateadded": "2026-04-06 12:46:19 UTC",
            "url": "http://222.141.76.148:46506/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812953/",
            "reporter": "geenensp"
        }
    ],
    "3812952": [
        {
            "dateadded": "2026-04-06 12:46:09 UTC",
            "url": "http://117.26.110.198:38787/i",
            "url_status": "offline",
            "last_online": "2026-04-11 08:46:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812952/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812951": [
        {
            "dateadded": "2026-04-06 12:42:11 UTC",
            "url": "https://sense-data.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812951/",
            "reporter": "anonymous"
        }
    ],
    "3812950": [
        {
            "dateadded": "2026-04-06 12:35:41 UTC",
            "url": "https://mind-web.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812950/",
            "reporter": "anonymous"
        }
    ],
    "3812949": [
        {
            "dateadded": "2026-04-06 12:28:29 UTC",
            "url": "https://neural-link.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:28:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812949/",
            "reporter": "anonymous"
        }
    ],
    "3812948": [
        {
            "dateadded": "2026-04-06 12:26:17 UTC",
            "url": "http://222.141.76.148:46506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812948/",
            "reporter": "geenensp"
        }
    ],
    "3812947": [
        {
            "dateadded": "2026-04-06 12:25:16 UTC",
            "url": "https://thought-api.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812947/",
            "reporter": "anonymous"
        }
    ],
    "3812946": [
        {
            "dateadded": "2026-04-06 12:18:21 UTC",
            "url": "http://222.134.172.113:52901/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 12:18:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812946/",
            "reporter": "geenensp"
        }
    ],
    "3812945": [
        {
            "dateadded": "2026-04-06 12:13:09 UTC",
            "url": "https://brain-weave.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812945/",
            "reporter": "anonymous"
        }
    ],
    "3812944": [
        {
            "dateadded": "2026-04-06 12:06:09 UTC",
            "url": "https://line-secure.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812944/",
            "reporter": "anonymous"
        }
    ],
    "3812943": [
        {
            "dateadded": "2026-04-06 12:02:22 UTC",
            "url": "http://27.219.44.243:56059/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812943/",
            "reporter": "geenensp"
        }
    ],
    "3812942": [
        {
            "dateadded": "2026-04-06 12:00:16 UTC",
            "url": "https://archive-hub.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 12:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812942/",
            "reporter": "anonymous"
        }
    ],
    "3812941": [
        {
            "dateadded": "2026-04-06 11:57:08 UTC",
            "url": "http://125.43.231.44:51959/i",
            "url_status": "offline",
            "last_online": "2026-04-08 03:58:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812941/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812940": [
        {
            "dateadded": "2026-04-06 11:57:07 UTC",
            "url": "http://27.219.44.243:56059/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812940/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812939": [
        {
            "dateadded": "2026-04-06 11:55:38 UTC",
            "url": "http://119.116.156.123:36974/i",
            "url_status": "offline",
            "last_online": "2026-04-13 04:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812939/",
            "reporter": "geenensp"
        }
    ],
    "3812938": [
        {
            "dateadded": "2026-04-06 11:51:11 UTC",
            "url": "https://file-stack.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 11:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812938/",
            "reporter": "anonymous"
        }
    ],
    "3812937": [
        {
            "dateadded": "2026-04-06 11:42:13 UTC",
            "url": "https://rank-index.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 11:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812937/",
            "reporter": "anonymous"
        }
    ],
    "3812936": [
        {
            "dateadded": "2026-04-06 11:42:04 UTC",
            "url": "http://85.239.147.6/files/8301037712/W2hGvST.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812936/",
            "reporter": "c2hunter"
        }
    ],
    "3812935": [
        {
            "dateadded": "2026-04-06 11:34:09 UTC",
            "url": "https://step-monitor.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 11:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812935/",
            "reporter": "anonymous"
        }
    ],
    "3812934": [
        {
            "dateadded": "2026-04-06 11:33:08 UTC",
            "url": "http://123.5.144.209:59574/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:47:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812934/",
            "reporter": "geenensp"
        }
    ],
    "3812933": [
        {
            "dateadded": "2026-04-06 11:31:18 UTC",
            "url": "http://222.127.49.242:47506/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:08:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812933/",
            "reporter": "geenensp"
        }
    ],
    "3812932": [
        {
            "dateadded": "2026-04-06 11:29:16 UTC",
            "url": "https://www.globalchat.site/download/DiagETLUpdate_Installer.exe",
            "url_status": "offline",
            "last_online": "2026-04-09 22:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812932/",
            "reporter": "Bitsight"
        }
    ],
    "3812931": [
        {
            "dateadded": "2026-04-06 11:28:18 UTC",
            "url": "http://119.116.156.123:36974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:49:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812931/",
            "reporter": "geenensp"
        }
    ],
    "3812930": [
        {
            "dateadded": "2026-04-06 11:24:09 UTC",
            "url": "https://order-logic.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 11:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812930/",
            "reporter": "anonymous"
        }
    ],
    "3812929": [
        {
            "dateadded": "2026-04-06 11:22:15 UTC",
            "url": "http://110.39.231.61:54977/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812929/",
            "reporter": "geenensp"
        }
    ],
    "3812928": [
        {
            "dateadded": "2026-04-06 11:17:07 UTC",
            "url": "http://36.64.184.26:53971/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812928/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812927": [
        {
            "dateadded": "2026-04-06 11:16:15 UTC",
            "url": "https://frame-api.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 11:16:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812927/",
            "reporter": "anonymous"
        }
    ],
    "3812926": [
        {
            "dateadded": "2026-04-06 11:14:22 UTC",
            "url": "http://110.39.231.61:54977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:45:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812926/",
            "reporter": "geenensp"
        }
    ],
    "3812925": [
        {
            "dateadded": "2026-04-06 11:07:11 UTC",
            "url": "https://space-time.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 11:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812925/",
            "reporter": "anonymous"
        }
    ],
    "3812924": [
        {
            "dateadded": "2026-04-06 11:05:20 UTC",
            "url": "http://123.5.144.209:59574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:24:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812924/",
            "reporter": "geenensp"
        }
    ],
    "3812923": [
        {
            "dateadded": "2026-04-06 11:03:18 UTC",
            "url": "http://27.215.78.22:53458/i",
            "url_status": "offline",
            "last_online": "2026-04-06 11:03:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812923/",
            "reporter": "geenensp"
        }
    ],
    "3812922": [
        {
            "dateadded": "2026-04-06 10:59:15 UTC",
            "url": "https://ideal-node.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812922/",
            "reporter": "anonymous"
        }
    ],
    "3812921": [
        {
            "dateadded": "2026-04-06 10:50:15 UTC",
            "url": "https://map-project.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:50:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812921/",
            "reporter": "anonymous"
        }
    ],
    "3812920": [
        {
            "dateadded": "2026-04-06 10:49:10 UTC",
            "url": "http://222.134.172.113:52901/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812920/",
            "reporter": "geenensp"
        }
    ],
    "3812919": [
        {
            "dateadded": "2026-04-06 10:42:08 UTC",
            "url": "http://42.233.135.87:50617/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:08:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812919/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812918": [
        {
            "dateadded": "2026-04-06 10:41:14 UTC",
            "url": "https://model-check.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812918/",
            "reporter": "anonymous"
        }
    ],
    "3812917": [
        {
            "dateadded": "2026-04-06 10:39:08 UTC",
            "url": "http://42.233.146.190:46363/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:43:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812917/",
            "reporter": "geenensp"
        }
    ],
    "3812916": [
        {
            "dateadded": "2026-04-06 10:37:06 UTC",
            "url": "http://77.247.93.65:52411/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812916/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812915": [
        {
            "dateadded": "2026-04-06 10:35:19 UTC",
            "url": "http://113.237.163.179:53077/i",
            "url_status": "offline",
            "last_online": "2026-04-20 12:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812915/",
            "reporter": "geenensp"
        }
    ],
    "3812914": [
        {
            "dateadded": "2026-04-06 10:34:09 UTC",
            "url": "http://61.53.121.243:49826/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:02:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812914/",
            "reporter": "geenensp"
        }
    ],
    "3812913": [
        {
            "dateadded": "2026-04-06 10:33:10 UTC",
            "url": "https://abstract-io.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812913/",
            "reporter": "anonymous"
        }
    ],
    "3812912": [
        {
            "dateadded": "2026-04-06 10:32:14 UTC",
            "url": "http://110.37.44.158:40192/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812912/",
            "reporter": "geenensp"
        }
    ],
    "3812911": [
        {
            "dateadded": "2026-04-06 10:26:20 UTC",
            "url": "http://61.53.121.243:49826/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812911/",
            "reporter": "geenensp"
        }
    ],
    "3812910": [
        {
            "dateadded": "2026-04-06 10:26:18 UTC",
            "url": "http://38.60.216.39/bins/spc",
            "url_status": "offline",
            "last_online": "2026-04-06 16:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812910/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812909": [
        {
            "dateadded": "2026-04-06 10:25:55 UTC",
            "url": "http://180.190.185.44:41568/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:25:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812909/",
            "reporter": "geenensp"
        }
    ],
    "3812908": [
        {
            "dateadded": "2026-04-06 10:25:41 UTC",
            "url": "http://112.248.80.3:56840/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:00:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812908/",
            "reporter": "geenensp"
        }
    ],
    "3812907": [
        {
            "dateadded": "2026-04-06 10:24:15 UTC",
            "url": "https://step-wise.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812907/",
            "reporter": "anonymous"
        }
    ],
    "3812906": [
        {
            "dateadded": "2026-04-06 10:15:20 UTC",
            "url": "http://113.237.163.179:53077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 10:54:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812906/",
            "reporter": "geenensp"
        }
    ],
    "3812905": [
        {
            "dateadded": "2026-04-06 10:15:16 UTC",
            "url": "https://guess-node.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812905/",
            "reporter": "anonymous"
        }
    ],
    "3812904": [
        {
            "dateadded": "2026-04-06 10:12:29 UTC",
            "url": "http://182.126.127.252:33249/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:08:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812904/",
            "reporter": "geenensp"
        }
    ],
    "3812902": [
        {
            "dateadded": "2026-04-06 10:12:08 UTC",
            "url": "http://77.247.93.65:52411/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:28:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812902/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812903": [
        {
            "dateadded": "2026-04-06 10:12:08 UTC",
            "url": "http://27.215.180.207:40674/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 23:12:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812903/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812901": [
        {
            "dateadded": "2026-04-06 10:11:21 UTC",
            "url": "http://113.228.145.25:59275/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812901/",
            "reporter": "geenensp"
        }
    ],
    "3812900": [
        {
            "dateadded": "2026-04-06 10:07:15 UTC",
            "url": "https://hint-api.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 10:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812900/",
            "reporter": "anonymous"
        }
    ],
    "3812899": [
        {
            "dateadded": "2026-04-06 10:04:22 UTC",
            "url": "http://110.37.44.158:40192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 03:50:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812899/",
            "reporter": "geenensp"
        }
    ],
    "3812898": [
        {
            "dateadded": "2026-04-06 09:58:15 UTC",
            "url": "https://logic-vault.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:58:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812898/",
            "reporter": "anonymous"
        }
    ],
    "3812897": [
        {
            "dateadded": "2026-04-06 09:54:21 UTC",
            "url": "http://77.245.107.223:46005/i",
            "url_status": "offline",
            "last_online": "2026-04-20 00:06:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812897/",
            "reporter": "geenensp"
        }
    ],
    "3812896": [
        {
            "dateadded": "2026-04-06 09:54:13 UTC",
            "url": "https://lead-trace.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812896/",
            "reporter": "anonymous"
        }
    ],
    "3812895": [
        {
            "dateadded": "2026-04-06 09:52:07 UTC",
            "url": "http://27.207.223.164:48104/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:31:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812895/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812894": [
        {
            "dateadded": "2026-04-06 09:42:07 UTC",
            "url": "http://115.50.0.146:40185/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812894/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812893": [
        {
            "dateadded": "2026-04-06 09:41:14 UTC",
            "url": "https://infer-unit.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812893/",
            "reporter": "anonymous"
        }
    ],
    "3812892": [
        {
            "dateadded": "2026-04-06 09:33:23 UTC",
            "url": "http://123.5.190.43:37039/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812892/",
            "reporter": "geenensp"
        }
    ],
    "3812891": [
        {
            "dateadded": "2026-04-06 09:32:12 UTC",
            "url": "https://motion-svc.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812891/",
            "reporter": "anonymous"
        }
    ],
    "3812890": [
        {
            "dateadded": "2026-04-06 09:32:10 UTC",
            "url": "http://115.49.65.222:44369/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:30:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812890/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812889": [
        {
            "dateadded": "2026-04-06 09:29:17 UTC",
            "url": "http://120.28.119.54:35214/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 05:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812889/",
            "reporter": "geenensp"
        }
    ],
    "3812888": [
        {
            "dateadded": "2026-04-06 09:26:18 UTC",
            "url": "http://221.15.190.3:51751/i",
            "url_status": "offline",
            "last_online": "2026-04-10 15:56:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812888/",
            "reporter": "geenensp"
        }
    ],
    "3812887": [
        {
            "dateadded": "2026-04-06 09:23:10 UTC",
            "url": "https://shift-point.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812887/",
            "reporter": "anonymous"
        }
    ],
    "3812886": [
        {
            "dateadded": "2026-04-06 09:22:06 UTC",
            "url": "http://27.207.223.164:48104/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:02:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812886/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812885": [
        {
            "dateadded": "2026-04-06 09:20:09 UTC",
            "url": "https://debate-log.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812885/",
            "reporter": "anonymous"
        }
    ],
    "3812884": [
        {
            "dateadded": "2026-04-06 09:19:13 UTC",
            "url": "http://61.53.159.99:45804/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812884/",
            "reporter": "geenensp"
        }
    ],
    "3812883": [
        {
            "dateadded": "2026-04-06 09:17:07 UTC",
            "url": "http://125.24.7.61:38015/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812883/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812882": [
        {
            "dateadded": "2026-04-06 09:10:21 UTC",
            "url": "http://123.5.190.43:37039/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:52:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812882/",
            "reporter": "geenensp"
        }
    ],
    "3812881": [
        {
            "dateadded": "2026-04-06 09:10:12 UTC",
            "url": "https://synth-portal.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812881/",
            "reporter": "anonymous"
        }
    ],
    "3812880": [
        {
            "dateadded": "2026-04-06 09:09:16 UTC",
            "url": "http://219.157.155.139:60064/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812880/",
            "reporter": "geenensp"
        }
    ],
    "3812879": [
        {
            "dateadded": "2026-04-06 09:02:10 UTC",
            "url": "https://anti-node.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 09:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812879/",
            "reporter": "anonymous"
        }
    ],
    "3812878": [
        {
            "dateadded": "2026-04-06 09:01:20 UTC",
            "url": "http://221.15.190.3:51751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 09:57:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812878/",
            "reporter": "geenensp"
        }
    ],
    "3812877": [
        {
            "dateadded": "2026-04-06 08:58:18 UTC",
            "url": "http://115.58.96.190:59697/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:08:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812877/",
            "reporter": "geenensp"
        }
    ],
    "3812876": [
        {
            "dateadded": "2026-04-06 08:54:21 UTC",
            "url": "http://61.3.19.69:37002/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 11:05:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812876/",
            "reporter": "geenensp"
        }
    ],
    "3812875": [
        {
            "dateadded": "2026-04-06 08:54:18 UTC",
            "url": "http://85.12.205.35:36010/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812875/",
            "reporter": "geenensp"
        }
    ],
    "3812874": [
        {
            "dateadded": "2026-04-06 08:53:10 UTC",
            "url": "https://thesis-sync.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812874/",
            "reporter": "anonymous"
        }
    ],
    "3812873": [
        {
            "dateadded": "2026-04-06 08:50:13 UTC",
            "url": "http://61.53.159.99:45804/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812873/",
            "reporter": "geenensp"
        }
    ],
    "3812872": [
        {
            "dateadded": "2026-04-06 08:48:10 UTC",
            "url": "http://37.52.149.207:41857/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812872/",
            "reporter": "geenensp"
        }
    ],
    "3812871": [
        {
            "dateadded": "2026-04-06 08:46:12 UTC",
            "url": "https://github.com/l44443934-ui/aa/raw/refs/heads/main/hey.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:04 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812871/",
            "reporter": "abuse_ch"
        }
    ],
    "3812870": [
        {
            "dateadded": "2026-04-06 08:46:10 UTC",
            "url": "https://github.com/l44443934-ui/99/raw/refs/heads/main/VIolet.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:28 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812870/",
            "reporter": "abuse_ch"
        }
    ],
    "3812869": [
        {
            "dateadded": "2026-04-06 08:46:09 UTC",
            "url": "https://github.com/l44443934-ui/aaaa/raw/refs/heads/main/hey.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:42 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812869/",
            "reporter": "abuse_ch"
        }
    ],
    "3812867": [
        {
            "dateadded": "2026-04-06 08:46:08 UTC",
            "url": "https://github.com/l44443934-ui/Violet/raw/refs/heads/main/Violet.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:54 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812867/",
            "reporter": "abuse_ch"
        }
    ],
    "3812868": [
        {
            "dateadded": "2026-04-06 08:46:08 UTC",
            "url": "https://github.com/l44443934-ui/app/raw/refs/heads/main/Violet.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:58:27 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812868/",
            "reporter": "abuse_ch"
        }
    ],
    "3812866": [
        {
            "dateadded": "2026-04-06 08:45:12 UTC",
            "url": "http://42.224.125.106:45381/i",
            "url_status": "offline",
            "last_online": "2026-04-06 08:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812866/",
            "reporter": "geenensp"
        }
    ],
    "3812865": [
        {
            "dateadded": "2026-04-06 08:44:16 UTC",
            "url": "https://cccimg.com/down.php/4e950740bf977e9c89d48cd323c3c0b2.bat",
            "url_status": "offline",
            "last_online": "2026-04-06 08:44:16 UTC",
            "threat": "malware_download",
            "tags": [
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812865/",
            "reporter": "abuse_ch"
        }
    ],
    "3812864": [
        {
            "dateadded": "2026-04-06 08:44:08 UTC",
            "url": "https://law-check.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812864/",
            "reporter": "anonymous"
        }
    ],
    "3812862": [
        {
            "dateadded": "2026-04-06 08:44:07 UTC",
            "url": "https://raw.githubusercontent.com/l44443934-ui/aaa/refs/heads/main/he.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:03 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812862/",
            "reporter": "abuse_ch"
        }
    ],
    "3812863": [
        {
            "dateadded": "2026-04-06 08:44:07 UTC",
            "url": "https://github.com/l44443934-ui/aaa/raw/refs/heads/main/he.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "VioletWorm"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812863/",
            "reporter": "abuse_ch"
        }
    ],
    "3812861": [
        {
            "dateadded": "2026-04-06 08:40:14 UTC",
            "url": "http://182.119.67.122:40997/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:39:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812861/",
            "reporter": "geenensp"
        }
    ],
    "3812860": [
        {
            "dateadded": "2026-04-06 08:38:16 UTC",
            "url": "http://77.245.107.223:46005/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-19 23:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812860/",
            "reporter": "geenensp"
        }
    ],
    "3812859": [
        {
            "dateadded": "2026-04-06 08:37:09 UTC",
            "url": "https://msedge.vg",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "CountLoader",
                "dropping-LummaStealer",
                "hta",
                "ua-mshta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812859/",
            "reporter": "abuse_ch"
        }
    ],
    "3812858": [
        {
            "dateadded": "2026-04-06 08:36:08 UTC",
            "url": "http://62.60.226.159/ability_3759.42.6_INSTALL.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 18:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812858/",
            "reporter": "abuse_ch"
        }
    ],
    "3812857": [
        {
            "dateadded": "2026-04-06 08:36:07 UTC",
            "url": "http://62.60.226.159/xy.exe",
            "url_status": "offline",
            "last_online": "2026-04-22 16:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Stealc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812857/",
            "reporter": "abuse_ch"
        }
    ],
    "3812856": [
        {
            "dateadded": "2026-04-06 08:35:09 UTC",
            "url": "https://base-matrix.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812856/",
            "reporter": "anonymous"
        }
    ],
    "3812855": [
        {
            "dateadded": "2026-04-06 08:26:09 UTC",
            "url": "https://fixed-point.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812855/",
            "reporter": "anonymous"
        }
    ],
    "3812854": [
        {
            "dateadded": "2026-04-06 08:23:09 UTC",
            "url": "https://msgrouppolicy.vg/",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "CountLoader",
                "dropping-LummaStealer",
                "hta",
                "ua-mshta"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812854/",
            "reporter": "abuse_ch"
        }
    ],
    "3812853": [
        {
            "dateadded": "2026-04-06 08:22:07 UTC",
            "url": "http://125.45.64.192:59623/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812853/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812852": [
        {
            "dateadded": "2026-04-06 08:20:19 UTC",
            "url": "http://37.52.149.207:41857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:49:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812852/",
            "reporter": "geenensp"
        }
    ],
    "3812851": [
        {
            "dateadded": "2026-04-06 08:19:07 UTC",
            "url": "https://mesh-static.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812851/",
            "reporter": "anonymous"
        }
    ],
    "3812848": [
        {
            "dateadded": "2026-04-06 08:13:25 UTC",
            "url": "http://82.25.56.112/cali.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-06 10:10:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812848/",
            "reporter": "abuse_ch"
        }
    ],
    "3812849": [
        {
            "dateadded": "2026-04-06 08:13:25 UTC",
            "url": "http://83.168.110.191/iran.armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812849/",
            "reporter": "abuse_ch"
        }
    ],
    "3812850": [
        {
            "dateadded": "2026-04-06 08:13:25 UTC",
            "url": "http://38.60.216.39/iran.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-06 15:41:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812850/",
            "reporter": "abuse_ch"
        }
    ],
    "3812843": [
        {
            "dateadded": "2026-04-06 08:13:22 UTC",
            "url": "http://83.168.110.191/iran.armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812843/",
            "reporter": "abuse_ch"
        }
    ],
    "3812844": [
        {
            "dateadded": "2026-04-06 08:13:22 UTC",
            "url": "http://82.25.56.112/cali.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-06 09:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812844/",
            "reporter": "abuse_ch"
        }
    ],
    "3812845": [
        {
            "dateadded": "2026-04-06 08:13:22 UTC",
            "url": "http://82.25.56.112/cali.sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 10:07:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812845/",
            "reporter": "abuse_ch"
        }
    ],
    "3812846": [
        {
            "dateadded": "2026-04-06 08:13:22 UTC",
            "url": "http://83.168.110.191/iran.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812846/",
            "reporter": "abuse_ch"
        }
    ],
    "3812847": [
        {
            "dateadded": "2026-04-06 08:13:22 UTC",
            "url": "http://83.168.110.191/iran.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812847/",
            "reporter": "abuse_ch"
        }
    ],
    "3812820": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.i486",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812820/",
            "reporter": "abuse_ch"
        }
    ],
    "3812821": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.armv6l",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812821/",
            "reporter": "abuse_ch"
        }
    ],
    "3812822": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-06 08:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812822/",
            "reporter": "abuse_ch"
        }
    ],
    "3812823": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://38.60.216.39/iran.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-06 17:07:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812823/",
            "reporter": "abuse_ch"
        }
    ],
    "3812824": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.mips",
            "url_status": "offline",
            "last_online": "2026-04-06 08:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812824/",
            "reporter": "abuse_ch"
        }
    ],
    "3812825": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.x86",
            "url_status": "offline",
            "last_online": "2026-04-06 10:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812825/",
            "reporter": "abuse_ch"
        }
    ],
    "3812826": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-06 09:47:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812826/",
            "reporter": "abuse_ch"
        }
    ],
    "3812827": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812827/",
            "reporter": "abuse_ch"
        }
    ],
    "3812828": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.sparc",
            "url_status": "offline",
            "last_online": "2026-04-06 08:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812828/",
            "reporter": "abuse_ch"
        }
    ],
    "3812829": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://42.224.125.106:45381/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 08:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812829/",
            "reporter": "geenensp"
        }
    ],
    "3812830": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.armv5l",
            "url_status": "offline",
            "last_online": "2026-04-06 10:15:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812830/",
            "reporter": "abuse_ch"
        }
    ],
    "3812831": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812831/",
            "reporter": "abuse_ch"
        }
    ],
    "3812832": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812832/",
            "reporter": "abuse_ch"
        }
    ],
    "3812833": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.armv7l",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812833/",
            "reporter": "abuse_ch"
        }
    ],
    "3812834": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://38.60.216.39/iran.m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 16:27:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812834/",
            "reporter": "abuse_ch"
        }
    ],
    "3812835": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.aarch64",
            "url_status": "online",
            "last_online": "2026-04-27 11:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812835/",
            "reporter": "abuse_ch"
        }
    ],
    "3812836": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://38.60.216.39/iran.i486",
            "url_status": "offline",
            "last_online": "2026-04-06 16:34:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812836/",
            "reporter": "abuse_ch"
        }
    ],
    "3812837": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://38.60.216.39/iran.mips",
            "url_status": "offline",
            "last_online": "2026-04-06 16:41:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812837/",
            "reporter": "abuse_ch"
        }
    ],
    "3812838": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:15:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812838/",
            "reporter": "abuse_ch"
        }
    ],
    "3812839": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://38.60.216.39/iran.sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 16:53:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812839/",
            "reporter": "abuse_ch"
        }
    ],
    "3812840": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://82.25.56.112/cali.m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 08:13:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812840/",
            "reporter": "abuse_ch"
        }
    ],
    "3812841": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://83.168.110.191/iran.sparc",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812841/",
            "reporter": "abuse_ch"
        }
    ],
    "3812842": [
        {
            "dateadded": "2026-04-06 08:13:21 UTC",
            "url": "http://38.60.216.39/iran.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-06 16:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812842/",
            "reporter": "abuse_ch"
        }
    ],
    "3812814": [
        {
            "dateadded": "2026-04-06 08:13:16 UTC",
            "url": "http://38.60.216.39/iran.armv6l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812814/",
            "reporter": "abuse_ch"
        }
    ],
    "3812815": [
        {
            "dateadded": "2026-04-06 08:13:16 UTC",
            "url": "http://38.60.216.39/iran.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812815/",
            "reporter": "abuse_ch"
        }
    ],
    "3812816": [
        {
            "dateadded": "2026-04-06 08:13:16 UTC",
            "url": "http://38.60.216.39/iran.armv7l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812816/",
            "reporter": "abuse_ch"
        }
    ],
    "3812817": [
        {
            "dateadded": "2026-04-06 08:13:16 UTC",
            "url": "http://38.60.216.39/iran.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812817/",
            "reporter": "abuse_ch"
        }
    ],
    "3812818": [
        {
            "dateadded": "2026-04-06 08:13:16 UTC",
            "url": "http://82.25.56.112/cali.powerpc-440fp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812818/",
            "reporter": "abuse_ch"
        }
    ],
    "3812819": [
        {
            "dateadded": "2026-04-06 08:13:16 UTC",
            "url": "http://38.60.216.39/iran.armv4l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812819/",
            "reporter": "abuse_ch"
        }
    ],
    "3812810": [
        {
            "dateadded": "2026-04-06 08:13:13 UTC",
            "url": "http://82.25.56.112/cali.i686",
            "url_status": "offline",
            "last_online": "2026-04-06 09:59:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812810/",
            "reporter": "abuse_ch"
        }
    ],
    "3812811": [
        {
            "dateadded": "2026-04-06 08:13:13 UTC",
            "url": "http://82.25.56.112/cali.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-06 10:18:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812811/",
            "reporter": "abuse_ch"
        }
    ],
    "3812812": [
        {
            "dateadded": "2026-04-06 08:13:13 UTC",
            "url": "http://83.168.110.191/iran.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812812/",
            "reporter": "abuse_ch"
        }
    ],
    "3812813": [
        {
            "dateadded": "2026-04-06 08:13:13 UTC",
            "url": "http://82.25.56.112/cali.i586",
            "url_status": "offline",
            "last_online": "2026-04-06 08:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812813/",
            "reporter": "abuse_ch"
        }
    ],
    "3812808": [
        {
            "dateadded": "2026-04-06 08:13:12 UTC",
            "url": "http://38.60.216.39/iran.armv5l",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812808/",
            "reporter": "abuse_ch"
        }
    ],
    "3812809": [
        {
            "dateadded": "2026-04-06 08:13:12 UTC",
            "url": "http://38.60.216.39/iran.powerpc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812809/",
            "reporter": "abuse_ch"
        }
    ],
    "3812807": [
        {
            "dateadded": "2026-04-06 08:12:17 UTC",
            "url": "http://182.121.170.242:52377/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:01:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812807/",
            "reporter": "geenensp"
        }
    ],
    "3812806": [
        {
            "dateadded": "2026-04-06 08:09:08 UTC",
            "url": "https://core-logic.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812806/",
            "reporter": "anonymous"
        }
    ],
    "3812805": [
        {
            "dateadded": "2026-04-06 08:06:11 UTC",
            "url": "http://182.115.161.184:52519/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812805/",
            "reporter": "geenensp"
        }
    ],
    "3812804": [
        {
            "dateadded": "2026-04-06 08:03:15 UTC",
            "url": "http://110.36.19.101:49274/i",
            "url_status": "offline",
            "last_online": "2026-04-08 13:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812804/",
            "reporter": "geenensp"
        }
    ],
    "3812803": [
        {
            "dateadded": "2026-04-06 08:03:14 UTC",
            "url": "http://89.190.156.14/bins/mao.i686",
            "url_status": "offline",
            "last_online": "2026-04-18 05:01:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812803/",
            "reporter": "abuse_ch"
        }
    ],
    "3812794": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-18 04:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812794/",
            "reporter": "abuse_ch"
        }
    ],
    "3812795": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.spc",
            "url_status": "offline",
            "last_online": "2026-04-18 05:59:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812795/",
            "reporter": "abuse_ch"
        }
    ],
    "3812796": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.m68k",
            "url_status": "offline",
            "last_online": "2026-04-18 04:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812796/",
            "reporter": "abuse_ch"
        }
    ],
    "3812797": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-18 05:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812797/",
            "reporter": "abuse_ch"
        }
    ],
    "3812798": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.i486",
            "url_status": "offline",
            "last_online": "2026-04-18 04:40:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812798/",
            "reporter": "abuse_ch"
        }
    ],
    "3812799": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.ppc",
            "url_status": "offline",
            "last_online": "2026-04-18 05:12:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812799/",
            "reporter": "abuse_ch"
        }
    ],
    "3812800": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.sh4",
            "url_status": "offline",
            "last_online": "2026-04-18 04:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812800/",
            "reporter": "abuse_ch"
        }
    ],
    "3812801": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://89.190.156.14/bins/mao.arm",
            "url_status": "offline",
            "last_online": "2026-04-18 05:45:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812801/",
            "reporter": "abuse_ch"
        }
    ],
    "3812802": [
        {
            "dateadded": "2026-04-06 08:02:13 UTC",
            "url": "http://39.74.49.202:57888/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812802/",
            "reporter": "geenensp"
        }
    ],
    "3812793": [
        {
            "dateadded": "2026-04-06 08:02:08 UTC",
            "url": "https://rule-set.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 08:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812793/",
            "reporter": "anonymous"
        }
    ],
    "3812787": [
        {
            "dateadded": "2026-04-06 08:02:07 UTC",
            "url": "http://89.190.156.14/bins/mao.mips",
            "url_status": "offline",
            "last_online": "2026-04-18 05:26:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812787/",
            "reporter": "abuse_ch"
        }
    ],
    "3812788": [
        {
            "dateadded": "2026-04-06 08:02:07 UTC",
            "url": "http://89.190.156.14/bins/mao.arm5",
            "url_status": "offline",
            "last_online": "2026-04-18 04:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812788/",
            "reporter": "abuse_ch"
        }
    ],
    "3812789": [
        {
            "dateadded": "2026-04-06 08:02:07 UTC",
            "url": "http://89.190.156.14/bins/mao.arm6",
            "url_status": "offline",
            "last_online": "2026-04-18 05:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812789/",
            "reporter": "abuse_ch"
        }
    ],
    "3812790": [
        {
            "dateadded": "2026-04-06 08:02:07 UTC",
            "url": "http://89.190.156.14/bins/mao.x86",
            "url_status": "offline",
            "last_online": "2026-04-18 05:14:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812790/",
            "reporter": "abuse_ch"
        }
    ],
    "3812791": [
        {
            "dateadded": "2026-04-06 08:02:07 UTC",
            "url": "http://89.190.156.14/bins/mao.arm7",
            "url_status": "offline",
            "last_online": "2026-04-18 04:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812791/",
            "reporter": "abuse_ch"
        }
    ],
    "3812792": [
        {
            "dateadded": "2026-04-06 08:02:07 UTC",
            "url": "http://89.190.156.14/bins/mao.arc",
            "url_status": "offline",
            "last_online": "2026-04-18 04:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812792/",
            "reporter": "abuse_ch"
        }
    ],
    "3812786": [
        {
            "dateadded": "2026-04-06 08:02:05 UTC",
            "url": "https://release-assets.githubusercontent.com/github-production-release-asset/1201672648/2630ced6-3c20-444a-9e9c-5ea38846399c?sp=r&sv=2018-11-09&sr=b&spr=https&se=2026-04-06T08%3A27%3A39Z&rscd=attachment%3B+filename%3Dfile.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812786/",
            "reporter": "Bitsight"
        }
    ],
    "3812785": [
        {
            "dateadded": "2026-04-06 08:01:33 UTC",
            "url": "https://e-ifanyi.com/%E7%88%B1%E7%BF%BB%E8%AF%91-20260404.rar",
            "url_status": "offline",
            "last_online": "2026-04-06 08:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "keylogger",
                "MalwareX",
                "shellcode"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812785/",
            "reporter": "Ling"
        }
    ],
    "3812782": [
        {
            "dateadded": "2026-04-06 08:00:18 UTC",
            "url": "https://paper.recentbox.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-06 08:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: DivineX",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812782/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3812781": [
        {
            "dateadded": "2026-04-06 08:00:17 UTC",
            "url": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/7f201bfb1_DonutMoneyDisplay-100.jar",
            "url_status": "offline",
            "last_online": "2026-04-09 11:11:33 UTC",
            "threat": "malware_download",
            "tags": [
                "AdamRAT",
                "jar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812781/",
            "reporter": "burger"
        }
    ],
    "3812780": [
        {
            "dateadded": "2026-04-06 08:00:15 UTC",
            "url": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/733184ba4_gambling-rig-121x2.jar",
            "url_status": "offline",
            "last_online": "2026-04-09 10:39:33 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "rat",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812780/",
            "reporter": "burger"
        }
    ],
    "3812776": [
        {
            "dateadded": "2026-04-06 08:00:14 UTC",
            "url": "https://cdnlivechatinc.com/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "LiveChatCDN",
                "magecart",
                "magento",
                "skimmer",
                "stripe-overlay"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812776/",
            "reporter": "ander3024"
        }
    ],
    "3812777": [
        {
            "dateadded": "2026-04-06 08:00:14 UTC",
            "url": "https://cdnlivechatinc.com/ws",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "LiveChatCDN",
                "magecart",
                "magento",
                "skimmer",
                "stripe-overlay"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812777/",
            "reporter": "ander3024"
        }
    ],
    "3812778": [
        {
            "dateadded": "2026-04-06 08:00:14 UTC",
            "url": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/37360cb4e_Dupe.jar",
            "url_status": "offline",
            "last_online": "2026-04-09 10:09:52 UTC",
            "threat": "malware_download",
            "tags": [
                "AdamRAT",
                "jar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812778/",
            "reporter": "burger"
        }
    ],
    "3812779": [
        {
            "dateadded": "2026-04-06 08:00:14 UTC",
            "url": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/b595cccce_donutExtras-131219.jar",
            "url_status": "offline",
            "last_online": "2026-04-09 10:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "AdamRAT",
                "jar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812779/",
            "reporter": "burger"
        }
    ],
    "3812775": [
        {
            "dateadded": "2026-04-06 08:00:10 UTC",
            "url": "https://bot.cdnlivechatinc.com/",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "LiveChatCDN",
                "magecart",
                "magento",
                "skimmer",
                "stripe-overlay"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812775/",
            "reporter": "ander3024"
        }
    ],
    "3812773": [
        {
            "dateadded": "2026-04-06 08:00:09 UTC",
            "url": "http://38.60.216.39/minecraft.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812773/",
            "reporter": "geenensp"
        }
    ],
    "3812774": [
        {
            "dateadded": "2026-04-06 08:00:09 UTC",
            "url": "http://83.168.110.191/cat.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812774/",
            "reporter": "geenensp"
        }
    ],
    "3812772": [
        {
            "dateadded": "2026-04-06 08:00:08 UTC",
            "url": "http://110.37.120.17:43996/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812772/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812771": [
        {
            "dateadded": "2026-04-06 07:59:47 UTC",
            "url": "https://top.recentbox.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password: dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812771/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3812766": [
        {
            "dateadded": "2026-04-06 07:59:24 UTC",
            "url": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/CatLean-1.21.11.jar",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812766/",
            "reporter": "burger"
        }
    ],
    "3812767": [
        {
            "dateadded": "2026-04-06 07:59:24 UTC",
            "url": "https://ok-vsefotki.online/?download=1",
            "url_status": "offline",
            "last_online": "2026-04-23 16:52:31 UTC",
            "threat": "malware_download",
            "tags": [
                "apk ",
                "mamont"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812767/",
            "reporter": "SanchoZZ"
        }
    ],
    "3812769": [
        {
            "dateadded": "2026-04-06 07:59:24 UTC",
            "url": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Krypton_Client-1.21.11.jar",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812769/",
            "reporter": "burger"
        }
    ],
    "3812770": [
        {
            "dateadded": "2026-04-06 07:59:24 UTC",
            "url": "https://job.recentbox.life/DivineX.zip",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "archive",
                "compressed",
                "Password:dx2026",
                "pw-dx2026",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812770/",
            "reporter": "AmadeyHunter"
        }
    ],
    "3812765": [
        {
            "dateadded": "2026-04-06 07:59:15 UTC",
            "url": "https://files.catbox.moe/dz72gn.bat",
            "url_status": "offline",
            "last_online": "2026-04-06 21:52:33 UTC",
            "threat": "malware_download",
            "tags": [
                "BlankGrabber"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812765/",
            "reporter": "burger"
        }
    ],
    "3812764": [
        {
            "dateadded": "2026-04-06 07:59:11 UTC",
            "url": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Radium-1.21.11.jar",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812764/",
            "reporter": "burger"
        }
    ],
    "3812763": [
        {
            "dateadded": "2026-04-06 07:59:10 UTC",
            "url": "https://github.com/PowerChrome/svc/raw/refs/heads/main/xaerominimap-fabric-1.21.5-25.3.10.jar",
            "url_status": "offline",
            "last_online": "2026-04-08 11:22:47 UTC",
            "threat": "malware_download",
            "tags": [
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812763/",
            "reporter": "burger"
        }
    ],
    "3812761": [
        {
            "dateadded": "2026-04-06 07:59:09 UTC",
            "url": "https://github.com/PowerChrome/az/raw/refs/heads/main/loade.exe",
            "url_status": "offline",
            "last_online": "2026-04-08 11:31:00 UTC",
            "threat": "malware_download",
            "tags": [
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812761/",
            "reporter": "burger"
        }
    ],
    "3812762": [
        {
            "dateadded": "2026-04-06 07:59:09 UTC",
            "url": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Fabric_API-0.141.31.21.11.jar",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812762/",
            "reporter": "burger"
        }
    ],
    "3812757": [
        {
            "dateadded": "2026-04-06 07:59:08 UTC",
            "url": "https://github.com/PowerChrome/svc/raw/refs/heads/main/bettertotemhighlight-1.0%20(1).jar",
            "url_status": "offline",
            "last_online": "2026-04-08 11:44:20 UTC",
            "threat": "malware_download",
            "tags": [
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812757/",
            "reporter": "burger"
        }
    ],
    "3812758": [
        {
            "dateadded": "2026-04-06 07:59:08 UTC",
            "url": "https://github.com/PowerChrome/cvr/raw/refs/heads/main/zaza-1.2.1.jar",
            "url_status": "offline",
            "last_online": "2026-04-08 11:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "github"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812758/",
            "reporter": "burger"
        }
    ],
    "3812759": [
        {
            "dateadded": "2026-04-06 07:59:08 UTC",
            "url": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Doomsday_Client-1.21.11.jar",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812759/",
            "reporter": "burger"
        }
    ],
    "3812760": [
        {
            "dateadded": "2026-04-06 07:59:08 UTC",
            "url": "https://djasdajnsdnjgjg.com/sdfggg.js",
            "url_status": "offline",
            "last_online": "2026-04-06 07:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "IClickFix"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812760/",
            "reporter": "aachum"
        }
    ],
    "3812755": [
        {
            "dateadded": "2026-04-06 07:59:07 UTC",
            "url": "https://filehost.sbs/share.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                " infostealer",
                " malvertising",
                " renpy",
                "TDS"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812755/",
            "reporter": "anonymous"
        }
    ],
    "3812756": [
        {
            "dateadded": "2026-04-06 07:59:07 UTC",
            "url": "http://82.25.56.112/californication.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 09:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812756/",
            "reporter": "geenensp"
        }
    ],
    "3812754": [
        {
            "dateadded": "2026-04-06 07:54:08 UTC",
            "url": "http://27.37.101.173:41434/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:24:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812754/",
            "reporter": "geenensp"
        }
    ],
    "3812753": [
        {
            "dateadded": "2026-04-06 07:52:09 UTC",
            "url": "http://182.115.161.184:52519/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:12:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812753/",
            "reporter": "geenensp"
        }
    ],
    "3812752": [
        {
            "dateadded": "2026-04-06 07:52:08 UTC",
            "url": "https://exist-api.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 07:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812752/",
            "reporter": "anonymous"
        }
    ],
    "3812751": [
        {
            "dateadded": "2026-04-06 07:48:08 UTC",
            "url": "http://221.202.17.13:43141/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:42:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812751/",
            "reporter": "geenensp"
        }
    ],
    "3812750": [
        {
            "dateadded": "2026-04-06 07:45:17 UTC",
            "url": "http://182.121.170.242:52377/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:40:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812750/",
            "reporter": "geenensp"
        }
    ],
    "3812749": [
        {
            "dateadded": "2026-04-06 07:44:06 UTC",
            "url": "https://source-data.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 07:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812749/",
            "reporter": "anonymous"
        }
    ],
    "3812748": [
        {
            "dateadded": "2026-04-06 07:41:15 UTC",
            "url": "http://113.102.129.176:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812748/",
            "reporter": "geenensp"
        }
    ],
    "3812747": [
        {
            "dateadded": "2026-04-06 07:35:10 UTC",
            "url": "https://real-time-io.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 07:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812747/",
            "reporter": "anonymous"
        }
    ],
    "3812746": [
        {
            "dateadded": "2026-04-06 07:33:07 UTC",
            "url": "https://being-node.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-06 16:30:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812746/",
            "reporter": "anonymous"
        }
    ],
    "3812745": [
        {
            "dateadded": "2026-04-06 07:26:15 UTC",
            "url": "http://221.202.17.13:43141/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 17:01:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812745/",
            "reporter": "geenensp"
        }
    ],
    "3812744": [
        {
            "dateadded": "2026-04-06 07:26:14 UTC",
            "url": "http://196.190.69.149:56094/i",
            "url_status": "offline",
            "last_online": "2026-04-06 07:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812744/",
            "reporter": "geenensp"
        }
    ],
    "3812743": [
        {
            "dateadded": "2026-04-06 07:25:10 UTC",
            "url": "http://27.37.101.173:41434/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:27:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812743/",
            "reporter": "geenensp"
        }
    ],
    "3812742": [
        {
            "dateadded": "2026-04-06 07:22:10 UTC",
            "url": "http://62.60.226.200/public_files/X3Qow0s.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812742/",
            "reporter": "abuse_ch"
        }
    ],
    "3812740": [
        {
            "dateadded": "2026-04-06 07:22:09 UTC",
            "url": "http://62.60.226.200/public_files/cgCnZfO.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:39 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812740/",
            "reporter": "abuse_ch"
        }
    ],
    "3812741": [
        {
            "dateadded": "2026-04-06 07:22:09 UTC",
            "url": "http://62.60.226.200/public_files/pEN7Qdm.txt",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:01 UTC",
            "threat": "malware_download",
            "tags": [
                "rev-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812741/",
            "reporter": "abuse_ch"
        }
    ],
    "3812739": [
        {
            "dateadded": "2026-04-06 07:22:07 UTC",
            "url": "http://62.60.226.200/public_files/160066.jpg",
            "url_status": "online",
            "last_online": "2026-04-27 11:44:03 UTC",
            "threat": "malware_download",
            "tags": [
                "jpg-base64-loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812739/",
            "reporter": "abuse_ch"
        }
    ],
    "3812738": [
        {
            "dateadded": "2026-04-06 07:22:06 UTC",
            "url": "http://62.60.226.200/work/addon.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812738/",
            "reporter": "abuse_ch"
        }
    ],
    "3812737": [
        {
            "dateadded": "2026-04-06 07:22:05 UTC",
            "url": "http://62.60.226.200/work/addon2.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812737/",
            "reporter": "abuse_ch"
        }
    ],
    "3812736": [
        {
            "dateadded": "2026-04-06 07:17:07 UTC",
            "url": "http://222.127.49.242:47506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 00:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812736/",
            "reporter": "geenensp"
        }
    ],
    "3812735": [
        {
            "dateadded": "2026-04-06 07:08:12 UTC",
            "url": "http://42.53.59.63:37559/i",
            "url_status": "offline",
            "last_online": "2026-04-10 17:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812735/",
            "reporter": "geenensp"
        }
    ],
    "3812734": [
        {
            "dateadded": "2026-04-06 06:57:07 UTC",
            "url": "http://115.50.201.148:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-07 17:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812734/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812733": [
        {
            "dateadded": "2026-04-06 06:55:41 UTC",
            "url": "http://112.225.173.127:41868/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812733/",
            "reporter": "geenensp"
        }
    ],
    "3812732": [
        {
            "dateadded": "2026-04-06 06:50:16 UTC",
            "url": "http://117.223.142.30:50525/i",
            "url_status": "offline",
            "last_online": "2026-04-06 06:50:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812732/",
            "reporter": "geenensp"
        }
    ],
    "3812731": [
        {
            "dateadded": "2026-04-06 06:47:16 UTC",
            "url": "http://182.121.87.147:43039/i",
            "url_status": "offline",
            "last_online": "2026-04-06 06:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812731/",
            "reporter": "geenensp"
        }
    ],
    "3812730": [
        {
            "dateadded": "2026-04-06 06:40:16 UTC",
            "url": "http://42.53.59.63:37559/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:24:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812730/",
            "reporter": "geenensp"
        }
    ],
    "3812729": [
        {
            "dateadded": "2026-04-06 06:38:14 UTC",
            "url": "http://112.239.118.231:59747/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812729/",
            "reporter": "geenensp"
        }
    ],
    "3812728": [
        {
            "dateadded": "2026-04-06 06:36:12 UTC",
            "url": "http://123.5.140.38:42287/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:54:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812728/",
            "reporter": "geenensp"
        }
    ],
    "3812727": [
        {
            "dateadded": "2026-04-06 06:22:09 UTC",
            "url": "http://222.142.240.174:44360/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812727/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812726": [
        {
            "dateadded": "2026-04-06 06:15:17 UTC",
            "url": "http://5.175.223.249/bbc",
            "url_status": "online",
            "last_online": "2026-04-27 12:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812726/",
            "reporter": "botnetkiller"
        }
    ],
    "3812725": [
        {
            "dateadded": "2026-04-06 06:12:09 UTC",
            "url": "http://115.50.201.148:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 17:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812725/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812724": [
        {
            "dateadded": "2026-04-06 06:11:07 UTC",
            "url": "http://123.5.140.38:42287/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:39:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812724/",
            "reporter": "geenensp"
        }
    ],
    "3812723": [
        {
            "dateadded": "2026-04-06 06:09:21 UTC",
            "url": "http://117.223.142.30:50525/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 06:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812723/",
            "reporter": "geenensp"
        }
    ],
    "3812722": [
        {
            "dateadded": "2026-04-06 06:08:36 UTC",
            "url": "http://112.239.118.231:59747/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:44:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812722/",
            "reporter": "geenensp"
        }
    ],
    "3812721": [
        {
            "dateadded": "2026-04-06 06:01:08 UTC",
            "url": "http://115.58.96.190:59697/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812721/",
            "reporter": "geenensp"
        }
    ],
    "3812720": [
        {
            "dateadded": "2026-04-06 05:54:15 UTC",
            "url": "http://116.248.121.105:58539/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812720/",
            "reporter": "geenensp"
        }
    ],
    "3812719": [
        {
            "dateadded": "2026-04-06 05:52:08 UTC",
            "url": "http://117.26.227.108:56557/i",
            "url_status": "offline",
            "last_online": "2026-04-10 23:26:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812719/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812718": [
        {
            "dateadded": "2026-04-06 05:47:07 UTC",
            "url": "http://115.62.149.21:40984/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:13:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812718/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812717": [
        {
            "dateadded": "2026-04-06 05:37:07 UTC",
            "url": "http://118.175.206.228:43178/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812717/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812716": [
        {
            "dateadded": "2026-04-06 05:27:10 UTC",
            "url": "http://117.26.227.108:56557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812716/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812715": [
        {
            "dateadded": "2026-04-06 05:24:18 UTC",
            "url": "http://116.248.121.105:58539/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812715/",
            "reporter": "geenensp"
        }
    ],
    "3812714": [
        {
            "dateadded": "2026-04-06 05:23:15 UTC",
            "url": "http://39.90.87.7:44145/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:18:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812714/",
            "reporter": "geenensp"
        }
    ],
    "3812713": [
        {
            "dateadded": "2026-04-06 05:20:13 UTC",
            "url": "http://112.248.105.38:50784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812713/",
            "reporter": "geenensp"
        }
    ],
    "3812712": [
        {
            "dateadded": "2026-04-06 05:13:15 UTC",
            "url": "http://219.157.150.79:33194/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 23:08:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812712/",
            "reporter": "geenensp"
        }
    ],
    "3812711": [
        {
            "dateadded": "2026-04-06 05:07:07 UTC",
            "url": "http://117.193.143.132:42284/i",
            "url_status": "offline",
            "last_online": "2026-04-06 11:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812711/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812710": [
        {
            "dateadded": "2026-04-06 05:02:22 UTC",
            "url": "http://117.193.143.132:42284/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:01:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812710/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812709": [
        {
            "dateadded": "2026-04-06 04:58:10 UTC",
            "url": "http://115.62.78.35:49213/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:44:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812709/",
            "reporter": "geenensp"
        }
    ],
    "3812708": [
        {
            "dateadded": "2026-04-06 04:29:08 UTC",
            "url": "http://115.62.78.35:49213/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812708/",
            "reporter": "geenensp"
        }
    ],
    "3812707": [
        {
            "dateadded": "2026-04-06 04:27:20 UTC",
            "url": "http://42.236.150.202:33633/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812707/",
            "reporter": "geenensp"
        }
    ],
    "3812706": [
        {
            "dateadded": "2026-04-06 04:25:23 UTC",
            "url": "http://193.187.101.227:40456/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:24:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812706/",
            "reporter": "geenensp"
        }
    ],
    "3812705": [
        {
            "dateadded": "2026-04-06 04:07:07 UTC",
            "url": "http://27.204.195.127:48023/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:05:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812705/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812704": [
        {
            "dateadded": "2026-04-06 03:58:18 UTC",
            "url": "http://196.190.69.149:56094/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812704/",
            "reporter": "geenensp"
        }
    ],
    "3812703": [
        {
            "dateadded": "2026-04-06 03:57:06 UTC",
            "url": "http://180.244.11.1:55717/i",
            "url_status": "offline",
            "last_online": "2026-04-07 06:48:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812703/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812702": [
        {
            "dateadded": "2026-04-06 03:50:24 UTC",
            "url": "http://42.236.150.202:33633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:08:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812702/",
            "reporter": "geenensp"
        }
    ],
    "3812701": [
        {
            "dateadded": "2026-04-06 03:42:11 UTC",
            "url": "http://176.226.235.173:35312/.i",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:56 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812701/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812700": [
        {
            "dateadded": "2026-04-06 03:36:22 UTC",
            "url": "http://182.119.229.159:49082/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:29:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812700/",
            "reporter": "geenensp"
        }
    ],
    "3812699": [
        {
            "dateadded": "2026-04-06 03:32:06 UTC",
            "url": "http://42.239.232.62:36914/i",
            "url_status": "offline",
            "last_online": "2026-04-08 10:26:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812699/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812698": [
        {
            "dateadded": "2026-04-06 03:29:16 UTC",
            "url": "http://123.234.155.94:39613/i",
            "url_status": "offline",
            "last_online": "2026-04-15 22:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812698/",
            "reporter": "geenensp"
        }
    ],
    "3812697": [
        {
            "dateadded": "2026-04-06 03:27:06 UTC",
            "url": "http://180.244.11.1:55717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 09:44:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812697/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812696": [
        {
            "dateadded": "2026-04-06 03:12:17 UTC",
            "url": "http://123.234.155.94:39613/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 23:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812696/",
            "reporter": "geenensp"
        }
    ],
    "3812695": [
        {
            "dateadded": "2026-04-06 03:11:08 UTC",
            "url": "http://182.117.153.57:42869/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:05:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812695/",
            "reporter": "geenensp"
        }
    ],
    "3812694": [
        {
            "dateadded": "2026-04-06 03:02:07 UTC",
            "url": "http://42.239.232.62:36914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 11:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812694/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812693": [
        {
            "dateadded": "2026-04-06 02:49:16 UTC",
            "url": "http://182.117.153.57:42869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812693/",
            "reporter": "geenensp"
        }
    ],
    "3812692": [
        {
            "dateadded": "2026-04-06 02:47:23 UTC",
            "url": "http://27.215.183.236:34554/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812692/",
            "reporter": "geenensp"
        }
    ],
    "3812691": [
        {
            "dateadded": "2026-04-06 02:32:11 UTC",
            "url": "http://36.34.25.18:38722/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:41:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812691/",
            "reporter": "geenensp"
        }
    ],
    "3812689": [
        {
            "dateadded": "2026-04-06 02:27:08 UTC",
            "url": "http://194.26.192.157/bins/px86",
            "url_status": "offline",
            "last_online": "2026-04-06 02:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812689/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812690": [
        {
            "dateadded": "2026-04-06 02:27:08 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 04:40:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812690/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812688": [
        {
            "dateadded": "2026-04-06 02:27:07 UTC",
            "url": "http://180.244.15.38:49179/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:32:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812688/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812679": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812679/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812680": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812680/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812681": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812681/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812682": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812682/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812683": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/parm",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812683/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812684": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812684/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812685": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812685/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812686": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/pspc",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812686/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812687": [
        {
            "dateadded": "2026-04-06 02:26:23 UTC",
            "url": "http://194.26.192.157/bins/psh4",
            "url_status": "offline",
            "last_online": "2026-04-06 02:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812687/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812666": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 03:44:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812666/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812667": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-06 04:52:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812667/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812668": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.arm7",
            "url_status": "offline",
            "last_online": "2026-04-06 04:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812668/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812669": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.arm6",
            "url_status": "offline",
            "last_online": "2026-04-06 09:57:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812669/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812670": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.arm",
            "url_status": "offline",
            "last_online": "2026-04-06 04:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812670/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812671": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.i686",
            "url_status": "offline",
            "last_online": "2026-04-06 05:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812671/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812672": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.ppc",
            "url_status": "offline",
            "last_online": "2026-04-06 09:43:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812672/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812673": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.spc",
            "url_status": "offline",
            "last_online": "2026-04-22 21:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812673/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812674": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.arm5",
            "url_status": "offline",
            "last_online": "2026-04-06 05:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812674/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812675": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.x86",
            "url_status": "offline",
            "last_online": "2026-04-06 04:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812675/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812676": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.arc",
            "url_status": "offline",
            "last_online": "2026-04-06 10:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812676/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812677": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.mips",
            "url_status": "offline",
            "last_online": "2026-04-06 03:39:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812677/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812678": [
        {
            "dateadded": "2026-04-06 02:26:22 UTC",
            "url": "http://176.65.149.243/hiddenbin/Space.sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 03:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812678/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812665": [
        {
            "dateadded": "2026-04-06 02:22:10 UTC",
            "url": "http://27.215.183.236:34554/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812665/",
            "reporter": "geenensp"
        }
    ],
    "3812664": [
        {
            "dateadded": "2026-04-06 02:19:06 UTC",
            "url": "http://178.16.54.109/7.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:48 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812664/",
            "reporter": "Bitsight"
        }
    ],
    "3812663": [
        {
            "dateadded": "2026-04-06 02:07:13 UTC",
            "url": "http://196.189.98.77:52423/i",
            "url_status": "offline",
            "last_online": "2026-04-06 05:17:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812663/",
            "reporter": "geenensp"
        }
    ],
    "3812662": [
        {
            "dateadded": "2026-04-06 02:05:19 UTC",
            "url": "http://196.189.69.192:40407/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:48:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812662/",
            "reporter": "geenensp"
        }
    ],
    "3812661": [
        {
            "dateadded": "2026-04-06 02:00:19 UTC",
            "url": "http://196.189.98.77:52423/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:12:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812661/",
            "reporter": "geenensp"
        }
    ],
    "3812660": [
        {
            "dateadded": "2026-04-06 02:00:09 UTC",
            "url": "http://123.10.156.114:39424/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:59:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812660/",
            "reporter": "geenensp"
        }
    ],
    "3812659": [
        {
            "dateadded": "2026-04-06 01:57:18 UTC",
            "url": "http://123.11.203.83:52121/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:51:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812659/",
            "reporter": "geenensp"
        }
    ],
    "3812658": [
        {
            "dateadded": "2026-04-06 01:54:17 UTC",
            "url": "http://fdsafa.best/bots/mirai.arm",
            "url_status": "offline",
            "last_online": "2026-04-06 01:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812658/",
            "reporter": "geenensp"
        }
    ],
    "3812657": [
        {
            "dateadded": "2026-04-06 01:38:22 UTC",
            "url": "http://196.189.69.192:40407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:02:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812657/",
            "reporter": "geenensp"
        }
    ],
    "3812656": [
        {
            "dateadded": "2026-04-06 01:28:23 UTC",
            "url": "http://175.148.57.127:45797/i",
            "url_status": "offline",
            "last_online": "2026-04-11 05:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812656/",
            "reporter": "geenensp"
        }
    ],
    "3812655": [
        {
            "dateadded": "2026-04-06 01:25:13 UTC",
            "url": "http://123.10.156.114:39424/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812655/",
            "reporter": "geenensp"
        }
    ],
    "3812654": [
        {
            "dateadded": "2026-04-06 01:21:11 UTC",
            "url": "http://119.185.242.226:57888/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:53:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812654/",
            "reporter": "geenensp"
        }
    ],
    "3812653": [
        {
            "dateadded": "2026-04-06 01:01:19 UTC",
            "url": "http://42.54.145.242:39558/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:07:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812653/",
            "reporter": "geenensp"
        }
    ],
    "3812652": [
        {
            "dateadded": "2026-04-06 01:00:10 UTC",
            "url": "http://27.215.180.207:40674/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:05:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812652/",
            "reporter": "geenensp"
        }
    ],
    "3812651": [
        {
            "dateadded": "2026-04-06 00:36:17 UTC",
            "url": "http://123.11.5.15:49181/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:59:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812651/",
            "reporter": "geenensp"
        }
    ],
    "3812650": [
        {
            "dateadded": "2026-04-06 00:32:17 UTC",
            "url": "http://42.54.145.242:39558/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 18:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812650/",
            "reporter": "geenensp"
        }
    ],
    "3812649": [
        {
            "dateadded": "2026-04-06 00:32:06 UTC",
            "url": "http://42.227.134.103:41848/i",
            "url_status": "offline",
            "last_online": "2026-04-06 05:06:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812649/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812648": [
        {
            "dateadded": "2026-04-06 00:17:07 UTC",
            "url": "http://222.142.240.174:44360/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:50:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812648/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812647": [
        {
            "dateadded": "2026-04-06 00:09:19 UTC",
            "url": "http://123.11.5.15:49181/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:26:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812647/",
            "reporter": "geenensp"
        }
    ],
    "3812646": [
        {
            "dateadded": "2026-04-06 00:00:22 UTC",
            "url": "http://112.248.1.67:49969/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:46:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812646/",
            "reporter": "geenensp"
        }
    ],
    "3812645": [
        {
            "dateadded": "2026-04-05 23:52:07 UTC",
            "url": "http://42.227.134.103:41848/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812645/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812644": [
        {
            "dateadded": "2026-04-05 23:18:22 UTC",
            "url": "http://110.36.65.9:33361/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812644/",
            "reporter": "geenensp"
        }
    ],
    "3812643": [
        {
            "dateadded": "2026-04-05 23:04:41 UTC",
            "url": "http://112.248.1.67:49969/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812643/",
            "reporter": "geenensp"
        }
    ],
    "3812642": [
        {
            "dateadded": "2026-04-05 23:02:06 UTC",
            "url": "http://196.190.133.180:58265/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812642/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812641": [
        {
            "dateadded": "2026-04-05 22:53:21 UTC",
            "url": "http://110.36.65.9:33361/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:51:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812641/",
            "reporter": "geenensp"
        }
    ],
    "3812639": [
        {
            "dateadded": "2026-04-05 22:44:23 UTC",
            "url": "http://123.9.91.10:41173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:17:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812639/",
            "reporter": "geenensp"
        }
    ],
    "3812640": [
        {
            "dateadded": "2026-04-05 22:44:23 UTC",
            "url": "http://123.9.91.10:41173/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812640/",
            "reporter": "geenensp"
        }
    ],
    "3812638": [
        {
            "dateadded": "2026-04-05 22:28:19 UTC",
            "url": "http://176.65.150.63/bins/sora.arm7",
            "url_status": "offline",
            "last_online": "2026-04-08 10:24:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812638/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812636": [
        {
            "dateadded": "2026-04-05 22:27:24 UTC",
            "url": "http://176.65.150.63/bins/sora.sh4",
            "url_status": "offline",
            "last_online": "2026-04-08 04:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812636/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812637": [
        {
            "dateadded": "2026-04-05 22:27:24 UTC",
            "url": "http://176.65.150.63/bins/sora.spc",
            "url_status": "offline",
            "last_online": "2026-04-08 10:11:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812637/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812635": [
        {
            "dateadded": "2026-04-05 22:27:23 UTC",
            "url": "http://176.65.150.63/bins/sora.ppc",
            "url_status": "offline",
            "last_online": "2026-04-08 05:19:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812635/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812634": [
        {
            "dateadded": "2026-04-05 22:27:18 UTC",
            "url": "http://176.65.150.63/bins/sora.arm6",
            "url_status": "offline",
            "last_online": "2026-04-08 03:45:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812634/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812629": [
        {
            "dateadded": "2026-04-05 22:26:25 UTC",
            "url": "http://176.65.150.63/bins/sora.mips",
            "url_status": "offline",
            "last_online": "2026-04-08 10:10:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812629/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812630": [
        {
            "dateadded": "2026-04-05 22:26:25 UTC",
            "url": "http://176.65.150.63/bins/sora.arm5",
            "url_status": "offline",
            "last_online": "2026-04-08 04:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812630/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812631": [
        {
            "dateadded": "2026-04-05 22:26:25 UTC",
            "url": "http://176.65.150.63/bins/sora.arm",
            "url_status": "offline",
            "last_online": "2026-04-08 10:04:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812631/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812632": [
        {
            "dateadded": "2026-04-05 22:26:25 UTC",
            "url": "http://176.65.150.63/bins/sora.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-08 05:16:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812632/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812633": [
        {
            "dateadded": "2026-04-05 22:26:25 UTC",
            "url": "http://176.65.150.63/bins/sora.m68k",
            "url_status": "offline",
            "last_online": "2026-04-08 10:07:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812633/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812628": [
        {
            "dateadded": "2026-04-05 22:26:19 UTC",
            "url": "http://176.65.150.63/bins/sora.x86",
            "url_status": "offline",
            "last_online": "2026-04-08 10:40:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812628/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812627": [
        {
            "dateadded": "2026-04-05 22:11:21 UTC",
            "url": "http://119.167.25.170:37028/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812627/",
            "reporter": "geenensp"
        }
    ],
    "3812626": [
        {
            "dateadded": "2026-04-05 22:08:22 UTC",
            "url": "http://119.99.255.154:51368/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812626/",
            "reporter": "geenensp"
        }
    ],
    "3812625": [
        {
            "dateadded": "2026-04-05 22:07:13 UTC",
            "url": "https://flow-object.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 22:07:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812625/",
            "reporter": "anonymous"
        }
    ],
    "3812624": [
        {
            "dateadded": "2026-04-05 22:02:15 UTC",
            "url": "http://119.167.25.170:37028/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:51:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812624/",
            "reporter": "geenensp"
        }
    ],
    "3812623": [
        {
            "dateadded": "2026-04-05 22:01:17 UTC",
            "url": "http://120.28.91.101:55325/i",
            "url_status": "offline",
            "last_online": "2026-04-07 17:08:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812623/",
            "reporter": "geenensp"
        }
    ],
    "3812622": [
        {
            "dateadded": "2026-04-05 21:55:20 UTC",
            "url": "http://119.99.255.154:51368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 14:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812622/",
            "reporter": "geenensp"
        }
    ],
    "3812621": [
        {
            "dateadded": "2026-04-05 21:50:24 UTC",
            "url": "http://120.28.199.24:43436/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:50:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812621/",
            "reporter": "geenensp"
        }
    ],
    "3812620": [
        {
            "dateadded": "2026-04-05 21:50:10 UTC",
            "url": "https://entity-map.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812620/",
            "reporter": "anonymous"
        }
    ],
    "3812619": [
        {
            "dateadded": "2026-04-05 21:47:13 UTC",
            "url": "https://study-sync.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812619/",
            "reporter": "anonymous"
        }
    ],
    "3812618": [
        {
            "dateadded": "2026-04-05 21:41:12 UTC",
            "url": "https://mind-vault.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812618/",
            "reporter": "anonymous"
        }
    ],
    "3812617": [
        {
            "dateadded": "2026-04-05 21:36:24 UTC",
            "url": "http://113.94.31.181:56330/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:36:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812617/",
            "reporter": "geenensp"
        }
    ],
    "3812616": [
        {
            "dateadded": "2026-04-05 21:36:13 UTC",
            "url": "https://base-theory.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812616/",
            "reporter": "anonymous"
        }
    ],
    "3812615": [
        {
            "dateadded": "2026-04-05 21:31:07 UTC",
            "url": "https://proof-engine.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812615/",
            "reporter": "anonymous"
        }
    ],
    "3812614": [
        {
            "dateadded": "2026-04-05 21:27:07 UTC",
            "url": "http://27.210.233.212:48954/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:48:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812614/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812613": [
        {
            "dateadded": "2026-04-05 21:26:26 UTC",
            "url": "http://175.151.116.102:46020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:55:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812613/",
            "reporter": "geenensp"
        }
    ],
    "3812612": [
        {
            "dateadded": "2026-04-05 21:25:27 UTC",
            "url": "http://120.28.199.24:43436/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 23:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812612/",
            "reporter": "geenensp"
        }
    ],
    "3812611": [
        {
            "dateadded": "2026-04-05 21:25:18 UTC",
            "url": "http://110.36.20.85:38955/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812611/",
            "reporter": "geenensp"
        }
    ],
    "3812610": [
        {
            "dateadded": "2026-04-05 21:25:09 UTC",
            "url": "https://logic-audit.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812610/",
            "reporter": "anonymous"
        }
    ],
    "3812609": [
        {
            "dateadded": "2026-04-05 21:19:10 UTC",
            "url": "https://truth-verify.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812609/",
            "reporter": "anonymous"
        }
    ],
    "3812608": [
        {
            "dateadded": "2026-04-05 21:13:10 UTC",
            "url": "https://draw-sync.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812608/",
            "reporter": "anonymous"
        }
    ],
    "3812607": [
        {
            "dateadded": "2026-04-05 21:10:09 UTC",
            "url": "https://color-set.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812607/",
            "reporter": "anonymous"
        }
    ],
    "3812606": [
        {
            "dateadded": "2026-04-05 21:07:20 UTC",
            "url": "http://61.53.91.76:43816/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:21:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812606/",
            "reporter": "geenensp"
        }
    ],
    "3812605": [
        {
            "dateadded": "2026-04-05 21:07:09 UTC",
            "url": "https://sister-hub.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 21:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812605/",
            "reporter": "anonymous"
        }
    ],
    "3812604": [
        {
            "dateadded": "2026-04-05 21:01:08 UTC",
            "url": "http://110.36.20.85:38955/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:31:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812604/",
            "reporter": "geenensp"
        }
    ],
    "3812603": [
        {
            "dateadded": "2026-04-05 20:57:07 UTC",
            "url": "http://125.44.37.209:42280/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:25:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812603/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812602": [
        {
            "dateadded": "2026-04-05 20:56:07 UTC",
            "url": "https://brush-api.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 20:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812602/",
            "reporter": "anonymous"
        }
    ],
    "3812601": [
        {
            "dateadded": "2026-04-05 20:52:09 UTC",
            "url": "https://paint-job.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 20:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812601/",
            "reporter": "anonymous"
        }
    ],
    "3812600": [
        {
            "dateadded": "2026-04-05 20:47:07 UTC",
            "url": "http://125.41.168.58:49795/i",
            "url_status": "offline",
            "last_online": "2026-04-07 13:21:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812600/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812599": [
        {
            "dateadded": "2026-04-05 20:46:07 UTC",
            "url": "https://art-studio.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 20:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812599/",
            "reporter": "anonymous"
        }
    ],
    "3812598": [
        {
            "dateadded": "2026-04-05 20:42:26 UTC",
            "url": "http://196.189.104.106:49198/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812598/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812597": [
        {
            "dateadded": "2026-04-05 20:42:18 UTC",
            "url": "http://115.56.98.24:59071/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:46:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812597/",
            "reporter": "geenensp"
        }
    ],
    "3812596": [
        {
            "dateadded": "2026-04-05 20:42:06 UTC",
            "url": "http://222.134.173.114:39695/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:31:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812596/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812595": [
        {
            "dateadded": "2026-04-05 20:32:07 UTC",
            "url": "http://125.44.37.209:42280/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812595/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812594": [
        {
            "dateadded": "2026-04-05 20:22:09 UTC",
            "url": "http://222.127.77.227:51985/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812594/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812593": [
        {
            "dateadded": "2026-04-05 20:11:16 UTC",
            "url": "http://176.65.139.25/bins/tony.x86",
            "url_status": "offline",
            "last_online": "2026-04-09 16:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mirai",
                "x86-32"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812593/",
            "reporter": "geenensp"
        }
    ],
    "3812592": [
        {
            "dateadded": "2026-04-05 20:06:16 UTC",
            "url": "http://196.251.107.133/bins/fak.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812592/",
            "reporter": "botnetkiller"
        }
    ],
    "3812591": [
        {
            "dateadded": "2026-04-05 20:02:24 UTC",
            "url": "http://196.189.104.106:49198/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:58:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812591/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812590": [
        {
            "dateadded": "2026-04-05 20:01:19 UTC",
            "url": "http://187.45.95.254:46502/i",
            "url_status": "offline",
            "last_online": "2026-04-06 18:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812590/",
            "reporter": "geenensp"
        }
    ],
    "3812589": [
        {
            "dateadded": "2026-04-05 20:00:11 UTC",
            "url": "http://27.207.227.213:48976/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812589/",
            "reporter": "geenensp"
        }
    ],
    "3812588": [
        {
            "dateadded": "2026-04-05 19:59:21 UTC",
            "url": "http://187.45.95.254:46502/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:46:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812588/",
            "reporter": "geenensp"
        }
    ],
    "3812587": [
        {
            "dateadded": "2026-04-05 19:52:06 UTC",
            "url": "http://196.189.68.239:49721/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:49:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812587/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812586": [
        {
            "dateadded": "2026-04-05 19:48:11 UTC",
            "url": "http://85.12.251.50:39891/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812586/",
            "reporter": "geenensp"
        }
    ],
    "3812585": [
        {
            "dateadded": "2026-04-05 19:47:06 UTC",
            "url": "http://196.189.68.239:49721/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 09:42:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812585/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812584": [
        {
            "dateadded": "2026-04-05 19:12:17 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/debug",
            "url_status": "offline",
            "last_online": "2026-04-27 06:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812584/",
            "reporter": "botnetkiller"
        }
    ],
    "3812583": [
        {
            "dateadded": "2026-04-05 19:08:18 UTC",
            "url": "http://82.140.201.235:53179/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:57:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812583/",
            "reporter": "geenensp"
        }
    ],
    "3812582": [
        {
            "dateadded": "2026-04-05 19:02:07 UTC",
            "url": "http://42.6.80.104:60301/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812582/",
            "reporter": "geenensp"
        }
    ],
    "3812581": [
        {
            "dateadded": "2026-04-05 19:02:06 UTC",
            "url": "http://110.36.86.83:36165/i",
            "url_status": "offline",
            "last_online": "2026-04-11 11:03:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812581/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812580": [
        {
            "dateadded": "2026-04-05 19:00:19 UTC",
            "url": "http://113.239.86.103:36861/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:19:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812580/",
            "reporter": "geenensp"
        }
    ],
    "3812579": [
        {
            "dateadded": "2026-04-05 18:34:11 UTC",
            "url": "http://27.189.31.137:33359/i",
            "url_status": "offline",
            "last_online": "2026-04-09 11:16:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812579/",
            "reporter": "geenensp"
        }
    ],
    "3812578": [
        {
            "dateadded": "2026-04-05 18:22:19 UTC",
            "url": "http://77.247.88.121:40370/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:49:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812578/",
            "reporter": "geenensp"
        }
    ],
    "3812577": [
        {
            "dateadded": "2026-04-05 18:12:17 UTC",
            "url": "http://77.247.88.121:40370/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812577/",
            "reporter": "geenensp"
        }
    ],
    "3812576": [
        {
            "dateadded": "2026-04-05 18:07:18 UTC",
            "url": "http://27.215.120.57:36912/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:02:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812576/",
            "reporter": "geenensp"
        }
    ],
    "3812575": [
        {
            "dateadded": "2026-04-05 18:05:26 UTC",
            "url": "http://27.189.31.137:33359/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:52:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812575/",
            "reporter": "geenensp"
        }
    ],
    "3812574": [
        {
            "dateadded": "2026-04-05 17:57:09 UTC",
            "url": "http://178.232.64.184:54840/i",
            "url_status": "offline",
            "last_online": "2026-04-25 12:18:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812574/",
            "reporter": "geenensp"
        }
    ],
    "3812573": [
        {
            "dateadded": "2026-04-05 17:48:10 UTC",
            "url": "http://176.65.139.67/release/mips",
            "url_status": "offline",
            "last_online": "2026-04-05 17:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812573/",
            "reporter": "botnetkiller"
        }
    ],
    "3812560": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812560/",
            "reporter": "botnetkiller"
        }
    ],
    "3812561": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812561/",
            "reporter": "botnetkiller"
        }
    ],
    "3812562": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/ppc440",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812562/",
            "reporter": "botnetkiller"
        }
    ],
    "3812563": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/x86",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812563/",
            "reporter": "botnetkiller"
        }
    ],
    "3812564": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/bins.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 07:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812564/",
            "reporter": "botnetkiller"
        }
    ],
    "3812565": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812565/",
            "reporter": "botnetkiller"
        }
    ],
    "3812566": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812566/",
            "reporter": "botnetkiller"
        }
    ],
    "3812567": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/x86_32",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812567/",
            "reporter": "botnetkiller"
        }
    ],
    "3812568": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812568/",
            "reporter": "botnetkiller"
        }
    ],
    "3812569": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812569/",
            "reporter": "botnetkiller"
        }
    ],
    "3812570": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/arm",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812570/",
            "reporter": "botnetkiller"
        }
    ],
    "3812571": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812571/",
            "reporter": "botnetkiller"
        }
    ],
    "3812572": [
        {
            "dateadded": "2026-04-05 17:47:12 UTC",
            "url": "http://176.65.139.67/release/m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 17:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812572/",
            "reporter": "botnetkiller"
        }
    ],
    "3812559": [
        {
            "dateadded": "2026-04-05 17:44:20 UTC",
            "url": "http://112.248.112.169:38572/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:05:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812559/",
            "reporter": "geenensp"
        }
    ],
    "3812558": [
        {
            "dateadded": "2026-04-05 17:37:18 UTC",
            "url": "http://196.190.133.180:58265/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812558/",
            "reporter": "geenensp"
        }
    ],
    "3812557": [
        {
            "dateadded": "2026-04-05 17:29:15 UTC",
            "url": "http://45.194.92.39/move",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812557/",
            "reporter": "botnetkiller"
        }
    ],
    "3812556": [
        {
            "dateadded": "2026-04-05 17:18:22 UTC",
            "url": "http://182.119.229.159:49082/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:43:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812556/",
            "reporter": "geenensp"
        }
    ],
    "3812555": [
        {
            "dateadded": "2026-04-05 17:08:21 UTC",
            "url": "http://85.12.229.54:60779/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 05:10:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812555/",
            "reporter": "geenensp"
        }
    ],
    "3812554": [
        {
            "dateadded": "2026-04-05 17:05:23 UTC",
            "url": "http://112.248.112.169:38572/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812554/",
            "reporter": "geenensp"
        }
    ],
    "3812553": [
        {
            "dateadded": "2026-04-05 17:04:25 UTC",
            "url": "http://113.236.155.246:45414/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:28:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812553/",
            "reporter": "geenensp"
        }
    ],
    "3812552": [
        {
            "dateadded": "2026-04-05 17:01:21 UTC",
            "url": "http://39.90.151.53:58122/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812552/",
            "reporter": "geenensp"
        }
    ],
    "3812551": [
        {
            "dateadded": "2026-04-05 16:38:22 UTC",
            "url": "http://112.238.156.226:44295/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:59:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812551/",
            "reporter": "geenensp"
        }
    ],
    "3812550": [
        {
            "dateadded": "2026-04-05 16:31:28 UTC",
            "url": "http://110.36.29.195:47183/i",
            "url_status": "offline",
            "last_online": "2026-04-16 11:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812550/",
            "reporter": "geenensp"
        }
    ],
    "3812549": [
        {
            "dateadded": "2026-04-05 16:25:22 UTC",
            "url": "http://39.90.151.53:58122/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:46:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812549/",
            "reporter": "geenensp"
        }
    ],
    "3812548": [
        {
            "dateadded": "2026-04-05 16:22:20 UTC",
            "url": "http://112.248.112.229:41182/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812548/",
            "reporter": "geenensp"
        }
    ],
    "3812547": [
        {
            "dateadded": "2026-04-05 16:18:24 UTC",
            "url": "http://106.56.146.69:35466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:54:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812547/",
            "reporter": "geenensp"
        }
    ],
    "3812546": [
        {
            "dateadded": "2026-04-05 16:16:09 UTC",
            "url": "http://85.239.147.6/files/1781548144/KVJUXwl.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812546/",
            "reporter": "Bitsight"
        }
    ],
    "3812545": [
        {
            "dateadded": "2026-04-05 16:13:24 UTC",
            "url": "http://217.64.135.181:34555/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:32:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812545/",
            "reporter": "geenensp"
        }
    ],
    "3812544": [
        {
            "dateadded": "2026-04-05 16:08:14 UTC",
            "url": "http://182.127.128.36:57641/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:30:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812544/",
            "reporter": "geenensp"
        }
    ],
    "3812543": [
        {
            "dateadded": "2026-04-05 15:56:44 UTC",
            "url": "http://112.248.112.229:41182/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:12:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812543/",
            "reporter": "geenensp"
        }
    ],
    "3812542": [
        {
            "dateadded": "2026-04-05 15:53:27 UTC",
            "url": "http://38.156.90.30:53370/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:53:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812542/",
            "reporter": "geenensp"
        }
    ],
    "3812541": [
        {
            "dateadded": "2026-04-05 15:49:13 UTC",
            "url": "http://182.127.128.36:57641/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 10:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812541/",
            "reporter": "geenensp"
        }
    ],
    "3812540": [
        {
            "dateadded": "2026-04-05 15:41:19 UTC",
            "url": "http://217.64.135.181:34555/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:21:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812540/",
            "reporter": "geenensp"
        }
    ],
    "3812539": [
        {
            "dateadded": "2026-04-05 15:35:34 UTC",
            "url": "http://59.182.126.252:38726/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812539/",
            "reporter": "geenensp"
        }
    ],
    "3812538": [
        {
            "dateadded": "2026-04-05 15:34:22 UTC",
            "url": "http://27.207.227.213:48976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:07:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812538/",
            "reporter": "geenensp"
        }
    ],
    "3812537": [
        {
            "dateadded": "2026-04-05 15:32:19 UTC",
            "url": "http://115.55.232.51:49191/i",
            "url_status": "offline",
            "last_online": "2026-04-06 05:05:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812537/",
            "reporter": "geenensp"
        }
    ],
    "3812536": [
        {
            "dateadded": "2026-04-05 15:27:19 UTC",
            "url": "http://61.54.238.50:55819/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:39:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812536/",
            "reporter": "geenensp"
        }
    ],
    "3812535": [
        {
            "dateadded": "2026-04-05 15:17:22 UTC",
            "url": "http://42.235.50.70:53049/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812535/",
            "reporter": "geenensp"
        }
    ],
    "3812534": [
        {
            "dateadded": "2026-04-05 15:13:20 UTC",
            "url": "http://115.55.232.51:49191/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:37:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812534/",
            "reporter": "geenensp"
        }
    ],
    "3812533": [
        {
            "dateadded": "2026-04-05 15:07:09 UTC",
            "url": "http://42.239.255.146:40445/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812533/",
            "reporter": "geenensp"
        }
    ],
    "3812532": [
        {
            "dateadded": "2026-04-05 15:06:16 UTC",
            "url": "http://42.239.255.146:40445/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 17:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812532/",
            "reporter": "geenensp"
        }
    ],
    "3812530": [
        {
            "dateadded": "2026-04-05 15:05:22 UTC",
            "url": "http://167.250.158.32:42270/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812530/",
            "reporter": "geenensp"
        }
    ],
    "3812531": [
        {
            "dateadded": "2026-04-05 15:05:22 UTC",
            "url": "http://59.182.126.252:38726/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812531/",
            "reporter": "geenensp"
        }
    ],
    "3812529": [
        {
            "dateadded": "2026-04-05 14:58:22 UTC",
            "url": "http://61.54.238.50:55819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 21:55:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812529/",
            "reporter": "geenensp"
        }
    ],
    "3812528": [
        {
            "dateadded": "2026-04-05 14:51:20 UTC",
            "url": "http://115.55.232.156:60560/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:25:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812528/",
            "reporter": "geenensp"
        }
    ],
    "3812527": [
        {
            "dateadded": "2026-04-05 14:49:17 UTC",
            "url": "http://182.117.30.6:52717/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:03:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812527/",
            "reporter": "geenensp"
        }
    ],
    "3812526": [
        {
            "dateadded": "2026-04-05 14:48:20 UTC",
            "url": "http://42.235.50.70:53049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:22:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812526/",
            "reporter": "geenensp"
        }
    ],
    "3812525": [
        {
            "dateadded": "2026-04-05 14:47:09 UTC",
            "url": "http://113.239.71.103:55329/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:41:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812525/",
            "reporter": "geenensp"
        }
    ],
    "3812524": [
        {
            "dateadded": "2026-04-05 14:39:18 UTC",
            "url": "http://42.230.191.97:49822/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:41:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812524/",
            "reporter": "geenensp"
        }
    ],
    "3812523": [
        {
            "dateadded": "2026-04-05 14:36:13 UTC",
            "url": "http://167.250.158.32:42270/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:44:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812523/",
            "reporter": "geenensp"
        }
    ],
    "3812522": [
        {
            "dateadded": "2026-04-05 14:26:19 UTC",
            "url": "http://60.23.236.125:35619/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:51:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812522/",
            "reporter": "geenensp"
        }
    ],
    "3812521": [
        {
            "dateadded": "2026-04-05 14:24:19 UTC",
            "url": "http://110.37.111.110:37136/i",
            "url_status": "offline",
            "last_online": "2026-04-05 14:24:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812521/",
            "reporter": "geenensp"
        }
    ],
    "3812520": [
        {
            "dateadded": "2026-04-05 14:22:07 UTC",
            "url": "http://39.74.83.3:52343/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:15:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812520/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812519": [
        {
            "dateadded": "2026-04-05 14:21:17 UTC",
            "url": "http://45.156.87.253/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-05 14:21:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812519/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812518": [
        {
            "dateadded": "2026-04-05 14:20:09 UTC",
            "url": "http://45.156.87.253/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 14:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812518/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812516": [
        {
            "dateadded": "2026-04-05 14:19:32 UTC",
            "url": "http://185.208.159.132/harm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812516/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812517": [
        {
            "dateadded": "2026-04-05 14:19:32 UTC",
            "url": "http://185.208.159.132/arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812517/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812514": [
        {
            "dateadded": "2026-04-05 14:19:31 UTC",
            "url": "http://185.208.159.132/hmips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812514/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812515": [
        {
            "dateadded": "2026-04-05 14:19:31 UTC",
            "url": "http://185.208.159.132/arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812515/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812510": [
        {
            "dateadded": "2026-04-05 14:19:30 UTC",
            "url": "http://185.208.159.132/arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812510/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812511": [
        {
            "dateadded": "2026-04-05 14:19:30 UTC",
            "url": "http://185.208.159.132/mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812511/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812512": [
        {
            "dateadded": "2026-04-05 14:19:30 UTC",
            "url": "http://185.208.159.132/harm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812512/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812513": [
        {
            "dateadded": "2026-04-05 14:19:30 UTC",
            "url": "http://185.208.159.132/mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812513/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812508": [
        {
            "dateadded": "2026-04-05 14:19:29 UTC",
            "url": "http://185.208.159.132/arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812508/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812509": [
        {
            "dateadded": "2026-04-05 14:19:29 UTC",
            "url": "http://185.208.159.132/harm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812509/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812501": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://45.156.87.253/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812501/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812502": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://45.156.87.253/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812502/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812503": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://38.60.216.39/bins/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 15:40:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812503/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812504": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://38.60.216.39/bins/arm4",
            "url_status": "offline",
            "last_online": "2026-04-06 15:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812504/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812505": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://38.60.216.39/bins/sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 16:51:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812505/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812506": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://38.60.216.39/bins/mips",
            "url_status": "offline",
            "last_online": "2026-04-06 16:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812506/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812507": [
        {
            "dateadded": "2026-04-05 14:19:22 UTC",
            "url": "http://38.60.216.39/bins/ppc",
            "url_status": "offline",
            "last_online": "2026-04-06 19:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812507/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812493": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://114.239.199.122:59871/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:18:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812493/",
            "reporter": "geenensp"
        }
    ],
    "3812494": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812494/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812495": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812495/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812496": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812496/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812497": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812497/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812498": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812498/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812499": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812499/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812500": [
        {
            "dateadded": "2026-04-05 14:19:21 UTC",
            "url": "http://45.156.87.253/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 14:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812500/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3812492": [
        {
            "dateadded": "2026-04-05 14:18:19 UTC",
            "url": "http://113.239.71.103:55329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:00:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812492/",
            "reporter": "geenensp"
        }
    ],
    "3812491": [
        {
            "dateadded": "2026-04-05 14:15:18 UTC",
            "url": "http://182.117.8.232:37380/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:11:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812491/",
            "reporter": "geenensp"
        }
    ],
    "3812490": [
        {
            "dateadded": "2026-04-05 14:13:20 UTC",
            "url": "http://42.230.191.97:49822/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812490/",
            "reporter": "geenensp"
        }
    ],
    "3812489": [
        {
            "dateadded": "2026-04-05 14:11:10 UTC",
            "url": "http://110.36.26.86:49018/i",
            "url_status": "offline",
            "last_online": "2026-04-05 14:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812489/",
            "reporter": "geenensp"
        }
    ],
    "3812488": [
        {
            "dateadded": "2026-04-05 14:02:12 UTC",
            "url": "http://175.175.164.88:46771/i",
            "url_status": "offline",
            "last_online": "2026-04-12 05:18:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812488/",
            "reporter": "geenensp"
        }
    ],
    "3812487": [
        {
            "dateadded": "2026-04-05 13:56:21 UTC",
            "url": "http://110.37.111.110:37136/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 13:56:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812487/",
            "reporter": "geenensp"
        }
    ],
    "3812486": [
        {
            "dateadded": "2026-04-05 13:54:09 UTC",
            "url": "http://182.117.8.232:37380/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:24:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812486/",
            "reporter": "geenensp"
        }
    ],
    "3812485": [
        {
            "dateadded": "2026-04-05 13:51:08 UTC",
            "url": "http://114.239.199.122:59871/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 19:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812485/",
            "reporter": "geenensp"
        }
    ],
    "3812483": [
        {
            "dateadded": "2026-04-05 13:49:21 UTC",
            "url": "http://110.36.26.86:49018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 13:49:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812483/",
            "reporter": "geenensp"
        }
    ],
    "3812484": [
        {
            "dateadded": "2026-04-05 13:49:21 UTC",
            "url": "http://110.39.228.163:39775/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812484/",
            "reporter": "geenensp"
        }
    ],
    "3812482": [
        {
            "dateadded": "2026-04-05 13:44:17 UTC",
            "url": "http://110.39.228.163:39775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:50:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812482/",
            "reporter": "geenensp"
        }
    ],
    "3812481": [
        {
            "dateadded": "2026-04-05 13:36:20 UTC",
            "url": "http://175.175.164.88:46771/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 05:28:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812481/",
            "reporter": "geenensp"
        }
    ],
    "3812480": [
        {
            "dateadded": "2026-04-05 13:26:08 UTC",
            "url": "http://110.37.122.34:49966/i",
            "url_status": "offline",
            "last_online": "2026-04-05 13:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812480/",
            "reporter": "geenensp"
        }
    ],
    "3812479": [
        {
            "dateadded": "2026-04-05 13:22:07 UTC",
            "url": "http://105.186.248.234:33035/i",
            "url_status": "offline",
            "last_online": "2026-04-05 13:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812479/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812478": [
        {
            "dateadded": "2026-04-05 13:17:22 UTC",
            "url": "http://222.127.71.141:56631/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:43:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812478/",
            "reporter": "geenensp"
        }
    ],
    "3812477": [
        {
            "dateadded": "2026-04-05 13:16:13 UTC",
            "url": "http://124.131.158.186:57890/i",
            "url_status": "offline",
            "last_online": "2026-04-07 23:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812477/",
            "reporter": "geenensp"
        }
    ],
    "3812476": [
        {
            "dateadded": "2026-04-05 13:06:17 UTC",
            "url": "http://170.244.180.22:60885/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:51:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812476/",
            "reporter": "geenensp"
        }
    ],
    "3812475": [
        {
            "dateadded": "2026-04-05 12:58:33 UTC",
            "url": "http://112.238.156.226:44295/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:56:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812475/",
            "reporter": "geenensp"
        }
    ],
    "3812474": [
        {
            "dateadded": "2026-04-05 12:56:09 UTC",
            "url": "http://222.127.71.141:56631/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 03:43:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812474/",
            "reporter": "geenensp"
        }
    ],
    "3812473": [
        {
            "dateadded": "2026-04-05 12:54:19 UTC",
            "url": "http://182.117.108.122:45751/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:58:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812473/",
            "reporter": "geenensp"
        }
    ],
    "3812472": [
        {
            "dateadded": "2026-04-05 12:49:17 UTC",
            "url": "http://124.131.158.186:57890/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 22:50:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812472/",
            "reporter": "geenensp"
        }
    ],
    "3812471": [
        {
            "dateadded": "2026-04-05 12:48:21 UTC",
            "url": "http://221.15.5.7:34979/i",
            "url_status": "offline",
            "last_online": "2026-04-07 23:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812471/",
            "reporter": "geenensp"
        }
    ],
    "3812470": [
        {
            "dateadded": "2026-04-05 12:40:20 UTC",
            "url": "http://222.134.173.114:39695/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:58:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812470/",
            "reporter": "geenensp"
        }
    ],
    "3812469": [
        {
            "dateadded": "2026-04-05 12:32:17 UTC",
            "url": "http://182.117.108.122:45751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:11:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812469/",
            "reporter": "geenensp"
        }
    ],
    "3812468": [
        {
            "dateadded": "2026-04-05 12:22:24 UTC",
            "url": "http://221.15.5.7:34979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 04:17:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812468/",
            "reporter": "geenensp"
        }
    ],
    "3812467": [
        {
            "dateadded": "2026-04-05 12:22:23 UTC",
            "url": "http://110.39.239.111:52560/i",
            "url_status": "offline",
            "last_online": "2026-04-16 05:28:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812467/",
            "reporter": "geenensp"
        }
    ],
    "3812466": [
        {
            "dateadded": "2026-04-05 12:19:18 UTC",
            "url": "http://106.59.114.57:37837/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:05:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812466/",
            "reporter": "geenensp"
        }
    ],
    "3812465": [
        {
            "dateadded": "2026-04-05 12:09:15 UTC",
            "url": "http://119.178.250.160:57977/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:40:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812465/",
            "reporter": "geenensp"
        }
    ],
    "3812464": [
        {
            "dateadded": "2026-04-05 12:06:13 UTC",
            "url": "http://60.19.219.238:52577/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:49:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812464/",
            "reporter": "geenensp"
        }
    ],
    "3812463": [
        {
            "dateadded": "2026-04-05 12:05:15 UTC",
            "url": "http://110.37.43.127:53103/i",
            "url_status": "offline",
            "last_online": "2026-04-05 12:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812463/",
            "reporter": "geenensp"
        }
    ],
    "3812462": [
        {
            "dateadded": "2026-04-05 11:56:19 UTC",
            "url": "http://110.39.239.111:52560/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 04:57:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812462/",
            "reporter": "geenensp"
        }
    ],
    "3812461": [
        {
            "dateadded": "2026-04-05 11:48:33 UTC",
            "url": "http://106.59.114.57:37837/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812461/",
            "reporter": "geenensp"
        }
    ],
    "3812460": [
        {
            "dateadded": "2026-04-05 11:39:10 UTC",
            "url": "http://119.178.250.160:57977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:07:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812460/",
            "reporter": "geenensp"
        }
    ],
    "3812459": [
        {
            "dateadded": "2026-04-05 11:39:08 UTC",
            "url": "http://110.37.43.127:53103/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 11:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812459/",
            "reporter": "geenensp"
        }
    ],
    "3812458": [
        {
            "dateadded": "2026-04-05 11:36:10 UTC",
            "url": "http://115.63.33.161:39490/i",
            "url_status": "offline",
            "last_online": "2026-04-05 11:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812458/",
            "reporter": "geenensp"
        }
    ],
    "3812457": [
        {
            "dateadded": "2026-04-05 11:34:16 UTC",
            "url": "http://60.19.219.238:52577/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:43:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812457/",
            "reporter": "geenensp"
        }
    ],
    "3812456": [
        {
            "dateadded": "2026-04-05 11:19:18 UTC",
            "url": "http://115.63.33.161:39490/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 11:19:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812456/",
            "reporter": "geenensp"
        }
    ],
    "3812455": [
        {
            "dateadded": "2026-04-05 11:15:20 UTC",
            "url": "http://175.151.116.102:46020/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812455/",
            "reporter": "geenensp"
        }
    ],
    "3812454": [
        {
            "dateadded": "2026-04-05 11:09:25 UTC",
            "url": "http://124.89.121.42:61335/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:35:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812454/",
            "reporter": "geenensp"
        }
    ],
    "3812453": [
        {
            "dateadded": "2026-04-05 11:07:07 UTC",
            "url": "http://222.219.79.204:54149/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 09:52:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812453/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812451": [
        {
            "dateadded": "2026-04-05 11:00:22 UTC",
            "url": "http://60.23.77.120:45032/i",
            "url_status": "offline",
            "last_online": "2026-04-10 15:55:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812451/",
            "reporter": "geenensp"
        }
    ],
    "3812452": [
        {
            "dateadded": "2026-04-05 11:00:22 UTC",
            "url": "http://125.43.24.160:38148/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:20:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812452/",
            "reporter": "geenensp"
        }
    ],
    "3812450": [
        {
            "dateadded": "2026-04-05 10:52:08 UTC",
            "url": "http://123.235.72.116:57923/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812450/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812449": [
        {
            "dateadded": "2026-04-05 10:47:22 UTC",
            "url": "http://182.116.93.70:55118/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:47:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812449/",
            "reporter": "geenensp"
        }
    ],
    "3812448": [
        {
            "dateadded": "2026-04-05 10:41:20 UTC",
            "url": "http://46.180.158.120:2111/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812448/",
            "reporter": "geenensp"
        }
    ],
    "3812447": [
        {
            "dateadded": "2026-04-05 10:41:13 UTC",
            "url": "http://46.180.158.120:2111/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812447/",
            "reporter": "geenensp"
        }
    ],
    "3812446": [
        {
            "dateadded": "2026-04-05 10:38:22 UTC",
            "url": "http://125.43.24.160:38148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812446/",
            "reporter": "geenensp"
        }
    ],
    "3812445": [
        {
            "dateadded": "2026-04-05 10:37:25 UTC",
            "url": "http://60.23.77.120:45032/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 17:31:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812445/",
            "reporter": "geenensp"
        }
    ],
    "3812444": [
        {
            "dateadded": "2026-04-05 10:37:18 UTC",
            "url": "http://182.116.93.70:55118/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812444/",
            "reporter": "geenensp"
        }
    ],
    "3812441": [
        {
            "dateadded": "2026-04-05 10:35:23 UTC",
            "url": "http://125.47.208.112:45672/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812441/",
            "reporter": "geenensp"
        }
    ],
    "3812442": [
        {
            "dateadded": "2026-04-05 10:35:23 UTC",
            "url": "http://42.232.176.236:39468/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812442/",
            "reporter": "geenensp"
        }
    ],
    "3812443": [
        {
            "dateadded": "2026-04-05 10:35:23 UTC",
            "url": "http://59.176.71.127:46152/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:35:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812443/",
            "reporter": "geenensp"
        }
    ],
    "3812440": [
        {
            "dateadded": "2026-04-05 10:32:07 UTC",
            "url": "http://115.48.162.62:50466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812440/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812439": [
        {
            "dateadded": "2026-04-05 10:29:23 UTC",
            "url": "http://115.51.92.201:54137/i",
            "url_status": "offline",
            "last_online": "2026-04-07 17:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812439/",
            "reporter": "geenensp"
        }
    ],
    "3812438": [
        {
            "dateadded": "2026-04-05 10:22:20 UTC",
            "url": "http://182.112.7.86:49191/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 17:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812438/",
            "reporter": "geenensp"
        }
    ],
    "3812437": [
        {
            "dateadded": "2026-04-05 10:18:30 UTC",
            "url": "http://42.239.109.61:48558/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:18:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812437/",
            "reporter": "geenensp"
        }
    ],
    "3812436": [
        {
            "dateadded": "2026-04-05 10:11:28 UTC",
            "url": "http://59.176.71.127:46152/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:11:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812436/",
            "reporter": "geenensp"
        }
    ],
    "3812435": [
        {
            "dateadded": "2026-04-05 10:11:23 UTC",
            "url": "http://42.232.176.236:39468/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812435/",
            "reporter": "geenensp"
        }
    ],
    "3812434": [
        {
            "dateadded": "2026-04-05 10:07:19 UTC",
            "url": "http://125.47.208.112:45672/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812434/",
            "reporter": "geenensp"
        }
    ],
    "3812433": [
        {
            "dateadded": "2026-04-05 09:37:20 UTC",
            "url": "http://182.114.33.61:42919/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:19:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812433/",
            "reporter": "geenensp"
        }
    ],
    "3812432": [
        {
            "dateadded": "2026-04-05 09:35:22 UTC",
            "url": "http://45.184.19.72:35528/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:59:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812432/",
            "reporter": "geenensp"
        }
    ],
    "3812431": [
        {
            "dateadded": "2026-04-05 09:22:18 UTC",
            "url": "http://222.139.204.216:54088/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:33:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812431/",
            "reporter": "geenensp"
        }
    ],
    "3812430": [
        {
            "dateadded": "2026-04-05 09:19:08 UTC",
            "url": "https://051516xx.vectorprospera.digital/?=check&&actmn=qYXcbmMVbzghCbqV",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812430/",
            "reporter": "anonymous"
        }
    ],
    "3812429": [
        {
            "dateadded": "2026-04-05 09:12:19 UTC",
            "url": "http://36.70.193.241:55890/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812429/",
            "reporter": "geenensp"
        }
    ],
    "3812428": [
        {
            "dateadded": "2026-04-05 09:11:22 UTC",
            "url": "http://222.140.187.63:46533/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:19:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812428/",
            "reporter": "geenensp"
        }
    ],
    "3812427": [
        {
            "dateadded": "2026-04-05 09:10:19 UTC",
            "url": "http://45.184.19.72:35528/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812427/",
            "reporter": "geenensp"
        }
    ],
    "3812426": [
        {
            "dateadded": "2026-04-05 09:09:25 UTC",
            "url": "http://182.114.33.61:42919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:43:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812426/",
            "reporter": "geenensp"
        }
    ],
    "3812425": [
        {
            "dateadded": "2026-04-05 08:57:08 UTC",
            "url": "http://222.139.204.216:54088/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:06:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812425/",
            "reporter": "geenensp"
        }
    ],
    "3812424": [
        {
            "dateadded": "2026-04-05 08:56:19 UTC",
            "url": "http://219.155.211.115:45753/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:49:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812424/",
            "reporter": "geenensp"
        }
    ],
    "3812423": [
        {
            "dateadded": "2026-04-05 08:55:09 UTC",
            "url": "http://112.239.96.184:39644/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:51:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812423/",
            "reporter": "geenensp"
        }
    ],
    "3812422": [
        {
            "dateadded": "2026-04-05 08:53:18 UTC",
            "url": "http://42.6.80.104:60301/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812422/",
            "reporter": "geenensp"
        }
    ],
    "3812421": [
        {
            "dateadded": "2026-04-05 08:51:16 UTC",
            "url": "http://222.140.187.63:46533/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812421/",
            "reporter": "geenensp"
        }
    ],
    "3812420": [
        {
            "dateadded": "2026-04-05 08:47:07 UTC",
            "url": "http://123.4.251.149:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-07 14:45:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812420/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812419": [
        {
            "dateadded": "2026-04-05 08:44:23 UTC",
            "url": "http://36.70.193.241:55890/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 08:44:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812419/",
            "reporter": "geenensp"
        }
    ],
    "3812418": [
        {
            "dateadded": "2026-04-05 08:40:19 UTC",
            "url": "http://45.183.184.74:56089/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:20:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812418/",
            "reporter": "geenensp"
        }
    ],
    "3812417": [
        {
            "dateadded": "2026-04-05 08:37:06 UTC",
            "url": "http://115.55.240.58:45756/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:04:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812417/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812416": [
        {
            "dateadded": "2026-04-05 08:36:09 UTC",
            "url": "http://115.55.48.14:56706/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 11:10:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812416/",
            "reporter": "geenensp"
        }
    ],
    "3812415": [
        {
            "dateadded": "2026-04-05 08:32:18 UTC",
            "url": "http://219.155.211.115:45753/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 23:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812415/",
            "reporter": "geenensp"
        }
    ],
    "3812414": [
        {
            "dateadded": "2026-04-05 08:27:43 UTC",
            "url": "http://112.239.96.184:39644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:23:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812414/",
            "reporter": "geenensp"
        }
    ],
    "3812413": [
        {
            "dateadded": "2026-04-05 08:24:13 UTC",
            "url": "http://196.190.11.194:52321/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:36:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812413/",
            "reporter": "geenensp"
        }
    ],
    "3812412": [
        {
            "dateadded": "2026-04-05 08:14:05 UTC",
            "url": "http://85.239.147.6/files/8301037712/JSmJXqG.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812412/",
            "reporter": "c2hunter"
        }
    ],
    "3812411": [
        {
            "dateadded": "2026-04-05 08:12:07 UTC",
            "url": "http://115.55.240.58:45756/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 23:08:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812411/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812410": [
        {
            "dateadded": "2026-04-05 07:59:22 UTC",
            "url": "http://kual11.duckdns.org/o.xml",
            "url_status": "offline",
            "last_online": "2026-04-05 22:04:43 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812410/",
            "reporter": "NDA0E"
        }
    ],
    "3812409": [
        {
            "dateadded": "2026-04-05 07:59:12 UTC",
            "url": "http://kual11.duckdns.org/all.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812409/",
            "reporter": "NDA0E"
        }
    ],
    "3812407": [
        {
            "dateadded": "2026-04-05 07:59:08 UTC",
            "url": "http://195.178.110.204/u",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:26 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812407/",
            "reporter": "NDA0E"
        }
    ],
    "3812408": [
        {
            "dateadded": "2026-04-05 07:59:08 UTC",
            "url": "http://147.45.60.206/giga.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 04:26:35 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812408/",
            "reporter": "NDA0E"
        }
    ],
    "3812406": [
        {
            "dateadded": "2026-04-05 07:58:38 UTC",
            "url": "http://kual11.duckdns.org/main_spc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812406/",
            "reporter": "NDA0E"
        }
    ],
    "3812405": [
        {
            "dateadded": "2026-04-05 07:58:36 UTC",
            "url": "http://kual11.duckdns.org/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-05 22:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812405/",
            "reporter": "NDA0E"
        }
    ],
    "3812400": [
        {
            "dateadded": "2026-04-05 07:58:33 UTC",
            "url": "http://kual11.duckdns.org/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 22:18:46 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812400/",
            "reporter": "NDA0E"
        }
    ],
    "3812401": [
        {
            "dateadded": "2026-04-05 07:58:33 UTC",
            "url": "http://kual11.duckdns.org/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 22:27:56 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812401/",
            "reporter": "NDA0E"
        }
    ],
    "3812402": [
        {
            "dateadded": "2026-04-05 07:58:33 UTC",
            "url": "http://kual11.duckdns.org/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-05 22:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812402/",
            "reporter": "NDA0E"
        }
    ],
    "3812403": [
        {
            "dateadded": "2026-04-05 07:58:33 UTC",
            "url": "http://kual11.duckdns.org/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 21:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812403/",
            "reporter": "NDA0E"
        }
    ],
    "3812404": [
        {
            "dateadded": "2026-04-05 07:58:33 UTC",
            "url": "http://75.119.155.130/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-06 03:49:27 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812404/",
            "reporter": "NDA0E"
        }
    ],
    "3812394": [
        {
            "dateadded": "2026-04-05 07:58:31 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-05 21:48:00 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812394/",
            "reporter": "NDA0E"
        }
    ],
    "3812395": [
        {
            "dateadded": "2026-04-05 07:58:31 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 22:50:17 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812395/",
            "reporter": "NDA0E"
        }
    ],
    "3812396": [
        {
            "dateadded": "2026-04-05 07:58:31 UTC",
            "url": "http://kual11.duckdns.org/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-05 23:05:39 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812396/",
            "reporter": "NDA0E"
        }
    ],
    "3812397": [
        {
            "dateadded": "2026-04-05 07:58:31 UTC",
            "url": "http://kual11.duckdns.org/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 23:10:49 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812397/",
            "reporter": "NDA0E"
        }
    ],
    "3812398": [
        {
            "dateadded": "2026-04-05 07:58:31 UTC",
            "url": "http://75.119.155.130/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 04:21:28 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812398/",
            "reporter": "NDA0E"
        }
    ],
    "3812399": [
        {
            "dateadded": "2026-04-05 07:58:31 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:05 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812399/",
            "reporter": "NDA0E"
        }
    ],
    "3812393": [
        {
            "dateadded": "2026-04-05 07:58:29 UTC",
            "url": "http://kual11.duckdns.org/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 21:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812393/",
            "reporter": "NDA0E"
        }
    ],
    "3812392": [
        {
            "dateadded": "2026-04-05 07:58:27 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.arm",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812392/",
            "reporter": "NDA0E"
        }
    ],
    "3812388": [
        {
            "dateadded": "2026-04-05 07:58:25 UTC",
            "url": "http://kual11.duckdns.org/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 22:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812388/",
            "reporter": "NDA0E"
        }
    ],
    "3812389": [
        {
            "dateadded": "2026-04-05 07:58:25 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:30:32 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812389/",
            "reporter": "NDA0E"
        }
    ],
    "3812390": [
        {
            "dateadded": "2026-04-05 07:58:25 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.i486",
            "url_status": "offline",
            "last_online": "2026-04-05 22:55:25 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812390/",
            "reporter": "NDA0E"
        }
    ],
    "3812391": [
        {
            "dateadded": "2026-04-05 07:58:25 UTC",
            "url": "http://176.65.139.64/arc",
            "url_status": "offline",
            "last_online": "2026-04-14 22:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812391/",
            "reporter": "NDA0E"
        }
    ],
    "3812385": [
        {
            "dateadded": "2026-04-05 07:58:24 UTC",
            "url": "http://75.119.155.130/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-06 04:03:33 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812385/",
            "reporter": "NDA0E"
        }
    ],
    "3812386": [
        {
            "dateadded": "2026-04-05 07:58:24 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:08:02 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812386/",
            "reporter": "NDA0E"
        }
    ],
    "3812387": [
        {
            "dateadded": "2026-04-05 07:58:24 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.i486",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:25 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812387/",
            "reporter": "NDA0E"
        }
    ],
    "3812378": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 21:41:05 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812378/",
            "reporter": "NDA0E"
        }
    ],
    "3812379": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 21:35:59 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812379/",
            "reporter": "NDA0E"
        }
    ],
    "3812380": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 22:20:34 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812380/",
            "reporter": "NDA0E"
        }
    ],
    "3812381": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/titanjr.arc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812381/",
            "reporter": "NDA0E"
        }
    ],
    "3812382": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 23:05:54 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812382/",
            "reporter": "NDA0E"
        }
    ],
    "3812383": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-05 22:38:56 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812383/",
            "reporter": "NDA0E"
        }
    ],
    "3812384": [
        {
            "dateadded": "2026-04-05 07:58:23 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-05 21:55:43 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812384/",
            "reporter": "NDA0E"
        }
    ],
    "3812376": [
        {
            "dateadded": "2026-04-05 07:58:21 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-05 22:41:36 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812376/",
            "reporter": "NDA0E"
        }
    ],
    "3812377": [
        {
            "dateadded": "2026-04-05 07:58:21 UTC",
            "url": "http://kual11.duckdns.org/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-05 22:21:04 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812377/",
            "reporter": "NDA0E"
        }
    ],
    "3812363": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://kual11.duckdns.org/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 22:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812363/",
            "reporter": "NDA0E"
        }
    ],
    "3812364": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.spc",
            "url_status": "offline",
            "last_online": "2026-04-05 21:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812364/",
            "reporter": "NDA0E"
        }
    ],
    "3812365": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://kual11.duckdns.org/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 22:32:28 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812365/",
            "reporter": "NDA0E"
        }
    ],
    "3812366": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://75.119.155.130/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-06 04:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812366/",
            "reporter": "NDA0E"
        }
    ],
    "3812367": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://75.119.155.130/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-06 05:14:36 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812367/",
            "reporter": "NDA0E"
        }
    ],
    "3812368": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.spc",
            "url_status": "online",
            "last_online": "2026-04-27 12:09:19 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812368/",
            "reporter": "NDA0E"
        }
    ],
    "3812369": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812369/",
            "reporter": "NDA0E"
        }
    ],
    "3812370": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.x86_32",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:05 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812370/",
            "reporter": "NDA0E"
        }
    ],
    "3812371": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.ppc440",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812371/",
            "reporter": "NDA0E"
        }
    ],
    "3812372": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:53 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812372/",
            "reporter": "NDA0E"
        }
    ],
    "3812373": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:23 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812373/",
            "reporter": "NDA0E"
        }
    ],
    "3812374": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812374/",
            "reporter": "NDA0E"
        }
    ],
    "3812375": [
        {
            "dateadded": "2026-04-05 07:58:19 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:01:59 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812375/",
            "reporter": "NDA0E"
        }
    ],
    "3812355": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://kual11.duckdns.org/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 22:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812355/",
            "reporter": "NDA0E"
        }
    ],
    "3812356": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 22:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812356/",
            "reporter": "NDA0E"
        }
    ],
    "3812357": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://kual11.duckdns.org/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-05 23:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812357/",
            "reporter": "NDA0E"
        }
    ],
    "3812358": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://kual11.duckdns.org/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 23:04:00 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812358/",
            "reporter": "NDA0E"
        }
    ],
    "3812359": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:34 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812359/",
            "reporter": "NDA0E"
        }
    ],
    "3812360": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.mipsl",
            "url_status": "online",
            "last_online": "2026-04-27 12:38:30 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812360/",
            "reporter": "NDA0E"
        }
    ],
    "3812361": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://75.119.155.130/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-06 03:56:01 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812361/",
            "reporter": "NDA0E"
        }
    ],
    "3812362": [
        {
            "dateadded": "2026-04-05 07:58:16 UTC",
            "url": "http://75.119.155.130/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 04:43:48 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812362/",
            "reporter": "NDA0E"
        }
    ],
    "3812353": [
        {
            "dateadded": "2026-04-05 07:58:15 UTC",
            "url": "http://75.119.155.130/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-06 05:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812353/",
            "reporter": "NDA0E"
        }
    ],
    "3812354": [
        {
            "dateadded": "2026-04-05 07:58:15 UTC",
            "url": "http://75.119.155.130/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 04:05:54 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812354/",
            "reporter": "NDA0E"
        }
    ],
    "3812352": [
        {
            "dateadded": "2026-04-05 07:58:14 UTC",
            "url": "http://176.65.139.64/i686",
            "url_status": "offline",
            "last_online": "2026-04-14 22:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812352/",
            "reporter": "NDA0E"
        }
    ],
    "3812342": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-05 21:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812342/",
            "reporter": "NDA0E"
        }
    ],
    "3812343": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-05 21:49:47 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812343/",
            "reporter": "NDA0E"
        }
    ],
    "3812344": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 21:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812344/",
            "reporter": "NDA0E"
        }
    ],
    "3812345": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-05 21:44:40 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812345/",
            "reporter": "NDA0E"
        }
    ],
    "3812346": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-05 23:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812346/",
            "reporter": "NDA0E"
        }
    ],
    "3812347": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-05 23:02:19 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812347/",
            "reporter": "NDA0E"
        }
    ],
    "3812348": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 22:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812348/",
            "reporter": "NDA0E"
        }
    ],
    "3812349": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.arc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812349/",
            "reporter": "NDA0E"
        }
    ],
    "3812350": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/titanjr.i486",
            "url_status": "offline",
            "last_online": "2026-04-05 22:27:50 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812350/",
            "reporter": "NDA0E"
        }
    ],
    "3812351": [
        {
            "dateadded": "2026-04-05 07:58:10 UTC",
            "url": "http://kual11.duckdns.org/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-05 22:06:51 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812351/",
            "reporter": "NDA0E"
        }
    ],
    "3812339": [
        {
            "dateadded": "2026-04-05 07:58:06 UTC",
            "url": "http://kual11.duckdns.org/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-05 22:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812339/",
            "reporter": "NDA0E"
        }
    ],
    "3812340": [
        {
            "dateadded": "2026-04-05 07:58:06 UTC",
            "url": "http://kual11.duckdns.org/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812340/",
            "reporter": "NDA0E"
        }
    ],
    "3812341": [
        {
            "dateadded": "2026-04-05 07:58:06 UTC",
            "url": "http://kual11.duckdns.org/huhu/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 22:27:36 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812341/",
            "reporter": "NDA0E"
        }
    ],
    "3812338": [
        {
            "dateadded": "2026-04-05 07:54:14 UTC",
            "url": "http://117.192.125.50:44896/i",
            "url_status": "offline",
            "last_online": "2026-04-05 07:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812338/",
            "reporter": "geenensp"
        }
    ],
    "3812337": [
        {
            "dateadded": "2026-04-05 07:51:18 UTC",
            "url": "http://196.190.11.194:52321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812337/",
            "reporter": "geenensp"
        }
    ],
    "3812336": [
        {
            "dateadded": "2026-04-05 07:48:16 UTC",
            "url": "http://42.232.101.23:38148/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:46:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812336/",
            "reporter": "geenensp"
        }
    ],
    "3812335": [
        {
            "dateadded": "2026-04-05 07:46:22 UTC",
            "url": "http://103.19.49.134:44646/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812335/",
            "reporter": "geenensp"
        }
    ],
    "3812334": [
        {
            "dateadded": "2026-04-05 07:37:21 UTC",
            "url": "http://154.242.3.55:36800/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 07:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812334/",
            "reporter": "geenensp"
        }
    ],
    "3812333": [
        {
            "dateadded": "2026-04-05 07:37:19 UTC",
            "url": "http://154.242.3.55:36800/i",
            "url_status": "offline",
            "last_online": "2026-04-05 07:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812333/",
            "reporter": "geenensp"
        }
    ],
    "3812332": [
        {
            "dateadded": "2026-04-05 07:33:12 UTC",
            "url": "http://42.235.101.240:37749/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:18:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812332/",
            "reporter": "geenensp"
        }
    ],
    "3812331": [
        {
            "dateadded": "2026-04-05 07:31:21 UTC",
            "url": "http://117.192.125.50:44896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 07:31:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812331/",
            "reporter": "geenensp"
        }
    ],
    "3812330": [
        {
            "dateadded": "2026-04-05 07:26:14 UTC",
            "url": "http://115.50.12.216:34093/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:27:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812330/",
            "reporter": "geenensp"
        }
    ],
    "3812329": [
        {
            "dateadded": "2026-04-05 07:12:21 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-15 05:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812329/",
            "reporter": "NDA0E"
        }
    ],
    "3812324": [
        {
            "dateadded": "2026-04-05 07:12:18 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-15 10:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812324/",
            "reporter": "NDA0E"
        }
    ],
    "3812325": [
        {
            "dateadded": "2026-04-05 07:12:18 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-15 10:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812325/",
            "reporter": "NDA0E"
        }
    ],
    "3812326": [
        {
            "dateadded": "2026-04-05 07:12:18 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-15 10:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812326/",
            "reporter": "NDA0E"
        }
    ],
    "3812327": [
        {
            "dateadded": "2026-04-05 07:12:18 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-15 10:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812327/",
            "reporter": "NDA0E"
        }
    ],
    "3812328": [
        {
            "dateadded": "2026-04-05 07:12:18 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-15 10:49:01 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812328/",
            "reporter": "NDA0E"
        }
    ],
    "3812323": [
        {
            "dateadded": "2026-04-05 07:12:14 UTC",
            "url": "http://cnc.xenema.vip/ohshit.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 10:15:25 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812323/",
            "reporter": "NDA0E"
        }
    ],
    "3812321": [
        {
            "dateadded": "2026-04-05 07:12:10 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-20 22:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812321/",
            "reporter": "NDA0E"
        }
    ],
    "3812322": [
        {
            "dateadded": "2026-04-05 07:12:10 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-15 10:31:40 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812322/",
            "reporter": "NDA0E"
        }
    ],
    "3812319": [
        {
            "dateadded": "2026-04-05 07:12:08 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-15 10:27:53 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812319/",
            "reporter": "NDA0E"
        }
    ],
    "3812320": [
        {
            "dateadded": "2026-04-05 07:12:08 UTC",
            "url": "http://cnc.xenema.vip/hiddenbin/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-15 10:14:57 UTC",
            "threat": "malware_download",
            "tags": [
                "botnetdomain",
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812320/",
            "reporter": "NDA0E"
        }
    ],
    "3812318": [
        {
            "dateadded": "2026-04-05 07:09:11 UTC",
            "url": "https://clear-sky.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 09:35:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812318/",
            "reporter": "anonymous"
        }
    ],
    "3812317": [
        {
            "dateadded": "2026-04-05 07:05:18 UTC",
            "url": "http://42.235.101.240:37749/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:05:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812317/",
            "reporter": "geenensp"
        }
    ],
    "3812315": [
        {
            "dateadded": "2026-04-05 07:02:13 UTC",
            "url": "http://176.65.139.67/ppc440",
            "url_status": "offline",
            "last_online": "2026-04-12 11:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812315/",
            "reporter": "NDA0E"
        }
    ],
    "3812316": [
        {
            "dateadded": "2026-04-05 07:02:13 UTC",
            "url": "http://64.89.163.118/mips.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:48 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812316/",
            "reporter": "NDA0E"
        }
    ],
    "3812313": [
        {
            "dateadded": "2026-04-05 07:00:27 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812313/",
            "reporter": "NDA0E"
        }
    ],
    "3812314": [
        {
            "dateadded": "2026-04-05 07:00:27 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812314/",
            "reporter": "NDA0E"
        }
    ],
    "3812300": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://176.65.139.67/all.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:39:52 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812300/",
            "reporter": "NDA0E"
        }
    ],
    "3812301": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://87.121.84.19/o.xml",
            "url_status": "offline",
            "last_online": "2026-04-05 22:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812301/",
            "reporter": "NDA0E"
        }
    ],
    "3812302": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://195.178.110.204/s",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812302/",
            "reporter": "NDA0E"
        }
    ],
    "3812303": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://42.226.222.167:59680/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:06:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812303/",
            "reporter": "geenensp"
        }
    ],
    "3812304": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://87.121.79.97/SnOoPy.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 10:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "gafgyt",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812304/",
            "reporter": "NDA0E"
        }
    ],
    "3812305": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-20 22:35:07 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812305/",
            "reporter": "NDA0E"
        }
    ],
    "3812306": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-15 08:25:35 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812306/",
            "reporter": "NDA0E"
        }
    ],
    "3812307": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-15 04:47:45 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812307/",
            "reporter": "NDA0E"
        }
    ],
    "3812308": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-15 10:27:43 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812308/",
            "reporter": "NDA0E"
        }
    ],
    "3812309": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-15 10:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812309/",
            "reporter": "NDA0E"
        }
    ],
    "3812310": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-15 10:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812310/",
            "reporter": "NDA0E"
        }
    ],
    "3812311": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-15 10:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812311/",
            "reporter": "NDA0E"
        }
    ],
    "3812312": [
        {
            "dateadded": "2026-04-05 07:00:19 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-15 05:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812312/",
            "reporter": "NDA0E"
        }
    ],
    "3812283": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812283/",
            "reporter": "NDA0E"
        }
    ],
    "3812284": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812284/",
            "reporter": "NDA0E"
        }
    ],
    "3812285": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812285/",
            "reporter": "NDA0E"
        }
    ],
    "3812286": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812286/",
            "reporter": "NDA0E"
        }
    ],
    "3812287": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812287/",
            "reporter": "NDA0E"
        }
    ],
    "3812288": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812288/",
            "reporter": "NDA0E"
        }
    ],
    "3812289": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812289/",
            "reporter": "NDA0E"
        }
    ],
    "3812290": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812290/",
            "reporter": "NDA0E"
        }
    ],
    "3812291": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812291/",
            "reporter": "NDA0E"
        }
    ],
    "3812292": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812292/",
            "reporter": "NDA0E"
        }
    ],
    "3812293": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812293/",
            "reporter": "NDA0E"
        }
    ],
    "3812294": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812294/",
            "reporter": "NDA0E"
        }
    ],
    "3812295": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812295/",
            "reporter": "NDA0E"
        }
    ],
    "3812296": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://74.48.134.67/huhu/titanjr",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812296/",
            "reporter": "NDA0E"
        }
    ],
    "3812297": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812297/",
            "reporter": "NDA0E"
        }
    ],
    "3812298": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812298/",
            "reporter": "NDA0E"
        }
    ],
    "3812299": [
        {
            "dateadded": "2026-04-05 07:00:16 UTC",
            "url": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812299/",
            "reporter": "NDA0E"
        }
    ],
    "3812275": [
        {
            "dateadded": "2026-04-05 07:00:15 UTC",
            "url": "http://87.121.84.19/huhu/titanjr",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812275/",
            "reporter": "NDA0E"
        }
    ],
    "3812276": [
        {
            "dateadded": "2026-04-05 07:00:15 UTC",
            "url": "http://87.121.84.19/main_86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812276/",
            "reporter": "NDA0E"
        }
    ],
    "3812280": [
        {
            "dateadded": "2026-04-05 07:00:15 UTC",
            "url": "http://176.65.139.67/arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812280/",
            "reporter": "NDA0E"
        }
    ],
    "3812281": [
        {
            "dateadded": "2026-04-05 07:00:15 UTC",
            "url": "http://87.121.79.97/a-r.m-5.SNOOPY",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812281/",
            "reporter": "NDA0E"
        }
    ],
    "3812282": [
        {
            "dateadded": "2026-04-05 07:00:15 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812282/",
            "reporter": "NDA0E"
        }
    ],
    "3812273": [
        {
            "dateadded": "2026-04-05 07:00:11 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-15 07:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812273/",
            "reporter": "NDA0E"
        }
    ],
    "3812274": [
        {
            "dateadded": "2026-04-05 07:00:11 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-15 07:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812274/",
            "reporter": "NDA0E"
        }
    ],
    "3812272": [
        {
            "dateadded": "2026-04-05 07:00:09 UTC",
            "url": "http://176.65.139.67/spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812272/",
            "reporter": "NDA0E"
        }
    ],
    "3812270": [
        {
            "dateadded": "2026-04-05 06:59:14 UTC",
            "url": "http://206.189.98.25/bins/bins.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 06:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812270/",
            "reporter": "NDA0E"
        }
    ],
    "3812271": [
        {
            "dateadded": "2026-04-05 06:59:14 UTC",
            "url": "http://103.38.236.50/cache",
            "url_status": "offline",
            "last_online": "2026-04-13 11:09:18 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812271/",
            "reporter": "NDA0E"
        }
    ],
    "3812265": [
        {
            "dateadded": "2026-04-05 06:59:13 UTC",
            "url": "http://74.48.134.67/all.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:34 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812265/",
            "reporter": "NDA0E"
        }
    ],
    "3812266": [
        {
            "dateadded": "2026-04-05 06:59:13 UTC",
            "url": "http://147.45.60.206/o",
            "url_status": "offline",
            "last_online": "2026-04-18 05:42:04 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812266/",
            "reporter": "NDA0E"
        }
    ],
    "3812267": [
        {
            "dateadded": "2026-04-05 06:59:13 UTC",
            "url": "http://147.45.60.206/t",
            "url_status": "offline",
            "last_online": "2026-04-18 05:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812267/",
            "reporter": "NDA0E"
        }
    ],
    "3812268": [
        {
            "dateadded": "2026-04-05 06:59:13 UTC",
            "url": "http://162.215.170.152/ohshit.sh",
            "url_status": "offline",
            "last_online": "2026-04-15 04:29:35 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812268/",
            "reporter": "NDA0E"
        }
    ],
    "3812269": [
        {
            "dateadded": "2026-04-05 06:59:13 UTC",
            "url": "http://147.45.60.206/",
            "url_status": "offline",
            "last_online": "2026-04-18 04:25:21 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812269/",
            "reporter": "NDA0E"
        }
    ],
    "3812264": [
        {
            "dateadded": "2026-04-05 06:58:16 UTC",
            "url": "http://42.232.101.23:38148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:52:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812264/",
            "reporter": "geenensp"
        }
    ],
    "3812263": [
        {
            "dateadded": "2026-04-05 06:57:07 UTC",
            "url": "https://wash-logic.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 15:43:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812263/",
            "reporter": "anonymous"
        }
    ],
    "3812262": [
        {
            "dateadded": "2026-04-05 06:54:13 UTC",
            "url": "http://117.199.173.170:51714/i",
            "url_status": "offline",
            "last_online": "2026-04-05 06:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812262/",
            "reporter": "geenensp"
        }
    ],
    "3812260": [
        {
            "dateadded": "2026-04-05 06:53:14 UTC",
            "url": "http://176.65.139.67/x86",
            "url_status": "offline",
            "last_online": "2026-04-12 12:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812260/",
            "reporter": "NDA0E"
        }
    ],
    "3812261": [
        {
            "dateadded": "2026-04-05 06:53:14 UTC",
            "url": "http://176.65.139.67/x86_32",
            "url_status": "offline",
            "last_online": "2026-04-12 10:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812261/",
            "reporter": "NDA0E"
        }
    ],
    "3812257": [
        {
            "dateadded": "2026-04-05 06:52:16 UTC",
            "url": "http://176.65.139.64/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-14 22:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812257/",
            "reporter": "NDA0E"
        }
    ],
    "3812258": [
        {
            "dateadded": "2026-04-05 06:52:16 UTC",
            "url": "http://176.65.139.64/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-14 22:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812258/",
            "reporter": "NDA0E"
        }
    ],
    "3812259": [
        {
            "dateadded": "2026-04-05 06:52:16 UTC",
            "url": "http://176.65.139.67/sh4",
            "url_status": "offline",
            "last_online": "2026-04-12 10:16:20 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812259/",
            "reporter": "NDA0E"
        }
    ],
    "3812256": [
        {
            "dateadded": "2026-04-05 06:51:25 UTC",
            "url": "http://115.50.12.216:34093/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:22:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812256/",
            "reporter": "geenensp"
        }
    ],
    "3812253": [
        {
            "dateadded": "2026-04-05 06:51:24 UTC",
            "url": "http://8.211.154.155/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-21 23:54:35 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "rekoobe",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812253/",
            "reporter": "NDA0E"
        }
    ],
    "3812254": [
        {
            "dateadded": "2026-04-05 06:51:24 UTC",
            "url": "http://8.211.154.155/arm6",
            "url_status": "offline",
            "last_online": "2026-04-21 23:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812254/",
            "reporter": "NDA0E"
        }
    ],
    "3812255": [
        {
            "dateadded": "2026-04-05 06:51:24 UTC",
            "url": "http://8.211.154.155/debug.dbg",
            "url_status": "offline",
            "last_online": "2026-04-22 00:01:55 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812255/",
            "reporter": "NDA0E"
        }
    ],
    "3812244": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812244/",
            "reporter": "NDA0E"
        }
    ],
    "3812245": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://8.211.154.155/arm5",
            "url_status": "offline",
            "last_online": "2026-04-21 22:56:36 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812245/",
            "reporter": "NDA0E"
        }
    ],
    "3812246": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://8.211.154.155/arm",
            "url_status": "offline",
            "last_online": "2026-04-22 00:08:06 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812246/",
            "reporter": "NDA0E"
        }
    ],
    "3812247": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://8.211.154.155/mips",
            "url_status": "offline",
            "last_online": "2026-04-21 23:03:42 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812247/",
            "reporter": "NDA0E"
        }
    ],
    "3812248": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://8.211.154.155/x86",
            "url_status": "offline",
            "last_online": "2026-04-21 23:08:27 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812248/",
            "reporter": "NDA0E"
        }
    ],
    "3812249": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://45.150.66.9/arm7",
            "url_status": "offline",
            "last_online": "2026-04-09 03:55:29 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812249/",
            "reporter": "NDA0E"
        }
    ],
    "3812250": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://5.181.3.240/arm7",
            "url_status": "offline",
            "last_online": "2026-04-08 17:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812250/",
            "reporter": "NDA0E"
        }
    ],
    "3812251": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://176.65.139.67/arm5",
            "url_status": "offline",
            "last_online": "2026-04-12 10:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812251/",
            "reporter": "NDA0E"
        }
    ],
    "3812252": [
        {
            "dateadded": "2026-04-05 06:51:22 UTC",
            "url": "http://176.65.139.67/arm6",
            "url_status": "offline",
            "last_online": "2026-04-12 10:26:25 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812252/",
            "reporter": "NDA0E"
        }
    ],
    "3812236": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.64/m68k",
            "url_status": "offline",
            "last_online": "2026-04-14 23:24:05 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812236/",
            "reporter": "NDA0E"
        }
    ],
    "3812237": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.64/arm6",
            "url_status": "offline",
            "last_online": "2026-04-14 23:07:40 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812237/",
            "reporter": "NDA0E"
        }
    ],
    "3812238": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.64/sh4",
            "url_status": "offline",
            "last_online": "2026-04-14 22:50:35 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812238/",
            "reporter": "NDA0E"
        }
    ],
    "3812239": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.67/mips",
            "url_status": "offline",
            "last_online": "2026-04-12 10:15:15 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812239/",
            "reporter": "NDA0E"
        }
    ],
    "3812240": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.67/ppc",
            "url_status": "offline",
            "last_online": "2026-04-12 11:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812240/",
            "reporter": "NDA0E"
        }
    ],
    "3812241": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.67/arm",
            "url_status": "offline",
            "last_online": "2026-04-12 11:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812241/",
            "reporter": "NDA0E"
        }
    ],
    "3812242": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://176.65.139.67/arm7",
            "url_status": "offline",
            "last_online": "2026-04-12 10:52:46 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812242/",
            "reporter": "NDA0E"
        }
    ],
    "3812243": [
        {
            "dateadded": "2026-04-05 06:51:21 UTC",
            "url": "http://75.119.155.130/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-06 04:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812243/",
            "reporter": "NDA0E"
        }
    ],
    "3812234": [
        {
            "dateadded": "2026-04-05 06:51:20 UTC",
            "url": "http://176.65.139.64/mips",
            "url_status": "offline",
            "last_online": "2026-04-14 23:28:34 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812234/",
            "reporter": "NDA0E"
        }
    ],
    "3812235": [
        {
            "dateadded": "2026-04-05 06:51:20 UTC",
            "url": "http://176.65.139.64/arm5",
            "url_status": "offline",
            "last_online": "2026-04-14 23:20:33 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812235/",
            "reporter": "NDA0E"
        }
    ],
    "3812230": [
        {
            "dateadded": "2026-04-05 06:51:14 UTC",
            "url": "http://75.119.155.130/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-06 04:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812230/",
            "reporter": "NDA0E"
        }
    ],
    "3812231": [
        {
            "dateadded": "2026-04-05 06:51:14 UTC",
            "url": "http://74.48.134.67/huhu/titanjr.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812231/",
            "reporter": "NDA0E"
        }
    ],
    "3812232": [
        {
            "dateadded": "2026-04-05 06:51:14 UTC",
            "url": "http://8.211.154.155/ppc",
            "url_status": "offline",
            "last_online": "2026-04-22 00:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812232/",
            "reporter": "NDA0E"
        }
    ],
    "3812233": [
        {
            "dateadded": "2026-04-05 06:51:14 UTC",
            "url": "http://8.211.154.155/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-21 22:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812233/",
            "reporter": "NDA0E"
        }
    ],
    "3812224": [
        {
            "dateadded": "2026-04-05 06:51:13 UTC",
            "url": "http://176.65.139.64/x86",
            "url_status": "offline",
            "last_online": "2026-04-14 23:42:40 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812224/",
            "reporter": "NDA0E"
        }
    ],
    "3812225": [
        {
            "dateadded": "2026-04-05 06:51:13 UTC",
            "url": "http://176.65.139.64/ppc",
            "url_status": "offline",
            "last_online": "2026-04-14 23:12:49 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812225/",
            "reporter": "NDA0E"
        }
    ],
    "3812226": [
        {
            "dateadded": "2026-04-05 06:51:13 UTC",
            "url": "http://176.65.139.64/arm7",
            "url_status": "offline",
            "last_online": "2026-04-14 22:27:55 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812226/",
            "reporter": "NDA0E"
        }
    ],
    "3812227": [
        {
            "dateadded": "2026-04-05 06:51:13 UTC",
            "url": "http://176.65.139.67/m68k",
            "url_status": "offline",
            "last_online": "2026-04-12 10:04:32 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812227/",
            "reporter": "NDA0E"
        }
    ],
    "3812228": [
        {
            "dateadded": "2026-04-05 06:51:13 UTC",
            "url": "http://176.65.139.67/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-12 10:35:46 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812228/",
            "reporter": "NDA0E"
        }
    ],
    "3812229": [
        {
            "dateadded": "2026-04-05 06:51:13 UTC",
            "url": "http://176.65.139.67/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-12 10:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "censys",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812229/",
            "reporter": "NDA0E"
        }
    ],
    "3812223": [
        {
            "dateadded": "2026-04-05 06:47:12 UTC",
            "url": "http://27.202.231.238:47812/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812223/",
            "reporter": "geenensp"
        }
    ],
    "3812222": [
        {
            "dateadded": "2026-04-05 06:45:13 UTC",
            "url": "https://clean-svc.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 10:05:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812222/",
            "reporter": "anonymous"
        }
    ],
    "3812221": [
        {
            "dateadded": "2026-04-05 06:44:08 UTC",
            "url": "http://39.90.148.83:47437/i",
            "url_status": "offline",
            "last_online": "2026-04-13 12:59:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812221/",
            "reporter": "geenensp"
        }
    ],
    "3812220": [
        {
            "dateadded": "2026-04-05 06:34:10 UTC",
            "url": "https://bright-node.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 11:03:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812220/",
            "reporter": "anonymous"
        }
    ],
    "3812219": [
        {
            "dateadded": "2026-04-05 06:30:27 UTC",
            "url": "http://117.199.173.170:51714/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 06:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812219/",
            "reporter": "geenensp"
        }
    ],
    "3812218": [
        {
            "dateadded": "2026-04-05 06:29:18 UTC",
            "url": "http://42.239.225.54:36949/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812218/",
            "reporter": "geenensp"
        }
    ],
    "3812217": [
        {
            "dateadded": "2026-04-05 06:27:07 UTC",
            "url": "http://39.80.198.171:58842/i",
            "url_status": "offline",
            "last_online": "2026-04-16 13:47:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812217/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812216": [
        {
            "dateadded": "2026-04-05 06:26:18 UTC",
            "url": "http://42.5.228.227:33208/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:45:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812216/",
            "reporter": "geenensp"
        }
    ],
    "3812215": [
        {
            "dateadded": "2026-04-05 06:25:10 UTC",
            "url": "http://39.90.148.83:47437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:40:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812215/",
            "reporter": "geenensp"
        }
    ],
    "3812214": [
        {
            "dateadded": "2026-04-05 06:23:09 UTC",
            "url": "https://berry-mix.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 15:57:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812214/",
            "reporter": "anonymous"
        }
    ],
    "3812213": [
        {
            "dateadded": "2026-04-05 06:18:18 UTC",
            "url": "http://110.37.68.195:48815/i",
            "url_status": "offline",
            "last_online": "2026-04-05 06:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812213/",
            "reporter": "geenensp"
        }
    ],
    "3812212": [
        {
            "dateadded": "2026-04-05 06:14:18 UTC",
            "url": "http://27.215.77.105:42770/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 17:13:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812212/",
            "reporter": "geenensp"
        }
    ],
    "3812211": [
        {
            "dateadded": "2026-04-05 06:10:09 UTC",
            "url": "https://drink-sync.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 10:57:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812211/",
            "reporter": "anonymous"
        }
    ],
    "3812210": [
        {
            "dateadded": "2026-04-05 06:05:19 UTC",
            "url": "http://36.64.174.50:35375/i",
            "url_status": "offline",
            "last_online": "2026-04-05 06:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812210/",
            "reporter": "geenensp"
        }
    ],
    "3812209": [
        {
            "dateadded": "2026-04-05 06:05:17 UTC",
            "url": "http://42.226.222.167:59680/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812209/",
            "reporter": "geenensp"
        }
    ],
    "3812208": [
        {
            "dateadded": "2026-04-05 06:04:21 UTC",
            "url": "http://110.36.80.163:40891/i",
            "url_status": "offline",
            "last_online": "2026-04-05 06:04:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812208/",
            "reporter": "geenensp"
        }
    ],
    "3812207": [
        {
            "dateadded": "2026-04-05 06:01:06 UTC",
            "url": "https://hot-belyash.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 10:25:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812207/",
            "reporter": "anonymous"
        }
    ],
    "3812206": [
        {
            "dateadded": "2026-04-05 05:58:06 UTC",
            "url": "https://snack-api.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 10:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812206/",
            "reporter": "anonymous"
        }
    ],
    "3812205": [
        {
            "dateadded": "2026-04-05 05:55:09 UTC",
            "url": "http://42.239.225.54:36949/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:51:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812205/",
            "reporter": "geenensp"
        }
    ],
    "3812204": [
        {
            "dateadded": "2026-04-05 05:50:21 UTC",
            "url": "http://106.110.208.148:56280/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 03:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812204/",
            "reporter": "geenensp"
        }
    ],
    "3812203": [
        {
            "dateadded": "2026-04-05 05:42:07 UTC",
            "url": "http://39.90.144.145:43651/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812203/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812202": [
        {
            "dateadded": "2026-04-05 05:36:18 UTC",
            "url": "http://110.36.80.163:40891/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812202/",
            "reporter": "geenensp"
        }
    ],
    "3812201": [
        {
            "dateadded": "2026-04-05 05:22:07 UTC",
            "url": "http://182.114.198.18:58637/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:06:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812201/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812200": [
        {
            "dateadded": "2026-04-05 05:17:12 UTC",
            "url": "http://182.114.198.18:58637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:07:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812200/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812199": [
        {
            "dateadded": "2026-04-05 05:17:07 UTC",
            "url": "http://39.90.144.145:43651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 09:43:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812199/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812198": [
        {
            "dateadded": "2026-04-05 05:17:06 UTC",
            "url": "http://110.37.39.234:38807/i",
            "url_status": "offline",
            "last_online": "2026-04-05 05:17:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812198/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812197": [
        {
            "dateadded": "2026-04-05 05:11:09 UTC",
            "url": "http://58.35.126.149:42257/i",
            "url_status": "offline",
            "last_online": "2026-04-08 11:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812197/",
            "reporter": "geenensp"
        }
    ],
    "3812196": [
        {
            "dateadded": "2026-04-05 04:56:17 UTC",
            "url": "http://105.184.254.62:59739/i",
            "url_status": "offline",
            "last_online": "2026-04-05 11:07:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812196/",
            "reporter": "geenensp"
        }
    ],
    "3812195": [
        {
            "dateadded": "2026-04-05 04:44:22 UTC",
            "url": "http://222.219.74.77:58121/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:36:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812195/",
            "reporter": "geenensp"
        }
    ],
    "3812194": [
        {
            "dateadded": "2026-04-05 04:44:16 UTC",
            "url": "http://58.35.126.149:42257/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 15:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812194/",
            "reporter": "geenensp"
        }
    ],
    "3812193": [
        {
            "dateadded": "2026-04-05 04:43:31 UTC",
            "url": "http://124.128.184.185:51413/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812193/",
            "reporter": "geenensp"
        }
    ],
    "3812192": [
        {
            "dateadded": "2026-04-05 04:32:08 UTC",
            "url": "http://175.166.114.65:55751/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:52:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812192/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812191": [
        {
            "dateadded": "2026-04-05 04:22:20 UTC",
            "url": "http://105.225.178.132:34151/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:17:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812191/",
            "reporter": "geenensp"
        }
    ],
    "3812190": [
        {
            "dateadded": "2026-04-05 04:15:24 UTC",
            "url": "http://27.215.48.165:45280/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:20:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812190/",
            "reporter": "geenensp"
        }
    ],
    "3812189": [
        {
            "dateadded": "2026-04-05 04:12:25 UTC",
            "url": "http://124.128.184.185:51413/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812189/",
            "reporter": "geenensp"
        }
    ],
    "3812188": [
        {
            "dateadded": "2026-04-05 04:12:05 UTC",
            "url": "http://176.65.139.42:8080/per.go",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "Go",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812188/",
            "reporter": "botnetkiller"
        }
    ],
    "3812187": [
        {
            "dateadded": "2026-04-05 04:11:16 UTC",
            "url": "http://176.65.139.42:8080/per",
            "url_status": "offline",
            "last_online": "2026-04-05 04:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812187/",
            "reporter": "botnetkiller"
        }
    ],
    "3812186": [
        {
            "dateadded": "2026-04-05 04:02:11 UTC",
            "url": "http://175.166.114.65:55751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:00:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812186/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812185": [
        {
            "dateadded": "2026-04-05 04:00:25 UTC",
            "url": "http://105.184.254.62:59739/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:39:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812185/",
            "reporter": "geenensp"
        }
    ],
    "3812184": [
        {
            "dateadded": "2026-04-05 03:53:23 UTC",
            "url": "http://94.156.152.67/parm7",
            "url_status": "offline",
            "last_online": "2026-04-09 10:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812184/",
            "reporter": "botnetkiller"
        }
    ],
    "3812183": [
        {
            "dateadded": "2026-04-05 03:51:16 UTC",
            "url": "http://105.225.178.132:34151/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:03:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812183/",
            "reporter": "geenensp"
        }
    ],
    "3812182": [
        {
            "dateadded": "2026-04-05 03:47:22 UTC",
            "url": "http://27.215.48.165:45280/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812182/",
            "reporter": "geenensp"
        }
    ],
    "3812181": [
        {
            "dateadded": "2026-04-05 03:42:25 UTC",
            "url": "http://182.112.7.86:49191/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:59:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812181/",
            "reporter": "geenensp"
        }
    ],
    "3812180": [
        {
            "dateadded": "2026-04-05 03:37:07 UTC",
            "url": "http://106.110.208.148:56280/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:47:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812180/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812179": [
        {
            "dateadded": "2026-04-05 03:36:25 UTC",
            "url": "http://101.23.75.94:47816/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:49:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812179/",
            "reporter": "geenensp"
        }
    ],
    "3812178": [
        {
            "dateadded": "2026-04-05 03:34:23 UTC",
            "url": "http://115.62.149.21:40984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:02:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812178/",
            "reporter": "geenensp"
        }
    ],
    "3812177": [
        {
            "dateadded": "2026-04-05 03:33:25 UTC",
            "url": "http://117.215.50.203:60208/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:33:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812177/",
            "reporter": "geenensp"
        }
    ],
    "3812176": [
        {
            "dateadded": "2026-04-05 03:32:07 UTC",
            "url": "http://170.254.10.213:52129/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:58:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812176/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3812175": [
        {
            "dateadded": "2026-04-05 03:19:13 UTC",
            "url": "http://113.239.206.240:53385/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 01:24:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812175/",
            "reporter": "geenensp"
        }
    ],
    "3812174": [
        {
            "dateadded": "2026-04-05 03:12:19 UTC",
            "url": "http://61.53.125.22:43467/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:45:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812174/",
            "reporter": "geenensp"
        }
    ],
    "3812173": [
        {
            "dateadded": "2026-04-05 03:08:18 UTC",
            "url": "http://101.23.75.94:47816/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 04:33:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812173/",
            "reporter": "geenensp"
        }
    ],
    "3812172": [
        {
            "dateadded": "2026-04-05 03:04:11 UTC",
            "url": "http://117.215.50.203:60208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:39:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812172/",
            "reporter": "geenensp"
        }
    ],
    "3812171": [
        {
            "dateadded": "2026-04-05 02:40:21 UTC",
            "url": "http://175.166.1.82:59561/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:58:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812171/",
            "reporter": "geenensp"
        }
    ],
    "3812170": [
        {
            "dateadded": "2026-04-05 02:39:41 UTC",
            "url": "http://125.162.63.145:52380/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:28:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812170/",
            "reporter": "geenensp"
        }
    ],
    "3812164": [
        {
            "dateadded": "2026-04-05 02:25:10 UTC",
            "url": "http://94.156.152.67/private/pppc",
            "url_status": "offline",
            "last_online": "2026-04-09 10:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812164/",
            "reporter": "botnetkiller"
        }
    ],
    "3812165": [
        {
            "dateadded": "2026-04-05 02:25:10 UTC",
            "url": "http://94.156.152.67/private/psh4",
            "url_status": "offline",
            "last_online": "2026-04-09 11:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812165/",
            "reporter": "botnetkiller"
        }
    ],
    "3812166": [
        {
            "dateadded": "2026-04-05 02:25:10 UTC",
            "url": "http://94.156.152.67/private/parm",
            "url_status": "offline",
            "last_online": "2026-04-09 13:18:57 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812166/",
            "reporter": "botnetkiller"
        }
    ],
    "3812167": [
        {
            "dateadded": "2026-04-05 02:25:10 UTC",
            "url": "http://94.156.152.67/private/parm6",
            "url_status": "offline",
            "last_online": "2026-04-09 09:54:49 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812167/",
            "reporter": "botnetkiller"
        }
    ],
    "3812168": [
        {
            "dateadded": "2026-04-05 02:25:10 UTC",
            "url": "http://94.156.152.67/private/pm68k",
            "url_status": "offline",
            "last_online": "2026-04-09 09:56:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812168/",
            "reporter": "botnetkiller"
        }
    ],
    "3812169": [
        {
            "dateadded": "2026-04-05 02:25:10 UTC",
            "url": "http://94.156.152.67/private/pmips",
            "url_status": "offline",
            "last_online": "2026-04-09 11:26:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812169/",
            "reporter": "botnetkiller"
        }
    ],
    "3812163": [
        {
            "dateadded": "2026-04-05 02:25:09 UTC",
            "url": "http://94.156.152.67/private/pmpsl",
            "url_status": "offline",
            "last_online": "2026-04-09 09:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812163/",
            "reporter": "botnetkiller"
        }
    ],
    "3812161": [
        {
            "dateadded": "2026-04-05 02:24:12 UTC",
            "url": "http://94.156.152.67/private/pspc",
            "url_status": "offline",
            "last_online": "2026-04-09 11:07:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812161/",
            "reporter": "botnetkiller"
        }
    ],
    "3812162": [
        {
            "dateadded": "2026-04-05 02:24:12 UTC",
            "url": "http://94.156.152.67/private/parm5",
            "url_status": "offline",
            "last_online": "2026-04-09 10:06:30 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812162/",
            "reporter": "botnetkiller"
        }
    ],
    "3812160": [
        {
            "dateadded": "2026-04-05 02:24:11 UTC",
            "url": "http://94.156.152.67/private/parm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812160/",
            "reporter": "botnetkiller"
        }
    ],
    "3812159": [
        {
            "dateadded": "2026-04-05 02:23:24 UTC",
            "url": "http://94.156.152.67/px86",
            "url_status": "offline",
            "last_online": "2026-04-09 10:21:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812159/",
            "reporter": "botnetkiller"
        }
    ],
    "3812158": [
        {
            "dateadded": "2026-04-05 02:21:18 UTC",
            "url": "http://61.54.253.171:59403/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:45:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812158/",
            "reporter": "geenensp"
        }
    ],
    "3812157": [
        {
            "dateadded": "2026-04-05 02:15:19 UTC",
            "url": "http://175.166.1.82:59561/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812157/",
            "reporter": "geenensp"
        }
    ],
    "3812156": [
        {
            "dateadded": "2026-04-05 02:13:11 UTC",
            "url": "http://113.238.223.172:60731/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:44:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812156/",
            "reporter": "geenensp"
        }
    ],
    "3812155": [
        {
            "dateadded": "2026-04-05 02:12:27 UTC",
            "url": "http://125.162.63.145:52380/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812155/",
            "reporter": "geenensp"
        }
    ],
    "3812154": [
        {
            "dateadded": "2026-04-05 02:10:12 UTC",
            "url": "http://115.49.26.7:41625/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:27:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812154/",
            "reporter": "geenensp"
        }
    ],
    "3812153": [
        {
            "dateadded": "2026-04-05 02:09:29 UTC",
            "url": "http://222.219.79.204:54149/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:37:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812153/",
            "reporter": "geenensp"
        }
    ],
    "3812152": [
        {
            "dateadded": "2026-04-05 02:07:19 UTC",
            "url": "http://115.48.170.75:49227/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:08:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812152/",
            "reporter": "geenensp"
        }
    ],
    "3812151": [
        {
            "dateadded": "2026-04-05 01:59:19 UTC",
            "url": "http://219.157.150.79:33194/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:07:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812151/",
            "reporter": "geenensp"
        }
    ],
    "3812143": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti486",
            "url_status": "offline",
            "last_online": "2026-04-07 03:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812143/",
            "reporter": "botnetkiller"
        }
    ],
    "3812144": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812144/",
            "reporter": "botnetkiller"
        }
    ],
    "3812145": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sudp32",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812145/",
            "reporter": "botnetkiller"
        }
    ],
    "3812146": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812146/",
            "reporter": "botnetkiller"
        }
    ],
    "3812147": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812147/",
            "reporter": "botnetkiller"
        }
    ],
    "3812148": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/tcix86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812148/",
            "reporter": "botnetkiller"
        }
    ],
    "3812149": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812149/",
            "reporter": "botnetkiller"
        }
    ],
    "3812150": [
        {
            "dateadded": "2026-04-05 01:57:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sippc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:43:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812150/",
            "reporter": "botnetkiller"
        }
    ],
    "3812134": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812134/",
            "reporter": "botnetkiller"
        }
    ],
    "3812135": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/shandx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812135/",
            "reporter": "botnetkiller"
        }
    ],
    "3812136": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812136/",
            "reporter": "botnetkiller"
        }
    ],
    "3812137": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812137/",
            "reporter": "botnetkiller"
        }
    ],
    "3812138": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812138/",
            "reporter": "botnetkiller"
        }
    ],
    "3812139": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812139/",
            "reporter": "botnetkiller"
        }
    ],
    "3812140": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/shandx64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812140/",
            "reporter": "botnetkiller"
        }
    ],
    "3812141": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/siix64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812141/",
            "reporter": "botnetkiller"
        }
    ],
    "3812142": [
        {
            "dateadded": "2026-04-05 01:57:08 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 03:48:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812142/",
            "reporter": "botnetkiller"
        }
    ],
    "3812124": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812124/",
            "reporter": "botnetkiller"
        }
    ],
    "3812125": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 06:15:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812125/",
            "reporter": "botnetkiller"
        }
    ],
    "3812126": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi586",
            "url_status": "offline",
            "last_online": "2026-04-07 11:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812126/",
            "reporter": "botnetkiller"
        }
    ],
    "3812127": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812127/",
            "reporter": "botnetkiller"
        }
    ],
    "3812128": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812128/",
            "reporter": "botnetkiller"
        }
    ],
    "3812129": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/rstx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 07:54:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812129/",
            "reporter": "botnetkiller"
        }
    ],
    "3812130": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/socki386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812130/",
            "reporter": "botnetkiller"
        }
    ],
    "3812131": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:19:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812131/",
            "reporter": "botnetkiller"
        }
    ],
    "3812132": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812132/",
            "reporter": "botnetkiller"
        }
    ],
    "3812133": [
        {
            "dateadded": "2026-04-05 01:57:04 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812133/",
            "reporter": "botnetkiller"
        }
    ],
    "3812123": [
        {
            "dateadded": "2026-04-05 01:57:03 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812123/",
            "reporter": "botnetkiller"
        }
    ],
    "3812120": [
        {
            "dateadded": "2026-04-05 01:56:59 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 05:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812120/",
            "reporter": "botnetkiller"
        }
    ],
    "3812121": [
        {
            "dateadded": "2026-04-05 01:56:59 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812121/",
            "reporter": "botnetkiller"
        }
    ],
    "3812122": [
        {
            "dateadded": "2026-04-05 01:56:59 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812122/",
            "reporter": "botnetkiller"
        }
    ],
    "3812118": [
        {
            "dateadded": "2026-04-05 01:56:56 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812118/",
            "reporter": "botnetkiller"
        }
    ],
    "3812119": [
        {
            "dateadded": "2026-04-05 01:56:56 UTC",
            "url": "http://103.130.214.71:4949/bins/siimipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812119/",
            "reporter": "botnetkiller"
        }
    ],
    "3812110": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 05:18:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812110/",
            "reporter": "botnetkiller"
        }
    ],
    "3812111": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812111/",
            "reporter": "botnetkiller"
        }
    ],
    "3812112": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/si",
            "url_status": "offline",
            "last_online": "2026-04-07 10:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812112/",
            "reporter": "botnetkiller"
        }
    ],
    "3812113": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812113/",
            "reporter": "botnetkiller"
        }
    ],
    "3812114": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/sockx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:59:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812114/",
            "reporter": "botnetkiller"
        }
    ],
    "3812115": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryx86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812115/",
            "reporter": "botnetkiller"
        }
    ],
    "3812116": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812116/",
            "reporter": "botnetkiller"
        }
    ],
    "3812117": [
        {
            "dateadded": "2026-04-05 01:56:54 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2mipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812117/",
            "reporter": "botnetkiller"
        }
    ],
    "3812102": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812102/",
            "reporter": "botnetkiller"
        }
    ],
    "3812103": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/mirai.x64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812103/",
            "reporter": "botnetkiller"
        }
    ],
    "3812104": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/shandmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 05:11:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812104/",
            "reporter": "botnetkiller"
        }
    ],
    "3812105": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:35:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812105/",
            "reporter": "botnetkiller"
        }
    ],
    "3812106": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/tci32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812106/",
            "reporter": "botnetkiller"
        }
    ],
    "3812107": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812107/",
            "reporter": "botnetkiller"
        }
    ],
    "3812108": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:26:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812108/",
            "reporter": "botnetkiller"
        }
    ],
    "3812109": [
        {
            "dateadded": "2026-04-05 01:56:50 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:05:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812109/",
            "reporter": "botnetkiller"
        }
    ],
    "3812095": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812095/",
            "reporter": "botnetkiller"
        }
    ],
    "3812096": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812096/",
            "reporter": "botnetkiller"
        }
    ],
    "3812097": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812097/",
            "reporter": "botnetkiller"
        }
    ],
    "3812098": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 05:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812098/",
            "reporter": "botnetkiller"
        }
    ],
    "3812099": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/siiamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812099/",
            "reporter": "botnetkiller"
        }
    ],
    "3812100": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812100/",
            "reporter": "botnetkiller"
        }
    ],
    "3812101": [
        {
            "dateadded": "2026-04-05 01:56:48 UTC",
            "url": "http://103.130.214.71:4949/bins/sockriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:12:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812101/",
            "reporter": "botnetkiller"
        }
    ],
    "3812094": [
        {
            "dateadded": "2026-04-05 01:56:47 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812094/",
            "reporter": "botnetkiller"
        }
    ],
    "3812092": [
        {
            "dateadded": "2026-04-05 01:56:46 UTC",
            "url": "http://103.130.214.71:4949/bins/shandmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812092/",
            "reporter": "botnetkiller"
        }
    ],
    "3812093": [
        {
            "dateadded": "2026-04-05 01:56:46 UTC",
            "url": "http://103.130.214.71:4949/bins/rstamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812093/",
            "reporter": "botnetkiller"
        }
    ],
    "3812091": [
        {
            "dateadded": "2026-04-05 01:56:44 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:03:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812091/",
            "reporter": "botnetkiller"
        }
    ],
    "3812090": [
        {
            "dateadded": "2026-04-05 01:56:43 UTC",
            "url": "http://103.130.214.71:4949/bins/rstmips",
            "url_status": "offline",
            "last_online": "2026-04-07 11:18:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812090/",
            "reporter": "botnetkiller"
        }
    ],
    "3812085": [
        {
            "dateadded": "2026-04-05 01:56:42 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812085/",
            "reporter": "botnetkiller"
        }
    ],
    "3812086": [
        {
            "dateadded": "2026-04-05 01:56:42 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812086/",
            "reporter": "botnetkiller"
        }
    ],
    "3812087": [
        {
            "dateadded": "2026-04-05 01:56:42 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:52:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812087/",
            "reporter": "botnetkiller"
        }
    ],
    "3812088": [
        {
            "dateadded": "2026-04-05 01:56:42 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 03:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812088/",
            "reporter": "botnetkiller"
        }
    ],
    "3812089": [
        {
            "dateadded": "2026-04-05 01:56:42 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812089/",
            "reporter": "botnetkiller"
        }
    ],
    "3812076": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 03:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812076/",
            "reporter": "botnetkiller"
        }
    ],
    "3812077": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812077/",
            "reporter": "botnetkiller"
        }
    ],
    "3812078": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812078/",
            "reporter": "botnetkiller"
        }
    ],
    "3812079": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812079/",
            "reporter": "botnetkiller"
        }
    ],
    "3812080": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm7",
            "url_status": "offline",
            "last_online": "2026-04-07 04:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812080/",
            "reporter": "botnetkiller"
        }
    ],
    "3812081": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812081/",
            "reporter": "botnetkiller"
        }
    ],
    "3812082": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812082/",
            "reporter": "botnetkiller"
        }
    ],
    "3812083": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:23:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812083/",
            "reporter": "botnetkiller"
        }
    ],
    "3812084": [
        {
            "dateadded": "2026-04-05 01:56:41 UTC",
            "url": "http://103.130.214.71:4949/bins/siii686",
            "url_status": "offline",
            "last_online": "2026-04-07 03:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812084/",
            "reporter": "botnetkiller"
        }
    ],
    "3812075": [
        {
            "dateadded": "2026-04-05 01:56:39 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi686",
            "url_status": "offline",
            "last_online": "2026-04-07 04:46:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812075/",
            "reporter": "botnetkiller"
        }
    ],
    "3812074": [
        {
            "dateadded": "2026-04-05 01:56:34 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812074/",
            "reporter": "botnetkiller"
        }
    ],
    "3812066": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpx64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:35:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812066/",
            "reporter": "botnetkiller"
        }
    ],
    "3812067": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 03:49:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812067/",
            "reporter": "botnetkiller"
        }
    ],
    "3812068": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812068/",
            "reporter": "botnetkiller"
        }
    ],
    "3812069": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/rstx86",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812069/",
            "reporter": "botnetkiller"
        }
    ],
    "3812070": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812070/",
            "reporter": "botnetkiller"
        }
    ],
    "3812071": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812071/",
            "reporter": "botnetkiller"
        }
    ],
    "3812072": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi486",
            "url_status": "offline",
            "last_online": "2026-04-07 03:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812072/",
            "reporter": "botnetkiller"
        }
    ],
    "3812073": [
        {
            "dateadded": "2026-04-05 01:56:33 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812073/",
            "reporter": "botnetkiller"
        }
    ],
    "3812064": [
        {
            "dateadded": "2026-04-05 01:56:32 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812064/",
            "reporter": "botnetkiller"
        }
    ],
    "3812065": [
        {
            "dateadded": "2026-04-05 01:56:32 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812065/",
            "reporter": "botnetkiller"
        }
    ],
    "3812058": [
        {
            "dateadded": "2026-04-05 01:56:31 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812058/",
            "reporter": "botnetkiller"
        }
    ],
    "3812059": [
        {
            "dateadded": "2026-04-05 01:56:31 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 05:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812059/",
            "reporter": "botnetkiller"
        }
    ],
    "3812060": [
        {
            "dateadded": "2026-04-05 01:56:31 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812060/",
            "reporter": "botnetkiller"
        }
    ],
    "3812061": [
        {
            "dateadded": "2026-04-05 01:56:31 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi586",
            "url_status": "offline",
            "last_online": "2026-04-07 05:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812061/",
            "reporter": "botnetkiller"
        }
    ],
    "3812062": [
        {
            "dateadded": "2026-04-05 01:56:31 UTC",
            "url": "http://103.130.214.71:4949/bins/siackaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812062/",
            "reporter": "botnetkiller"
        }
    ],
    "3812063": [
        {
            "dateadded": "2026-04-05 01:56:31 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812063/",
            "reporter": "botnetkiller"
        }
    ],
    "3812056": [
        {
            "dateadded": "2026-04-05 01:56:30 UTC",
            "url": "http://103.130.214.71:4949/bins/rstmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812056/",
            "reporter": "botnetkiller"
        }
    ],
    "3812057": [
        {
            "dateadded": "2026-04-05 01:56:30 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryppc",
            "url_status": "offline",
            "last_online": "2026-04-07 10:49:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812057/",
            "reporter": "botnetkiller"
        }
    ],
    "3812055": [
        {
            "dateadded": "2026-04-05 01:56:29 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812055/",
            "reporter": "botnetkiller"
        }
    ],
    "3812051": [
        {
            "dateadded": "2026-04-05 01:56:28 UTC",
            "url": "http://103.130.214.71:4949/bins/ovh32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812051/",
            "reporter": "botnetkiller"
        }
    ],
    "3812052": [
        {
            "dateadded": "2026-04-05 01:56:28 UTC",
            "url": "http://103.130.214.71:4949/bins/sii586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812052/",
            "reporter": "botnetkiller"
        }
    ],
    "3812053": [
        {
            "dateadded": "2026-04-05 01:56:28 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:41:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812053/",
            "reporter": "botnetkiller"
        }
    ],
    "3812054": [
        {
            "dateadded": "2026-04-05 01:56:28 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 09:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812054/",
            "reporter": "botnetkiller"
        }
    ],
    "3812050": [
        {
            "dateadded": "2026-04-05 01:56:27 UTC",
            "url": "http://103.130.214.71:4949/mirai.arm4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812050/",
            "reporter": "botnetkiller"
        }
    ],
    "3812036": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:47:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812036/",
            "reporter": "botnetkiller"
        }
    ],
    "3812037": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:01:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812037/",
            "reporter": "botnetkiller"
        }
    ],
    "3812038": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812038/",
            "reporter": "botnetkiller"
        }
    ],
    "3812039": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm",
            "url_status": "offline",
            "last_online": "2026-04-07 03:51:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812039/",
            "reporter": "botnetkiller"
        }
    ],
    "3812040": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812040/",
            "reporter": "botnetkiller"
        }
    ],
    "3812041": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/sii686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812041/",
            "reporter": "botnetkiller"
        }
    ],
    "3812042": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/sockx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812042/",
            "reporter": "botnetkiller"
        }
    ],
    "3812043": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki386",
            "url_status": "offline",
            "last_online": "2026-04-07 05:34:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812043/",
            "reporter": "botnetkiller"
        }
    ],
    "3812044": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812044/",
            "reporter": "botnetkiller"
        }
    ],
    "3812045": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812045/",
            "reporter": "botnetkiller"
        }
    ],
    "3812046": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812046/",
            "reporter": "botnetkiller"
        }
    ],
    "3812047": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812047/",
            "reporter": "botnetkiller"
        }
    ],
    "3812048": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/siack",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812048/",
            "reporter": "botnetkiller"
        }
    ],
    "3812049": [
        {
            "dateadded": "2026-04-05 01:56:25 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:59:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812049/",
            "reporter": "botnetkiller"
        }
    ],
    "3812033": [
        {
            "dateadded": "2026-04-05 01:56:24 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812033/",
            "reporter": "botnetkiller"
        }
    ],
    "3812034": [
        {
            "dateadded": "2026-04-05 01:56:24 UTC",
            "url": "http://103.130.214.71:4949/bins/sockaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812034/",
            "reporter": "botnetkiller"
        }
    ],
    "3812035": [
        {
            "dateadded": "2026-04-05 01:56:24 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812035/",
            "reporter": "botnetkiller"
        }
    ],
    "3812021": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812021/",
            "reporter": "botnetkiller"
        }
    ],
    "3812022": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812022/",
            "reporter": "botnetkiller"
        }
    ],
    "3812023": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812023/",
            "reporter": "botnetkiller"
        }
    ],
    "3812024": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi386",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812024/",
            "reporter": "botnetkiller"
        }
    ],
    "3812025": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812025/",
            "reporter": "botnetkiller"
        }
    ],
    "3812026": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 04:01:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812026/",
            "reporter": "botnetkiller"
        }
    ],
    "3812027": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm64",
            "url_status": "offline",
            "last_online": "2026-04-07 07:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812027/",
            "reporter": "botnetkiller"
        }
    ],
    "3812028": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii686",
            "url_status": "offline",
            "last_online": "2026-04-07 03:40:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812028/",
            "reporter": "botnetkiller"
        }
    ],
    "3812029": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812029/",
            "reporter": "botnetkiller"
        }
    ],
    "3812030": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/mirai.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812030/",
            "reporter": "botnetkiller"
        }
    ],
    "3812031": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/siimips",
            "url_status": "offline",
            "last_online": "2026-04-07 05:29:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812031/",
            "reporter": "botnetkiller"
        }
    ],
    "3812032": [
        {
            "dateadded": "2026-04-05 01:56:20 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812032/",
            "reporter": "botnetkiller"
        }
    ],
    "3812020": [
        {
            "dateadded": "2026-04-05 01:56:16 UTC",
            "url": "http://103.130.214.71:4949/mirai.dbg",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812020/",
            "reporter": "botnetkiller"
        }
    ],
    "3812016": [
        {
            "dateadded": "2026-04-05 01:56:14 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812016/",
            "reporter": "botnetkiller"
        }
    ],
    "3812017": [
        {
            "dateadded": "2026-04-05 01:56:14 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812017/",
            "reporter": "botnetkiller"
        }
    ],
    "3812018": [
        {
            "dateadded": "2026-04-05 01:56:14 UTC",
            "url": "http://103.130.214.71:4949/bins/tcimips",
            "url_status": "offline",
            "last_online": "2026-04-07 04:27:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812018/",
            "reporter": "botnetkiller"
        }
    ],
    "3812019": [
        {
            "dateadded": "2026-04-05 01:56:14 UTC",
            "url": "http://103.130.214.71:4949/bins/sudp",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812019/",
            "reporter": "botnetkiller"
        }
    ],
    "3812013": [
        {
            "dateadded": "2026-04-05 01:56:09 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2x86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:47:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812013/",
            "reporter": "botnetkiller"
        }
    ],
    "3812014": [
        {
            "dateadded": "2026-04-05 01:56:09 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni686n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:03:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812014/",
            "reporter": "botnetkiller"
        }
    ],
    "3812015": [
        {
            "dateadded": "2026-04-05 01:56:09 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812015/",
            "reporter": "botnetkiller"
        }
    ],
    "3812002": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:26:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812002/",
            "reporter": "botnetkiller"
        }
    ],
    "3812003": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/rstx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:37:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812003/",
            "reporter": "botnetkiller"
        }
    ],
    "3812004": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/librarymips",
            "url_status": "offline",
            "last_online": "2026-04-07 11:18:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812004/",
            "reporter": "botnetkiller"
        }
    ],
    "3812005": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/mirai.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812005/",
            "reporter": "botnetkiller"
        }
    ],
    "3812006": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812006/",
            "reporter": "botnetkiller"
        }
    ],
    "3812007": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/siii486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812007/",
            "reporter": "botnetkiller"
        }
    ],
    "3812008": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/siriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812008/",
            "reporter": "botnetkiller"
        }
    ],
    "3812009": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:55:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812009/",
            "reporter": "botnetkiller"
        }
    ],
    "3812010": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812010/",
            "reporter": "botnetkiller"
        }
    ],
    "3812011": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812011/",
            "reporter": "botnetkiller"
        }
    ],
    "3812012": [
        {
            "dateadded": "2026-04-05 01:56:08 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812012/",
            "reporter": "botnetkiller"
        }
    ],
    "3811998": [
        {
            "dateadded": "2026-04-05 01:56:07 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811998/",
            "reporter": "botnetkiller"
        }
    ],
    "3811999": [
        {
            "dateadded": "2026-04-05 01:56:07 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:25:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811999/",
            "reporter": "botnetkiller"
        }
    ],
    "3812000": [
        {
            "dateadded": "2026-04-05 01:56:07 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:01:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812000/",
            "reporter": "botnetkiller"
        }
    ],
    "3812001": [
        {
            "dateadded": "2026-04-05 01:56:07 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3812001/",
            "reporter": "botnetkiller"
        }
    ],
    "3811992": [
        {
            "dateadded": "2026-04-05 01:56:06 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:16:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811992/",
            "reporter": "botnetkiller"
        }
    ],
    "3811993": [
        {
            "dateadded": "2026-04-05 01:56:06 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 03:49:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811993/",
            "reporter": "botnetkiller"
        }
    ],
    "3811994": [
        {
            "dateadded": "2026-04-05 01:56:06 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811994/",
            "reporter": "botnetkiller"
        }
    ],
    "3811995": [
        {
            "dateadded": "2026-04-05 01:56:06 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 11:06:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811995/",
            "reporter": "botnetkiller"
        }
    ],
    "3811996": [
        {
            "dateadded": "2026-04-05 01:56:06 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811996/",
            "reporter": "botnetkiller"
        }
    ],
    "3811997": [
        {
            "dateadded": "2026-04-05 01:56:06 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811997/",
            "reporter": "botnetkiller"
        }
    ],
    "3811990": [
        {
            "dateadded": "2026-04-05 01:56:05 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki686",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811990/",
            "reporter": "botnetkiller"
        }
    ],
    "3811991": [
        {
            "dateadded": "2026-04-05 01:56:05 UTC",
            "url": "http://103.130.214.71:4949/bins/rst",
            "url_status": "offline",
            "last_online": "2026-04-07 10:01:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811991/",
            "reporter": "botnetkiller"
        }
    ],
    "3811983": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/siix86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811983/",
            "reporter": "botnetkiller"
        }
    ],
    "3811984": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811984/",
            "reporter": "botnetkiller"
        }
    ],
    "3811985": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811985/",
            "reporter": "botnetkiller"
        }
    ],
    "3811986": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/si32",
            "url_status": "offline",
            "last_online": "2026-04-07 03:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811986/",
            "reporter": "botnetkiller"
        }
    ],
    "3811987": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811987/",
            "reporter": "botnetkiller"
        }
    ],
    "3811988": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/siackx64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811988/",
            "reporter": "botnetkiller"
        }
    ],
    "3811989": [
        {
            "dateadded": "2026-04-05 01:56:00 UTC",
            "url": "http://103.130.214.71:4949/bins/shandx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811989/",
            "reporter": "botnetkiller"
        }
    ],
    "3811976": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:16:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811976/",
            "reporter": "botnetkiller"
        }
    ],
    "3811977": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryx64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811977/",
            "reporter": "botnetkiller"
        }
    ],
    "3811978": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811978/",
            "reporter": "botnetkiller"
        }
    ],
    "3811979": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/siackx86",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811979/",
            "reporter": "botnetkiller"
        }
    ],
    "3811980": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811980/",
            "reporter": "botnetkiller"
        }
    ],
    "3811981": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/sii486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:05:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811981/",
            "reporter": "botnetkiller"
        }
    ],
    "3811982": [
        {
            "dateadded": "2026-04-05 01:55:59 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811982/",
            "reporter": "botnetkiller"
        }
    ],
    "3811975": [
        {
            "dateadded": "2026-04-05 01:55:55 UTC",
            "url": "http://103.130.214.71:4949/mirai.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811975/",
            "reporter": "botnetkiller"
        }
    ],
    "3811973": [
        {
            "dateadded": "2026-04-05 01:55:54 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:40:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811973/",
            "reporter": "botnetkiller"
        }
    ],
    "3811974": [
        {
            "dateadded": "2026-04-05 01:55:54 UTC",
            "url": "http://103.130.214.71:4949/bins/siii686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811974/",
            "reporter": "botnetkiller"
        }
    ],
    "3811972": [
        {
            "dateadded": "2026-04-05 01:55:51 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811972/",
            "reporter": "botnetkiller"
        }
    ],
    "3811967": [
        {
            "dateadded": "2026-04-05 01:55:49 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyn32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811967/",
            "reporter": "botnetkiller"
        }
    ],
    "3811968": [
        {
            "dateadded": "2026-04-05 01:55:49 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:24:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811968/",
            "reporter": "botnetkiller"
        }
    ],
    "3811969": [
        {
            "dateadded": "2026-04-05 01:55:49 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii386",
            "url_status": "offline",
            "last_online": "2026-04-07 03:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811969/",
            "reporter": "botnetkiller"
        }
    ],
    "3811970": [
        {
            "dateadded": "2026-04-05 01:55:49 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811970/",
            "reporter": "botnetkiller"
        }
    ],
    "3811971": [
        {
            "dateadded": "2026-04-05 01:55:49 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:01:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811971/",
            "reporter": "botnetkiller"
        }
    ],
    "3811966": [
        {
            "dateadded": "2026-04-05 01:55:47 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811966/",
            "reporter": "botnetkiller"
        }
    ],
    "3811955": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811955/",
            "reporter": "botnetkiller"
        }
    ],
    "3811956": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811956/",
            "reporter": "botnetkiller"
        }
    ],
    "3811957": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/rstppc",
            "url_status": "offline",
            "last_online": "2026-04-07 04:46:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811957/",
            "reporter": "botnetkiller"
        }
    ],
    "3811958": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/six64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811958/",
            "reporter": "botnetkiller"
        }
    ],
    "3811959": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2x86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811959/",
            "reporter": "botnetkiller"
        }
    ],
    "3811960": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdx86",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811960/",
            "reporter": "botnetkiller"
        }
    ],
    "3811961": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811961/",
            "reporter": "botnetkiller"
        }
    ],
    "3811962": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811962/",
            "reporter": "botnetkiller"
        }
    ],
    "3811963": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811963/",
            "reporter": "botnetkiller"
        }
    ],
    "3811964": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdx64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:50:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811964/",
            "reporter": "botnetkiller"
        }
    ],
    "3811965": [
        {
            "dateadded": "2026-04-05 01:55:44 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:16:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811965/",
            "reporter": "botnetkiller"
        }
    ],
    "3811946": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811946/",
            "reporter": "botnetkiller"
        }
    ],
    "3811947": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811947/",
            "reporter": "botnetkiller"
        }
    ],
    "3811948": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:35:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811948/",
            "reporter": "botnetkiller"
        }
    ],
    "3811949": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811949/",
            "reporter": "botnetkiller"
        }
    ],
    "3811950": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 11:00:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811950/",
            "reporter": "botnetkiller"
        }
    ],
    "3811951": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811951/",
            "reporter": "botnetkiller"
        }
    ],
    "3811952": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:59:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811952/",
            "reporter": "botnetkiller"
        }
    ],
    "3811953": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/sii",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811953/",
            "reporter": "botnetkiller"
        }
    ],
    "3811954": [
        {
            "dateadded": "2026-04-05 01:55:43 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm",
            "url_status": "offline",
            "last_online": "2026-04-07 04:21:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811954/",
            "reporter": "botnetkiller"
        }
    ],
    "3811942": [
        {
            "dateadded": "2026-04-05 01:55:42 UTC",
            "url": "http://103.130.214.71:4949/bins/siii586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811942/",
            "reporter": "botnetkiller"
        }
    ],
    "3811943": [
        {
            "dateadded": "2026-04-05 01:55:42 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811943/",
            "reporter": "botnetkiller"
        }
    ],
    "3811944": [
        {
            "dateadded": "2026-04-05 01:55:42 UTC",
            "url": "http://103.130.214.71:4949/bins/sii486",
            "url_status": "offline",
            "last_online": "2026-04-07 07:18:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811944/",
            "reporter": "botnetkiller"
        }
    ],
    "3811945": [
        {
            "dateadded": "2026-04-05 01:55:42 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811945/",
            "reporter": "botnetkiller"
        }
    ],
    "3811938": [
        {
            "dateadded": "2026-04-05 01:55:41 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 07:34:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811938/",
            "reporter": "botnetkiller"
        }
    ],
    "3811939": [
        {
            "dateadded": "2026-04-05 01:55:41 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:42:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811939/",
            "reporter": "botnetkiller"
        }
    ],
    "3811940": [
        {
            "dateadded": "2026-04-05 01:55:41 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:02:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811940/",
            "reporter": "botnetkiller"
        }
    ],
    "3811941": [
        {
            "dateadded": "2026-04-05 01:55:41 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811941/",
            "reporter": "botnetkiller"
        }
    ],
    "3811934": [
        {
            "dateadded": "2026-04-05 01:55:40 UTC",
            "url": "http://103.130.214.71:4949/bins/siaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811934/",
            "reporter": "botnetkiller"
        }
    ],
    "3811935": [
        {
            "dateadded": "2026-04-05 01:55:40 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811935/",
            "reporter": "botnetkiller"
        }
    ],
    "3811936": [
        {
            "dateadded": "2026-04-05 01:55:40 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811936/",
            "reporter": "botnetkiller"
        }
    ],
    "3811937": [
        {
            "dateadded": "2026-04-05 01:55:40 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii586",
            "url_status": "offline",
            "last_online": "2026-04-07 04:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811937/",
            "reporter": "botnetkiller"
        }
    ],
    "3811933": [
        {
            "dateadded": "2026-04-05 01:55:36 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811933/",
            "reporter": "botnetkiller"
        }
    ],
    "3811931": [
        {
            "dateadded": "2026-04-05 01:55:35 UTC",
            "url": "http://103.130.214.71:4949/mirai.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811931/",
            "reporter": "botnetkiller"
        }
    ],
    "3811932": [
        {
            "dateadded": "2026-04-05 01:55:35 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811932/",
            "reporter": "botnetkiller"
        }
    ],
    "3811916": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/sii32",
            "url_status": "offline",
            "last_online": "2026-04-07 11:18:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811916/",
            "reporter": "botnetkiller"
        }
    ],
    "3811917": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811917/",
            "reporter": "botnetkiller"
        }
    ],
    "3811918": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/siii586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811918/",
            "reporter": "botnetkiller"
        }
    ],
    "3811919": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpx86",
            "url_status": "offline",
            "last_online": "2026-04-07 05:05:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811919/",
            "reporter": "botnetkiller"
        }
    ],
    "3811920": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 09:23:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811920/",
            "reporter": "botnetkiller"
        }
    ],
    "3811921": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811921/",
            "reporter": "botnetkiller"
        }
    ],
    "3811922": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811922/",
            "reporter": "botnetkiller"
        }
    ],
    "3811923": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 04:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811923/",
            "reporter": "botnetkiller"
        }
    ],
    "3811924": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811924/",
            "reporter": "botnetkiller"
        }
    ],
    "3811925": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/sii686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811925/",
            "reporter": "botnetkiller"
        }
    ],
    "3811926": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811926/",
            "reporter": "botnetkiller"
        }
    ],
    "3811927": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811927/",
            "reporter": "botnetkiller"
        }
    ],
    "3811928": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811928/",
            "reporter": "botnetkiller"
        }
    ],
    "3811929": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:11:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811929/",
            "reporter": "botnetkiller"
        }
    ],
    "3811930": [
        {
            "dateadded": "2026-04-05 01:55:30 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2aarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811930/",
            "reporter": "botnetkiller"
        }
    ],
    "3811914": [
        {
            "dateadded": "2026-04-05 01:55:29 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:21:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811914/",
            "reporter": "botnetkiller"
        }
    ],
    "3811915": [
        {
            "dateadded": "2026-04-05 01:55:29 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:55:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811915/",
            "reporter": "botnetkiller"
        }
    ],
    "3811911": [
        {
            "dateadded": "2026-04-05 01:55:22 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki586n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811911/",
            "reporter": "botnetkiller"
        }
    ],
    "3811912": [
        {
            "dateadded": "2026-04-05 01:55:22 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:46:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811912/",
            "reporter": "botnetkiller"
        }
    ],
    "3811913": [
        {
            "dateadded": "2026-04-05 01:55:22 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 05:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811913/",
            "reporter": "botnetkiller"
        }
    ],
    "3811908": [
        {
            "dateadded": "2026-04-05 01:55:20 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi586",
            "url_status": "offline",
            "last_online": "2026-04-07 04:14:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811908/",
            "reporter": "botnetkiller"
        }
    ],
    "3811909": [
        {
            "dateadded": "2026-04-05 01:55:20 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811909/",
            "reporter": "botnetkiller"
        }
    ],
    "3811910": [
        {
            "dateadded": "2026-04-05 01:55:20 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i686n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811910/",
            "reporter": "botnetkiller"
        }
    ],
    "3811902": [
        {
            "dateadded": "2026-04-05 01:55:19 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811902/",
            "reporter": "botnetkiller"
        }
    ],
    "3811903": [
        {
            "dateadded": "2026-04-05 01:55:19 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811903/",
            "reporter": "botnetkiller"
        }
    ],
    "3811904": [
        {
            "dateadded": "2026-04-05 01:55:19 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 04:04:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811904/",
            "reporter": "botnetkiller"
        }
    ],
    "3811905": [
        {
            "dateadded": "2026-04-05 01:55:19 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811905/",
            "reporter": "botnetkiller"
        }
    ],
    "3811906": [
        {
            "dateadded": "2026-04-05 01:55:19 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:26:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811906/",
            "reporter": "botnetkiller"
        }
    ],
    "3811907": [
        {
            "dateadded": "2026-04-05 01:55:19 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2riscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811907/",
            "reporter": "botnetkiller"
        }
    ],
    "3811899": [
        {
            "dateadded": "2026-04-05 01:55:18 UTC",
            "url": "http://103.130.214.71:4949/bins/siackx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811899/",
            "reporter": "botnetkiller"
        }
    ],
    "3811900": [
        {
            "dateadded": "2026-04-05 01:55:18 UTC",
            "url": "http://103.130.214.71:4949/bins/mtd32",
            "url_status": "offline",
            "last_online": "2026-04-07 05:07:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811900/",
            "reporter": "botnetkiller"
        }
    ],
    "3811901": [
        {
            "dateadded": "2026-04-05 01:55:18 UTC",
            "url": "http://103.130.214.71:4949/bins/siippc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811901/",
            "reporter": "botnetkiller"
        }
    ],
    "3811897": [
        {
            "dateadded": "2026-04-05 01:55:17 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:24:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811897/",
            "reporter": "botnetkiller"
        }
    ],
    "3811898": [
        {
            "dateadded": "2026-04-05 01:55:17 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811898/",
            "reporter": "botnetkiller"
        }
    ],
    "3811889": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/tcippc",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811889/",
            "reporter": "botnetkiller"
        }
    ],
    "3811890": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811890/",
            "reporter": "botnetkiller"
        }
    ],
    "3811891": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811891/",
            "reporter": "botnetkiller"
        }
    ],
    "3811892": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811892/",
            "reporter": "botnetkiller"
        }
    ],
    "3811893": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:08:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811893/",
            "reporter": "botnetkiller"
        }
    ],
    "3811894": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/rstriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:43:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811894/",
            "reporter": "botnetkiller"
        }
    ],
    "3811895": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i386n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:45:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811895/",
            "reporter": "botnetkiller"
        }
    ],
    "3811896": [
        {
            "dateadded": "2026-04-05 01:55:15 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811896/",
            "reporter": "botnetkiller"
        }
    ],
    "3811887": [
        {
            "dateadded": "2026-04-05 01:55:14 UTC",
            "url": "http://103.130.214.71:4949/bins/siackx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811887/",
            "reporter": "botnetkiller"
        }
    ],
    "3811888": [
        {
            "dateadded": "2026-04-05 01:55:14 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 04:46:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811888/",
            "reporter": "botnetkiller"
        }
    ],
    "3811880": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti586",
            "url_status": "offline",
            "last_online": "2026-04-07 08:24:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811880/",
            "reporter": "botnetkiller"
        }
    ],
    "3811881": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811881/",
            "reporter": "botnetkiller"
        }
    ],
    "3811882": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811882/",
            "reporter": "botnetkiller"
        }
    ],
    "3811883": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/sii586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811883/",
            "reporter": "botnetkiller"
        }
    ],
    "3811884": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/ovh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811884/",
            "reporter": "botnetkiller"
        }
    ],
    "3811885": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811885/",
            "reporter": "botnetkiller"
        }
    ],
    "3811886": [
        {
            "dateadded": "2026-04-05 01:55:13 UTC",
            "url": "http://103.130.214.71:4949/bins/siackmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811886/",
            "reporter": "botnetkiller"
        }
    ],
    "3811878": [
        {
            "dateadded": "2026-04-05 01:55:12 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:49:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811878/",
            "reporter": "botnetkiller"
        }
    ],
    "3811879": [
        {
            "dateadded": "2026-04-05 01:55:12 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:04:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811879/",
            "reporter": "botnetkiller"
        }
    ],
    "3811869": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811869/",
            "reporter": "botnetkiller"
        }
    ],
    "3811870": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/siii486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811870/",
            "reporter": "botnetkiller"
        }
    ],
    "3811871": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811871/",
            "reporter": "botnetkiller"
        }
    ],
    "3811872": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:32:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811872/",
            "reporter": "botnetkiller"
        }
    ],
    "3811873": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811873/",
            "reporter": "botnetkiller"
        }
    ],
    "3811874": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811874/",
            "reporter": "botnetkiller"
        }
    ],
    "3811875": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811875/",
            "reporter": "botnetkiller"
        }
    ],
    "3811876": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811876/",
            "reporter": "botnetkiller"
        }
    ],
    "3811877": [
        {
            "dateadded": "2026-04-05 01:55:06 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynppc",
            "url_status": "offline",
            "last_online": "2026-04-07 10:52:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811877/",
            "reporter": "botnetkiller"
        }
    ],
    "3811868": [
        {
            "dateadded": "2026-04-05 01:55:03 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811868/",
            "reporter": "botnetkiller"
        }
    ],
    "3811865": [
        {
            "dateadded": "2026-04-05 01:54:59 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811865/",
            "reporter": "botnetkiller"
        }
    ],
    "3811866": [
        {
            "dateadded": "2026-04-05 01:54:59 UTC",
            "url": "http://103.130.214.71:4949/bins/mtd",
            "url_status": "offline",
            "last_online": "2026-04-07 11:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811866/",
            "reporter": "botnetkiller"
        }
    ],
    "3811867": [
        {
            "dateadded": "2026-04-05 01:54:59 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811867/",
            "reporter": "botnetkiller"
        }
    ],
    "3811859": [
        {
            "dateadded": "2026-04-05 01:54:58 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811859/",
            "reporter": "botnetkiller"
        }
    ],
    "3811860": [
        {
            "dateadded": "2026-04-05 01:54:58 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811860/",
            "reporter": "botnetkiller"
        }
    ],
    "3811861": [
        {
            "dateadded": "2026-04-05 01:54:58 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:37:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811861/",
            "reporter": "botnetkiller"
        }
    ],
    "3811862": [
        {
            "dateadded": "2026-04-05 01:54:58 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:47:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811862/",
            "reporter": "botnetkiller"
        }
    ],
    "3811863": [
        {
            "dateadded": "2026-04-05 01:54:58 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811863/",
            "reporter": "botnetkiller"
        }
    ],
    "3811864": [
        {
            "dateadded": "2026-04-05 01:54:58 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811864/",
            "reporter": "botnetkiller"
        }
    ],
    "3811856": [
        {
            "dateadded": "2026-04-05 01:54:56 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyn",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811856/",
            "reporter": "botnetkiller"
        }
    ],
    "3811857": [
        {
            "dateadded": "2026-04-05 01:54:56 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811857/",
            "reporter": "botnetkiller"
        }
    ],
    "3811858": [
        {
            "dateadded": "2026-04-05 01:54:56 UTC",
            "url": "http://103.130.214.71:4949/bins/tciaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:31:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811858/",
            "reporter": "botnetkiller"
        }
    ],
    "3811854": [
        {
            "dateadded": "2026-04-05 01:54:55 UTC",
            "url": "http://103.130.214.71:4949/bins/shandamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:19:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811854/",
            "reporter": "botnetkiller"
        }
    ],
    "3811855": [
        {
            "dateadded": "2026-04-05 01:54:55 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811855/",
            "reporter": "botnetkiller"
        }
    ],
    "3811852": [
        {
            "dateadded": "2026-04-05 01:54:54 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv5",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811852/",
            "reporter": "botnetkiller"
        }
    ],
    "3811853": [
        {
            "dateadded": "2026-04-05 01:54:54 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811853/",
            "reporter": "botnetkiller"
        }
    ],
    "3811838": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/siix86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:05:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811838/",
            "reporter": "botnetkiller"
        }
    ],
    "3811839": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhx64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811839/",
            "reporter": "botnetkiller"
        }
    ],
    "3811840": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811840/",
            "reporter": "botnetkiller"
        }
    ],
    "3811841": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhx86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811841/",
            "reporter": "botnetkiller"
        }
    ],
    "3811842": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811842/",
            "reporter": "botnetkiller"
        }
    ],
    "3811843": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811843/",
            "reporter": "botnetkiller"
        }
    ],
    "3811844": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811844/",
            "reporter": "botnetkiller"
        }
    ],
    "3811845": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 06:38:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811845/",
            "reporter": "botnetkiller"
        }
    ],
    "3811846": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/rstx64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:23:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811846/",
            "reporter": "botnetkiller"
        }
    ],
    "3811847": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811847/",
            "reporter": "botnetkiller"
        }
    ],
    "3811848": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 03:52:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811848/",
            "reporter": "botnetkiller"
        }
    ],
    "3811849": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811849/",
            "reporter": "botnetkiller"
        }
    ],
    "3811850": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811850/",
            "reporter": "botnetkiller"
        }
    ],
    "3811851": [
        {
            "dateadded": "2026-04-05 01:54:53 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811851/",
            "reporter": "botnetkiller"
        }
    ],
    "3811837": [
        {
            "dateadded": "2026-04-05 01:54:52 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:15:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811837/",
            "reporter": "botnetkiller"
        }
    ],
    "3811836": [
        {
            "dateadded": "2026-04-05 01:54:48 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811836/",
            "reporter": "botnetkiller"
        }
    ],
    "3811833": [
        {
            "dateadded": "2026-04-05 01:54:47 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 07:36:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811833/",
            "reporter": "botnetkiller"
        }
    ],
    "3811834": [
        {
            "dateadded": "2026-04-05 01:54:47 UTC",
            "url": "http://103.130.214.71:4949/bins/shandaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 08:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811834/",
            "reporter": "botnetkiller"
        }
    ],
    "3811835": [
        {
            "dateadded": "2026-04-05 01:54:47 UTC",
            "url": "http://103.130.214.71:4949/bins/shand",
            "url_status": "offline",
            "last_online": "2026-04-07 05:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811835/",
            "reporter": "botnetkiller"
        }
    ],
    "3811825": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811825/",
            "reporter": "botnetkiller"
        }
    ],
    "3811826": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/socki586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811826/",
            "reporter": "botnetkiller"
        }
    ],
    "3811827": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 06:46:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811827/",
            "reporter": "botnetkiller"
        }
    ],
    "3811828": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/six86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811828/",
            "reporter": "botnetkiller"
        }
    ],
    "3811829": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811829/",
            "reporter": "botnetkiller"
        }
    ],
    "3811830": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:45:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811830/",
            "reporter": "botnetkiller"
        }
    ],
    "3811831": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 09:30:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811831/",
            "reporter": "botnetkiller"
        }
    ],
    "3811832": [
        {
            "dateadded": "2026-04-05 01:54:46 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811832/",
            "reporter": "botnetkiller"
        }
    ],
    "3811821": [
        {
            "dateadded": "2026-04-05 01:54:42 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811821/",
            "reporter": "botnetkiller"
        }
    ],
    "3811822": [
        {
            "dateadded": "2026-04-05 01:54:42 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i686n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:18:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811822/",
            "reporter": "botnetkiller"
        }
    ],
    "3811823": [
        {
            "dateadded": "2026-04-05 01:54:42 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811823/",
            "reporter": "botnetkiller"
        }
    ],
    "3811824": [
        {
            "dateadded": "2026-04-05 01:54:42 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2ppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:01:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811824/",
            "reporter": "botnetkiller"
        }
    ],
    "3811812": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki486n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811812/",
            "reporter": "botnetkiller"
        }
    ],
    "3811813": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811813/",
            "reporter": "botnetkiller"
        }
    ],
    "3811814": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/siackamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:55:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811814/",
            "reporter": "botnetkiller"
        }
    ],
    "3811815": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 11:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811815/",
            "reporter": "botnetkiller"
        }
    ],
    "3811816": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/shandppc",
            "url_status": "offline",
            "last_online": "2026-04-07 04:49:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811816/",
            "reporter": "botnetkiller"
        }
    ],
    "3811817": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811817/",
            "reporter": "botnetkiller"
        }
    ],
    "3811818": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811818/",
            "reporter": "botnetkiller"
        }
    ],
    "3811819": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811819/",
            "reporter": "botnetkiller"
        }
    ],
    "3811820": [
        {
            "dateadded": "2026-04-05 01:54:41 UTC",
            "url": "http://103.130.214.71:4949/bins/sockmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811820/",
            "reporter": "botnetkiller"
        }
    ],
    "3811800": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynx86",
            "url_status": "offline",
            "last_online": "2026-04-07 05:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811800/",
            "reporter": "botnetkiller"
        }
    ],
    "3811801": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/sockmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811801/",
            "reporter": "botnetkiller"
        }
    ],
    "3811802": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/tciamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811802/",
            "reporter": "botnetkiller"
        }
    ],
    "3811803": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/tcimpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811803/",
            "reporter": "botnetkiller"
        }
    ],
    "3811804": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811804/",
            "reporter": "botnetkiller"
        }
    ],
    "3811805": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:52:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811805/",
            "reporter": "botnetkiller"
        }
    ],
    "3811806": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811806/",
            "reporter": "botnetkiller"
        }
    ],
    "3811807": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/sock32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:04:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811807/",
            "reporter": "botnetkiller"
        }
    ],
    "3811808": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:45:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811808/",
            "reporter": "botnetkiller"
        }
    ],
    "3811809": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/sii386",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811809/",
            "reporter": "botnetkiller"
        }
    ],
    "3811810": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/siimpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811810/",
            "reporter": "botnetkiller"
        }
    ],
    "3811811": [
        {
            "dateadded": "2026-04-05 01:54:40 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811811/",
            "reporter": "botnetkiller"
        }
    ],
    "3811795": [
        {
            "dateadded": "2026-04-05 01:54:39 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811795/",
            "reporter": "botnetkiller"
        }
    ],
    "3811796": [
        {
            "dateadded": "2026-04-05 01:54:39 UTC",
            "url": "http://103.130.214.71:4949/bins/socki686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811796/",
            "reporter": "botnetkiller"
        }
    ],
    "3811797": [
        {
            "dateadded": "2026-04-05 01:54:39 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:11:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811797/",
            "reporter": "botnetkiller"
        }
    ],
    "3811798": [
        {
            "dateadded": "2026-04-05 01:54:39 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811798/",
            "reporter": "botnetkiller"
        }
    ],
    "3811799": [
        {
            "dateadded": "2026-04-05 01:54:39 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811799/",
            "reporter": "botnetkiller"
        }
    ],
    "3811793": [
        {
            "dateadded": "2026-04-05 01:54:38 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811793/",
            "reporter": "botnetkiller"
        }
    ],
    "3811794": [
        {
            "dateadded": "2026-04-05 01:54:38 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 05:04:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811794/",
            "reporter": "botnetkiller"
        }
    ],
    "3811786": [
        {
            "dateadded": "2026-04-05 01:54:28 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:49:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811786/",
            "reporter": "botnetkiller"
        }
    ],
    "3811787": [
        {
            "dateadded": "2026-04-05 01:54:28 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811787/",
            "reporter": "botnetkiller"
        }
    ],
    "3811788": [
        {
            "dateadded": "2026-04-05 01:54:28 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811788/",
            "reporter": "botnetkiller"
        }
    ],
    "3811790": [
        {
            "dateadded": "2026-04-05 01:54:28 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 08:12:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811790/",
            "reporter": "botnetkiller"
        }
    ],
    "3811791": [
        {
            "dateadded": "2026-04-05 01:54:28 UTC",
            "url": "http://103.130.214.71:4949/bins/rstmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 04:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811791/",
            "reporter": "botnetkiller"
        }
    ],
    "3811792": [
        {
            "dateadded": "2026-04-05 01:54:28 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811792/",
            "reporter": "botnetkiller"
        }
    ],
    "3811785": [
        {
            "dateadded": "2026-04-05 01:54:26 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811785/",
            "reporter": "botnetkiller"
        }
    ],
    "3811784": [
        {
            "dateadded": "2026-04-05 01:54:25 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:47:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811784/",
            "reporter": "botnetkiller"
        }
    ],
    "3811782": [
        {
            "dateadded": "2026-04-05 01:54:22 UTC",
            "url": "http://103.130.214.71:4949/bins/siackppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811782/",
            "reporter": "botnetkiller"
        }
    ],
    "3811783": [
        {
            "dateadded": "2026-04-05 01:54:22 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2mips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811783/",
            "reporter": "botnetkiller"
        }
    ],
    "3811775": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni486n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811775/",
            "reporter": "botnetkiller"
        }
    ],
    "3811776": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/siack32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:04:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811776/",
            "reporter": "botnetkiller"
        }
    ],
    "3811777": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/siacki686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811777/",
            "reporter": "botnetkiller"
        }
    ],
    "3811778": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti486n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811778/",
            "reporter": "botnetkiller"
        }
    ],
    "3811779": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpppc",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811779/",
            "reporter": "botnetkiller"
        }
    ],
    "3811780": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 04:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811780/",
            "reporter": "botnetkiller"
        }
    ],
    "3811781": [
        {
            "dateadded": "2026-04-05 01:54:21 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811781/",
            "reporter": "botnetkiller"
        }
    ],
    "3811766": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811766/",
            "reporter": "botnetkiller"
        }
    ],
    "3811767": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/siackmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 11:08:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811767/",
            "reporter": "botnetkiller"
        }
    ],
    "3811768": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/siackriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811768/",
            "reporter": "botnetkiller"
        }
    ],
    "3811769": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:18:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811769/",
            "reporter": "botnetkiller"
        }
    ],
    "3811770": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/tciarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811770/",
            "reporter": "botnetkiller"
        }
    ],
    "3811771": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/six86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811771/",
            "reporter": "botnetkiller"
        }
    ],
    "3811772": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparm6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811772/",
            "reporter": "botnetkiller"
        }
    ],
    "3811773": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811773/",
            "reporter": "botnetkiller"
        }
    ],
    "3811774": [
        {
            "dateadded": "2026-04-05 01:54:20 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:35:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811774/",
            "reporter": "botnetkiller"
        }
    ],
    "3811760": [
        {
            "dateadded": "2026-04-05 01:54:19 UTC",
            "url": "http://103.130.214.71:4949/bins/tcix64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:59:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811760/",
            "reporter": "botnetkiller"
        }
    ],
    "3811761": [
        {
            "dateadded": "2026-04-05 01:54:19 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti386",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811761/",
            "reporter": "botnetkiller"
        }
    ],
    "3811762": [
        {
            "dateadded": "2026-04-05 01:54:19 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811762/",
            "reporter": "botnetkiller"
        }
    ],
    "3811763": [
        {
            "dateadded": "2026-04-05 01:54:19 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811763/",
            "reporter": "botnetkiller"
        }
    ],
    "3811764": [
        {
            "dateadded": "2026-04-05 01:54:19 UTC",
            "url": "http://103.130.214.71:4949/bins/socki486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811764/",
            "reporter": "botnetkiller"
        }
    ],
    "3811765": [
        {
            "dateadded": "2026-04-05 01:54:19 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811765/",
            "reporter": "botnetkiller"
        }
    ],
    "3811750": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/tcix86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:19:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811750/",
            "reporter": "botnetkiller"
        }
    ],
    "3811751": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarm",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811751/",
            "reporter": "botnetkiller"
        }
    ],
    "3811752": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811752/",
            "reporter": "botnetkiller"
        }
    ],
    "3811753": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti386n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811753/",
            "reporter": "botnetkiller"
        }
    ],
    "3811754": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811754/",
            "reporter": "botnetkiller"
        }
    ],
    "3811755": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:00:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811755/",
            "reporter": "botnetkiller"
        }
    ],
    "3811756": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811756/",
            "reporter": "botnetkiller"
        }
    ],
    "3811757": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/simpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:16:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811757/",
            "reporter": "botnetkiller"
        }
    ],
    "3811758": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/librarympsl",
            "url_status": "offline",
            "last_online": "2026-04-07 05:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811758/",
            "reporter": "botnetkiller"
        }
    ],
    "3811759": [
        {
            "dateadded": "2026-04-05 01:54:18 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811759/",
            "reporter": "botnetkiller"
        }
    ],
    "3811746": [
        {
            "dateadded": "2026-04-05 01:54:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:26:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811746/",
            "reporter": "botnetkiller"
        }
    ],
    "3811747": [
        {
            "dateadded": "2026-04-05 01:54:12 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 08:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811747/",
            "reporter": "botnetkiller"
        }
    ],
    "3811748": [
        {
            "dateadded": "2026-04-05 01:54:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sockx86",
            "url_status": "offline",
            "last_online": "2026-04-07 08:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811748/",
            "reporter": "botnetkiller"
        }
    ],
    "3811749": [
        {
            "dateadded": "2026-04-05 01:54:12 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 03:48:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811749/",
            "reporter": "botnetkiller"
        }
    ],
    "3811745": [
        {
            "dateadded": "2026-04-05 01:54:11 UTC",
            "url": "http://103.130.214.71:4949/mirai.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811745/",
            "reporter": "botnetkiller"
        }
    ],
    "3811744": [
        {
            "dateadded": "2026-04-05 01:54:09 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811744/",
            "reporter": "botnetkiller"
        }
    ],
    "3811743": [
        {
            "dateadded": "2026-04-05 01:54:07 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811743/",
            "reporter": "botnetkiller"
        }
    ],
    "3811738": [
        {
            "dateadded": "2026-04-05 01:54:06 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:55:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811738/",
            "reporter": "botnetkiller"
        }
    ],
    "3811739": [
        {
            "dateadded": "2026-04-05 01:54:06 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynx64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:28:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811739/",
            "reporter": "botnetkiller"
        }
    ],
    "3811740": [
        {
            "dateadded": "2026-04-05 01:54:06 UTC",
            "url": "http://103.130.214.71:4949/bins/siii386n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811740/",
            "reporter": "botnetkiller"
        }
    ],
    "3811741": [
        {
            "dateadded": "2026-04-05 01:54:06 UTC",
            "url": "http://103.130.214.71:4949/bins/ovharmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 06:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811741/",
            "reporter": "botnetkiller"
        }
    ],
    "3811742": [
        {
            "dateadded": "2026-04-05 01:54:06 UTC",
            "url": "http://103.130.214.71:4949/bins/socki686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811742/",
            "reporter": "botnetkiller"
        }
    ],
    "3811736": [
        {
            "dateadded": "2026-04-05 01:54:05 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811736/",
            "reporter": "botnetkiller"
        }
    ],
    "3811737": [
        {
            "dateadded": "2026-04-05 01:54:05 UTC",
            "url": "http://103.130.214.71:4949/bins/siix86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811737/",
            "reporter": "botnetkiller"
        }
    ],
    "3811734": [
        {
            "dateadded": "2026-04-05 01:54:03 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811734/",
            "reporter": "botnetkiller"
        }
    ],
    "3811735": [
        {
            "dateadded": "2026-04-05 01:54:03 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811735/",
            "reporter": "botnetkiller"
        }
    ],
    "3811733": [
        {
            "dateadded": "2026-04-05 01:54:00 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811733/",
            "reporter": "botnetkiller"
        }
    ],
    "3811732": [
        {
            "dateadded": "2026-04-05 01:53:59 UTC",
            "url": "http://103.130.214.71:4949/bins/simips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811732/",
            "reporter": "botnetkiller"
        }
    ],
    "3811726": [
        {
            "dateadded": "2026-04-05 01:53:58 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811726/",
            "reporter": "botnetkiller"
        }
    ],
    "3811727": [
        {
            "dateadded": "2026-04-05 01:53:58 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 05:30:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811727/",
            "reporter": "botnetkiller"
        }
    ],
    "3811728": [
        {
            "dateadded": "2026-04-05 01:53:58 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:04:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811728/",
            "reporter": "botnetkiller"
        }
    ],
    "3811729": [
        {
            "dateadded": "2026-04-05 01:53:58 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 07:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811729/",
            "reporter": "botnetkiller"
        }
    ],
    "3811730": [
        {
            "dateadded": "2026-04-05 01:53:58 UTC",
            "url": "http://103.130.214.71:4949/bins/socki386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811730/",
            "reporter": "botnetkiller"
        }
    ],
    "3811731": [
        {
            "dateadded": "2026-04-05 01:53:58 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811731/",
            "reporter": "botnetkiller"
        }
    ],
    "3811723": [
        {
            "dateadded": "2026-04-05 01:53:55 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:06:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811723/",
            "reporter": "botnetkiller"
        }
    ],
    "3811724": [
        {
            "dateadded": "2026-04-05 01:53:55 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811724/",
            "reporter": "botnetkiller"
        }
    ],
    "3811725": [
        {
            "dateadded": "2026-04-05 01:53:55 UTC",
            "url": "http://103.130.214.71:4949/mirai.apk",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811725/",
            "reporter": "botnetkiller"
        }
    ],
    "3811715": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811715/",
            "reporter": "botnetkiller"
        }
    ],
    "3811716": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/tcimipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811716/",
            "reporter": "botnetkiller"
        }
    ],
    "3811717": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 04:46:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811717/",
            "reporter": "botnetkiller"
        }
    ],
    "3811718": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs232",
            "url_status": "offline",
            "last_online": "2026-04-07 05:08:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811718/",
            "reporter": "botnetkiller"
        }
    ],
    "3811719": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/sockmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811719/",
            "reporter": "botnetkiller"
        }
    ],
    "3811720": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811720/",
            "reporter": "botnetkiller"
        }
    ],
    "3811721": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/siamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811721/",
            "reporter": "botnetkiller"
        }
    ],
    "3811722": [
        {
            "dateadded": "2026-04-05 01:53:53 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdmips",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811722/",
            "reporter": "botnetkiller"
        }
    ],
    "3811705": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2amd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811705/",
            "reporter": "botnetkiller"
        }
    ],
    "3811706": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2i386",
            "url_status": "offline",
            "last_online": "2026-04-07 03:50:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811706/",
            "reporter": "botnetkiller"
        }
    ],
    "3811707": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811707/",
            "reporter": "botnetkiller"
        }
    ],
    "3811708": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 03:48:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811708/",
            "reporter": "botnetkiller"
        }
    ],
    "3811709": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 03:52:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811709/",
            "reporter": "botnetkiller"
        }
    ],
    "3811710": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811710/",
            "reporter": "botnetkiller"
        }
    ],
    "3811711": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/sudparmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:58:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811711/",
            "reporter": "botnetkiller"
        }
    ],
    "3811712": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 03:55:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811712/",
            "reporter": "botnetkiller"
        }
    ],
    "3811713": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/siiarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811713/",
            "reporter": "botnetkiller"
        }
    ],
    "3811714": [
        {
            "dateadded": "2026-04-05 01:53:52 UTC",
            "url": "http://103.130.214.71:4949/bins/rst32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811714/",
            "reporter": "botnetkiller"
        }
    ],
    "3811701": [
        {
            "dateadded": "2026-04-05 01:53:51 UTC",
            "url": "http://103.130.214.71:4949/bins/siackmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811701/",
            "reporter": "botnetkiller"
        }
    ],
    "3811702": [
        {
            "dateadded": "2026-04-05 01:53:51 UTC",
            "url": "http://103.130.214.71:4949/bins/librarymipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811702/",
            "reporter": "botnetkiller"
        }
    ],
    "3811703": [
        {
            "dateadded": "2026-04-05 01:53:51 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811703/",
            "reporter": "botnetkiller"
        }
    ],
    "3811704": [
        {
            "dateadded": "2026-04-05 01:53:51 UTC",
            "url": "http://103.130.214.71:4949/bins/socki586",
            "url_status": "offline",
            "last_online": "2026-04-07 04:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811704/",
            "reporter": "botnetkiller"
        }
    ],
    "3811693": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi686",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811693/",
            "reporter": "botnetkiller"
        }
    ],
    "3811694": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811694/",
            "reporter": "botnetkiller"
        }
    ],
    "3811695": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/tcix86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811695/",
            "reporter": "botnetkiller"
        }
    ],
    "3811696": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:18:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811696/",
            "reporter": "botnetkiller"
        }
    ],
    "3811697": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811697/",
            "reporter": "botnetkiller"
        }
    ],
    "3811698": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/rsti586n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:47:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811698/",
            "reporter": "botnetkiller"
        }
    ],
    "3811699": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/siii386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811699/",
            "reporter": "botnetkiller"
        }
    ],
    "3811700": [
        {
            "dateadded": "2026-04-05 01:53:50 UTC",
            "url": "http://103.130.214.71:4949/bins/sockppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811700/",
            "reporter": "botnetkiller"
        }
    ],
    "3811692": [
        {
            "dateadded": "2026-04-05 01:53:49 UTC",
            "url": "http://103.130.214.71:4949/bins/sii386n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:49:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811692/",
            "reporter": "botnetkiller"
        }
    ],
    "3811686": [
        {
            "dateadded": "2026-04-05 01:53:48 UTC",
            "url": "http://103.130.214.71:4949/bins/shandi686",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811686/",
            "reporter": "botnetkiller"
        }
    ],
    "3811687": [
        {
            "dateadded": "2026-04-05 01:53:48 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811687/",
            "reporter": "botnetkiller"
        }
    ],
    "3811688": [
        {
            "dateadded": "2026-04-05 01:53:48 UTC",
            "url": "http://103.130.214.71:4949/bins/siarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 04:44:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811688/",
            "reporter": "botnetkiller"
        }
    ],
    "3811689": [
        {
            "dateadded": "2026-04-05 01:53:48 UTC",
            "url": "http://103.130.214.71:4949/bins/acki386n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811689/",
            "reporter": "botnetkiller"
        }
    ],
    "3811690": [
        {
            "dateadded": "2026-04-05 01:53:48 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:26:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811690/",
            "reporter": "botnetkiller"
        }
    ],
    "3811691": [
        {
            "dateadded": "2026-04-05 01:53:48 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811691/",
            "reporter": "botnetkiller"
        }
    ],
    "3811685": [
        {
            "dateadded": "2026-04-05 01:53:47 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 11:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811685/",
            "reporter": "botnetkiller"
        }
    ],
    "3811684": [
        {
            "dateadded": "2026-04-05 01:53:46 UTC",
            "url": "http://103.130.214.71:4949/bins/shandmips",
            "url_status": "offline",
            "last_online": "2026-04-07 11:00:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811684/",
            "reporter": "botnetkiller"
        }
    ],
    "3811683": [
        {
            "dateadded": "2026-04-05 01:53:42 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811683/",
            "reporter": "botnetkiller"
        }
    ],
    "3811682": [
        {
            "dateadded": "2026-04-05 01:53:31 UTC",
            "url": "http://103.130.214.71:4949/bins/ssyni386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:31:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811682/",
            "reporter": "botnetkiller"
        }
    ],
    "3811680": [
        {
            "dateadded": "2026-04-05 01:53:30 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2armv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811680/",
            "reporter": "botnetkiller"
        }
    ],
    "3811681": [
        {
            "dateadded": "2026-04-05 01:53:30 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811681/",
            "reporter": "botnetkiller"
        }
    ],
    "3811660": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811660/",
            "reporter": "botnetkiller"
        }
    ],
    "3811661": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/siiaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811661/",
            "reporter": "botnetkiller"
        }
    ],
    "3811662": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/tciriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811662/",
            "reporter": "botnetkiller"
        }
    ],
    "3811663": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/siiriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811663/",
            "reporter": "botnetkiller"
        }
    ],
    "3811664": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2x64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:23:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811664/",
            "reporter": "botnetkiller"
        }
    ],
    "3811665": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/simipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 11:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811665/",
            "reporter": "botnetkiller"
        }
    ],
    "3811666": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/siackarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:04:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811666/",
            "reporter": "botnetkiller"
        }
    ],
    "3811667": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811667/",
            "reporter": "botnetkiller"
        }
    ],
    "3811668": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/sudpi686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811668/",
            "reporter": "botnetkiller"
        }
    ],
    "3811669": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/sock",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811669/",
            "reporter": "botnetkiller"
        }
    ],
    "3811670": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/socki486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811670/",
            "reporter": "botnetkiller"
        }
    ],
    "3811671": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/tcii486",
            "url_status": "offline",
            "last_online": "2026-04-07 04:05:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811671/",
            "reporter": "botnetkiller"
        }
    ],
    "3811672": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 07:03:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811672/",
            "reporter": "botnetkiller"
        }
    ],
    "3811673": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/sockx64",
            "url_status": "offline",
            "last_online": "2026-04-07 09:17:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811673/",
            "reporter": "botnetkiller"
        }
    ],
    "3811674": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811674/",
            "reporter": "botnetkiller"
        }
    ],
    "3811675": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811675/",
            "reporter": "botnetkiller"
        }
    ],
    "3811676": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mclibs2arm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:05:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811676/",
            "reporter": "botnetkiller"
        }
    ],
    "3811677": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811677/",
            "reporter": "botnetkiller"
        }
    ],
    "3811678": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811678/",
            "reporter": "botnetkiller"
        }
    ],
    "3811679": [
        {
            "dateadded": "2026-04-05 01:53:29 UTC",
            "url": "http://103.130.214.71:4949/bins/ovhaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:59:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811679/",
            "reporter": "botnetkiller"
        }
    ],
    "3811656": [
        {
            "dateadded": "2026-04-05 01:53:28 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811656/",
            "reporter": "botnetkiller"
        }
    ],
    "3811657": [
        {
            "dateadded": "2026-04-05 01:53:28 UTC",
            "url": "http://103.130.214.71:4949/bins/ssynarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 03:53:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811657/",
            "reporter": "botnetkiller"
        }
    ],
    "3811658": [
        {
            "dateadded": "2026-04-05 01:53:28 UTC",
            "url": "http://103.130.214.71:4949/bins/sockamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811658/",
            "reporter": "botnetkiller"
        }
    ],
    "3811659": [
        {
            "dateadded": "2026-04-05 01:53:28 UTC",
            "url": "http://103.130.214.71:4949/bins/shandriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811659/",
            "reporter": "botnetkiller"
        }
    ],
    "3811648": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:16:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811648/",
            "reporter": "botnetkiller"
        }
    ],
    "3811649": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/tci",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811649/",
            "reporter": "botnetkiller"
        }
    ],
    "3811650": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:40:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811650/",
            "reporter": "botnetkiller"
        }
    ],
    "3811651": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/mtdi686",
            "url_status": "offline",
            "last_online": "2026-04-07 03:55:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811651/",
            "reporter": "botnetkiller"
        }
    ],
    "3811652": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/shand32",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811652/",
            "reporter": "botnetkiller"
        }
    ],
    "3811653": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/six86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811653/",
            "reporter": "botnetkiller"
        }
    ],
    "3811654": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811654/",
            "reporter": "botnetkiller"
        }
    ],
    "3811655": [
        {
            "dateadded": "2026-04-05 01:53:27 UTC",
            "url": "http://103.130.214.71:4949/bins/rstaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811655/",
            "reporter": "botnetkiller"
        }
    ],
    "3811644": [
        {
            "dateadded": "2026-04-05 01:53:26 UTC",
            "url": "http://103.130.214.71:4949/bins/sockarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811644/",
            "reporter": "botnetkiller"
        }
    ],
    "3811645": [
        {
            "dateadded": "2026-04-05 01:53:26 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 03:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811645/",
            "reporter": "botnetkiller"
        }
    ],
    "3811646": [
        {
            "dateadded": "2026-04-05 01:53:26 UTC",
            "url": "http://103.130.214.71:4949/bins/siarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 03:47:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811646/",
            "reporter": "botnetkiller"
        }
    ],
    "3811647": [
        {
            "dateadded": "2026-04-05 01:53:26 UTC",
            "url": "http://103.130.214.71:4949/bins/shandarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811647/",
            "reporter": "botnetkiller"
        }
    ],
    "3811643": [
        {
            "dateadded": "2026-04-05 01:53:25 UTC",
            "url": "http://103.130.214.71:4949/bins/shandx86",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811643/",
            "reporter": "botnetkiller"
        }
    ],
    "3811642": [
        {
            "dateadded": "2026-04-05 01:53:19 UTC",
            "url": "http://103.130.214.71:4949/mirai.i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811642/",
            "reporter": "botnetkiller"
        }
    ],
    "3811641": [
        {
            "dateadded": "2026-04-05 01:53:16 UTC",
            "url": "http://103.130.214.71:4949/bins/rstarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811641/",
            "reporter": "botnetkiller"
        }
    ],
    "3811635": [
        {
            "dateadded": "2026-04-05 01:52:39 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811635/",
            "reporter": "botnetkiller"
        }
    ],
    "3811636": [
        {
            "dateadded": "2026-04-05 01:52:39 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i486n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811636/",
            "reporter": "botnetkiller"
        }
    ],
    "3811637": [
        {
            "dateadded": "2026-04-05 01:52:39 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:48:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811637/",
            "reporter": "botnetkiller"
        }
    ],
    "3811638": [
        {
            "dateadded": "2026-04-05 01:52:39 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811638/",
            "reporter": "botnetkiller"
        }
    ],
    "3811639": [
        {
            "dateadded": "2026-04-05 01:52:39 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2mipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811639/",
            "reporter": "botnetkiller"
        }
    ],
    "3811640": [
        {
            "dateadded": "2026-04-05 01:52:39 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811640/",
            "reporter": "botnetkiller"
        }
    ],
    "3811631": [
        {
            "dateadded": "2026-04-05 01:52:37 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:08:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811631/",
            "reporter": "botnetkiller"
        }
    ],
    "3811632": [
        {
            "dateadded": "2026-04-05 01:52:37 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2aarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:17:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811632/",
            "reporter": "botnetkiller"
        }
    ],
    "3811633": [
        {
            "dateadded": "2026-04-05 01:52:37 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811633/",
            "reporter": "botnetkiller"
        }
    ],
    "3811634": [
        {
            "dateadded": "2026-04-05 01:52:37 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811634/",
            "reporter": "botnetkiller"
        }
    ],
    "3811627": [
        {
            "dateadded": "2026-04-05 01:52:36 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811627/",
            "reporter": "botnetkiller"
        }
    ],
    "3811628": [
        {
            "dateadded": "2026-04-05 01:52:36 UTC",
            "url": "http://103.130.214.71:4949/bins/acki686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811628/",
            "reporter": "botnetkiller"
        }
    ],
    "3811629": [
        {
            "dateadded": "2026-04-05 01:52:36 UTC",
            "url": "http://103.130.214.71:4949/bins/li7riscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:00:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811629/",
            "reporter": "botnetkiller"
        }
    ],
    "3811630": [
        {
            "dateadded": "2026-04-05 01:52:36 UTC",
            "url": "http://103.130.214.71:4949/bins/clientppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811630/",
            "reporter": "botnetkiller"
        }
    ],
    "3811626": [
        {
            "dateadded": "2026-04-05 01:52:35 UTC",
            "url": "http://103.130.214.71:4949/bins/library2x64",
            "url_status": "offline",
            "last_online": "2026-04-07 05:25:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811626/",
            "reporter": "botnetkiller"
        }
    ],
    "3811620": [
        {
            "dateadded": "2026-04-05 01:52:34 UTC",
            "url": "http://103.130.214.71:4949/bins/client32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811620/",
            "reporter": "botnetkiller"
        }
    ],
    "3811621": [
        {
            "dateadded": "2026-04-05 01:52:34 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811621/",
            "reporter": "botnetkiller"
        }
    ],
    "3811622": [
        {
            "dateadded": "2026-04-05 01:52:34 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i486",
            "url_status": "offline",
            "last_online": "2026-04-07 04:09:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811622/",
            "reporter": "botnetkiller"
        }
    ],
    "3811623": [
        {
            "dateadded": "2026-04-05 01:52:34 UTC",
            "url": "http://103.130.214.71:4949/bins/li7amd64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:59:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811623/",
            "reporter": "botnetkiller"
        }
    ],
    "3811624": [
        {
            "dateadded": "2026-04-05 01:52:34 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811624/",
            "reporter": "botnetkiller"
        }
    ],
    "3811625": [
        {
            "dateadded": "2026-04-05 01:52:34 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811625/",
            "reporter": "botnetkiller"
        }
    ],
    "3811619": [
        {
            "dateadded": "2026-04-05 01:52:32 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811619/",
            "reporter": "botnetkiller"
        }
    ],
    "3811616": [
        {
            "dateadded": "2026-04-05 01:52:30 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:35:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811616/",
            "reporter": "botnetkiller"
        }
    ],
    "3811617": [
        {
            "dateadded": "2026-04-05 01:52:30 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811617/",
            "reporter": "botnetkiller"
        }
    ],
    "3811618": [
        {
            "dateadded": "2026-04-05 01:52:30 UTC",
            "url": "http://103.130.214.71:4949/bins/acki586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811618/",
            "reporter": "botnetkiller"
        }
    ],
    "3811608": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811608/",
            "reporter": "botnetkiller"
        }
    ],
    "3811609": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/library2mips",
            "url_status": "offline",
            "last_online": "2026-04-07 11:37:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811609/",
            "reporter": "botnetkiller"
        }
    ],
    "3811610": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811610/",
            "reporter": "botnetkiller"
        }
    ],
    "3811611": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811611/",
            "reporter": "botnetkiller"
        }
    ],
    "3811612": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperx64",
            "url_status": "offline",
            "last_online": "2026-04-07 05:01:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811612/",
            "reporter": "botnetkiller"
        }
    ],
    "3811613": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi486",
            "url_status": "offline",
            "last_online": "2026-04-07 11:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811613/",
            "reporter": "botnetkiller"
        }
    ],
    "3811614": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811614/",
            "reporter": "botnetkiller"
        }
    ],
    "3811615": [
        {
            "dateadded": "2026-04-05 01:52:29 UTC",
            "url": "http://103.130.214.71:4949/bins/acki386",
            "url_status": "offline",
            "last_online": "2026-04-07 04:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811615/",
            "reporter": "botnetkiller"
        }
    ],
    "3811607": [
        {
            "dateadded": "2026-04-05 01:52:28 UTC",
            "url": "http://103.130.214.71:4949/bins/dropper",
            "url_status": "offline",
            "last_online": "2026-04-07 10:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811607/",
            "reporter": "botnetkiller"
        }
    ],
    "3811604": [
        {
            "dateadded": "2026-04-05 01:52:26 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 11:19:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811604/",
            "reporter": "botnetkiller"
        }
    ],
    "3811605": [
        {
            "dateadded": "2026-04-05 01:52:26 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811605/",
            "reporter": "botnetkiller"
        }
    ],
    "3811606": [
        {
            "dateadded": "2026-04-05 01:52:26 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:14:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811606/",
            "reporter": "botnetkiller"
        }
    ],
    "3811602": [
        {
            "dateadded": "2026-04-05 01:52:23 UTC",
            "url": "http://103.130.214.71:4949/bins/clientaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811602/",
            "reporter": "botnetkiller"
        }
    ],
    "3811603": [
        {
            "dateadded": "2026-04-05 01:52:23 UTC",
            "url": "http://103.130.214.71:4949/bins/li7mips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811603/",
            "reporter": "botnetkiller"
        }
    ],
    "3811597": [
        {
            "dateadded": "2026-04-05 01:52:21 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 04:22:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811597/",
            "reporter": "botnetkiller"
        }
    ],
    "3811598": [
        {
            "dateadded": "2026-04-05 01:52:21 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 11:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811598/",
            "reporter": "botnetkiller"
        }
    ],
    "3811599": [
        {
            "dateadded": "2026-04-05 01:52:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811599/",
            "reporter": "botnetkiller"
        }
    ],
    "3811600": [
        {
            "dateadded": "2026-04-05 01:52:21 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811600/",
            "reporter": "botnetkiller"
        }
    ],
    "3811601": [
        {
            "dateadded": "2026-04-05 01:52:21 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811601/",
            "reporter": "botnetkiller"
        }
    ],
    "3811596": [
        {
            "dateadded": "2026-04-05 01:52:17 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811596/",
            "reporter": "botnetkiller"
        }
    ],
    "3811591": [
        {
            "dateadded": "2026-04-05 01:52:16 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811591/",
            "reporter": "botnetkiller"
        }
    ],
    "3811592": [
        {
            "dateadded": "2026-04-05 01:52:16 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811592/",
            "reporter": "botnetkiller"
        }
    ],
    "3811593": [
        {
            "dateadded": "2026-04-05 01:52:16 UTC",
            "url": "http://103.130.214.71:4949/bins/library2x86",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811593/",
            "reporter": "botnetkiller"
        }
    ],
    "3811594": [
        {
            "dateadded": "2026-04-05 01:52:16 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i486n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811594/",
            "reporter": "botnetkiller"
        }
    ],
    "3811595": [
        {
            "dateadded": "2026-04-05 01:52:16 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811595/",
            "reporter": "botnetkiller"
        }
    ],
    "3811587": [
        {
            "dateadded": "2026-04-05 01:52:15 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811587/",
            "reporter": "botnetkiller"
        }
    ],
    "3811588": [
        {
            "dateadded": "2026-04-05 01:52:15 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811588/",
            "reporter": "botnetkiller"
        }
    ],
    "3811589": [
        {
            "dateadded": "2026-04-05 01:52:15 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811589/",
            "reporter": "botnetkiller"
        }
    ],
    "3811590": [
        {
            "dateadded": "2026-04-05 01:52:15 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811590/",
            "reporter": "botnetkiller"
        }
    ],
    "3811585": [
        {
            "dateadded": "2026-04-05 01:52:14 UTC",
            "url": "http://103.130.214.71:4949/bins/ackmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811585/",
            "reporter": "botnetkiller"
        }
    ],
    "3811586": [
        {
            "dateadded": "2026-04-05 01:52:14 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811586/",
            "reporter": "botnetkiller"
        }
    ],
    "3811583": [
        {
            "dateadded": "2026-04-05 01:52:13 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811583/",
            "reporter": "botnetkiller"
        }
    ],
    "3811584": [
        {
            "dateadded": "2026-04-05 01:52:13 UTC",
            "url": "http://103.130.214.71:4949/bins/clientx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811584/",
            "reporter": "botnetkiller"
        }
    ],
    "3811580": [
        {
            "dateadded": "2026-04-05 01:52:10 UTC",
            "url": "http://103.130.214.71:4949/bins/li732",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811580/",
            "reporter": "botnetkiller"
        }
    ],
    "3811581": [
        {
            "dateadded": "2026-04-05 01:52:10 UTC",
            "url": "http://103.130.214.71:4949/bins/li7aarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811581/",
            "reporter": "botnetkiller"
        }
    ],
    "3811582": [
        {
            "dateadded": "2026-04-05 01:52:10 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811582/",
            "reporter": "botnetkiller"
        }
    ],
    "3811573": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:23:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811573/",
            "reporter": "botnetkiller"
        }
    ],
    "3811574": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 04:21:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811574/",
            "reporter": "botnetkiller"
        }
    ],
    "3811575": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811575/",
            "reporter": "botnetkiller"
        }
    ],
    "3811576": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:30:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811576/",
            "reporter": "botnetkiller"
        }
    ],
    "3811577": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811577/",
            "reporter": "botnetkiller"
        }
    ],
    "3811578": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811578/",
            "reporter": "botnetkiller"
        }
    ],
    "3811579": [
        {
            "dateadded": "2026-04-05 01:52:09 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811579/",
            "reporter": "botnetkiller"
        }
    ],
    "3811565": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811565/",
            "reporter": "botnetkiller"
        }
    ],
    "3811566": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/clientx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811566/",
            "reporter": "botnetkiller"
        }
    ],
    "3811567": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm",
            "url_status": "offline",
            "last_online": "2026-04-07 11:28:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811567/",
            "reporter": "botnetkiller"
        }
    ],
    "3811568": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/clientx64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811568/",
            "reporter": "botnetkiller"
        }
    ],
    "3811569": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811569/",
            "reporter": "botnetkiller"
        }
    ],
    "3811570": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811570/",
            "reporter": "botnetkiller"
        }
    ],
    "3811571": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811571/",
            "reporter": "botnetkiller"
        }
    ],
    "3811572": [
        {
            "dateadded": "2026-04-05 01:52:08 UTC",
            "url": "http://103.130.214.71:4949/bins/ackx86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:35 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811572/",
            "reporter": "botnetkiller"
        }
    ],
    "3811564": [
        {
            "dateadded": "2026-04-05 01:52:04 UTC",
            "url": "http://103.130.214.71:4949/bins/droppermpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811564/",
            "reporter": "botnetkiller"
        }
    ],
    "3811561": [
        {
            "dateadded": "2026-04-05 01:52:03 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811561/",
            "reporter": "botnetkiller"
        }
    ],
    "3811562": [
        {
            "dateadded": "2026-04-05 01:52:03 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811562/",
            "reporter": "botnetkiller"
        }
    ],
    "3811563": [
        {
            "dateadded": "2026-04-05 01:52:03 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811563/",
            "reporter": "botnetkiller"
        }
    ],
    "3811560": [
        {
            "dateadded": "2026-04-05 01:51:59 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 04:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811560/",
            "reporter": "botnetkiller"
        }
    ],
    "3811557": [
        {
            "dateadded": "2026-04-05 01:51:58 UTC",
            "url": "http://103.130.214.71:4949/bins/li7ppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811557/",
            "reporter": "botnetkiller"
        }
    ],
    "3811558": [
        {
            "dateadded": "2026-04-05 01:51:58 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811558/",
            "reporter": "botnetkiller"
        }
    ],
    "3811559": [
        {
            "dateadded": "2026-04-05 01:51:58 UTC",
            "url": "http://103.130.214.71:4949/bins/clientmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 10:21:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811559/",
            "reporter": "botnetkiller"
        }
    ],
    "3811553": [
        {
            "dateadded": "2026-04-05 01:51:57 UTC",
            "url": "http://103.130.214.71:4949/bins/acki586n",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811553/",
            "reporter": "botnetkiller"
        }
    ],
    "3811554": [
        {
            "dateadded": "2026-04-05 01:51:57 UTC",
            "url": "http://103.130.214.71:4949/bins/clientmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811554/",
            "reporter": "botnetkiller"
        }
    ],
    "3811555": [
        {
            "dateadded": "2026-04-05 01:51:57 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i386",
            "url_status": "offline",
            "last_online": "2026-04-07 05:18:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811555/",
            "reporter": "botnetkiller"
        }
    ],
    "3811556": [
        {
            "dateadded": "2026-04-05 01:51:57 UTC",
            "url": "http://103.130.214.71:4949/bins/li7mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 08:45:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811556/",
            "reporter": "botnetkiller"
        }
    ],
    "3811547": [
        {
            "dateadded": "2026-04-05 01:51:56 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811547/",
            "reporter": "botnetkiller"
        }
    ],
    "3811548": [
        {
            "dateadded": "2026-04-05 01:51:56 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811548/",
            "reporter": "botnetkiller"
        }
    ],
    "3811549": [
        {
            "dateadded": "2026-04-05 01:51:56 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:15:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811549/",
            "reporter": "botnetkiller"
        }
    ],
    "3811550": [
        {
            "dateadded": "2026-04-05 01:51:56 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i686",
            "url_status": "offline",
            "last_online": "2026-04-07 04:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811550/",
            "reporter": "botnetkiller"
        }
    ],
    "3811551": [
        {
            "dateadded": "2026-04-05 01:51:56 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811551/",
            "reporter": "botnetkiller"
        }
    ],
    "3811552": [
        {
            "dateadded": "2026-04-05 01:51:56 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811552/",
            "reporter": "botnetkiller"
        }
    ],
    "3811540": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/library2",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811540/",
            "reporter": "botnetkiller"
        }
    ],
    "3811541": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811541/",
            "reporter": "botnetkiller"
        }
    ],
    "3811542": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811542/",
            "reporter": "botnetkiller"
        }
    ],
    "3811543": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811543/",
            "reporter": "botnetkiller"
        }
    ],
    "3811544": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/ack",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811544/",
            "reporter": "botnetkiller"
        }
    ],
    "3811545": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811545/",
            "reporter": "botnetkiller"
        }
    ],
    "3811546": [
        {
            "dateadded": "2026-04-05 01:51:55 UTC",
            "url": "http://103.130.214.71:4949/bins/ackppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811546/",
            "reporter": "botnetkiller"
        }
    ],
    "3811539": [
        {
            "dateadded": "2026-04-05 01:51:54 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811539/",
            "reporter": "botnetkiller"
        }
    ],
    "3811536": [
        {
            "dateadded": "2026-04-05 01:51:53 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811536/",
            "reporter": "botnetkiller"
        }
    ],
    "3811537": [
        {
            "dateadded": "2026-04-05 01:51:53 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811537/",
            "reporter": "botnetkiller"
        }
    ],
    "3811538": [
        {
            "dateadded": "2026-04-05 01:51:53 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811538/",
            "reporter": "botnetkiller"
        }
    ],
    "3811535": [
        {
            "dateadded": "2026-04-05 01:51:48 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811535/",
            "reporter": "botnetkiller"
        }
    ],
    "3811526": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811526/",
            "reporter": "botnetkiller"
        }
    ],
    "3811527": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:47:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811527/",
            "reporter": "botnetkiller"
        }
    ],
    "3811528": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811528/",
            "reporter": "botnetkiller"
        }
    ],
    "3811529": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv6",
            "url_status": "offline",
            "last_online": "2026-04-07 04:30:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811529/",
            "reporter": "botnetkiller"
        }
    ],
    "3811530": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811530/",
            "reporter": "botnetkiller"
        }
    ],
    "3811531": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 04:25:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811531/",
            "reporter": "botnetkiller"
        }
    ],
    "3811532": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811532/",
            "reporter": "botnetkiller"
        }
    ],
    "3811533": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811533/",
            "reporter": "botnetkiller"
        }
    ],
    "3811534": [
        {
            "dateadded": "2026-04-05 01:51:45 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811534/",
            "reporter": "botnetkiller"
        }
    ],
    "3811525": [
        {
            "dateadded": "2026-04-05 01:51:42 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxmpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 11:05:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811525/",
            "reporter": "botnetkiller"
        }
    ],
    "3811519": [
        {
            "dateadded": "2026-04-05 01:51:41 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i586",
            "url_status": "offline",
            "last_online": "2026-04-07 11:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811519/",
            "reporter": "botnetkiller"
        }
    ],
    "3811520": [
        {
            "dateadded": "2026-04-05 01:51:41 UTC",
            "url": "http://103.130.214.71:4949/bins/library2x86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811520/",
            "reporter": "botnetkiller"
        }
    ],
    "3811521": [
        {
            "dateadded": "2026-04-05 01:51:41 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:49:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811521/",
            "reporter": "botnetkiller"
        }
    ],
    "3811522": [
        {
            "dateadded": "2026-04-05 01:51:41 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811522/",
            "reporter": "botnetkiller"
        }
    ],
    "3811523": [
        {
            "dateadded": "2026-04-05 01:51:41 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2x86",
            "url_status": "offline",
            "last_online": "2026-04-07 04:05:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811523/",
            "reporter": "botnetkiller"
        }
    ],
    "3811524": [
        {
            "dateadded": "2026-04-05 01:51:41 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i686",
            "url_status": "offline",
            "last_online": "2026-04-07 03:57:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811524/",
            "reporter": "botnetkiller"
        }
    ],
    "3811517": [
        {
            "dateadded": "2026-04-05 01:51:40 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:00:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811517/",
            "reporter": "botnetkiller"
        }
    ],
    "3811518": [
        {
            "dateadded": "2026-04-05 01:51:40 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi586",
            "url_status": "offline",
            "last_online": "2026-04-07 04:19:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811518/",
            "reporter": "botnetkiller"
        }
    ],
    "3811515": [
        {
            "dateadded": "2026-04-05 01:51:36 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2x86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:04:52 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811515/",
            "reporter": "botnetkiller"
        }
    ],
    "3811516": [
        {
            "dateadded": "2026-04-05 01:51:36 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:31:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811516/",
            "reporter": "botnetkiller"
        }
    ],
    "3811514": [
        {
            "dateadded": "2026-04-05 01:51:35 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:06:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811514/",
            "reporter": "botnetkiller"
        }
    ],
    "3811504": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 03:51:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811504/",
            "reporter": "botnetkiller"
        }
    ],
    "3811505": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i486",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811505/",
            "reporter": "botnetkiller"
        }
    ],
    "3811506": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:58:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811506/",
            "reporter": "botnetkiller"
        }
    ],
    "3811507": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811507/",
            "reporter": "botnetkiller"
        }
    ],
    "3811508": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811508/",
            "reporter": "botnetkiller"
        }
    ],
    "3811509": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811509/",
            "reporter": "botnetkiller"
        }
    ],
    "3811510": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811510/",
            "reporter": "botnetkiller"
        }
    ],
    "3811511": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti486",
            "url_status": "offline",
            "last_online": "2026-04-07 03:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811511/",
            "reporter": "botnetkiller"
        }
    ],
    "3811512": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:49:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811512/",
            "reporter": "botnetkiller"
        }
    ],
    "3811513": [
        {
            "dateadded": "2026-04-05 01:51:34 UTC",
            "url": "http://103.130.214.71:4949/bins/library32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811513/",
            "reporter": "botnetkiller"
        }
    ],
    "3811499": [
        {
            "dateadded": "2026-04-05 01:51:33 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811499/",
            "reporter": "botnetkiller"
        }
    ],
    "3811500": [
        {
            "dateadded": "2026-04-05 01:51:33 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 03:54:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811500/",
            "reporter": "botnetkiller"
        }
    ],
    "3811501": [
        {
            "dateadded": "2026-04-05 01:51:33 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:15:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811501/",
            "reporter": "botnetkiller"
        }
    ],
    "3811502": [
        {
            "dateadded": "2026-04-05 01:51:33 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811502/",
            "reporter": "botnetkiller"
        }
    ],
    "3811503": [
        {
            "dateadded": "2026-04-05 01:51:33 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811503/",
            "reporter": "botnetkiller"
        }
    ],
    "3811498": [
        {
            "dateadded": "2026-04-05 01:51:32 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:42:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811498/",
            "reporter": "botnetkiller"
        }
    ],
    "3811495": [
        {
            "dateadded": "2026-04-05 01:51:30 UTC",
            "url": "http://103.130.214.71:4949/bins/library2aarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811495/",
            "reporter": "botnetkiller"
        }
    ],
    "3811496": [
        {
            "dateadded": "2026-04-05 01:51:30 UTC",
            "url": "http://103.130.214.71:4949/bins/li7prox32",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811496/",
            "reporter": "botnetkiller"
        }
    ],
    "3811497": [
        {
            "dateadded": "2026-04-05 01:51:30 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:18:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811497/",
            "reporter": "botnetkiller"
        }
    ],
    "3811494": [
        {
            "dateadded": "2026-04-05 01:51:26 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811494/",
            "reporter": "botnetkiller"
        }
    ],
    "3811489": [
        {
            "dateadded": "2026-04-05 01:51:23 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti586n",
            "url_status": "offline",
            "last_online": "2026-04-07 09:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811489/",
            "reporter": "botnetkiller"
        }
    ],
    "3811490": [
        {
            "dateadded": "2026-04-05 01:51:23 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:15:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811490/",
            "reporter": "botnetkiller"
        }
    ],
    "3811491": [
        {
            "dateadded": "2026-04-05 01:51:23 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811491/",
            "reporter": "botnetkiller"
        }
    ],
    "3811492": [
        {
            "dateadded": "2026-04-05 01:51:23 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811492/",
            "reporter": "botnetkiller"
        }
    ],
    "3811493": [
        {
            "dateadded": "2026-04-05 01:51:23 UTC",
            "url": "http://103.130.214.71:4949/bins/droppermips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811493/",
            "reporter": "botnetkiller"
        }
    ],
    "3811485": [
        {
            "dateadded": "2026-04-05 01:51:22 UTC",
            "url": "http://103.130.214.71:4949/bins/acki686",
            "url_status": "offline",
            "last_online": "2026-04-07 11:57:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811485/",
            "reporter": "botnetkiller"
        }
    ],
    "3811486": [
        {
            "dateadded": "2026-04-05 01:51:22 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 05:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811486/",
            "reporter": "botnetkiller"
        }
    ],
    "3811487": [
        {
            "dateadded": "2026-04-05 01:51:22 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxppc",
            "url_status": "offline",
            "last_online": "2026-04-07 04:41:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811487/",
            "reporter": "botnetkiller"
        }
    ],
    "3811488": [
        {
            "dateadded": "2026-04-05 01:51:22 UTC",
            "url": "http://103.130.214.71:4949/bins/clientriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811488/",
            "reporter": "botnetkiller"
        }
    ],
    "3811478": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811478/",
            "reporter": "botnetkiller"
        }
    ],
    "3811479": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811479/",
            "reporter": "botnetkiller"
        }
    ],
    "3811480": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811480/",
            "reporter": "botnetkiller"
        }
    ],
    "3811481": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/li7x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811481/",
            "reporter": "botnetkiller"
        }
    ],
    "3811482": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2amd64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811482/",
            "reporter": "botnetkiller"
        }
    ],
    "3811483": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811483/",
            "reporter": "botnetkiller"
        }
    ],
    "3811484": [
        {
            "dateadded": "2026-04-05 01:51:21 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811484/",
            "reporter": "botnetkiller"
        }
    ],
    "3811475": [
        {
            "dateadded": "2026-04-05 01:51:20 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 03:54:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811475/",
            "reporter": "botnetkiller"
        }
    ],
    "3811476": [
        {
            "dateadded": "2026-04-05 01:51:20 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i586",
            "url_status": "offline",
            "last_online": "2026-04-07 10:34:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811476/",
            "reporter": "botnetkiller"
        }
    ],
    "3811477": [
        {
            "dateadded": "2026-04-05 01:51:20 UTC",
            "url": "http://103.130.214.71:4949/bins/ack32",
            "url_status": "offline",
            "last_online": "2026-04-07 05:18:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811477/",
            "reporter": "botnetkiller"
        }
    ],
    "3811473": [
        {
            "dateadded": "2026-04-05 01:51:19 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811473/",
            "reporter": "botnetkiller"
        }
    ],
    "3811474": [
        {
            "dateadded": "2026-04-05 01:51:19 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv4",
            "url_status": "offline",
            "last_online": "2026-04-07 03:49:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811474/",
            "reporter": "botnetkiller"
        }
    ],
    "3811471": [
        {
            "dateadded": "2026-04-05 01:51:18 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2ppc",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811471/",
            "reporter": "botnetkiller"
        }
    ],
    "3811472": [
        {
            "dateadded": "2026-04-05 01:51:18 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:50:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811472/",
            "reporter": "botnetkiller"
        }
    ],
    "3811470": [
        {
            "dateadded": "2026-04-05 01:51:17 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:08:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811470/",
            "reporter": "botnetkiller"
        }
    ],
    "3811468": [
        {
            "dateadded": "2026-04-05 01:51:16 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i686n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811468/",
            "reporter": "botnetkiller"
        }
    ],
    "3811469": [
        {
            "dateadded": "2026-04-05 01:51:16 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 05:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811469/",
            "reporter": "botnetkiller"
        }
    ],
    "3811465": [
        {
            "dateadded": "2026-04-05 01:51:15 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:01:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811465/",
            "reporter": "botnetkiller"
        }
    ],
    "3811466": [
        {
            "dateadded": "2026-04-05 01:51:15 UTC",
            "url": "http://103.130.214.71:4949/bins/ackriscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811466/",
            "reporter": "botnetkiller"
        }
    ],
    "3811467": [
        {
            "dateadded": "2026-04-05 01:51:15 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv232",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811467/",
            "reporter": "botnetkiller"
        }
    ],
    "3811458": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm",
            "url_status": "offline",
            "last_online": "2026-04-07 03:59:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811458/",
            "reporter": "botnetkiller"
        }
    ],
    "3811459": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm",
            "url_status": "offline",
            "last_online": "2026-04-07 04:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811459/",
            "reporter": "botnetkiller"
        }
    ],
    "3811460": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811460/",
            "reporter": "botnetkiller"
        }
    ],
    "3811461": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/dropper32",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811461/",
            "reporter": "botnetkiller"
        }
    ],
    "3811462": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811462/",
            "reporter": "botnetkiller"
        }
    ],
    "3811463": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:13:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811463/",
            "reporter": "botnetkiller"
        }
    ],
    "3811464": [
        {
            "dateadded": "2026-04-05 01:51:12 UTC",
            "url": "http://103.130.214.71:4949/bins/library2mipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 04:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811464/",
            "reporter": "botnetkiller"
        }
    ],
    "3811455": [
        {
            "dateadded": "2026-04-05 01:51:11 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811455/",
            "reporter": "botnetkiller"
        }
    ],
    "3811456": [
        {
            "dateadded": "2026-04-05 01:51:11 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:44:02 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811456/",
            "reporter": "botnetkiller"
        }
    ],
    "3811457": [
        {
            "dateadded": "2026-04-05 01:51:11 UTC",
            "url": "http://103.130.214.71:4949/bins/li7x86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811457/",
            "reporter": "botnetkiller"
        }
    ],
    "3811454": [
        {
            "dateadded": "2026-04-05 01:51:10 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:03 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811454/",
            "reporter": "botnetkiller"
        }
    ],
    "3811453": [
        {
            "dateadded": "2026-04-05 01:51:09 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811453/",
            "reporter": "botnetkiller"
        }
    ],
    "3811452": [
        {
            "dateadded": "2026-04-05 01:51:08 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti586",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811452/",
            "reporter": "botnetkiller"
        }
    ],
    "3811449": [
        {
            "dateadded": "2026-04-05 01:51:05 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811449/",
            "reporter": "botnetkiller"
        }
    ],
    "3811450": [
        {
            "dateadded": "2026-04-05 01:51:05 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:42:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811450/",
            "reporter": "botnetkiller"
        }
    ],
    "3811451": [
        {
            "dateadded": "2026-04-05 01:51:05 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811451/",
            "reporter": "botnetkiller"
        }
    ],
    "3811445": [
        {
            "dateadded": "2026-04-05 01:51:03 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:42 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811445/",
            "reporter": "botnetkiller"
        }
    ],
    "3811446": [
        {
            "dateadded": "2026-04-05 01:51:03 UTC",
            "url": "http://103.130.214.71:4949/bins/library232",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811446/",
            "reporter": "botnetkiller"
        }
    ],
    "3811447": [
        {
            "dateadded": "2026-04-05 01:51:03 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811447/",
            "reporter": "botnetkiller"
        }
    ],
    "3811448": [
        {
            "dateadded": "2026-04-05 01:51:03 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811448/",
            "reporter": "botnetkiller"
        }
    ],
    "3811443": [
        {
            "dateadded": "2026-04-05 01:51:00 UTC",
            "url": "http://103.130.214.71:4949/bins/li7i686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811443/",
            "reporter": "botnetkiller"
        }
    ],
    "3811444": [
        {
            "dateadded": "2026-04-05 01:51:00 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxmips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811444/",
            "reporter": "botnetkiller"
        }
    ],
    "3811439": [
        {
            "dateadded": "2026-04-05 01:50:59 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxx86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:55:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811439/",
            "reporter": "botnetkiller"
        }
    ],
    "3811440": [
        {
            "dateadded": "2026-04-05 01:50:59 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2riscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811440/",
            "reporter": "botnetkiller"
        }
    ],
    "3811441": [
        {
            "dateadded": "2026-04-05 01:50:59 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811441/",
            "reporter": "botnetkiller"
        }
    ],
    "3811442": [
        {
            "dateadded": "2026-04-05 01:50:59 UTC",
            "url": "http://103.130.214.71:4949/bins/li7mipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 08:40:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811442/",
            "reporter": "botnetkiller"
        }
    ],
    "3811435": [
        {
            "dateadded": "2026-04-05 01:50:58 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi686n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811435/",
            "reporter": "botnetkiller"
        }
    ],
    "3811436": [
        {
            "dateadded": "2026-04-05 01:50:58 UTC",
            "url": "http://103.130.214.71:4949/bins/li7x86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:52:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811436/",
            "reporter": "botnetkiller"
        }
    ],
    "3811437": [
        {
            "dateadded": "2026-04-05 01:50:58 UTC",
            "url": "http://103.130.214.71:4949/bins/client",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811437/",
            "reporter": "botnetkiller"
        }
    ],
    "3811438": [
        {
            "dateadded": "2026-04-05 01:50:58 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811438/",
            "reporter": "botnetkiller"
        }
    ],
    "3811432": [
        {
            "dateadded": "2026-04-05 01:50:57 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi386",
            "url_status": "offline",
            "last_online": "2026-04-07 08:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811432/",
            "reporter": "botnetkiller"
        }
    ],
    "3811433": [
        {
            "dateadded": "2026-04-05 01:50:57 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:58:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811433/",
            "reporter": "botnetkiller"
        }
    ],
    "3811434": [
        {
            "dateadded": "2026-04-05 01:50:57 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 11:03:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811434/",
            "reporter": "botnetkiller"
        }
    ],
    "3811430": [
        {
            "dateadded": "2026-04-05 01:50:54 UTC",
            "url": "http://103.130.214.71:4949/bins/li7prox",
            "url_status": "offline",
            "last_online": "2026-04-07 04:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811430/",
            "reporter": "botnetkiller"
        }
    ],
    "3811431": [
        {
            "dateadded": "2026-04-05 01:50:54 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:26:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811431/",
            "reporter": "botnetkiller"
        }
    ],
    "3811427": [
        {
            "dateadded": "2026-04-05 01:50:53 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:14:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811427/",
            "reporter": "botnetkiller"
        }
    ],
    "3811428": [
        {
            "dateadded": "2026-04-05 01:50:53 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2x64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811428/",
            "reporter": "botnetkiller"
        }
    ],
    "3811429": [
        {
            "dateadded": "2026-04-05 01:50:53 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm4n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811429/",
            "reporter": "botnetkiller"
        }
    ],
    "3811424": [
        {
            "dateadded": "2026-04-05 01:50:52 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 05:09:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811424/",
            "reporter": "botnetkiller"
        }
    ],
    "3811425": [
        {
            "dateadded": "2026-04-05 01:50:52 UTC",
            "url": "http://103.130.214.71:4949/bins/library2mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 11:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811425/",
            "reporter": "botnetkiller"
        }
    ],
    "3811426": [
        {
            "dateadded": "2026-04-05 01:50:52 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv7l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811426/",
            "reporter": "botnetkiller"
        }
    ],
    "3811418": [
        {
            "dateadded": "2026-04-05 01:50:51 UTC",
            "url": "http://103.130.214.71:4949/bins/ackmips",
            "url_status": "offline",
            "last_online": "2026-04-07 04:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811418/",
            "reporter": "botnetkiller"
        }
    ],
    "3811419": [
        {
            "dateadded": "2026-04-05 01:50:51 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811419/",
            "reporter": "botnetkiller"
        }
    ],
    "3811420": [
        {
            "dateadded": "2026-04-05 01:50:51 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarmv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811420/",
            "reporter": "botnetkiller"
        }
    ],
    "3811421": [
        {
            "dateadded": "2026-04-05 01:50:51 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:20:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811421/",
            "reporter": "botnetkiller"
        }
    ],
    "3811422": [
        {
            "dateadded": "2026-04-05 01:50:51 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv7",
            "url_status": "offline",
            "last_online": "2026-04-07 06:47:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811422/",
            "reporter": "botnetkiller"
        }
    ],
    "3811423": [
        {
            "dateadded": "2026-04-05 01:50:51 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811423/",
            "reporter": "botnetkiller"
        }
    ],
    "3811414": [
        {
            "dateadded": "2026-04-05 01:50:49 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv5",
            "url_status": "offline",
            "last_online": "2026-04-07 11:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811414/",
            "reporter": "botnetkiller"
        }
    ],
    "3811415": [
        {
            "dateadded": "2026-04-05 01:50:49 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811415/",
            "reporter": "botnetkiller"
        }
    ],
    "3811416": [
        {
            "dateadded": "2026-04-05 01:50:49 UTC",
            "url": "http://103.130.214.71:4949/bins/library2x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811416/",
            "reporter": "botnetkiller"
        }
    ],
    "3811417": [
        {
            "dateadded": "2026-04-05 01:50:49 UTC",
            "url": "http://103.130.214.71:4949/bins/acki486n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:29:53 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811417/",
            "reporter": "botnetkiller"
        }
    ],
    "3811410": [
        {
            "dateadded": "2026-04-05 01:50:48 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi586n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811410/",
            "reporter": "botnetkiller"
        }
    ],
    "3811411": [
        {
            "dateadded": "2026-04-05 01:50:48 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 03:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811411/",
            "reporter": "botnetkiller"
        }
    ],
    "3811412": [
        {
            "dateadded": "2026-04-05 01:50:48 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811412/",
            "reporter": "botnetkiller"
        }
    ],
    "3811413": [
        {
            "dateadded": "2026-04-05 01:50:48 UTC",
            "url": "http://103.130.214.71:4949/bins/clientx86",
            "url_status": "offline",
            "last_online": "2026-04-07 10:10:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811413/",
            "reporter": "botnetkiller"
        }
    ],
    "3811405": [
        {
            "dateadded": "2026-04-05 01:50:47 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811405/",
            "reporter": "botnetkiller"
        }
    ],
    "3811406": [
        {
            "dateadded": "2026-04-05 01:50:47 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811406/",
            "reporter": "botnetkiller"
        }
    ],
    "3811407": [
        {
            "dateadded": "2026-04-05 01:50:47 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarmv7",
            "url_status": "offline",
            "last_online": "2026-04-07 11:07:50 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811407/",
            "reporter": "botnetkiller"
        }
    ],
    "3811408": [
        {
            "dateadded": "2026-04-05 01:50:47 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm6n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811408/",
            "reporter": "botnetkiller"
        }
    ],
    "3811409": [
        {
            "dateadded": "2026-04-05 01:50:47 UTC",
            "url": "http://103.130.214.71:4949/bins/acki486",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811409/",
            "reporter": "botnetkiller"
        }
    ],
    "3811403": [
        {
            "dateadded": "2026-04-05 01:50:46 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi486n",
            "url_status": "offline",
            "last_online": "2026-04-07 09:43:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811403/",
            "reporter": "botnetkiller"
        }
    ],
    "3811404": [
        {
            "dateadded": "2026-04-05 01:50:46 UTC",
            "url": "http://103.130.214.71:4949/bins/libraryarm6",
            "url_status": "offline",
            "last_online": "2026-04-07 11:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811404/",
            "reporter": "botnetkiller"
        }
    ],
    "3811401": [
        {
            "dateadded": "2026-04-05 01:50:45 UTC",
            "url": "http://103.130.214.71:4949/bins/ackamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:42:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811401/",
            "reporter": "botnetkiller"
        }
    ],
    "3811402": [
        {
            "dateadded": "2026-04-05 01:50:45 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxi386n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811402/",
            "reporter": "botnetkiller"
        }
    ],
    "3811400": [
        {
            "dateadded": "2026-04-05 01:50:44 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811400/",
            "reporter": "botnetkiller"
        }
    ],
    "3811395": [
        {
            "dateadded": "2026-04-05 01:50:31 UTC",
            "url": "http://103.130.214.71:4949/bins/clientmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 07:01:36 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811395/",
            "reporter": "botnetkiller"
        }
    ],
    "3811396": [
        {
            "dateadded": "2026-04-05 01:50:31 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:45:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811396/",
            "reporter": "botnetkiller"
        }
    ],
    "3811397": [
        {
            "dateadded": "2026-04-05 01:50:31 UTC",
            "url": "http://103.130.214.71:4949/bins/li7x64",
            "url_status": "offline",
            "last_online": "2026-04-07 07:40:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811397/",
            "reporter": "botnetkiller"
        }
    ],
    "3811398": [
        {
            "dateadded": "2026-04-05 01:50:31 UTC",
            "url": "http://103.130.214.71:4949/bins/li7arm5n",
            "url_status": "offline",
            "last_online": "2026-04-07 11:12:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811398/",
            "reporter": "botnetkiller"
        }
    ],
    "3811399": [
        {
            "dateadded": "2026-04-05 01:50:31 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811399/",
            "reporter": "botnetkiller"
        }
    ],
    "3811390": [
        {
            "dateadded": "2026-04-05 01:50:30 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm4",
            "url_status": "offline",
            "last_online": "2026-04-07 04:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811390/",
            "reporter": "botnetkiller"
        }
    ],
    "3811391": [
        {
            "dateadded": "2026-04-05 01:50:30 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i586n",
            "url_status": "offline",
            "last_online": "2026-04-07 10:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811391/",
            "reporter": "botnetkiller"
        }
    ],
    "3811392": [
        {
            "dateadded": "2026-04-05 01:50:30 UTC",
            "url": "http://103.130.214.71:4949/bins/clientamd64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811392/",
            "reporter": "botnetkiller"
        }
    ],
    "3811393": [
        {
            "dateadded": "2026-04-05 01:50:30 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i586n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811393/",
            "reporter": "botnetkiller"
        }
    ],
    "3811394": [
        {
            "dateadded": "2026-04-05 01:50:30 UTC",
            "url": "http://103.130.214.71:4949/bins/li7",
            "url_status": "offline",
            "last_online": "2026-04-07 10:46:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811394/",
            "reporter": "botnetkiller"
        }
    ],
    "3811384": [
        {
            "dateadded": "2026-04-05 01:50:29 UTC",
            "url": "http://103.130.214.71:4949/bins/clientarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:03:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811384/",
            "reporter": "botnetkiller"
        }
    ],
    "3811385": [
        {
            "dateadded": "2026-04-05 01:50:29 UTC",
            "url": "http://103.130.214.71:4949/bins/library",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811385/",
            "reporter": "botnetkiller"
        }
    ],
    "3811386": [
        {
            "dateadded": "2026-04-05 01:50:29 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:13:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811386/",
            "reporter": "botnetkiller"
        }
    ],
    "3811387": [
        {
            "dateadded": "2026-04-05 01:50:29 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxx64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811387/",
            "reporter": "botnetkiller"
        }
    ],
    "3811388": [
        {
            "dateadded": "2026-04-05 01:50:29 UTC",
            "url": "http://103.130.214.71:4949/bins/droppermipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 10:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811388/",
            "reporter": "botnetkiller"
        }
    ],
    "3811389": [
        {
            "dateadded": "2026-04-05 01:50:29 UTC",
            "url": "http://103.130.214.71:4949/bins/clienti386n",
            "url_status": "offline",
            "last_online": "2026-04-07 04:03:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811389/",
            "reporter": "botnetkiller"
        }
    ],
    "3811382": [
        {
            "dateadded": "2026-04-05 01:50:28 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv5l",
            "url_status": "offline",
            "last_online": "2026-04-07 04:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811382/",
            "reporter": "botnetkiller"
        }
    ],
    "3811383": [
        {
            "dateadded": "2026-04-05 01:50:28 UTC",
            "url": "http://103.130.214.71:4949/bins/ackx86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811383/",
            "reporter": "botnetkiller"
        }
    ],
    "3811377": [
        {
            "dateadded": "2026-04-05 01:50:27 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv6l",
            "url_status": "offline",
            "last_online": "2026-04-07 05:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811377/",
            "reporter": "botnetkiller"
        }
    ],
    "3811378": [
        {
            "dateadded": "2026-04-05 01:50:27 UTC",
            "url": "http://103.130.214.71:4949/bins/li7armv5",
            "url_status": "offline",
            "last_online": "2026-04-07 04:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811378/",
            "reporter": "botnetkiller"
        }
    ],
    "3811379": [
        {
            "dateadded": "2026-04-05 01:50:27 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperi686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:41:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811379/",
            "reporter": "botnetkiller"
        }
    ],
    "3811380": [
        {
            "dateadded": "2026-04-05 01:50:27 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811380/",
            "reporter": "botnetkiller"
        }
    ],
    "3811381": [
        {
            "dateadded": "2026-04-05 01:50:27 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2amd64",
            "url_status": "offline",
            "last_online": "2026-04-07 04:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811381/",
            "reporter": "botnetkiller"
        }
    ],
    "3811375": [
        {
            "dateadded": "2026-04-05 01:50:26 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2mips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811375/",
            "reporter": "botnetkiller"
        }
    ],
    "3811376": [
        {
            "dateadded": "2026-04-05 01:50:26 UTC",
            "url": "http://103.130.214.71:4949/bins/li7proxarm7n",
            "url_status": "offline",
            "last_online": "2026-04-07 06:13:39 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811376/",
            "reporter": "botnetkiller"
        }
    ],
    "3811374": [
        {
            "dateadded": "2026-04-05 01:50:24 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2armv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811374/",
            "reporter": "botnetkiller"
        }
    ],
    "3811373": [
        {
            "dateadded": "2026-04-05 01:50:22 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 10:51:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811373/",
            "reporter": "botnetkiller"
        }
    ],
    "3811360": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/ackmipsel",
            "url_status": "offline",
            "last_online": "2026-04-07 04:23:01 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811360/",
            "reporter": "botnetkiller"
        }
    ],
    "3811361": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/ackaarch64",
            "url_status": "offline",
            "last_online": "2026-04-07 11:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811361/",
            "reporter": "botnetkiller"
        }
    ],
    "3811362": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2i686",
            "url_status": "offline",
            "last_online": "2026-04-07 10:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811362/",
            "reporter": "botnetkiller"
        }
    ],
    "3811363": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2ppc",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811363/",
            "reporter": "botnetkiller"
        }
    ],
    "3811364": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2arm64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811364/",
            "reporter": "botnetkiller"
        }
    ],
    "3811365": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2riscv64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811365/",
            "reporter": "botnetkiller"
        }
    ],
    "3811366": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/library2armv4l",
            "url_status": "offline",
            "last_online": "2026-04-07 10:23:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811366/",
            "reporter": "botnetkiller"
        }
    ],
    "3811367": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i586",
            "url_status": "offline",
            "last_online": "2026-04-07 04:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811367/",
            "reporter": "botnetkiller"
        }
    ],
    "3811368": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/gofuckerv2i386",
            "url_status": "offline",
            "last_online": "2026-04-07 10:11:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811368/",
            "reporter": "botnetkiller"
        }
    ],
    "3811369": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/ackx64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:54:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811369/",
            "reporter": "botnetkiller"
        }
    ],
    "3811370": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/ackarm64",
            "url_status": "offline",
            "last_online": "2026-04-07 09:41:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811370/",
            "reporter": "botnetkiller"
        }
    ],
    "3811371": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/ackx86-64",
            "url_status": "offline",
            "last_online": "2026-04-07 10:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811371/",
            "reporter": "botnetkiller"
        }
    ],
    "3811372": [
        {
            "dateadded": "2026-04-05 01:50:21 UTC",
            "url": "http://103.130.214.71:4949/bins/dropperx86",
            "url_status": "offline",
            "last_online": "2026-04-07 04:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "ddos",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811372/",
            "reporter": "botnetkiller"
        }
    ],
    "3811359": [
        {
            "dateadded": "2026-04-05 01:49:18 UTC",
            "url": "http://103.130.214.71:4949/binss/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811359/",
            "reporter": "botnetkiller"
        }
    ],
    "3811345": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.arm4",
            "url_status": "offline",
            "last_online": "2026-04-06 11:16:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811345/",
            "reporter": "botnetkiller"
        }
    ],
    "3811346": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.x64",
            "url_status": "offline",
            "last_online": "2026-04-06 11:11:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811346/",
            "reporter": "botnetkiller"
        }
    ],
    "3811347": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 04:18:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811347/",
            "reporter": "botnetkiller"
        }
    ],
    "3811348": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.spc",
            "url_status": "offline",
            "last_online": "2026-04-06 09:47:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811348/",
            "reporter": "botnetkiller"
        }
    ],
    "3811349": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.x64",
            "url_status": "offline",
            "last_online": "2026-04-06 09:49:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811349/",
            "reporter": "botnetkiller"
        }
    ],
    "3811350": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.arm6",
            "url_status": "offline",
            "last_online": "2026-04-06 10:20:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811350/",
            "reporter": "botnetkiller"
        }
    ],
    "3811351": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.x86",
            "url_status": "offline",
            "last_online": "2026-04-06 04:52:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811351/",
            "reporter": "botnetkiller"
        }
    ],
    "3811352": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.apk",
            "url_status": "offline",
            "last_online": "2026-04-06 10:18:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811352/",
            "reporter": "botnetkiller"
        }
    ],
    "3811353": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.i486",
            "url_status": "offline",
            "last_online": "2026-04-06 09:38:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811353/",
            "reporter": "botnetkiller"
        }
    ],
    "3811354": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.mips",
            "url_status": "offline",
            "last_online": "2026-04-06 10:38:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811354/",
            "reporter": "botnetkiller"
        }
    ],
    "3811355": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 09:59:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811355/",
            "reporter": "botnetkiller"
        }
    ],
    "3811356": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.i686",
            "url_status": "offline",
            "last_online": "2026-04-06 09:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811356/",
            "reporter": "botnetkiller"
        }
    ],
    "3811357": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.dbg",
            "url_status": "offline",
            "last_online": "2026-04-06 09:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811357/",
            "reporter": "botnetkiller"
        }
    ],
    "3811358": [
        {
            "dateadded": "2026-04-05 01:47:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.dbg",
            "url_status": "offline",
            "last_online": "2026-04-06 10:25:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811358/",
            "reporter": "botnetkiller"
        }
    ],
    "3811342": [
        {
            "dateadded": "2026-04-05 01:47:21 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.arm7",
            "url_status": "offline",
            "last_online": "2026-04-06 10:24:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811342/",
            "reporter": "botnetkiller"
        }
    ],
    "3811343": [
        {
            "dateadded": "2026-04-05 01:47:21 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.apk",
            "url_status": "offline",
            "last_online": "2026-04-06 10:44:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811343/",
            "reporter": "botnetkiller"
        }
    ],
    "3811344": [
        {
            "dateadded": "2026-04-05 01:47:21 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 10:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811344/",
            "reporter": "botnetkiller"
        }
    ],
    "3811341": [
        {
            "dateadded": "2026-04-05 01:47:20 UTC",
            "url": "http://103.130.214.71:4949/binss/mirai.arm5",
            "url_status": "offline",
            "last_online": "2026-04-06 09:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811341/",
            "reporter": "botnetkiller"
        }
    ],
    "3811340": [
        {
            "dateadded": "2026-04-05 01:47:09 UTC",
            "url": "http://222.140.208.245:53324/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811340/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811329": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.arm5",
            "url_status": "offline",
            "last_online": "2026-04-06 10:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811329/",
            "reporter": "botnetkiller"
        }
    ],
    "3811330": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 10:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811330/",
            "reporter": "botnetkiller"
        }
    ],
    "3811331": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.mips",
            "url_status": "offline",
            "last_online": "2026-04-06 10:07:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811331/",
            "reporter": "botnetkiller"
        }
    ],
    "3811332": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.i486",
            "url_status": "offline",
            "last_online": "2026-04-06 10:10:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811332/",
            "reporter": "botnetkiller"
        }
    ],
    "3811333": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 09:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811333/",
            "reporter": "botnetkiller"
        }
    ],
    "3811334": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.arm4",
            "url_status": "offline",
            "last_online": "2026-04-06 09:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811334/",
            "reporter": "botnetkiller"
        }
    ],
    "3811335": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 11:28:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811335/",
            "reporter": "botnetkiller"
        }
    ],
    "3811336": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.spc",
            "url_status": "offline",
            "last_online": "2026-04-06 10:20:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811336/",
            "reporter": "botnetkiller"
        }
    ],
    "3811337": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.arm6",
            "url_status": "offline",
            "last_online": "2026-04-06 10:29:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811337/",
            "reporter": "botnetkiller"
        }
    ],
    "3811338": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.arm7",
            "url_status": "offline",
            "last_online": "2026-04-06 04:09:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811338/",
            "reporter": "botnetkiller"
        }
    ],
    "3811339": [
        {
            "dateadded": "2026-04-05 01:38:22 UTC",
            "url": "http://103.130.214.71:1212/mirai.i686",
            "url_status": "offline",
            "last_online": "2026-04-06 03:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811339/",
            "reporter": "botnetkiller"
        }
    ],
    "3811328": [
        {
            "dateadded": "2026-04-05 01:27:14 UTC",
            "url": "http://115.48.170.75:49227/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:58:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811328/",
            "reporter": "geenensp"
        }
    ],
    "3811327": [
        {
            "dateadded": "2026-04-05 01:17:21 UTC",
            "url": "http://103.130.214.71:1212/mirai.x86",
            "url_status": "offline",
            "last_online": "2026-04-06 09:54:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811327/",
            "reporter": "botnetkiller"
        }
    ],
    "3811326": [
        {
            "dateadded": "2026-04-05 01:07:06 UTC",
            "url": "http://176.251.64.35:47064/i",
            "url_status": "offline",
            "last_online": "2026-04-16 09:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811326/",
            "reporter": "geenensp"
        }
    ],
    "3811325": [
        {
            "dateadded": "2026-04-05 01:00:09 UTC",
            "url": "http://124.29.225.50:55881/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:00:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811325/",
            "reporter": "geenensp"
        }
    ],
    "3811324": [
        {
            "dateadded": "2026-04-05 00:47:06 UTC",
            "url": "http://125.160.191.203:38004/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:00:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811324/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811323": [
        {
            "dateadded": "2026-04-05 00:45:18 UTC",
            "url": "http://185.9.46.46:43999/i",
            "url_status": "offline",
            "last_online": "2026-04-05 00:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811323/",
            "reporter": "geenensp"
        }
    ],
    "3811322": [
        {
            "dateadded": "2026-04-05 00:39:10 UTC",
            "url": "http://185.9.46.46:43999/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 00:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811322/",
            "reporter": "geenensp"
        }
    ],
    "3811321": [
        {
            "dateadded": "2026-04-05 00:39:09 UTC",
            "url": "http://176.251.64.35:47064/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 05:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811321/",
            "reporter": "geenensp"
        }
    ],
    "3811320": [
        {
            "dateadded": "2026-04-05 00:38:08 UTC",
            "url": "http://182.113.41.216:49027/i",
            "url_status": "offline",
            "last_online": "2026-04-05 05:09:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811320/",
            "reporter": "geenensp"
        }
    ],
    "3811319": [
        {
            "dateadded": "2026-04-05 00:37:08 UTC",
            "url": "http://125.160.191.203:38004/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:52:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811319/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811318": [
        {
            "dateadded": "2026-04-05 00:34:28 UTC",
            "url": "http://27.202.231.238:47812/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:06:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811318/",
            "reporter": "geenensp"
        }
    ],
    "3811317": [
        {
            "dateadded": "2026-04-05 00:33:19 UTC",
            "url": "http://124.29.225.50:55881/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:36:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811317/",
            "reporter": "geenensp"
        }
    ],
    "3811316": [
        {
            "dateadded": "2026-04-05 00:27:15 UTC",
            "url": "http://193.163.187.213:38959/i",
            "url_status": "offline",
            "last_online": "2026-04-13 06:14:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811316/",
            "reporter": "geenensp"
        }
    ],
    "3811315": [
        {
            "dateadded": "2026-04-05 00:22:19 UTC",
            "url": "http://163.142.78.241:53155/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:50:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811315/",
            "reporter": "geenensp"
        }
    ],
    "3811314": [
        {
            "dateadded": "2026-04-05 00:16:11 UTC",
            "url": "http://115.55.48.14:56706/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811314/",
            "reporter": "geenensp"
        }
    ],
    "3811313": [
        {
            "dateadded": "2026-04-04 23:58:20 UTC",
            "url": "http://216.245.140.191/arm6",
            "url_status": "offline",
            "last_online": "2026-04-07 09:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811313/",
            "reporter": "botnetkiller"
        }
    ],
    "3811308": [
        {
            "dateadded": "2026-04-04 23:58:09 UTC",
            "url": "http://216.245.140.191/m68k",
            "url_status": "offline",
            "last_online": "2026-04-07 15:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811308/",
            "reporter": "botnetkiller"
        }
    ],
    "3811309": [
        {
            "dateadded": "2026-04-04 23:58:09 UTC",
            "url": "http://216.245.140.191/arm5",
            "url_status": "offline",
            "last_online": "2026-04-07 10:58:57 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811309/",
            "reporter": "botnetkiller"
        }
    ],
    "3811310": [
        {
            "dateadded": "2026-04-04 23:58:09 UTC",
            "url": "http://216.245.140.191/spc",
            "url_status": "offline",
            "last_online": "2026-04-07 09:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811310/",
            "reporter": "botnetkiller"
        }
    ],
    "3811311": [
        {
            "dateadded": "2026-04-04 23:58:09 UTC",
            "url": "http://216.245.140.191/ppc",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811311/",
            "reporter": "botnetkiller"
        }
    ],
    "3811312": [
        {
            "dateadded": "2026-04-04 23:58:09 UTC",
            "url": "http://216.245.140.191/arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 09:46:04 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811312/",
            "reporter": "botnetkiller"
        }
    ],
    "3811306": [
        {
            "dateadded": "2026-04-04 23:58:08 UTC",
            "url": "http://216.245.140.191/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811306/",
            "reporter": "botnetkiller"
        }
    ],
    "3811307": [
        {
            "dateadded": "2026-04-04 23:58:08 UTC",
            "url": "http://216.245.140.191/arm",
            "url_status": "offline",
            "last_online": "2026-04-07 10:46:36 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811307/",
            "reporter": "botnetkiller"
        }
    ],
    "3811305": [
        {
            "dateadded": "2026-04-04 23:58:06 UTC",
            "url": "http://216.245.140.191/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-07 15:25:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811305/",
            "reporter": "botnetkiller"
        }
    ],
    "3811304": [
        {
            "dateadded": "2026-04-04 23:57:22 UTC",
            "url": "http://216.245.140.191/x86",
            "url_status": "offline",
            "last_online": "2026-04-07 15:49:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811304/",
            "reporter": "botnetkiller"
        }
    ],
    "3811300": [
        {
            "dateadded": "2026-04-04 23:57:10 UTC",
            "url": "http://216.245.140.191/sh4",
            "url_status": "offline",
            "last_online": "2026-04-07 10:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811300/",
            "reporter": "botnetkiller"
        }
    ],
    "3811301": [
        {
            "dateadded": "2026-04-04 23:57:10 UTC",
            "url": "http://216.245.140.191/debug.dbg",
            "url_status": "offline",
            "last_online": "2026-04-07 12:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811301/",
            "reporter": "botnetkiller"
        }
    ],
    "3811302": [
        {
            "dateadded": "2026-04-04 23:57:10 UTC",
            "url": "http://216.245.140.191/mips",
            "url_status": "offline",
            "last_online": "2026-04-07 10:08:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811302/",
            "reporter": "botnetkiller"
        }
    ],
    "3811303": [
        {
            "dateadded": "2026-04-04 23:57:10 UTC",
            "url": "http://216.245.140.191/Ow.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 23:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811303/",
            "reporter": "botnetkiller"
        }
    ],
    "3811298": [
        {
            "dateadded": "2026-04-04 23:48:21 UTC",
            "url": "http://163.142.78.241:53155/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811298/",
            "reporter": "geenensp"
        }
    ],
    "3811299": [
        {
            "dateadded": "2026-04-04 23:48:21 UTC",
            "url": "http://125.44.47.122:58172/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811299/",
            "reporter": "geenensp"
        }
    ],
    "3811297": [
        {
            "dateadded": "2026-04-04 23:42:15 UTC",
            "url": "http://140.237.6.49:41787/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:49:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811297/",
            "reporter": "geenensp"
        }
    ],
    "3811296": [
        {
            "dateadded": "2026-04-04 23:09:21 UTC",
            "url": "http://140.237.6.49:41787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 10:06:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811296/",
            "reporter": "geenensp"
        }
    ],
    "3811295": [
        {
            "dateadded": "2026-04-04 22:57:08 UTC",
            "url": "http://42.4.29.184:41439/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 23:20:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811295/",
            "reporter": "geenensp"
        }
    ],
    "3811294": [
        {
            "dateadded": "2026-04-04 22:27:09 UTC",
            "url": "http://115.215.97.216:45208/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811294/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811293": [
        {
            "dateadded": "2026-04-04 22:17:14 UTC",
            "url": "https://dough-svc.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 03:37:34 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811293/",
            "reporter": "anonymous"
        }
    ],
    "3811292": [
        {
            "dateadded": "2026-04-04 22:13:11 UTC",
            "url": "https://fry-logic.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 04:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811292/",
            "reporter": "anonymous"
        }
    ],
    "3811291": [
        {
            "dateadded": "2026-04-04 22:07:13 UTC",
            "url": "https://meat-store.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 04:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811291/",
            "reporter": "anonymous"
        }
    ],
    "3811290": [
        {
            "dateadded": "2026-04-04 22:02:08 UTC",
            "url": "http://115.48.162.62:50466/i",
            "url_status": "offline",
            "last_online": "2026-04-05 11:07:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811290/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811289": [
        {
            "dateadded": "2026-04-04 22:01:14 UTC",
            "url": "https://food-truck.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 04:29:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811289/",
            "reporter": "anonymous"
        }
    ],
    "3811288": [
        {
            "dateadded": "2026-04-04 21:59:19 UTC",
            "url": "http://60.17.80.138:46688/i",
            "url_status": "offline",
            "last_online": "2026-04-12 10:32:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811288/",
            "reporter": "geenensp"
        }
    ],
    "3811287": [
        {
            "dateadded": "2026-04-04 21:57:14 UTC",
            "url": "https://hit-rate.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 04:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811287/",
            "reporter": "anonymous"
        }
    ],
    "3811286": [
        {
            "dateadded": "2026-04-04 21:54:22 UTC",
            "url": "http://117.195.99.69:36643/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811286/",
            "reporter": "geenensp"
        }
    ],
    "3811285": [
        {
            "dateadded": "2026-04-04 21:54:13 UTC",
            "url": "https://forge-sync.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811285/",
            "reporter": "anonymous"
        }
    ],
    "3811284": [
        {
            "dateadded": "2026-04-04 21:47:22 UTC",
            "url": "http://46.236.65.51:60916/i",
            "url_status": "offline",
            "last_online": "2026-04-16 22:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811284/",
            "reporter": "geenensp"
        }
    ],
    "3811283": [
        {
            "dateadded": "2026-04-04 21:44:13 UTC",
            "url": "https://math-hub.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:44:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811283/",
            "reporter": "anonymous"
        }
    ],
    "3811282": [
        {
            "dateadded": "2026-04-04 21:42:07 UTC",
            "url": "http://125.41.168.155:42340/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:41:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811282/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811281": [
        {
            "dateadded": "2026-04-04 21:40:33 UTC",
            "url": "http://59.182.139.194:43045/i",
            "url_status": "offline",
            "last_online": "2026-04-04 21:40:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811281/",
            "reporter": "geenensp"
        }
    ],
    "3811280": [
        {
            "dateadded": "2026-04-04 21:40:15 UTC",
            "url": "https://calc-engine.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811280/",
            "reporter": "anonymous"
        }
    ],
    "3811279": [
        {
            "dateadded": "2026-04-04 21:33:14 UTC",
            "url": "https://nail-check.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 03:32:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811279/",
            "reporter": "anonymous"
        }
    ],
    "3811278": [
        {
            "dateadded": "2026-04-04 21:27:12 UTC",
            "url": "https://tool-logic.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-05 03:57:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811278/",
            "reporter": "anonymous"
        }
    ],
    "3811277": [
        {
            "dateadded": "2026-04-04 21:26:19 UTC",
            "url": "http://117.195.99.69:36643/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:54:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811277/",
            "reporter": "geenensp"
        }
    ],
    "3811276": [
        {
            "dateadded": "2026-04-04 21:23:11 UTC",
            "url": "https://taste-hub.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811276/",
            "reporter": "anonymous"
        }
    ],
    "3811274": [
        {
            "dateadded": "2026-04-04 21:22:10 UTC",
            "url": "http://176.65.139.42:8080/proxyv2.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 23:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811274/",
            "reporter": "botnetkiller"
        }
    ],
    "3811275": [
        {
            "dateadded": "2026-04-04 21:22:10 UTC",
            "url": "http://110.37.39.146:45282/i",
            "url_status": "offline",
            "last_online": "2026-04-08 17:03:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811275/",
            "reporter": "geenensp"
        }
    ],
    "3811273": [
        {
            "dateadded": "2026-04-04 21:18:12 UTC",
            "url": "https://chef-node.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:05:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811273/",
            "reporter": "anonymous"
        }
    ],
    "3811272": [
        {
            "dateadded": "2026-04-04 21:11:06 UTC",
            "url": "https://royal-svc.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811272/",
            "reporter": "anonymous"
        }
    ],
    "3811271": [
        {
            "dateadded": "2026-04-04 21:06:08 UTC",
            "url": "https://palace-gate.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:09:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811271/",
            "reporter": "anonymous"
        }
    ],
    "3811270": [
        {
            "dateadded": "2026-04-04 21:04:20 UTC",
            "url": "http://123.5.114.189:33257/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:08:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811270/",
            "reporter": "geenensp"
        }
    ],
    "3811269": [
        {
            "dateadded": "2026-04-04 21:04:17 UTC",
            "url": "http://36.69.72.137:53872/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811269/",
            "reporter": "geenensp"
        }
    ],
    "3811268": [
        {
            "dateadded": "2026-04-04 21:00:09 UTC",
            "url": "https://hot-sauce.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:33:33 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811268/",
            "reporter": "anonymous"
        }
    ],
    "3811267": [
        {
            "dateadded": "2026-04-04 20:59:18 UTC",
            "url": "http://59.95.82.68:40263/i",
            "url_status": "offline",
            "last_online": "2026-04-04 20:59:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811267/",
            "reporter": "geenensp"
        }
    ],
    "3811266": [
        {
            "dateadded": "2026-04-04 20:55:10 UTC",
            "url": "https://spicy-api.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:51:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811266/",
            "reporter": "anonymous"
        }
    ],
    "3811265": [
        {
            "dateadded": "2026-04-04 20:49:04 UTC",
            "url": "http://85.239.147.6/files/7782139129/1nzijzw.msi",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811265/",
            "reporter": "Bitsight"
        }
    ],
    "3811264": [
        {
            "dateadded": "2026-04-04 20:48:11 UTC",
            "url": "https://shrink-io.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811264/",
            "reporter": "anonymous"
        }
    ],
    "3811263": [
        {
            "dateadded": "2026-04-04 20:47:10 UTC",
            "url": "http://61.52.115.157:33536/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811263/",
            "reporter": "geenensp"
        }
    ],
    "3811262": [
        {
            "dateadded": "2026-04-04 20:44:13 UTC",
            "url": "https://altar-svc.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811262/",
            "reporter": "anonymous"
        }
    ],
    "3811261": [
        {
            "dateadded": "2026-04-04 20:41:13 UTC",
            "url": "http://36.69.72.137:53872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:22:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811261/",
            "reporter": "geenensp"
        }
    ],
    "3811260": [
        {
            "dateadded": "2026-04-04 20:39:09 UTC",
            "url": "https://faith-gate.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:43:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811260/",
            "reporter": "anonymous"
        }
    ],
    "3811259": [
        {
            "dateadded": "2026-04-04 20:32:07 UTC",
            "url": "https://rite-check.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:04:30 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811259/",
            "reporter": "anonymous"
        }
    ],
    "3811258": [
        {
            "dateadded": "2026-04-04 20:26:08 UTC",
            "url": "https://holy-path.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 20:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811258/",
            "reporter": "anonymous"
        }
    ],
    "3811257": [
        {
            "dateadded": "2026-04-04 20:23:20 UTC",
            "url": "http://61.52.115.157:33536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811257/",
            "reporter": "geenensp"
        }
    ],
    "3811256": [
        {
            "dateadded": "2026-04-04 20:22:24 UTC",
            "url": "http://182.120.135.194:56369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:04:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811256/",
            "reporter": "geenensp"
        }
    ],
    "3811255": [
        {
            "dateadded": "2026-04-04 20:20:21 UTC",
            "url": "http://182.124.10.210:37644/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811255/",
            "reporter": "geenensp"
        }
    ],
    "3811254": [
        {
            "dateadded": "2026-04-04 20:20:09 UTC",
            "url": "https://bread-wine.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:37:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811254/",
            "reporter": "anonymous"
        }
    ],
    "3811253": [
        {
            "dateadded": "2026-04-04 20:18:12 UTC",
            "url": "http://27.153.144.5:48034/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:00:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811253/",
            "reporter": "geenensp"
        }
    ],
    "3811252": [
        {
            "dateadded": "2026-04-04 20:14:07 UTC",
            "url": "https://prime-time.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811252/",
            "reporter": "anonymous"
        }
    ],
    "3811251": [
        {
            "dateadded": "2026-04-04 20:09:07 UTC",
            "url": "https://age-logic.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811251/",
            "reporter": "anonymous"
        }
    ],
    "3811250": [
        {
            "dateadded": "2026-04-04 20:05:20 UTC",
            "url": "http://182.114.193.247:33835/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:46:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811250/",
            "reporter": "geenensp"
        }
    ],
    "3811249": [
        {
            "dateadded": "2026-04-04 20:05:13 UTC",
            "url": "http://219.156.28.216:52542/i",
            "url_status": "offline",
            "last_online": "2026-04-06 20:46:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811249/",
            "reporter": "geenensp"
        }
    ],
    "3811248": [
        {
            "dateadded": "2026-04-04 20:04:10 UTC",
            "url": "https://fresh-svc.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:35:55 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811248/",
            "reporter": "anonymous"
        }
    ],
    "3811247": [
        {
            "dateadded": "2026-04-04 19:58:06 UTC",
            "url": "https://glow-node.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:52:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811247/",
            "reporter": "anonymous"
        }
    ],
    "3811246": [
        {
            "dateadded": "2026-04-04 19:55:21 UTC",
            "url": "http://27.153.144.5:48034/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:52:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811246/",
            "reporter": "geenensp"
        }
    ],
    "3811245": [
        {
            "dateadded": "2026-04-04 19:55:20 UTC",
            "url": "http://182.124.10.210:37644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:03:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811245/",
            "reporter": "geenensp"
        }
    ],
    "3811244": [
        {
            "dateadded": "2026-04-04 19:54:09 UTC",
            "url": "http://115.55.23.7:42126/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:31:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811244/",
            "reporter": "geenensp"
        }
    ],
    "3811243": [
        {
            "dateadded": "2026-04-04 19:53:07 UTC",
            "url": "https://face-lift.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811243/",
            "reporter": "anonymous"
        }
    ],
    "3811242": [
        {
            "dateadded": "2026-04-04 19:48:11 UTC",
            "url": "https://skin-care.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811242/",
            "reporter": "anonymous"
        }
    ],
    "3811241": [
        {
            "dateadded": "2026-04-04 19:47:10 UTC",
            "url": "http://222.141.116.207:36914/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811241/",
            "reporter": "geenensp"
        }
    ],
    "3811240": [
        {
            "dateadded": "2026-04-04 19:45:10 UTC",
            "url": "https://sales-api.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811240/",
            "reporter": "anonymous"
        }
    ],
    "3811239": [
        {
            "dateadded": "2026-04-04 19:39:08 UTC",
            "url": "https://deal-proxy.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811239/",
            "reporter": "anonymous"
        }
    ],
    "3811238": [
        {
            "dateadded": "2026-04-04 19:37:24 UTC",
            "url": "http://182.114.193.247:33835/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811238/",
            "reporter": "geenensp"
        }
    ],
    "3811237": [
        {
            "dateadded": "2026-04-04 19:32:10 UTC",
            "url": "https://stock-out.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811237/",
            "reporter": "anonymous"
        }
    ],
    "3811236": [
        {
            "dateadded": "2026-04-04 19:29:19 UTC",
            "url": "http://115.55.23.7:42126/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811236/",
            "reporter": "geenensp"
        }
    ],
    "3811235": [
        {
            "dateadded": "2026-04-04 19:29:18 UTC",
            "url": "http://222.141.116.207:36914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811235/",
            "reporter": "geenensp"
        }
    ],
    "3811234": [
        {
            "dateadded": "2026-04-04 19:28:09 UTC",
            "url": "https://puzz-sync.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:21:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811234/",
            "reporter": "anonymous"
        }
    ],
    "3811233": [
        {
            "dateadded": "2026-04-04 19:27:06 UTC",
            "url": "http://221.13.234.196:57583/i",
            "url_status": "offline",
            "last_online": "2026-04-06 05:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811233/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811232": [
        {
            "dateadded": "2026-04-04 19:22:11 UTC",
            "url": "https://maze-check.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 19:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811232/",
            "reporter": "anonymous"
        }
    ],
    "3811231": [
        {
            "dateadded": "2026-04-04 19:16:11 UTC",
            "url": "https://blur-logic.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 19:16:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811231/",
            "reporter": "anonymous"
        }
    ],
    "3811230": [
        {
            "dateadded": "2026-04-04 19:16:09 UTC",
            "url": "http://115.54.157.4:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-07 03:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811230/",
            "reporter": "geenensp"
        }
    ],
    "3811229": [
        {
            "dateadded": "2026-04-04 19:12:09 UTC",
            "url": "https://o4v2vsml.momentumbloomera.digital/?=check&&actmn=egyQSrBZzZlAEzaB",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811229/",
            "reporter": "anonymous"
        }
    ],
    "3811228": [
        {
            "dateadded": "2026-04-04 19:11:06 UTC",
            "url": "https://task-mgr.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 19:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811228/",
            "reporter": "anonymous"
        }
    ],
    "3811227": [
        {
            "dateadded": "2026-04-04 19:10:12 UTC",
            "url": "http://179.43.182.70/aygbsqq0c4",
            "url_status": "offline",
            "last_online": "2026-04-09 09:51:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811227/",
            "reporter": "botnetkiller"
        }
    ],
    "3811224": [
        {
            "dateadded": "2026-04-04 19:09:19 UTC",
            "url": "http://179.43.182.70/3vrtjbxplo",
            "url_status": "offline",
            "last_online": "2026-04-09 09:50:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811224/",
            "reporter": "botnetkiller"
        }
    ],
    "3811225": [
        {
            "dateadded": "2026-04-04 19:09:19 UTC",
            "url": "http://179.43.182.70/rh1ele5p8l",
            "url_status": "offline",
            "last_online": "2026-04-09 10:15:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811225/",
            "reporter": "botnetkiller"
        }
    ],
    "3811226": [
        {
            "dateadded": "2026-04-04 19:09:19 UTC",
            "url": "http://179.43.182.70/3yahbbprg4",
            "url_status": "offline",
            "last_online": "2026-04-09 10:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811226/",
            "reporter": "botnetkiller"
        }
    ],
    "3811223": [
        {
            "dateadded": "2026-04-04 19:09:09 UTC",
            "url": "http://179.43.182.70/rduiqsxg66",
            "url_status": "offline",
            "last_online": "2026-04-09 10:05:45 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811223/",
            "reporter": "botnetkiller"
        }
    ],
    "3811219": [
        {
            "dateadded": "2026-04-04 19:09:08 UTC",
            "url": "http://179.43.182.70/547e510g2m",
            "url_status": "offline",
            "last_online": "2026-04-09 09:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811219/",
            "reporter": "botnetkiller"
        }
    ],
    "3811220": [
        {
            "dateadded": "2026-04-04 19:09:08 UTC",
            "url": "http://179.43.182.70/5u6pbsspr6",
            "url_status": "offline",
            "last_online": "2026-04-09 11:06:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811220/",
            "reporter": "botnetkiller"
        }
    ],
    "3811221": [
        {
            "dateadded": "2026-04-04 19:09:08 UTC",
            "url": "http://179.43.182.70/rigdtn0fpm",
            "url_status": "offline",
            "last_online": "2026-04-09 09:52:34 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811221/",
            "reporter": "botnetkiller"
        }
    ],
    "3811222": [
        {
            "dateadded": "2026-04-04 19:09:08 UTC",
            "url": "http://179.43.182.70/rt6l46cwdn",
            "url_status": "offline",
            "last_online": "2026-04-09 10:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811222/",
            "reporter": "botnetkiller"
        }
    ],
    "3811218": [
        {
            "dateadded": "2026-04-04 19:08:19 UTC",
            "url": "http://179.43.182.70/zlr01030u5",
            "url_status": "offline",
            "last_online": "2026-04-09 11:19:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811218/",
            "reporter": "botnetkiller"
        }
    ],
    "3811217": [
        {
            "dateadded": "2026-04-04 19:05:10 UTC",
            "url": "https://open-book.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811217/",
            "reporter": "anonymous"
        }
    ],
    "3811216": [
        {
            "dateadded": "2026-04-04 19:00:26 UTC",
            "url": "http://59.88.141.99:46930/Mozi.m",
            "url_status": "offline",
            "last_online": "2026-04-04 19:00:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811216/",
            "reporter": "botnetkiller"
        }
    ],
    "3811215": [
        {
            "dateadded": "2026-04-04 18:59:07 UTC",
            "url": "https://edu-portal.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:35:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811215/",
            "reporter": "anonymous"
        }
    ],
    "3811214": [
        {
            "dateadded": "2026-04-04 18:57:25 UTC",
            "url": "http://112.248.105.38:50784/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:25:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811214/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811213": [
        {
            "dateadded": "2026-04-04 18:56:19 UTC",
            "url": "http://116.139.187.150:53084/i",
            "url_status": "offline",
            "last_online": "2026-04-10 16:30:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811213/",
            "reporter": "geenensp"
        }
    ],
    "3811212": [
        {
            "dateadded": "2026-04-04 18:54:11 UTC",
            "url": "https://class-sync.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:16:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811212/",
            "reporter": "anonymous"
        }
    ],
    "3811211": [
        {
            "dateadded": "2026-04-04 18:48:07 UTC",
            "url": "https://learn-gate.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:32:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811211/",
            "reporter": "anonymous"
        }
    ],
    "3811210": [
        {
            "dateadded": "2026-04-04 18:42:10 UTC",
            "url": "https://study-flow.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:38:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811210/",
            "reporter": "anonymous"
        }
    ],
    "3811209": [
        {
            "dateadded": "2026-04-04 18:40:25 UTC",
            "url": "http://120.28.194.92:33641/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811209/",
            "reporter": "geenensp"
        }
    ],
    "3811208": [
        {
            "dateadded": "2026-04-04 18:39:20 UTC",
            "url": "http://222.142.244.222:44360/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811208/",
            "reporter": "geenensp"
        }
    ],
    "3811207": [
        {
            "dateadded": "2026-04-04 18:37:07 UTC",
            "url": "http://221.15.188.139:39201/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:56:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811207/",
            "reporter": "geenensp"
        }
    ],
    "3811206": [
        {
            "dateadded": "2026-04-04 18:36:07 UTC",
            "url": "https://re-use-svc.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:48:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811206/",
            "reporter": "anonymous"
        }
    ],
    "3811205": [
        {
            "dateadded": "2026-04-04 18:33:10 UTC",
            "url": "https://scrap-api.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811205/",
            "reporter": "anonymous"
        }
    ],
    "3811204": [
        {
            "dateadded": "2026-04-04 18:28:15 UTC",
            "url": "https://bin-monitor.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:34:57 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811204/",
            "reporter": "anonymous"
        }
    ],
    "3811203": [
        {
            "dateadded": "2026-04-04 18:22:11 UTC",
            "url": "https://green-node.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811203/",
            "reporter": "anonymous"
        }
    ],
    "3811202": [
        {
            "dateadded": "2026-04-04 18:17:07 UTC",
            "url": "http://92.253.241.253:15695/i",
            "url_status": "offline",
            "last_online": "2026-04-09 09:50:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811202/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811201": [
        {
            "dateadded": "2026-04-04 18:16:09 UTC",
            "url": "https://waste-log.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:35:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811201/",
            "reporter": "anonymous"
        }
    ],
    "3811200": [
        {
            "dateadded": "2026-04-04 18:15:18 UTC",
            "url": "http://222.142.244.222:44360/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:16:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811200/",
            "reporter": "geenensp"
        }
    ],
    "3811199": [
        {
            "dateadded": "2026-04-04 18:12:21 UTC",
            "url": "http://117.80.221.155:57843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811199/",
            "reporter": "geenensp"
        }
    ],
    "3811198": [
        {
            "dateadded": "2026-04-04 18:11:10 UTC",
            "url": "https://eco-cycle.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:04:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811198/",
            "reporter": "anonymous"
        }
    ],
    "3811197": [
        {
            "dateadded": "2026-04-04 18:05:13 UTC",
            "url": "https://photo-sync.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 18:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811197/",
            "reporter": "anonymous"
        }
    ],
    "3811196": [
        {
            "dateadded": "2026-04-04 18:02:06 UTC",
            "url": "http://112.242.7.237:49888/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811196/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811195": [
        {
            "dateadded": "2026-04-04 17:59:07 UTC",
            "url": "https://border-io.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 22:15:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811195/",
            "reporter": "anonymous"
        }
    ],
    "3811194": [
        {
            "dateadded": "2026-04-04 17:57:06 UTC",
            "url": "http://46.98.187.186:51603/.i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:46:44 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811194/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811193": [
        {
            "dateadded": "2026-04-04 17:55:10 UTC",
            "url": "https://edge-cache.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 23:01:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811193/",
            "reporter": "anonymous"
        }
    ],
    "3811192": [
        {
            "dateadded": "2026-04-04 17:49:08 UTC",
            "url": "https://web-portal.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811192/",
            "reporter": "anonymous"
        }
    ],
    "3811191": [
        {
            "dateadded": "2026-04-04 17:43:07 UTC",
            "url": "https://static-cdn.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:53:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811191/",
            "reporter": "anonymous"
        }
    ],
    "3811189": [
        {
            "dateadded": "2026-04-04 17:39:14 UTC",
            "url": "http://115.49.31.189:38189/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811189/",
            "reporter": "geenensp"
        }
    ],
    "3811190": [
        {
            "dateadded": "2026-04-04 17:39:14 UTC",
            "url": "http://175.150.178.167:37866/i",
            "url_status": "offline",
            "last_online": "2026-04-17 04:19:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811190/",
            "reporter": "geenensp"
        }
    ],
    "3811188": [
        {
            "dateadded": "2026-04-04 17:39:07 UTC",
            "url": "https://pixel-view.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:49:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811188/",
            "reporter": "anonymous"
        }
    ],
    "3811187": [
        {
            "dateadded": "2026-04-04 17:37:12 UTC",
            "url": "http://182.113.205.146:48259/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811187/",
            "reporter": "geenensp"
        }
    ],
    "3811186": [
        {
            "dateadded": "2026-04-04 17:35:20 UTC",
            "url": "http://106.58.108.152:33480/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:19:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811186/",
            "reporter": "geenensp"
        }
    ],
    "3811185": [
        {
            "dateadded": "2026-04-04 17:35:11 UTC",
            "url": "https://thought-hub.neurogrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:51:56 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811185/",
            "reporter": "anonymous"
        }
    ],
    "3811184": [
        {
            "dateadded": "2026-04-04 17:32:29 UTC",
            "url": "http://112.242.7.237:49888/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811184/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811183": [
        {
            "dateadded": "2026-04-04 17:26:09 UTC",
            "url": "https://pulse-logic.neurogrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 17:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811183/",
            "reporter": "anonymous"
        }
    ],
    "3811182": [
        {
            "dateadded": "2026-04-04 17:19:08 UTC",
            "url": "https://mind-node.neurogrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 21:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811182/",
            "reporter": "anonymous"
        }
    ],
    "3811181": [
        {
            "dateadded": "2026-04-04 17:16:09 UTC",
            "url": "http://182.113.205.146:48259/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:52:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811181/",
            "reporter": "geenensp"
        }
    ],
    "3811180": [
        {
            "dateadded": "2026-04-04 17:14:15 UTC",
            "url": "http://115.49.31.189:38189/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:00:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811180/",
            "reporter": "geenensp"
        }
    ],
    "3811178": [
        {
            "dateadded": "2026-04-04 17:13:12 UTC",
            "url": "http://175.150.178.167:37866/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 05:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811178/",
            "reporter": "geenensp"
        }
    ],
    "3811179": [
        {
            "dateadded": "2026-04-04 17:13:12 UTC",
            "url": "https://nerve-center.neurogrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 17:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811179/",
            "reporter": "anonymous"
        }
    ],
    "3811177": [
        {
            "dateadded": "2026-04-04 17:12:06 UTC",
            "url": "http://221.13.234.196:57583/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:01:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811177/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811176": [
        {
            "dateadded": "2026-04-04 17:11:05 UTC",
            "url": "http://85.239.147.6/files/6728144278/8EgT7YC.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811176/",
            "reporter": "Bitsight"
        }
    ],
    "3811175": [
        {
            "dateadded": "2026-04-04 17:08:10 UTC",
            "url": "http://101.109.236.218:59787/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:01:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811175/",
            "reporter": "geenensp"
        }
    ],
    "3811174": [
        {
            "dateadded": "2026-04-04 17:07:10 UTC",
            "url": "https://brain-scan.neurogrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 17:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811174/",
            "reporter": "anonymous"
        }
    ],
    "3811173": [
        {
            "dateadded": "2026-04-04 17:04:09 UTC",
            "url": "https://mesh-cloud.technofabric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 17:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811173/",
            "reporter": "anonymous"
        }
    ],
    "3811172": [
        {
            "dateadded": "2026-04-04 17:02:07 UTC",
            "url": "http://175.31.170.117:38526/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:29:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811172/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811171": [
        {
            "dateadded": "2026-04-04 16:59:30 UTC",
            "url": "http://222.140.130.223:49049/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:42:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811171/",
            "reporter": "geenensp"
        }
    ],
    "3811170": [
        {
            "dateadded": "2026-04-04 16:59:15 UTC",
            "url": "https://fiber-route.technofabric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:59:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811170/",
            "reporter": "anonymous"
        }
    ],
    "3811169": [
        {
            "dateadded": "2026-04-04 16:58:19 UTC",
            "url": "http://176.65.139.42:8080/dob.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:58:19 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811169/",
            "reporter": "botnetkiller"
        }
    ],
    "3811167": [
        {
            "dateadded": "2026-04-04 16:57:21 UTC",
            "url": "http://176.65.139.42:8080/proxy.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:57:21 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811167/",
            "reporter": "botnetkiller"
        }
    ],
    "3811168": [
        {
            "dateadded": "2026-04-04 16:57:21 UTC",
            "url": "http://176.65.139.42:8080/get1.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:57:21 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811168/",
            "reporter": "botnetkiller"
        }
    ],
    "3811166": [
        {
            "dateadded": "2026-04-04 16:57:17 UTC",
            "url": "http://176.65.139.42:8080/get.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:57:17 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811166/",
            "reporter": "botnetkiller"
        }
    ],
    "3811165": [
        {
            "dateadded": "2026-04-04 16:54:14 UTC",
            "url": "http://61.168.181.44:42131/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811165/",
            "reporter": "geenensp"
        }
    ],
    "3811164": [
        {
            "dateadded": "2026-04-04 16:52:10 UTC",
            "url": "https://weave-sync.technofabric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811164/",
            "reporter": "anonymous"
        }
    ],
    "3811163": [
        {
            "dateadded": "2026-04-04 16:47:14 UTC",
            "url": "https://cloth-net.technofabric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811163/",
            "reporter": "anonymous"
        }
    ],
    "3811162": [
        {
            "dateadded": "2026-04-04 16:46:19 UTC",
            "url": "http://112.239.122.21:41131/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811162/",
            "reporter": "geenensp"
        }
    ],
    "3811161": [
        {
            "dateadded": "2026-04-04 16:41:09 UTC",
            "url": "https://step-check.logicstream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811161/",
            "reporter": "anonymous"
        }
    ],
    "3811160": [
        {
            "dateadded": "2026-04-04 16:38:09 UTC",
            "url": "http://222.140.130.223:49049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:34:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811160/",
            "reporter": "geenensp"
        }
    ],
    "3811159": [
        {
            "dateadded": "2026-04-04 16:36:07 UTC",
            "url": "https://main-frame.logicstream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811159/",
            "reporter": "anonymous"
        }
    ],
    "3811158": [
        {
            "dateadded": "2026-04-04 16:36:04 UTC",
            "url": "http://85.239.147.6/files/encr/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811158/",
            "reporter": "c2hunter"
        }
    ],
    "3811157": [
        {
            "dateadded": "2026-04-04 16:32:07 UTC",
            "url": "http://42.230.54.80:59153/i",
            "url_status": "offline",
            "last_online": "2026-04-05 11:11:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811157/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811156": [
        {
            "dateadded": "2026-04-04 16:31:21 UTC",
            "url": "http://112.239.122.21:41131/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:33:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811156/",
            "reporter": "geenensp"
        }
    ],
    "3811155": [
        {
            "dateadded": "2026-04-04 16:31:13 UTC",
            "url": "https://rule-engine.logicstream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811155/",
            "reporter": "anonymous"
        }
    ],
    "3811154": [
        {
            "dateadded": "2026-04-04 16:24:08 UTC",
            "url": "https://packet-flow.logicstream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811154/",
            "reporter": "anonymous"
        }
    ],
    "3811153": [
        {
            "dateadded": "2026-04-04 16:22:11 UTC",
            "url": "http://121.226.151.83:43372/i",
            "url_status": "offline",
            "last_online": "2026-04-04 21:49:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811153/",
            "reporter": "geenensp"
        }
    ],
    "3811152": [
        {
            "dateadded": "2026-04-04 16:18:13 UTC",
            "url": "https://code-gate.logicstream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811152/",
            "reporter": "anonymous"
        }
    ],
    "3811151": [
        {
            "dateadded": "2026-04-04 16:14:14 UTC",
            "url": "https://bit-stream.logicstream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811151/",
            "reporter": "anonymous"
        }
    ],
    "3811150": [
        {
            "dateadded": "2026-04-04 16:09:20 UTC",
            "url": "http://123.9.81.104:57192/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:09:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811150/",
            "reporter": "geenensp"
        }
    ],
    "3811149": [
        {
            "dateadded": "2026-04-04 16:09:13 UTC",
            "url": "https://anon-auth.cryptolayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811149/",
            "reporter": "anonymous"
        }
    ],
    "3811148": [
        {
            "dateadded": "2026-04-04 16:08:22 UTC",
            "url": "http://42.7.150.238:37784/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:11:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811148/",
            "reporter": "geenensp"
        }
    ],
    "3811147": [
        {
            "dateadded": "2026-04-04 16:07:08 UTC",
            "url": "http://42.230.54.80:59153/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:08:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811147/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811146": [
        {
            "dateadded": "2026-04-04 16:05:12 UTC",
            "url": "https://hash-store.cryptolayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811146/",
            "reporter": "anonymous"
        }
    ],
    "3811145": [
        {
            "dateadded": "2026-04-04 15:58:23 UTC",
            "url": "http://119.114.139.117:60383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:50:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811145/",
            "reporter": "geenensp"
        }
    ],
    "3811144": [
        {
            "dateadded": "2026-04-04 15:58:09 UTC",
            "url": "https://secure-key.cryptolayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 15:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811144/",
            "reporter": "anonymous"
        }
    ],
    "3811143": [
        {
            "dateadded": "2026-04-04 15:54:21 UTC",
            "url": "http://42.7.150.238:37784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 16:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811143/",
            "reporter": "geenensp"
        }
    ],
    "3811142": [
        {
            "dateadded": "2026-04-04 15:49:17 UTC",
            "url": "http://125.44.56.130:48101/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:49:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811142/",
            "reporter": "geenensp"
        }
    ],
    "3811141": [
        {
            "dateadded": "2026-04-04 15:44:20 UTC",
            "url": "http://121.226.151.83:43372/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:41:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811141/",
            "reporter": "geenensp"
        }
    ],
    "3811140": [
        {
            "dateadded": "2026-04-04 15:29:08 UTC",
            "url": "http://125.44.56.130:48101/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811140/",
            "reporter": "geenensp"
        }
    ],
    "3811139": [
        {
            "dateadded": "2026-04-04 15:25:21 UTC",
            "url": "http://60.214.240.96:47132/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811139/",
            "reporter": "geenensp"
        }
    ],
    "3811138": [
        {
            "dateadded": "2026-04-04 15:19:18 UTC",
            "url": "http://203.177.251.31:35122/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:18:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811138/",
            "reporter": "geenensp"
        }
    ],
    "3811137": [
        {
            "dateadded": "2026-04-04 15:06:13 UTC",
            "url": "http://113.9.111.169:50759/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:38:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811137/",
            "reporter": "geenensp"
        }
    ],
    "3811136": [
        {
            "dateadded": "2026-04-04 15:02:08 UTC",
            "url": "http://203.177.251.31:35122/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 22:26:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811136/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811135": [
        {
            "dateadded": "2026-04-04 14:52:07 UTC",
            "url": "http://193.187.101.227:40456/i",
            "url_status": "offline",
            "last_online": "2026-04-12 04:24:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811135/",
            "reporter": "geenensp"
        }
    ],
    "3811134": [
        {
            "dateadded": "2026-04-04 14:49:11 UTC",
            "url": "http://115.61.0.207:41918/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811134/",
            "reporter": "geenensp"
        }
    ],
    "3811133": [
        {
            "dateadded": "2026-04-04 14:47:21 UTC",
            "url": "http://113.9.111.169:50759/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:55:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811133/",
            "reporter": "geenensp"
        }
    ],
    "3811132": [
        {
            "dateadded": "2026-04-04 14:42:16 UTC",
            "url": "http://219.157.63.131:58936/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:59:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811132/",
            "reporter": "geenensp"
        }
    ],
    "3811131": [
        {
            "dateadded": "2026-04-04 14:37:07 UTC",
            "url": "http://61.53.144.28:38855/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:24:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811131/",
            "reporter": "geenensp"
        }
    ],
    "3811130": [
        {
            "dateadded": "2026-04-04 14:32:07 UTC",
            "url": "http://175.150.73.134:43447/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:57:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811130/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811129": [
        {
            "dateadded": "2026-04-04 14:32:06 UTC",
            "url": "http://42.5.64.226:41730/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 15:49:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811129/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811128": [
        {
            "dateadded": "2026-04-04 14:31:14 UTC",
            "url": "https://46.151.182.82/i686",
            "url_status": "offline",
            "last_online": "2026-04-19 11:47:24 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811128/",
            "reporter": "botnetkiller"
        }
    ],
    "3811124": [
        {
            "dateadded": "2026-04-04 14:31:13 UTC",
            "url": "https://46.151.182.82/clean",
            "url_status": "offline",
            "last_online": "2026-04-19 11:49:53 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "redtail",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811124/",
            "reporter": "botnetkiller"
        }
    ],
    "3811125": [
        {
            "dateadded": "2026-04-04 14:31:13 UTC",
            "url": "https://46.151.182.82/aarch64",
            "url_status": "offline",
            "last_online": "2026-04-19 11:12:23 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811125/",
            "reporter": "botnetkiller"
        }
    ],
    "3811126": [
        {
            "dateadded": "2026-04-04 14:31:13 UTC",
            "url": "https://46.151.182.82/arm7",
            "url_status": "offline",
            "last_online": "2026-04-19 11:28:55 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811126/",
            "reporter": "botnetkiller"
        }
    ],
    "3811127": [
        {
            "dateadded": "2026-04-04 14:31:13 UTC",
            "url": "https://46.151.182.82/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-19 11:37:49 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "redtail",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811127/",
            "reporter": "botnetkiller"
        }
    ],
    "3811123": [
        {
            "dateadded": "2026-04-04 14:30:22 UTC",
            "url": "https://46.151.182.82/sh",
            "url_status": "offline",
            "last_online": "2026-04-19 05:33:41 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "redtail",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811123/",
            "reporter": "botnetkiller"
        }
    ],
    "3811122": [
        {
            "dateadded": "2026-04-04 14:18:17 UTC",
            "url": "http://61.53.144.28:38855/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811122/",
            "reporter": "geenensp"
        }
    ],
    "3811121": [
        {
            "dateadded": "2026-04-04 14:17:11 UTC",
            "url": "http://115.61.0.207:41918/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:34:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811121/",
            "reporter": "geenensp"
        }
    ],
    "3811120": [
        {
            "dateadded": "2026-04-04 14:07:10 UTC",
            "url": "http://180.191.23.109:34917/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:39:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811120/",
            "reporter": "geenensp"
        }
    ],
    "3811119": [
        {
            "dateadded": "2026-04-04 14:01:11 UTC",
            "url": "http://42.232.180.112:48828/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:50:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811119/",
            "reporter": "geenensp"
        }
    ],
    "3811118": [
        {
            "dateadded": "2026-04-04 14:00:17 UTC",
            "url": "http://138.204.196.136:41623/i",
            "url_status": "offline",
            "last_online": "2026-04-04 14:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811118/",
            "reporter": "geenensp"
        }
    ],
    "3811117": [
        {
            "dateadded": "2026-04-04 13:59:16 UTC",
            "url": "http://27.215.180.123:34189/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:53:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811117/",
            "reporter": "geenensp"
        }
    ],
    "3811116": [
        {
            "dateadded": "2026-04-04 13:57:08 UTC",
            "url": "http://182.120.135.194:56369/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:34:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811116/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811115": [
        {
            "dateadded": "2026-04-04 13:51:18 UTC",
            "url": "http://196.189.101.82:39383/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:00:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811115/",
            "reporter": "geenensp"
        }
    ],
    "3811114": [
        {
            "dateadded": "2026-04-04 13:42:05 UTC",
            "url": "http://85.239.147.6/files/8468794285/cv4B5nr.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811114/",
            "reporter": "Bitsight"
        }
    ],
    "3811113": [
        {
            "dateadded": "2026-04-04 13:41:26 UTC",
            "url": "http://180.191.23.109:34917/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:57:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811113/",
            "reporter": "geenensp"
        }
    ],
    "3811112": [
        {
            "dateadded": "2026-04-04 13:34:09 UTC",
            "url": "http://42.232.180.112:48828/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:55:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811112/",
            "reporter": "geenensp"
        }
    ],
    "3811111": [
        {
            "dateadded": "2026-04-04 13:32:17 UTC",
            "url": "http://27.215.180.123:34189/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:38:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811111/",
            "reporter": "geenensp"
        }
    ],
    "3811110": [
        {
            "dateadded": "2026-04-04 13:31:18 UTC",
            "url": "http://125.40.159.236:45670/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811110/",
            "reporter": "geenensp"
        }
    ],
    "3811109": [
        {
            "dateadded": "2026-04-04 13:27:07 UTC",
            "url": "http://60.19.249.254:57822/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:33:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811109/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811108": [
        {
            "dateadded": "2026-04-04 13:27:06 UTC",
            "url": "http://188.233.86.23:27744/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:34:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811108/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811107": [
        {
            "dateadded": "2026-04-04 13:22:05 UTC",
            "url": "http://85.239.147.6/files/atencio/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811107/",
            "reporter": "Bitsight"
        }
    ],
    "3811106": [
        {
            "dateadded": "2026-04-04 13:20:16 UTC",
            "url": "http://171.15.88.209:50001/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:38:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811106/",
            "reporter": "geenensp"
        }
    ],
    "3811105": [
        {
            "dateadded": "2026-04-04 13:12:06 UTC",
            "url": "http://188.233.86.23:27744/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:30:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811105/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811104": [
        {
            "dateadded": "2026-04-04 13:11:17 UTC",
            "url": "http://110.36.80.169:44384/i",
            "url_status": "offline",
            "last_online": "2026-04-05 05:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811104/",
            "reporter": "geenensp"
        }
    ],
    "3811103": [
        {
            "dateadded": "2026-04-04 13:06:22 UTC",
            "url": "http://123.11.77.0:52576/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:13:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811103/",
            "reporter": "geenensp"
        }
    ],
    "3811102": [
        {
            "dateadded": "2026-04-04 13:04:11 UTC",
            "url": "http://125.40.159.236:45670/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811102/",
            "reporter": "geenensp"
        }
    ],
    "3811101": [
        {
            "dateadded": "2026-04-04 13:03:19 UTC",
            "url": "http://180.115.74.130:48378/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:31:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811101/",
            "reporter": "geenensp"
        }
    ],
    "3811100": [
        {
            "dateadded": "2026-04-04 13:02:14 UTC",
            "url": "http://125.44.47.122:58172/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811100/",
            "reporter": "geenensp"
        }
    ],
    "3811099": [
        {
            "dateadded": "2026-04-04 13:02:07 UTC",
            "url": "http://60.19.249.254:57822/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:08:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811099/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811098": [
        {
            "dateadded": "2026-04-04 12:52:12 UTC",
            "url": "http://171.15.88.209:50001/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811098/",
            "reporter": "geenensp"
        }
    ],
    "3811097": [
        {
            "dateadded": "2026-04-04 12:40:16 UTC",
            "url": "http://113.236.91.194:46154/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:04:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811097/",
            "reporter": "geenensp"
        }
    ],
    "3811096": [
        {
            "dateadded": "2026-04-04 12:39:17 UTC",
            "url": "http://115.55.193.127:51230/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811096/",
            "reporter": "geenensp"
        }
    ],
    "3811095": [
        {
            "dateadded": "2026-04-04 12:38:21 UTC",
            "url": "http://180.115.74.130:48378/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-20 16:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811095/",
            "reporter": "geenensp"
        }
    ],
    "3811094": [
        {
            "dateadded": "2026-04-04 12:38:18 UTC",
            "url": "http://27.222.44.125:38293/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811094/",
            "reporter": "geenensp"
        }
    ],
    "3811093": [
        {
            "dateadded": "2026-04-04 12:36:15 UTC",
            "url": "http://1.26.115.199:41937/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811093/",
            "reporter": "geenensp"
        }
    ],
    "3811092": [
        {
            "dateadded": "2026-04-04 12:32:18 UTC",
            "url": "http://219.155.229.141:36547/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811092/",
            "reporter": "geenensp"
        }
    ],
    "3811091": [
        {
            "dateadded": "2026-04-04 12:31:16 UTC",
            "url": "http://110.37.91.29:33123/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:40:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811091/",
            "reporter": "geenensp"
        }
    ],
    "3811090": [
        {
            "dateadded": "2026-04-04 12:22:09 UTC",
            "url": "http://105.186.76.78:52139/i",
            "url_status": "offline",
            "last_online": "2026-04-04 22:00:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811090/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811089": [
        {
            "dateadded": "2026-04-04 12:18:15 UTC",
            "url": "http://1.26.115.199:41937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:02:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811089/",
            "reporter": "geenensp"
        }
    ],
    "3811088": [
        {
            "dateadded": "2026-04-04 12:17:19 UTC",
            "url": "http://110.37.91.29:33123/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:48:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811088/",
            "reporter": "geenensp"
        }
    ],
    "3811087": [
        {
            "dateadded": "2026-04-04 12:13:12 UTC",
            "url": "https://dcdivas.com/wp-includes/pomo/SecurityPatch.ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "powershell",
                "ps1",
                "ZigClipper"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811087/",
            "reporter": "abuse_ch"
        }
    ],
    "3811086": [
        {
            "dateadded": "2026-04-04 12:12:17 UTC",
            "url": "http://113.236.91.194:46154/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 06:18:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811086/",
            "reporter": "geenensp"
        }
    ],
    "3811085": [
        {
            "dateadded": "2026-04-04 12:07:18 UTC",
            "url": "http://125.160.139.26:49173/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:33:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811085/",
            "reporter": "geenensp"
        }
    ],
    "3811084": [
        {
            "dateadded": "2026-04-04 12:05:09 UTC",
            "url": "http://219.155.229.141:36547/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:38:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811084/",
            "reporter": "geenensp"
        }
    ],
    "3811083": [
        {
            "dateadded": "2026-04-04 12:03:08 UTC",
            "url": "http://120.28.139.121:45948/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:58:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811083/",
            "reporter": "geenensp"
        }
    ],
    "3811082": [
        {
            "dateadded": "2026-04-04 12:02:06 UTC",
            "url": "http://196.189.9.27:49953/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:47:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811082/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811081": [
        {
            "dateadded": "2026-04-04 11:54:17 UTC",
            "url": "http://115.58.159.7:59403/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:17:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811081/",
            "reporter": "geenensp"
        }
    ],
    "3811080": [
        {
            "dateadded": "2026-04-04 11:54:07 UTC",
            "url": "http://176.65.148.100/bins.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:00:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811080/",
            "reporter": "adliwahid"
        }
    ],
    "3811079": [
        {
            "dateadded": "2026-04-04 11:53:07 UTC",
            "url": "http://162.215.170.152/hiddenbin/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-15 04:53:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811079/",
            "reporter": "adliwahid"
        }
    ],
    "3811078": [
        {
            "dateadded": "2026-04-04 11:53:06 UTC",
            "url": "http://83.142.209.47/dlr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:44:41 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811078/",
            "reporter": "adliwahid"
        }
    ],
    "3811077": [
        {
            "dateadded": "2026-04-04 11:52:18 UTC",
            "url": "http://125.160.139.26:49173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:19:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811077/",
            "reporter": "geenensp"
        }
    ],
    "3811076": [
        {
            "dateadded": "2026-04-04 11:43:11 UTC",
            "url": "http://115.55.193.127:51230/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811076/",
            "reporter": "geenensp"
        }
    ],
    "3811075": [
        {
            "dateadded": "2026-04-04 11:42:26 UTC",
            "url": "http://106.58.108.152:33480/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:09:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811075/",
            "reporter": "adliwahid"
        }
    ],
    "3811074": [
        {
            "dateadded": "2026-04-04 11:42:21 UTC",
            "url": "http://116.139.42.42:46316/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:15:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811074/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811073": [
        {
            "dateadded": "2026-04-04 11:42:11 UTC",
            "url": "http://83.219.1.198:47106/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:06:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811073/",
            "reporter": "geenensp"
        }
    ],
    "3811065": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://118.175.206.228:43178/i",
            "url_status": "offline",
            "last_online": "2026-04-06 08:22:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811065/",
            "reporter": "adliwahid"
        }
    ],
    "3811066": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://118.232.137.101:35849/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:42:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811066/",
            "reporter": "adliwahid"
        }
    ],
    "3811067": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://118.232.137.101:35849/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811067/",
            "reporter": "adliwahid"
        }
    ],
    "3811068": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://175.171.205.73:55827/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:51:22 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811068/",
            "reporter": "adliwahid"
        }
    ],
    "3811069": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://212.225.203.24:40864/.i",
            "url_status": "online",
            "last_online": "2026-04-27 13:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811069/",
            "reporter": "adliwahid"
        }
    ],
    "3811070": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://219.155.200.135:33306/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 11:42:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811070/",
            "reporter": "adliwahid"
        }
    ],
    "3811071": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://219.155.200.135:33306/i",
            "url_status": "offline",
            "last_online": "2026-04-04 11:42:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811071/",
            "reporter": "adliwahid"
        }
    ],
    "3811072": [
        {
            "dateadded": "2026-04-04 11:42:09 UTC",
            "url": "http://115.58.149.156:51309/i",
            "url_status": "offline",
            "last_online": "2026-04-04 22:26:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811072/",
            "reporter": "adliwahid"
        }
    ],
    "3811064": [
        {
            "dateadded": "2026-04-04 11:42:08 UTC",
            "url": "http://42.55.41.89:49208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:27:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811064/",
            "reporter": "adliwahid"
        }
    ],
    "3811062": [
        {
            "dateadded": "2026-04-04 11:42:07 UTC",
            "url": "http://185.89.157.150:42780/i",
            "url_status": "offline",
            "last_online": "2026-04-12 17:01:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811062/",
            "reporter": "adliwahid"
        }
    ],
    "3811063": [
        {
            "dateadded": "2026-04-04 11:42:07 UTC",
            "url": "http://185.89.157.150:42780/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:29:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811063/",
            "reporter": "adliwahid"
        }
    ],
    "3811061": [
        {
            "dateadded": "2026-04-04 11:41:21 UTC",
            "url": "http://115.58.159.7:59403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:46:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811061/",
            "reporter": "geenensp"
        }
    ],
    "3811058": [
        {
            "dateadded": "2026-04-04 11:41:07 UTC",
            "url": "http://112.247.41.139:46944/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:04:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811058/",
            "reporter": "adliwahid"
        }
    ],
    "3811059": [
        {
            "dateadded": "2026-04-04 11:41:07 UTC",
            "url": "http://110.37.38.88:59792/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811059/",
            "reporter": "adliwahid"
        }
    ],
    "3811060": [
        {
            "dateadded": "2026-04-04 11:41:07 UTC",
            "url": "http://113.237.109.187:45710/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:34:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811060/",
            "reporter": "adliwahid"
        }
    ],
    "3811057": [
        {
            "dateadded": "2026-04-04 11:40:35 UTC",
            "url": "http://112.247.41.139:46944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 21:55:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811057/",
            "reporter": "adliwahid"
        }
    ],
    "3811055": [
        {
            "dateadded": "2026-04-04 11:40:10 UTC",
            "url": "http://83.219.1.198:47106/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811055/",
            "reporter": "geenensp"
        }
    ],
    "3811056": [
        {
            "dateadded": "2026-04-04 11:40:10 UTC",
            "url": "http://175.171.205.73:55827/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 17:16:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811056/",
            "reporter": "adliwahid"
        }
    ],
    "3811054": [
        {
            "dateadded": "2026-04-04 11:40:08 UTC",
            "url": "http://211.46.228.110:8963/.i",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811054/",
            "reporter": "adliwahid"
        }
    ],
    "3811053": [
        {
            "dateadded": "2026-04-04 11:40:07 UTC",
            "url": "http://113.237.109.187:45710/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:39:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811053/",
            "reporter": "adliwahid"
        }
    ],
    "3811052": [
        {
            "dateadded": "2026-04-04 11:37:07 UTC",
            "url": "http://196.189.9.27:49953/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:35:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811052/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811051": [
        {
            "dateadded": "2026-04-04 11:36:21 UTC",
            "url": "http://120.28.139.121:45948/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 03:58:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811051/",
            "reporter": "geenensp"
        }
    ],
    "3811050": [
        {
            "dateadded": "2026-04-04 11:13:18 UTC",
            "url": "http://202.107.89.9:46239/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 11:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811050/",
            "reporter": "geenensp"
        }
    ],
    "3811049": [
        {
            "dateadded": "2026-04-04 11:12:06 UTC",
            "url": "http://77.247.92.106:54615/i",
            "url_status": "offline",
            "last_online": "2026-04-08 04:54:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811049/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811048": [
        {
            "dateadded": "2026-04-04 11:11:07 UTC",
            "url": "http://220.202.91.127:45200/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:39:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811048/",
            "reporter": "geenensp"
        }
    ],
    "3811047": [
        {
            "dateadded": "2026-04-04 11:02:21 UTC",
            "url": "http://221.15.165.59:41210/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:01:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811047/",
            "reporter": "geenensp"
        }
    ],
    "3811046": [
        {
            "dateadded": "2026-04-04 10:51:16 UTC",
            "url": "http://115.63.148.113:46489/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811046/",
            "reporter": "geenensp"
        }
    ],
    "3811045": [
        {
            "dateadded": "2026-04-04 10:41:08 UTC",
            "url": "http://220.202.91.127:45200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 11:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811045/",
            "reporter": "geenensp"
        }
    ],
    "3811044": [
        {
            "dateadded": "2026-04-04 10:35:19 UTC",
            "url": "http://221.15.165.59:41210/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811044/",
            "reporter": "geenensp"
        }
    ],
    "3811043": [
        {
            "dateadded": "2026-04-04 10:28:21 UTC",
            "url": "http://110.37.123.237:47100/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:28:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811043/",
            "reporter": "geenensp"
        }
    ],
    "3811042": [
        {
            "dateadded": "2026-04-04 10:25:27 UTC",
            "url": "http://116.24.189.249:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811042/",
            "reporter": "geenensp"
        }
    ],
    "3811041": [
        {
            "dateadded": "2026-04-04 10:21:21 UTC",
            "url": "http://115.63.148.113:46489/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:21:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811041/",
            "reporter": "geenensp"
        }
    ],
    "3811040": [
        {
            "dateadded": "2026-04-04 10:08:20 UTC",
            "url": "http://182.116.34.160:49543/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:41:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811040/",
            "reporter": "geenensp"
        }
    ],
    "3811039": [
        {
            "dateadded": "2026-04-04 10:04:19 UTC",
            "url": "http://110.37.123.237:47100/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:04:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811039/",
            "reporter": "geenensp"
        }
    ],
    "3811038": [
        {
            "dateadded": "2026-04-04 10:02:08 UTC",
            "url": "http://170.254.10.213:52129/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811038/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811037": [
        {
            "dateadded": "2026-04-04 09:52:07 UTC",
            "url": "http://123.129.132.231:58769/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811037/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811036": [
        {
            "dateadded": "2026-04-04 09:45:24 UTC",
            "url": "http://182.117.50.126:56668/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811036/",
            "reporter": "geenensp"
        }
    ],
    "3811035": [
        {
            "dateadded": "2026-04-04 09:41:20 UTC",
            "url": "http://182.116.34.160:49543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:58:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811035/",
            "reporter": "geenensp"
        }
    ],
    "3811034": [
        {
            "dateadded": "2026-04-04 09:37:19 UTC",
            "url": "http://112.225.177.204:35879/i",
            "url_status": "offline",
            "last_online": "2026-04-24 05:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811034/",
            "reporter": "geenensp"
        }
    ],
    "3811033": [
        {
            "dateadded": "2026-04-04 09:36:25 UTC",
            "url": "http://27.37.107.127:43364/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:33:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811033/",
            "reporter": "geenensp"
        }
    ],
    "3811032": [
        {
            "dateadded": "2026-04-04 09:32:10 UTC",
            "url": "http://123.129.132.231:58769/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:44:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811032/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811031": [
        {
            "dateadded": "2026-04-04 09:27:09 UTC",
            "url": "http://45.166.191.8:57602/i",
            "url_status": "offline",
            "last_online": "2026-04-04 21:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811031/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811030": [
        {
            "dateadded": "2026-04-04 09:20:19 UTC",
            "url": "http://115.50.227.28:40996/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:25:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811030/",
            "reporter": "geenensp"
        }
    ],
    "3811029": [
        {
            "dateadded": "2026-04-04 09:12:37 UTC",
            "url": "http://112.225.177.204:35879/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-24 05:02:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811029/",
            "reporter": "geenensp"
        }
    ],
    "3811028": [
        {
            "dateadded": "2026-04-04 09:07:05 UTC",
            "url": "http://46.163.134.250:51748/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:46:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811028/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811027": [
        {
            "dateadded": "2026-04-04 09:06:18 UTC",
            "url": "http://222.127.154.221:37931/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811027/",
            "reporter": "geenensp"
        }
    ],
    "3811026": [
        {
            "dateadded": "2026-04-04 08:52:06 UTC",
            "url": "http://46.163.134.250:51748/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:36:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811026/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811025": [
        {
            "dateadded": "2026-04-04 08:41:18 UTC",
            "url": "http://117.204.165.62:57258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 08:41:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811025/",
            "reporter": "geenensp"
        }
    ],
    "3811024": [
        {
            "dateadded": "2026-04-04 08:27:12 UTC",
            "url": "http://222.140.185.66:39667/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:58:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811024/",
            "reporter": "geenensp"
        }
    ],
    "3811023": [
        {
            "dateadded": "2026-04-04 07:55:19 UTC",
            "url": "http://182.121.164.108:59338/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:55:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811023/",
            "reporter": "geenensp"
        }
    ],
    "3811022": [
        {
            "dateadded": "2026-04-04 07:47:24 UTC",
            "url": "http://85.12.204.206:33689/i",
            "url_status": "offline",
            "last_online": "2026-04-19 05:09:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811022/",
            "reporter": "geenensp"
        }
    ],
    "3811021": [
        {
            "dateadded": "2026-04-04 07:39:25 UTC",
            "url": "http://175.147.198.32:55413/i",
            "url_status": "offline",
            "last_online": "2026-04-11 04:47:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811021/",
            "reporter": "geenensp"
        }
    ],
    "3811020": [
        {
            "dateadded": "2026-04-04 07:35:20 UTC",
            "url": "http://222.140.185.66:39667/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:01:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811020/",
            "reporter": "geenensp"
        }
    ],
    "3811019": [
        {
            "dateadded": "2026-04-04 07:26:19 UTC",
            "url": "http://42.230.68.209:46209/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:18:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811019/",
            "reporter": "geenensp"
        }
    ],
    "3811018": [
        {
            "dateadded": "2026-04-04 07:17:06 UTC",
            "url": "http://5.59.107.34:59729/i",
            "url_status": "offline",
            "last_online": "2026-04-20 17:35:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811018/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811016": [
        {
            "dateadded": "2026-04-04 07:15:19 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1Rn-DtNEs_17qddGnq8xjdQjXu57JF7oV",
            "url_status": "offline",
            "last_online": "2026-04-04 10:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "SilentNet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811016/",
            "reporter": "burger"
        }
    ],
    "3811015": [
        {
            "dateadded": "2026-04-04 07:15:14 UTC",
            "url": "https://preziosamagazines.cc/api/agent/download/69cce9bcd01476be56868ba0?type=vbs",
            "url_status": "offline",
            "last_online": "2026-04-04 17:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "RodexRMM"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811015/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3811012": [
        {
            "dateadded": "2026-04-04 07:12:22 UTC",
            "url": "https://preziosamagazines.cc/api/agent/download/69cce9bcd01476be56868ba0?type=exe",
            "url_status": "offline",
            "last_online": "2026-04-04 15:47:21 UTC",
            "threat": "malware_download",
            "tags": [
                "RodexRMM"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811012/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3811011": [
        {
            "dateadded": "2026-04-04 07:12:11 UTC",
            "url": "https://xx.kak.is/_clkfx/lnk1.txt",
            "url_status": "offline",
            "last_online": "2026-04-04 07:12:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811011/",
            "reporter": "anonymous"
        }
    ],
    "3811010": [
        {
            "dateadded": "2026-04-04 07:11:14 UTC",
            "url": "http://175.147.198.32:55413/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 04:33:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811010/",
            "reporter": "geenensp"
        }
    ],
    "3811009": [
        {
            "dateadded": "2026-04-04 07:09:26 UTC",
            "url": "http://27.215.84.165:35982/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:25:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811009/",
            "reporter": "geenensp"
        }
    ],
    "3811008": [
        {
            "dateadded": "2026-04-04 07:02:08 UTC",
            "url": "http://38.52.142.194:47317/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811008/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811007": [
        {
            "dateadded": "2026-04-04 06:58:24 UTC",
            "url": "http://42.230.68.209:46209/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:52:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811007/",
            "reporter": "geenensp"
        }
    ],
    "3811006": [
        {
            "dateadded": "2026-04-04 06:47:07 UTC",
            "url": "http://5.59.107.34:59729/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 10:54:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811006/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811005": [
        {
            "dateadded": "2026-04-04 06:41:19 UTC",
            "url": "http://42.224.22.160:44314/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:57:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811005/",
            "reporter": "geenensp"
        }
    ],
    "3811004": [
        {
            "dateadded": "2026-04-04 06:31:18 UTC",
            "url": "http://123.11.77.0:52576/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:04:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811004/",
            "reporter": "geenensp"
        }
    ],
    "3811003": [
        {
            "dateadded": "2026-04-04 06:27:07 UTC",
            "url": "http://196.189.98.77:42106/i",
            "url_status": "offline",
            "last_online": "2026-04-04 06:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811003/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811002": [
        {
            "dateadded": "2026-04-04 06:17:16 UTC",
            "url": "http://5.175.223.249/t.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811002/",
            "reporter": "botnetkiller"
        }
    ],
    "3811001": [
        {
            "dateadded": "2026-04-04 06:12:06 UTC",
            "url": "http://196.189.98.77:42106/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 06:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811001/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3811000": [
        {
            "dateadded": "2026-04-04 06:09:13 UTC",
            "url": "http://27.215.84.165:35982/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:59:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3811000/",
            "reporter": "geenensp"
        }
    ],
    "3810999": [
        {
            "dateadded": "2026-04-04 06:02:09 UTC",
            "url": "http://101.108.75.66:41130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810999/",
            "reporter": "geenensp"
        }
    ],
    "3810998": [
        {
            "dateadded": "2026-04-04 06:02:06 UTC",
            "url": "http://222.137.144.215:47891/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:39:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810998/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810997": [
        {
            "dateadded": "2026-04-04 05:48:12 UTC",
            "url": "http://222.137.144.215:47891/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:58:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810997/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810994": [
        {
            "dateadded": "2026-04-04 05:47:07 UTC",
            "url": "http://182.127.5.163:47285/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810994/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810995": [
        {
            "dateadded": "2026-04-04 05:47:07 UTC",
            "url": "http://115.55.163.38:50687/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:41:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810995/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810996": [
        {
            "dateadded": "2026-04-04 05:47:07 UTC",
            "url": "http://38.52.142.194:47317/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810996/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810993": [
        {
            "dateadded": "2026-04-04 05:38:11 UTC",
            "url": "http://113.94.31.173:56330/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810993/",
            "reporter": "geenensp"
        }
    ],
    "3810992": [
        {
            "dateadded": "2026-04-04 05:31:18 UTC",
            "url": "http://101.108.75.66:41130/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810992/",
            "reporter": "geenensp"
        }
    ],
    "3810991": [
        {
            "dateadded": "2026-04-04 05:20:12 UTC",
            "url": "http://59.96.143.217:35886/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 05:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810991/",
            "reporter": "geenensp"
        }
    ],
    "3810989": [
        {
            "dateadded": "2026-04-04 05:17:09 UTC",
            "url": "http://182.127.5.163:47285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:58:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810989/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810990": [
        {
            "dateadded": "2026-04-04 05:17:09 UTC",
            "url": "http://115.55.163.38:50687/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810990/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810988": [
        {
            "dateadded": "2026-04-04 05:16:18 UTC",
            "url": "http://119.117.255.165:54237/i",
            "url_status": "offline",
            "last_online": "2026-04-06 15:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810988/",
            "reporter": "geenensp"
        }
    ],
    "3810987": [
        {
            "dateadded": "2026-04-04 05:05:11 UTC",
            "url": "http://175.148.214.98:41376/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:45:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810987/",
            "reporter": "geenensp"
        }
    ],
    "3810986": [
        {
            "dateadded": "2026-04-04 04:44:17 UTC",
            "url": "http://200.59.83.43:53978/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:33:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810986/",
            "reporter": "geenensp"
        }
    ],
    "3810985": [
        {
            "dateadded": "2026-04-04 04:40:29 UTC",
            "url": "http://175.148.214.98:41376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:14:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810985/",
            "reporter": "geenensp"
        }
    ],
    "3810984": [
        {
            "dateadded": "2026-04-04 04:39:27 UTC",
            "url": "http://119.117.255.165:54237/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:48:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810984/",
            "reporter": "geenensp"
        }
    ],
    "3810983": [
        {
            "dateadded": "2026-04-04 04:36:16 UTC",
            "url": "http://115.58.143.228:54558/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:20:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810983/",
            "reporter": "geenensp"
        }
    ],
    "3810982": [
        {
            "dateadded": "2026-04-04 04:20:17 UTC",
            "url": "http://105.186.209.84:36247/i",
            "url_status": "offline",
            "last_online": "2026-04-04 21:34:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810982/",
            "reporter": "geenensp"
        }
    ],
    "3810981": [
        {
            "dateadded": "2026-04-04 04:19:21 UTC",
            "url": "http://105.187.27.211:41823/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810981/",
            "reporter": "geenensp"
        }
    ],
    "3810980": [
        {
            "dateadded": "2026-04-04 04:15:20 UTC",
            "url": "http://112.239.102.211:46215/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:29:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810980/",
            "reporter": "geenensp"
        }
    ],
    "3810979": [
        {
            "dateadded": "2026-04-04 04:11:21 UTC",
            "url": "http://105.186.76.78:52139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:16:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810979/",
            "reporter": "geenensp"
        }
    ],
    "3810978": [
        {
            "dateadded": "2026-04-04 04:03:24 UTC",
            "url": "http://200.59.83.43:53978/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810978/",
            "reporter": "geenensp"
        }
    ],
    "3810977": [
        {
            "dateadded": "2026-04-04 03:59:37 UTC",
            "url": "http://112.239.102.211:46215/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:47:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810977/",
            "reporter": "geenensp"
        }
    ],
    "3810976": [
        {
            "dateadded": "2026-04-04 03:54:24 UTC",
            "url": "http://39.90.146.10:42613/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810976/",
            "reporter": "geenensp"
        }
    ],
    "3810975": [
        {
            "dateadded": "2026-04-04 03:47:08 UTC",
            "url": "http://117.206.31.192:36642/i",
            "url_status": "offline",
            "last_online": "2026-04-04 03:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810975/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810974": [
        {
            "dateadded": "2026-04-04 03:42:18 UTC",
            "url": "http://105.186.209.84:36247/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:47:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810974/",
            "reporter": "geenensp"
        }
    ],
    "3810973": [
        {
            "dateadded": "2026-04-04 03:41:21 UTC",
            "url": "http://196.189.9.233:51813/i",
            "url_status": "offline",
            "last_online": "2026-04-04 21:56:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810973/",
            "reporter": "geenensp"
        }
    ],
    "3810971": [
        {
            "dateadded": "2026-04-04 03:40:09 UTC",
            "url": "http://91.244.71.53/arm",
            "url_status": "offline",
            "last_online": "2026-04-04 08:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810971/",
            "reporter": "botnetkiller"
        }
    ],
    "3810972": [
        {
            "dateadded": "2026-04-04 03:40:09 UTC",
            "url": "http://125.41.244.29:55279/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:49:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810972/",
            "reporter": "geenensp"
        }
    ],
    "3810969": [
        {
            "dateadded": "2026-04-04 03:40:08 UTC",
            "url": "http://91.244.71.53/ppc",
            "url_status": "offline",
            "last_online": "2026-04-04 07:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810969/",
            "reporter": "botnetkiller"
        }
    ],
    "3810970": [
        {
            "dateadded": "2026-04-04 03:40:08 UTC",
            "url": "http://91.244.71.53/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-04 07:38:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810970/",
            "reporter": "botnetkiller"
        }
    ],
    "3810963": [
        {
            "dateadded": "2026-04-04 03:39:23 UTC",
            "url": "http://91.244.71.53/linnn",
            "url_status": "offline",
            "last_online": "2026-04-04 03:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810963/",
            "reporter": "botnetkiller"
        }
    ],
    "3810964": [
        {
            "dateadded": "2026-04-04 03:39:23 UTC",
            "url": "http://91.244.71.53/m68k",
            "url_status": "offline",
            "last_online": "2026-04-04 07:19:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810964/",
            "reporter": "botnetkiller"
        }
    ],
    "3810965": [
        {
            "dateadded": "2026-04-04 03:39:23 UTC",
            "url": "http://91.244.71.53/mips",
            "url_status": "offline",
            "last_online": "2026-04-04 07:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810965/",
            "reporter": "botnetkiller"
        }
    ],
    "3810966": [
        {
            "dateadded": "2026-04-04 03:39:23 UTC",
            "url": "http://91.244.71.53/sh4",
            "url_status": "offline",
            "last_online": "2026-04-04 07:24:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810966/",
            "reporter": "botnetkiller"
        }
    ],
    "3810967": [
        {
            "dateadded": "2026-04-04 03:39:23 UTC",
            "url": "http://91.244.71.53/arm7",
            "url_status": "offline",
            "last_online": "2026-04-04 07:37:42 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810967/",
            "reporter": "botnetkiller"
        }
    ],
    "3810968": [
        {
            "dateadded": "2026-04-04 03:39:23 UTC",
            "url": "http://91.244.71.53/arm6",
            "url_status": "offline",
            "last_online": "2026-04-04 07:29:41 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810968/",
            "reporter": "botnetkiller"
        }
    ],
    "3810962": [
        {
            "dateadded": "2026-04-04 03:39:22 UTC",
            "url": "http://91.244.71.53/arm5",
            "url_status": "offline",
            "last_online": "2026-04-04 07:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810962/",
            "reporter": "botnetkiller"
        }
    ],
    "3810961": [
        {
            "dateadded": "2026-04-04 03:37:22 UTC",
            "url": "http://180.252.216.66:35218/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:18:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810961/",
            "reporter": "geenensp"
        }
    ],
    "3810960": [
        {
            "dateadded": "2026-04-04 03:36:23 UTC",
            "url": "http://91.244.71.53/bins/arm5",
            "url_status": "offline",
            "last_online": "2026-04-04 07:09:47 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810960/",
            "reporter": "botnetkiller"
        }
    ],
    "3810959": [
        {
            "dateadded": "2026-04-04 03:35:19 UTC",
            "url": "http://222.139.98.160:56004/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:59:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810959/",
            "reporter": "geenensp"
        }
    ],
    "3810958": [
        {
            "dateadded": "2026-04-04 03:33:23 UTC",
            "url": "http://123.14.177.53:55488/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:20:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810958/",
            "reporter": "geenensp"
        }
    ],
    "3810957": [
        {
            "dateadded": "2026-04-04 03:33:17 UTC",
            "url": "http://162.255.251.91:37771/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:58:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810957/",
            "reporter": "geenensp"
        }
    ],
    "3810956": [
        {
            "dateadded": "2026-04-04 03:29:18 UTC",
            "url": "http://123.12.46.208:44574/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:58:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810956/",
            "reporter": "geenensp"
        }
    ],
    "3810955": [
        {
            "dateadded": "2026-04-04 03:27:12 UTC",
            "url": "http://117.206.31.192:36642/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810955/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810954": [
        {
            "dateadded": "2026-04-04 03:27:07 UTC",
            "url": "http://72.255.29.8:35181/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810954/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810953": [
        {
            "dateadded": "2026-04-04 03:25:18 UTC",
            "url": "http://182.119.57.50:49629/i",
            "url_status": "offline",
            "last_online": "2026-04-04 08:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810953/",
            "reporter": "geenensp"
        }
    ],
    "3810952": [
        {
            "dateadded": "2026-04-04 03:20:09 UTC",
            "url": "http://117.192.121.248:49639/i",
            "url_status": "offline",
            "last_online": "2026-04-04 03:41:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810952/",
            "reporter": "geenensp"
        }
    ],
    "3810951": [
        {
            "dateadded": "2026-04-04 03:19:15 UTC",
            "url": "http://196.190.105.170:41391/i",
            "url_status": "offline",
            "last_online": "2026-04-04 08:03:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810951/",
            "reporter": "geenensp"
        }
    ],
    "3810950": [
        {
            "dateadded": "2026-04-04 03:18:20 UTC",
            "url": "http://59.88.129.55:54807/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:18:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810950/",
            "reporter": "geenensp"
        }
    ],
    "3810949": [
        {
            "dateadded": "2026-04-04 03:15:21 UTC",
            "url": "http://180.252.216.66:35218/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:18:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810949/",
            "reporter": "geenensp"
        }
    ],
    "3810948": [
        {
            "dateadded": "2026-04-04 03:15:17 UTC",
            "url": "http://39.90.146.10:42613/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:29:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810948/",
            "reporter": "geenensp"
        }
    ],
    "3810947": [
        {
            "dateadded": "2026-04-04 03:12:18 UTC",
            "url": "http://125.41.244.29:55279/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 02:57:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810947/",
            "reporter": "geenensp"
        }
    ],
    "3810946": [
        {
            "dateadded": "2026-04-04 03:12:17 UTC",
            "url": "http://196.189.9.233:51813/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:47:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810946/",
            "reporter": "geenensp"
        }
    ],
    "3810945": [
        {
            "dateadded": "2026-04-04 03:11:20 UTC",
            "url": "http://182.119.57.50:49629/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 08:07:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810945/",
            "reporter": "geenensp"
        }
    ],
    "3810944": [
        {
            "dateadded": "2026-04-04 03:11:18 UTC",
            "url": "http://156.229.118.146:38281/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810944/",
            "reporter": "geenensp"
        }
    ],
    "3810943": [
        {
            "dateadded": "2026-04-04 03:06:20 UTC",
            "url": "http://123.12.46.208:44574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810943/",
            "reporter": "geenensp"
        }
    ],
    "3810941": [
        {
            "dateadded": "2026-04-04 03:05:20 UTC",
            "url": "http://162.255.251.91:37771/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:45:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810941/",
            "reporter": "geenensp"
        }
    ],
    "3810942": [
        {
            "dateadded": "2026-04-04 03:05:20 UTC",
            "url": "http://123.14.177.53:55488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:41:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810942/",
            "reporter": "geenensp"
        }
    ],
    "3810940": [
        {
            "dateadded": "2026-04-04 03:04:11 UTC",
            "url": "http://222.139.98.160:56004/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:02:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810940/",
            "reporter": "geenensp"
        }
    ],
    "3810939": [
        {
            "dateadded": "2026-04-04 03:00:08 UTC",
            "url": "http://125.40.0.118:47487/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:51:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810939/",
            "reporter": "geenensp"
        }
    ],
    "3810938": [
        {
            "dateadded": "2026-04-04 02:57:18 UTC",
            "url": "http://117.192.121.248:49639/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:55:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810938/",
            "reporter": "geenensp"
        }
    ],
    "3810937": [
        {
            "dateadded": "2026-04-04 02:57:11 UTC",
            "url": "http://91.244.71.53/bins/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-04 07:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810937/",
            "reporter": "botnetkiller"
        }
    ],
    "3810936": [
        {
            "dateadded": "2026-04-04 02:52:07 UTC",
            "url": "http://115.54.126.238:37286/i",
            "url_status": "offline",
            "last_online": "2026-04-04 02:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810936/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810935": [
        {
            "dateadded": "2026-04-04 02:46:10 UTC",
            "url": "http://124.95.40.217:38819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 02:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810935/",
            "reporter": "geenensp"
        }
    ],
    "3810933": [
        {
            "dateadded": "2026-04-04 02:36:19 UTC",
            "url": "http://222.127.154.221:37931/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 09:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810933/",
            "reporter": "geenensp"
        }
    ],
    "3810934": [
        {
            "dateadded": "2026-04-04 02:36:19 UTC",
            "url": "http://117.26.226.210:56557/i",
            "url_status": "offline",
            "last_online": "2026-04-04 02:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810934/",
            "reporter": "geenensp"
        }
    ],
    "3810932": [
        {
            "dateadded": "2026-04-04 02:33:08 UTC",
            "url": "http://117.241.219.214:44261/i",
            "url_status": "offline",
            "last_online": "2026-04-04 02:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810932/",
            "reporter": "geenensp"
        }
    ],
    "3810931": [
        {
            "dateadded": "2026-04-04 02:32:20 UTC",
            "url": "http://125.40.0.118:47487/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:02:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810931/",
            "reporter": "geenensp"
        }
    ],
    "3810930": [
        {
            "dateadded": "2026-04-04 02:20:19 UTC",
            "url": "http://125.161.249.66:45857/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:16:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810930/",
            "reporter": "geenensp"
        }
    ],
    "3810929": [
        {
            "dateadded": "2026-04-04 02:19:33 UTC",
            "url": "http://125.43.127.6:38799/Mozi.m",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "Mozi",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810929/",
            "reporter": "botnetkiller"
        }
    ],
    "3810928": [
        {
            "dateadded": "2026-04-04 02:17:08 UTC",
            "url": "http://123.14.246.160:35476/i",
            "url_status": "offline",
            "last_online": "2026-04-04 03:28:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810928/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810927": [
        {
            "dateadded": "2026-04-04 02:16:10 UTC",
            "url": "http://176.65.139.42:8080/apt0.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 21:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810927/",
            "reporter": "botnetkiller"
        }
    ],
    "3810925": [
        {
            "dateadded": "2026-04-04 02:14:08 UTC",
            "url": "http://45.153.34.175/arm4",
            "url_status": "offline",
            "last_online": "2026-04-04 02:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810925/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810926": [
        {
            "dateadded": "2026-04-04 02:14:08 UTC",
            "url": "http://45.153.34.175/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-04 02:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810926/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810924": [
        {
            "dateadded": "2026-04-04 02:13:18 UTC",
            "url": "http://45.153.34.175/arm7",
            "url_status": "offline",
            "last_online": "2026-04-04 02:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810924/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810923": [
        {
            "dateadded": "2026-04-04 02:13:17 UTC",
            "url": "http://45.153.34.175/arm6",
            "url_status": "offline",
            "last_online": "2026-04-04 02:13:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810923/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810921": [
        {
            "dateadded": "2026-04-04 02:13:15 UTC",
            "url": "http://45.153.34.175/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-04 02:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810921/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810922": [
        {
            "dateadded": "2026-04-04 02:13:15 UTC",
            "url": "http://45.153.34.175/x86",
            "url_status": "offline",
            "last_online": "2026-04-04 02:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810922/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810919": [
        {
            "dateadded": "2026-04-04 02:13:12 UTC",
            "url": "http://45.153.34.175/mips",
            "url_status": "offline",
            "last_online": "2026-04-04 02:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810919/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810920": [
        {
            "dateadded": "2026-04-04 02:13:12 UTC",
            "url": "http://45.153.34.175/arm5",
            "url_status": "offline",
            "last_online": "2026-04-04 02:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810920/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810918": [
        {
            "dateadded": "2026-04-04 02:08:16 UTC",
            "url": "http://42.224.22.160:44314/i",
            "url_status": "offline",
            "last_online": "2026-04-04 17:01:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810918/",
            "reporter": "geenensp"
        }
    ],
    "3810917": [
        {
            "dateadded": "2026-04-04 02:00:17 UTC",
            "url": "http://117.241.219.214:44261/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 02:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810917/",
            "reporter": "geenensp"
        }
    ],
    "3810916": [
        {
            "dateadded": "2026-04-04 01:59:19 UTC",
            "url": "http://31.132.231.215:58266/i",
            "url_status": "offline",
            "last_online": "2026-04-04 01:59:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810916/",
            "reporter": "geenensp"
        }
    ],
    "3810915": [
        {
            "dateadded": "2026-04-04 01:52:08 UTC",
            "url": "http://123.14.246.160:35476/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 04:23:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810915/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810914": [
        {
            "dateadded": "2026-04-04 01:40:20 UTC",
            "url": "http://105.184.244.54:50891/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810914/",
            "reporter": "geenensp"
        }
    ],
    "3810913": [
        {
            "dateadded": "2026-04-04 01:34:20 UTC",
            "url": "http://31.132.231.215:58266/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 01:34:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810913/",
            "reporter": "geenensp"
        }
    ],
    "3810912": [
        {
            "dateadded": "2026-04-04 01:32:20 UTC",
            "url": "http://175.165.80.251:34901/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:13:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810912/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810911": [
        {
            "dateadded": "2026-04-04 01:09:20 UTC",
            "url": "http://117.205.92.162:46969/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810911/",
            "reporter": "geenensp"
        }
    ],
    "3810909": [
        {
            "dateadded": "2026-04-04 01:04:09 UTC",
            "url": "http://110.37.39.129:47038/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810909/",
            "reporter": "geenensp"
        }
    ],
    "3810910": [
        {
            "dateadded": "2026-04-04 01:04:09 UTC",
            "url": "http://42.226.71.194:34944/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810910/",
            "reporter": "geenensp"
        }
    ],
    "3810908": [
        {
            "dateadded": "2026-04-04 01:01:16 UTC",
            "url": "http://42.230.39.28:35105/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810908/",
            "reporter": "geenensp"
        }
    ],
    "3810907": [
        {
            "dateadded": "2026-04-04 01:00:20 UTC",
            "url": "http://182.116.50.155:41497/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:56:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810907/",
            "reporter": "geenensp"
        }
    ],
    "3810906": [
        {
            "dateadded": "2026-04-04 00:58:16 UTC",
            "url": "http://85.226.212.168:51430/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810906/",
            "reporter": "geenensp"
        }
    ],
    "3810905": [
        {
            "dateadded": "2026-04-04 00:47:11 UTC",
            "url": "http://182.121.195.225:55643/i",
            "url_status": "offline",
            "last_online": "2026-04-04 00:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810905/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810904": [
        {
            "dateadded": "2026-04-04 00:42:07 UTC",
            "url": "http://27.222.44.125:38293/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 03:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810904/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810903": [
        {
            "dateadded": "2026-04-04 00:40:19 UTC",
            "url": "http://60.3.44.167:59151/i",
            "url_status": "offline",
            "last_online": "2026-04-07 11:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810903/",
            "reporter": "geenensp"
        }
    ],
    "3810902": [
        {
            "dateadded": "2026-04-04 00:38:09 UTC",
            "url": "http://42.230.39.28:35105/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810902/",
            "reporter": "geenensp"
        }
    ],
    "3810901": [
        {
            "dateadded": "2026-04-04 00:35:20 UTC",
            "url": "http://182.116.50.155:41497/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810901/",
            "reporter": "geenensp"
        }
    ],
    "3810900": [
        {
            "dateadded": "2026-04-04 00:31:08 UTC",
            "url": "http://182.118.240.201:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810900/",
            "reporter": "geenensp"
        }
    ],
    "3810899": [
        {
            "dateadded": "2026-04-04 00:25:23 UTC",
            "url": "http://103.63.231.168:44606/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810899/",
            "reporter": "geenensp"
        }
    ],
    "3810898": [
        {
            "dateadded": "2026-04-04 00:25:21 UTC",
            "url": "http://85.226.212.168:51430/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810898/",
            "reporter": "geenensp"
        }
    ],
    "3810897": [
        {
            "dateadded": "2026-04-04 00:15:10 UTC",
            "url": "http://42.226.71.194:34944/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810897/",
            "reporter": "geenensp"
        }
    ],
    "3810896": [
        {
            "dateadded": "2026-04-04 00:09:25 UTC",
            "url": "http://60.3.44.167:59151/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 17:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810896/",
            "reporter": "geenensp"
        }
    ],
    "3810895": [
        {
            "dateadded": "2026-04-04 00:04:16 UTC",
            "url": "http://110.37.39.129:47038/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:50:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810895/",
            "reporter": "geenensp"
        }
    ],
    "3810894": [
        {
            "dateadded": "2026-04-03 23:57:07 UTC",
            "url": "http://170.244.180.22:60885/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:59:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810894/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810892": [
        {
            "dateadded": "2026-04-03 23:57:06 UTC",
            "url": "http://119.179.238.229:46840/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:39:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810892/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810893": [
        {
            "dateadded": "2026-04-03 23:57:06 UTC",
            "url": "http://27.215.77.105:42770/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810893/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810891": [
        {
            "dateadded": "2026-04-03 23:48:17 UTC",
            "url": "http://115.63.200.200:57273/i",
            "url_status": "offline",
            "last_online": "2026-04-03 23:48:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810891/",
            "reporter": "geenensp"
        }
    ],
    "3810890": [
        {
            "dateadded": "2026-04-03 23:47:10 UTC",
            "url": "http://45.153.34.161:8080/apt0.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 23:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810890/",
            "reporter": "botnetkiller"
        }
    ],
    "3810889": [
        {
            "dateadded": "2026-04-03 23:46:17 UTC",
            "url": "http://110.36.70.136:48297/i",
            "url_status": "offline",
            "last_online": "2026-04-04 20:52:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810889/",
            "reporter": "geenensp"
        }
    ],
    "3810888": [
        {
            "dateadded": "2026-04-03 23:45:12 UTC",
            "url": "http://27.37.108.110:42841/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:58:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810888/",
            "reporter": "geenensp"
        }
    ],
    "3810887": [
        {
            "dateadded": "2026-04-03 23:37:08 UTC",
            "url": "http://119.179.238.229:46840/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810887/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810886": [
        {
            "dateadded": "2026-04-03 23:37:07 UTC",
            "url": "http://119.185.158.1:52275/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:07:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810886/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810885": [
        {
            "dateadded": "2026-04-03 23:32:07 UTC",
            "url": "http://95.9.35.137:44304/i",
            "url_status": "offline",
            "last_online": "2026-04-06 11:53:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810885/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810884": [
        {
            "dateadded": "2026-04-03 23:31:39 UTC",
            "url": "http://112.253.117.78:51454/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810884/",
            "reporter": "geenensp"
        }
    ],
    "3810883": [
        {
            "dateadded": "2026-04-03 23:29:13 UTC",
            "url": "http://123.235.72.116:57923/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 10:24:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810883/",
            "reporter": "geenensp"
        }
    ],
    "3810882": [
        {
            "dateadded": "2026-04-03 23:17:06 UTC",
            "url": "http://125.41.106.222:44249/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810882/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810881": [
        {
            "dateadded": "2026-04-03 23:16:11 UTC",
            "url": "http://110.36.70.136:48297/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810881/",
            "reporter": "geenensp"
        }
    ],
    "3810879": [
        {
            "dateadded": "2026-04-03 23:12:07 UTC",
            "url": "http://125.41.106.222:44249/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810879/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810880": [
        {
            "dateadded": "2026-04-03 23:12:07 UTC",
            "url": "http://119.185.158.1:52275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:09:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810880/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810877": [
        {
            "dateadded": "2026-04-03 23:12:06 UTC",
            "url": "http://95.9.35.137:44304/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 12:36:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810877/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810878": [
        {
            "dateadded": "2026-04-03 23:12:06 UTC",
            "url": "http://182.127.167.135:35866/i",
            "url_status": "offline",
            "last_online": "2026-04-03 23:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810878/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810876": [
        {
            "dateadded": "2026-04-03 23:11:18 UTC",
            "url": "http://115.63.200.200:57273/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 23:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810876/",
            "reporter": "geenensp"
        }
    ],
    "3810875": [
        {
            "dateadded": "2026-04-03 23:09:09 UTC",
            "url": "http://110.37.68.195:49535/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810875/",
            "reporter": "geenensp"
        }
    ],
    "3810874": [
        {
            "dateadded": "2026-04-03 23:08:16 UTC",
            "url": "http://110.37.68.195:49535/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810874/",
            "reporter": "geenensp"
        }
    ],
    "3810873": [
        {
            "dateadded": "2026-04-03 22:53:22 UTC",
            "url": "http://175.146.87.186:50595/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810873/",
            "reporter": "geenensp"
        }
    ],
    "3810872": [
        {
            "dateadded": "2026-04-03 22:52:08 UTC",
            "url": "http://182.127.167.135:35866/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810872/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810871": [
        {
            "dateadded": "2026-04-03 22:36:22 UTC",
            "url": "http://123.7.239.121:39726/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:39:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810871/",
            "reporter": "geenensp"
        }
    ],
    "3810870": [
        {
            "dateadded": "2026-04-03 22:30:20 UTC",
            "url": "http://115.58.143.228:54558/i",
            "url_status": "offline",
            "last_online": "2026-04-04 11:07:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810870/",
            "reporter": "geenensp"
        }
    ],
    "3810869": [
        {
            "dateadded": "2026-04-03 22:27:08 UTC",
            "url": "http://59.97.249.189:38137/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810869/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810868": [
        {
            "dateadded": "2026-04-03 22:17:21 UTC",
            "url": "http://36.70.33.7:35382/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:17:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810868/",
            "reporter": "geenensp"
        }
    ],
    "3810867": [
        {
            "dateadded": "2026-04-03 22:16:21 UTC",
            "url": "http://115.63.14.247:52744/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810867/",
            "reporter": "geenensp"
        }
    ],
    "3810865": [
        {
            "dateadded": "2026-04-03 22:09:19 UTC",
            "url": "http://60.162.206.206:43250/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:53:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810865/",
            "reporter": "geenensp"
        }
    ],
    "3810866": [
        {
            "dateadded": "2026-04-03 22:09:19 UTC",
            "url": "http://123.7.239.121:39726/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810866/",
            "reporter": "geenensp"
        }
    ],
    "3810864": [
        {
            "dateadded": "2026-04-03 22:01:18 UTC",
            "url": "http://101.109.236.218:59787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 05:04:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810864/",
            "reporter": "geenensp"
        }
    ],
    "3810863": [
        {
            "dateadded": "2026-04-03 21:58:39 UTC",
            "url": "http://106.59.120.149:40649/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810863/",
            "reporter": "geenensp"
        }
    ],
    "3810862": [
        {
            "dateadded": "2026-04-03 21:42:21 UTC",
            "url": "http://60.162.206.206:43250/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 17:26:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810862/",
            "reporter": "geenensp"
        }
    ],
    "3810861": [
        {
            "dateadded": "2026-04-03 21:27:06 UTC",
            "url": "http://105.186.204.59:52383/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810861/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810860": [
        {
            "dateadded": "2026-04-03 21:25:19 UTC",
            "url": "http://103.245.195.38:36912/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810860/",
            "reporter": "geenensp"
        }
    ],
    "3810859": [
        {
            "dateadded": "2026-04-03 21:12:07 UTC",
            "url": "http://105.186.204.59:52383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810859/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810858": [
        {
            "dateadded": "2026-04-03 21:12:06 UTC",
            "url": "http://65.99.181.12:49304/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810858/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810857": [
        {
            "dateadded": "2026-04-03 21:05:08 UTC",
            "url": "http://123.14.36.191:50947/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:16:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810857/",
            "reporter": "geenensp"
        }
    ],
    "3810856": [
        {
            "dateadded": "2026-04-03 21:02:18 UTC",
            "url": "http://117.205.168.128:50851/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:32:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810856/",
            "reporter": "geenensp"
        }
    ],
    "3810855": [
        {
            "dateadded": "2026-04-03 21:02:16 UTC",
            "url": "http://103.245.195.38:36912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:04:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810855/",
            "reporter": "geenensp"
        }
    ],
    "3810853": [
        {
            "dateadded": "2026-04-03 20:40:18 UTC",
            "url": "http://125.167.189.139:50290/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:09:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810853/",
            "reporter": "geenensp"
        }
    ],
    "3810854": [
        {
            "dateadded": "2026-04-03 20:40:18 UTC",
            "url": "http://59.96.140.247:55099/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:27:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810854/",
            "reporter": "geenensp"
        }
    ],
    "3810852": [
        {
            "dateadded": "2026-04-03 20:39:21 UTC",
            "url": "http://94.156.166.84:57307/i",
            "url_status": "offline",
            "last_online": "2026-04-03 20:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810852/",
            "reporter": "geenensp"
        }
    ],
    "3810851": [
        {
            "dateadded": "2026-04-03 20:33:16 UTC",
            "url": "http://110.139.32.232:58976/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810851/",
            "reporter": "geenensp"
        }
    ],
    "3810850": [
        {
            "dateadded": "2026-04-03 20:30:22 UTC",
            "url": "http://123.14.36.191:50947/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 07:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810850/",
            "reporter": "geenensp"
        }
    ],
    "3810849": [
        {
            "dateadded": "2026-04-03 20:30:21 UTC",
            "url": "http://42.234.204.17:33134/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:43:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810849/",
            "reporter": "geenensp"
        }
    ],
    "3810848": [
        {
            "dateadded": "2026-04-03 20:29:09 UTC",
            "url": "http://87.121.112.57/dipndotsk",
            "url_status": "online",
            "last_online": "2026-04-27 11:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810848/",
            "reporter": "botnetkiller"
        }
    ],
    "3810847": [
        {
            "dateadded": "2026-04-03 20:18:24 UTC",
            "url": "http://219.157.63.131:58936/i",
            "url_status": "offline",
            "last_online": "2026-04-04 22:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810847/",
            "reporter": "geenensp"
        }
    ],
    "3810846": [
        {
            "dateadded": "2026-04-03 20:18:13 UTC",
            "url": "http://94.156.166.84:57307/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 20:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810846/",
            "reporter": "geenensp"
        }
    ],
    "3810845": [
        {
            "dateadded": "2026-04-03 20:18:05 UTC",
            "url": "http://85.239.147.6/files/Leetootoo/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810845/",
            "reporter": "c2hunter"
        }
    ],
    "3810844": [
        {
            "dateadded": "2026-04-03 20:10:24 UTC",
            "url": "http://170.239.144.160:51271/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:44:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810844/",
            "reporter": "geenensp"
        }
    ],
    "3810843": [
        {
            "dateadded": "2026-04-03 20:09:11 UTC",
            "url": "http://110.139.32.232:58976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810843/",
            "reporter": "geenensp"
        }
    ],
    "3810842": [
        {
            "dateadded": "2026-04-03 20:06:20 UTC",
            "url": "http://42.234.204.17:33134/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810842/",
            "reporter": "geenensp"
        }
    ],
    "3810841": [
        {
            "dateadded": "2026-04-03 20:02:07 UTC",
            "url": "http://117.209.16.233:48305/i",
            "url_status": "offline",
            "last_online": "2026-04-03 20:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810841/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810840": [
        {
            "dateadded": "2026-04-03 19:52:05 UTC",
            "url": "http://85.12.229.54:60779/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:25:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810840/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810839": [
        {
            "dateadded": "2026-04-03 19:35:16 UTC",
            "url": "http://85.12.251.50:39891/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810839/",
            "reporter": "geenensp"
        }
    ],
    "3810838": [
        {
            "dateadded": "2026-04-03 19:33:17 UTC",
            "url": "http://196.190.69.149:56763/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:43:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810838/",
            "reporter": "geenensp"
        }
    ],
    "3810836": [
        {
            "dateadded": "2026-04-03 19:33:16 UTC",
            "url": "http://45.92.1.50/rondo.aqg.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810836/",
            "reporter": "NDA0E"
        }
    ],
    "3810835": [
        {
            "dateadded": "2026-04-03 19:20:19 UTC",
            "url": "http://27.215.53.172:51607/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:02:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810835/",
            "reporter": "geenensp"
        }
    ],
    "3810834": [
        {
            "dateadded": "2026-04-03 19:18:08 UTC",
            "url": "http://196.188.135.20:60445/i",
            "url_status": "offline",
            "last_online": "2026-04-03 19:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810834/",
            "reporter": "geenensp"
        }
    ],
    "3810833": [
        {
            "dateadded": "2026-04-03 19:14:09 UTC",
            "url": "http://60.214.240.96:47132/i",
            "url_status": "offline",
            "last_online": "2026-04-04 21:45:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810833/",
            "reporter": "geenensp"
        }
    ],
    "3810832": [
        {
            "dateadded": "2026-04-03 19:11:17 UTC",
            "url": "http://170.239.144.160:51271/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810832/",
            "reporter": "geenensp"
        }
    ],
    "3810831": [
        {
            "dateadded": "2026-04-03 19:08:09 UTC",
            "url": "http://196.190.69.149:56763/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810831/",
            "reporter": "geenensp"
        }
    ],
    "3810830": [
        {
            "dateadded": "2026-04-03 19:02:12 UTC",
            "url": "http://62.60.226.159/run.exe",
            "url_status": "offline",
            "last_online": "2026-04-09 22:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810830/",
            "reporter": "Bitsight"
        }
    ],
    "3810828": [
        {
            "dateadded": "2026-04-03 19:01:07 UTC",
            "url": "http://62.60.226.159/Psd8eZaW/Plugins/cred64.dll",
            "url_status": "offline",
            "last_online": "2026-04-04 21:48:36 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "Amadey",
                "cred64.dll",
                "dropped-by-amadey",
                "plugin"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810828/",
            "reporter": "Bitsight"
        }
    ],
    "3810829": [
        {
            "dateadded": "2026-04-03 19:01:07 UTC",
            "url": "http://62.60.226.159/Psd8eZaW/Plugins/cred.dll",
            "url_status": "offline",
            "last_online": "2026-04-05 04:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "282234",
                "Amadey",
                "cred.dll",
                "dropped-by-amadey",
                "plugin"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810829/",
            "reporter": "Bitsight"
        }
    ],
    "3810827": [
        {
            "dateadded": "2026-04-03 18:51:19 UTC",
            "url": "http://27.215.53.172:51607/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810827/",
            "reporter": "geenensp"
        }
    ],
    "3810826": [
        {
            "dateadded": "2026-04-03 18:28:07 UTC",
            "url": "http://123.11.78.220:39505/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:25:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810826/",
            "reporter": "geenensp"
        }
    ],
    "3810825": [
        {
            "dateadded": "2026-04-03 18:18:19 UTC",
            "url": "http://168.227.66.240:44373/i",
            "url_status": "offline",
            "last_online": "2026-04-03 18:18:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810825/",
            "reporter": "geenensp"
        }
    ],
    "3810824": [
        {
            "dateadded": "2026-04-03 18:12:16 UTC",
            "url": "http://110.37.72.176:41418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 18:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810824/",
            "reporter": "geenensp"
        }
    ],
    "3810823": [
        {
            "dateadded": "2026-04-03 18:11:16 UTC",
            "url": "http://168.227.66.240:44373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 18:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810823/",
            "reporter": "geenensp"
        }
    ],
    "3810822": [
        {
            "dateadded": "2026-04-03 18:03:21 UTC",
            "url": "http://87.121.112.57/dipndots",
            "url_status": "online",
            "last_online": "2026-04-27 11:32:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810822/",
            "reporter": "botnetkiller"
        }
    ],
    "3810821": [
        {
            "dateadded": "2026-04-03 18:02:19 UTC",
            "url": "http://123.11.78.220:39505/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810821/",
            "reporter": "geenensp"
        }
    ],
    "3810820": [
        {
            "dateadded": "2026-04-03 17:57:18 UTC",
            "url": "http://60.23.194.17:48843/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:37:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810820/",
            "reporter": "geenensp"
        }
    ],
    "3810819": [
        {
            "dateadded": "2026-04-03 17:52:07 UTC",
            "url": "http://115.55.191.129:45751/i",
            "url_status": "offline",
            "last_online": "2026-04-03 17:52:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810819/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810818": [
        {
            "dateadded": "2026-04-03 17:41:32 UTC",
            "url": "http://110.37.28.119:58071/i",
            "url_status": "offline",
            "last_online": "2026-04-04 03:31:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810818/",
            "reporter": "geenensp"
        }
    ],
    "3810816": [
        {
            "dateadded": "2026-04-03 17:36:19 UTC",
            "url": "http://119.179.238.14:54287/i",
            "url_status": "offline",
            "last_online": "2026-04-04 03:58:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810816/",
            "reporter": "geenensp"
        }
    ],
    "3810817": [
        {
            "dateadded": "2026-04-03 17:36:19 UTC",
            "url": "http://218.13.149.41:47684/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:45:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810817/",
            "reporter": "geenensp"
        }
    ],
    "3810815": [
        {
            "dateadded": "2026-04-03 17:35:16 UTC",
            "url": "http://60.23.194.17:48843/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810815/",
            "reporter": "geenensp"
        }
    ],
    "3810812": [
        {
            "dateadded": "2026-04-03 17:35:14 UTC",
            "url": "http://176.65.139.102/bins/yakuza.arm5",
            "url_status": "offline",
            "last_online": "2026-04-04 09:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810812/",
            "reporter": "tolisec"
        }
    ],
    "3810813": [
        {
            "dateadded": "2026-04-03 17:35:14 UTC",
            "url": "http://176.65.139.102/bins/yakuza.mips",
            "url_status": "offline",
            "last_online": "2026-04-04 10:02:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810813/",
            "reporter": "tolisec"
        }
    ],
    "3810814": [
        {
            "dateadded": "2026-04-03 17:35:14 UTC",
            "url": "http://176.65.139.102/bins/yakuza.arm",
            "url_status": "offline",
            "last_online": "2026-04-04 11:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810814/",
            "reporter": "tolisec"
        }
    ],
    "3810811": [
        {
            "dateadded": "2026-04-03 17:35:09 UTC",
            "url": "http://176.65.139.102/bins/yakuza.ppc",
            "url_status": "offline",
            "last_online": "2026-04-04 10:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810811/",
            "reporter": "tolisec"
        }
    ],
    "3810807": [
        {
            "dateadded": "2026-04-03 17:34:21 UTC",
            "url": "http://176.65.139.102/bins/yakuza.arm6",
            "url_status": "offline",
            "last_online": "2026-04-04 10:45:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810807/",
            "reporter": "tolisec"
        }
    ],
    "3810808": [
        {
            "dateadded": "2026-04-03 17:34:21 UTC",
            "url": "http://176.65.139.102/bins/yakuza.arm7",
            "url_status": "offline",
            "last_online": "2026-04-04 10:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810808/",
            "reporter": "tolisec"
        }
    ],
    "3810809": [
        {
            "dateadded": "2026-04-03 17:34:21 UTC",
            "url": "http://176.65.139.102/bins/yakuza.x86",
            "url_status": "offline",
            "last_online": "2026-04-04 15:34:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810809/",
            "reporter": "tolisec"
        }
    ],
    "3810810": [
        {
            "dateadded": "2026-04-03 17:34:21 UTC",
            "url": "http://176.65.139.102/bins/yakuza.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-04 10:00:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810810/",
            "reporter": "tolisec"
        }
    ],
    "3810806": [
        {
            "dateadded": "2026-04-03 17:29:13 UTC",
            "url": "http://180.253.222.93:39707/i",
            "url_status": "offline",
            "last_online": "2026-04-03 17:29:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810806/",
            "reporter": "geenensp"
        }
    ],
    "3810805": [
        {
            "dateadded": "2026-04-03 17:23:18 UTC",
            "url": "http://113.94.31.173:56330/i",
            "url_status": "offline",
            "last_online": "2026-04-04 17:01:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810805/",
            "reporter": "geenensp"
        }
    ],
    "3810804": [
        {
            "dateadded": "2026-04-03 17:16:10 UTC",
            "url": "http://110.37.28.119:58071/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810804/",
            "reporter": "geenensp"
        }
    ],
    "3810803": [
        {
            "dateadded": "2026-04-03 17:10:19 UTC",
            "url": "http://218.13.149.41:47684/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810803/",
            "reporter": "geenensp"
        }
    ],
    "3810802": [
        {
            "dateadded": "2026-04-03 17:06:15 UTC",
            "url": "http://42.226.68.107:54260/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:58:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810802/",
            "reporter": "geenensp"
        }
    ],
    "3810801": [
        {
            "dateadded": "2026-04-03 16:52:24 UTC",
            "url": "http://114.218.212.110:60017/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:41:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810801/",
            "reporter": "geenensp"
        }
    ],
    "3810800": [
        {
            "dateadded": "2026-04-03 16:51:19 UTC",
            "url": "http://222.127.208.188:38362/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810800/",
            "reporter": "geenensp"
        }
    ],
    "3810799": [
        {
            "dateadded": "2026-04-03 16:45:16 UTC",
            "url": "http://110.37.72.176:41418/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:45:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810799/",
            "reporter": "geenensp"
        }
    ],
    "3810798": [
        {
            "dateadded": "2026-04-03 16:39:16 UTC",
            "url": "http://119.179.238.14:54287/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:35:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810798/",
            "reporter": "geenensp"
        }
    ],
    "3810797": [
        {
            "dateadded": "2026-04-03 16:37:08 UTC",
            "url": "http://42.7.222.67:50929/i",
            "url_status": "offline",
            "last_online": "2026-04-08 05:16:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810797/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810796": [
        {
            "dateadded": "2026-04-03 16:36:19 UTC",
            "url": "http://42.226.68.107:54260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810796/",
            "reporter": "geenensp"
        }
    ],
    "3810795": [
        {
            "dateadded": "2026-04-03 16:36:17 UTC",
            "url": "http://45.177.32.104:59470/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:35:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810795/",
            "reporter": "geenensp"
        }
    ],
    "3810794": [
        {
            "dateadded": "2026-04-03 16:22:08 UTC",
            "url": "http://42.7.222.67:50929/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 05:05:35 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810794/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810793": [
        {
            "dateadded": "2026-04-03 16:17:23 UTC",
            "url": "http://219.157.55.95:50373/i",
            "url_status": "offline",
            "last_online": "2026-04-04 11:01:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810793/",
            "reporter": "geenensp"
        }
    ],
    "3810792": [
        {
            "dateadded": "2026-04-03 16:13:11 UTC",
            "url": "http://45.177.32.104:59470/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:54:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810792/",
            "reporter": "geenensp"
        }
    ],
    "3810791": [
        {
            "dateadded": "2026-04-03 16:02:19 UTC",
            "url": "http://219.157.55.95:50373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810791/",
            "reporter": "geenensp"
        }
    ],
    "3810790": [
        {
            "dateadded": "2026-04-03 15:55:22 UTC",
            "url": "http://180.157.252.62:42975/i",
            "url_status": "offline",
            "last_online": "2026-04-14 06:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810790/",
            "reporter": "geenensp"
        }
    ],
    "3810789": [
        {
            "dateadded": "2026-04-03 15:37:07 UTC",
            "url": "http://222.127.68.115:33474/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810789/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810788": [
        {
            "dateadded": "2026-04-03 15:30:23 UTC",
            "url": "http://180.157.252.62:42975/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 06:56:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810788/",
            "reporter": "geenensp"
        }
    ],
    "3810787": [
        {
            "dateadded": "2026-04-03 15:29:05 UTC",
            "url": "http://85.239.147.6/files/5851730241/IQEr4wy.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810787/",
            "reporter": "Bitsight"
        }
    ],
    "3810786": [
        {
            "dateadded": "2026-04-03 15:22:08 UTC",
            "url": "http://222.127.68.115:33474/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:01:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810786/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810785": [
        {
            "dateadded": "2026-04-03 15:19:11 UTC",
            "url": "http://175.10.24.108:44847/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:00:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810785/",
            "reporter": "geenensp"
        }
    ],
    "3810784": [
        {
            "dateadded": "2026-04-03 15:08:16 UTC",
            "url": "http://42.234.208.154:56228/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:29:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810784/",
            "reporter": "geenensp"
        }
    ],
    "3810783": [
        {
            "dateadded": "2026-04-03 15:06:17 UTC",
            "url": "http://223.112.189.134:45930/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810783/",
            "reporter": "geenensp"
        }
    ],
    "3810782": [
        {
            "dateadded": "2026-04-03 14:54:16 UTC",
            "url": "http://105.186.163.239:51413/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:12:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810782/",
            "reporter": "geenensp"
        }
    ],
    "3810781": [
        {
            "dateadded": "2026-04-03 14:42:19 UTC",
            "url": "http://223.112.189.134:45930/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 23:58:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810781/",
            "reporter": "geenensp"
        }
    ],
    "3810780": [
        {
            "dateadded": "2026-04-03 14:33:05 UTC",
            "url": "http://85.239.147.6/files/8405865752/bThXxmv.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810780/",
            "reporter": "c2hunter"
        }
    ],
    "3810779": [
        {
            "dateadded": "2026-04-03 14:28:20 UTC",
            "url": "http://113.239.206.240:53385/i",
            "url_status": "offline",
            "last_online": "2026-04-07 21:48:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810779/",
            "reporter": "geenensp"
        }
    ],
    "3810778": [
        {
            "dateadded": "2026-04-03 14:27:07 UTC",
            "url": "http://115.49.123.219:48348/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:52:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810778/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810777": [
        {
            "dateadded": "2026-04-03 14:25:20 UTC",
            "url": "http://195.178.110.204/y",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810777/",
            "reporter": "botnetkiller"
        }
    ],
    "3810776": [
        {
            "dateadded": "2026-04-03 14:21:19 UTC",
            "url": "http://36.70.33.7:35382/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:35:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810776/",
            "reporter": "geenensp"
        }
    ],
    "3810775": [
        {
            "dateadded": "2026-04-03 14:20:19 UTC",
            "url": "http://105.186.163.239:51413/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:43:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810775/",
            "reporter": "geenensp"
        }
    ],
    "3810774": [
        {
            "dateadded": "2026-04-03 14:10:22 UTC",
            "url": "http://212.64.201.57/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-09 04:59:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810774/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810773": [
        {
            "dateadded": "2026-04-03 14:10:21 UTC",
            "url": "http://212.64.201.57/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-09 03:55:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810773/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810771": [
        {
            "dateadded": "2026-04-03 14:10:18 UTC",
            "url": "http://212.64.201.57/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-09 04:11:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810771/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810772": [
        {
            "dateadded": "2026-04-03 14:10:18 UTC",
            "url": "http://212.64.201.57/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-09 05:08:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810772/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810769": [
        {
            "dateadded": "2026-04-03 14:10:16 UTC",
            "url": "http://212.64.201.57/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-09 04:03:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810769/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810770": [
        {
            "dateadded": "2026-04-03 14:10:16 UTC",
            "url": "http://212.64.201.57/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-09 04:09:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810770/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810768": [
        {
            "dateadded": "2026-04-03 14:09:18 UTC",
            "url": "http://42.224.151.199:50227/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810768/",
            "reporter": "geenensp"
        }
    ],
    "3810767": [
        {
            "dateadded": "2026-04-03 13:54:18 UTC",
            "url": "http://37.48.254.120/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-04 15:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810767/",
            "reporter": "botnetkiller"
        }
    ],
    "3810766": [
        {
            "dateadded": "2026-04-03 13:54:10 UTC",
            "url": "http://37.48.254.120/mips",
            "url_status": "offline",
            "last_online": "2026-04-04 22:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810766/",
            "reporter": "botnetkiller"
        }
    ],
    "3810765": [
        {
            "dateadded": "2026-04-03 13:39:10 UTC",
            "url": "http://85.12.205.35:36010/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:22:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810765/",
            "reporter": "geenensp"
        }
    ],
    "3810764": [
        {
            "dateadded": "2026-04-03 13:06:17 UTC",
            "url": "http://59.97.246.171:41803/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810764/",
            "reporter": "geenensp"
        }
    ],
    "3810763": [
        {
            "dateadded": "2026-04-03 13:05:17 UTC",
            "url": "http://117.207.82.146:38403/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 13:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810763/",
            "reporter": "geenensp"
        }
    ],
    "3810762": [
        {
            "dateadded": "2026-04-03 13:02:22 UTC",
            "url": "http://123.5.184.173:40185/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:56:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810762/",
            "reporter": "geenensp"
        }
    ],
    "3810761": [
        {
            "dateadded": "2026-04-03 12:49:20 UTC",
            "url": "http://42.87.252.165:36677/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 07:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810761/",
            "reporter": "geenensp"
        }
    ],
    "3810760": [
        {
            "dateadded": "2026-04-03 12:42:19 UTC",
            "url": "http://60.18.62.126:45414/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810760/",
            "reporter": "geenensp"
        }
    ],
    "3810759": [
        {
            "dateadded": "2026-04-03 12:37:19 UTC",
            "url": "http://85.166.152.13:41396/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810759/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810758": [
        {
            "dateadded": "2026-04-03 12:36:09 UTC",
            "url": "http://117.205.93.132:49301/i",
            "url_status": "offline",
            "last_online": "2026-04-03 12:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810758/",
            "reporter": "geenensp"
        }
    ],
    "3810757": [
        {
            "dateadded": "2026-04-03 12:30:22 UTC",
            "url": "http://221.225.31.105:33747/i",
            "url_status": "offline",
            "last_online": "2026-04-03 17:00:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810757/",
            "reporter": "geenensp"
        }
    ],
    "3810756": [
        {
            "dateadded": "2026-04-03 12:02:21 UTC",
            "url": "http://221.225.31.105:33747/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810756/",
            "reporter": "geenensp"
        }
    ],
    "3810755": [
        {
            "dateadded": "2026-04-03 12:00:20 UTC",
            "url": "http://117.205.93.132:49301/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 12:00:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810755/",
            "reporter": "geenensp"
        }
    ],
    "3810754": [
        {
            "dateadded": "2026-04-03 11:58:12 UTC",
            "url": "http://179.43.182.70/ln8cw1ox1f",
            "url_status": "offline",
            "last_online": "2026-04-09 10:25:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810754/",
            "reporter": "NDA0E"
        }
    ],
    "3810753": [
        {
            "dateadded": "2026-04-03 11:57:14 UTC",
            "url": "http://123.148.129.27:51569/i",
            "url_status": "offline",
            "last_online": "2026-04-08 16:49:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810753/",
            "reporter": "geenensp"
        }
    ],
    "3810752": [
        {
            "dateadded": "2026-04-03 11:47:07 UTC",
            "url": "http://115.49.123.219:48348/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810752/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810751": [
        {
            "dateadded": "2026-04-03 11:39:07 UTC",
            "url": "http://124.6.169.46:60288/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810751/",
            "reporter": "geenensp"
        }
    ],
    "3810750": [
        {
            "dateadded": "2026-04-03 11:32:08 UTC",
            "url": "http://123.148.129.27:51569/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810750/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810749": [
        {
            "dateadded": "2026-04-03 11:29:15 UTC",
            "url": "http://115.56.64.172:44064/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:33:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810749/",
            "reporter": "geenensp"
        }
    ],
    "3810748": [
        {
            "dateadded": "2026-04-03 11:25:14 UTC",
            "url": "http://120.28.214.232:52798/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:35:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810748/",
            "reporter": "geenensp"
        }
    ],
    "3810747": [
        {
            "dateadded": "2026-04-03 11:23:08 UTC",
            "url": "http://177.39.122.214:34457/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:42:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810747/",
            "reporter": "geenensp"
        }
    ],
    "3810746": [
        {
            "dateadded": "2026-04-03 11:22:16 UTC",
            "url": "http://177.39.122.214:34457/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:26:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810746/",
            "reporter": "geenensp"
        }
    ],
    "3810745": [
        {
            "dateadded": "2026-04-03 11:12:06 UTC",
            "url": "http://110.36.15.1:48126/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 12:37:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810745/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810744": [
        {
            "dateadded": "2026-04-03 11:08:13 UTC",
            "url": "http://124.6.169.46:60288/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:07:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810744/",
            "reporter": "geenensp"
        }
    ],
    "3810743": [
        {
            "dateadded": "2026-04-03 11:02:06 UTC",
            "url": "http://115.48.4.205:46066/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:34:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810743/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810742": [
        {
            "dateadded": "2026-04-03 10:57:13 UTC",
            "url": "http://210.10.133.11:53222/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810742/",
            "reporter": "geenensp"
        }
    ],
    "3810741": [
        {
            "dateadded": "2026-04-03 10:55:21 UTC",
            "url": "http://39.61.48.86:34028/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810741/",
            "reporter": "geenensp"
        }
    ],
    "3810740": [
        {
            "dateadded": "2026-04-03 10:53:16 UTC",
            "url": "http://31.148.232.118:52048/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:53:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810740/",
            "reporter": "geenensp"
        }
    ],
    "3810739": [
        {
            "dateadded": "2026-04-03 10:52:07 UTC",
            "url": "http://156.229.118.146:38281/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:08:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810739/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810738": [
        {
            "dateadded": "2026-04-03 10:47:07 UTC",
            "url": "http://115.48.4.205:46066/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:29:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810738/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810737": [
        {
            "dateadded": "2026-04-03 10:44:18 UTC",
            "url": "http://119.109.241.175:32919/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810737/",
            "reporter": "geenensp"
        }
    ],
    "3810736": [
        {
            "dateadded": "2026-04-03 10:42:07 UTC",
            "url": "http://223.105.50.190:41719/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:58:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810736/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810735": [
        {
            "dateadded": "2026-04-03 10:42:06 UTC",
            "url": "http://115.63.8.36:57548/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810735/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810734": [
        {
            "dateadded": "2026-04-03 10:34:23 UTC",
            "url": "http://117.212.53.12:41803/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:34:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810734/",
            "reporter": "geenensp"
        }
    ],
    "3810733": [
        {
            "dateadded": "2026-04-03 10:32:08 UTC",
            "url": "http://121.231.246.118:36800/i",
            "url_status": "offline",
            "last_online": "2026-04-10 04:51:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810733/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810732": [
        {
            "dateadded": "2026-04-03 10:30:20 UTC",
            "url": "http://115.57.51.138:32909/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:59:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810732/",
            "reporter": "geenensp"
        }
    ],
    "3810731": [
        {
            "dateadded": "2026-04-03 10:30:17 UTC",
            "url": "http://45.183.184.74:56089/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:01:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810731/",
            "reporter": "geenensp"
        }
    ],
    "3810730": [
        {
            "dateadded": "2026-04-03 10:27:19 UTC",
            "url": "http://210.10.133.11:53222/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810730/",
            "reporter": "geenensp"
        }
    ],
    "3810729": [
        {
            "dateadded": "2026-04-03 10:24:09 UTC",
            "url": "http://182.114.32.67:42919/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:09:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810729/",
            "reporter": "geenensp"
        }
    ],
    "3810728": [
        {
            "dateadded": "2026-04-03 10:17:21 UTC",
            "url": "http://115.63.8.36:57548/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:49:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810728/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810727": [
        {
            "dateadded": "2026-04-03 10:17:08 UTC",
            "url": "http://121.231.246.118:36800/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 05:03:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810727/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810726": [
        {
            "dateadded": "2026-04-03 10:15:19 UTC",
            "url": "http://182.114.32.67:42919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810726/",
            "reporter": "geenensp"
        }
    ],
    "3810725": [
        {
            "dateadded": "2026-04-03 10:12:06 UTC",
            "url": "http://223.105.50.190:41719/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 08:23:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810725/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810724": [
        {
            "dateadded": "2026-04-03 10:09:14 UTC",
            "url": "http://191.210.133.134:42696/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810724/",
            "reporter": "geenensp"
        }
    ],
    "3810723": [
        {
            "dateadded": "2026-04-03 10:03:12 UTC",
            "url": "http://119.109.241.175:32919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 23:17:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810723/",
            "reporter": "geenensp"
        }
    ],
    "3810722": [
        {
            "dateadded": "2026-04-03 10:02:10 UTC",
            "url": "http://36.70.142.105:39717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810722/",
            "reporter": "geenensp"
        }
    ],
    "3810721": [
        {
            "dateadded": "2026-04-03 10:02:08 UTC",
            "url": "http://42.234.208.154:56228/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:54:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810721/",
            "reporter": "geenensp"
        }
    ],
    "3810720": [
        {
            "dateadded": "2026-04-03 10:02:07 UTC",
            "url": "http://182.113.205.149:48259/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810720/",
            "reporter": "geenensp"
        }
    ],
    "3810719": [
        {
            "dateadded": "2026-04-03 10:00:17 UTC",
            "url": "http://117.205.81.75:51731/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810719/",
            "reporter": "geenensp"
        }
    ],
    "3810718": [
        {
            "dateadded": "2026-04-03 09:48:07 UTC",
            "url": "http://120.28.180.87:53047/i",
            "url_status": "offline",
            "last_online": "2026-04-06 23:06:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810718/",
            "reporter": "geenensp"
        }
    ],
    "3810717": [
        {
            "dateadded": "2026-04-03 09:41:08 UTC",
            "url": "http://110.37.95.117:58994/i",
            "url_status": "offline",
            "last_online": "2026-04-04 22:34:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810717/",
            "reporter": "geenensp"
        }
    ],
    "3810716": [
        {
            "dateadded": "2026-04-03 09:37:18 UTC",
            "url": "http://182.113.205.149:48259/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:04:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810716/",
            "reporter": "geenensp"
        }
    ],
    "3810715": [
        {
            "dateadded": "2026-04-03 09:37:08 UTC",
            "url": "http://180.243.178.175:59096/i",
            "url_status": "offline",
            "last_online": "2026-04-04 08:12:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810715/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810714": [
        {
            "dateadded": "2026-04-03 09:30:11 UTC",
            "url": "http://120.28.180.87:53047/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810714/",
            "reporter": "geenensp"
        }
    ],
    "3810713": [
        {
            "dateadded": "2026-04-03 09:22:16 UTC",
            "url": "http://125.46.244.168:45897/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810713/",
            "reporter": "geenensp"
        }
    ],
    "3810712": [
        {
            "dateadded": "2026-04-03 09:22:06 UTC",
            "url": "http://182.114.197.8:35114/i",
            "url_status": "offline",
            "last_online": "2026-04-04 04:48:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810712/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810711": [
        {
            "dateadded": "2026-04-03 09:15:14 UTC",
            "url": "http://110.37.95.117:58994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810711/",
            "reporter": "geenensp"
        }
    ],
    "3810710": [
        {
            "dateadded": "2026-04-03 09:09:15 UTC",
            "url": "http://42.56.209.122:46011/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:13:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810710/",
            "reporter": "geenensp"
        }
    ],
    "3810709": [
        {
            "dateadded": "2026-04-03 09:09:13 UTC",
            "url": "http://60.22.49.72:48413/i",
            "url_status": "offline",
            "last_online": "2026-04-23 17:23:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810709/",
            "reporter": "geenensp"
        }
    ],
    "3810708": [
        {
            "dateadded": "2026-04-03 09:05:08 UTC",
            "url": "http://125.46.244.168:45897/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 23:05:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810708/",
            "reporter": "geenensp"
        }
    ],
    "3810707": [
        {
            "dateadded": "2026-04-03 09:04:15 UTC",
            "url": "http://160.30.142.2:41761/i",
            "url_status": "offline",
            "last_online": "2026-04-07 05:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810707/",
            "reporter": "geenensp"
        }
    ],
    "3810706": [
        {
            "dateadded": "2026-04-03 09:01:15 UTC",
            "url": "http://160.30.142.2:41761/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 05:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810706/",
            "reporter": "geenensp"
        }
    ],
    "3810705": [
        {
            "dateadded": "2026-04-03 08:57:07 UTC",
            "url": "http://182.114.197.8:35114/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:34:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810705/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810704": [
        {
            "dateadded": "2026-04-03 08:50:15 UTC",
            "url": "http://116.25.133.33:54382/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:48:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810704/",
            "reporter": "geenensp"
        }
    ],
    "3810703": [
        {
            "dateadded": "2026-04-03 08:48:13 UTC",
            "url": "http://60.22.49.72:48413/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 17:30:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810703/",
            "reporter": "geenensp"
        }
    ],
    "3810702": [
        {
            "dateadded": "2026-04-03 08:40:07 UTC",
            "url": "http://119.116.20.61:60639/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810702/",
            "reporter": "geenensp"
        }
    ],
    "3810701": [
        {
            "dateadded": "2026-04-03 08:25:17 UTC",
            "url": "http://42.7.148.66:60047/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:37:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810701/",
            "reporter": "geenensp"
        }
    ],
    "3810700": [
        {
            "dateadded": "2026-04-03 08:19:13 UTC",
            "url": "http://60.161.59.219:36235/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:29:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810700/",
            "reporter": "geenensp"
        }
    ],
    "3810699": [
        {
            "dateadded": "2026-04-03 08:19:12 UTC",
            "url": "http://42.7.148.66:60047/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 23:04:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810699/",
            "reporter": "geenensp"
        }
    ],
    "3810698": [
        {
            "dateadded": "2026-04-03 08:16:13 UTC",
            "url": "http://39.79.148.134:50951/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:38:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810698/",
            "reporter": "geenensp"
        }
    ],
    "3810697": [
        {
            "dateadded": "2026-04-03 08:00:18 UTC",
            "url": "http://59.94.123.245:37046/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810697/",
            "reporter": "geenensp"
        }
    ],
    "3810696": [
        {
            "dateadded": "2026-04-03 07:52:15 UTC",
            "url": "http://39.79.148.134:50951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 12:24:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810696/",
            "reporter": "geenensp"
        }
    ],
    "3810695": [
        {
            "dateadded": "2026-04-03 07:52:11 UTC",
            "url": "http://103.94.142.84:59168/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:40:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810695/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810693": [
        {
            "dateadded": "2026-04-03 07:52:09 UTC",
            "url": "http://220.235.234.170:48142/i",
            "url_status": "offline",
            "last_online": "2026-04-03 07:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810693/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810694": [
        {
            "dateadded": "2026-04-03 07:52:09 UTC",
            "url": "http://220.235.234.170:48142/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:34:34 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810694/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810692": [
        {
            "dateadded": "2026-04-03 07:52:08 UTC",
            "url": "http://110.37.78.177:49365/i",
            "url_status": "offline",
            "last_online": "2026-04-03 07:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810692/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810691": [
        {
            "dateadded": "2026-04-03 07:38:08 UTC",
            "url": "http://59.94.123.245:37046/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:02:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810691/",
            "reporter": "geenensp"
        }
    ],
    "3810690": [
        {
            "dateadded": "2026-04-03 07:22:08 UTC",
            "url": "http://221.229.190.242:44573/i",
            "url_status": "offline",
            "last_online": "2026-04-17 06:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810690/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810688": [
        {
            "dateadded": "2026-04-03 07:22:06 UTC",
            "url": "http://110.37.78.177:49365/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 07:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810688/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810689": [
        {
            "dateadded": "2026-04-03 07:22:06 UTC",
            "url": "http://192.176.50.190:34558/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810689/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810687": [
        {
            "dateadded": "2026-04-03 07:16:16 UTC",
            "url": "http://122.148.184.156:48791/i",
            "url_status": "offline",
            "last_online": "2026-04-03 17:45:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810687/",
            "reporter": "geenensp"
        }
    ],
    "3810686": [
        {
            "dateadded": "2026-04-03 07:05:13 UTC",
            "url": "http://42.178.151.189:41892/i",
            "url_status": "offline",
            "last_online": "2026-04-05 23:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810686/",
            "reporter": "geenensp"
        }
    ],
    "3810685": [
        {
            "dateadded": "2026-04-03 06:59:13 UTC",
            "url": "http://192.176.50.190:34558/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810685/",
            "reporter": "geenensp"
        }
    ],
    "3810684": [
        {
            "dateadded": "2026-04-03 06:57:14 UTC",
            "url": "http://117.209.14.146:54672/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810684/",
            "reporter": "geenensp"
        }
    ],
    "3810683": [
        {
            "dateadded": "2026-04-03 06:56:10 UTC",
            "url": "http://122.148.184.156:48791/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:28:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810683/",
            "reporter": "geenensp"
        }
    ],
    "3810682": [
        {
            "dateadded": "2026-04-03 06:55:14 UTC",
            "url": "http://42.178.151.189:41892/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:40:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810682/",
            "reporter": "geenensp"
        }
    ],
    "3810681": [
        {
            "dateadded": "2026-04-03 06:49:14 UTC",
            "url": "http://42.5.64.226:41730/i",
            "url_status": "offline",
            "last_online": "2026-04-09 16:54:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810681/",
            "reporter": "geenensp"
        }
    ],
    "3810678": [
        {
            "dateadded": "2026-04-03 06:47:08 UTC",
            "url": "http://59.94.122.240:43824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810678/",
            "reporter": "geenensp"
        }
    ],
    "3810679": [
        {
            "dateadded": "2026-04-03 06:47:08 UTC",
            "url": "http://125.45.54.191:60222/i",
            "url_status": "offline",
            "last_online": "2026-04-04 03:41:38 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810679/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810680": [
        {
            "dateadded": "2026-04-03 06:47:08 UTC",
            "url": "http://221.229.190.242:44573/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-17 06:46:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810680/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810677": [
        {
            "dateadded": "2026-04-03 06:31:14 UTC",
            "url": "http://117.209.14.146:54672/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:57:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810677/",
            "reporter": "geenensp"
        }
    ],
    "3810676": [
        {
            "dateadded": "2026-04-03 06:18:21 UTC",
            "url": "http://39.90.149.135:49136/i",
            "url_status": "offline",
            "last_online": "2026-04-04 22:00:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810676/",
            "reporter": "geenensp"
        }
    ],
    "3810675": [
        {
            "dateadded": "2026-04-03 06:07:07 UTC",
            "url": "http://221.0.215.182:35556/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 00:14:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810675/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810674": [
        {
            "dateadded": "2026-04-03 06:02:08 UTC",
            "url": "http://115.56.64.172:44064/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:59:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810674/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810673": [
        {
            "dateadded": "2026-04-03 06:01:07 UTC",
            "url": "http://83.168.107.189:886/wo125u1gmn/x86",
            "url_status": "offline",
            "last_online": "2026-04-03 15:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810673/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810672": [
        {
            "dateadded": "2026-04-03 06:00:17 UTC",
            "url": "http://222.140.183.50:51885/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:29:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810672/",
            "reporter": "geenensp"
        }
    ],
    "3810671": [
        {
            "dateadded": "2026-04-03 05:56:13 UTC",
            "url": "http://59.96.142.205:52390/i",
            "url_status": "offline",
            "last_online": "2026-04-03 12:42:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810671/",
            "reporter": "geenensp"
        }
    ],
    "3810670": [
        {
            "dateadded": "2026-04-03 05:54:08 UTC",
            "url": "http://39.90.149.135:49136/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 21:44:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810670/",
            "reporter": "geenensp"
        }
    ],
    "3810668": [
        {
            "dateadded": "2026-04-03 05:52:07 UTC",
            "url": "http://182.115.78.213:38088/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:23:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810668/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810669": [
        {
            "dateadded": "2026-04-03 05:52:07 UTC",
            "url": "http://36.77.235.248:60331/i",
            "url_status": "offline",
            "last_online": "2026-04-03 05:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810669/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810667": [
        {
            "dateadded": "2026-04-03 05:45:29 UTC",
            "url": "http://42.7.147.185:45835/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:48:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810667/",
            "reporter": "geenensp"
        }
    ],
    "3810666": [
        {
            "dateadded": "2026-04-03 05:44:16 UTC",
            "url": "http://124.235.250.108:39147/i",
            "url_status": "offline",
            "last_online": "2026-04-08 10:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810666/",
            "reporter": "geenensp"
        }
    ],
    "3810665": [
        {
            "dateadded": "2026-04-03 05:43:13 UTC",
            "url": "http://119.185.242.118:36562/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810665/",
            "reporter": "geenensp"
        }
    ],
    "3810664": [
        {
            "dateadded": "2026-04-03 05:42:11 UTC",
            "url": "http://200.52.230.179:44408/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:49:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810664/",
            "reporter": "geenensp"
        }
    ],
    "3810663": [
        {
            "dateadded": "2026-04-03 05:38:07 UTC",
            "url": "http://200.52.230.179:44408/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:05:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810663/",
            "reporter": "geenensp"
        }
    ],
    "3810662": [
        {
            "dateadded": "2026-04-03 05:33:10 UTC",
            "url": "http://59.96.142.205:52390/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810662/",
            "reporter": "geenensp"
        }
    ],
    "3810661": [
        {
            "dateadded": "2026-04-03 05:32:21 UTC",
            "url": "http://124.235.250.108:39147/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 16:29:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810661/",
            "reporter": "geenensp"
        }
    ],
    "3810660": [
        {
            "dateadded": "2026-04-03 05:27:13 UTC",
            "url": "http://120.28.195.161:50875/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810660/",
            "reporter": "geenensp"
        }
    ],
    "3810659": [
        {
            "dateadded": "2026-04-03 05:20:18 UTC",
            "url": "http://61.168.181.44:42131/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810659/",
            "reporter": "geenensp"
        }
    ],
    "3810658": [
        {
            "dateadded": "2026-04-03 05:19:12 UTC",
            "url": "http://110.36.80.162:43865/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:54:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810658/",
            "reporter": "geenensp"
        }
    ],
    "3810657": [
        {
            "dateadded": "2026-04-03 05:17:07 UTC",
            "url": "http://125.167.189.139:50290/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810657/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810656": [
        {
            "dateadded": "2026-04-03 05:13:15 UTC",
            "url": "http://182.127.127.23:35343/i",
            "url_status": "offline",
            "last_online": "2026-04-03 05:13:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810656/",
            "reporter": "geenensp"
        }
    ],
    "3810655": [
        {
            "dateadded": "2026-04-03 05:04:17 UTC",
            "url": "http://115.53.27.166:38187/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 07:09:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810655/",
            "reporter": "geenensp"
        }
    ],
    "3810654": [
        {
            "dateadded": "2026-04-03 05:04:16 UTC",
            "url": "http://45.185.93.184:57359/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:48:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810654/",
            "reporter": "geenensp"
        }
    ],
    "3810653": [
        {
            "dateadded": "2026-04-03 05:03:14 UTC",
            "url": "http://42.7.147.185:45835/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:04:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810653/",
            "reporter": "geenensp"
        }
    ],
    "3810652": [
        {
            "dateadded": "2026-04-03 04:40:08 UTC",
            "url": "http://1.10.255.96:34611/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:40:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810652/",
            "reporter": "geenensp"
        }
    ],
    "3810651": [
        {
            "dateadded": "2026-04-03 04:38:15 UTC",
            "url": "http://5.79.150.232:60829/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:08:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810651/",
            "reporter": "geenensp"
        }
    ],
    "3810650": [
        {
            "dateadded": "2026-04-03 04:35:19 UTC",
            "url": "http://59.182.216.4:53961/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810650/",
            "reporter": "geenensp"
        }
    ],
    "3810649": [
        {
            "dateadded": "2026-04-03 04:33:10 UTC",
            "url": "http://85.166.152.13:41396/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810649/",
            "reporter": "geenensp"
        }
    ],
    "3810648": [
        {
            "dateadded": "2026-04-03 04:20:18 UTC",
            "url": "http://117.209.16.140:41104/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:20:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810648/",
            "reporter": "geenensp"
        }
    ],
    "3810647": [
        {
            "dateadded": "2026-04-03 04:16:27 UTC",
            "url": "http://42.55.214.201:36062/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810647/",
            "reporter": "geenensp"
        }
    ],
    "3810646": [
        {
            "dateadded": "2026-04-03 04:15:17 UTC",
            "url": "http://1.10.255.96:34611/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810646/",
            "reporter": "geenensp"
        }
    ],
    "3810645": [
        {
            "dateadded": "2026-04-03 03:58:13 UTC",
            "url": "http://117.209.16.140:41104/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810645/",
            "reporter": "geenensp"
        }
    ],
    "3810644": [
        {
            "dateadded": "2026-04-03 03:52:13 UTC",
            "url": "http://42.58.215.64:39046/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:58:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810644/",
            "reporter": "geenensp"
        }
    ],
    "3810643": [
        {
            "dateadded": "2026-04-03 03:47:07 UTC",
            "url": "http://222.142.205.250:53198/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:46:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810643/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810642": [
        {
            "dateadded": "2026-04-03 03:37:05 UTC",
            "url": "http://185.9.139.117:45260/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810642/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810641": [
        {
            "dateadded": "2026-04-03 03:22:08 UTC",
            "url": "http://222.142.205.250:53198/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 11:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810641/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810640": [
        {
            "dateadded": "2026-04-03 03:22:06 UTC",
            "url": "http://185.9.139.117:45260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 14:13:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810640/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810639": [
        {
            "dateadded": "2026-04-03 03:13:07 UTC",
            "url": "http://115.55.254.179:58225/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:27:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810639/",
            "reporter": "geenensp"
        }
    ],
    "3810638": [
        {
            "dateadded": "2026-04-03 03:12:14 UTC",
            "url": "http://42.58.215.64:39046/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:21:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810638/",
            "reporter": "geenensp"
        }
    ],
    "3810637": [
        {
            "dateadded": "2026-04-03 03:12:07 UTC",
            "url": "http://27.215.181.162:38925/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:19:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810637/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810636": [
        {
            "dateadded": "2026-04-03 03:10:18 UTC",
            "url": "http://117.235.99.62:49224/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:44:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810636/",
            "reporter": "geenensp"
        }
    ],
    "3810635": [
        {
            "dateadded": "2026-04-03 03:08:07 UTC",
            "url": "http://115.55.254.179:58225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810635/",
            "reporter": "geenensp"
        }
    ],
    "3810634": [
        {
            "dateadded": "2026-04-03 03:08:06 UTC",
            "url": "http://182.114.193.94:38189/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 18:04:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810634/",
            "reporter": "geenensp"
        }
    ],
    "3810633": [
        {
            "dateadded": "2026-04-03 03:07:12 UTC",
            "url": "http://59.52.56.85:42783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810633/",
            "reporter": "geenensp"
        }
    ],
    "3810632": [
        {
            "dateadded": "2026-04-03 03:04:15 UTC",
            "url": "http://105.184.6.122:33275/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:29:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810632/",
            "reporter": "geenensp"
        }
    ],
    "3810631": [
        {
            "dateadded": "2026-04-03 03:03:07 UTC",
            "url": "http://105.184.6.122:33275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810631/",
            "reporter": "geenensp"
        }
    ],
    "3810630": [
        {
            "dateadded": "2026-04-03 03:00:15 UTC",
            "url": "http://36.72.41.89:56754/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:11:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810630/",
            "reporter": "geenensp"
        }
    ],
    "3810629": [
        {
            "dateadded": "2026-04-03 02:47:07 UTC",
            "url": "http://27.215.181.162:38925/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:51:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810629/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810628": [
        {
            "dateadded": "2026-04-03 02:45:13 UTC",
            "url": "http://117.235.99.62:49224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:30:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810628/",
            "reporter": "geenensp"
        }
    ],
    "3810627": [
        {
            "dateadded": "2026-04-03 02:32:17 UTC",
            "url": "http://36.72.41.89:56754/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:50:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810627/",
            "reporter": "geenensp"
        }
    ],
    "3810626": [
        {
            "dateadded": "2026-04-03 02:22:07 UTC",
            "url": "http://42.4.29.184:41439/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:51:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810626/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810625": [
        {
            "dateadded": "2026-04-03 02:05:14 UTC",
            "url": "http://42.238.111.225:37405/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:02:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810625/",
            "reporter": "geenensp"
        }
    ],
    "3810624": [
        {
            "dateadded": "2026-04-03 02:02:06 UTC",
            "url": "http://110.37.40.215:33448/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:04:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810624/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810623": [
        {
            "dateadded": "2026-04-03 01:47:13 UTC",
            "url": "http://196.189.104.106:47335/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810623/",
            "reporter": "geenensp"
        }
    ],
    "3810622": [
        {
            "dateadded": "2026-04-03 01:47:06 UTC",
            "url": "http://110.37.40.215:33448/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:42:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810622/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810621": [
        {
            "dateadded": "2026-04-03 01:39:08 UTC",
            "url": "http://125.42.33.171:33525/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810621/",
            "reporter": "geenensp"
        }
    ],
    "3810620": [
        {
            "dateadded": "2026-04-03 01:29:10 UTC",
            "url": "http://222.127.48.186:60345/i",
            "url_status": "offline",
            "last_online": "2026-04-06 22:41:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810620/",
            "reporter": "geenensp"
        }
    ],
    "3810619": [
        {
            "dateadded": "2026-04-03 01:28:21 UTC",
            "url": "http://117.212.56.152:34374/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 01:28:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810619/",
            "reporter": "geenensp"
        }
    ],
    "3810618": [
        {
            "dateadded": "2026-04-03 01:28:14 UTC",
            "url": "http://37.28.179.42:57783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810618/",
            "reporter": "geenensp"
        }
    ],
    "3810617": [
        {
            "dateadded": "2026-04-03 01:27:07 UTC",
            "url": "http://119.183.55.10:50528/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:55:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810617/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810616": [
        {
            "dateadded": "2026-04-03 01:22:14 UTC",
            "url": "http://42.238.111.225:37405/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810616/",
            "reporter": "geenensp"
        }
    ],
    "3810615": [
        {
            "dateadded": "2026-04-03 01:22:13 UTC",
            "url": "http://196.189.104.106:47335/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:09:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810615/",
            "reporter": "geenensp"
        }
    ],
    "3810614": [
        {
            "dateadded": "2026-04-03 01:18:07 UTC",
            "url": "http://112.248.184.19:43652/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810614/",
            "reporter": "geenensp"
        }
    ],
    "3810613": [
        {
            "dateadded": "2026-04-03 01:15:13 UTC",
            "url": "http://196.190.10.252:58294/i",
            "url_status": "offline",
            "last_online": "2026-04-03 01:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810613/",
            "reporter": "geenensp"
        }
    ],
    "3810612": [
        {
            "dateadded": "2026-04-03 01:13:13 UTC",
            "url": "http://125.42.33.171:33525/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810612/",
            "reporter": "geenensp"
        }
    ],
    "3810611": [
        {
            "dateadded": "2026-04-03 01:13:08 UTC",
            "url": "http://222.140.183.50:51885/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:10:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810611/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810610": [
        {
            "dateadded": "2026-04-03 01:12:15 UTC",
            "url": "http://196.190.10.252:58294/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 01:12:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810610/",
            "reporter": "geenensp"
        }
    ],
    "3810609": [
        {
            "dateadded": "2026-04-03 01:12:07 UTC",
            "url": "http://119.183.55.10:50528/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 21:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810609/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810608": [
        {
            "dateadded": "2026-04-03 01:12:06 UTC",
            "url": "http://42.178.25.159:56402/i",
            "url_status": "offline",
            "last_online": "2026-04-04 23:40:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810608/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810607": [
        {
            "dateadded": "2026-04-03 01:03:15 UTC",
            "url": "http://222.127.48.186:60345/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810607/",
            "reporter": "geenensp"
        }
    ],
    "3810606": [
        {
            "dateadded": "2026-04-03 00:58:34 UTC",
            "url": "http://112.248.184.19:43652/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 07:25:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810606/",
            "reporter": "geenensp"
        }
    ],
    "3810605": [
        {
            "dateadded": "2026-04-03 00:35:15 UTC",
            "url": "http://140.237.39.28:52208/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:22:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810605/",
            "reporter": "geenensp"
        }
    ],
    "3810604": [
        {
            "dateadded": "2026-04-03 00:34:26 UTC",
            "url": "http://117.212.63.82:41803/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810604/",
            "reporter": "geenensp"
        }
    ],
    "3810603": [
        {
            "dateadded": "2026-04-03 00:33:08 UTC",
            "url": "http://125.41.143.65:60094/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810603/",
            "reporter": "geenensp"
        }
    ],
    "3810602": [
        {
            "dateadded": "2026-04-03 00:33:05 UTC",
            "url": "http://85.239.147.6/files/8514679081/S5M3ryz.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810602/",
            "reporter": "c2hunter"
        }
    ],
    "3810601": [
        {
            "dateadded": "2026-04-03 00:22:08 UTC",
            "url": "http://36.249.194.64:58270/i",
            "url_status": "offline",
            "last_online": "2026-04-03 00:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810601/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810600": [
        {
            "dateadded": "2026-04-03 00:21:09 UTC",
            "url": "http://37.48.254.120/arm7",
            "url_status": "offline",
            "last_online": "2026-04-04 21:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810600/",
            "reporter": "botnetkiller"
        }
    ],
    "3810599": [
        {
            "dateadded": "2026-04-03 00:12:18 UTC",
            "url": "http://140.237.39.28:52208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810599/",
            "reporter": "geenensp"
        }
    ],
    "3810598": [
        {
            "dateadded": "2026-04-03 00:07:13 UTC",
            "url": "http://125.41.143.65:60094/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810598/",
            "reporter": "geenensp"
        }
    ],
    "3810597": [
        {
            "dateadded": "2026-04-02 23:59:11 UTC",
            "url": "http://193.187.101.68:41533/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810597/",
            "reporter": "geenensp"
        }
    ],
    "3810596": [
        {
            "dateadded": "2026-04-02 23:58:14 UTC",
            "url": "http://105.186.248.234:56787/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:28:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810596/",
            "reporter": "geenensp"
        }
    ],
    "3810595": [
        {
            "dateadded": "2026-04-02 23:57:07 UTC",
            "url": "http://120.61.88.48:55791/i",
            "url_status": "offline",
            "last_online": "2026-04-02 23:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810595/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810594": [
        {
            "dateadded": "2026-04-02 23:53:13 UTC",
            "url": "http://42.224.234.25:58113/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:33:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810594/",
            "reporter": "geenensp"
        }
    ],
    "3810593": [
        {
            "dateadded": "2026-04-02 23:52:07 UTC",
            "url": "http://36.249.194.64:58270/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 23:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810593/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810592": [
        {
            "dateadded": "2026-04-02 23:50:16 UTC",
            "url": "http://190.109.227.235:55274/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:33:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810592/",
            "reporter": "geenensp"
        }
    ],
    "3810591": [
        {
            "dateadded": "2026-04-02 23:44:13 UTC",
            "url": "http://105.186.248.234:56787/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:53:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810591/",
            "reporter": "geenensp"
        }
    ],
    "3810590": [
        {
            "dateadded": "2026-04-02 23:41:14 UTC",
            "url": "http://182.114.193.94:38189/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810590/",
            "reporter": "geenensp"
        }
    ],
    "3810589": [
        {
            "dateadded": "2026-04-02 23:37:12 UTC",
            "url": "http://120.61.88.48:55791/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 23:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810589/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810588": [
        {
            "dateadded": "2026-04-02 23:33:11 UTC",
            "url": "http://193.187.101.68:41533/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 09:40:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810588/",
            "reporter": "geenensp"
        }
    ],
    "3810587": [
        {
            "dateadded": "2026-04-02 23:32:16 UTC",
            "url": "http://105.187.37.109:59153/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:55:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810587/",
            "reporter": "geenensp"
        }
    ],
    "3810586": [
        {
            "dateadded": "2026-04-02 23:32:06 UTC",
            "url": "http://115.62.144.231:58457/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:43:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810586/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810585": [
        {
            "dateadded": "2026-04-02 23:24:16 UTC",
            "url": "http://105.187.37.109:59153/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810585/",
            "reporter": "geenensp"
        }
    ],
    "3810584": [
        {
            "dateadded": "2026-04-02 23:02:09 UTC",
            "url": "http://115.62.144.231:58457/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:35:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810584/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810583": [
        {
            "dateadded": "2026-04-02 23:02:07 UTC",
            "url": "http://120.28.169.156:39346/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:30:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810583/",
            "reporter": "geenensp"
        }
    ],
    "3810582": [
        {
            "dateadded": "2026-04-02 22:58:14 UTC",
            "url": "http://175.147.157.129:55169/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:50:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810582/",
            "reporter": "geenensp"
        }
    ],
    "3810581": [
        {
            "dateadded": "2026-04-02 22:57:07 UTC",
            "url": "http://110.137.156.231:38338/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:57:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810581/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810580": [
        {
            "dateadded": "2026-04-02 22:47:09 UTC",
            "url": "http://119.185.242.118:36562/i",
            "url_status": "offline",
            "last_online": "2026-04-04 04:38:43 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810580/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810579": [
        {
            "dateadded": "2026-04-02 22:47:08 UTC",
            "url": "http://59.88.239.123:55029/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:47:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810579/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810578": [
        {
            "dateadded": "2026-04-02 22:42:19 UTC",
            "url": "http://42.224.234.25:58113/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810578/",
            "reporter": "geenensp"
        }
    ],
    "3810577": [
        {
            "dateadded": "2026-04-02 22:35:14 UTC",
            "url": "http://120.28.189.182:36703/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810577/",
            "reporter": "geenensp"
        }
    ],
    "3810576": [
        {
            "dateadded": "2026-04-02 22:32:07 UTC",
            "url": "http://110.137.156.231:38338/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810576/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810575": [
        {
            "dateadded": "2026-04-02 22:27:09 UTC",
            "url": "http://59.88.239.123:55029/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:27:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810575/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810574": [
        {
            "dateadded": "2026-04-02 22:18:06 UTC",
            "url": "http://119.117.246.47:36823/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:48:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810574/",
            "reporter": "geenensp"
        }
    ],
    "3810573": [
        {
            "dateadded": "2026-04-02 22:14:16 UTC",
            "url": "http://1.22.175.162:57210/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810573/",
            "reporter": "geenensp"
        }
    ],
    "3810572": [
        {
            "dateadded": "2026-04-02 22:12:16 UTC",
            "url": "http://105.186.73.34:44849/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810572/",
            "reporter": "geenensp"
        }
    ],
    "3810571": [
        {
            "dateadded": "2026-04-02 22:02:06 UTC",
            "url": "http://182.121.231.132:33070/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:59:03 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810571/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810570": [
        {
            "dateadded": "2026-04-02 21:47:08 UTC",
            "url": "http://39.88.91.26:47182/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810570/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810569": [
        {
            "dateadded": "2026-04-02 21:45:13 UTC",
            "url": "http://119.117.246.47:36823/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 07:14:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810569/",
            "reporter": "geenensp"
        }
    ],
    "3810567": [
        {
            "dateadded": "2026-04-02 21:37:07 UTC",
            "url": "http://182.121.231.132:33070/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:00:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810567/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810568": [
        {
            "dateadded": "2026-04-02 21:37:07 UTC",
            "url": "http://27.207.124.219:42184/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810568/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810566": [
        {
            "dateadded": "2026-04-02 21:35:17 UTC",
            "url": "http://115.55.172.194:45672/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:53:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810566/",
            "reporter": "geenensp"
        }
    ],
    "3810565": [
        {
            "dateadded": "2026-04-02 21:32:10 UTC",
            "url": "http://115.57.233.64:45200/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810565/",
            "reporter": "geenensp"
        }
    ],
    "3810563": [
        {
            "dateadded": "2026-04-02 21:27:08 UTC",
            "url": "http://102.214.109.147:37361/i",
            "url_status": "offline",
            "last_online": "2026-04-18 05:17:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810563/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810562": [
        {
            "dateadded": "2026-04-02 21:22:07 UTC",
            "url": "http://27.207.124.219:42184/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810562/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810561": [
        {
            "dateadded": "2026-04-02 21:21:06 UTC",
            "url": "http://110.36.86.83:35225/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:05:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810561/",
            "reporter": "geenensp"
        }
    ],
    "3810560": [
        {
            "dateadded": "2026-04-02 21:20:20 UTC",
            "url": "http://115.61.9.1:43745/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:59:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810560/",
            "reporter": "geenensp"
        }
    ],
    "3810559": [
        {
            "dateadded": "2026-04-02 21:19:17 UTC",
            "url": "http://222.141.13.217:42757/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810559/",
            "reporter": "geenensp"
        }
    ],
    "3810558": [
        {
            "dateadded": "2026-04-02 21:08:07 UTC",
            "url": "http://115.57.233.64:45200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:01:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810558/",
            "reporter": "geenensp"
        }
    ],
    "3810557": [
        {
            "dateadded": "2026-04-02 21:07:11 UTC",
            "url": "http://115.55.172.194:45672/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 17:03:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810557/",
            "reporter": "geenensp"
        }
    ],
    "3810556": [
        {
            "dateadded": "2026-04-02 21:06:05 UTC",
            "url": "http://85.239.147.6/files/unique5/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810556/",
            "reporter": "c2hunter"
        }
    ],
    "3810555": [
        {
            "dateadded": "2026-04-02 20:57:08 UTC",
            "url": "http://115.61.9.1:43745/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810555/",
            "reporter": "geenensp"
        }
    ],
    "3810554": [
        {
            "dateadded": "2026-04-02 20:57:06 UTC",
            "url": "http://221.15.214.185:59599/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:34:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810554/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810552": [
        {
            "dateadded": "2026-04-02 20:56:05 UTC",
            "url": "http://85.239.147.6/files/77546367/5akgVVn.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810552/",
            "reporter": "c2hunter"
        }
    ],
    "3810553": [
        {
            "dateadded": "2026-04-02 20:56:05 UTC",
            "url": "http://85.239.147.6/files/8536096438/X9OhMaZ.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810553/",
            "reporter": "c2hunter"
        }
    ],
    "3810551": [
        {
            "dateadded": "2026-04-02 20:55:10 UTC",
            "url": "http://222.141.13.217:42757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:49:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810551/",
            "reporter": "geenensp"
        }
    ],
    "3810550": [
        {
            "dateadded": "2026-04-02 20:53:18 UTC",
            "url": "http://219.156.21.147:46171/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:25:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810550/",
            "reporter": "geenensp"
        }
    ],
    "3810549": [
        {
            "dateadded": "2026-04-02 20:52:21 UTC",
            "url": "http://110.36.86.83:35225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:09:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810549/",
            "reporter": "geenensp"
        }
    ],
    "3810548": [
        {
            "dateadded": "2026-04-02 20:44:19 UTC",
            "url": "http://221.203.170.228:55528/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:50:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810548/",
            "reporter": "geenensp"
        }
    ],
    "3810547": [
        {
            "dateadded": "2026-04-02 20:32:05 UTC",
            "url": "http://85.239.147.6/files/6728144278/5nhlM0r.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810547/",
            "reporter": "c2hunter"
        }
    ],
    "3810546": [
        {
            "dateadded": "2026-04-02 20:28:09 UTC",
            "url": "http://120.86.71.216:43364/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:41:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810546/",
            "reporter": "geenensp"
        }
    ],
    "3810545": [
        {
            "dateadded": "2026-04-02 20:28:08 UTC",
            "url": "http://221.15.214.185:59599/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810545/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810544": [
        {
            "dateadded": "2026-04-02 20:22:07 UTC",
            "url": "http://110.37.78.200:33432/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 19:58:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810544/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810543": [
        {
            "dateadded": "2026-04-02 20:17:30 UTC",
            "url": "http://106.56.146.69:35466/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:07:56 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810543/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810542": [
        {
            "dateadded": "2026-04-02 19:43:21 UTC",
            "url": "http://222.219.74.77:58121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810542/",
            "reporter": "geenensp"
        }
    ],
    "3810541": [
        {
            "dateadded": "2026-04-02 19:37:08 UTC",
            "url": "http://58.47.19.241:40081/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:03:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810541/",
            "reporter": "geenensp"
        }
    ],
    "3810540": [
        {
            "dateadded": "2026-04-02 19:35:08 UTC",
            "url": "http://110.36.15.1:48126/i",
            "url_status": "offline",
            "last_online": "2026-04-08 12:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810540/",
            "reporter": "geenensp"
        }
    ],
    "3810539": [
        {
            "dateadded": "2026-04-02 19:34:17 UTC",
            "url": "http://222.127.153.46:54050/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:40:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810539/",
            "reporter": "geenensp"
        }
    ],
    "3810538": [
        {
            "dateadded": "2026-04-02 19:22:08 UTC",
            "url": "http://115.63.59.213:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-05 05:01:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810538/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810537": [
        {
            "dateadded": "2026-04-02 19:17:07 UTC",
            "url": "http://175.147.157.168:49936/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:01:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810537/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810536": [
        {
            "dateadded": "2026-04-02 19:11:11 UTC",
            "url": "http://182.127.0.211:47285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 19:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810536/",
            "reporter": "geenensp"
        }
    ],
    "3810535": [
        {
            "dateadded": "2026-04-02 19:10:19 UTC",
            "url": "http://77.247.92.12:47602/i",
            "url_status": "offline",
            "last_online": "2026-04-08 03:56:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810535/",
            "reporter": "geenensp"
        }
    ],
    "3810534": [
        {
            "dateadded": "2026-04-02 19:08:07 UTC",
            "url": "http://222.127.153.46:54050/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 04:40:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810534/",
            "reporter": "geenensp"
        }
    ],
    "3810533": [
        {
            "dateadded": "2026-04-02 19:08:06 UTC",
            "url": "http://46.163.184.136:49029/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:51:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810533/",
            "reporter": "geenensp"
        }
    ],
    "3810532": [
        {
            "dateadded": "2026-04-02 19:03:06 UTC",
            "url": "http://178.16.54.109/peinf.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:03:20 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810532/",
            "reporter": "Bitsight"
        }
    ],
    "3810531": [
        {
            "dateadded": "2026-04-02 19:02:20 UTC",
            "url": "http://58.47.19.241:40081/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810531/",
            "reporter": "geenensp"
        }
    ],
    "3810530": [
        {
            "dateadded": "2026-04-02 19:02:08 UTC",
            "url": "http://27.207.103.54:53082/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:50:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810530/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810529": [
        {
            "dateadded": "2026-04-02 18:59:19 UTC",
            "url": "http://222.127.68.197:40059/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810529/",
            "reporter": "geenensp"
        }
    ],
    "3810528": [
        {
            "dateadded": "2026-04-02 18:55:20 UTC",
            "url": "http://42.87.252.165:36677/i",
            "url_status": "offline",
            "last_online": "2026-04-04 04:31:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810528/",
            "reporter": "geenensp"
        }
    ],
    "3810527": [
        {
            "dateadded": "2026-04-02 18:46:05 UTC",
            "url": "http://85.239.147.6/files/8408827406/f1srZt6.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810527/",
            "reporter": "Bitsight"
        }
    ],
    "3810526": [
        {
            "dateadded": "2026-04-02 18:42:10 UTC",
            "url": "http://175.147.157.168:49936/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 04:23:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810526/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810525": [
        {
            "dateadded": "2026-04-02 18:40:15 UTC",
            "url": "http://5.166.170.106:3536/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:54:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810525/",
            "reporter": "geenensp"
        }
    ],
    "3810524": [
        {
            "dateadded": "2026-04-02 18:36:11 UTC",
            "url": "http://37.28.179.42:57783/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:58:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810524/",
            "reporter": "geenensp"
        }
    ],
    "3810523": [
        {
            "dateadded": "2026-04-02 18:33:18 UTC",
            "url": "http://222.127.68.197:40059/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810523/",
            "reporter": "geenensp"
        }
    ],
    "3810522": [
        {
            "dateadded": "2026-04-02 18:14:17 UTC",
            "url": "http://5.166.170.106:3536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 01:31:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810522/",
            "reporter": "geenensp"
        }
    ],
    "3810521": [
        {
            "dateadded": "2026-04-02 17:50:16 UTC",
            "url": "http://42.224.174.48:52075/i",
            "url_status": "offline",
            "last_online": "2026-04-04 15:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810521/",
            "reporter": "geenensp"
        }
    ],
    "3810520": [
        {
            "dateadded": "2026-04-02 17:29:08 UTC",
            "url": "http://182.113.38.165:49027/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810520/",
            "reporter": "geenensp"
        }
    ],
    "3810519": [
        {
            "dateadded": "2026-04-02 17:27:13 UTC",
            "url": "http://42.224.174.48:52075/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:50:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810519/",
            "reporter": "geenensp"
        }
    ],
    "3810518": [
        {
            "dateadded": "2026-04-02 17:24:09 UTC",
            "url": "http://123.129.129.124:50675/i",
            "url_status": "offline",
            "last_online": "2026-04-02 17:24:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810518/",
            "reporter": "geenensp"
        }
    ],
    "3810517": [
        {
            "dateadded": "2026-04-02 17:22:21 UTC",
            "url": "http://124.94.112.193:33574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 17:22:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810517/",
            "reporter": "geenensp"
        }
    ],
    "3810516": [
        {
            "dateadded": "2026-04-02 17:01:07 UTC",
            "url": "http://178.16.54.109/st.exe",
            "url_status": "offline",
            "last_online": "2026-04-05 15:39:35 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "Stealc"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810516/",
            "reporter": "Bitsight"
        }
    ],
    "3810515": [
        {
            "dateadded": "2026-04-02 16:49:21 UTC",
            "url": "http://222.136.22.57:40679/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:45:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810515/",
            "reporter": "geenensp"
        }
    ],
    "3810514": [
        {
            "dateadded": "2026-04-02 16:38:23 UTC",
            "url": "http://222.142.208.17:54537/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810514/",
            "reporter": "geenensp"
        }
    ],
    "3810513": [
        {
            "dateadded": "2026-04-02 16:29:21 UTC",
            "url": "http://176.116.56.92:21885/i",
            "url_status": "offline",
            "last_online": "2026-04-16 10:26:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810513/",
            "reporter": "geenensp"
        }
    ],
    "3810512": [
        {
            "dateadded": "2026-04-02 16:26:29 UTC",
            "url": "http://27.217.198.91:45909/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 11:20:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810512/",
            "reporter": "geenensp"
        }
    ],
    "3810511": [
        {
            "dateadded": "2026-04-02 16:20:31 UTC",
            "url": "http://105.225.84.58:53869/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:20:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810511/",
            "reporter": "geenensp"
        }
    ],
    "3810510": [
        {
            "dateadded": "2026-04-02 16:14:20 UTC",
            "url": "http://123.5.184.173:40185/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:11:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810510/",
            "reporter": "geenensp"
        }
    ],
    "3810509": [
        {
            "dateadded": "2026-04-02 16:14:19 UTC",
            "url": "http://222.142.208.17:54537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:14:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810509/",
            "reporter": "geenensp"
        }
    ],
    "3810508": [
        {
            "dateadded": "2026-04-02 16:03:25 UTC",
            "url": "http://123.8.11.87:37644/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:03:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810508/",
            "reporter": "geenensp"
        }
    ],
    "3810507": [
        {
            "dateadded": "2026-04-02 16:02:05 UTC",
            "url": "http://85.239.147.6/files/7709864361/n1XRh0P.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810507/",
            "reporter": "c2hunter"
        }
    ],
    "3810506": [
        {
            "dateadded": "2026-04-02 16:00:07 UTC",
            "url": "http://85.239.147.6/files/8042875554/jv3aQju.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810506/",
            "reporter": "c2hunter"
        }
    ],
    "3810505": [
        {
            "dateadded": "2026-04-02 15:58:13 UTC",
            "url": "http://196.191.137.44:52649/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:58:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810505/",
            "reporter": "geenensp"
        }
    ],
    "3810504": [
        {
            "dateadded": "2026-04-02 15:44:07 UTC",
            "url": "http://196.191.137.44:52649/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810504/",
            "reporter": "geenensp"
        }
    ],
    "3810503": [
        {
            "dateadded": "2026-04-02 15:38:18 UTC",
            "url": "http://110.37.72.176:58953/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:38:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810503/",
            "reporter": "geenensp"
        }
    ],
    "3810502": [
        {
            "dateadded": "2026-04-02 15:37:25 UTC",
            "url": "http://115.57.194.234:53768/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:42:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810502/",
            "reporter": "geenensp"
        }
    ],
    "3810501": [
        {
            "dateadded": "2026-04-02 15:35:22 UTC",
            "url": "http://123.8.11.87:37644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:35:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810501/",
            "reporter": "geenensp"
        }
    ],
    "3810500": [
        {
            "dateadded": "2026-04-02 15:35:21 UTC",
            "url": "http://119.117.252.128:44711/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810500/",
            "reporter": "geenensp"
        }
    ],
    "3810499": [
        {
            "dateadded": "2026-04-02 15:20:28 UTC",
            "url": "http://120.28.212.118:42550/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 04:10:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810499/",
            "reporter": "geenensp"
        }
    ],
    "3810498": [
        {
            "dateadded": "2026-04-02 15:17:07 UTC",
            "url": "http://176.116.56.92:21885/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-16 11:03:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810498/",
            "reporter": "geenensp"
        }
    ],
    "3810497": [
        {
            "dateadded": "2026-04-02 15:15:17 UTC",
            "url": "http://105.186.73.34:44849/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:18:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810497/",
            "reporter": "geenensp"
        }
    ],
    "3810496": [
        {
            "dateadded": "2026-04-02 15:13:10 UTC",
            "url": "http://110.37.72.176:58953/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810496/",
            "reporter": "geenensp"
        }
    ],
    "3810495": [
        {
            "dateadded": "2026-04-02 15:11:08 UTC",
            "url": "http://115.57.194.234:53768/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:59:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810495/",
            "reporter": "geenensp"
        }
    ],
    "3810494": [
        {
            "dateadded": "2026-04-02 15:07:16 UTC",
            "url": "http://119.117.252.128:44711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:00:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810494/",
            "reporter": "geenensp"
        }
    ],
    "3810493": [
        {
            "dateadded": "2026-04-02 14:57:06 UTC",
            "url": "http://216.249.4.20:35913/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:48:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810493/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810492": [
        {
            "dateadded": "2026-04-02 14:45:27 UTC",
            "url": "http://59.101.92.130:53222/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810492/",
            "reporter": "geenensp"
        }
    ],
    "3810491": [
        {
            "dateadded": "2026-04-02 14:43:18 UTC",
            "url": "https://audipoint.cz/downloads/Burst.exe",
            "url_status": "offline",
            "last_online": "2026-04-03 04:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Smoke Loader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810491/",
            "reporter": "juroots"
        }
    ],
    "3810490": [
        {
            "dateadded": "2026-04-02 14:43:09 UTC",
            "url": "http://jin.com.my/patch/1117.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810490/",
            "reporter": "juroots"
        }
    ],
    "3810489": [
        {
            "dateadded": "2026-04-02 14:42:22 UTC",
            "url": "http://103.172.186.141:56628/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810489/",
            "reporter": "geenensp"
        }
    ],
    "3810488": [
        {
            "dateadded": "2026-04-02 14:42:16 UTC",
            "url": "https://themaintechnician.us/Bin/ScreenConnect.ClientSetup.msi",
            "url_status": "online",
            "last_online": "2026-04-27 11:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810488/",
            "reporter": "juroots"
        }
    ],
    "3810486": [
        {
            "dateadded": "2026-04-02 14:42:12 UTC",
            "url": "https://pub-ec081eb0fab74385a17d8d77afeeda3b.r2.dev/Rsvp_invite%23903388.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "DattoRMM"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810486/",
            "reporter": "juroots"
        }
    ],
    "3810487": [
        {
            "dateadded": "2026-04-02 14:42:12 UTC",
            "url": "https://lejrmakei.net/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:56:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810487/",
            "reporter": "juroots"
        }
    ],
    "3810483": [
        {
            "dateadded": "2026-04-02 14:42:11 UTC",
            "url": "https://app-trust-wallet.com/trust.apk",
            "url_status": "offline",
            "last_online": "2026-04-02 16:10:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810483/",
            "reporter": "juroots"
        }
    ],
    "3810484": [
        {
            "dateadded": "2026-04-02 14:42:11 UTC",
            "url": "https://mailer-kjermjs.net/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 07:08:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810484/",
            "reporter": "juroots"
        }
    ],
    "3810480": [
        {
            "dateadded": "2026-04-02 14:42:09 UTC",
            "url": "https://racing-shop-schuller.de/webRTC_driver_20260111_x64.exe",
            "url_status": "offline",
            "last_online": "2026-04-03 09:42:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810480/",
            "reporter": "juroots"
        }
    ],
    "3810481": [
        {
            "dateadded": "2026-04-02 14:42:09 UTC",
            "url": "http://46.165.215.116/imbosomed.deploy",
            "url_status": "offline",
            "last_online": "2026-04-02 14:42:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810481/",
            "reporter": "juroots"
        }
    ],
    "3810482": [
        {
            "dateadded": "2026-04-02 14:42:09 UTC",
            "url": "https://raw.githubusercontent.com/babka98/horinis/refs/heads/main/lykis.msi",
            "url_status": "offline",
            "last_online": "2026-04-07 04:56:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810482/",
            "reporter": "juroots"
        }
    ],
    "3810476": [
        {
            "dateadded": "2026-04-02 14:42:08 UTC",
            "url": "https://mailer-kjermjs.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:42:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810476/",
            "reporter": "juroots"
        }
    ],
    "3810477": [
        {
            "dateadded": "2026-04-02 14:42:08 UTC",
            "url": "http://105.225.206.203:44439/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810477/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810478": [
        {
            "dateadded": "2026-04-02 14:42:08 UTC",
            "url": "https://keilo-jermailer.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 13:39:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810478/",
            "reporter": "juroots"
        }
    ],
    "3810479": [
        {
            "dateadded": "2026-04-02 14:42:08 UTC",
            "url": "https://e0-adobemodule-pdreaderl-w002-0llx00-uv0a0acr0bt-patch-dl0.pages.dev/portable_reader_acrbat_v23_01_p2.vbs",
            "url_status": "offline",
            "last_online": "2026-04-02 14:42:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810479/",
            "reporter": "juroots"
        }
    ],
    "3810473": [
        {
            "dateadded": "2026-04-02 14:42:07 UTC",
            "url": "https://audipoint.cz/downloads/kontakt.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810473/",
            "reporter": "juroots"
        }
    ],
    "3810474": [
        {
            "dateadded": "2026-04-02 14:42:07 UTC",
            "url": "https://audipoint.cz/downloads/info.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810474/",
            "reporter": "juroots"
        }
    ],
    "3810475": [
        {
            "dateadded": "2026-04-02 14:42:07 UTC",
            "url": "http://46.165.215.116/JNG2.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810475/",
            "reporter": "juroots"
        }
    ],
    "3810471": [
        {
            "dateadded": "2026-04-02 14:42:06 UTC",
            "url": "http://46.165.215.116/Porcate.cmd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810471/",
            "reporter": "juroots"
        }
    ],
    "3810472": [
        {
            "dateadded": "2026-04-02 14:42:06 UTC",
            "url": "http://46.165.215.116/JNG1.txt",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810472/",
            "reporter": "juroots"
        }
    ],
    "3810470": [
        {
            "dateadded": "2026-04-02 14:34:15 UTC",
            "url": "http://123.129.132.142:54242/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:41:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810470/",
            "reporter": "geenensp"
        }
    ],
    "3810469": [
        {
            "dateadded": "2026-04-02 14:29:17 UTC",
            "url": "http://60.18.70.11:35060/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:13:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810469/",
            "reporter": "geenensp"
        }
    ],
    "3810468": [
        {
            "dateadded": "2026-04-02 14:28:19 UTC",
            "url": "http://219.157.240.70:44856/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810468/",
            "reporter": "geenensp"
        }
    ],
    "3810467": [
        {
            "dateadded": "2026-04-02 14:18:20 UTC",
            "url": "http://123.129.132.142:54242/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:09:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810467/",
            "reporter": "geenensp"
        }
    ],
    "3810466": [
        {
            "dateadded": "2026-04-02 14:17:21 UTC",
            "url": "http://103.172.186.141:56628/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810466/",
            "reporter": "geenensp"
        }
    ],
    "3810465": [
        {
            "dateadded": "2026-04-02 14:15:21 UTC",
            "url": "http://61.52.147.80:34068/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:08:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810465/",
            "reporter": "geenensp"
        }
    ],
    "3810464": [
        {
            "dateadded": "2026-04-02 14:08:19 UTC",
            "url": "http://60.18.70.11:35060/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:43:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810464/",
            "reporter": "geenensp"
        }
    ],
    "3810463": [
        {
            "dateadded": "2026-04-02 14:07:09 UTC",
            "url": "http://110.37.58.152:54537/i",
            "url_status": "offline",
            "last_online": "2026-04-02 14:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810463/",
            "reporter": "geenensp"
        }
    ],
    "3810462": [
        {
            "dateadded": "2026-04-02 13:58:17 UTC",
            "url": "http://121.234.248.74:43372/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810462/",
            "reporter": "geenensp"
        }
    ],
    "3810461": [
        {
            "dateadded": "2026-04-02 13:57:09 UTC",
            "url": "http://45.171.177.193:41280/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:50:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810461/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810460": [
        {
            "dateadded": "2026-04-02 13:50:23 UTC",
            "url": "http://61.52.147.80:34068/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810460/",
            "reporter": "geenensp"
        }
    ],
    "3810459": [
        {
            "dateadded": "2026-04-02 13:50:17 UTC",
            "url": "http://115.50.36.202:52253/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:04:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810459/",
            "reporter": "geenensp"
        }
    ],
    "3810458": [
        {
            "dateadded": "2026-04-02 13:49:22 UTC",
            "url": "http://59.182.145.1:46980/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810458/",
            "reporter": "geenensp"
        }
    ],
    "3810457": [
        {
            "dateadded": "2026-04-02 13:48:19 UTC",
            "url": "http://219.157.240.70:44856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810457/",
            "reporter": "geenensp"
        }
    ],
    "3810456": [
        {
            "dateadded": "2026-04-02 13:40:10 UTC",
            "url": "http://110.37.58.152:54537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810456/",
            "reporter": "geenensp"
        }
    ],
    "3810455": [
        {
            "dateadded": "2026-04-02 13:27:27 UTC",
            "url": "http://59.182.145.1:46980/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:45:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810455/",
            "reporter": "geenensp"
        }
    ],
    "3810454": [
        {
            "dateadded": "2026-04-02 13:22:08 UTC",
            "url": "http://45.171.177.193:41280/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:19:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810454/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810453": [
        {
            "dateadded": "2026-04-02 13:21:17 UTC",
            "url": "http://222.141.122.224:40114/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:05:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810453/",
            "reporter": "geenensp"
        }
    ],
    "3810452": [
        {
            "dateadded": "2026-04-02 13:20:22 UTC",
            "url": "http://222.141.122.224:40114/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:00:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810452/",
            "reporter": "geenensp"
        }
    ],
    "3810451": [
        {
            "dateadded": "2026-04-02 13:18:20 UTC",
            "url": "http://115.50.36.202:52253/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810451/",
            "reporter": "geenensp"
        }
    ],
    "3810450": [
        {
            "dateadded": "2026-04-02 13:14:19 UTC",
            "url": "http://110.36.24.172:45475/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:26:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810450/",
            "reporter": "geenensp"
        }
    ],
    "3810449": [
        {
            "dateadded": "2026-04-02 13:13:19 UTC",
            "url": "http://110.36.24.172:45475/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:28:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810449/",
            "reporter": "geenensp"
        }
    ],
    "3810448": [
        {
            "dateadded": "2026-04-02 12:58:25 UTC",
            "url": "http://117.215.50.214:54675/i",
            "url_status": "offline",
            "last_online": "2026-04-02 12:58:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810448/",
            "reporter": "geenensp"
        }
    ],
    "3810447": [
        {
            "dateadded": "2026-04-02 12:48:20 UTC",
            "url": "http://195.178.110.204/mips64",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:01 UTC",
            "threat": "malware_download",
            "tags": [
                "195-178-110-204",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810447/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810446": [
        {
            "dateadded": "2026-04-02 12:47:22 UTC",
            "url": "http://42.237.1.75:42849/i",
            "url_status": "offline",
            "last_online": "2026-04-04 17:57:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810446/",
            "reporter": "geenensp"
        }
    ],
    "3810445": [
        {
            "dateadded": "2026-04-02 12:40:22 UTC",
            "url": "http://117.215.50.214:54675/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 12:40:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810445/",
            "reporter": "geenensp"
        }
    ],
    "3810444": [
        {
            "dateadded": "2026-04-02 12:37:15 UTC",
            "url": "http://117.241.61.219:48586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 12:37:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810444/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810443": [
        {
            "dateadded": "2026-04-02 12:35:25 UTC",
            "url": "http://117.214.238.164:53862/i",
            "url_status": "offline",
            "last_online": "2026-04-02 18:44:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810443/",
            "reporter": "geenensp"
        }
    ],
    "3810442": [
        {
            "dateadded": "2026-04-02 12:29:17 UTC",
            "url": "http://120.28.189.182:36703/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810442/",
            "reporter": "geenensp"
        }
    ],
    "3810441": [
        {
            "dateadded": "2026-04-02 12:22:10 UTC",
            "url": "http://125.47.243.29:42407/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:41:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810441/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810439": [
        {
            "dateadded": "2026-04-02 12:13:18 UTC",
            "url": "http://110.37.27.87:39856/i",
            "url_status": "offline",
            "last_online": "2026-04-02 12:13:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810439/",
            "reporter": "geenensp"
        }
    ],
    "3810440": [
        {
            "dateadded": "2026-04-02 12:13:18 UTC",
            "url": "http://110.137.153.129:53872/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:45:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810440/",
            "reporter": "geenensp"
        }
    ],
    "3810438": [
        {
            "dateadded": "2026-04-02 12:12:16 UTC",
            "url": "http://105.225.206.203:44439/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810438/",
            "reporter": "geenensp"
        }
    ],
    "3810437": [
        {
            "dateadded": "2026-04-02 12:09:11 UTC",
            "url": "http://182.116.121.227:38044/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810437/",
            "reporter": "geenensp"
        }
    ],
    "3810435": [
        {
            "dateadded": "2026-04-02 12:01:06 UTC",
            "url": "http://87.121.84.18/multi/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-02 21:57:49 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810435/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810436": [
        {
            "dateadded": "2026-04-02 12:01:06 UTC",
            "url": "http://87.121.84.18/multi/bins/arm5",
            "url_status": "offline",
            "last_online": "2026-04-02 22:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810436/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810431": [
        {
            "dateadded": "2026-04-02 12:00:17 UTC",
            "url": "http://87.121.84.18/multi/bins/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-02 21:34:53 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810431/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810432": [
        {
            "dateadded": "2026-04-02 12:00:17 UTC",
            "url": "http://87.121.84.18/multi/bins/arm7",
            "url_status": "offline",
            "last_online": "2026-04-02 22:33:00 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810432/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810433": [
        {
            "dateadded": "2026-04-02 12:00:17 UTC",
            "url": "http://87.121.84.18/multi/bins/mips",
            "url_status": "offline",
            "last_online": "2026-04-02 22:03:35 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810433/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810434": [
        {
            "dateadded": "2026-04-02 12:00:17 UTC",
            "url": "http://87.121.84.18/wget.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:00:01 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810434/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810430": [
        {
            "dateadded": "2026-04-02 11:59:15 UTC",
            "url": "http://87.121.84.18/lol.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:20:49 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810430/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810429": [
        {
            "dateadded": "2026-04-02 11:59:14 UTC",
            "url": "http://87.121.84.18/c.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "87-121-84-18",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810429/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810428": [
        {
            "dateadded": "2026-04-02 11:58:20 UTC",
            "url": "http://117.209.86.165:57357/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 11:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810428/",
            "reporter": "geenensp"
        }
    ],
    "3810427": [
        {
            "dateadded": "2026-04-02 11:57:18 UTC",
            "url": "http://87.121.84.19/all.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:51:35 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810427/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810415": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.arc",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:25 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810415/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810416": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.i686",
            "url_status": "online",
            "last_online": "2026-04-27 12:26:28 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810416/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810417": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.sh4",
            "url_status": "online",
            "last_online": "2026-04-27 11:43:38 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810417/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810418": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.x86",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:54 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810418/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810419": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:05 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810419/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810420": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.arm7",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:32 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810420/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810421": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.arm",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:22 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810421/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810422": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.arm5",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:55 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810422/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810423": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810423/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810424": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.mpsl",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810424/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810425": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.mips",
            "url_status": "online",
            "last_online": "2026-04-27 12:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810425/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810426": [
        {
            "dateadded": "2026-04-02 11:55:23 UTC",
            "url": "http://87.121.84.78/nuclear.ppc",
            "url_status": "online",
            "last_online": "2026-04-27 11:26:06 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810426/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810413": [
        {
            "dateadded": "2026-04-02 11:55:20 UTC",
            "url": "http://87.121.84.78/nuclear.arm6",
            "url_status": "online",
            "last_online": "2026-04-27 11:59:00 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810413/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810414": [
        {
            "dateadded": "2026-04-02 11:55:20 UTC",
            "url": "http://87.121.84.78/nuclear.spc",
            "url_status": "online",
            "last_online": "2026-04-27 11:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-78",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810414/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810412": [
        {
            "dateadded": "2026-04-02 11:54:39 UTC",
            "url": "http://182.116.121.227:38044/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:39:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810412/",
            "reporter": "geenensp"
        }
    ],
    "3810410": [
        {
            "dateadded": "2026-04-02 11:50:13 UTC",
            "url": "http://87.121.84.19/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 23:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810410/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810411": [
        {
            "dateadded": "2026-04-02 11:50:13 UTC",
            "url": "http://87.121.84.19/titanjr.arc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810411/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810408": [
        {
            "dateadded": "2026-04-02 11:49:10 UTC",
            "url": "http://87.121.84.19/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 22:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810408/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810409": [
        {
            "dateadded": "2026-04-02 11:49:10 UTC",
            "url": "http://87.121.84.19/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 22:11:16 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810409/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810407": [
        {
            "dateadded": "2026-04-02 11:49:01 UTC",
            "url": "http://219.157.20.200:45955/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:59:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810407/",
            "reporter": "geenensp"
        }
    ],
    "3810406": [
        {
            "dateadded": "2026-04-02 11:48:13 UTC",
            "url": "http://87.121.84.19/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 22:04:35 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810406/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810405": [
        {
            "dateadded": "2026-04-02 11:47:25 UTC",
            "url": "http://87.121.84.19/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 21:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810405/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810400": [
        {
            "dateadded": "2026-04-02 11:47:23 UTC",
            "url": "http://87.121.84.19/titanjr.spc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:02:30 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810400/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810401": [
        {
            "dateadded": "2026-04-02 11:47:23 UTC",
            "url": "http://87.121.84.19/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-06 00:17:24 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810401/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810402": [
        {
            "dateadded": "2026-04-02 11:47:23 UTC",
            "url": "http://87.121.84.19/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-05 21:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810402/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810403": [
        {
            "dateadded": "2026-04-02 11:47:23 UTC",
            "url": "http://87.121.84.19/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-05 21:54:30 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810403/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810404": [
        {
            "dateadded": "2026-04-02 11:47:23 UTC",
            "url": "http://87.121.84.19/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 21:56:41 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810404/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810386": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-05 21:50:39 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810386/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810387": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_spc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810387/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810388": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-05 23:12:17 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810388/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810389": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-05 22:23:37 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810389/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810390": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 22:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810390/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810391": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 22:00:05 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810391/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810392": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 22:23:53 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810392/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810393": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-05 23:05:01 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810393/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810394": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-05 21:58:42 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810394/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810395": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-05 21:58:06 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810395/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810396": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 22:15:36 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810396/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810397": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 23:13:58 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810397/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810398": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-05 23:21:52 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810398/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810399": [
        {
            "dateadded": "2026-04-02 11:47:22 UTC",
            "url": "http://87.121.84.19/titanjr.i486",
            "url_status": "offline",
            "last_online": "2026-04-05 22:28:21 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810399/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810383": [
        {
            "dateadded": "2026-04-02 11:47:21 UTC",
            "url": "http://87.121.84.19/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 22:46:15 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810383/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810384": [
        {
            "dateadded": "2026-04-02 11:47:21 UTC",
            "url": "http://87.121.84.19/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 22:52:15 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810384/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810385": [
        {
            "dateadded": "2026-04-02 11:47:21 UTC",
            "url": "http://87.121.84.19/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 21:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "87-121-84-19",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810385/",
            "reporter": "BlinkzSec"
        }
    ],
    "3810382": [
        {
            "dateadded": "2026-04-02 11:47:07 UTC",
            "url": "http://125.47.243.29:42407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810382/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810381": [
        {
            "dateadded": "2026-04-02 11:47:06 UTC",
            "url": "http://27.207.202.35:47347/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:32:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810381/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810380": [
        {
            "dateadded": "2026-04-02 11:45:19 UTC",
            "url": "http://110.137.153.129:53872/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:45:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810380/",
            "reporter": "geenensp"
        }
    ],
    "3810379": [
        {
            "dateadded": "2026-04-02 11:38:45 UTC",
            "url": "http://42.226.231.222:34247/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:59:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810379/",
            "reporter": "geenensp"
        }
    ],
    "3810378": [
        {
            "dateadded": "2026-04-02 11:37:13 UTC",
            "url": "http://110.37.26.106:57329/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810378/",
            "reporter": "geenensp"
        }
    ],
    "3810377": [
        {
            "dateadded": "2026-04-02 11:26:53 UTC",
            "url": "http://219.157.20.200:45955/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 17:06:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810377/",
            "reporter": "geenensp"
        }
    ],
    "3810376": [
        {
            "dateadded": "2026-04-02 11:22:07 UTC",
            "url": "http://27.207.202.35:47347/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:59:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810376/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810375": [
        {
            "dateadded": "2026-04-02 11:12:45 UTC",
            "url": "http://112.248.80.214:45412/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810375/",
            "reporter": "geenensp"
        }
    ],
    "3810374": [
        {
            "dateadded": "2026-04-02 11:10:17 UTC",
            "url": "http://222.127.226.53:42396/i",
            "url_status": "offline",
            "last_online": "2026-04-06 03:53:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810374/",
            "reporter": "geenensp"
        }
    ],
    "3810373": [
        {
            "dateadded": "2026-04-02 11:06:17 UTC",
            "url": "http://59.180.134.38:45659/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810373/",
            "reporter": "geenensp"
        }
    ],
    "3810372": [
        {
            "dateadded": "2026-04-02 10:55:24 UTC",
            "url": "http://110.36.89.45:38805/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810372/",
            "reporter": "geenensp"
        }
    ],
    "3810371": [
        {
            "dateadded": "2026-04-02 10:54:07 UTC",
            "url": "https://galaxis.fun/File/GaI%D0%B0%D1%85is.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "pw-galaxis"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810371/",
            "reporter": "burger"
        }
    ],
    "3810370": [
        {
            "dateadded": "2026-04-02 10:40:24 UTC",
            "url": "http://222.127.226.53:42396/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810370/",
            "reporter": "geenensp"
        }
    ],
    "3810369": [
        {
            "dateadded": "2026-04-02 10:37:23 UTC",
            "url": "http://59.180.134.38:45659/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:28:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810369/",
            "reporter": "geenensp"
        }
    ],
    "3810368": [
        {
            "dateadded": "2026-04-02 10:23:20 UTC",
            "url": "http://110.36.30.247:54987/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:23:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810368/",
            "reporter": "geenensp"
        }
    ],
    "3810367": [
        {
            "dateadded": "2026-04-02 10:15:27 UTC",
            "url": "http://222.140.185.66:37177/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:34:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810367/",
            "reporter": "geenensp"
        }
    ],
    "3810366": [
        {
            "dateadded": "2026-04-02 10:14:31 UTC",
            "url": "http://42.226.231.222:34247/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:25:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810366/",
            "reporter": "geenensp"
        }
    ],
    "3810365": [
        {
            "dateadded": "2026-04-02 10:13:24 UTC",
            "url": "http://195.178.110.204/armv7l",
            "url_status": "online",
            "last_online": "2026-04-27 11:09:31 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810365/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810361": [
        {
            "dateadded": "2026-04-02 10:13:21 UTC",
            "url": "http://195.178.110.204/i586",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810361/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810362": [
        {
            "dateadded": "2026-04-02 10:13:21 UTC",
            "url": "http://195.178.110.204/x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 11:28:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810362/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810363": [
        {
            "dateadded": "2026-04-02 10:13:21 UTC",
            "url": "http://195.178.110.204/m68k",
            "url_status": "online",
            "last_online": "2026-04-27 12:29:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810363/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810364": [
        {
            "dateadded": "2026-04-02 10:13:21 UTC",
            "url": "http://195.178.110.204/powerpc",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810364/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810338": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/i686",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810338/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810339": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/arc",
            "url_status": "online",
            "last_online": "2026-04-27 12:07:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810339/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810340": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.arc",
            "url_status": "offline",
            "last_online": "2026-04-05 21:52:24 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810340/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810341": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 21:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810341/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810342": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/sparc",
            "url_status": "online",
            "last_online": "2026-04-27 12:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810342/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810343": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/sh4",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810343/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810344": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.ppc440",
            "url_status": "offline",
            "last_online": "2026-04-05 23:26:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810344/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810345": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.i686",
            "url_status": "offline",
            "last_online": "2026-04-05 22:36:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810345/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810346": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 00:04:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810346/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810347": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/mipsel",
            "url_status": "online",
            "last_online": "2026-04-27 11:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810347/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810348": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.mipsl",
            "url_status": "offline",
            "last_online": "2026-04-05 22:18:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810348/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810349": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.arm",
            "url_status": "offline",
            "last_online": "2026-04-05 23:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810349/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810350": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/armv4l",
            "url_status": "online",
            "last_online": "2026-04-27 11:23:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810350/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810351": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 21:58:29 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810351/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810352": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/i486",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810352/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810353": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.spc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:53:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810353/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810354": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 23:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810354/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810355": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.i486",
            "url_status": "offline",
            "last_online": "2026-04-05 21:40:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810355/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810356": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.mips",
            "url_status": "offline",
            "last_online": "2026-04-05 22:37:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810356/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810357": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.ppc",
            "url_status": "offline",
            "last_online": "2026-04-05 22:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810357/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810358": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 21:50:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810358/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810359": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.x86_32",
            "url_status": "offline",
            "last_online": "2026-04-05 23:54:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810359/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810360": [
        {
            "dateadded": "2026-04-02 10:13:20 UTC",
            "url": "http://195.178.110.204/mips",
            "url_status": "online",
            "last_online": "2026-04-27 11:55:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810360/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810337": [
        {
            "dateadded": "2026-04-02 10:13:19 UTC",
            "url": "http://195.178.110.204/armv5l",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810337/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810336": [
        {
            "dateadded": "2026-04-02 10:13:14 UTC",
            "url": "http://87.121.84.19/huhu/titanjr.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 22:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810336/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810335": [
        {
            "dateadded": "2026-04-02 10:13:09 UTC",
            "url": "http://195.178.110.204/armv6l",
            "url_status": "online",
            "last_online": "2026-04-27 12:04:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810335/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810334": [
        {
            "dateadded": "2026-04-02 10:11:08 UTC",
            "url": "http://180.245.45.101:38557/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:15:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810334/",
            "reporter": "geenensp"
        }
    ],
    "3810333": [
        {
            "dateadded": "2026-04-02 10:05:23 UTC",
            "url": "http://61.3.97.175:33557/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:05:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810333/",
            "reporter": "geenensp"
        }
    ],
    "3810332": [
        {
            "dateadded": "2026-04-02 10:05:22 UTC",
            "url": "http://180.157.55.73:39040/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:21:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810332/",
            "reporter": "geenensp"
        }
    ],
    "3810331": [
        {
            "dateadded": "2026-04-02 09:56:18 UTC",
            "url": "http://125.166.37.123:34509/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:22:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810331/",
            "reporter": "geenensp"
        }
    ],
    "3810330": [
        {
            "dateadded": "2026-04-02 09:53:13 UTC",
            "url": "http://180.245.45.101:38557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810330/",
            "reporter": "geenensp"
        }
    ],
    "3810329": [
        {
            "dateadded": "2026-04-02 09:51:19 UTC",
            "url": "http://105.224.33.43:33735/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810329/",
            "reporter": "geenensp"
        }
    ],
    "3810328": [
        {
            "dateadded": "2026-04-02 09:50:30 UTC",
            "url": "http://123.14.51.197:60699/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:47:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810328/",
            "reporter": "geenensp"
        }
    ],
    "3810327": [
        {
            "dateadded": "2026-04-02 09:45:24 UTC",
            "url": "http://42.6.35.106:46207/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:03:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810327/",
            "reporter": "geenensp"
        }
    ],
    "3810326": [
        {
            "dateadded": "2026-04-02 09:42:07 UTC",
            "url": "http://36.88.136.194:44815/i",
            "url_status": "offline",
            "last_online": "2026-04-02 12:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810326/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810325": [
        {
            "dateadded": "2026-04-02 09:39:26 UTC",
            "url": "http://27.37.62.253:53303/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:43:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810325/",
            "reporter": "geenensp"
        }
    ],
    "3810324": [
        {
            "dateadded": "2026-04-02 09:37:20 UTC",
            "url": "http://61.3.97.175:33557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810324/",
            "reporter": "geenensp"
        }
    ],
    "3810323": [
        {
            "dateadded": "2026-04-02 09:29:29 UTC",
            "url": "http://221.0.215.182:35556/i",
            "url_status": "offline",
            "last_online": "2026-04-04 01:33:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810323/",
            "reporter": "geenensp"
        }
    ],
    "3810322": [
        {
            "dateadded": "2026-04-02 09:28:24 UTC",
            "url": "http://105.224.33.43:33735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:28:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810322/",
            "reporter": "geenensp"
        }
    ],
    "3810321": [
        {
            "dateadded": "2026-04-02 09:27:43 UTC",
            "url": "http://112.248.80.214:45412/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810321/",
            "reporter": "geenensp"
        }
    ],
    "3810320": [
        {
            "dateadded": "2026-04-02 09:27:07 UTC",
            "url": "http://36.88.136.194:44815/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810320/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810319": [
        {
            "dateadded": "2026-04-02 09:22:21 UTC",
            "url": "http://123.14.51.197:60699/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810319/",
            "reporter": "geenensp"
        }
    ],
    "3810318": [
        {
            "dateadded": "2026-04-02 09:18:16 UTC",
            "url": "http://42.6.35.106:46207/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810318/",
            "reporter": "geenensp"
        }
    ],
    "3810317": [
        {
            "dateadded": "2026-04-02 09:11:17 UTC",
            "url": "http://117.205.93.89:52466/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810317/",
            "reporter": "geenensp"
        }
    ],
    "3810316": [
        {
            "dateadded": "2026-04-02 09:06:04 UTC",
            "url": "http://85.239.147.6/files/7044575709/MyFXFBN.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810316/",
            "reporter": "Bitsight"
        }
    ],
    "3810315": [
        {
            "dateadded": "2026-04-02 08:58:14 UTC",
            "url": "http://125.41.6.55:49567/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810315/",
            "reporter": "geenensp"
        }
    ],
    "3810314": [
        {
            "dateadded": "2026-04-02 08:54:18 UTC",
            "url": "http://123.5.4.64:41905/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:04:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810314/",
            "reporter": "geenensp"
        }
    ],
    "3810313": [
        {
            "dateadded": "2026-04-02 08:48:22 UTC",
            "url": "http://36.70.229.241:44831/i",
            "url_status": "offline",
            "last_online": "2026-04-02 23:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810313/",
            "reporter": "geenensp"
        }
    ],
    "3810312": [
        {
            "dateadded": "2026-04-02 08:48:19 UTC",
            "url": "http://103.94.142.84:59168/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:08:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810312/",
            "reporter": "geenensp"
        }
    ],
    "3810311": [
        {
            "dateadded": "2026-04-02 08:45:13 UTC",
            "url": "http://117.205.93.89:52466/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:53:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810311/",
            "reporter": "geenensp"
        }
    ],
    "3810310": [
        {
            "dateadded": "2026-04-02 08:37:05 UTC",
            "url": "http://85.239.147.6/files/6728144278/S04rtaH.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810310/",
            "reporter": "Bitsight"
        }
    ],
    "3810309": [
        {
            "dateadded": "2026-04-02 08:35:20 UTC",
            "url": "http://125.41.6.55:49567/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:23:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810309/",
            "reporter": "geenensp"
        }
    ],
    "3810308": [
        {
            "dateadded": "2026-04-02 08:31:19 UTC",
            "url": "http://101.108.72.54:39609/i",
            "url_status": "offline",
            "last_online": "2026-04-05 09:49:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810308/",
            "reporter": "geenensp"
        }
    ],
    "3810307": [
        {
            "dateadded": "2026-04-02 08:24:20 UTC",
            "url": "http://123.5.4.64:41905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:53:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810307/",
            "reporter": "geenensp"
        }
    ],
    "3810306": [
        {
            "dateadded": "2026-04-02 08:23:18 UTC",
            "url": "http://101.108.72.54:39609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810306/",
            "reporter": "geenensp"
        }
    ],
    "3810305": [
        {
            "dateadded": "2026-04-02 08:22:13 UTC",
            "url": "http://121.234.248.74:43372/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:22:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810305/",
            "reporter": "geenensp"
        }
    ],
    "3810304": [
        {
            "dateadded": "2026-04-02 08:21:11 UTC",
            "url": "http://110.37.3.227:48772/i",
            "url_status": "offline",
            "last_online": "2026-04-02 08:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810304/",
            "reporter": "geenensp"
        }
    ],
    "3810303": [
        {
            "dateadded": "2026-04-02 08:12:18 UTC",
            "url": "http://59.97.183.249:52912/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 08:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810303/",
            "reporter": "geenensp"
        }
    ],
    "3810302": [
        {
            "dateadded": "2026-04-02 08:12:17 UTC",
            "url": "http://105.225.116.65:58037/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810302/",
            "reporter": "geenensp"
        }
    ],
    "3810301": [
        {
            "dateadded": "2026-04-02 08:05:14 UTC",
            "url": "http://117.243.163.200:48936/i",
            "url_status": "offline",
            "last_online": "2026-04-02 08:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810301/",
            "reporter": "geenensp"
        }
    ],
    "3810300": [
        {
            "dateadded": "2026-04-02 08:02:17 UTC",
            "url": "http://105.225.116.65:58037/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:29:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810300/",
            "reporter": "geenensp"
        }
    ],
    "3810299": [
        {
            "dateadded": "2026-04-02 08:01:21 UTC",
            "url": "http://110.37.3.227:48772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 08:01:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810299/",
            "reporter": "geenensp"
        }
    ],
    "3810298": [
        {
            "dateadded": "2026-04-02 07:57:22 UTC",
            "url": "http://27.37.78.58:40510/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810298/",
            "reporter": "geenensp"
        }
    ],
    "3810297": [
        {
            "dateadded": "2026-04-02 07:57:06 UTC",
            "url": "https://fiker.cattermicoffa.sbs/chrome_300_percent.pak",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ACRStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810297/",
            "reporter": "n3x77"
        }
    ],
    "3810296": [
        {
            "dateadded": "2026-04-02 07:52:05 UTC",
            "url": "http://77.247.88.99:42834/i",
            "url_status": "offline",
            "last_online": "2026-04-04 14:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810296/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810295": [
        {
            "dateadded": "2026-04-02 07:39:18 UTC",
            "url": "http://117.243.163.200:48936/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 07:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810295/",
            "reporter": "geenensp"
        }
    ],
    "3810294": [
        {
            "dateadded": "2026-04-02 07:37:13 UTC",
            "url": "http://47.160.151.251:60697/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:03:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810294/",
            "reporter": "geenensp"
        }
    ],
    "3810293": [
        {
            "dateadded": "2026-04-02 07:37:05 UTC",
            "url": "http://222.138.148.90:38702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810293/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810292": [
        {
            "dateadded": "2026-04-02 07:22:19 UTC",
            "url": "http://105.186.133.53:47925/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810292/",
            "reporter": "geenensp"
        }
    ],
    "3810291": [
        {
            "dateadded": "2026-04-02 07:14:17 UTC",
            "url": "http://113.233.117.15:51846/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810291/",
            "reporter": "geenensp"
        }
    ],
    "3810290": [
        {
            "dateadded": "2026-04-02 07:12:21 UTC",
            "url": "http://36.97.200.199:47761/i",
            "url_status": "offline",
            "last_online": "2026-04-02 19:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810290/",
            "reporter": "geenensp"
        }
    ],
    "3810289": [
        {
            "dateadded": "2026-04-02 07:11:15 UTC",
            "url": "http://105.186.133.53:47925/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810289/",
            "reporter": "geenensp"
        }
    ],
    "3810288": [
        {
            "dateadded": "2026-04-02 06:59:30 UTC",
            "url": "http://117.221.26.189:55645/i",
            "url_status": "offline",
            "last_online": "2026-04-02 06:59:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810288/",
            "reporter": "geenensp"
        }
    ],
    "3810287": [
        {
            "dateadded": "2026-04-02 06:42:21 UTC",
            "url": "http://36.97.200.199:47761/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:58:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810287/",
            "reporter": "geenensp"
        }
    ],
    "3810286": [
        {
            "dateadded": "2026-04-02 06:41:12 UTC",
            "url": "http://117.209.4.162:49402/i",
            "url_status": "offline",
            "last_online": "2026-04-02 06:41:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810286/",
            "reporter": "geenensp"
        }
    ],
    "3810285": [
        {
            "dateadded": "2026-04-02 06:39:18 UTC",
            "url": "http://115.49.228.252:57990/i",
            "url_status": "offline",
            "last_online": "2026-04-02 06:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810285/",
            "reporter": "geenensp"
        }
    ],
    "3810284": [
        {
            "dateadded": "2026-04-02 06:37:07 UTC",
            "url": "http://27.215.212.47:32862/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:43:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810284/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810283": [
        {
            "dateadded": "2026-04-02 06:26:14 UTC",
            "url": "http://117.209.4.162:49402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 06:26:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810283/",
            "reporter": "geenensp"
        }
    ],
    "3810282": [
        {
            "dateadded": "2026-04-02 06:26:07 UTC",
            "url": "https://i.postimg.cc/yd1XsWRW/image-1.png",
            "url_status": "offline",
            "last_online": "2026-04-02 06:26:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810282/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3810281": [
        {
            "dateadded": "2026-04-02 06:26:04 UTC",
            "url": "http://52.4.142.122:8880/stager_linux_$g",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810281/",
            "reporter": "geenensp"
        }
    ],
    "3810279": [
        {
            "dateadded": "2026-04-02 06:22:20 UTC",
            "url": "http://178.16.52.148/rebirth.arm",
            "url_status": "offline",
            "last_online": "2026-04-03 04:40:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810279/",
            "reporter": "abuse_ch"
        }
    ],
    "3810280": [
        {
            "dateadded": "2026-04-02 06:22:20 UTC",
            "url": "http://178.16.52.148/rebirth.arm6",
            "url_status": "offline",
            "last_online": "2026-04-03 03:49:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810280/",
            "reporter": "abuse_ch"
        }
    ],
    "3810277": [
        {
            "dateadded": "2026-04-02 06:22:16 UTC",
            "url": "http://110.38.201.196:49716/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810277/",
            "reporter": "geenensp"
        }
    ],
    "3810278": [
        {
            "dateadded": "2026-04-02 06:22:16 UTC",
            "url": "http://178.16.52.148/rebirth.arm5",
            "url_status": "offline",
            "last_online": "2026-04-03 04:25:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810278/",
            "reporter": "abuse_ch"
        }
    ],
    "3810276": [
        {
            "dateadded": "2026-04-02 06:22:14 UTC",
            "url": "http://178.16.52.148/rebirth.mipsel",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810276/",
            "reporter": "abuse_ch"
        }
    ],
    "3810275": [
        {
            "dateadded": "2026-04-02 06:17:07 UTC",
            "url": "http://182.117.30.6:35042/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:27:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810275/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810274": [
        {
            "dateadded": "2026-04-02 06:15:21 UTC",
            "url": "http://110.38.201.196:49716/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 10:49:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810274/",
            "reporter": "geenensp"
        }
    ],
    "3810273": [
        {
            "dateadded": "2026-04-02 06:14:20 UTC",
            "url": "http://115.49.228.252:57990/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 06:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810273/",
            "reporter": "geenensp"
        }
    ],
    "3810272": [
        {
            "dateadded": "2026-04-02 06:12:05 UTC",
            "url": "http://27.215.212.47:32862/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 10:20:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810272/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810271": [
        {
            "dateadded": "2026-04-02 06:06:16 UTC",
            "url": "http://59.177.108.216:51130/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 06:06:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810271/",
            "reporter": "geenensp"
        }
    ],
    "3810270": [
        {
            "dateadded": "2026-04-02 06:05:13 UTC",
            "url": "http://77.110.125.145/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-02 13:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810270/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810269": [
        {
            "dateadded": "2026-04-02 05:58:07 UTC",
            "url": "http://38.52.142.194:43032/i",
            "url_status": "offline",
            "last_online": "2026-04-02 05:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810269/",
            "reporter": "geenensp"
        }
    ],
    "3810268": [
        {
            "dateadded": "2026-04-02 05:50:19 UTC",
            "url": "http://182.127.165.93:49191/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:30:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810268/",
            "reporter": "geenensp"
        }
    ],
    "3810267": [
        {
            "dateadded": "2026-04-02 05:47:08 UTC",
            "url": "http://168.195.7.105:50498/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:22:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810267/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810266": [
        {
            "dateadded": "2026-04-02 05:41:14 UTC",
            "url": "http://190.109.227.174:60501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:50:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810266/",
            "reporter": "geenensp"
        }
    ],
    "3810265": [
        {
            "dateadded": "2026-04-02 05:23:11 UTC",
            "url": "http://59.182.214.111:49782/i",
            "url_status": "offline",
            "last_online": "2026-04-02 05:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810265/",
            "reporter": "geenensp"
        }
    ],
    "3810264": [
        {
            "dateadded": "2026-04-02 05:22:07 UTC",
            "url": "http://168.195.7.105:50498/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:42:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810264/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810263": [
        {
            "dateadded": "2026-04-02 05:19:10 UTC",
            "url": "http://182.126.127.167:34852/i",
            "url_status": "offline",
            "last_online": "2026-04-02 05:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810263/",
            "reporter": "geenensp"
        }
    ],
    "3810262": [
        {
            "dateadded": "2026-04-02 05:17:16 UTC",
            "url": "http://110.37.115.21:35203/i",
            "url_status": "offline",
            "last_online": "2026-04-02 05:17:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810262/",
            "reporter": "geenensp"
        }
    ],
    "3810261": [
        {
            "dateadded": "2026-04-02 05:14:18 UTC",
            "url": "http://27.37.62.253:53303/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:06:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810261/",
            "reporter": "geenensp"
        }
    ],
    "3810260": [
        {
            "dateadded": "2026-04-02 05:12:06 UTC",
            "url": "http://59.99.207.173:51058/i",
            "url_status": "offline",
            "last_online": "2026-04-02 05:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810260/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810259": [
        {
            "dateadded": "2026-04-02 05:04:18 UTC",
            "url": "http://42.5.6.173:35879/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:25:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810259/",
            "reporter": "geenensp"
        }
    ],
    "3810258": [
        {
            "dateadded": "2026-04-02 04:55:20 UTC",
            "url": "http://119.180.80.59:59135/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:17:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810258/",
            "reporter": "geenensp"
        }
    ],
    "3810257": [
        {
            "dateadded": "2026-04-02 04:54:15 UTC",
            "url": "http://59.182.214.111:49782/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:54:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810257/",
            "reporter": "geenensp"
        }
    ],
    "3810256": [
        {
            "dateadded": "2026-04-02 04:50:21 UTC",
            "url": "http://182.127.0.211:47285/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:02:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810256/",
            "reporter": "geenensp"
        }
    ],
    "3810255": [
        {
            "dateadded": "2026-04-02 04:49:22 UTC",
            "url": "http://182.126.127.167:34852/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:49:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810255/",
            "reporter": "geenensp"
        }
    ],
    "3810254": [
        {
            "dateadded": "2026-04-02 04:42:09 UTC",
            "url": "http://59.99.207.173:51058/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810254/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810253": [
        {
            "dateadded": "2026-04-02 04:42:07 UTC",
            "url": "http://219.157.23.60:48522/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:35:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810253/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810252": [
        {
            "dateadded": "2026-04-02 04:33:21 UTC",
            "url": "http://42.87.136.242:34258/i",
            "url_status": "offline",
            "last_online": "2026-04-08 03:53:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810252/",
            "reporter": "geenensp"
        }
    ],
    "3810251": [
        {
            "dateadded": "2026-04-02 04:17:08 UTC",
            "url": "http://219.157.23.60:48522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:46:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810251/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810250": [
        {
            "dateadded": "2026-04-02 04:16:27 UTC",
            "url": "http://59.42.91.119:44019/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:10:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810250/",
            "reporter": "geenensp"
        }
    ],
    "3810249": [
        {
            "dateadded": "2026-04-02 04:09:07 UTC",
            "url": "http://110.37.78.200:33432/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810249/",
            "reporter": "geenensp"
        }
    ],
    "3810248": [
        {
            "dateadded": "2026-04-02 04:02:07 UTC",
            "url": "http://222.142.199.224:47501/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:59:33 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810248/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810247": [
        {
            "dateadded": "2026-04-02 03:57:07 UTC",
            "url": "http://222.142.199.224:47501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:35:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810247/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810246": [
        {
            "dateadded": "2026-04-02 03:47:07 UTC",
            "url": "http://182.121.226.100:43356/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810246/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810245": [
        {
            "dateadded": "2026-04-02 03:44:22 UTC",
            "url": "http://119.114.10.28:58849/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810245/",
            "reporter": "geenensp"
        }
    ],
    "3810244": [
        {
            "dateadded": "2026-04-02 03:33:20 UTC",
            "url": "http://112.239.101.126:32921/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:50:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810244/",
            "reporter": "geenensp"
        }
    ],
    "3810243": [
        {
            "dateadded": "2026-04-02 03:22:07 UTC",
            "url": "http://182.121.226.100:43356/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810243/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810242": [
        {
            "dateadded": "2026-04-02 03:22:06 UTC",
            "url": "http://196.189.68.239:54704/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810242/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810241": [
        {
            "dateadded": "2026-04-02 03:18:33 UTC",
            "url": "http://112.239.101.126:32921/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810241/",
            "reporter": "geenensp"
        }
    ],
    "3810240": [
        {
            "dateadded": "2026-04-02 03:17:05 UTC",
            "url": "http://110.37.66.90:49106/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:51:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810240/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810239": [
        {
            "dateadded": "2026-04-02 02:52:21 UTC",
            "url": "http://59.183.105.178:46538/i",
            "url_status": "offline",
            "last_online": "2026-04-02 02:52:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810239/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810238": [
        {
            "dateadded": "2026-04-02 02:49:07 UTC",
            "url": "http://182.113.201.4:44608/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:18:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810238/",
            "reporter": "geenensp"
        }
    ],
    "3810237": [
        {
            "dateadded": "2026-04-02 02:47:14 UTC",
            "url": "http://182.112.91.244:57522/i",
            "url_status": "offline",
            "last_online": "2026-04-02 02:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810237/",
            "reporter": "geenensp"
        }
    ],
    "3810236": [
        {
            "dateadded": "2026-04-02 02:44:17 UTC",
            "url": "http://182.113.201.4:44608/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:22:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810236/",
            "reporter": "geenensp"
        }
    ],
    "3810235": [
        {
            "dateadded": "2026-04-02 02:43:09 UTC",
            "url": "http://180.190.184.148:56177/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:33:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810235/",
            "reporter": "geenensp"
        }
    ],
    "3810234": [
        {
            "dateadded": "2026-04-02 02:39:07 UTC",
            "url": "http://222.139.12.47:59105/i",
            "url_status": "offline",
            "last_online": "2026-04-02 02:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810234/",
            "reporter": "geenensp"
        }
    ],
    "3810233": [
        {
            "dateadded": "2026-04-02 02:27:07 UTC",
            "url": "http://190.109.227.174:60501/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:57:54 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810233/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810232": [
        {
            "dateadded": "2026-04-02 02:26:17 UTC",
            "url": "http://182.121.154.51:40724/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:52:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810232/",
            "reporter": "geenensp"
        }
    ],
    "3810231": [
        {
            "dateadded": "2026-04-02 02:20:19 UTC",
            "url": "http://182.112.91.244:57522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 02:20:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810231/",
            "reporter": "geenensp"
        }
    ],
    "3810230": [
        {
            "dateadded": "2026-04-02 02:08:08 UTC",
            "url": "http://222.139.12.47:59105/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 02:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810230/",
            "reporter": "geenensp"
        }
    ],
    "3810223": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-02 12:37:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810223/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810224": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-02 12:37:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810224/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810225": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-02 12:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810225/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810226": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-02 12:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810226/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810227": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-02 12:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810227/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810228": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-02 14:10:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810228/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810229": [
        {
            "dateadded": "2026-04-02 01:59:23 UTC",
            "url": "http://77.110.125.145/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-02 13:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810229/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810222": [
        {
            "dateadded": "2026-04-02 01:58:21 UTC",
            "url": "http://92.112.124.72/arm6",
            "url_status": "offline",
            "last_online": "2026-04-05 15:46:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810222/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810219": [
        {
            "dateadded": "2026-04-02 01:58:11 UTC",
            "url": "http://77.110.125.145/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-02 14:19:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810219/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810220": [
        {
            "dateadded": "2026-04-02 01:58:11 UTC",
            "url": "http://77.110.125.145/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-02 12:48:02 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810220/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810221": [
        {
            "dateadded": "2026-04-02 01:58:11 UTC",
            "url": "http://77.110.125.145/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-02 13:34:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810221/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810218": [
        {
            "dateadded": "2026-04-02 01:48:28 UTC",
            "url": "http://117.195.127.241:56251/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 01:48:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810218/",
            "reporter": "geenensp"
        }
    ],
    "3810217": [
        {
            "dateadded": "2026-04-02 01:42:08 UTC",
            "url": "http://112.248.188.55:60772/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:11:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810217/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810216": [
        {
            "dateadded": "2026-04-02 01:27:28 UTC",
            "url": "http://112.248.188.55:60772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810216/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810215": [
        {
            "dateadded": "2026-04-02 01:25:15 UTC",
            "url": "http://113.229.117.10:47859/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:21:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810215/",
            "reporter": "geenensp"
        }
    ],
    "3810214": [
        {
            "dateadded": "2026-04-02 01:21:15 UTC",
            "url": "http://182.127.165.93:49191/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:52:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810214/",
            "reporter": "geenensp"
        }
    ],
    "3810213": [
        {
            "dateadded": "2026-04-02 01:18:08 UTC",
            "url": "http://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe",
                "ua-"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810213/",
            "reporter": "tcains1"
        }
    ],
    "3810212": [
        {
            "dateadded": "2026-04-02 01:13:07 UTC",
            "url": "http://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=amp.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810212/",
            "reporter": "tcains1"
        }
    ],
    "3810211": [
        {
            "dateadded": "2026-04-02 01:09:10 UTC",
            "url": "http://117.192.244.128:58258/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:08:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810211/",
            "reporter": "geenensp"
        }
    ],
    "3810210": [
        {
            "dateadded": "2026-04-02 00:55:32 UTC",
            "url": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU",
            "url_status": "offline",
            "last_online": "2026-04-02 00:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "pw-4DKCUJ4DDXS",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810210/",
            "reporter": "tcains1"
        }
    ],
    "3810209": [
        {
            "dateadded": "2026-04-02 00:53:09 UTC",
            "url": "http://110.37.26.106:57329/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:18:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810209/",
            "reporter": "geenensp"
        }
    ],
    "3810208": [
        {
            "dateadded": "2026-04-02 00:41:16 UTC",
            "url": "http://117.192.244.128:58258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:54:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810208/",
            "reporter": "geenensp"
        }
    ],
    "3810207": [
        {
            "dateadded": "2026-04-02 00:39:24 UTC",
            "url": "http://117.216.59.88:46663/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:48:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810207/",
            "reporter": "geenensp"
        }
    ],
    "3810206": [
        {
            "dateadded": "2026-04-02 00:39:15 UTC",
            "url": "http://222.142.255.222:46473/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:28:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810206/",
            "reporter": "geenensp"
        }
    ],
    "3810205": [
        {
            "dateadded": "2026-04-02 00:12:19 UTC",
            "url": "http://222.142.255.222:46473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:31:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810205/",
            "reporter": "geenensp"
        }
    ],
    "3810204": [
        {
            "dateadded": "2026-04-01 23:59:08 UTC",
            "url": "http://45.185.93.188:40398/i",
            "url_status": "offline",
            "last_online": "2026-04-01 23:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810204/",
            "reporter": "geenensp"
        }
    ],
    "3810203": [
        {
            "dateadded": "2026-04-01 23:55:18 UTC",
            "url": "http://42.59.232.40:40757/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:49:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810203/",
            "reporter": "geenensp"
        }
    ],
    "3810202": [
        {
            "dateadded": "2026-04-01 23:49:16 UTC",
            "url": "http://123.14.218.81:39441/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:50:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810202/",
            "reporter": "geenensp"
        }
    ],
    "3810197": [
        {
            "dateadded": "2026-04-01 23:47:13 UTC",
            "url": "http://110.36.95.252:53025/i",
            "url_status": "offline",
            "last_online": "2026-04-01 23:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810197/",
            "reporter": "geenensp"
        }
    ],
    "3810198": [
        {
            "dateadded": "2026-04-01 23:47:13 UTC",
            "url": "https://raw.githubusercontent.com/lenin-huaylla/Snaptivity/refs/heads/main/Assets/Software_Scirophoria.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:29:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810198/",
            "reporter": "tcains1"
        }
    ],
    "3810199": [
        {
            "dateadded": "2026-04-01 23:47:13 UTC",
            "url": "https://github.com/Kemin500/igaming-platform/raw/refs/heads/main/services/wallet/platform_igaming_v2.2-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810199/",
            "reporter": "tcains1"
        }
    ],
    "3810200": [
        {
            "dateadded": "2026-04-01 23:47:13 UTC",
            "url": "http://45.185.93.188:40398/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 23:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810200/",
            "reporter": "geenensp"
        }
    ],
    "3810201": [
        {
            "dateadded": "2026-04-01 23:47:13 UTC",
            "url": "https://github.com/Ahmedhesham712/Session-Dualsense-Mod/raw/refs/heads/main/lib/ViGEmClient/include/Session_Dualsense_Mod_2.7-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:47:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810201/",
            "reporter": "tcains1"
        }
    ],
    "3810195": [
        {
            "dateadded": "2026-04-01 23:47:12 UTC",
            "url": "https://github.com/devwarly/c64commander/raw/refs/heads/main/tenorist/commander-c-v2.7-beta.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810195/",
            "reporter": "tcains1"
        }
    ],
    "3810196": [
        {
            "dateadded": "2026-04-01 23:47:12 UTC",
            "url": "https://github.com/Alpaymh/Python-Sorting-Algorithms-Visualizer/raw/refs/heads/master/dist/Python-Sorting-Algorithms-Visualizer/PyQt5/Qt5/plugins/generic/Sorting_Visualizer_Python_Algorithms_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810196/",
            "reporter": "tcains1"
        }
    ],
    "3810190": [
        {
            "dateadded": "2026-04-01 23:47:11 UTC",
            "url": "https://raw.githubusercontent.com/Ahmedhesham712/Session-Dualsense-Mod/refs/heads/main/lib/ViGEmClient/include/Session_Dualsense_Mod_2.7-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:09:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810190/",
            "reporter": "tcains1"
        }
    ],
    "3810191": [
        {
            "dateadded": "2026-04-01 23:47:11 UTC",
            "url": "https://raw.githubusercontent.com/Alpaymh/Python-Sorting-Algorithms-Visualizer/refs/heads/master/dist/Python-Sorting-Algorithms-Visualizer/PyQt5/Qt5/plugins/generic/Sorting_Visualizer_Python_Algorithms_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 06:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810191/",
            "reporter": "tcains1"
        }
    ],
    "3810192": [
        {
            "dateadded": "2026-04-01 23:47:11 UTC",
            "url": "https://raw.githubusercontent.com/arcanpp88/kick-tg-rewards/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/urllib3/packages/rewards_kick_tg_wanderingness.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810192/",
            "reporter": "tcains1"
        }
    ],
    "3810193": [
        {
            "dateadded": "2026-04-01 23:47:11 UTC",
            "url": "https://github.com/lenin-huaylla/Snaptivity/raw/refs/heads/main/Assets/Software_Scirophoria.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:03:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810193/",
            "reporter": "tcains1"
        }
    ],
    "3810194": [
        {
            "dateadded": "2026-04-01 23:47:11 UTC",
            "url": "https://raw.githubusercontent.com/Kemin500/igaming-platform/refs/heads/main/services/wallet/platform_igaming_v2.2-alpha.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:25:22 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810194/",
            "reporter": "tcains1"
        }
    ],
    "3810188": [
        {
            "dateadded": "2026-04-01 23:47:10 UTC",
            "url": "https://github.com/EngAbdallahD/wildflover/raw/refs/heads/main/src/i18n/Software_1.4-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810188/",
            "reporter": "tcains1"
        }
    ],
    "3810189": [
        {
            "dateadded": "2026-04-01 23:47:10 UTC",
            "url": "https://raw.githubusercontent.com/Nahoom1/HUAYU-RM-D1078-LIRC-config-and-Kodi-keymaps/refs/heads/main/Byzantian/HUAY-Kodi-keymaps-LIR-and-R-config-v2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810189/",
            "reporter": "tcains1"
        }
    ],
    "3810182": [
        {
            "dateadded": "2026-04-01 23:47:09 UTC",
            "url": "https://raw.githubusercontent.com/Chinnaganesh/level-xp-system/refs/heads/master/docs/level-xp-system-v1.9-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:54:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810182/",
            "reporter": "tcains1"
        }
    ],
    "3810183": [
        {
            "dateadded": "2026-04-01 23:47:09 UTC",
            "url": "https://raw.githubusercontent.com/EngAbdallahD/wildflover/refs/heads/main/src/i18n/Software_1.4-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810183/",
            "reporter": "tcains1"
        }
    ],
    "3810184": [
        {
            "dateadded": "2026-04-01 23:47:09 UTC",
            "url": "https://raw.githubusercontent.com/Alpaymh/ExitLag/refs/heads/master/AracServis/Exit_Lag_iliococcygeal.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:42:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810184/",
            "reporter": "tcains1"
        }
    ],
    "3810185": [
        {
            "dateadded": "2026-04-01 23:47:09 UTC",
            "url": "https://github.com/Alpaymh/ExitLag/raw/refs/heads/master/AracServis/Exit_Lag_iliococcygeal.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:03:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810185/",
            "reporter": "tcains1"
        }
    ],
    "3810186": [
        {
            "dateadded": "2026-04-01 23:47:09 UTC",
            "url": "https://github.com/arcanpp88/kick-tg-rewards/raw/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/urllib3/packages/rewards_kick_tg_wanderingness.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810186/",
            "reporter": "tcains1"
        }
    ],
    "3810187": [
        {
            "dateadded": "2026-04-01 23:47:09 UTC",
            "url": "https://github.com/Nahoom1/HUAYU-RM-D1078-LIRC-config-and-Kodi-keymaps/raw/refs/heads/main/Byzantian/HUAY-Kodi-keymaps-LIR-and-R-config-v2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810187/",
            "reporter": "tcains1"
        }
    ],
    "3810181": [
        {
            "dateadded": "2026-04-01 23:47:08 UTC",
            "url": "https://github.com/Chinnaganesh/level-xp-system/raw/refs/heads/master/docs/level-xp-system-v1.9-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:52:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810181/",
            "reporter": "tcains1"
        }
    ],
    "3810180": [
        {
            "dateadded": "2026-04-01 23:32:13 UTC",
            "url": "https://raw.githubusercontent.com/zedkali/SFB---Survival-FPS-Booster/refs/heads/main/orthopinacoid/Booster-SF-FP-Survival-3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:52:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810180/",
            "reporter": "tcains1"
        }
    ],
    "3810176": [
        {
            "dateadded": "2026-04-01 23:32:12 UTC",
            "url": "https://raw.githubusercontent.com/SoufianAyad/eight_puzzle_app/refs/heads/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/puzzle-app-eight-draughtswoman.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:44:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810176/",
            "reporter": "tcains1"
        }
    ],
    "3810177": [
        {
            "dateadded": "2026-04-01 23:32:12 UTC",
            "url": "https://github.com/Josiasgq/fps-advanced/raw/refs/heads/main/shader/advanced_fps_v1.0-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810177/",
            "reporter": "tcains1"
        }
    ],
    "3810178": [
        {
            "dateadded": "2026-04-01 23:32:12 UTC",
            "url": "https://raw.githubusercontent.com/Ginola5/syronss-lol-auto-assistant/refs/heads/main/src/assistant-auto-syronss-lol-v1.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:59:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810178/",
            "reporter": "tcains1"
        }
    ],
    "3810179": [
        {
            "dateadded": "2026-04-01 23:32:12 UTC",
            "url": "https://raw.githubusercontent.com/devwarly/c64commander/refs/heads/main/tenorist/commander-c-v2.7-beta.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:08:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810179/",
            "reporter": "tcains1"
        }
    ],
    "3810175": [
        {
            "dateadded": "2026-04-01 23:32:11 UTC",
            "url": "https://github.com/SoufianAyad/eight_puzzle_app/raw/refs/heads/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/puzzle-app-eight-draughtswoman.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:50:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810175/",
            "reporter": "tcains1"
        }
    ],
    "3810170": [
        {
            "dateadded": "2026-04-01 23:32:10 UTC",
            "url": "https://raw.githubusercontent.com/Josiasgq/fps-advanced/refs/heads/main/shader/advanced_fps_v1.0-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810170/",
            "reporter": "tcains1"
        }
    ],
    "3810171": [
        {
            "dateadded": "2026-04-01 23:32:10 UTC",
            "url": "https://github.com/Ginola5/syronss-lol-auto-assistant/raw/refs/heads/main/src/assistant-auto-syronss-lol-v1.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:08:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810171/",
            "reporter": "tcains1"
        }
    ],
    "3810172": [
        {
            "dateadded": "2026-04-01 23:32:10 UTC",
            "url": "https://github.com/devwarly/c64commander/raw/refs/heads/main/tenorist/c_commander_v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810172/",
            "reporter": "tcains1"
        }
    ],
    "3810173": [
        {
            "dateadded": "2026-04-01 23:32:10 UTC",
            "url": "https://github.com/AviRedDevil/vibestrym-assets/raw/refs/heads/main/frontend/public/assets_vibestrym_v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:08:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810173/",
            "reporter": "tcains1"
        }
    ],
    "3810174": [
        {
            "dateadded": "2026-04-01 23:32:10 UTC",
            "url": "https://raw.githubusercontent.com/Dev-bit-cyber/FGCtool/refs/heads/master/synchrone/FG-Ctool-psalmy.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:00:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810174/",
            "reporter": "tcains1"
        }
    ],
    "3810164": [
        {
            "dateadded": "2026-04-01 23:32:09 UTC",
            "url": "https://raw.githubusercontent.com/devwarly/c64commander/refs/heads/main/tenorist/c_commander_v1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810164/",
            "reporter": "tcains1"
        }
    ],
    "3810165": [
        {
            "dateadded": "2026-04-01 23:32:09 UTC",
            "url": "https://github.com/zedkali/SFB---Survival-FPS-Booster/raw/refs/heads/main/orthopinacoid/Booster-SF-FP-Survival-3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810165/",
            "reporter": "tcains1"
        }
    ],
    "3810166": [
        {
            "dateadded": "2026-04-01 23:32:09 UTC",
            "url": "https://github.com/Dev-bit-cyber/FGCtool/raw/refs/heads/master/synchrone/FG-Ctool-psalmy.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810166/",
            "reporter": "tcains1"
        }
    ],
    "3810167": [
        {
            "dateadded": "2026-04-01 23:32:09 UTC",
            "url": "http://222.138.148.90:38702/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:02:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810167/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810168": [
        {
            "dateadded": "2026-04-01 23:32:09 UTC",
            "url": "https://raw.githubusercontent.com/AviRedDevil/vibestrym-assets/refs/heads/main/frontend/public/assets_vibestrym_v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:14:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810168/",
            "reporter": "tcains1"
        }
    ],
    "3810169": [
        {
            "dateadded": "2026-04-01 23:32:09 UTC",
            "url": "https://github.com/Gabor996/LeeSin/raw/refs/heads/main/_includes/Sin-Lee-2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:16:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810169/",
            "reporter": "tcains1"
        }
    ],
    "3810161": [
        {
            "dateadded": "2026-04-01 23:32:08 UTC",
            "url": "https://raw.githubusercontent.com/Gabor996/LeeSin/refs/heads/main/_includes/Sin-Lee-2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810161/",
            "reporter": "tcains1"
        }
    ],
    "3810162": [
        {
            "dateadded": "2026-04-01 23:32:08 UTC",
            "url": "https://raw.githubusercontent.com/CrackOrCode/minecode-mcp/refs/heads/main/example/crystal_dimension/data/crystal/worldgen/minecode_mcp_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810162/",
            "reporter": "tcains1"
        }
    ],
    "3810163": [
        {
            "dateadded": "2026-04-01 23:32:08 UTC",
            "url": "https://github.com/CrackOrCode/minecode-mcp/raw/refs/heads/main/example/crystal_dimension/data/crystal/worldgen/minecode_mcp_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810163/",
            "reporter": "tcains1"
        }
    ],
    "3810160": [
        {
            "dateadded": "2026-04-01 23:26:09 UTC",
            "url": "https://github.com/kiuf345/mobi/raw/refs/heads/main/deco/63.txt",
            "url_status": "offline",
            "last_online": "2026-04-07 05:03:04 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810160/",
            "reporter": "tcains1"
        }
    ],
    "3810159": [
        {
            "dateadded": "2026-04-01 23:26:05 UTC",
            "url": "https://raw.githubusercontent.com/kiuf345/mobi/refs/heads/main/deco/63.txt",
            "url_status": "offline",
            "last_online": "2026-04-07 03:40:35 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810159/",
            "reporter": "tcains1"
        }
    ],
    "3810158": [
        {
            "dateadded": "2026-04-01 23:22:13 UTC",
            "url": "https://github.com/070789-juanitutus/AmazeGaming/raw/refs/heads/main/colpeurysis/Amaze-Gaming-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810158/",
            "reporter": "tcains1"
        }
    ],
    "3810155": [
        {
            "dateadded": "2026-04-01 23:22:11 UTC",
            "url": "https://raw.githubusercontent.com/petersonnjuguna/Controller-for-disabled/refs/heads/main/honda/for_disabled_Controller_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810155/",
            "reporter": "tcains1"
        }
    ],
    "3810156": [
        {
            "dateadded": "2026-04-01 23:22:11 UTC",
            "url": "https://github.com/petersonnjuguna/petersonnjuguna.github.io/raw/refs/heads/main/tinware/github-io-petersonnjuguna-v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:58:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810156/",
            "reporter": "tcains1"
        }
    ],
    "3810157": [
        {
            "dateadded": "2026-04-01 23:22:11 UTC",
            "url": "http://123.14.218.81:39441/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810157/",
            "reporter": "geenensp"
        }
    ],
    "3810144": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://raw.githubusercontent.com/donsdons1983/nextgen-potato-gaming/refs/heads/main/adelphophagy/gaming_potato_nextgen_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:38:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810144/",
            "reporter": "tcains1"
        }
    ],
    "3810145": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://github.com/petersonnjuguna/petersonnjuguna.github.io/raw/refs/heads/main/tinware/github_petersonnjuguna_io_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:05:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810145/",
            "reporter": "tcains1"
        }
    ],
    "3810146": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://raw.githubusercontent.com/070789-juanitutus/AmazeGaming/refs/heads/main/colpeurysis/Gaming_Amaze_1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:51:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810146/",
            "reporter": "tcains1"
        }
    ],
    "3810147": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://github.com/070789-juanitutus/AmazeGaming/raw/refs/heads/main/colpeurysis/Gaming_Amaze_1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:23:50 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810147/",
            "reporter": "tcains1"
        }
    ],
    "3810148": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://github.com/donsdons1983/nextgen-potato-gaming/raw/refs/heads/main/adelphophagy/gaming_potato_nextgen_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:10:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810148/",
            "reporter": "tcains1"
        }
    ],
    "3810149": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://github.com/petersonnjuguna/Controller-for-disabled/raw/refs/heads/main/honda/Controller-disabled-for-v2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:04:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810149/",
            "reporter": "tcains1"
        }
    ],
    "3810150": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://raw.githubusercontent.com/petersonnjuguna/petersonnjuguna.github.io/refs/heads/main/tinware/github-io-petersonnjuguna-v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810150/",
            "reporter": "tcains1"
        }
    ],
    "3810151": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://raw.githubusercontent.com/petersonnjuguna/petersonnjuguna.github.io/refs/heads/main/tinware/github_petersonnjuguna_io_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810151/",
            "reporter": "tcains1"
        }
    ],
    "3810152": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://raw.githubusercontent.com/petersonnjuguna/Controller-for-disabled/refs/heads/main/honda/Controller-disabled-for-v2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:38:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810152/",
            "reporter": "tcains1"
        }
    ],
    "3810153": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://raw.githubusercontent.com/070789-juanitutus/AmazeGaming/refs/heads/main/colpeurysis/Amaze-Gaming-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:53:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810153/",
            "reporter": "tcains1"
        }
    ],
    "3810154": [
        {
            "dateadded": "2026-04-01 23:22:10 UTC",
            "url": "https://github.com/petersonnjuguna/Controller-for-disabled/raw/refs/heads/main/honda/for_disabled_Controller_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:21:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810154/",
            "reporter": "tcains1"
        }
    ],
    "3810143": [
        {
            "dateadded": "2026-04-01 23:18:11 UTC",
            "url": "https://github.com/Hulett77/VALORANT-EFI-DRIVER-Cheat-Hack/raw/refs/heads/main/Driver/Driver/VALORAN_EF_DRIVE_Cheat_Hack_3.6-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SnartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810143/",
            "reporter": "tcains1"
        }
    ],
    "3810142": [
        {
            "dateadded": "2026-04-01 23:18:09 UTC",
            "url": "https://raw.githubusercontent.com/Hulett77/VALORANT-EFI-DRIVER-Cheat-Hack/refs/heads/main/Driver/Driver/VALORAN_EF_DRIVE_Cheat_Hack_3.6-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SnartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810142/",
            "reporter": "tcains1"
        }
    ],
    "3810141": [
        {
            "dateadded": "2026-04-01 23:11:16 UTC",
            "url": "http://42.224.27.98:38433/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810141/",
            "reporter": "geenensp"
        }
    ],
    "3810140": [
        {
            "dateadded": "2026-04-01 23:04:08 UTC",
            "url": "https://raw.githubusercontent.com/reagan567/kinoite-bluebuild/refs/heads/main/files/system/usr/lib/kinoite_bluebuild_v3.9-alpha.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:07:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810140/",
            "reporter": "tcains1"
        }
    ],
    "3810129": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software_v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810129/",
            "reporter": "tcains1"
        }
    ],
    "3810130": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software-3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:18:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810130/",
            "reporter": "tcains1"
        }
    ],
    "3810131": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/Christ893/wholesaleshop_system/raw/refs/heads/main/assets/wholesaleshop_system_v2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:13:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810131/",
            "reporter": "tcains1"
        }
    ],
    "3810132": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/Christ893/utkeeper99/raw/refs/heads/main/utkeeper/libs/utkeeper-v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:02:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810132/",
            "reporter": "tcains1"
        }
    ],
    "3810133": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software-3.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:26:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810133/",
            "reporter": "tcains1"
        }
    ],
    "3810134": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://raw.githubusercontent.com/Christ893/wholesaleshop_system/refs/heads/main/assets/wholesaleshop_system_v2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:25:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810134/",
            "reporter": "tcains1"
        }
    ],
    "3810135": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://raw.githubusercontent.com/Christ893/utkeeper99/refs/heads/main/utkeeper/libs/utkeeper-v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:08:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810135/",
            "reporter": "tcains1"
        }
    ],
    "3810136": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software-3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:54:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810136/",
            "reporter": "tcains1"
        }
    ],
    "3810137": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/reagan567/kinoite-bluebuild/raw/refs/heads/main/files/system/usr/lib/kinoite_bluebuild_v3.9-alpha.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:49:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810137/",
            "reporter": "tcains1"
        }
    ],
    "3810138": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software-3.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:13:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810138/",
            "reporter": "tcains1"
        }
    ],
    "3810139": [
        {
            "dateadded": "2026-04-01 23:03:09 UTC",
            "url": "https://github.com/danilofelipe32/desafio-sudoku/raw/refs/heads/main/components/desafio-sudoku-v3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:50:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810139/",
            "reporter": "tcains1"
        }
    ],
    "3810128": [
        {
            "dateadded": "2026-04-01 23:03:08 UTC",
            "url": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software_v1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:56:05 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810128/",
            "reporter": "tcains1"
        }
    ],
    "3810127": [
        {
            "dateadded": "2026-04-01 23:02:17 UTC",
            "url": "http://61.52.159.136:57856/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:26:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810127/",
            "reporter": "geenensp"
        }
    ],
    "3810126": [
        {
            "dateadded": "2026-04-01 22:59:08 UTC",
            "url": "https://github.com/deka214/BanGKlotski/raw/refs/heads/main/images/G-Klotski-Ban-2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:29:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810126/",
            "reporter": "tcains1"
        }
    ],
    "3810123": [
        {
            "dateadded": "2026-04-01 22:59:07 UTC",
            "url": "https://raw.githubusercontent.com/deka214/instapy-quickstart/refs/heads/master/installation/Linux/instapy-quickstart-v2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:59:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810123/",
            "reporter": "tcains1"
        }
    ],
    "3810124": [
        {
            "dateadded": "2026-04-01 22:59:07 UTC",
            "url": "https://raw.githubusercontent.com/deka214/BanGKlotski/refs/heads/main/images/G-Klotski-Ban-2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:29:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810124/",
            "reporter": "tcains1"
        }
    ],
    "3810125": [
        {
            "dateadded": "2026-04-01 22:59:07 UTC",
            "url": "https://github.com/deka214/instapy-quickstart/raw/refs/heads/master/installation/Linux/instapy-quickstart-v2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:04:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810125/",
            "reporter": "tcains1"
        }
    ],
    "3810122": [
        {
            "dateadded": "2026-04-01 22:57:12 UTC",
            "url": "https://raw.githubusercontent.com/Gomerpromiscuous139/YimMenu/refs/heads/main/Tarumari/Menu-Yim-1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810122/",
            "reporter": "tcains1"
        }
    ],
    "3810121": [
        {
            "dateadded": "2026-04-01 22:56:07 UTC",
            "url": "https://github.com/Gomerpromiscuous139/YimMenu/raw/refs/heads/main/Tarumari/Menu-Yim-1.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 05:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810121/",
            "reporter": "tcains1"
        }
    ],
    "3810120": [
        {
            "dateadded": "2026-04-01 22:53:10 UTC",
            "url": "http://42.224.27.98:38433/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:28:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810120/",
            "reporter": "geenensp"
        }
    ],
    "3810119": [
        {
            "dateadded": "2026-04-01 22:51:10 UTC",
            "url": "https://gitlab.com/khannely/derrxt/-/raw/main/U7Q7R23U7669.exe",
            "url_status": "offline",
            "last_online": "2026-04-02 10:17:38 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810119/",
            "reporter": "tcains1"
        }
    ],
    "3810118": [
        {
            "dateadded": "2026-04-01 22:45:19 UTC",
            "url": "http://61.3.101.37:55029/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:24:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810118/",
            "reporter": "geenensp"
        }
    ],
    "3810117": [
        {
            "dateadded": "2026-04-01 22:41:10 UTC",
            "url": "https://pastebin.com/raw/QKQwYyHd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810117/",
            "reporter": "tcains1"
        }
    ],
    "3810116": [
        {
            "dateadded": "2026-04-01 22:37:17 UTC",
            "url": "http://42.5.225.114:41876/i",
            "url_status": "offline",
            "last_online": "2026-04-05 11:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810116/",
            "reporter": "geenensp"
        }
    ],
    "3810115": [
        {
            "dateadded": "2026-04-01 22:36:10 UTC",
            "url": "https://q55at0cm.apexharvestor.digital/?=check&&actmn=dOMbUQDvOGwKjdmP",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810115/",
            "reporter": "anonymous"
        }
    ],
    "3810114": [
        {
            "dateadded": "2026-04-01 22:33:14 UTC",
            "url": "https://gitlab.com/khannely/derrxt/-/raw/main/259UZDS8POXH.exe",
            "url_status": "offline",
            "last_online": "2026-04-02 10:46:27 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "rustystealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810114/",
            "reporter": "tcains1"
        }
    ],
    "3810113": [
        {
            "dateadded": "2026-04-01 22:30:11 UTC",
            "url": "http://61.52.159.136:57856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 17:17:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810113/",
            "reporter": "geenensp"
        }
    ],
    "3810112": [
        {
            "dateadded": "2026-04-01 22:22:17 UTC",
            "url": "https://github.com/masschens/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",
            "url_status": "offline",
            "last_online": "2026-04-07 04:36:00 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810112/",
            "reporter": "tcains1"
        }
    ],
    "3810111": [
        {
            "dateadded": "2026-04-01 22:22:13 UTC",
            "url": "https://raw.githubusercontent.com/masschens/FiveM-Spoofer/refs/heads/main/CFXBypass.exe",
            "url_status": "offline",
            "last_online": "2026-04-07 04:45:07 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810111/",
            "reporter": "tcains1"
        }
    ],
    "3810110": [
        {
            "dateadded": "2026-04-01 22:17:06 UTC",
            "url": "http://115.48.150.44:53425/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810110/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810109": [
        {
            "dateadded": "2026-04-01 22:02:21 UTC",
            "url": "http://27.215.87.176:33041/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:02:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810109/",
            "reporter": "geenensp"
        }
    ],
    "3810108": [
        {
            "dateadded": "2026-04-01 22:02:08 UTC",
            "url": "http://115.48.150.44:53425/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:20:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810108/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810106": [
        {
            "dateadded": "2026-04-01 21:48:25 UTC",
            "url": "http://87.121.84.45/main_spc",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810106/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810107": [
        {
            "dateadded": "2026-04-01 21:48:25 UTC",
            "url": "http://87.121.84.45/main_x86_64",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810107/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810105": [
        {
            "dateadded": "2026-04-01 21:48:22 UTC",
            "url": "http://87.121.84.45/main_mips",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810105/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810094": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://87.121.84.45/main_mpsl",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810094/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810095": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://87.121.84.45/main_arm",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810095/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810096": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://87.121.84.45/main_sh4",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810096/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810097": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://87.121.84.45/main_x86",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810097/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810098": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/m68k",
            "url_status": "offline",
            "last_online": "2026-04-05 09:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810098/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810099": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/i686",
            "url_status": "offline",
            "last_online": "2026-04-05 10:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810099/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810100": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/aarch64",
            "url_status": "offline",
            "last_online": "2026-04-05 10:29:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810100/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810101": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 09:41:44 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810101/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810102": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/powerpc",
            "url_status": "offline",
            "last_online": "2026-04-05 10:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810102/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810103": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-05 10:39:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810103/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810104": [
        {
            "dateadded": "2026-04-01 21:48:21 UTC",
            "url": "http://91.92.243.209/armv7l",
            "url_status": "offline",
            "last_online": "2026-04-05 10:07:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810104/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810093": [
        {
            "dateadded": "2026-04-01 21:48:10 UTC",
            "url": "http://87.121.84.45/debug.dbg",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810093/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810091": [
        {
            "dateadded": "2026-04-01 21:47:13 UTC",
            "url": "http://91.92.243.209/mips",
            "url_status": "offline",
            "last_online": "2026-04-05 10:22:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810091/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810092": [
        {
            "dateadded": "2026-04-01 21:47:13 UTC",
            "url": "http://91.92.243.209/arm",
            "url_status": "offline",
            "last_online": "2026-04-05 10:34:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810092/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810090": [
        {
            "dateadded": "2026-04-01 21:44:10 UTC",
            "url": "http://27.215.87.176:33041/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810090/",
            "reporter": "geenensp"
        }
    ],
    "3810089": [
        {
            "dateadded": "2026-04-01 21:41:19 UTC",
            "url": "http://42.5.225.114:41876/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 09:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810089/",
            "reporter": "geenensp"
        }
    ],
    "3810088": [
        {
            "dateadded": "2026-04-01 21:22:08 UTC",
            "url": "http://59.88.146.238:57073/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:22:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810088/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810087": [
        {
            "dateadded": "2026-04-01 21:17:05 UTC",
            "url": "http://85.239.147.6/files/6334661508/tXzJQ0t.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810087/",
            "reporter": "Bitsight"
        }
    ],
    "3810086": [
        {
            "dateadded": "2026-04-01 21:11:11 UTC",
            "url": "http://162.255.251.91:43511/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810086/",
            "reporter": "geenensp"
        }
    ],
    "3810085": [
        {
            "dateadded": "2026-04-01 21:01:17 UTC",
            "url": "http://59.88.146.238:57073/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:09:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810085/",
            "reporter": "geenensp"
        }
    ],
    "3810084": [
        {
            "dateadded": "2026-04-01 20:56:10 UTC",
            "url": "http://120.28.144.161:47991/i",
            "url_status": "offline",
            "last_online": "2026-04-07 04:44:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810084/",
            "reporter": "geenensp"
        }
    ],
    "3810083": [
        {
            "dateadded": "2026-04-01 20:50:18 UTC",
            "url": "http://200.59.83.63:39318/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:44:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810083/",
            "reporter": "geenensp"
        }
    ],
    "3810082": [
        {
            "dateadded": "2026-04-01 20:44:12 UTC",
            "url": "http://162.255.251.91:43511/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:48:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810082/",
            "reporter": "geenensp"
        }
    ],
    "3810081": [
        {
            "dateadded": "2026-04-01 20:32:06 UTC",
            "url": "http://125.44.47.122:48909/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:48:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810081/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810080": [
        {
            "dateadded": "2026-04-01 20:30:16 UTC",
            "url": "http://123.11.78.255:46500/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810080/",
            "reporter": "geenensp"
        }
    ],
    "3810079": [
        {
            "dateadded": "2026-04-01 20:28:16 UTC",
            "url": "http://120.28.144.161:47991/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 04:47:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810079/",
            "reporter": "geenensp"
        }
    ],
    "3810078": [
        {
            "dateadded": "2026-04-01 20:21:09 UTC",
            "url": "https://ui2rn7ei.apexharvestor.digital/?=check&&actmn=ZrCPkQWOaDvCNtFB",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810078/",
            "reporter": "anonymous"
        }
    ],
    "3810077": [
        {
            "dateadded": "2026-04-01 20:18:08 UTC",
            "url": "https://force-field.infodynamics.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 20:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810077/",
            "reporter": "anonymous"
        }
    ],
    "3810076": [
        {
            "dateadded": "2026-04-01 20:14:08 UTC",
            "url": "https://range-extend.signalvector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 20:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810076/",
            "reporter": "anonymous"
        }
    ],
    "3810075": [
        {
            "dateadded": "2026-04-01 20:11:14 UTC",
            "url": "https://ping-gate.signalvector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 20:11:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810075/",
            "reporter": "anonymous"
        }
    ],
    "3810074": [
        {
            "dateadded": "2026-04-01 20:09:09 UTC",
            "url": "http://200.59.83.63:39318/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810074/",
            "reporter": "geenensp"
        }
    ],
    "3810073": [
        {
            "dateadded": "2026-04-01 20:05:17 UTC",
            "url": "http://123.11.78.255:46500/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:16:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810073/",
            "reporter": "geenensp"
        }
    ],
    "3810072": [
        {
            "dateadded": "2026-04-01 20:02:07 UTC",
            "url": "http://125.44.47.122:48909/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810072/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810071": [
        {
            "dateadded": "2026-04-01 20:01:09 UTC",
            "url": "https://wave-form.signalvector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 20:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810071/",
            "reporter": "anonymous"
        }
    ],
    "3810070": [
        {
            "dateadded": "2026-04-01 19:56:09 UTC",
            "url": "https://tower-sync.signalvector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810070/",
            "reporter": "anonymous"
        }
    ],
    "3810069": [
        {
            "dateadded": "2026-04-01 19:50:08 UTC",
            "url": "https://radio-freq.signalvector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810069/",
            "reporter": "anonymous"
        }
    ],
    "3810068": [
        {
            "dateadded": "2026-04-01 19:49:21 UTC",
            "url": "http://59.182.243.26:37634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:48:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810068/",
            "reporter": "geenensp"
        }
    ],
    "3810067": [
        {
            "dateadded": "2026-04-01 19:45:18 UTC",
            "url": "https://beam-target.signalvector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810067/",
            "reporter": "anonymous"
        }
    ],
    "3810066": [
        {
            "dateadded": "2026-04-01 19:40:11 UTC",
            "url": "http://42.239.191.217:53218/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:51:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810066/",
            "reporter": "geenensp"
        }
    ],
    "3810065": [
        {
            "dateadded": "2026-04-01 19:39:08 UTC",
            "url": "https://raster-api.pixelengine.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810065/",
            "reporter": "anonymous"
        }
    ],
    "3810064": [
        {
            "dateadded": "2026-04-01 19:36:04 UTC",
            "url": "http://85.239.147.6/files/8408827406/a6uEO3h.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810064/",
            "reporter": "Bitsight"
        }
    ],
    "3810063": [
        {
            "dateadded": "2026-04-01 19:33:07 UTC",
            "url": "https://draw-logic.pixelengine.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810063/",
            "reporter": "anonymous"
        }
    ],
    "3810062": [
        {
            "dateadded": "2026-04-01 19:27:09 UTC",
            "url": "https://frame-buffer.pixelengine.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810062/",
            "reporter": "anonymous"
        }
    ],
    "3810061": [
        {
            "dateadded": "2026-04-01 19:26:15 UTC",
            "url": "http://24.54.85.143:47633/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:52:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810061/",
            "reporter": "geenensp"
        }
    ],
    "3810060": [
        {
            "dateadded": "2026-04-01 19:24:05 UTC",
            "url": "http://85.239.147.6/files/6728144278/MjTrgLJ.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810060/",
            "reporter": "Bitsight"
        }
    ],
    "3810059": [
        {
            "dateadded": "2026-04-01 19:23:11 UTC",
            "url": "https://color-map.pixelengine.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810059/",
            "reporter": "anonymous"
        }
    ],
    "3810058": [
        {
            "dateadded": "2026-04-01 19:17:12 UTC",
            "url": "https://image-proc.pixelengine.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810058/",
            "reporter": "anonymous"
        }
    ],
    "3810057": [
        {
            "dateadded": "2026-04-01 19:13:05 UTC",
            "url": "http://85.239.147.6/files/7942715918/md78wA4.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810057/",
            "reporter": "c2hunter"
        }
    ],
    "3810056": [
        {
            "dateadded": "2026-04-01 19:05:18 UTC",
            "url": "https://drift-core.nanostream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:05:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810056/",
            "reporter": "anonymous"
        }
    ],
    "3810055": [
        {
            "dateadded": "2026-04-01 19:05:10 UTC",
            "url": "http://42.239.191.217:53218/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:34:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810055/",
            "reporter": "geenensp"
        }
    ],
    "3810054": [
        {
            "dateadded": "2026-04-01 19:05:09 UTC",
            "url": "http://103.206.207.23:42009/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810054/",
            "reporter": "geenensp"
        }
    ],
    "3810053": [
        {
            "dateadded": "2026-04-01 19:02:17 UTC",
            "url": "http://24.54.85.143:47633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:24:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810053/",
            "reporter": "geenensp"
        }
    ],
    "3810052": [
        {
            "dateadded": "2026-04-01 19:00:13 UTC",
            "url": "https://pulse-svc.nanostream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 19:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810052/",
            "reporter": "anonymous"
        }
    ],
    "3810051": [
        {
            "dateadded": "2026-04-01 18:54:08 UTC",
            "url": "https://fast-track.nanostream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810051/",
            "reporter": "anonymous"
        }
    ],
    "3810050": [
        {
            "dateadded": "2026-04-01 18:48:08 UTC",
            "url": "https://small-packet.nanostream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810050/",
            "reporter": "anonymous"
        }
    ],
    "3810049": [
        {
            "dateadded": "2026-04-01 18:48:07 UTC",
            "url": "http://42.239.227.216:35637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:44:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810049/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810048": [
        {
            "dateadded": "2026-04-01 18:47:08 UTC",
            "url": "http://42.239.227.216:35637/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:18:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810048/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810047": [
        {
            "dateadded": "2026-04-01 18:43:12 UTC",
            "url": "https://rapid-io.nanostream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810047/",
            "reporter": "anonymous"
        }
    ],
    "3810046": [
        {
            "dateadded": "2026-04-01 18:40:18 UTC",
            "url": "http://110.37.62.32:36321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 18:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810046/",
            "reporter": "geenensp"
        }
    ],
    "3810045": [
        {
            "dateadded": "2026-04-01 18:37:20 UTC",
            "url": "http://110.37.92.149:38332/i",
            "url_status": "offline",
            "last_online": "2026-04-01 18:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810045/",
            "reporter": "geenensp"
        }
    ],
    "3810044": [
        {
            "dateadded": "2026-04-01 18:37:10 UTC",
            "url": "https://micro-bit.nanostream.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810044/",
            "reporter": "anonymous"
        }
    ],
    "3810043": [
        {
            "dateadded": "2026-04-01 18:32:07 UTC",
            "url": "https://zone-portal.cyberlattice.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810043/",
            "reporter": "anonymous"
        }
    ],
    "3810042": [
        {
            "dateadded": "2026-04-01 18:27:11 UTC",
            "url": "http://60.162.40.39:53373/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:28:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810042/",
            "reporter": "geenensp"
        }
    ],
    "3810041": [
        {
            "dateadded": "2026-04-01 18:27:06 UTC",
            "url": "http://110.37.103.213:38750/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:54:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810041/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3810040": [
        {
            "dateadded": "2026-04-01 18:26:10 UTC",
            "url": "https://link-vault.cyberlattice.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810040/",
            "reporter": "anonymous"
        }
    ],
    "3810039": [
        {
            "dateadded": "2026-04-01 18:21:09 UTC",
            "url": "https://net-fiber.cyberlattice.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810039/",
            "reporter": "anonymous"
        }
    ],
    "3810038": [
        {
            "dateadded": "2026-04-01 18:14:08 UTC",
            "url": "https://shield-base.cyberlattice.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810038/",
            "reporter": "anonymous"
        }
    ],
    "3810037": [
        {
            "dateadded": "2026-04-01 18:11:10 UTC",
            "url": "http://27.206.81.60:51577/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810037/",
            "reporter": "geenensp"
        }
    ],
    "3810036": [
        {
            "dateadded": "2026-04-01 18:09:13 UTC",
            "url": "https://grid-secure.cyberlattice.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810036/",
            "reporter": "anonymous"
        }
    ],
    "3810035": [
        {
            "dateadded": "2026-04-01 18:08:08 UTC",
            "url": "http://110.37.92.149:38332/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 18:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810035/",
            "reporter": "geenensp"
        }
    ],
    "3810034": [
        {
            "dateadded": "2026-04-01 18:04:09 UTC",
            "url": "https://mesh-gate.cyberlattice.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 18:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810034/",
            "reporter": "anonymous"
        }
    ],
    "3810033": [
        {
            "dateadded": "2026-04-01 18:03:19 UTC",
            "url": "http://60.162.40.39:53373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:09:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810033/",
            "reporter": "geenensp"
        }
    ],
    "3810032": [
        {
            "dateadded": "2026-04-01 17:58:08 UTC",
            "url": "https://pool-manager.datacascade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810032/",
            "reporter": "anonymous"
        }
    ],
    "3810031": [
        {
            "dateadded": "2026-04-01 17:52:12 UTC",
            "url": "https://level-check.datacascade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810031/",
            "reporter": "anonymous"
        }
    ],
    "3810030": [
        {
            "dateadded": "2026-04-01 17:51:18 UTC",
            "url": "http://222.142.254.76:44360/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:25:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810030/",
            "reporter": "geenensp"
        }
    ],
    "3810029": [
        {
            "dateadded": "2026-04-01 17:47:13 UTC",
            "url": "https://tier-access.datacascade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810029/",
            "reporter": "anonymous"
        }
    ],
    "3810028": [
        {
            "dateadded": "2026-04-01 17:45:23 UTC",
            "url": "http://117.209.12.20:53213/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:33:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810028/",
            "reporter": "geenensp"
        }
    ],
    "3810027": [
        {
            "dateadded": "2026-04-01 17:41:07 UTC",
            "url": "https://bulk-logic.datacascade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810027/",
            "reporter": "anonymous"
        }
    ],
    "3810026": [
        {
            "dateadded": "2026-04-01 17:35:24 UTC",
            "url": "http://59.183.98.231:43200/i",
            "url_status": "offline",
            "last_online": "2026-04-01 17:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810026/",
            "reporter": "geenensp"
        }
    ],
    "3810025": [
        {
            "dateadded": "2026-04-01 17:35:12 UTC",
            "url": "https://stream-view.datacascade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810025/",
            "reporter": "anonymous"
        }
    ],
    "3810020": [
        {
            "dateadded": "2026-04-01 17:32:14 UTC",
            "url": "http://87.121.84.45/main_arm5",
            "url_status": "offline",
            "last_online": "2026-04-01 22:14:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810020/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810021": [
        {
            "dateadded": "2026-04-01 17:32:14 UTC",
            "url": "http://87.121.84.45/main_m68k",
            "url_status": "offline",
            "last_online": "2026-04-01 21:26:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810021/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810022": [
        {
            "dateadded": "2026-04-01 17:32:14 UTC",
            "url": "http://87.121.84.45/main_arm7",
            "url_status": "offline",
            "last_online": "2026-04-01 22:38:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810022/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810023": [
        {
            "dateadded": "2026-04-01 17:32:14 UTC",
            "url": "http://87.121.84.45/main_ppc",
            "url_status": "offline",
            "last_online": "2026-04-01 22:06:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810023/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810024": [
        {
            "dateadded": "2026-04-01 17:32:14 UTC",
            "url": "http://87.121.84.45/main_arm6",
            "url_status": "offline",
            "last_online": "2026-04-01 22:24:59 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810024/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3810019": [
        {
            "dateadded": "2026-04-01 17:30:16 UTC",
            "url": "https://flow-drop.datacascade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810019/",
            "reporter": "anonymous"
        }
    ],
    "3810018": [
        {
            "dateadded": "2026-04-01 17:29:27 UTC",
            "url": "http://27.206.81.60:51577/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:51:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810018/",
            "reporter": "geenensp"
        }
    ],
    "3810017": [
        {
            "dateadded": "2026-04-01 17:24:10 UTC",
            "url": "https://vector-node.infovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810017/",
            "reporter": "anonymous"
        }
    ],
    "3810016": [
        {
            "dateadded": "2026-04-01 17:19:27 UTC",
            "url": "http://60.243.227.24:49621/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:24:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810016/",
            "reporter": "geenensp"
        }
    ],
    "3810015": [
        {
            "dateadded": "2026-04-01 17:19:08 UTC",
            "url": "https://trace-sync.infovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810015/",
            "reporter": "anonymous"
        }
    ],
    "3810014": [
        {
            "dateadded": "2026-04-01 17:17:21 UTC",
            "url": "http://115.63.53.247:54896/i",
            "url_status": "offline",
            "last_online": "2026-04-02 12:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810014/",
            "reporter": "geenensp"
        }
    ],
    "3810012": [
        {
            "dateadded": "2026-04-01 17:15:24 UTC",
            "url": "http://113.206.11.117:48723/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 17:15:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810012/",
            "reporter": "geenensp"
        }
    ],
    "3810013": [
        {
            "dateadded": "2026-04-01 17:15:24 UTC",
            "url": "http://222.142.254.76:44360/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810013/",
            "reporter": "geenensp"
        }
    ],
    "3810011": [
        {
            "dateadded": "2026-04-01 17:14:18 UTC",
            "url": "http://115.63.53.247:54896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 10:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810011/",
            "reporter": "geenensp"
        }
    ],
    "3810010": [
        {
            "dateadded": "2026-04-01 17:13:12 UTC",
            "url": "https://route-api.infovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:13:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810010/",
            "reporter": "anonymous"
        }
    ],
    "3810009": [
        {
            "dateadded": "2026-04-01 17:07:22 UTC",
            "url": "http://117.209.12.20:53213/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:57:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810009/",
            "reporter": "geenensp"
        }
    ],
    "3810006": [
        {
            "dateadded": "2026-04-01 17:07:18 UTC",
            "url": "http://61.52.119.138:57761/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:55:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810006/",
            "reporter": "geenensp"
        }
    ],
    "3810007": [
        {
            "dateadded": "2026-04-01 17:07:18 UTC",
            "url": "http://177.86.229.12:53418/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:11:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810007/",
            "reporter": "geenensp"
        }
    ],
    "3810008": [
        {
            "dateadded": "2026-04-01 17:07:18 UTC",
            "url": "http://59.183.98.231:43200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 17:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810008/",
            "reporter": "geenensp"
        }
    ],
    "3810005": [
        {
            "dateadded": "2026-04-01 17:07:12 UTC",
            "url": "https://data-relay.infovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810005/",
            "reporter": "anonymous"
        }
    ],
    "3810004": [
        {
            "dateadded": "2026-04-01 17:02:13 UTC",
            "url": "https://path-finder.infovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 17:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810004/",
            "reporter": "anonymous"
        }
    ],
    "3810003": [
        {
            "dateadded": "2026-04-01 16:56:12 UTC",
            "url": "https://info-point.infovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:56:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810003/",
            "reporter": "anonymous"
        }
    ],
    "3810002": [
        {
            "dateadded": "2026-04-01 16:52:12 UTC",
            "url": "https://dlnhov4.granulatetouch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810002/",
            "reporter": "anonymous"
        }
    ],
    "3810001": [
        {
            "dateadded": "2026-04-01 16:49:14 UTC",
            "url": "https://daem-gate.granulatetouch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:49:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810001/",
            "reporter": "anonymous"
        }
    ],
    "3809999": [
        {
            "dateadded": "2026-04-01 16:45:21 UTC",
            "url": "http://177.86.229.12:53418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809999/",
            "reporter": "geenensp"
        }
    ],
    "3810000": [
        {
            "dateadded": "2026-04-01 16:45:21 UTC",
            "url": "http://61.52.119.138:57761/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3810000/",
            "reporter": "geenensp"
        }
    ],
    "3809998": [
        {
            "dateadded": "2026-04-01 16:39:13 UTC",
            "url": "https://wildcircuit.granulatetouch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809998/",
            "reporter": "anonymous"
        }
    ],
    "3809997": [
        {
            "dateadded": "2026-04-01 16:37:06 UTC",
            "url": "http://182.114.51.196:58528/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:33:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809997/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809996": [
        {
            "dateadded": "2026-04-01 16:36:28 UTC",
            "url": "http://115.49.26.59:58637/i",
            "url_status": "offline",
            "last_online": "2026-04-03 00:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809996/",
            "reporter": "geenensp"
        }
    ],
    "3809995": [
        {
            "dateadded": "2026-04-01 16:34:11 UTC",
            "url": "https://rnonito-watch.granulatetouch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809995/",
            "reporter": "anonymous"
        }
    ],
    "3809994": [
        {
            "dateadded": "2026-04-01 16:28:11 UTC",
            "url": "https://hyper-14b.granulatetouch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809994/",
            "reporter": "anonymous"
        }
    ],
    "3809993": [
        {
            "dateadded": "2026-04-01 16:23:15 UTC",
            "url": "https://dqkgif.granulatetouch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809993/",
            "reporter": "anonymous"
        }
    ],
    "3809992": [
        {
            "dateadded": "2026-04-01 16:21:05 UTC",
            "url": "http://85.239.147.6/files/1781548144/td5Qn5I.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809992/",
            "reporter": "c2hunter"
        }
    ],
    "3809991": [
        {
            "dateadded": "2026-04-01 16:18:26 UTC",
            "url": "http://182.127.190.229:50687/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:42:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809991/",
            "reporter": "geenensp"
        }
    ],
    "3809990": [
        {
            "dateadded": "2026-04-01 16:17:14 UTC",
            "url": "https://cast-spar.coddlcaught.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809990/",
            "reporter": "anonymous"
        }
    ],
    "3809989": [
        {
            "dateadded": "2026-04-01 16:13:20 UTC",
            "url": "http://115.50.71.48:59574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809989/",
            "reporter": "geenensp"
        }
    ],
    "3809988": [
        {
            "dateadded": "2026-04-01 16:13:06 UTC",
            "url": "http://85.239.147.6/files/1333144962/IxvWeHF.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809988/",
            "reporter": "c2hunter"
        }
    ],
    "3809987": [
        {
            "dateadded": "2026-04-01 16:11:09 UTC",
            "url": "https://snapshotgeyser.coddlcaught.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809987/",
            "reporter": "anonymous"
        }
    ],
    "3809986": [
        {
            "dateadded": "2026-04-01 16:09:27 UTC",
            "url": "http://95.159.32.180:54863/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809986/",
            "reporter": "geenensp"
        }
    ],
    "3809985": [
        {
            "dateadded": "2026-04-01 16:09:18 UTC",
            "url": "http://115.49.26.59:58637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:57:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809985/",
            "reporter": "geenensp"
        }
    ],
    "3809984": [
        {
            "dateadded": "2026-04-01 16:05:14 UTC",
            "url": "https://mode14-node.coddlcaught.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809984/",
            "reporter": "anonymous"
        }
    ],
    "3809983": [
        {
            "dateadded": "2026-04-01 16:01:27 UTC",
            "url": "http://59.92.180.146:60634/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:24:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809983/",
            "reporter": "geenensp"
        }
    ],
    "3809982": [
        {
            "dateadded": "2026-04-01 15:59:20 UTC",
            "url": "http://39.64.81.186:44201/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:59:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809982/",
            "reporter": "geenensp"
        }
    ],
    "3809981": [
        {
            "dateadded": "2026-04-01 15:59:13 UTC",
            "url": "https://shie1d-leaf.coddlcaught.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809981/",
            "reporter": "anonymous"
        }
    ],
    "3809980": [
        {
            "dateadded": "2026-04-01 15:52:14 UTC",
            "url": "https://24zog.coddlcaught.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809980/",
            "reporter": "anonymous"
        }
    ],
    "3809979": [
        {
            "dateadded": "2026-04-01 15:48:18 UTC",
            "url": "http://216.126.86.177:48081/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809979/",
            "reporter": "geenensp"
        }
    ],
    "3809978": [
        {
            "dateadded": "2026-04-01 15:45:39 UTC",
            "url": "http://216.126.86.177:48081/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809978/",
            "reporter": "geenensp"
        }
    ],
    "3809976": [
        {
            "dateadded": "2026-04-01 15:45:18 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1Zr0j_pcT-7bFSQhXpnCOAPZcHVC8JH2A",
            "url_status": "offline",
            "last_online": "2026-04-02 21:58:59 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809976/",
            "reporter": "abuse_ch"
        }
    ],
    "3809977": [
        {
            "dateadded": "2026-04-01 15:45:18 UTC",
            "url": "https://foredeliv.coddlcaught.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:45:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809977/",
            "reporter": "anonymous"
        }
    ],
    "3809975": [
        {
            "dateadded": "2026-04-01 15:45:17 UTC",
            "url": "https://drive.google.com/uc?export=download&id=1k2pTDVgZuxdMP-8arWNLnzy77kt_2KvM",
            "url_status": "offline",
            "last_online": "2026-04-03 03:34:28 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809975/",
            "reporter": "abuse_ch"
        }
    ],
    "3809974": [
        {
            "dateadded": "2026-04-01 15:44:12 UTC",
            "url": "https://allsydevs.com/wp-admin/images/image5656.png",
            "url_status": "offline",
            "last_online": "2026-04-04 12:00:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809974/",
            "reporter": "abuse_ch"
        }
    ],
    "3809963": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "DEU",
                "geofenced",
                "SWZ",
                "ua-wget",
                "USA"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809963/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809964": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809964/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809965": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809965/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809966": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809966/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809967": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809967/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809968": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809968/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809969": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809969/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809970": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809970/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809971": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809971/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809972": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809972/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809973": [
        {
            "dateadded": "2026-04-01 15:41:05 UTC",
            "url": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809973/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809962": [
        {
            "dateadded": "2026-04-01 15:39:20 UTC",
            "url": "http://95.159.32.180:54863/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809962/",
            "reporter": "geenensp"
        }
    ],
    "3809961": [
        {
            "dateadded": "2026-04-01 15:39:07 UTC",
            "url": "https://storagefreig.glassterrible.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809961/",
            "reporter": "anonymous"
        }
    ],
    "3809960": [
        {
            "dateadded": "2026-04-01 15:38:17 UTC",
            "url": "http://182.127.190.229:50687/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809960/",
            "reporter": "geenensp"
        }
    ],
    "3809959": [
        {
            "dateadded": "2026-04-01 15:38:16 UTC",
            "url": "http://110.37.101.252:58986/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809959/",
            "reporter": "geenensp"
        }
    ],
    "3809958": [
        {
            "dateadded": "2026-04-01 15:37:11 UTC",
            "url": "http://teslasuit.to/optimized_MSIrump24th.png",
            "url_status": "offline",
            "last_online": "2026-04-08 12:00:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809958/",
            "reporter": "abuse_ch"
        }
    ],
    "3809957": [
        {
            "dateadded": "2026-04-01 15:37:10 UTC",
            "url": "http://teslasuit.to/img_150816yunewrdp.png",
            "url_status": "offline",
            "last_online": "2026-04-10 19:20:01 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809957/",
            "reporter": "abuse_ch"
        }
    ],
    "3809956": [
        {
            "dateadded": "2026-04-01 15:37:09 UTC",
            "url": "http://teslasuit.to/img_051917takooo.png",
            "url_status": "offline",
            "last_online": "2026-04-07 03:45:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809956/",
            "reporter": "abuse_ch"
        }
    ],
    "3809955": [
        {
            "dateadded": "2026-04-01 15:37:08 UTC",
            "url": "http://103.203.210.102:43856/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809955/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809954": [
        {
            "dateadded": "2026-04-01 15:37:07 UTC",
            "url": "http://teslasuit.to/img_174605yufreshstart.png",
            "url_status": "offline",
            "last_online": "2026-04-07 04:39:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809954/",
            "reporter": "abuse_ch"
        }
    ],
    "3809947": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/DcEmQhbbvLwCQXIuYCQl69.bin",
            "url_status": "offline",
            "last_online": "2026-04-03 10:13:37 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809947/",
            "reporter": "abuse_ch"
        }
    ],
    "3809948": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/NjpYuxiFcb214.bin",
            "url_status": "offline",
            "last_online": "2026-04-03 10:47:13 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809948/",
            "reporter": "abuse_ch"
        }
    ],
    "3809949": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/Blun.mso",
            "url_status": "offline",
            "last_online": "2026-04-03 10:51:36 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809949/",
            "reporter": "abuse_ch"
        }
    ],
    "3809950": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/seetUHhnqufcf34.bin",
            "url_status": "offline",
            "last_online": "2026-04-03 13:10:27 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809950/",
            "reporter": "abuse_ch"
        }
    ],
    "3809951": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/Tegeticula.xsn",
            "url_status": "offline",
            "last_online": "2026-04-03 10:05:35 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809951/",
            "reporter": "abuse_ch"
        }
    ],
    "3809952": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/nailalaa.rar",
            "url_status": "offline",
            "last_online": "2026-04-03 10:43:50 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809952/",
            "reporter": "abuse_ch"
        }
    ],
    "3809953": [
        {
            "dateadded": "2026-04-01 15:35:11 UTC",
            "url": "http://192.3.177.148/Alodificat.pcz",
            "url_status": "offline",
            "last_online": "2026-04-03 10:04:39 UTC",
            "threat": "malware_download",
            "tags": [
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809953/",
            "reporter": "abuse_ch"
        }
    ],
    "3809946": [
        {
            "dateadded": "2026-04-01 15:34:13 UTC",
            "url": "https://zwjk9ew.glassterrible.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809946/",
            "reporter": "anonymous"
        }
    ],
    "3809945": [
        {
            "dateadded": "2026-04-01 15:31:20 UTC",
            "url": "http://59.92.180.146:60634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809945/",
            "reporter": "geenensp"
        }
    ],
    "3809944": [
        {
            "dateadded": "2026-04-01 15:30:15 UTC",
            "url": "https://secure-spool.glassterrible.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809944/",
            "reporter": "anonymous"
        }
    ],
    "3809943": [
        {
            "dateadded": "2026-04-01 15:19:11 UTC",
            "url": "https://matri-insp.glassterrible.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809943/",
            "reporter": "anonymous"
        }
    ],
    "3809942": [
        {
            "dateadded": "2026-04-01 15:14:17 UTC",
            "url": "https://stajestetice.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=2Billi&c=&c=&c=&c=&c=&c=&c=%27",
            "url_status": "offline",
            "last_online": "2026-04-02 13:19:40 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "msi",
                "rmm",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809942/",
            "reporter": "abuse_ch"
        }
    ],
    "3809941": [
        {
            "dateadded": "2026-04-01 15:12:18 UTC",
            "url": "http://38.226.161.94:57183/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:29:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809941/",
            "reporter": "geenensp"
        }
    ],
    "3809939": [
        {
            "dateadded": "2026-04-01 15:12:09 UTC",
            "url": "http://192.227.128.157/QXYNmYj10.bin",
            "url_status": "offline",
            "last_online": "2026-04-08 07:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809939/",
            "reporter": "abuse_ch"
        }
    ],
    "3809940": [
        {
            "dateadded": "2026-04-01 15:12:09 UTC",
            "url": "https://proto-voy4.glassterrible.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809940/",
            "reporter": "anonymous"
        }
    ],
    "3809938": [
        {
            "dateadded": "2026-04-01 15:12:07 UTC",
            "url": "http://115.48.137.68:45226/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:55:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809938/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809937": [
        {
            "dateadded": "2026-04-01 15:09:14 UTC",
            "url": "http://77.209.73.41:54726/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:23:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809937/",
            "reporter": "geenensp"
        }
    ],
    "3809936": [
        {
            "dateadded": "2026-04-01 15:06:10 UTC",
            "url": "https://7kutx52w.glassterrible.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 16:01:37 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809936/",
            "reporter": "anonymous"
        }
    ],
    "3809935": [
        {
            "dateadded": "2026-04-01 15:06:07 UTC",
            "url": "http://178.16.52.148/sex.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:06:31 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-52-148",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809935/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809933": [
        {
            "dateadded": "2026-04-01 15:05:08 UTC",
            "url": "http://178.16.52.148/dvr.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:38:49 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-52-148",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809933/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809934": [
        {
            "dateadded": "2026-04-01 15:05:08 UTC",
            "url": "http://178.16.52.148/rebirth.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-03 04:52:38 UTC",
            "threat": "malware_download",
            "tags": [
                "178-16-52-148",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809934/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809932": [
        {
            "dateadded": "2026-04-01 15:00:14 UTC",
            "url": "https://datarea.dropaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809932/",
            "reporter": "anonymous"
        }
    ],
    "3809931": [
        {
            "dateadded": "2026-04-01 14:54:12 UTC",
            "url": "http://36.70.99.231:35610/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:49:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809931/",
            "reporter": "geenensp"
        }
    ],
    "3809930": [
        {
            "dateadded": "2026-04-01 14:53:18 UTC",
            "url": "http://115.50.71.48:59574/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:47:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809930/",
            "reporter": "geenensp"
        }
    ],
    "3809929": [
        {
            "dateadded": "2026-04-01 14:52:09 UTC",
            "url": "https://ijnjw.dropaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:22:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809929/",
            "reporter": "anonymous"
        }
    ],
    "3809928": [
        {
            "dateadded": "2026-04-01 14:50:08 UTC",
            "url": "http://77.209.73.41:54726/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 15:44:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809928/",
            "reporter": "geenensp"
        }
    ],
    "3809927": [
        {
            "dateadded": "2026-04-01 14:48:07 UTC",
            "url": "http://38.226.161.94:57183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809927/",
            "reporter": "geenensp"
        }
    ],
    "3809926": [
        {
            "dateadded": "2026-04-01 14:47:07 UTC",
            "url": "http://115.48.137.68:45226/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:26:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809926/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809925": [
        {
            "dateadded": "2026-04-01 14:46:13 UTC",
            "url": "https://qnde.dropaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809925/",
            "reporter": "anonymous"
        }
    ],
    "3809924": [
        {
            "dateadded": "2026-04-01 14:40:10 UTC",
            "url": "https://vrr80sq.dropaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809924/",
            "reporter": "anonymous"
        }
    ],
    "3809923": [
        {
            "dateadded": "2026-04-01 14:38:11 UTC",
            "url": "http://122.157.70.143:33377/i",
            "url_status": "offline",
            "last_online": "2026-04-04 04:21:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809923/",
            "reporter": "geenensp"
        }
    ],
    "3809922": [
        {
            "dateadded": "2026-04-01 14:37:12 UTC",
            "url": "https://threaopti.dropaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809922/",
            "reporter": "anonymous"
        }
    ],
    "3809921": [
        {
            "dateadded": "2026-04-01 14:35:08 UTC",
            "url": "http://85.239.147.6/files/7453936223/KAQ8PQ5.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809921/",
            "reporter": "Bitsight"
        }
    ],
    "3809920": [
        {
            "dateadded": "2026-04-01 14:34:05 UTC",
            "url": "http://85.239.147.6/files/mr/random.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809920/",
            "reporter": "c2hunter"
        }
    ],
    "3809919": [
        {
            "dateadded": "2026-04-01 14:30:16 UTC",
            "url": "http://176.65.139.80/zte",
            "url_status": "offline",
            "last_online": "2026-04-08 16:51:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809919/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809918": [
        {
            "dateadded": "2026-04-01 14:30:15 UTC",
            "url": "http://176.65.139.80/lg",
            "url_status": "offline",
            "last_online": "2026-04-08 16:18:18 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809918/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809915": [
        {
            "dateadded": "2026-04-01 14:30:10 UTC",
            "url": "http://176.65.139.80/goahead",
            "url_status": "offline",
            "last_online": "2026-04-08 17:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809915/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809916": [
        {
            "dateadded": "2026-04-01 14:30:10 UTC",
            "url": "http://176.65.139.80/gpon443",
            "url_status": "offline",
            "last_online": "2026-04-08 16:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809916/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809917": [
        {
            "dateadded": "2026-04-01 14:30:10 UTC",
            "url": "http://176.65.139.80/huawei",
            "url_status": "offline",
            "last_online": "2026-04-08 17:13:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809917/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809909": [
        {
            "dateadded": "2026-04-01 14:30:09 UTC",
            "url": "http://176.65.139.80/thinkphp",
            "url_status": "offline",
            "last_online": "2026-04-08 16:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809909/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809910": [
        {
            "dateadded": "2026-04-01 14:30:09 UTC",
            "url": "http://176.65.139.80/aws",
            "url_status": "offline",
            "last_online": "2026-04-08 16:17:53 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809910/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809911": [
        {
            "dateadded": "2026-04-01 14:30:09 UTC",
            "url": "http://176.65.139.80/zyxel",
            "url_status": "offline",
            "last_online": "2026-04-08 16:37:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809911/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809912": [
        {
            "dateadded": "2026-04-01 14:30:09 UTC",
            "url": "http://176.65.139.80/realtek",
            "url_status": "offline",
            "last_online": "2026-04-08 16:16:43 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809912/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809913": [
        {
            "dateadded": "2026-04-01 14:30:09 UTC",
            "url": "http://176.65.139.80/hnap",
            "url_status": "offline",
            "last_online": "2026-04-08 17:12:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809913/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809914": [
        {
            "dateadded": "2026-04-01 14:30:09 UTC",
            "url": "http://176.65.139.80/pulse",
            "url_status": "offline",
            "last_online": "2026-04-08 16:09:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809914/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809908": [
        {
            "dateadded": "2026-04-01 14:30:08 UTC",
            "url": "http://176.65.139.80/jaws",
            "url_status": "offline",
            "last_online": "2026-04-08 16:53:58 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809908/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809907": [
        {
            "dateadded": "2026-04-01 14:30:07 UTC",
            "url": "http://176.65.139.80/yarn",
            "url_status": "offline",
            "last_online": "2026-04-08 15:57:47 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-80",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809907/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809906": [
        {
            "dateadded": "2026-04-01 14:29:20 UTC",
            "url": "http://59.94.188.45:48319/i",
            "url_status": "offline",
            "last_online": "2026-04-01 14:29:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809906/",
            "reporter": "geenensp"
        }
    ],
    "3809905": [
        {
            "dateadded": "2026-04-01 14:29:19 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 10:32:02 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809905/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809892": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-05 11:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809892/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809893": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": "2026-04-05 10:04:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809893/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809894": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/run.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:39:38 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809894/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809895": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 10:57:06 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809895/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809896": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 11:03:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809896/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809897": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-05 03:44:45 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809897/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809898": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 11:17:00 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809898/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809899": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 10:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809899/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809900": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 11:06:35 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809900/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809901": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": "2026-04-05 10:51:02 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809901/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809902": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": "2026-04-05 04:27:56 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809902/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809903": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": "2026-04-05 10:41:49 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809903/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809904": [
        {
            "dateadded": "2026-04-01 14:28:14 UTC",
            "url": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-04-07 11:06:59 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-41",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809904/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809891": [
        {
            "dateadded": "2026-04-01 14:27:21 UTC",
            "url": "http://121.231.159.254:2071/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:54:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809891/",
            "reporter": "geenensp"
        }
    ],
    "3809888": [
        {
            "dateadded": "2026-04-01 14:26:22 UTC",
            "url": "http://176.65.139.40/sh4",
            "url_status": "offline",
            "last_online": "2026-04-06 03:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809888/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809889": [
        {
            "dateadded": "2026-04-01 14:26:22 UTC",
            "url": "http://176.65.139.40/mips",
            "url_status": "offline",
            "last_online": "2026-04-06 04:12:36 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809889/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809890": [
        {
            "dateadded": "2026-04-01 14:26:22 UTC",
            "url": "http://176.65.139.40/arc",
            "url_status": "offline",
            "last_online": "2026-04-06 04:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809890/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809887": [
        {
            "dateadded": "2026-04-01 14:26:08 UTC",
            "url": "https://dr1v5-frame.dropaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809887/",
            "reporter": "anonymous"
        }
    ],
    "3809880": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/ppc",
            "url_status": "offline",
            "last_online": "2026-04-06 05:08:49 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809880/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809881": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-06 03:37:30 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809881/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809882": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/spc",
            "url_status": "offline",
            "last_online": "2026-04-06 04:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809882/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809883": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/m68k",
            "url_status": "offline",
            "last_online": "2026-04-06 05:11:55 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809883/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809884": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/i686",
            "url_status": "offline",
            "last_online": "2026-04-06 03:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809884/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809885": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/i486",
            "url_status": "offline",
            "last_online": "2026-04-06 05:17:57 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809885/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809886": [
        {
            "dateadded": "2026-04-01 14:25:15 UTC",
            "url": "http://176.65.139.40/arm4",
            "url_status": "offline",
            "last_online": "2026-04-06 04:26:23 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809886/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809879": [
        {
            "dateadded": "2026-04-01 14:24:18 UTC",
            "url": "http://115.57.251.105:36644/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:47:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809879/",
            "reporter": "geenensp"
        }
    ],
    "3809878": [
        {
            "dateadded": "2026-04-01 14:23:18 UTC",
            "url": "http://120.28.195.161:50875/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809878/",
            "reporter": "geenensp"
        }
    ],
    "3809877": [
        {
            "dateadded": "2026-04-01 14:23:17 UTC",
            "url": "http://219.155.211.199:60049/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:47:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809877/",
            "reporter": "geenensp"
        }
    ],
    "3809876": [
        {
            "dateadded": "2026-04-01 14:20:11 UTC",
            "url": "https://5hsg8.sewdarken.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809876/",
            "reporter": "anonymous"
        }
    ],
    "3809875": [
        {
            "dateadded": "2026-04-01 14:19:20 UTC",
            "url": "http://36.70.99.231:35610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 03:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809875/",
            "reporter": "geenensp"
        }
    ],
    "3809874": [
        {
            "dateadded": "2026-04-01 14:18:17 UTC",
            "url": "http://103.68.28.108:39252/i",
            "url_status": "offline",
            "last_online": "2026-04-01 14:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809874/",
            "reporter": "geenensp"
        }
    ],
    "3809873": [
        {
            "dateadded": "2026-04-01 14:13:56 UTC",
            "url": "http://183.214.149.164:36772/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:36:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809873/",
            "reporter": "geenensp"
        }
    ],
    "3809872": [
        {
            "dateadded": "2026-04-01 14:13:10 UTC",
            "url": "https://9lftebnr.sewdarken.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809872/",
            "reporter": "anonymous"
        }
    ],
    "3809871": [
        {
            "dateadded": "2026-04-01 14:12:10 UTC",
            "url": "http://176.65.139.40/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-06 04:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809871/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809870": [
        {
            "dateadded": "2026-04-01 14:11:07 UTC",
            "url": "http://176.65.139.40/x86",
            "url_status": "offline",
            "last_online": "2026-04-06 05:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "176-65-139-40",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809870/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809869": [
        {
            "dateadded": "2026-04-01 14:08:18 UTC",
            "url": "http://42.228.100.165:51639/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:12:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809869/",
            "reporter": "geenensp"
        }
    ],
    "3809867": [
        {
            "dateadded": "2026-04-01 14:07:19 UTC",
            "url": "http://122.157.70.143:33377/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 03:45:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809867/",
            "reporter": "geenensp"
        }
    ],
    "3809868": [
        {
            "dateadded": "2026-04-01 14:07:19 UTC",
            "url": "http://59.94.188.45:48319/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 14:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809868/",
            "reporter": "geenensp"
        }
    ],
    "3809865": [
        {
            "dateadded": "2026-04-01 14:07:09 UTC",
            "url": "http://222.137.73.213:44855/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:40:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809865/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809866": [
        {
            "dateadded": "2026-04-01 14:07:09 UTC",
            "url": "https://geo-d4ta.sewdarken.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 14:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809866/",
            "reporter": "anonymous"
        }
    ],
    "3809864": [
        {
            "dateadded": "2026-04-01 14:06:21 UTC",
            "url": "http://115.63.146.50:51990/i",
            "url_status": "offline",
            "last_online": "2026-04-01 14:06:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809864/",
            "reporter": "geenensp"
        }
    ],
    "3809862": [
        {
            "dateadded": "2026-04-01 14:05:17 UTC",
            "url": "http://182.126.104.161:35216/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809862/",
            "reporter": "geenensp"
        }
    ],
    "3809863": [
        {
            "dateadded": "2026-04-01 14:05:17 UTC",
            "url": "http://115.57.251.105:36644/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:52:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809863/",
            "reporter": "geenensp"
        }
    ],
    "3809861": [
        {
            "dateadded": "2026-04-01 14:01:24 UTC",
            "url": "http://42.228.100.165:51639/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809861/",
            "reporter": "geenensp"
        }
    ],
    "3809860": [
        {
            "dateadded": "2026-04-01 13:59:08 UTC",
            "url": "https://nbjc.sewdarken.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809860/",
            "reporter": "anonymous"
        }
    ],
    "3809858": [
        {
            "dateadded": "2026-04-01 13:58:11 UTC",
            "url": "http://219.155.211.199:60049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:26:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809858/",
            "reporter": "geenensp"
        }
    ],
    "3809859": [
        {
            "dateadded": "2026-04-01 13:58:11 UTC",
            "url": "http://222.138.119.254:40006/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:19:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809859/",
            "reporter": "geenensp"
        }
    ],
    "3809857": [
        {
            "dateadded": "2026-04-01 13:56:34 UTC",
            "url": "http://59.52.56.85:42783/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:31:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809857/",
            "reporter": "geenensp"
        }
    ],
    "3809856": [
        {
            "dateadded": "2026-04-01 13:54:09 UTC",
            "url": "https://finalvault.sewdarken.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809856/",
            "reporter": "anonymous"
        }
    ],
    "3809855": [
        {
            "dateadded": "2026-04-01 13:52:19 UTC",
            "url": "http://123.5.112.120:43043/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:52:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809855/",
            "reporter": "geenensp"
        }
    ],
    "3809854": [
        {
            "dateadded": "2026-04-01 13:52:08 UTC",
            "url": "http://ampgg.bossjy.cc.cd/bot_ampgg.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809854/",
            "reporter": "geenensp"
        }
    ],
    "3809852": [
        {
            "dateadded": "2026-04-01 13:52:07 UTC",
            "url": "http://39.74.39.212:34127/i",
            "url_status": "offline",
            "last_online": "2026-04-01 13:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809852/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809853": [
        {
            "dateadded": "2026-04-01 13:52:07 UTC",
            "url": "http://120.28.212.118:42550/i",
            "url_status": "offline",
            "last_online": "2026-04-14 04:12:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809853/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809851": [
        {
            "dateadded": "2026-04-01 13:47:07 UTC",
            "url": "http://222.137.73.213:44855/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809851/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809850": [
        {
            "dateadded": "2026-04-01 13:46:08 UTC",
            "url": "https://lumline0al.sewdarken.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809850/",
            "reporter": "anonymous"
        }
    ],
    "3809849": [
        {
            "dateadded": "2026-04-01 13:42:06 UTC",
            "url": "http://221.15.15.254:45309/i",
            "url_status": "offline",
            "last_online": "2026-04-01 13:42:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809849/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809848": [
        {
            "dateadded": "2026-04-01 13:40:10 UTC",
            "url": "https://d3pl-lab.movementsheptun.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809848/",
            "reporter": "anonymous"
        }
    ],
    "3809847": [
        {
            "dateadded": "2026-04-01 13:38:14 UTC",
            "url": "http://115.50.32.179:50227/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:25:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809847/",
            "reporter": "geenensp"
        }
    ],
    "3809846": [
        {
            "dateadded": "2026-04-01 13:34:09 UTC",
            "url": "https://hfx03k.movementsheptun.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809846/",
            "reporter": "anonymous"
        }
    ],
    "3809845": [
        {
            "dateadded": "2026-04-01 13:33:16 UTC",
            "url": "http://61.53.75.239:54836/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:33:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809845/",
            "reporter": "geenensp"
        }
    ],
    "3809844": [
        {
            "dateadded": "2026-04-01 13:31:18 UTC",
            "url": "http://61.53.75.239:54836/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:14:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809844/",
            "reporter": "geenensp"
        }
    ],
    "3809843": [
        {
            "dateadded": "2026-04-01 13:31:13 UTC",
            "url": "http://115.63.146.50:51990/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 13:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809843/",
            "reporter": "geenensp"
        }
    ],
    "3809842": [
        {
            "dateadded": "2026-04-01 13:26:12 UTC",
            "url": "https://sp4rk3-trace.movementsheptun.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809842/",
            "reporter": "anonymous"
        }
    ],
    "3809841": [
        {
            "dateadded": "2026-04-01 13:23:17 UTC",
            "url": "http://103.206.207.23:42009/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:27:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809841/",
            "reporter": "geenensp"
        }
    ],
    "3809840": [
        {
            "dateadded": "2026-04-01 13:22:08 UTC",
            "url": "http://110.36.76.249:56770/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:32:34 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809840/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809839": [
        {
            "dateadded": "2026-04-01 13:20:19 UTC",
            "url": "http://117.24.142.170:47976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:07:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809839/",
            "reporter": "geenensp"
        }
    ],
    "3809838": [
        {
            "dateadded": "2026-04-01 13:19:12 UTC",
            "url": "https://arn3i.movementsheptun.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809838/",
            "reporter": "anonymous"
        }
    ],
    "3809836": [
        {
            "dateadded": "2026-04-01 13:17:07 UTC",
            "url": "http://221.15.15.254:45309/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 13:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809836/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809837": [
        {
            "dateadded": "2026-04-01 13:17:07 UTC",
            "url": "http://39.74.39.212:34127/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 13:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809837/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809835": [
        {
            "dateadded": "2026-04-01 13:15:12 UTC",
            "url": "https://fvbtyoj.movementsheptun.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809835/",
            "reporter": "anonymous"
        }
    ],
    "3809834": [
        {
            "dateadded": "2026-04-01 13:11:08 UTC",
            "url": "https://relay-chain.movementsheptun.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809834/",
            "reporter": "anonymous"
        }
    ],
    "3809833": [
        {
            "dateadded": "2026-04-01 13:04:14 UTC",
            "url": "http://42.227.225.230:34570/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809833/",
            "reporter": "geenensp"
        }
    ],
    "3809831": [
        {
            "dateadded": "2026-04-01 13:03:20 UTC",
            "url": "http://124.135.131.61:53077/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:22:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809831/",
            "reporter": "geenensp"
        }
    ],
    "3809832": [
        {
            "dateadded": "2026-04-01 13:03:20 UTC",
            "url": "http://123.8.4.253:33343/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:43:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809832/",
            "reporter": "geenensp"
        }
    ],
    "3809830": [
        {
            "dateadded": "2026-04-01 13:01:08 UTC",
            "url": "http://110.36.76.249:56770/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:24:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809830/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809829": [
        {
            "dateadded": "2026-04-01 13:00:10 UTC",
            "url": "https://9sis.demolishtunis.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 13:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809829/",
            "reporter": "anonymous"
        }
    ],
    "3809828": [
        {
            "dateadded": "2026-04-01 12:55:20 UTC",
            "url": "http://182.235.62.104:47453/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:10:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809828/",
            "reporter": "geenensp"
        }
    ],
    "3809827": [
        {
            "dateadded": "2026-04-01 12:54:11 UTC",
            "url": "https://jjczes4.demolishtunis.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809827/",
            "reporter": "anonymous"
        }
    ],
    "3809826": [
        {
            "dateadded": "2026-04-01 12:52:07 UTC",
            "url": "http://196.190.69.149:59539/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 12:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809826/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809825": [
        {
            "dateadded": "2026-04-01 12:49:14 UTC",
            "url": "http://196.190.69.149:59539/i",
            "url_status": "offline",
            "last_online": "2026-04-01 12:49:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809825/",
            "reporter": "geenensp"
        }
    ],
    "3809824": [
        {
            "dateadded": "2026-04-01 12:48:17 UTC",
            "url": "http://119.183.25.133:49085/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:45:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809824/",
            "reporter": "geenensp"
        }
    ],
    "3809823": [
        {
            "dateadded": "2026-04-01 12:47:12 UTC",
            "url": "https://m15t7-sync.demolishtunis.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:47:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809823/",
            "reporter": "anonymous"
        }
    ],
    "3809822": [
        {
            "dateadded": "2026-04-01 12:46:21 UTC",
            "url": "http://115.51.33.139:53835/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:58:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809822/",
            "reporter": "geenensp"
        }
    ],
    "3809821": [
        {
            "dateadded": "2026-04-01 12:40:21 UTC",
            "url": "https://binaryassay.demolishtunis.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:40:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809821/",
            "reporter": "anonymous"
        }
    ],
    "3809820": [
        {
            "dateadded": "2026-04-01 12:34:11 UTC",
            "url": "https://talforgeal2.demolishtunis.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809820/",
            "reporter": "anonymous"
        }
    ],
    "3809819": [
        {
            "dateadded": "2026-04-01 12:33:23 UTC",
            "url": "http://124.135.131.61:53077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:37:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809819/",
            "reporter": "geenensp"
        }
    ],
    "3809818": [
        {
            "dateadded": "2026-04-01 12:27:16 UTC",
            "url": "https://dynfluxal.demolishtunis.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:27:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809818/",
            "reporter": "anonymous"
        }
    ],
    "3809817": [
        {
            "dateadded": "2026-04-01 12:22:17 UTC",
            "url": "http://42.239.227.212:58225/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:28:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809817/",
            "reporter": "geenensp"
        }
    ],
    "3809816": [
        {
            "dateadded": "2026-04-01 12:20:14 UTC",
            "url": "https://lo98.barondecont.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809816/",
            "reporter": "anonymous"
        }
    ],
    "3809815": [
        {
            "dateadded": "2026-04-01 12:19:53 UTC",
            "url": "https://ossapp.suning.com/pcoss/dl/PPTV(pplive)_forap_1084_9993.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:51:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809815/",
            "reporter": "juroots"
        }
    ],
    "3809814": [
        {
            "dateadded": "2026-04-01 12:19:42 UTC",
            "url": "https://www.telecomsa.xyz/taptapsend.apk",
            "url_status": "offline",
            "last_online": "2026-04-12 16:02:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809814/",
            "reporter": "juroots"
        }
    ],
    "3809813": [
        {
            "dateadded": "2026-04-01 12:19:40 UTC",
            "url": "https://m.hy-union.com/file/ueditor/php/upload/file/20250114/x1/REF-CLI%20v1.0.3.exe",
            "url_status": "offline",
            "last_online": "2026-04-02 03:28:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809813/",
            "reporter": "juroots"
        }
    ],
    "3809812": [
        {
            "dateadded": "2026-04-01 12:19:18 UTC",
            "url": "http://115.51.33.139:53835/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:54:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809812/",
            "reporter": "geenensp"
        }
    ],
    "3809811": [
        {
            "dateadded": "2026-04-01 12:19:17 UTC",
            "url": "https://telecomsa.xyz/taptapsend.apk",
            "url_status": "offline",
            "last_online": "2026-04-12 16:13:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809811/",
            "reporter": "juroots"
        }
    ],
    "3809808": [
        {
            "dateadded": "2026-04-01 12:19:11 UTC",
            "url": "https://jem-mialwe.org/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-03 15:48:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809808/",
            "reporter": "juroots"
        }
    ],
    "3809809": [
        {
            "dateadded": "2026-04-01 12:19:11 UTC",
            "url": "https://dz7shop.com/TriggerFinder_DZ7.exe",
            "url_status": "offline",
            "last_online": "2026-04-01 12:19:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809809/",
            "reporter": "juroots"
        }
    ],
    "3809810": [
        {
            "dateadded": "2026-04-01 12:19:11 UTC",
            "url": "https://pub-563376bbe356408a8c67e226123a6095.r2.dev/ScreenConnect.ClientSetup.msi",
            "url_status": "offline",
            "last_online": "2026-04-01 12:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809810/",
            "reporter": "juroots"
        }
    ],
    "3809805": [
        {
            "dateadded": "2026-04-01 12:19:10 UTC",
            "url": "https://marcuswelbyclinic.click/final-payload/ligolo_172.28.16.169.exe",
            "url_status": "offline",
            "last_online": "2026-04-01 12:19:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809805/",
            "reporter": "juroots"
        }
    ],
    "3809806": [
        {
            "dateadded": "2026-04-01 12:19:10 UTC",
            "url": "https://keilo-jermailer.org/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-03 17:05:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809806/",
            "reporter": "juroots"
        }
    ],
    "3809807": [
        {
            "dateadded": "2026-04-01 12:19:10 UTC",
            "url": "https://marcuswelbyclinic.click/ligolo_172.28.16.169.exe",
            "url_status": "offline",
            "last_online": "2026-04-01 12:19:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809807/",
            "reporter": "juroots"
        }
    ],
    "3809804": [
        {
            "dateadded": "2026-04-01 12:19:08 UTC",
            "url": "https://lejrmakei.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:39:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809804/",
            "reporter": "juroots"
        }
    ],
    "3809803": [
        {
            "dateadded": "2026-04-01 12:13:10 UTC",
            "url": "https://sprucethorn.barondecont.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809803/",
            "reporter": "anonymous"
        }
    ],
    "3809802": [
        {
            "dateadded": "2026-04-01 12:11:19 UTC",
            "url": "http://119.183.25.133:49085/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809802/",
            "reporter": "geenensp"
        }
    ],
    "3809801": [
        {
            "dateadded": "2026-04-01 12:08:18 UTC",
            "url": "http://175.150.79.16:55160/i",
            "url_status": "offline",
            "last_online": "2026-04-22 18:26:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809801/",
            "reporter": "geenensp"
        }
    ],
    "3809800": [
        {
            "dateadded": "2026-04-01 12:07:12 UTC",
            "url": "https://h4rb-loop.barondecont.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809800/",
            "reporter": "anonymous"
        }
    ],
    "3809799": [
        {
            "dateadded": "2026-04-01 12:00:14 UTC",
            "url": "https://crirn4-point.barondecont.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 12:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809799/",
            "reporter": "anonymous"
        }
    ],
    "3809798": [
        {
            "dateadded": "2026-04-01 11:57:10 UTC",
            "url": "http://115.49.79.227:45272/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:37:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809798/",
            "reporter": "geenensp"
        }
    ],
    "3809797": [
        {
            "dateadded": "2026-04-01 11:57:06 UTC",
            "url": "http://123.8.94.184:38216/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809797/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809796": [
        {
            "dateadded": "2026-04-01 11:53:12 UTC",
            "url": "https://calmion.barondecont.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809796/",
            "reporter": "anonymous"
        }
    ],
    "3809795": [
        {
            "dateadded": "2026-04-01 11:52:21 UTC",
            "url": "http://42.239.227.212:58225/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:25:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809795/",
            "reporter": "geenensp"
        }
    ],
    "3809794": [
        {
            "dateadded": "2026-04-01 11:47:11 UTC",
            "url": "https://qobavx3.barondecont.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809794/",
            "reporter": "anonymous"
        }
    ],
    "3809793": [
        {
            "dateadded": "2026-04-01 11:44:05 UTC",
            "url": "http://85.239.147.6/files/8301037712/kjhNIxP.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809793/",
            "reporter": "c2hunter"
        }
    ],
    "3809792": [
        {
            "dateadded": "2026-04-01 11:42:06 UTC",
            "url": "http://110.39.244.189:48732/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809792/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809791": [
        {
            "dateadded": "2026-04-01 11:41:11 UTC",
            "url": "https://neo-d3v.vivatwoman.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:41:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809791/",
            "reporter": "anonymous"
        }
    ],
    "3809790": [
        {
            "dateadded": "2026-04-01 11:36:16 UTC",
            "url": "http://110.37.69.76:57519/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:51:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809790/",
            "reporter": "geenensp"
        }
    ],
    "3809789": [
        {
            "dateadded": "2026-04-01 11:35:21 UTC",
            "url": "http://219.156.23.161:46171/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:02:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809789/",
            "reporter": "geenensp"
        }
    ],
    "3809788": [
        {
            "dateadded": "2026-04-01 11:33:15 UTC",
            "url": "https://norvenix2.vivatwoman.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:33:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809788/",
            "reporter": "anonymous"
        }
    ],
    "3809787": [
        {
            "dateadded": "2026-04-01 11:30:21 UTC",
            "url": "http://219.157.52.60:45020/i",
            "url_status": "offline",
            "last_online": "2026-04-02 14:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809787/",
            "reporter": "geenensp"
        }
    ],
    "3809786": [
        {
            "dateadded": "2026-04-01 11:28:14 UTC",
            "url": "https://lumnexen7.vivatwoman.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:28:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809786/",
            "reporter": "anonymous"
        }
    ],
    "3809785": [
        {
            "dateadded": "2026-04-01 11:21:12 UTC",
            "url": "https://6jamieya.vivatwoman.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809785/",
            "reporter": "anonymous"
        }
    ],
    "3809784": [
        {
            "dateadded": "2026-04-01 11:20:18 UTC",
            "url": "http://110.37.106.148:50795/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809784/",
            "reporter": "geenensp"
        }
    ],
    "3809783": [
        {
            "dateadded": "2026-04-01 11:14:12 UTC",
            "url": "https://solcresten2.vivatwoman.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809783/",
            "reporter": "anonymous"
        }
    ],
    "3809782": [
        {
            "dateadded": "2026-04-01 11:13:18 UTC",
            "url": "http://123.10.68.78:60783/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:25:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809782/",
            "reporter": "geenensp"
        }
    ],
    "3809781": [
        {
            "dateadded": "2026-04-01 11:08:18 UTC",
            "url": "http://123.8.94.184:38216/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:47:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809781/",
            "reporter": "geenensp"
        }
    ],
    "3809780": [
        {
            "dateadded": "2026-04-01 11:07:18 UTC",
            "url": "http://110.39.233.226:41288/i",
            "url_status": "offline",
            "last_online": "2026-04-01 11:07:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809780/",
            "reporter": "geenensp"
        }
    ],
    "3809779": [
        {
            "dateadded": "2026-04-01 11:07:11 UTC",
            "url": "https://wild-mount.vivatwoman.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809779/",
            "reporter": "anonymous"
        }
    ],
    "3809778": [
        {
            "dateadded": "2026-04-01 11:03:20 UTC",
            "url": "http://219.157.52.60:45020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 12:42:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809778/",
            "reporter": "geenensp"
        }
    ],
    "3809777": [
        {
            "dateadded": "2026-04-01 11:00:12 UTC",
            "url": "https://kxep42pp.driveaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 11:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809777/",
            "reporter": "anonymous"
        }
    ],
    "3809776": [
        {
            "dateadded": "2026-04-01 10:55:29 UTC",
            "url": "https://choru5-hinge.driveaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:55:29 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809776/",
            "reporter": "anonymous"
        }
    ],
    "3809775": [
        {
            "dateadded": "2026-04-01 10:55:18 UTC",
            "url": "http://110.37.106.148:50795/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:21:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809775/",
            "reporter": "geenensp"
        }
    ],
    "3809774": [
        {
            "dateadded": "2026-04-01 10:53:22 UTC",
            "url": "http://175.150.79.16:55160/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-22 18:00:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809774/",
            "reporter": "geenensp"
        }
    ],
    "3809773": [
        {
            "dateadded": "2026-04-01 10:47:11 UTC",
            "url": "https://compilpow.driveaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809773/",
            "reporter": "anonymous"
        }
    ],
    "3809772": [
        {
            "dateadded": "2026-04-01 10:43:23 UTC",
            "url": "http://123.10.68.78:60783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809772/",
            "reporter": "geenensp"
        }
    ],
    "3809771": [
        {
            "dateadded": "2026-04-01 10:41:14 UTC",
            "url": "https://nppw50at.driveaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809771/",
            "reporter": "anonymous"
        }
    ],
    "3809770": [
        {
            "dateadded": "2026-04-01 10:34:13 UTC",
            "url": "https://wzovragk.driveaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809770/",
            "reporter": "anonymous"
        }
    ],
    "3809769": [
        {
            "dateadded": "2026-04-01 10:27:14 UTC",
            "url": "https://soft-glob.driveaway.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:27:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809769/",
            "reporter": "anonymous"
        }
    ],
    "3809768": [
        {
            "dateadded": "2026-04-01 10:20:13 UTC",
            "url": "https://loud-cloud.brillwhistleb.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:20:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809768/",
            "reporter": "anonymous"
        }
    ],
    "3809767": [
        {
            "dateadded": "2026-04-01 10:17:08 UTC",
            "url": "http://182.123.208.44:35961/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:27:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809767/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809766": [
        {
            "dateadded": "2026-04-01 10:16:13 UTC",
            "url": "https://emacra.com/GoogleChrome_1.1.1_new.exe",
            "url_status": "offline",
            "last_online": "2026-04-01 10:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809766/",
            "reporter": "Bitsight"
        }
    ],
    "3809765": [
        {
            "dateadded": "2026-04-01 10:14:12 UTC",
            "url": "https://wind-flow.brillwhistleb.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:14:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809765/",
            "reporter": "anonymous"
        }
    ],
    "3809764": [
        {
            "dateadded": "2026-04-01 10:08:28 UTC",
            "url": "https://alert-svc.brillwhistleb.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:08:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809764/",
            "reporter": "anonymous"
        }
    ],
    "3809763": [
        {
            "dateadded": "2026-04-01 10:02:18 UTC",
            "url": "http://125.44.252.55:46814/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:51:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809763/",
            "reporter": "geenensp"
        }
    ],
    "3809762": [
        {
            "dateadded": "2026-04-01 10:02:10 UTC",
            "url": "https://signal-box.brillwhistleb.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 10:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809762/",
            "reporter": "anonymous"
        }
    ],
    "3809761": [
        {
            "dateadded": "2026-04-01 10:02:07 UTC",
            "url": "http://182.116.21.30:51230/i",
            "url_status": "offline",
            "last_online": "2026-04-02 17:01:48 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809761/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809760": [
        {
            "dateadded": "2026-04-01 09:55:12 UTC",
            "url": "https://tune-api.brillwhistleb.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809760/",
            "reporter": "anonymous"
        }
    ],
    "3809759": [
        {
            "dateadded": "2026-04-01 09:48:12 UTC",
            "url": "https://high-note.brillwhistleb.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809759/",
            "reporter": "anonymous"
        }
    ],
    "3809758": [
        {
            "dateadded": "2026-04-01 09:45:27 UTC",
            "url": "http://115.49.79.227:45272/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:28:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809758/",
            "reporter": "geenensp"
        }
    ],
    "3809757": [
        {
            "dateadded": "2026-04-01 09:42:11 UTC",
            "url": "https://yield-hub.combinekabisia.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809757/",
            "reporter": "anonymous"
        }
    ],
    "3809756": [
        {
            "dateadded": "2026-04-01 09:40:09 UTC",
            "url": "http://110.37.2.210:47240/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809756/",
            "reporter": "geenensp"
        }
    ],
    "3809755": [
        {
            "dateadded": "2026-04-01 09:37:11 UTC",
            "url": "https://crop-trace.combinekabisia.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809755/",
            "reporter": "anonymous"
        }
    ],
    "3809753": [
        {
            "dateadded": "2026-04-01 09:35:13 UTC",
            "url": "http://175.173.142.44:57750/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:27:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809753/",
            "reporter": "geenensp"
        }
    ],
    "3809754": [
        {
            "dateadded": "2026-04-01 09:35:13 UTC",
            "url": "http://125.44.252.55:46814/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:40:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809754/",
            "reporter": "geenensp"
        }
    ],
    "3809751": [
        {
            "dateadded": "2026-04-01 09:33:21 UTC",
            "url": "https://harvest-api.combinekabisia.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809751/",
            "reporter": "anonymous"
        }
    ],
    "3809752": [
        {
            "dateadded": "2026-04-01 09:33:21 UTC",
            "url": "https://field-scan.combinekabisia.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809752/",
            "reporter": "anonymous"
        }
    ],
    "3809750": [
        {
            "dateadded": "2026-04-01 09:33:20 UTC",
            "url": "https://grain-store.combinekabisia.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809750/",
            "reporter": "anonymous"
        }
    ],
    "3809749": [
        {
            "dateadded": "2026-04-01 09:33:14 UTC",
            "url": "http://218.24.63.78:47588/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809749/",
            "reporter": "geenensp"
        }
    ],
    "3809748": [
        {
            "dateadded": "2026-04-01 09:33:12 UTC",
            "url": "https://mybiggestjoy.bond/api/index.php?a=dl&token=fcdd5b796fbf5cb5614da7aaa4773fb404771c4821e4b8d30305ed8df58a2188&src=trindade.pe.gov.br&mode=cloudflare",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "Vidar"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809748/",
            "reporter": "abuse_ch"
        }
    ],
    "3809744": [
        {
            "dateadded": "2026-04-01 09:33:10 UTC",
            "url": "http://82.23.183.167/ohshit.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809744/",
            "reporter": "adliwahid"
        }
    ],
    "3809745": [
        {
            "dateadded": "2026-04-01 09:33:10 UTC",
            "url": "http://5.175.223.249/data.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-14 23:12:24 UTC",
            "threat": "malware_download",
            "tags": [
                "DDoSAgent",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809745/",
            "reporter": "adliwahid"
        }
    ],
    "3809746": [
        {
            "dateadded": "2026-04-01 09:33:10 UTC",
            "url": "http://5.175.223.249/data.x86",
            "url_status": "offline",
            "last_online": "2026-04-14 22:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809746/",
            "reporter": "adliwahid"
        }
    ],
    "3809747": [
        {
            "dateadded": "2026-04-01 09:33:10 UTC",
            "url": "http://159.253.120.149:81/bins.mipsle",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809747/",
            "reporter": "adliwahid"
        }
    ],
    "3809732": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809732/",
            "reporter": "adliwahid"
        }
    ],
    "3809733": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": "2026-04-01 15:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809733/",
            "reporter": "adliwahid"
        }
    ],
    "3809734": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809734/",
            "reporter": "adliwahid"
        }
    ],
    "3809735": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://5.175.223.249/data.arm5",
            "url_status": "offline",
            "last_online": "2026-04-14 22:34:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809735/",
            "reporter": "adliwahid"
        }
    ],
    "3809736": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://105.184.169.34:56291/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:33:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809736/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809737": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://5.175.223.249/data.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-14 23:08:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809737/",
            "reporter": "adliwahid"
        }
    ],
    "3809738": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://5.175.223.249/data.mipsel-uclibc",
            "url_status": "offline",
            "last_online": "2026-04-14 22:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809738/",
            "reporter": "adliwahid"
        }
    ],
    "3809739": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://5.175.223.249/data.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-14 22:27:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809739/",
            "reporter": "adliwahid"
        }
    ],
    "3809740": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809740/",
            "reporter": "adliwahid"
        }
    ],
    "3809741": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "https://winston1.rf.gd/img_201258.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809741/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809742": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809742/",
            "reporter": "adliwahid"
        }
    ],
    "3809743": [
        {
            "dateadded": "2026-04-01 09:33:09 UTC",
            "url": "http://5.175.223.249/data.mips-uclibc",
            "url_status": "offline",
            "last_online": "2026-04-14 23:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809743/",
            "reporter": "adliwahid"
        }
    ],
    "3809731": [
        {
            "dateadded": "2026-04-01 09:18:20 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809731/",
            "reporter": "abuse_ch"
        }
    ],
    "3809730": [
        {
            "dateadded": "2026-04-01 09:18:18 UTC",
            "url": "http://115.57.42.132:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809730/",
            "reporter": "geenensp"
        }
    ],
    "3809728": [
        {
            "dateadded": "2026-04-01 09:18:16 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809728/",
            "reporter": "abuse_ch"
        }
    ],
    "3809729": [
        {
            "dateadded": "2026-04-01 09:18:16 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809729/",
            "reporter": "abuse_ch"
        }
    ],
    "3809727": [
        {
            "dateadded": "2026-04-01 09:18:12 UTC",
            "url": "https://winston1.rf.gd/img_215835.png",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809727/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809726": [
        {
            "dateadded": "2026-04-01 09:18:11 UTC",
            "url": "https://winston1.rf.gd/img_143439.png",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809726/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809714": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.arc",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809714/",
            "reporter": "adliwahid"
        }
    ],
    "3809715": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809715/",
            "reporter": "adliwahid"
        }
    ],
    "3809716": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809716/",
            "reporter": "adliwahid"
        }
    ],
    "3809717": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809717/",
            "reporter": "adliwahid"
        }
    ],
    "3809718": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809718/",
            "reporter": "adliwahid"
        }
    ],
    "3809719": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://5.175.223.249/data.arm4",
            "url_status": "offline",
            "last_online": "2026-04-14 22:51:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809719/",
            "reporter": "adliwahid"
        }
    ],
    "3809720": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://5.175.223.249/data.mips",
            "url_status": "offline",
            "last_online": "2026-04-14 22:40:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809720/",
            "reporter": "adliwahid"
        }
    ],
    "3809721": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809721/",
            "reporter": "adliwahid"
        }
    ],
    "3809722": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://82.23.183.167/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-01 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809722/",
            "reporter": "adliwahid"
        }
    ],
    "3809723": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://5.175.223.249/data.arm7",
            "url_status": "offline",
            "last_online": "2026-04-14 22:48:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809723/",
            "reporter": "adliwahid"
        }
    ],
    "3809724": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://5.175.223.249/data.arm6",
            "url_status": "offline",
            "last_online": "2026-04-14 22:52:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809724/",
            "reporter": "adliwahid"
        }
    ],
    "3809725": [
        {
            "dateadded": "2026-04-01 09:18:10 UTC",
            "url": "http://5.175.223.249/data.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-14 23:48:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809725/",
            "reporter": "adliwahid"
        }
    ],
    "3809712": [
        {
            "dateadded": "2026-04-01 09:18:08 UTC",
            "url": "http://my-xarid.com/api/v5/client32.ini",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809712/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809713": [
        {
            "dateadded": "2026-04-01 09:18:08 UTC",
            "url": "http://103.79.79.21:8899/dl/updater",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809713/",
            "reporter": "adliwahid"
        }
    ],
    "3809711": [
        {
            "dateadded": "2026-04-01 09:18:06 UTC",
            "url": "http://my-xarid.com/api/v5/NSM.lic",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809711/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809710": [
        {
            "dateadded": "2026-04-01 09:15:13 UTC",
            "url": "https://farm-logic.combinekabisia.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809710/",
            "reporter": "anonymous"
        }
    ],
    "3809709": [
        {
            "dateadded": "2026-04-01 09:14:20 UTC",
            "url": "http://182.127.124.243:60222/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809709/",
            "reporter": "geenensp"
        }
    ],
    "3809708": [
        {
            "dateadded": "2026-04-01 09:12:10 UTC",
            "url": "http://219.155.83.117:59085/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:51:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809708/",
            "reporter": "geenensp"
        }
    ],
    "3809707": [
        {
            "dateadded": "2026-04-01 09:12:07 UTC",
            "url": "http://182.116.21.30:51230/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:32:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809707/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809706": [
        {
            "dateadded": "2026-04-01 09:08:12 UTC",
            "url": "https://root-source.maknothplacenta.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:08:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809706/",
            "reporter": "anonymous"
        }
    ],
    "3809705": [
        {
            "dateadded": "2026-04-01 09:06:10 UTC",
            "url": "http://175.173.142.44:57750/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809705/",
            "reporter": "geenensp"
        }
    ],
    "3809704": [
        {
            "dateadded": "2026-04-01 09:04:18 UTC",
            "url": "http://115.56.146.227:48954/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:48:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809704/",
            "reporter": "geenensp"
        }
    ],
    "3809703": [
        {
            "dateadded": "2026-04-01 09:03:10 UTC",
            "url": "https://health-node.maknothplacenta.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 09:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809703/",
            "reporter": "anonymous"
        }
    ],
    "3809702": [
        {
            "dateadded": "2026-04-01 09:01:11 UTC",
            "url": "http://27.37.81.240:37090/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:49:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809702/",
            "reporter": "geenensp"
        }
    ],
    "3809701": [
        {
            "dateadded": "2026-04-01 08:59:09 UTC",
            "url": "https://organ-sync.maknothplacenta.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809701/",
            "reporter": "anonymous"
        }
    ],
    "3809700": [
        {
            "dateadded": "2026-04-01 08:52:10 UTC",
            "url": "https://cell-logic.maknothplacenta.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809700/",
            "reporter": "anonymous"
        }
    ],
    "3809699": [
        {
            "dateadded": "2026-04-01 08:46:11 UTC",
            "url": "https://life-cycle.maknothplacenta.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809699/",
            "reporter": "anonymous"
        }
    ],
    "3809698": [
        {
            "dateadded": "2026-04-01 08:42:20 UTC",
            "url": "http://219.155.83.117:59085/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:22:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809698/",
            "reporter": "geenensp"
        }
    ],
    "3809697": [
        {
            "dateadded": "2026-04-01 08:41:21 UTC",
            "url": "http://182.127.124.243:60222/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:39:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809697/",
            "reporter": "geenensp"
        }
    ],
    "3809696": [
        {
            "dateadded": "2026-04-01 08:41:10 UTC",
            "url": "https://bio-record.maknothplacenta.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809696/",
            "reporter": "anonymous"
        }
    ],
    "3809695": [
        {
            "dateadded": "2026-04-01 08:40:13 UTC",
            "url": "http://59.42.91.119:44019/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:20:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809695/",
            "reporter": "geenensp"
        }
    ],
    "3809694": [
        {
            "dateadded": "2026-04-01 08:37:23 UTC",
            "url": "http://110.36.80.169:50896/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:40:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809694/",
            "reporter": "geenensp"
        }
    ],
    "3809693": [
        {
            "dateadded": "2026-04-01 08:35:13 UTC",
            "url": "https://wave-form.lohsmacknon.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809693/",
            "reporter": "anonymous"
        }
    ],
    "3809692": [
        {
            "dateadded": "2026-04-01 08:33:24 UTC",
            "url": "http://218.24.63.78:47588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:02:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809692/",
            "reporter": "geenensp"
        }
    ],
    "3809691": [
        {
            "dateadded": "2026-04-01 08:29:11 UTC",
            "url": "https://audio-path.lohsmacknon.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809691/",
            "reporter": "anonymous"
        }
    ],
    "3809690": [
        {
            "dateadded": "2026-04-01 08:24:20 UTC",
            "url": "https://noise-gate.lohsmacknon.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:24:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809690/",
            "reporter": "anonymous"
        }
    ],
    "3809689": [
        {
            "dateadded": "2026-04-01 08:22:09 UTC",
            "url": "http://105.184.97.119:46929/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809689/",
            "reporter": "geenensp"
        }
    ],
    "3809688": [
        {
            "dateadded": "2026-04-01 08:18:09 UTC",
            "url": "https://echo-relay.lohsmacknon.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809688/",
            "reporter": "anonymous"
        }
    ],
    "3809687": [
        {
            "dateadded": "2026-04-01 08:12:11 UTC",
            "url": "https://bass-boost.lohsmacknon.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809687/",
            "reporter": "anonymous"
        }
    ],
    "3809686": [
        {
            "dateadded": "2026-04-01 08:10:48 UTC",
            "url": "http://39.61.38.75:36056/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809686/",
            "reporter": "geenensp"
        }
    ],
    "3809685": [
        {
            "dateadded": "2026-04-01 08:09:18 UTC",
            "url": "http://110.36.80.169:50896/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:33:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809685/",
            "reporter": "geenensp"
        }
    ],
    "3809684": [
        {
            "dateadded": "2026-04-01 08:08:22 UTC",
            "url": "http://112.248.108.163:51375/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809684/",
            "reporter": "geenensp"
        }
    ],
    "3809683": [
        {
            "dateadded": "2026-04-01 08:06:17 UTC",
            "url": "http://110.36.26.29:48815/i",
            "url_status": "offline",
            "last_online": "2026-04-01 08:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809683/",
            "reporter": "geenensp"
        }
    ],
    "3809682": [
        {
            "dateadded": "2026-04-01 08:06:09 UTC",
            "url": "https://sound-check.lohsmacknon.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809682/",
            "reporter": "anonymous"
        }
    ],
    "3809681": [
        {
            "dateadded": "2026-04-01 08:03:14 UTC",
            "url": "http://31.208.67.180:33161/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809681/",
            "reporter": "geenensp"
        }
    ],
    "3809679": [
        {
            "dateadded": "2026-04-01 08:02:12 UTC",
            "url": "https://def-system.fighttrapper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 08:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809679/",
            "reporter": "anonymous"
        }
    ],
    "3809680": [
        {
            "dateadded": "2026-04-01 08:02:12 UTC",
            "url": "http://31.208.67.180:33161/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:01:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809680/",
            "reporter": "geenensp"
        }
    ],
    "3809678": [
        {
            "dateadded": "2026-04-01 07:56:10 UTC",
            "url": "https://target-api.fighttrapper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809678/",
            "reporter": "anonymous"
        }
    ],
    "3809677": [
        {
            "dateadded": "2026-04-01 07:52:08 UTC",
            "url": "http://59.184.247.189:54682/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:55:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809677/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809676": [
        {
            "dateadded": "2026-04-01 07:50:12 UTC",
            "url": "https://secure-hit.fighttrapper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809676/",
            "reporter": "anonymous"
        }
    ],
    "3809675": [
        {
            "dateadded": "2026-04-01 07:45:11 UTC",
            "url": "https://catch-node.fighttrapper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809675/",
            "reporter": "anonymous"
        }
    ],
    "3809674": [
        {
            "dateadded": "2026-04-01 07:43:21 UTC",
            "url": "http://39.61.38.75:36056/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:47:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809674/",
            "reporter": "geenensp"
        }
    ],
    "3809673": [
        {
            "dateadded": "2026-04-01 07:42:11 UTC",
            "url": "http://110.36.26.29:48815/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 07:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809673/",
            "reporter": "geenensp"
        }
    ],
    "3809672": [
        {
            "dateadded": "2026-04-01 07:42:09 UTC",
            "url": "http://59.184.247.189:54682/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:44:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809672/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809671": [
        {
            "dateadded": "2026-04-01 07:39:08 UTC",
            "url": "https://cage-match.fighttrapper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809671/",
            "reporter": "anonymous"
        }
    ],
    "3809670": [
        {
            "dateadded": "2026-04-01 07:38:17 UTC",
            "url": "http://42.228.35.251:36567/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 07:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809670/",
            "reporter": "geenensp"
        }
    ],
    "3809669": [
        {
            "dateadded": "2026-04-01 07:37:08 UTC",
            "url": "http://105.184.169.34:56291/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809669/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809668": [
        {
            "dateadded": "2026-04-01 07:34:11 UTC",
            "url": "https://action-log.fighttrapper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809668/",
            "reporter": "anonymous"
        }
    ],
    "3809667": [
        {
            "dateadded": "2026-04-01 07:33:41 UTC",
            "url": "http://123.130.102.43:57905/i",
            "url_status": "offline",
            "last_online": "2026-04-07 09:55:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809667/",
            "reporter": "geenensp"
        }
    ],
    "3809666": [
        {
            "dateadded": "2026-04-01 07:32:10 UTC",
            "url": "https://video-drop.cameoinfusion.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809666/",
            "reporter": "anonymous"
        }
    ],
    "3809665": [
        {
            "dateadded": "2026-04-01 07:22:09 UTC",
            "url": "https://blend-master.cameoinfusion.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809665/",
            "reporter": "anonymous"
        }
    ],
    "3809664": [
        {
            "dateadded": "2026-04-01 07:19:16 UTC",
            "url": "http://115.56.146.227:48954/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809664/",
            "reporter": "geenensp"
        }
    ],
    "3809663": [
        {
            "dateadded": "2026-04-01 07:17:10 UTC",
            "url": "http://95.106.58.28:4563/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:46:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809663/",
            "reporter": "geenensp"
        }
    ],
    "3809662": [
        {
            "dateadded": "2026-04-01 07:16:08 UTC",
            "url": "https://color-mix.cameoinfusion.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809662/",
            "reporter": "anonymous"
        }
    ],
    "3809661": [
        {
            "dateadded": "2026-04-01 07:15:19 UTC",
            "url": "http://120.61.159.67:44100/i",
            "url_status": "offline",
            "last_online": "2026-04-01 07:15:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809661/",
            "reporter": "geenensp"
        }
    ],
    "3809660": [
        {
            "dateadded": "2026-04-01 07:13:10 UTC",
            "url": "http://110.37.65.231:57937/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:27:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809660/",
            "reporter": "geenensp"
        }
    ],
    "3809659": [
        {
            "dateadded": "2026-04-01 07:12:37 UTC",
            "url": "http://123.130.102.43:57905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:16:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809659/",
            "reporter": "geenensp"
        }
    ],
    "3809658": [
        {
            "dateadded": "2026-04-01 07:10:12 UTC",
            "url": "https://style-sync.cameoinfusion.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809658/",
            "reporter": "anonymous"
        }
    ],
    "3809657": [
        {
            "dateadded": "2026-04-01 07:08:19 UTC",
            "url": "http://110.36.77.19:59294/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:44:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809657/",
            "reporter": "geenensp"
        }
    ],
    "3809656": [
        {
            "dateadded": "2026-04-01 07:07:20 UTC",
            "url": "http://110.37.37.232:58298/i",
            "url_status": "offline",
            "last_online": "2026-04-01 07:07:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809656/",
            "reporter": "geenensp"
        }
    ],
    "3809655": [
        {
            "dateadded": "2026-04-01 07:05:09 UTC",
            "url": "https://art-portal.cameoinfusion.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809655/",
            "reporter": "anonymous"
        }
    ],
    "3809654": [
        {
            "dateadded": "2026-04-01 07:00:11 UTC",
            "url": "https://small-frame.cameoinfusion.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 07:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809654/",
            "reporter": "anonymous"
        }
    ],
    "3809653": [
        {
            "dateadded": "2026-04-01 06:54:08 UTC",
            "url": "https://silk-route.industtarant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809653/",
            "reporter": "anonymous"
        }
    ],
    "3809652": [
        {
            "dateadded": "2026-04-01 06:50:18 UTC",
            "url": "http://110.37.65.231:57937/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 11:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809652/",
            "reporter": "geenensp"
        }
    ],
    "3809651": [
        {
            "dateadded": "2026-04-01 06:48:15 UTC",
            "url": "http://222.139.91.193:41173/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 17:03:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809651/",
            "reporter": "geenensp"
        }
    ],
    "3809650": [
        {
            "dateadded": "2026-04-01 06:48:09 UTC",
            "url": "https://venom-dev.industtarant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809650/",
            "reporter": "anonymous"
        }
    ],
    "3809649": [
        {
            "dateadded": "2026-04-01 06:43:08 UTC",
            "url": "https://heavy-link.industtarant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809649/",
            "reporter": "anonymous"
        }
    ],
    "3809648": [
        {
            "dateadded": "2026-04-01 06:41:23 UTC",
            "url": "http://120.61.159.67:44100/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809648/",
            "reporter": "geenensp"
        }
    ],
    "3809647": [
        {
            "dateadded": "2026-04-01 06:37:19 UTC",
            "url": "http://110.37.37.232:58298/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:37:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809647/",
            "reporter": "geenensp"
        }
    ],
    "3809646": [
        {
            "dateadded": "2026-04-01 06:37:11 UTC",
            "url": "https://factory-io.industtarant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809646/",
            "reporter": "anonymous"
        }
    ],
    "3809645": [
        {
            "dateadded": "2026-04-01 06:32:13 UTC",
            "url": "https://web-crawl.industtarant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:32:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809645/",
            "reporter": "anonymous"
        }
    ],
    "3809644": [
        {
            "dateadded": "2026-04-01 06:30:11 UTC",
            "url": "http://123.5.186.103:46489/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:24:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809644/",
            "reporter": "geenensp"
        }
    ],
    "3809643": [
        {
            "dateadded": "2026-04-01 06:25:14 UTC",
            "url": "https://spider-net.industtarant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809643/",
            "reporter": "anonymous"
        }
    ],
    "3809642": [
        {
            "dateadded": "2026-04-01 06:21:11 UTC",
            "url": "https://skin-proxy.dervishpeel.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809642/",
            "reporter": "anonymous"
        }
    ],
    "3809641": [
        {
            "dateadded": "2026-04-01 06:20:19 UTC",
            "url": "http://123.188.208.44:43571/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:56:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809641/",
            "reporter": "geenensp"
        }
    ],
    "3809640": [
        {
            "dateadded": "2026-04-01 06:18:15 UTC",
            "url": "http://182.116.51.135:53112/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809640/",
            "reporter": "geenensp"
        }
    ],
    "3809639": [
        {
            "dateadded": "2026-04-01 06:15:10 UTC",
            "url": "https://rotate-node.dervishpeel.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809639/",
            "reporter": "anonymous"
        }
    ],
    "3809638": [
        {
            "dateadded": "2026-04-01 06:12:25 UTC",
            "url": "http://222.141.132.225:55882/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809638/",
            "reporter": "geenensp"
        }
    ],
    "3809637": [
        {
            "dateadded": "2026-04-01 06:12:08 UTC",
            "url": "http://116.140.24.61:53395/i",
            "url_status": "offline",
            "last_online": "2026-04-01 17:04:37 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809637/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809636": [
        {
            "dateadded": "2026-04-01 06:09:08 UTC",
            "url": "https://core-wrap.dervishpeel.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809636/",
            "reporter": "anonymous"
        }
    ],
    "3809635": [
        {
            "dateadded": "2026-04-01 06:03:20 UTC",
            "url": "http://123.5.186.103:46489/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809635/",
            "reporter": "geenensp"
        }
    ],
    "3809634": [
        {
            "dateadded": "2026-04-01 06:03:08 UTC",
            "url": "https://outer-shell.dervishpeel.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 06:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809634/",
            "reporter": "anonymous"
        }
    ],
    "3809633": [
        {
            "dateadded": "2026-04-01 05:59:18 UTC",
            "url": "http://117.211.211.140:53242/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:59:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809633/",
            "reporter": "geenensp"
        }
    ],
    "3809631": [
        {
            "dateadded": "2026-04-01 05:58:10 UTC",
            "url": "http://119.99.87.112:36295/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:48:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809631/",
            "reporter": "adliwahid"
        }
    ],
    "3809632": [
        {
            "dateadded": "2026-04-01 05:58:10 UTC",
            "url": "https://layer-check.dervishpeel.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809632/",
            "reporter": "anonymous"
        }
    ],
    "3809629": [
        {
            "dateadded": "2026-04-01 05:58:08 UTC",
            "url": "http://119.4.9.144:60731/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809629/",
            "reporter": "adliwahid"
        }
    ],
    "3809630": [
        {
            "dateadded": "2026-04-01 05:58:08 UTC",
            "url": "http://111.38.106.19:56345/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:29:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809630/",
            "reporter": "adliwahid"
        }
    ],
    "3809628": [
        {
            "dateadded": "2026-04-01 05:58:07 UTC",
            "url": "http://119.180.80.59:59135/i",
            "url_status": "offline",
            "last_online": "2026-04-18 15:56:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809628/",
            "reporter": "adliwahid"
        }
    ],
    "3809627": [
        {
            "dateadded": "2026-04-01 05:57:28 UTC",
            "url": "http://58.65.215.0:42294/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:51:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809627/",
            "reporter": "adliwahid"
        }
    ],
    "3809626": [
        {
            "dateadded": "2026-04-01 05:57:10 UTC",
            "url": "http://119.99.87.112:36295/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 17:24:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809626/",
            "reporter": "adliwahid"
        }
    ],
    "3809618": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://42.7.204.242:38970/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:26:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809618/",
            "reporter": "adliwahid"
        }
    ],
    "3809619": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://112.248.114.139:46329/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:31:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809619/",
            "reporter": "adliwahid"
        }
    ],
    "3809620": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://222.142.254.165:41922/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809620/",
            "reporter": "adliwahid"
        }
    ],
    "3809621": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://175.146.158.112:45519/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:52:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809621/",
            "reporter": "adliwahid"
        }
    ],
    "3809622": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://42.6.253.116:46861/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 22:06:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809622/",
            "reporter": "adliwahid"
        }
    ],
    "3809623": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://180.190.185.44:51322/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:44:58 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809623/",
            "reporter": "adliwahid"
        }
    ],
    "3809624": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://123.12.236.218:35105/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:16:40 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809624/",
            "reporter": "adliwahid"
        }
    ],
    "3809625": [
        {
            "dateadded": "2026-04-01 05:57:09 UTC",
            "url": "http://123.12.236.218:35105/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:22:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809625/",
            "reporter": "adliwahid"
        }
    ],
    "3809613": [
        {
            "dateadded": "2026-04-01 05:57:08 UTC",
            "url": "http://182.122.236.22:56302/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:31:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809613/",
            "reporter": "adliwahid"
        }
    ],
    "3809614": [
        {
            "dateadded": "2026-04-01 05:57:08 UTC",
            "url": "http://110.37.117.225:49671/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809614/",
            "reporter": "adliwahid"
        }
    ],
    "3809615": [
        {
            "dateadded": "2026-04-01 05:57:08 UTC",
            "url": "http://110.39.246.84:49487/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809615/",
            "reporter": "adliwahid"
        }
    ],
    "3809616": [
        {
            "dateadded": "2026-04-01 05:57:08 UTC",
            "url": "http://110.39.244.189:48732/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:41:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809616/",
            "reporter": "adliwahid"
        }
    ],
    "3809617": [
        {
            "dateadded": "2026-04-01 05:57:08 UTC",
            "url": "http://42.59.232.40:40757/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 15:44:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809617/",
            "reporter": "adliwahid"
        }
    ],
    "3809612": [
        {
            "dateadded": "2026-04-01 05:56:21 UTC",
            "url": "http://180.157.55.73:39040/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:25:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809612/",
            "reporter": "adliwahid"
        }
    ],
    "3809611": [
        {
            "dateadded": "2026-04-01 05:56:20 UTC",
            "url": "http://111.38.106.19:56345/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:16:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809611/",
            "reporter": "adliwahid"
        }
    ],
    "3809609": [
        {
            "dateadded": "2026-04-01 05:56:10 UTC",
            "url": "http://175.146.158.112:45519/i",
            "url_status": "offline",
            "last_online": "2026-04-06 16:02:16 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809609/",
            "reporter": "adliwahid"
        }
    ],
    "3809610": [
        {
            "dateadded": "2026-04-01 05:56:10 UTC",
            "url": "http://119.4.9.144:60731/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809610/",
            "reporter": "adliwahid"
        }
    ],
    "3809598": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://110.37.25.44:35836/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809598/",
            "reporter": "adliwahid"
        }
    ],
    "3809599": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://113.228.152.60:50583/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:36:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809599/",
            "reporter": "adliwahid"
        }
    ],
    "3809600": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://112.248.108.163:51375/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809600/",
            "reporter": "adliwahid"
        }
    ],
    "3809601": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://27.215.52.223:40856/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809601/",
            "reporter": "adliwahid"
        }
    ],
    "3809602": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://27.215.52.223:40856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 12:33:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809602/",
            "reporter": "adliwahid"
        }
    ],
    "3809603": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://115.54.104.8:51742/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809603/",
            "reporter": "adliwahid"
        }
    ],
    "3809604": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://195.46.162.175:36171/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809604/",
            "reporter": "adliwahid"
        }
    ],
    "3809605": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://115.54.104.8:51742/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:20:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809605/",
            "reporter": "adliwahid"
        }
    ],
    "3809606": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://42.228.35.251:36567/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:28:29 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809606/",
            "reporter": "adliwahid"
        }
    ],
    "3809607": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://125.40.50.241:43073/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809607/",
            "reporter": "adliwahid"
        }
    ],
    "3809608": [
        {
            "dateadded": "2026-04-01 05:56:09 UTC",
            "url": "http://182.122.236.22:56302/i",
            "url_status": "offline",
            "last_online": "2026-04-02 12:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809608/",
            "reporter": "adliwahid"
        }
    ],
    "3809597": [
        {
            "dateadded": "2026-04-01 05:53:13 UTC",
            "url": "https://spin-cycle.dervishpeel.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809597/",
            "reporter": "anonymous"
        }
    ],
    "3809596": [
        {
            "dateadded": "2026-04-01 05:51:24 UTC",
            "url": "http://117.211.211.140:53242/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809596/",
            "reporter": "geenensp"
        }
    ],
    "3809595": [
        {
            "dateadded": "2026-04-01 05:48:28 UTC",
            "url": "http://123.188.208.44:43571/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-08 21:48:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809595/",
            "reporter": "geenensp"
        }
    ],
    "3809594": [
        {
            "dateadded": "2026-04-01 05:48:18 UTC",
            "url": "http://110.39.251.209:43906/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:41:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809594/",
            "reporter": "geenensp"
        }
    ],
    "3809593": [
        {
            "dateadded": "2026-04-01 05:46:09 UTC",
            "url": "https://source-log.needwatka.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809593/",
            "reporter": "anonymous"
        }
    ],
    "3809592": [
        {
            "dateadded": "2026-04-01 05:46:07 UTC",
            "url": "https://1k8v3k3.online/pixel.js",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809592/",
            "reporter": "abuse_ch"
        }
    ],
    "3809591": [
        {
            "dateadded": "2026-04-01 05:45:26 UTC",
            "url": "http://175.173.155.12:52416/i",
            "url_status": "offline",
            "last_online": "2026-04-06 17:18:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809591/",
            "reporter": "geenensp"
        }
    ],
    "3809590": [
        {
            "dateadded": "2026-04-01 05:41:13 UTC",
            "url": "https://hydro-svc.needwatka.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809590/",
            "reporter": "anonymous"
        }
    ],
    "3809589": [
        {
            "dateadded": "2026-04-01 05:39:21 UTC",
            "url": "http://182.116.51.135:53112/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:39:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809589/",
            "reporter": "geenensp"
        }
    ],
    "3809588": [
        {
            "dateadded": "2026-04-01 05:37:20 UTC",
            "url": "http://117.235.227.117:59511/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:37:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809588/",
            "reporter": "geenensp"
        }
    ],
    "3809587": [
        {
            "dateadded": "2026-04-01 05:37:08 UTC",
            "url": "https://pump-ctrl.needwatka.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809587/",
            "reporter": "anonymous"
        }
    ],
    "3809586": [
        {
            "dateadded": "2026-04-01 05:34:08 UTC",
            "url": "https://well-point.needwatka.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809586/",
            "reporter": "anonymous"
        }
    ],
    "3809585": [
        {
            "dateadded": "2026-04-01 05:31:10 UTC",
            "url": "http://117.245.62.38:43183/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809585/",
            "reporter": "geenensp"
        }
    ],
    "3809584": [
        {
            "dateadded": "2026-04-01 05:24:13 UTC",
            "url": "https://dropmb.com/api/shares/RKGB/files/0ca73971-de65-44a4-bf2e-121e9a077133",
            "url_status": "offline",
            "last_online": "2026-04-01 05:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809584/",
            "reporter": "abuse_ch"
        }
    ],
    "3809583": [
        {
            "dateadded": "2026-04-01 05:24:11 UTC",
            "url": "https://liquid-api.needwatka.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809583/",
            "reporter": "anonymous"
        }
    ],
    "3809582": [
        {
            "dateadded": "2026-04-01 05:21:30 UTC",
            "url": "http://175.173.155.12:52416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 21:53:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809582/",
            "reporter": "geenensp"
        }
    ],
    "3809581": [
        {
            "dateadded": "2026-04-01 05:20:21 UTC",
            "url": "http://110.39.251.209:43906/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:59:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809581/",
            "reporter": "geenensp"
        }
    ],
    "3809580": [
        {
            "dateadded": "2026-04-01 05:18:08 UTC",
            "url": "https://water-flow.needwatka.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809580/",
            "reporter": "anonymous"
        }
    ],
    "3809579": [
        {
            "dateadded": "2026-04-01 05:14:26 UTC",
            "url": "http://222.136.143.101:57833/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809579/",
            "reporter": "geenensp"
        }
    ],
    "3809578": [
        {
            "dateadded": "2026-04-01 05:13:07 UTC",
            "url": "https://site-connect.fetterland.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809578/",
            "reporter": "anonymous"
        }
    ],
    "3809577": [
        {
            "dateadded": "2026-04-01 05:08:09 UTC",
            "url": "https://fence-logic.fetterland.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809577/",
            "reporter": "anonymous"
        }
    ],
    "3809576": [
        {
            "dateadded": "2026-04-01 05:02:16 UTC",
            "url": "https://dfopetroleum.com/bins/RWBHGSQS.msi",
            "url_status": "offline",
            "last_online": "2026-04-26 20:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "Arechclient2",
                "ClickFix",
                "HijackLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809576/",
            "reporter": "Gi7w0rm"
        }
    ],
    "3809575": [
        {
            "dateadded": "2026-04-01 05:02:11 UTC",
            "url": "https://2012.filemail.com/api/file/get?filekey=3Bc1FrI2tmhg1RY2vtfsjD5Qrhm25soto4juqCH1r9Oa_ULucj5OqmOeQGc",
            "url_status": "offline",
            "last_online": "2026-04-07 16:15:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809575/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809573": [
        {
            "dateadded": "2026-04-01 05:02:08 UTC",
            "url": "https://dfopetroleum.com/bins/binas.txt",
            "url_status": "offline",
            "last_online": "2026-04-26 19:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ClickFix",
                "HijackLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809573/",
            "reporter": "Gi7w0rm"
        }
    ],
    "3809574": [
        {
            "dateadded": "2026-04-01 05:02:08 UTC",
            "url": "https://soil-monitor.fetterland.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 05:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809574/",
            "reporter": "anonymous"
        }
    ],
    "3809572": [
        {
            "dateadded": "2026-04-01 05:02:07 UTC",
            "url": "http://182.114.195.45:48590/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:17:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809572/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809571": [
        {
            "dateadded": "2026-04-01 04:56:08 UTC",
            "url": "https://land-mark.fetterland.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809571/",
            "reporter": "anonymous"
        }
    ],
    "3809570": [
        {
            "dateadded": "2026-04-01 04:52:09 UTC",
            "url": "https://area-scanner.fetterland.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809570/",
            "reporter": "anonymous"
        }
    ],
    "3809569": [
        {
            "dateadded": "2026-04-01 04:50:21 UTC",
            "url": "http://110.39.249.68:46464/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:59:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809569/",
            "reporter": "geenensp"
        }
    ],
    "3809568": [
        {
            "dateadded": "2026-04-01 04:49:11 UTC",
            "url": "https://border-gate.fetterland.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809568/",
            "reporter": "anonymous"
        }
    ],
    "3809567": [
        {
            "dateadded": "2026-04-01 04:39:08 UTC",
            "url": "https://robot-api.mechaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809567/",
            "reporter": "anonymous"
        }
    ],
    "3809566": [
        {
            "dateadded": "2026-04-01 04:33:22 UTC",
            "url": "http://117.245.62.38:43183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:26:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809566/",
            "reporter": "geenensp"
        }
    ],
    "3809565": [
        {
            "dateadded": "2026-04-01 04:33:09 UTC",
            "url": "https://steel-core.mechaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809565/",
            "reporter": "anonymous"
        }
    ],
    "3809564": [
        {
            "dateadded": "2026-04-01 04:32:08 UTC",
            "url": "http://182.114.195.45:48590/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:11:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809564/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809563": [
        {
            "dateadded": "2026-04-01 04:32:06 UTC",
            "url": "http://90.224.208.161:48263/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:15:19 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809563/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809562": [
        {
            "dateadded": "2026-04-01 04:28:10 UTC",
            "url": "https://auto-build.mechaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809562/",
            "reporter": "anonymous"
        }
    ],
    "3809561": [
        {
            "dateadded": "2026-04-01 04:22:07 UTC",
            "url": "https://power-plant.mechaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809561/",
            "reporter": "anonymous"
        }
    ],
    "3809560": [
        {
            "dateadded": "2026-04-01 04:20:27 UTC",
            "url": "http://125.120.250.204:34459/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809560/",
            "reporter": "geenensp"
        }
    ],
    "3809559": [
        {
            "dateadded": "2026-04-01 04:18:08 UTC",
            "url": "https://iron-works.mechaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:18:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809559/",
            "reporter": "anonymous"
        }
    ],
    "3809558": [
        {
            "dateadded": "2026-04-01 04:17:25 UTC",
            "url": "http://221.15.190.63:56743/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:52:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809558/",
            "reporter": "geenensp"
        }
    ],
    "3809557": [
        {
            "dateadded": "2026-04-01 04:12:13 UTC",
            "url": "https://heavy-duty.mechaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809557/",
            "reporter": "anonymous"
        }
    ],
    "3809556": [
        {
            "dateadded": "2026-04-01 04:07:19 UTC",
            "url": "http://182.117.28.43:40473/i",
            "url_status": "offline",
            "last_online": "2026-04-01 11:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809556/",
            "reporter": "geenensp"
        }
    ],
    "3809555": [
        {
            "dateadded": "2026-04-01 04:06:07 UTC",
            "url": "https://pilot-svc.aerovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809555/",
            "reporter": "anonymous"
        }
    ],
    "3809554": [
        {
            "dateadded": "2026-04-01 04:00:12 UTC",
            "url": "https://alt-logic.aerovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 04:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809554/",
            "reporter": "anonymous"
        }
    ],
    "3809553": [
        {
            "dateadded": "2026-04-01 03:58:21 UTC",
            "url": "http://125.41.0.211:57909/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809553/",
            "reporter": "geenensp"
        }
    ],
    "3809552": [
        {
            "dateadded": "2026-04-01 03:54:08 UTC",
            "url": "https://wing-span.aerovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809552/",
            "reporter": "anonymous"
        }
    ],
    "3809551": [
        {
            "dateadded": "2026-04-01 03:51:10 UTC",
            "url": "http://221.15.190.63:56743/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:48:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809551/",
            "reporter": "geenensp"
        }
    ],
    "3809550": [
        {
            "dateadded": "2026-04-01 03:49:10 UTC",
            "url": "https://sky-route.aerovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809550/",
            "reporter": "anonymous"
        }
    ],
    "3809549": [
        {
            "dateadded": "2026-04-01 03:47:08 UTC",
            "url": "http://110.39.235.67:44356/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:47:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809549/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809548": [
        {
            "dateadded": "2026-04-01 03:43:08 UTC",
            "url": "https://air-traffic.aerovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809548/",
            "reporter": "anonymous"
        }
    ],
    "3809547": [
        {
            "dateadded": "2026-04-01 03:40:15 UTC",
            "url": "http://182.117.28.43:40473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:39:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809547/",
            "reporter": "geenensp"
        }
    ],
    "3809546": [
        {
            "dateadded": "2026-04-01 03:37:08 UTC",
            "url": "https://flight-path.aerovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809546/",
            "reporter": "anonymous"
        }
    ],
    "3809545": [
        {
            "dateadded": "2026-04-01 03:36:19 UTC",
            "url": "http://61.3.28.154:58810/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809545/",
            "reporter": "geenensp"
        }
    ],
    "3809544": [
        {
            "dateadded": "2026-04-01 03:35:22 UTC",
            "url": "http://182.114.51.196:58528/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:22:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809544/",
            "reporter": "geenensp"
        }
    ],
    "3809543": [
        {
            "dateadded": "2026-04-01 03:33:19 UTC",
            "url": "http://120.61.244.250:41211/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809543/",
            "reporter": "geenensp"
        }
    ],
    "3809542": [
        {
            "dateadded": "2026-04-01 03:33:18 UTC",
            "url": "http://185.50.148.169:34321/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809542/",
            "reporter": "geenensp"
        }
    ],
    "3809541": [
        {
            "dateadded": "2026-04-01 03:31:12 UTC",
            "url": "https://point-edge.digisphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:31:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809541/",
            "reporter": "anonymous"
        }
    ],
    "3809540": [
        {
            "dateadded": "2026-04-01 03:26:08 UTC",
            "url": "https://static-cdn.digisphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809540/",
            "reporter": "anonymous"
        }
    ],
    "3809539": [
        {
            "dateadded": "2026-04-01 03:20:10 UTC",
            "url": "https://web-portal.digisphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809539/",
            "reporter": "anonymous"
        }
    ],
    "3809538": [
        {
            "dateadded": "2026-04-01 03:16:09 UTC",
            "url": "https://info-orbit.digisphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809538/",
            "reporter": "anonymous"
        }
    ],
    "3809537": [
        {
            "dateadded": "2026-04-01 03:12:18 UTC",
            "url": "http://61.3.28.154:58810/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:51:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809537/",
            "reporter": "geenensp"
        }
    ],
    "3809536": [
        {
            "dateadded": "2026-04-01 03:10:09 UTC",
            "url": "https://cloud-ring.digisphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809536/",
            "reporter": "anonymous"
        }
    ],
    "3809535": [
        {
            "dateadded": "2026-04-01 03:07:26 UTC",
            "url": "http://120.61.244.250:41211/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:43:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809535/",
            "reporter": "geenensp"
        }
    ],
    "3809534": [
        {
            "dateadded": "2026-04-01 03:03:09 UTC",
            "url": "https://data-field.digisphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 03:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809534/",
            "reporter": "anonymous"
        }
    ],
    "3809533": [
        {
            "dateadded": "2026-04-01 03:00:23 UTC",
            "url": "http://185.50.148.169:34321/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:54:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809533/",
            "reporter": "geenensp"
        }
    ],
    "3809532": [
        {
            "dateadded": "2026-04-01 02:58:07 UTC",
            "url": "https://light-logic.quantacircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809532/",
            "reporter": "anonymous"
        }
    ],
    "3809531": [
        {
            "dateadded": "2026-04-01 02:57:07 UTC",
            "url": "http://110.36.23.216:58141/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:38:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809531/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809530": [
        {
            "dateadded": "2026-04-01 02:53:09 UTC",
            "url": "https://fast-track.quantacircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809530/",
            "reporter": "anonymous"
        }
    ],
    "3809529": [
        {
            "dateadded": "2026-04-01 02:47:08 UTC",
            "url": "https://qubit-sync.quantacircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809529/",
            "reporter": "anonymous"
        }
    ],
    "3809528": [
        {
            "dateadded": "2026-04-01 02:47:06 UTC",
            "url": "http://110.36.23.65:52586/i",
            "url_status": "offline",
            "last_online": "2026-04-01 02:47:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809528/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809527": [
        {
            "dateadded": "2026-04-01 02:42:19 UTC",
            "url": "http://182.123.211.230:53557/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:49:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809527/",
            "reporter": "geenensp"
        }
    ],
    "3809526": [
        {
            "dateadded": "2026-04-01 02:42:07 UTC",
            "url": "http://110.36.23.216:58141/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:47:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809526/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809525": [
        {
            "dateadded": "2026-04-01 02:41:13 UTC",
            "url": "https://packet-flow.quantacircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809525/",
            "reporter": "anonymous"
        }
    ],
    "3809524": [
        {
            "dateadded": "2026-04-01 02:36:09 UTC",
            "url": "https://speed-test.quantacircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:36:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809524/",
            "reporter": "anonymous"
        }
    ],
    "3809522": [
        {
            "dateadded": "2026-04-01 02:33:19 UTC",
            "url": "http://115.57.254.123:50139/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:44:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809522/",
            "reporter": "geenensp"
        }
    ],
    "3809523": [
        {
            "dateadded": "2026-04-01 02:33:19 UTC",
            "url": "http://118.232.137.101:35890/i",
            "url_status": "offline",
            "last_online": "2026-04-01 02:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809523/",
            "reporter": "geenensp"
        }
    ],
    "3809521": [
        {
            "dateadded": "2026-04-01 02:32:06 UTC",
            "url": "http://110.37.26.48:52572/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:46:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809521/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809520": [
        {
            "dateadded": "2026-04-01 02:31:10 UTC",
            "url": "http://115.63.14.185:50706/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809520/",
            "reporter": "geenensp"
        }
    ],
    "3809519": [
        {
            "dateadded": "2026-04-01 02:30:16 UTC",
            "url": "https://bit-stream.quantacircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809519/",
            "reporter": "anonymous"
        }
    ],
    "3809518": [
        {
            "dateadded": "2026-04-01 02:29:17 UTC",
            "url": "http://110.37.48.162:36465/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:02:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809518/",
            "reporter": "geenensp"
        }
    ],
    "3809517": [
        {
            "dateadded": "2026-04-01 02:24:12 UTC",
            "url": "https://mind-node.neurovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809517/",
            "reporter": "anonymous"
        }
    ],
    "3809516": [
        {
            "dateadded": "2026-04-01 02:19:10 UTC",
            "url": "https://brain-scan.neurovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809516/",
            "reporter": "anonymous"
        }
    ],
    "3809515": [
        {
            "dateadded": "2026-04-01 02:14:12 UTC",
            "url": "http://182.123.211.230:53557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:35:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809515/",
            "reporter": "geenensp"
        }
    ],
    "3809514": [
        {
            "dateadded": "2026-04-01 02:13:08 UTC",
            "url": "https://thought-hub.neurovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809514/",
            "reporter": "anonymous"
        }
    ],
    "3809513": [
        {
            "dateadded": "2026-04-01 02:08:08 UTC",
            "url": "https://impulse-api.neurovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809513/",
            "reporter": "anonymous"
        }
    ],
    "3809511": [
        {
            "dateadded": "2026-04-01 02:02:08 UTC",
            "url": "https://nerve-center.neurovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 02:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809511/",
            "reporter": "anonymous"
        }
    ],
    "3809512": [
        {
            "dateadded": "2026-04-01 02:02:08 UTC",
            "url": "http://110.37.48.162:36465/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 11:03:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809512/",
            "reporter": "geenensp"
        }
    ],
    "3809509": [
        {
            "dateadded": "2026-04-01 02:00:19 UTC",
            "url": "http://110.36.77.17:33343/i",
            "url_status": "offline",
            "last_online": "2026-04-01 02:00:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809509/",
            "reporter": "geenensp"
        }
    ],
    "3809510": [
        {
            "dateadded": "2026-04-01 02:00:19 UTC",
            "url": "http://123.12.229.24:57827/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809510/",
            "reporter": "geenensp"
        }
    ],
    "3809508": [
        {
            "dateadded": "2026-04-01 01:57:18 UTC",
            "url": "http://123.12.229.24:57827/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:37:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809508/",
            "reporter": "geenensp"
        }
    ],
    "3809507": [
        {
            "dateadded": "2026-04-01 01:56:09 UTC",
            "url": "https://synapse-log.neurovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809507/",
            "reporter": "anonymous"
        }
    ],
    "3809506": [
        {
            "dateadded": "2026-04-01 01:51:09 UTC",
            "url": "https://outer-shell.technosphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809506/",
            "reporter": "anonymous"
        }
    ],
    "3809505": [
        {
            "dateadded": "2026-04-01 01:48:15 UTC",
            "url": "http://182.121.154.51:40724/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:55:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809505/",
            "reporter": "geenensp"
        }
    ],
    "3809504": [
        {
            "dateadded": "2026-04-01 01:47:08 UTC",
            "url": "http://27.6.243.195:38829/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:24:42 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809504/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809503": [
        {
            "dateadded": "2026-04-01 01:47:07 UTC",
            "url": "http://110.37.14.231:50589/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809503/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809502": [
        {
            "dateadded": "2026-04-01 01:46:08 UTC",
            "url": "https://meta-layer.technosphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809502/",
            "reporter": "anonymous"
        }
    ],
    "3809501": [
        {
            "dateadded": "2026-04-01 01:43:15 UTC",
            "url": "http://182.117.30.6:35042/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:51:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809501/",
            "reporter": "geenensp"
        }
    ],
    "3809500": [
        {
            "dateadded": "2026-04-01 01:41:09 UTC",
            "url": "https://world-view.technosphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809500/",
            "reporter": "anonymous"
        }
    ],
    "3809499": [
        {
            "dateadded": "2026-04-01 01:37:13 UTC",
            "url": "http://115.57.254.123:50139/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:46:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809499/",
            "reporter": "geenensp"
        }
    ],
    "3809498": [
        {
            "dateadded": "2026-04-01 01:36:19 UTC",
            "url": "http://110.37.24.11:45058/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:37:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809498/",
            "reporter": "geenensp"
        }
    ],
    "3809497": [
        {
            "dateadded": "2026-04-01 01:34:08 UTC",
            "url": "https://eco-monitor.technosphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809497/",
            "reporter": "anonymous"
        }
    ],
    "3809496": [
        {
            "dateadded": "2026-04-01 01:33:17 UTC",
            "url": "http://110.37.20.126:43911/i",
            "url_status": "offline",
            "last_online": "2026-04-01 01:33:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809496/",
            "reporter": "geenensp"
        }
    ],
    "3809495": [
        {
            "dateadded": "2026-04-01 01:29:08 UTC",
            "url": "https://urban-hub.technosphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809495/",
            "reporter": "anonymous"
        }
    ],
    "3809494": [
        {
            "dateadded": "2026-04-01 01:23:18 UTC",
            "url": "http://39.74.35.162:57192/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:51:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809494/",
            "reporter": "geenensp"
        }
    ],
    "3809493": [
        {
            "dateadded": "2026-04-01 01:23:16 UTC",
            "url": "http://110.37.24.11:45058/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:40:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809493/",
            "reporter": "geenensp"
        }
    ],
    "3809492": [
        {
            "dateadded": "2026-04-01 01:23:09 UTC",
            "url": "https://global-net.technosphere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809492/",
            "reporter": "anonymous"
        }
    ],
    "3809491": [
        {
            "dateadded": "2026-04-01 01:19:08 UTC",
            "url": "https://brain-base.logicmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809491/",
            "reporter": "anonymous"
        }
    ],
    "3809490": [
        {
            "dateadded": "2026-04-01 01:12:09 UTC",
            "url": "https://decision-svc.logicmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809490/",
            "reporter": "anonymous"
        }
    ],
    "3809489": [
        {
            "dateadded": "2026-04-01 01:12:07 UTC",
            "url": "http://110.37.13.16:58003/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:09:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809489/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809488": [
        {
            "dateadded": "2026-04-01 01:06:09 UTC",
            "url": "https://process-io.logicmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809488/",
            "reporter": "anonymous"
        }
    ],
    "3809487": [
        {
            "dateadded": "2026-04-01 01:04:08 UTC",
            "url": "http://112.198.238.18:49083/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:22:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809487/",
            "reporter": "geenensp"
        }
    ],
    "3809486": [
        {
            "dateadded": "2026-04-01 01:02:18 UTC",
            "url": "http://110.37.20.126:43911/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 01:02:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809486/",
            "reporter": "geenensp"
        }
    ],
    "3809485": [
        {
            "dateadded": "2026-04-01 01:01:10 UTC",
            "url": "https://truth-table.logicmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 01:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809485/",
            "reporter": "anonymous"
        }
    ],
    "3809484": [
        {
            "dateadded": "2026-04-01 00:57:08 UTC",
            "url": "http://182.114.251.199:41625/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:23:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809484/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809483": [
        {
            "dateadded": "2026-04-01 00:55:19 UTC",
            "url": "http://125.113.153.132:39635/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809483/",
            "reporter": "geenensp"
        }
    ],
    "3809482": [
        {
            "dateadded": "2026-04-01 00:55:16 UTC",
            "url": "https://rule-engine.logicmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809482/",
            "reporter": "anonymous"
        }
    ],
    "3809481": [
        {
            "dateadded": "2026-04-01 00:49:12 UTC",
            "url": "https://main-frame.logicmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809481/",
            "reporter": "anonymous"
        }
    ],
    "3809480": [
        {
            "dateadded": "2026-04-01 00:47:09 UTC",
            "url": "http://222.141.127.234:38071/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:49:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809480/",
            "reporter": "geenensp"
        }
    ],
    "3809479": [
        {
            "dateadded": "2026-04-01 00:45:20 UTC",
            "url": "http://92.112.124.72/arc",
            "url_status": "offline",
            "last_online": "2026-04-05 16:13:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809479/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809478": [
        {
            "dateadded": "2026-04-01 00:43:10 UTC",
            "url": "https://enc-tunnel.cryptovault.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809478/",
            "reporter": "anonymous"
        }
    ],
    "3809477": [
        {
            "dateadded": "2026-04-01 00:42:06 UTC",
            "url": "http://110.37.13.16:58003/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809477/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809476": [
        {
            "dateadded": "2026-04-01 00:40:11 UTC",
            "url": "http://36.88.164.210:56541/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:21:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809476/",
            "reporter": "geenensp"
        }
    ],
    "3809475": [
        {
            "dateadded": "2026-04-01 00:40:10 UTC",
            "url": "https://hash-store.cryptovault.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809475/",
            "reporter": "anonymous"
        }
    ],
    "3809474": [
        {
            "dateadded": "2026-04-01 00:39:22 UTC",
            "url": "http://39.187.126.220:44511/i",
            "url_status": "offline",
            "last_online": "2026-04-02 10:23:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809474/",
            "reporter": "geenensp"
        }
    ],
    "3809473": [
        {
            "dateadded": "2026-04-01 00:38:08 UTC",
            "url": "https://anon-auth.cryptovault.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809473/",
            "reporter": "anonymous"
        }
    ],
    "3809472": [
        {
            "dateadded": "2026-04-01 00:37:06 UTC",
            "url": "http://182.114.251.199:41625/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:48:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809472/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809471": [
        {
            "dateadded": "2026-04-01 00:34:20 UTC",
            "url": "http://120.28.219.218:53101/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809471/",
            "reporter": "geenensp"
        }
    ],
    "3809470": [
        {
            "dateadded": "2026-04-01 00:33:10 UTC",
            "url": "http://60.210.216.160:50016/i",
            "url_status": "offline",
            "last_online": "2026-04-11 05:06:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809470/",
            "reporter": "geenensp"
        }
    ],
    "3809469": [
        {
            "dateadded": "2026-04-01 00:27:07 UTC",
            "url": "https://secret-api.cryptovault.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809469/",
            "reporter": "anonymous"
        }
    ],
    "3809468": [
        {
            "dateadded": "2026-04-01 00:23:18 UTC",
            "url": "http://59.97.254.234:46513/i",
            "url_status": "offline",
            "last_online": "2026-04-01 00:23:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809468/",
            "reporter": "geenensp"
        }
    ],
    "3809467": [
        {
            "dateadded": "2026-04-01 00:21:20 UTC",
            "url": "http://42.228.125.217:36422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:25:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809467/",
            "reporter": "geenensp"
        }
    ],
    "3809466": [
        {
            "dateadded": "2026-04-01 00:21:11 UTC",
            "url": "https://lock-box.cryptovault.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809466/",
            "reporter": "anonymous"
        }
    ],
    "3809465": [
        {
            "dateadded": "2026-04-01 00:16:20 UTC",
            "url": "http://36.88.164.210:56541/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:16:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809465/",
            "reporter": "geenensp"
        }
    ],
    "3809464": [
        {
            "dateadded": "2026-04-01 00:16:19 UTC",
            "url": "http://116.58.229.39:47979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 00:16:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809464/",
            "reporter": "geenensp"
        }
    ],
    "3809463": [
        {
            "dateadded": "2026-04-01 00:16:09 UTC",
            "url": "https://secure-key.cryptovault.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809463/",
            "reporter": "anonymous"
        }
    ],
    "3809462": [
        {
            "dateadded": "2026-04-01 00:14:17 UTC",
            "url": "http://42.177.236.151:49952/i",
            "url_status": "offline",
            "last_online": "2026-04-06 09:49:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809462/",
            "reporter": "geenensp"
        }
    ],
    "3809461": [
        {
            "dateadded": "2026-04-01 00:12:08 UTC",
            "url": "https://chip-set.infocircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809461/",
            "reporter": "anonymous"
        }
    ],
    "3809460": [
        {
            "dateadded": "2026-04-01 00:12:07 UTC",
            "url": "http://110.39.251.84:36535/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809460/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809459": [
        {
            "dateadded": "2026-04-01 00:09:08 UTC",
            "url": "https://board-mgr.infocircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 00:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809459/",
            "reporter": "anonymous"
        }
    ],
    "3809458": [
        {
            "dateadded": "2026-04-01 00:04:09 UTC",
            "url": "http://125.113.153.132:39635/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:26:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809458/",
            "reporter": "geenensp"
        }
    ],
    "3809456": [
        {
            "dateadded": "2026-04-01 00:02:06 UTC",
            "url": "http://115.56.167.58:45651/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:38:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809456/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809457": [
        {
            "dateadded": "2026-04-01 00:02:06 UTC",
            "url": "http://125.43.105.78:40855/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 00:02:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809457/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809455": [
        {
            "dateadded": "2026-03-31 23:59:08 UTC",
            "url": "https://volt-check.infocircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809455/",
            "reporter": "anonymous"
        }
    ],
    "3809454": [
        {
            "dateadded": "2026-03-31 23:56:10 UTC",
            "url": "http://59.97.254.234:46513/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 23:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809454/",
            "reporter": "geenensp"
        }
    ],
    "3809453": [
        {
            "dateadded": "2026-03-31 23:53:07 UTC",
            "url": "https://bus-bridge.infocircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809453/",
            "reporter": "anonymous"
        }
    ],
    "3809452": [
        {
            "dateadded": "2026-03-31 23:52:07 UTC",
            "url": "http://110.39.251.84:36535/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809452/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809451": [
        {
            "dateadded": "2026-03-31 23:48:34 UTC",
            "url": "http://115.62.25.41:38187/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:25:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809451/",
            "reporter": "geenensp"
        }
    ],
    "3809449": [
        {
            "dateadded": "2026-03-31 23:47:08 UTC",
            "url": "http://61.53.127.158:44774/i",
            "url_status": "offline",
            "last_online": "2026-03-31 23:47:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809449/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809450": [
        {
            "dateadded": "2026-03-31 23:47:08 UTC",
            "url": "https://wire-sync.infocircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809450/",
            "reporter": "anonymous"
        }
    ],
    "3809448": [
        {
            "dateadded": "2026-03-31 23:44:09 UTC",
            "url": "https://logic-gate.infocircuit.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809448/",
            "reporter": "anonymous"
        }
    ],
    "3809447": [
        {
            "dateadded": "2026-03-31 23:41:19 UTC",
            "url": "http://42.177.236.151:49952/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 09:38:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809447/",
            "reporter": "geenensp"
        }
    ],
    "3809446": [
        {
            "dateadded": "2026-03-31 23:41:13 UTC",
            "url": "https://broad-cast.signalforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809446/",
            "reporter": "anonymous"
        }
    ],
    "3809445": [
        {
            "dateadded": "2026-03-31 23:37:10 UTC",
            "url": "http://115.56.167.58:45651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:22:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809445/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809444": [
        {
            "dateadded": "2026-03-31 23:36:17 UTC",
            "url": "http://110.39.233.163:48626/i",
            "url_status": "offline",
            "last_online": "2026-03-31 23:36:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809444/",
            "reporter": "geenensp"
        }
    ],
    "3809443": [
        {
            "dateadded": "2026-03-31 23:33:10 UTC",
            "url": "http://183.186.121.103:51817/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:28:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809443/",
            "reporter": "geenensp"
        }
    ],
    "3809442": [
        {
            "dateadded": "2026-03-31 23:32:09 UTC",
            "url": "http://191.210.133.134:42696/i",
            "url_status": "offline",
            "last_online": "2026-04-03 12:32:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809442/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809441": [
        {
            "dateadded": "2026-03-31 23:32:07 UTC",
            "url": "http://110.37.66.78:52473/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:39:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809441/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809440": [
        {
            "dateadded": "2026-03-31 23:30:11 UTC",
            "url": "https://ping-gate.signalforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809440/",
            "reporter": "anonymous"
        }
    ],
    "3809439": [
        {
            "dateadded": "2026-03-31 23:26:13 UTC",
            "url": "https://tower-sync.signalforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:26:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809439/",
            "reporter": "anonymous"
        }
    ],
    "3809438": [
        {
            "dateadded": "2026-03-31 23:22:09 UTC",
            "url": "http://61.53.127.158:44774/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 23:22:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809438/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809437": [
        {
            "dateadded": "2026-03-31 23:20:15 UTC",
            "url": "https://beam-relay.signalforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809437/",
            "reporter": "anonymous"
        }
    ],
    "3809436": [
        {
            "dateadded": "2026-03-31 23:17:08 UTC",
            "url": "http://78.29.39.213:48027/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:41:59 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809436/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809435": [
        {
            "dateadded": "2026-03-31 23:14:10 UTC",
            "url": "https://wave-form.signalforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809435/",
            "reporter": "anonymous"
        }
    ],
    "3809434": [
        {
            "dateadded": "2026-03-31 23:09:12 UTC",
            "url": "http://110.39.233.163:48626/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 23:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809434/",
            "reporter": "geenensp"
        }
    ],
    "3809433": [
        {
            "dateadded": "2026-03-31 23:08:08 UTC",
            "url": "https://radio-freq.signalforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809433/",
            "reporter": "anonymous"
        }
    ],
    "3809432": [
        {
            "dateadded": "2026-03-31 23:07:09 UTC",
            "url": "http://183.186.121.103:51817/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:47:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809432/",
            "reporter": "geenensp"
        }
    ],
    "3809431": [
        {
            "dateadded": "2026-03-31 23:07:08 UTC",
            "url": "http://61.53.159.114:56760/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:31:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809431/",
            "reporter": "geenensp"
        }
    ],
    "3809430": [
        {
            "dateadded": "2026-03-31 23:07:07 UTC",
            "url": "http://110.37.66.78:52473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:59:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809430/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809429": [
        {
            "dateadded": "2026-03-31 23:03:12 UTC",
            "url": "https://raster-node.pixelmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 23:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809429/",
            "reporter": "anonymous"
        }
    ],
    "3809428": [
        {
            "dateadded": "2026-03-31 23:02:07 UTC",
            "url": "http://110.36.72.162:42234/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:01:01 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809428/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809427": [
        {
            "dateadded": "2026-03-31 22:57:08 UTC",
            "url": "https://display-svc.pixelmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809427/",
            "reporter": "anonymous"
        }
    ],
    "3809426": [
        {
            "dateadded": "2026-03-31 22:56:18 UTC",
            "url": "http://188.115.168.240:63702/i",
            "url_status": "offline",
            "last_online": "2026-04-09 04:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809426/",
            "reporter": "geenensp"
        }
    ],
    "3809425": [
        {
            "dateadded": "2026-03-31 22:54:11 UTC",
            "url": "http://123.5.169.33:36911/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:16:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809425/",
            "reporter": "geenensp"
        }
    ],
    "3809424": [
        {
            "dateadded": "2026-03-31 22:52:10 UTC",
            "url": "https://video-buffer.pixelmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809424/",
            "reporter": "anonymous"
        }
    ],
    "3809423": [
        {
            "dateadded": "2026-03-31 22:51:17 UTC",
            "url": "http://219.156.26.169:60250/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:27:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809423/",
            "reporter": "geenensp"
        }
    ],
    "3809422": [
        {
            "dateadded": "2026-03-31 22:47:08 UTC",
            "url": "http://125.44.245.102:59322/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809422/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809421": [
        {
            "dateadded": "2026-03-31 22:45:11 UTC",
            "url": "https://image-stack.pixelmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809421/",
            "reporter": "anonymous"
        }
    ],
    "3809420": [
        {
            "dateadded": "2026-03-31 22:42:06 UTC",
            "url": "http://78.29.39.213:48027/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:44:27 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809420/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809419": [
        {
            "dateadded": "2026-03-31 22:41:30 UTC",
            "url": "http://61.53.159.114:56760/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809419/",
            "reporter": "geenensp"
        }
    ],
    "3809418": [
        {
            "dateadded": "2026-03-31 22:41:14 UTC",
            "url": "https://render-grid.pixelmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809418/",
            "reporter": "anonymous"
        }
    ],
    "3809417": [
        {
            "dateadded": "2026-03-31 22:38:21 UTC",
            "url": "http://59.97.248.176:38579/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809417/",
            "reporter": "geenensp"
        }
    ],
    "3809416": [
        {
            "dateadded": "2026-03-31 22:36:22 UTC",
            "url": "http://219.156.26.169:60250/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:03:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809416/",
            "reporter": "geenensp"
        }
    ],
    "3809415": [
        {
            "dateadded": "2026-03-31 22:34:11 UTC",
            "url": "https://color-bit.pixelmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809415/",
            "reporter": "anonymous"
        }
    ],
    "3809414": [
        {
            "dateadded": "2026-03-31 22:31:19 UTC",
            "url": "http://188.115.168.240:63702/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 04:29:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809414/",
            "reporter": "geenensp"
        }
    ],
    "3809413": [
        {
            "dateadded": "2026-03-31 22:30:10 UTC",
            "url": "https://scan-core.nanovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809413/",
            "reporter": "anonymous"
        }
    ],
    "3809412": [
        {
            "dateadded": "2026-03-31 22:24:12 UTC",
            "url": "https://particle-api.nanovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809412/",
            "reporter": "anonymous"
        }
    ],
    "3809411": [
        {
            "dateadded": "2026-03-31 22:20:06 UTC",
            "url": "http://85.239.147.6/files/8405865752/5EYH7vF.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809411/",
            "reporter": "Bitsight"
        }
    ],
    "3809410": [
        {
            "dateadded": "2026-03-31 22:18:24 UTC",
            "url": "http://112.93.201.18:37596/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:57:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809410/",
            "reporter": "geenensp"
        }
    ],
    "3809409": [
        {
            "dateadded": "2026-03-31 22:18:09 UTC",
            "url": "https://small-unit.nanovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809409/",
            "reporter": "anonymous"
        }
    ],
    "3809408": [
        {
            "dateadded": "2026-03-31 22:17:09 UTC",
            "url": "http://125.44.245.102:59322/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809408/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809407": [
        {
            "dateadded": "2026-03-31 22:13:07 UTC",
            "url": "https://precision-io.nanovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809407/",
            "reporter": "anonymous"
        }
    ],
    "3809406": [
        {
            "dateadded": "2026-03-31 22:08:20 UTC",
            "url": "http://123.179.235.229:59423/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:08:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809406/",
            "reporter": "geenensp"
        }
    ],
    "3809405": [
        {
            "dateadded": "2026-03-31 22:07:13 UTC",
            "url": "http://105.225.37.240:59785/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:26:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809405/",
            "reporter": "geenensp"
        }
    ],
    "3809404": [
        {
            "dateadded": "2026-03-31 22:06:08 UTC",
            "url": "https://atom-trace.nanovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809404/",
            "reporter": "anonymous"
        }
    ],
    "3809403": [
        {
            "dateadded": "2026-03-31 22:04:27 UTC",
            "url": "http://175.31.170.117:38526/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 04:09:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809403/",
            "reporter": "geenensp"
        }
    ],
    "3809402": [
        {
            "dateadded": "2026-03-31 22:04:20 UTC",
            "url": "http://110.36.80.162:43865/i",
            "url_status": "offline",
            "last_online": "2026-04-05 10:50:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809402/",
            "reporter": "geenensp"
        }
    ],
    "3809401": [
        {
            "dateadded": "2026-03-31 22:02:14 UTC",
            "url": "https://micro-scale.nanovector.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 22:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809401/",
            "reporter": "anonymous"
        }
    ],
    "3809400": [
        {
            "dateadded": "2026-03-31 21:58:24 UTC",
            "url": "http://110.37.72.176:45617/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:32:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809400/",
            "reporter": "geenensp"
        }
    ],
    "3809399": [
        {
            "dateadded": "2026-03-31 21:50:20 UTC",
            "url": "http://112.93.201.18:37596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809399/",
            "reporter": "geenensp"
        }
    ],
    "3809398": [
        {
            "dateadded": "2026-03-31 21:45:19 UTC",
            "url": "http://110.36.15.1:39124/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:45:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809398/",
            "reporter": "geenensp"
        }
    ],
    "3809397": [
        {
            "dateadded": "2026-03-31 21:41:21 UTC",
            "url": "http://105.225.37.240:59785/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:42:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809397/",
            "reporter": "geenensp"
        }
    ],
    "3809396": [
        {
            "dateadded": "2026-03-31 21:39:07 UTC",
            "url": "https://ping-gate.signalcrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809396/",
            "reporter": "anonymous"
        }
    ],
    "3809395": [
        {
            "dateadded": "2026-03-31 21:34:08 UTC",
            "url": "https://broad-cast.signalcrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809395/",
            "reporter": "anonymous"
        }
    ],
    "3809394": [
        {
            "dateadded": "2026-03-31 21:28:09 UTC",
            "url": "https://range-extend.signalcrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809394/",
            "reporter": "anonymous"
        }
    ],
    "3809393": [
        {
            "dateadded": "2026-03-31 21:26:22 UTC",
            "url": "http://110.36.15.1:39124/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:26:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809393/",
            "reporter": "geenensp"
        }
    ],
    "3809392": [
        {
            "dateadded": "2026-03-31 21:23:13 UTC",
            "url": "https://tower-sync.signalcrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809392/",
            "reporter": "anonymous"
        }
    ],
    "3809391": [
        {
            "dateadded": "2026-03-31 21:22:08 UTC",
            "url": "http://170.0.60.80:44609/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:20:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809391/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809390": [
        {
            "dateadded": "2026-03-31 21:20:22 UTC",
            "url": "http://42.224.122.242:42407/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809390/",
            "reporter": "geenensp"
        }
    ],
    "3809388": [
        {
            "dateadded": "2026-03-31 21:19:09 UTC",
            "url": "http://42.225.204.153:40746/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:01:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809388/",
            "reporter": "geenensp"
        }
    ],
    "3809389": [
        {
            "dateadded": "2026-03-31 21:19:09 UTC",
            "url": "http://42.224.122.242:42407/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809389/",
            "reporter": "geenensp"
        }
    ],
    "3809387": [
        {
            "dateadded": "2026-03-31 21:17:08 UTC",
            "url": "https://radio-freq.signalcrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809387/",
            "reporter": "anonymous"
        }
    ],
    "3809386": [
        {
            "dateadded": "2026-03-31 21:12:07 UTC",
            "url": "http://125.44.254.81:54558/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809386/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809385": [
        {
            "dateadded": "2026-03-31 21:11:09 UTC",
            "url": "https://wave-crest.signalcrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809385/",
            "reporter": "anonymous"
        }
    ],
    "3809384": [
        {
            "dateadded": "2026-03-31 21:08:05 UTC",
            "url": "http://85.239.147.6/files/6560547276/ZAZsFyd.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809384/",
            "reporter": "Bitsight"
        }
    ],
    "3809383": [
        {
            "dateadded": "2026-03-31 21:06:08 UTC",
            "url": "http://117.220.151.22:53549/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:53:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809383/",
            "reporter": "geenensp"
        }
    ],
    "3809382": [
        {
            "dateadded": "2026-03-31 21:06:07 UTC",
            "url": "https://meta-stack.datacrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 21:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809382/",
            "reporter": "anonymous"
        }
    ],
    "3809381": [
        {
            "dateadded": "2026-03-31 21:03:19 UTC",
            "url": "http://115.62.180.84:56872/i",
            "url_status": "offline",
            "last_online": "2026-04-03 17:02:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809381/",
            "reporter": "geenensp"
        }
    ],
    "3809380": [
        {
            "dateadded": "2026-03-31 21:03:18 UTC",
            "url": "http://42.225.204.153:40746/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809380/",
            "reporter": "geenensp"
        }
    ],
    "3809379": [
        {
            "dateadded": "2026-03-31 21:02:08 UTC",
            "url": "http://42.227.225.230:34570/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:17:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809379/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809377": [
        {
            "dateadded": "2026-03-31 21:00:12 UTC",
            "url": "http://182.126.85.229:37143/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:05:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809377/",
            "reporter": "geenensp"
        }
    ],
    "3809378": [
        {
            "dateadded": "2026-03-31 21:00:12 UTC",
            "url": "http://115.56.167.171:34161/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:03:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809378/",
            "reporter": "geenensp"
        }
    ],
    "3809376": [
        {
            "dateadded": "2026-03-31 20:59:06 UTC",
            "url": "https://base-record.datacrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809376/",
            "reporter": "anonymous"
        }
    ],
    "3809375": [
        {
            "dateadded": "2026-03-31 20:56:16 UTC",
            "url": "http://120.28.199.24:42707/i",
            "url_status": "offline",
            "last_online": "2026-03-31 20:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809375/",
            "reporter": "geenensp"
        }
    ],
    "3809374": [
        {
            "dateadded": "2026-03-31 20:54:09 UTC",
            "url": "https://info-summit.datacrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809374/",
            "reporter": "anonymous"
        }
    ],
    "3809373": [
        {
            "dateadded": "2026-03-31 20:52:19 UTC",
            "url": "http://170.0.60.80:44609/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809373/",
            "reporter": "geenensp"
        }
    ],
    "3809372": [
        {
            "dateadded": "2026-03-31 20:51:26 UTC",
            "url": "http://110.36.89.45:38805/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:57:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809372/",
            "reporter": "geenensp"
        }
    ],
    "3809371": [
        {
            "dateadded": "2026-03-31 20:48:11 UTC",
            "url": "https://bulk-export.datacrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809371/",
            "reporter": "anonymous"
        }
    ],
    "3809370": [
        {
            "dateadded": "2026-03-31 20:45:18 UTC",
            "url": "http://182.32.199.244:50607/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:14:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809370/",
            "reporter": "geenensp"
        }
    ],
    "3809369": [
        {
            "dateadded": "2026-03-31 20:42:11 UTC",
            "url": "https://archive-top.datacrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809369/",
            "reporter": "anonymous"
        }
    ],
    "3809367": [
        {
            "dateadded": "2026-03-31 20:41:09 UTC",
            "url": "http://114.228.132.87:39486/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:26:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809367/",
            "reporter": "geenensp"
        }
    ],
    "3809368": [
        {
            "dateadded": "2026-03-31 20:41:09 UTC",
            "url": "http://117.220.151.22:53549/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:00:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809368/",
            "reporter": "geenensp"
        }
    ],
    "3809366": [
        {
            "dateadded": "2026-03-31 20:38:10 UTC",
            "url": "https://high-ridge.datacrest.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809366/",
            "reporter": "anonymous"
        }
    ],
    "3809365": [
        {
            "dateadded": "2026-03-31 20:34:19 UTC",
            "url": "http://182.126.85.229:37143/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:22:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809365/",
            "reporter": "geenensp"
        }
    ],
    "3809364": [
        {
            "dateadded": "2026-03-31 20:31:10 UTC",
            "url": "https://enc-tunnel.cyberhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809364/",
            "reporter": "anonymous"
        }
    ],
    "3809360": [
        {
            "dateadded": "2026-03-31 20:29:19 UTC",
            "url": "http://92.112.124.72/sh4",
            "url_status": "offline",
            "last_online": "2026-04-05 16:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809360/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809361": [
        {
            "dateadded": "2026-03-31 20:29:19 UTC",
            "url": "http://92.112.124.72/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-05 16:58:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809361/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809362": [
        {
            "dateadded": "2026-03-31 20:29:19 UTC",
            "url": "http://92.112.124.72/arm",
            "url_status": "offline",
            "last_online": "2026-04-05 16:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809362/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809363": [
        {
            "dateadded": "2026-03-31 20:29:19 UTC",
            "url": "http://92.112.124.72/arm5",
            "url_status": "offline",
            "last_online": "2026-04-05 15:46:03 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809363/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809356": [
        {
            "dateadded": "2026-03-31 20:28:15 UTC",
            "url": "http://92.112.124.72/sparc",
            "url_status": "offline",
            "last_online": "2026-04-05 16:15:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809356/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809357": [
        {
            "dateadded": "2026-03-31 20:28:15 UTC",
            "url": "http://92.112.124.72/i686",
            "url_status": "offline",
            "last_online": "2026-04-05 16:25:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809357/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809358": [
        {
            "dateadded": "2026-03-31 20:28:15 UTC",
            "url": "http://92.112.124.72/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-05 16:36:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809358/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809359": [
        {
            "dateadded": "2026-03-31 20:28:15 UTC",
            "url": "http://92.112.124.72/arm7",
            "url_status": "offline",
            "last_online": "2026-04-05 16:54:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809359/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809355": [
        {
            "dateadded": "2026-03-31 20:28:07 UTC",
            "url": "http://92.112.124.72/mips",
            "url_status": "offline",
            "last_online": "2026-04-05 16:31:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809355/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3809354": [
        {
            "dateadded": "2026-03-31 20:27:20 UTC",
            "url": "http://120.28.199.24:42707/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 20:27:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809354/",
            "reporter": "geenensp"
        }
    ],
    "3809353": [
        {
            "dateadded": "2026-03-31 20:26:12 UTC",
            "url": "https://anon-relay.cyberhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:26:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809353/",
            "reporter": "anonymous"
        }
    ],
    "3809347": [
        {
            "dateadded": "2026-03-31 20:23:07 UTC",
            "url": "http://178.16.54.109/6.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:57:43 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809347/",
            "reporter": "Bitsight"
        }
    ],
    "3809348": [
        {
            "dateadded": "2026-03-31 20:23:07 UTC",
            "url": "http://178.16.54.109/1.exe",
            "url_status": "online",
            "last_online": "2026-04-27 12:11:34 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809348/",
            "reporter": "Bitsight"
        }
    ],
    "3809349": [
        {
            "dateadded": "2026-03-31 20:23:07 UTC",
            "url": "http://178.16.54.109/3.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:58 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809349/",
            "reporter": "Bitsight"
        }
    ],
    "3809350": [
        {
            "dateadded": "2026-03-31 20:23:07 UTC",
            "url": "http://178.16.54.109/4.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809350/",
            "reporter": "Bitsight"
        }
    ],
    "3809351": [
        {
            "dateadded": "2026-03-31 20:23:07 UTC",
            "url": "http://178.16.54.109/5.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:54:48 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809351/",
            "reporter": "Bitsight"
        }
    ],
    "3809352": [
        {
            "dateadded": "2026-03-31 20:23:07 UTC",
            "url": "http://178.16.54.109/2.exe",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:28 UTC",
            "threat": "malware_download",
            "tags": [
                "dropped-by-Phorpiex",
                "phorpiex"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809352/",
            "reporter": "Bitsight"
        }
    ],
    "3809346": [
        {
            "dateadded": "2026-03-31 20:21:10 UTC",
            "url": "https://secure-vault.cyberhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809346/",
            "reporter": "anonymous"
        }
    ],
    "3809345": [
        {
            "dateadded": "2026-03-31 20:19:09 UTC",
            "url": "http://115.56.167.171:34161/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:28:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809345/",
            "reporter": "geenensp"
        }
    ],
    "3809344": [
        {
            "dateadded": "2026-03-31 20:18:18 UTC",
            "url": "http://182.32.199.244:50607/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:49:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809344/",
            "reporter": "geenensp"
        }
    ],
    "3809343": [
        {
            "dateadded": "2026-03-31 20:15:11 UTC",
            "url": "https://threat-log.cyberhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809343/",
            "reporter": "anonymous"
        }
    ],
    "3809342": [
        {
            "dateadded": "2026-03-31 20:13:39 UTC",
            "url": "http://110.37.118.66:34574/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809342/",
            "reporter": "geenensp"
        }
    ],
    "3809341": [
        {
            "dateadded": "2026-03-31 20:11:17 UTC",
            "url": "http://117.235.227.117:59511/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:48:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809341/",
            "reporter": "geenensp"
        }
    ],
    "3809340": [
        {
            "dateadded": "2026-03-31 20:09:12 UTC",
            "url": "https://mesh-proxy.cyberhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809340/",
            "reporter": "anonymous"
        }
    ],
    "3809339": [
        {
            "dateadded": "2026-03-31 20:06:16 UTC",
            "url": "http://222.136.159.32:36989/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:22:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809339/",
            "reporter": "geenensp"
        }
    ],
    "3809338": [
        {
            "dateadded": "2026-03-31 20:04:11 UTC",
            "url": "https://ghost-shell.cyberhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 20:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809338/",
            "reporter": "anonymous"
        }
    ],
    "3809337": [
        {
            "dateadded": "2026-03-31 20:04:05 UTC",
            "url": "http://85.239.147.6/files/7359455182/wugQXVn.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809337/",
            "reporter": "Bitsight"
        }
    ],
    "3809336": [
        {
            "dateadded": "2026-03-31 19:59:09 UTC",
            "url": "https://bio-sensor.neurobloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809336/",
            "reporter": "anonymous"
        }
    ],
    "3809335": [
        {
            "dateadded": "2026-03-31 19:56:28 UTC",
            "url": "http://110.36.18.169:39415/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809335/",
            "reporter": "geenensp"
        }
    ],
    "3809334": [
        {
            "dateadded": "2026-03-31 19:54:12 UTC",
            "url": "https://pulse-logic.neurobloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809334/",
            "reporter": "anonymous"
        }
    ],
    "3809333": [
        {
            "dateadded": "2026-03-31 19:51:11 UTC",
            "url": "https://nerve-center.neurobloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809333/",
            "reporter": "anonymous"
        }
    ],
    "3809332": [
        {
            "dateadded": "2026-03-31 19:49:28 UTC",
            "url": "http://110.36.18.169:39415/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:26:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809332/",
            "reporter": "geenensp"
        }
    ],
    "3809331": [
        {
            "dateadded": "2026-03-31 19:42:10 UTC",
            "url": "https://thought-api.neurobloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809331/",
            "reporter": "anonymous"
        }
    ],
    "3809330": [
        {
            "dateadded": "2026-03-31 19:37:19 UTC",
            "url": "http://222.136.159.32:36989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809330/",
            "reporter": "geenensp"
        }
    ],
    "3809329": [
        {
            "dateadded": "2026-03-31 19:37:07 UTC",
            "url": "http://36.64.184.26:54919/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809329/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809328": [
        {
            "dateadded": "2026-03-31 19:36:12 UTC",
            "url": "http://117.241.51.251:44710/i",
            "url_status": "offline",
            "last_online": "2026-03-31 19:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809328/",
            "reporter": "geenensp"
        }
    ],
    "3809327": [
        {
            "dateadded": "2026-03-31 19:36:11 UTC",
            "url": "https://brain-scan.neurobloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809327/",
            "reporter": "anonymous"
        }
    ],
    "3809326": [
        {
            "dateadded": "2026-03-31 19:31:10 UTC",
            "url": "https://synapse-net.neurobloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809326/",
            "reporter": "anonymous"
        }
    ],
    "3809325": [
        {
            "dateadded": "2026-03-31 19:24:12 UTC",
            "url": "https://bit-stream.quantaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809325/",
            "reporter": "anonymous"
        }
    ],
    "3809324": [
        {
            "dateadded": "2026-03-31 19:19:09 UTC",
            "url": "https://packet-flow.quantaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809324/",
            "reporter": "anonymous"
        }
    ],
    "3809323": [
        {
            "dateadded": "2026-03-31 19:17:20 UTC",
            "url": "http://124.94.231.19:53077/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 16:05:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809323/",
            "reporter": "geenensp"
        }
    ],
    "3809322": [
        {
            "dateadded": "2026-03-31 19:15:14 UTC",
            "url": "http://42.238.68.233:44121/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:23:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809322/",
            "reporter": "geenensp"
        }
    ],
    "3809321": [
        {
            "dateadded": "2026-03-31 19:14:09 UTC",
            "url": "https://speed-test.quantaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809321/",
            "reporter": "anonymous"
        }
    ],
    "3809320": [
        {
            "dateadded": "2026-03-31 19:10:22 UTC",
            "url": "http://117.241.51.251:44710/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 19:10:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809320/",
            "reporter": "geenensp"
        }
    ],
    "3809319": [
        {
            "dateadded": "2026-03-31 19:08:09 UTC",
            "url": "https://logic-gate.quantaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809319/",
            "reporter": "anonymous"
        }
    ],
    "3809318": [
        {
            "dateadded": "2026-03-31 19:02:10 UTC",
            "url": "https://atom-split.quantaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 19:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809318/",
            "reporter": "anonymous"
        }
    ],
    "3809317": [
        {
            "dateadded": "2026-03-31 19:02:07 UTC",
            "url": "http://36.64.184.26:54919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:55:45 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809317/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809316": [
        {
            "dateadded": "2026-03-31 18:57:08 UTC",
            "url": "http://88.254.164.206:43117/i",
            "url_status": "offline",
            "last_online": "2026-03-31 18:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809316/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809315": [
        {
            "dateadded": "2026-03-31 18:56:16 UTC",
            "url": "https://micro-pulse.quantaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809315/",
            "reporter": "anonymous"
        }
    ],
    "3809314": [
        {
            "dateadded": "2026-03-31 18:50:13 UTC",
            "url": "https://pilot-auth.astrahaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809314/",
            "reporter": "anonymous"
        }
    ],
    "3809313": [
        {
            "dateadded": "2026-03-31 18:49:20 UTC",
            "url": "http://103.167.175.121:53667/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:41:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809313/",
            "reporter": "geenensp"
        }
    ],
    "3809312": [
        {
            "dateadded": "2026-03-31 18:47:10 UTC",
            "url": "https://void-storage.astrahaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809312/",
            "reporter": "anonymous"
        }
    ],
    "3809311": [
        {
            "dateadded": "2026-03-31 18:44:12 UTC",
            "url": "https://cosmic-link.astrahaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809311/",
            "reporter": "anonymous"
        }
    ],
    "3809310": [
        {
            "dateadded": "2026-03-31 18:42:07 UTC",
            "url": "http://123.7.223.111:34621/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:24:19 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809310/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809309": [
        {
            "dateadded": "2026-03-31 18:41:25 UTC",
            "url": "http://42.228.125.217:36422/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809309/",
            "reporter": "geenensp"
        }
    ],
    "3809308": [
        {
            "dateadded": "2026-03-31 18:37:20 UTC",
            "url": "http://110.37.55.23:40200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809308/",
            "reporter": "geenensp"
        }
    ],
    "3809307": [
        {
            "dateadded": "2026-03-31 18:35:10 UTC",
            "url": "http://193.163.187.211:55199/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:35:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809307/",
            "reporter": "geenensp"
        }
    ],
    "3809306": [
        {
            "dateadded": "2026-03-31 18:34:15 UTC",
            "url": "https://star-map.astrahaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809306/",
            "reporter": "anonymous"
        }
    ],
    "3809305": [
        {
            "dateadded": "2026-03-31 18:30:22 UTC",
            "url": "http://124.94.231.19:53077/i",
            "url_status": "offline",
            "last_online": "2026-04-05 16:22:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809305/",
            "reporter": "geenensp"
        }
    ],
    "3809304": [
        {
            "dateadded": "2026-03-31 18:29:20 UTC",
            "url": "http://110.37.117.225:49671/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809304/",
            "reporter": "geenensp"
        }
    ],
    "3809303": [
        {
            "dateadded": "2026-03-31 18:28:12 UTC",
            "url": "https://deep-sky.astrahaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809303/",
            "reporter": "anonymous"
        }
    ],
    "3809302": [
        {
            "dateadded": "2026-03-31 18:27:07 UTC",
            "url": "http://110.38.221.11:50656/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809302/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809301": [
        {
            "dateadded": "2026-03-31 18:23:21 UTC",
            "url": "http://122.231.163.114:43927/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809301/",
            "reporter": "geenensp"
        }
    ],
    "3809300": [
        {
            "dateadded": "2026-03-31 18:23:19 UTC",
            "url": "https://safe-ship.astrahaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:23:19 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809300/",
            "reporter": "anonymous"
        }
    ],
    "3809299": [
        {
            "dateadded": "2026-03-31 18:17:13 UTC",
            "url": "https://launch-pad.orbitforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809299/",
            "reporter": "anonymous"
        }
    ],
    "3809298": [
        {
            "dateadded": "2026-03-31 18:15:09 UTC",
            "url": "https://kryptonmc.lovable.app/krypton-1.21.11.jar",
            "url_status": "offline",
            "last_online": "2026-04-01 05:12:54 UTC",
            "threat": "malware_download",
            "tags": [
                "jar",
                "WeedHack"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809298/",
            "reporter": "burger"
        }
    ],
    "3809297": [
        {
            "dateadded": "2026-03-31 18:13:19 UTC",
            "url": "http://103.167.175.121:53667/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:19:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809297/",
            "reporter": "geenensp"
        }
    ],
    "3809296": [
        {
            "dateadded": "2026-03-31 18:11:09 UTC",
            "url": "https://gravity-io.orbitforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809296/",
            "reporter": "anonymous"
        }
    ],
    "3809295": [
        {
            "dateadded": "2026-03-31 18:06:11 UTC",
            "url": "https://spin-control.orbitforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809295/",
            "reporter": "anonymous"
        }
    ],
    "3809294": [
        {
            "dateadded": "2026-03-31 18:02:07 UTC",
            "url": "http://110.38.221.11:50656/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:19:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809294/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809293": [
        {
            "dateadded": "2026-03-31 18:00:14 UTC",
            "url": "https://round-trip.orbitforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 18:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809293/",
            "reporter": "anonymous"
        }
    ],
    "3809292": [
        {
            "dateadded": "2026-03-31 17:59:20 UTC",
            "url": "http://122.231.163.114:43927/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:18:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809292/",
            "reporter": "geenensp"
        }
    ],
    "3809291": [
        {
            "dateadded": "2026-03-31 17:54:11 UTC",
            "url": "https://cycle-monitor.orbitforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809291/",
            "reporter": "anonymous"
        }
    ],
    "3809290": [
        {
            "dateadded": "2026-03-31 17:49:10 UTC",
            "url": "https://path-finder.orbitforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809290/",
            "reporter": "anonymous"
        }
    ],
    "3809289": [
        {
            "dateadded": "2026-03-31 17:47:08 UTC",
            "url": "http://123.7.223.111:34621/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:24:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809289/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809288": [
        {
            "dateadded": "2026-03-31 17:43:11 UTC",
            "url": "https://glow-portal.luminflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809288/",
            "reporter": "anonymous"
        }
    ],
    "3809287": [
        {
            "dateadded": "2026-03-31 17:38:12 UTC",
            "url": "https://light-trace.luminflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809287/",
            "reporter": "anonymous"
        }
    ],
    "3809286": [
        {
            "dateadded": "2026-03-31 17:35:17 UTC",
            "url": "https://photo-sync.luminflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:35:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809286/",
            "reporter": "anonymous"
        }
    ],
    "3809285": [
        {
            "dateadded": "2026-03-31 17:33:15 UTC",
            "url": "http://123.9.90.92:34637/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:22:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809285/",
            "reporter": "geenensp"
        }
    ],
    "3809284": [
        {
            "dateadded": "2026-03-31 17:31:21 UTC",
            "url": "http://222.142.254.165:41922/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:04:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809284/",
            "reporter": "geenensp"
        }
    ],
    "3809283": [
        {
            "dateadded": "2026-03-31 17:31:14 UTC",
            "url": "https://optic-hub.luminflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809283/",
            "reporter": "anonymous"
        }
    ],
    "3809282": [
        {
            "dateadded": "2026-03-31 17:27:10 UTC",
            "url": "http://112.98.97.191:34651/i",
            "url_status": "offline",
            "last_online": "2026-04-07 16:16:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809282/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809281": [
        {
            "dateadded": "2026-03-31 17:25:20 UTC",
            "url": "http://42.54.11.123:34666/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809281/",
            "reporter": "geenensp"
        }
    ],
    "3809280": [
        {
            "dateadded": "2026-03-31 17:21:22 UTC",
            "url": "http://59.94.101.41:55090/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 17:21:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809280/",
            "reporter": "geenensp"
        }
    ],
    "3809279": [
        {
            "dateadded": "2026-03-31 17:21:13 UTC",
            "url": "https://wave-length.luminflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809279/",
            "reporter": "anonymous"
        }
    ],
    "3809278": [
        {
            "dateadded": "2026-03-31 17:17:21 UTC",
            "url": "http://112.98.97.191:34651/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 16:57:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809278/",
            "reporter": "geenensp"
        }
    ],
    "3809277": [
        {
            "dateadded": "2026-03-31 17:16:16 UTC",
            "url": "https://bright-beam.luminflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:16:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809277/",
            "reporter": "anonymous"
        }
    ],
    "3809276": [
        {
            "dateadded": "2026-03-31 17:09:11 UTC",
            "url": "https://smelt-logic.novaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809276/",
            "reporter": "anonymous"
        }
    ],
    "3809275": [
        {
            "dateadded": "2026-03-31 17:04:12 UTC",
            "url": "https://plasma-node.novaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 17:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809275/",
            "reporter": "anonymous"
        }
    ],
    "3809274": [
        {
            "dateadded": "2026-03-31 17:02:09 UTC",
            "url": "http://27.37.103.199:44175/i",
            "url_status": "offline",
            "last_online": "2026-04-03 10:09:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809274/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809273": [
        {
            "dateadded": "2026-03-31 16:59:16 UTC",
            "url": "http://42.54.11.123:34666/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809273/",
            "reporter": "geenensp"
        }
    ],
    "3809272": [
        {
            "dateadded": "2026-03-31 16:58:10 UTC",
            "url": "https://blast-zone.novaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809272/",
            "reporter": "anonymous"
        }
    ],
    "3809271": [
        {
            "dateadded": "2026-03-31 16:56:20 UTC",
            "url": "http://110.39.236.58:59893/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809271/",
            "reporter": "geenensp"
        }
    ],
    "3809270": [
        {
            "dateadded": "2026-03-31 16:54:14 UTC",
            "url": "https://heavy-metal.novaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809270/",
            "reporter": "anonymous"
        }
    ],
    "3809269": [
        {
            "dateadded": "2026-03-31 16:48:12 UTC",
            "url": "https://fusion-core.novaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809269/",
            "reporter": "anonymous"
        }
    ],
    "3809268": [
        {
            "dateadded": "2026-03-31 16:47:10 UTC",
            "url": "http://220.192.1.252:40811/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809268/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809267": [
        {
            "dateadded": "2026-03-31 16:45:22 UTC",
            "url": "http://123.14.180.160:55488/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:02:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809267/",
            "reporter": "geenensp"
        }
    ],
    "3809266": [
        {
            "dateadded": "2026-03-31 16:44:22 UTC",
            "url": "http://219.155.208.26:42784/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:50:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809266/",
            "reporter": "geenensp"
        }
    ],
    "3809265": [
        {
            "dateadded": "2026-03-31 16:42:12 UTC",
            "url": "https://star-build.novaforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:42:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809265/",
            "reporter": "anonymous"
        }
    ],
    "3809264": [
        {
            "dateadded": "2026-03-31 16:38:13 UTC",
            "url": "https://polygon-svc.vertexbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809264/",
            "reporter": "anonymous"
        }
    ],
    "3809263": [
        {
            "dateadded": "2026-03-31 16:37:22 UTC",
            "url": "http://123.9.90.92:34637/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:44:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809263/",
            "reporter": "geenensp"
        }
    ],
    "3809262": [
        {
            "dateadded": "2026-03-31 16:35:16 UTC",
            "url": "https://top-level.vertexbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809262/",
            "reporter": "anonymous"
        }
    ],
    "3809261": [
        {
            "dateadded": "2026-03-31 16:27:17 UTC",
            "url": "http://217.208.145.10:33976/i",
            "url_status": "offline",
            "last_online": "2026-04-23 05:47:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809261/",
            "reporter": "geenensp"
        }
    ],
    "3809260": [
        {
            "dateadded": "2026-03-31 16:24:11 UTC",
            "url": "https://spatial-api.vertexbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809260/",
            "reporter": "anonymous"
        }
    ],
    "3809259": [
        {
            "dateadded": "2026-03-31 16:19:11 UTC",
            "url": "https://render-farm.vertexbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809259/",
            "reporter": "anonymous"
        }
    ],
    "3809258": [
        {
            "dateadded": "2026-03-31 16:16:23 UTC",
            "url": "http://219.155.208.26:42784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:40:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809258/",
            "reporter": "geenensp"
        }
    ],
    "3809257": [
        {
            "dateadded": "2026-03-31 16:15:22 UTC",
            "url": "http://112.252.179.168:46843/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:56:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809257/",
            "reporter": "geenensp"
        }
    ],
    "3809256": [
        {
            "dateadded": "2026-03-31 16:13:10 UTC",
            "url": "https://growth-engine.vertexbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809256/",
            "reporter": "anonymous"
        }
    ],
    "3809255": [
        {
            "dateadded": "2026-03-31 16:11:24 UTC",
            "url": "http://38.226.161.94:36049/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:11:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809255/",
            "reporter": "geenensp"
        }
    ],
    "3809254": [
        {
            "dateadded": "2026-03-31 16:09:12 UTC",
            "url": "https://peak-point.vertexbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:09:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809254/",
            "reporter": "anonymous"
        }
    ],
    "3809253": [
        {
            "dateadded": "2026-03-31 16:07:08 UTC",
            "url": "http://123.14.52.64:39726/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:21:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809253/",
            "reporter": "geenensp"
        }
    ],
    "3809252": [
        {
            "dateadded": "2026-03-31 16:04:20 UTC",
            "url": "http://123.14.180.160:55488/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:55:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809252/",
            "reporter": "geenensp"
        }
    ],
    "3809251": [
        {
            "dateadded": "2026-03-31 16:03:12 UTC",
            "url": "https://vale-gra.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809251/",
            "reporter": "anonymous"
        }
    ],
    "3809250": [
        {
            "dateadded": "2026-03-31 15:58:25 UTC",
            "url": "http://217.208.145.10:33976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 06:27:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809250/",
            "reporter": "geenensp"
        }
    ],
    "3809249": [
        {
            "dateadded": "2026-03-31 15:57:26 UTC",
            "url": "http://113.222.144.108:49582/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:57:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809249/",
            "reporter": "geenensp"
        }
    ],
    "3809248": [
        {
            "dateadded": "2026-03-31 15:56:13 UTC",
            "url": "https://devsig.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809248/",
            "reporter": "anonymous"
        }
    ],
    "3809247": [
        {
            "dateadded": "2026-03-31 15:54:21 UTC",
            "url": "http://106.58.23.214:33668/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:17:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809247/",
            "reporter": "geenensp"
        }
    ],
    "3809246": [
        {
            "dateadded": "2026-03-31 15:52:23 UTC",
            "url": "http://222.141.127.234:38071/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:03:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809246/",
            "reporter": "geenensp"
        }
    ],
    "3809245": [
        {
            "dateadded": "2026-03-31 15:51:14 UTC",
            "url": "https://vgtp5o.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809245/",
            "reporter": "anonymous"
        }
    ],
    "3809244": [
        {
            "dateadded": "2026-03-31 15:50:26 UTC",
            "url": "http://182.119.182.122:44856/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:15:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809244/",
            "reporter": "geenensp"
        }
    ],
    "3809243": [
        {
            "dateadded": "2026-03-31 15:46:20 UTC",
            "url": "http://42.180.248.192:51461/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:02:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809243/",
            "reporter": "geenensp"
        }
    ],
    "3809242": [
        {
            "dateadded": "2026-03-31 15:46:10 UTC",
            "url": "https://qz65lmfc.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809242/",
            "reporter": "anonymous"
        }
    ],
    "3809241": [
        {
            "dateadded": "2026-03-31 15:45:26 UTC",
            "url": "http://113.222.144.108:49582/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:22:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809241/",
            "reporter": "geenensp"
        }
    ],
    "3809240": [
        {
            "dateadded": "2026-03-31 15:39:11 UTC",
            "url": "https://formalpod.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809240/",
            "reporter": "anonymous"
        }
    ],
    "3809239": [
        {
            "dateadded": "2026-03-31 15:35:25 UTC",
            "url": "http://123.14.52.64:39726/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:58:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809239/",
            "reporter": "geenensp"
        }
    ],
    "3809238": [
        {
            "dateadded": "2026-03-31 15:34:12 UTC",
            "url": "https://vaulvoc.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809238/",
            "reporter": "anonymous"
        }
    ],
    "3809236": [
        {
            "dateadded": "2026-03-31 15:30:26 UTC",
            "url": "http://182.112.182.107:38745/i",
            "url_status": "offline",
            "last_online": "2026-04-07 17:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809236/",
            "reporter": "geenensp"
        }
    ],
    "3809237": [
        {
            "dateadded": "2026-03-31 15:30:26 UTC",
            "url": "http://105.186.172.191:42231/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:54:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809237/",
            "reporter": "geenensp"
        }
    ],
    "3809235": [
        {
            "dateadded": "2026-03-31 15:29:15 UTC",
            "url": "https://cata1og-forge.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809235/",
            "reporter": "anonymous"
        }
    ],
    "3809234": [
        {
            "dateadded": "2026-03-31 15:27:08 UTC",
            "url": "http://39.74.83.28:32913/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:03:57 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809234/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809233": [
        {
            "dateadded": "2026-03-31 15:26:35 UTC",
            "url": "http://106.58.23.214:33668/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:56:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809233/",
            "reporter": "geenensp"
        }
    ],
    "3809232": [
        {
            "dateadded": "2026-03-31 15:26:27 UTC",
            "url": "http://59.97.177.208:35249/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809232/",
            "reporter": "geenensp"
        }
    ],
    "3809231": [
        {
            "dateadded": "2026-03-31 15:23:16 UTC",
            "url": "https://xxhq.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:23:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809231/",
            "reporter": "anonymous"
        }
    ],
    "3809230": [
        {
            "dateadded": "2026-03-31 15:17:28 UTC",
            "url": "http://182.119.182.122:44856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:34:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809230/",
            "reporter": "geenensp"
        }
    ],
    "3809229": [
        {
            "dateadded": "2026-03-31 15:17:17 UTC",
            "url": "https://partnerrelay.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:17:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809229/",
            "reporter": "anonymous"
        }
    ],
    "3809228": [
        {
            "dateadded": "2026-03-31 15:16:35 UTC",
            "url": "http://59.180.183.105:49437/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809228/",
            "reporter": "geenensp"
        }
    ],
    "3809227": [
        {
            "dateadded": "2026-03-31 15:12:12 UTC",
            "url": "https://value9-mesh.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 16:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809227/",
            "reporter": "anonymous"
        }
    ],
    "3809226": [
        {
            "dateadded": "2026-03-31 15:11:21 UTC",
            "url": "http://182.121.112.12:38148/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:59:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809226/",
            "reporter": "geenensp"
        }
    ],
    "3809225": [
        {
            "dateadded": "2026-03-31 15:09:22 UTC",
            "url": "http://182.112.182.107:38745/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 15:48:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809225/",
            "reporter": "geenensp"
        }
    ],
    "3809224": [
        {
            "dateadded": "2026-03-31 15:09:21 UTC",
            "url": "http://115.55.189.111:52003/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809224/",
            "reporter": "geenensp"
        }
    ],
    "3809223": [
        {
            "dateadded": "2026-03-31 15:06:11 UTC",
            "url": "https://lum-markal.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:17:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809223/",
            "reporter": "anonymous"
        }
    ],
    "3809222": [
        {
            "dateadded": "2026-03-31 15:02:18 UTC",
            "url": "http://60.23.236.40:60789/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:03:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809222/",
            "reporter": "geenensp"
        }
    ],
    "3809221": [
        {
            "dateadded": "2026-03-31 15:02:06 UTC",
            "url": "http://39.74.83.28:32913/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:30:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809221/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809220": [
        {
            "dateadded": "2026-03-31 15:01:13 UTC",
            "url": "https://mer-lithen.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:34:46 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809220/",
            "reporter": "anonymous"
        }
    ],
    "3809219": [
        {
            "dateadded": "2026-03-31 14:56:13 UTC",
            "url": "https://load-spark.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809219/",
            "reporter": "anonymous"
        }
    ],
    "3809218": [
        {
            "dateadded": "2026-03-31 14:50:17 UTC",
            "url": "https://kvvfusu.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:50:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809218/",
            "reporter": "anonymous"
        }
    ],
    "3809217": [
        {
            "dateadded": "2026-03-31 14:49:23 UTC",
            "url": "http://42.231.110.202:57990/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:20:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809217/",
            "reporter": "geenensp"
        }
    ],
    "3809216": [
        {
            "dateadded": "2026-03-31 14:44:12 UTC",
            "url": "https://voicefjo.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 15:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809216/",
            "reporter": "anonymous"
        }
    ],
    "3809215": [
        {
            "dateadded": "2026-03-31 14:43:21 UTC",
            "url": "http://182.121.112.12:38148/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:54:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809215/",
            "reporter": "geenensp"
        }
    ],
    "3809214": [
        {
            "dateadded": "2026-03-31 14:42:21 UTC",
            "url": "http://59.180.183.105:49437/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:49:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809214/",
            "reporter": "geenensp"
        }
    ],
    "3809213": [
        {
            "dateadded": "2026-03-31 14:42:17 UTC",
            "url": "http://115.55.189.111:52003/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:11:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809213/",
            "reporter": "geenensp"
        }
    ],
    "3809212": [
        {
            "dateadded": "2026-03-31 14:39:23 UTC",
            "url": "http://190.55.14.216:38506/i",
            "url_status": "offline",
            "last_online": "2026-04-09 05:06:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809212/",
            "reporter": "geenensp"
        }
    ],
    "3809211": [
        {
            "dateadded": "2026-03-31 14:39:16 UTC",
            "url": "http://110.37.52.120:36919/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:24:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809211/",
            "reporter": "geenensp"
        }
    ],
    "3809210": [
        {
            "dateadded": "2026-03-31 14:38:23 UTC",
            "url": "https://honestsort.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:38:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809210/",
            "reporter": "anonymous"
        }
    ],
    "3809209": [
        {
            "dateadded": "2026-03-31 14:34:20 UTC",
            "url": "http://110.37.26.48:52572/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:17:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809209/",
            "reporter": "geenensp"
        }
    ],
    "3809208": [
        {
            "dateadded": "2026-03-31 14:32:22 UTC",
            "url": "https://rne4d7-zone.cuffsorbsky.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:32:22 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809208/",
            "reporter": "anonymous"
        }
    ],
    "3809207": [
        {
            "dateadded": "2026-03-31 14:32:09 UTC",
            "url": "http://196.189.96.59:43689/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:09:35 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809207/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809206": [
        {
            "dateadded": "2026-03-31 14:28:11 UTC",
            "url": "https://loosesnow.cuffsorbsky.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809206/",
            "reporter": "anonymous"
        }
    ],
    "3809205": [
        {
            "dateadded": "2026-03-31 14:22:11 UTC",
            "url": "https://st4b1l-span.cuffsorbsky.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809205/",
            "reporter": "anonymous"
        }
    ],
    "3809204": [
        {
            "dateadded": "2026-03-31 14:22:09 UTC",
            "url": "http://196.189.96.59:43689/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:46:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809204/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809202": [
        {
            "dateadded": "2026-03-31 14:21:09 UTC",
            "url": "http://158.94.210.91/g8hrS4f4vh/Plugins/cred.dll",
            "url_status": "offline",
            "last_online": "2026-04-03 03:55:23 UTC",
            "threat": "malware_download",
            "tags": [
                "Amadey",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809202/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809203": [
        {
            "dateadded": "2026-03-31 14:21:09 UTC",
            "url": "http://158.94.210.91/g8hrS4f4vh/Plugins/cred64.dll",
            "url_status": "offline",
            "last_online": "2026-04-03 04:02:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Amadey",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809203/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809201": [
        {
            "dateadded": "2026-03-31 14:21:08 UTC",
            "url": "http://158.94.210.91/g8hrS4f4vh/Plugins/vnc.exe",
            "url_status": "offline",
            "last_online": "2026-04-03 04:00:53 UTC",
            "threat": "malware_download",
            "tags": [
                "tinynuke",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809201/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809200": [
        {
            "dateadded": "2026-03-31 14:19:26 UTC",
            "url": "http://39.81.216.175:44977/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809200/",
            "reporter": "geenensp"
        }
    ],
    "3809199": [
        {
            "dateadded": "2026-03-31 14:16:14 UTC",
            "url": "https://bundstar.cuffsorbsky.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:16:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809199/",
            "reporter": "anonymous"
        }
    ],
    "3809198": [
        {
            "dateadded": "2026-03-31 14:10:24 UTC",
            "url": "https://yfjgi.cuffsorbsky.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:10:24 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809198/",
            "reporter": "anonymous"
        }
    ],
    "3809197": [
        {
            "dateadded": "2026-03-31 14:09:18 UTC",
            "url": "http://110.37.52.120:36919/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:33:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809197/",
            "reporter": "geenensp"
        }
    ],
    "3809196": [
        {
            "dateadded": "2026-03-31 14:06:12 UTC",
            "url": "http://110.37.102.128:52610/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:20:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809196/",
            "reporter": "geenensp"
        }
    ],
    "3809195": [
        {
            "dateadded": "2026-03-31 14:05:21 UTC",
            "url": "https://scarlet-tra.cuffsorbsky.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 14:05:21 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809195/",
            "reporter": "anonymous"
        }
    ],
    "3809194": [
        {
            "dateadded": "2026-03-31 14:01:14 UTC",
            "url": "http://117.235.45.187:53599/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 14:01:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809194/",
            "reporter": "geenensp"
        }
    ],
    "3809193": [
        {
            "dateadded": "2026-03-31 13:53:00 UTC",
            "url": "https://gentle5-crest.codcomparable.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:53:00 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809193/",
            "reporter": "anonymous"
        }
    ],
    "3809192": [
        {
            "dateadded": "2026-03-31 13:47:31 UTC",
            "url": "https://j30k.codcomparable.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:47:31 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809192/",
            "reporter": "anonymous"
        }
    ],
    "3809191": [
        {
            "dateadded": "2026-03-31 13:44:24 UTC",
            "url": "http://110.37.95.41:59422/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:22:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809191/",
            "reporter": "geenensp"
        }
    ],
    "3809190": [
        {
            "dateadded": "2026-03-31 13:42:23 UTC",
            "url": "https://theor-spool.codcomparable.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:42:23 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809190/",
            "reporter": "anonymous"
        }
    ],
    "3809189": [
        {
            "dateadded": "2026-03-31 13:40:35 UTC",
            "url": "http://42.230.40.84:32883/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:39:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809189/",
            "reporter": "geenensp"
        }
    ],
    "3809188": [
        {
            "dateadded": "2026-03-31 13:39:20 UTC",
            "url": "http://117.211.208.123:38032/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 13:39:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809188/",
            "reporter": "geenensp"
        }
    ],
    "3809187": [
        {
            "dateadded": "2026-03-31 13:36:25 UTC",
            "url": "https://sp0o-forge.codcomparable.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:36:25 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809187/",
            "reporter": "anonymous"
        }
    ],
    "3809186": [
        {
            "dateadded": "2026-03-31 13:32:25 UTC",
            "url": "http://110.37.38.88:59792/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 09:55:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809186/",
            "reporter": "geenensp"
        }
    ],
    "3809185": [
        {
            "dateadded": "2026-03-31 13:31:26 UTC",
            "url": "https://c0nvoy5-field.codcomparable.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 22:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809185/",
            "reporter": "anonymous"
        }
    ],
    "3809184": [
        {
            "dateadded": "2026-03-31 13:29:14 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.mipsrouter",
            "url_status": "offline",
            "last_online": "2026-04-01 22:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809184/",
            "reporter": "abuse_ch"
        }
    ],
    "3809183": [
        {
            "dateadded": "2026-03-31 13:28:34 UTC",
            "url": "http://121.37.40.52/main_mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809183/",
            "reporter": "abuse_ch"
        }
    ],
    "3809180": [
        {
            "dateadded": "2026-03-31 13:28:27 UTC",
            "url": "http://178.232.64.184:54840/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-25 14:54:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809180/",
            "reporter": "geenensp"
        }
    ],
    "3809181": [
        {
            "dateadded": "2026-03-31 13:28:27 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-01 21:28:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809181/",
            "reporter": "abuse_ch"
        }
    ],
    "3809182": [
        {
            "dateadded": "2026-03-31 13:28:27 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.aarch64",
            "url_status": "offline",
            "last_online": "2026-04-01 22:52:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809182/",
            "reporter": "abuse_ch"
        }
    ],
    "3809178": [
        {
            "dateadded": "2026-03-31 13:28:25 UTC",
            "url": "http://121.37.40.52/main_i486",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809178/",
            "reporter": "abuse_ch"
        }
    ],
    "3809179": [
        {
            "dateadded": "2026-03-31 13:28:25 UTC",
            "url": "http://121.37.40.52/main_sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809179/",
            "reporter": "abuse_ch"
        }
    ],
    "3809167": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809167/",
            "reporter": "abuse_ch"
        }
    ],
    "3809168": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_aarch64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809168/",
            "reporter": "abuse_ch"
        }
    ],
    "3809169": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809169/",
            "reporter": "abuse_ch"
        }
    ],
    "3809170": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809170/",
            "reporter": "abuse_ch"
        }
    ],
    "3809171": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809171/",
            "reporter": "abuse_ch"
        }
    ],
    "3809172": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809172/",
            "reporter": "abuse_ch"
        }
    ],
    "3809173": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_mips64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809173/",
            "reporter": "abuse_ch"
        }
    ],
    "3809174": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809174/",
            "reporter": "abuse_ch"
        }
    ],
    "3809175": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809175/",
            "reporter": "abuse_ch"
        }
    ],
    "3809176": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809176/",
            "reporter": "abuse_ch"
        }
    ],
    "3809177": [
        {
            "dateadded": "2026-03-31 13:28:24 UTC",
            "url": "http://121.37.40.52/main_i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809177/",
            "reporter": "abuse_ch"
        }
    ],
    "3809165": [
        {
            "dateadded": "2026-03-31 13:28:23 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809165/",
            "reporter": "abuse_ch"
        }
    ],
    "3809166": [
        {
            "dateadded": "2026-03-31 13:28:23 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809166/",
            "reporter": "abuse_ch"
        }
    ],
    "3809164": [
        {
            "dateadded": "2026-03-31 13:26:27 UTC",
            "url": "https://py28ionr.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809164/",
            "reporter": "anonymous"
        }
    ],
    "3809163": [
        {
            "dateadded": "2026-03-31 13:25:46 UTC",
            "url": "http://110.37.95.41:59422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:56:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809163/",
            "reporter": "geenensp"
        }
    ],
    "3809162": [
        {
            "dateadded": "2026-03-31 13:19:45 UTC",
            "url": "https://ledge5-switch.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:19:45 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809162/",
            "reporter": "anonymous"
        }
    ],
    "3809161": [
        {
            "dateadded": "2026-03-31 13:16:10 UTC",
            "url": "https://4csbzg.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809161/",
            "reporter": "anonymous"
        }
    ],
    "3809160": [
        {
            "dateadded": "2026-03-31 13:14:07 UTC",
            "url": "https://csbtxwz.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-02 16:18:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809160/",
            "reporter": "anonymous"
        }
    ],
    "3809158": [
        {
            "dateadded": "2026-03-31 13:08:07 UTC",
            "url": "https://github.com/ashduasdoasdoasd/localhostc2/raw/refs/heads/main/realc2/hi-malwareresearcher/RuntimeBroker.exe",
            "url_status": "offline",
            "last_online": "2026-04-01 06:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "AdaptixC2"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809158/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809159": [
        {
            "dateadded": "2026-03-31 13:08:07 UTC",
            "url": "https://raw.githubusercontent.com/ashduasdoasdoasd/localhostc2/refs/heads/main/realc2/hi-malwareresearcher/RuntimeBroker.exe",
            "url_status": "offline",
            "last_online": "2026-04-01 05:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "AdaptixC2"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809159/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809157": [
        {
            "dateadded": "2026-03-31 13:06:15 UTC",
            "url": "http://113.238.14.212:45600/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 16:11:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809157/",
            "reporter": "geenensp"
        }
    ],
    "3809156": [
        {
            "dateadded": "2026-03-31 13:04:15 UTC",
            "url": "https://zenvaleex.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 13:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809156/",
            "reporter": "anonymous"
        }
    ],
    "3809155": [
        {
            "dateadded": "2026-03-31 13:02:07 UTC",
            "url": "http://182.127.48.41:59514/i",
            "url_status": "offline",
            "last_online": "2026-03-31 14:06:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809155/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809154": [
        {
            "dateadded": "2026-03-31 12:58:12 UTC",
            "url": "https://lumnexum1.prefixwag.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:58:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809154/",
            "reporter": "anonymous"
        }
    ],
    "3809153": [
        {
            "dateadded": "2026-03-31 12:52:12 UTC",
            "url": "https://zennex8ar.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809153/",
            "reporter": "anonymous"
        }
    ],
    "3809152": [
        {
            "dateadded": "2026-03-31 12:48:10 UTC",
            "url": "https://tokcheck.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809152/",
            "reporter": "anonymous"
        }
    ],
    "3809151": [
        {
            "dateadded": "2026-03-31 12:47:18 UTC",
            "url": "http://120.61.157.176:55679/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 12:47:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809151/",
            "reporter": "geenensp"
        }
    ],
    "3809150": [
        {
            "dateadded": "2026-03-31 12:45:11 UTC",
            "url": "https://veobw.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809150/",
            "reporter": "anonymous"
        }
    ],
    "3809149": [
        {
            "dateadded": "2026-03-31 12:35:11 UTC",
            "url": "http://113.238.14.212:45600/i",
            "url_status": "offline",
            "last_online": "2026-04-06 10:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809149/",
            "reporter": "geenensp"
        }
    ],
    "3809148": [
        {
            "dateadded": "2026-03-31 12:34:16 UTC",
            "url": "https://targettest.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:34:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809148/",
            "reporter": "anonymous"
        }
    ],
    "3809146": [
        {
            "dateadded": "2026-03-31 12:34:08 UTC",
            "url": "http://176.65.139.203/manji.apk",
            "url_status": "offline",
            "last_online": "2026-03-31 14:57:55 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809146/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809147": [
        {
            "dateadded": "2026-03-31 12:34:08 UTC",
            "url": "http://176.65.139.203/manji.dbg",
            "url_status": "offline",
            "last_online": "2026-03-31 15:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809147/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809145": [
        {
            "dateadded": "2026-03-31 12:31:09 UTC",
            "url": "https://vxfxox7r.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809145/",
            "reporter": "anonymous"
        }
    ],
    "3809144": [
        {
            "dateadded": "2026-03-31 12:31:05 UTC",
            "url": "http://176.65.139.44/nigger.go",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809144/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809143": [
        {
            "dateadded": "2026-03-31 12:30:26 UTC",
            "url": "http://176.65.139.44/arm7",
            "url_status": "offline",
            "last_online": "2026-04-07 17:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809143/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809142": [
        {
            "dateadded": "2026-03-31 12:29:05 UTC",
            "url": "http://124.234.181.102:48400/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:46:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809142/",
            "reporter": "geenensp"
        }
    ],
    "3809141": [
        {
            "dateadded": "2026-03-31 12:28:13 UTC",
            "url": "https://b4nn-mount.manchustill.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809141/",
            "reporter": "anonymous"
        }
    ],
    "3809138": [
        {
            "dateadded": "2026-03-31 12:27:11 UTC",
            "url": "http://176.65.139.57/bins/mpsl",
            "url_status": "offline",
            "last_online": "2026-04-24 05:23:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809138/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809139": [
        {
            "dateadded": "2026-03-31 12:27:11 UTC",
            "url": "http://176.65.139.57/bins/arm5",
            "url_status": "offline",
            "last_online": "2026-04-24 04:54:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809139/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809140": [
        {
            "dateadded": "2026-03-31 12:27:11 UTC",
            "url": "http://176.65.139.57/bins/arm4",
            "url_status": "offline",
            "last_online": "2026-04-24 05:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809140/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809134": [
        {
            "dateadded": "2026-03-31 12:26:18 UTC",
            "url": "http://176.65.139.57/bins/arm7",
            "url_status": "offline",
            "last_online": "2026-04-24 05:29:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809134/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809135": [
        {
            "dateadded": "2026-03-31 12:26:18 UTC",
            "url": "http://176.65.139.57/bins/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-24 07:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809135/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809136": [
        {
            "dateadded": "2026-03-31 12:26:18 UTC",
            "url": "http://176.65.139.57/bins/mips",
            "url_status": "offline",
            "last_online": "2026-04-24 04:49:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809136/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809137": [
        {
            "dateadded": "2026-03-31 12:26:18 UTC",
            "url": "http://176.65.139.57/bins/arm6",
            "url_status": "offline",
            "last_online": "2026-04-24 05:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809137/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809132": [
        {
            "dateadded": "2026-03-31 12:22:19 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.armv7l",
            "url_status": "offline",
            "last_online": "2026-04-01 22:16:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809132/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809133": [
        {
            "dateadded": "2026-03-31 12:22:19 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.i486",
            "url_status": "online",
            "last_online": "2026-04-27 11:03:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809133/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809119": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.m68k",
            "url_status": "online",
            "last_online": "2026-04-27 11:07:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809119/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809120": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.armv5l",
            "url_status": "offline",
            "last_online": "2026-04-01 22:02:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809120/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809121": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-01 21:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809121/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809122": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/ohshit.sh",
            "url_status": "online",
            "last_online": "2026-04-27 13:44:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809122/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809123": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.arc",
            "url_status": "online",
            "last_online": "2026-04-27 11:40:01 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809123/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809124": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.x86_64",
            "url_status": "online",
            "last_online": "2026-04-27 12:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809124/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809125": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/arm7",
            "url_status": "offline",
            "last_online": "2026-04-01 21:44:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809125/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809126": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-01 22:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809126/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809127": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 05:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809127/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809128": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-01 22:21:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809128/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809129": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.mips",
            "url_status": "online",
            "last_online": "2026-04-27 14:40:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809129/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809130": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/hiddenbin/boatnet.sparc",
            "url_status": "offline",
            "last_online": "2026-04-01 21:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809130/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809131": [
        {
            "dateadded": "2026-03-31 12:21:18 UTC",
            "url": "http://176.65.139.59/mips",
            "url_status": "offline",
            "last_online": "2026-04-01 21:30:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809131/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809118": [
        {
            "dateadded": "2026-03-31 12:18:10 UTC",
            "url": "https://meta-cu1tur.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809118/",
            "reporter": "anonymous"
        }
    ],
    "3809116": [
        {
            "dateadded": "2026-03-31 12:18:09 UTC",
            "url": "http://176.65.139.203/manji.spc",
            "url_status": "offline",
            "last_online": "2026-03-31 15:05:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809116/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809117": [
        {
            "dateadded": "2026-03-31 12:18:09 UTC",
            "url": "http://176.65.139.203/manji.x86",
            "url_status": "offline",
            "last_online": "2026-03-31 15:40:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809117/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809113": [
        {
            "dateadded": "2026-03-31 12:17:22 UTC",
            "url": "http://176.65.139.203/manji.ppc440",
            "url_status": "offline",
            "last_online": "2026-03-31 14:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809113/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809114": [
        {
            "dateadded": "2026-03-31 12:17:22 UTC",
            "url": "http://176.65.139.203/manji.i686",
            "url_status": "offline",
            "last_online": "2026-03-31 15:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809114/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809115": [
        {
            "dateadded": "2026-03-31 12:17:22 UTC",
            "url": "http://176.65.139.203/manji.arm4",
            "url_status": "offline",
            "last_online": "2026-03-31 14:32:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809115/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809107": [
        {
            "dateadded": "2026-03-31 12:17:21 UTC",
            "url": "http://113.228.240.50:54543/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:59:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809107/",
            "reporter": "geenensp"
        }
    ],
    "3809108": [
        {
            "dateadded": "2026-03-31 12:17:21 UTC",
            "url": "http://176.65.139.203/manji.i486",
            "url_status": "offline",
            "last_online": "2026-03-31 15:32:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809108/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809109": [
        {
            "dateadded": "2026-03-31 12:17:21 UTC",
            "url": "http://176.65.139.203/manji.m68k",
            "url_status": "offline",
            "last_online": "2026-03-31 14:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809109/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809110": [
        {
            "dateadded": "2026-03-31 12:17:21 UTC",
            "url": "http://176.65.139.203/manji.mips",
            "url_status": "offline",
            "last_online": "2026-03-31 14:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809110/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809111": [
        {
            "dateadded": "2026-03-31 12:17:21 UTC",
            "url": "http://176.65.139.203/manji.sh4",
            "url_status": "offline",
            "last_online": "2026-03-31 14:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809111/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809112": [
        {
            "dateadded": "2026-03-31 12:17:21 UTC",
            "url": "http://176.65.139.203/manji.arm5",
            "url_status": "offline",
            "last_online": "2026-03-31 14:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809112/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809103": [
        {
            "dateadded": "2026-03-31 12:17:07 UTC",
            "url": "http://176.65.139.203/arm7",
            "url_status": "offline",
            "last_online": "2026-03-31 14:44:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809103/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809104": [
        {
            "dateadded": "2026-03-31 12:17:07 UTC",
            "url": "http://176.65.139.203/manji.mpsl",
            "url_status": "offline",
            "last_online": "2026-03-31 15:57:21 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809104/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809105": [
        {
            "dateadded": "2026-03-31 12:17:07 UTC",
            "url": "http://176.65.139.203/manji.ppc",
            "url_status": "offline",
            "last_online": "2026-03-31 16:02:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809105/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809106": [
        {
            "dateadded": "2026-03-31 12:17:07 UTC",
            "url": "http://176.65.139.203/manji.arm6",
            "url_status": "offline",
            "last_online": "2026-03-31 15:58:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809106/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809102": [
        {
            "dateadded": "2026-03-31 12:15:42 UTC",
            "url": "http://112.252.179.168:46843/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:11:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809102/",
            "reporter": "geenensp"
        }
    ],
    "3809101": [
        {
            "dateadded": "2026-03-31 12:15:23 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": "2026-04-01 09:54:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809101/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809092": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-01 10:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809092/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809093": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": "2026-04-01 10:19:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809093/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809094": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.i486",
            "url_status": "offline",
            "last_online": "2026-04-01 09:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809094/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809095": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": "2026-04-01 10:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809095/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809096": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": "2026-04-01 11:04:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809096/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809097": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-01 10:38:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809097/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809098": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/ohshit.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 16:10:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809098/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809099": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": "2026-04-01 09:32:53 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809099/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809100": [
        {
            "dateadded": "2026-03-31 12:15:20 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": "2026-04-01 09:33:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809100/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809086": [
        {
            "dateadded": "2026-03-31 12:15:17 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": "2026-04-01 10:30:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809086/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809087": [
        {
            "dateadded": "2026-03-31 12:15:17 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-01 11:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809087/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809088": [
        {
            "dateadded": "2026-03-31 12:15:17 UTC",
            "url": "http://176.65.139.99/mirai.x86",
            "url_status": "offline",
            "last_online": "2026-04-01 16:10:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809088/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809089": [
        {
            "dateadded": "2026-03-31 12:15:17 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-01 09:23:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809089/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809090": [
        {
            "dateadded": "2026-03-31 12:15:17 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": "2026-04-01 09:28:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809090/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809091": [
        {
            "dateadded": "2026-03-31 12:15:17 UTC",
            "url": "http://176.65.139.96/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": "2026-04-01 10:45:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809091/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809085": [
        {
            "dateadded": "2026-03-31 12:12:13 UTC",
            "url": "https://markpeak.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809085/",
            "reporter": "anonymous"
        }
    ],
    "3809084": [
        {
            "dateadded": "2026-03-31 12:11:08 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.i486",
            "url_status": "offline",
            "last_online": "2026-04-13 10:30:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809084/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809083": [
        {
            "dateadded": "2026-03-31 12:09:17 UTC",
            "url": "https://dingdong-1399351730.cos.ap-hongkong.myqcloud.com/glqchoiding.zip",
            "url_status": "offline",
            "last_online": "2026-04-02 21:27:57 UTC",
            "threat": "malware_download",
            "tags": [
                "shellcode",
                "Win32/Malgent!MSR"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809083/",
            "reporter": "Ling"
        }
    ],
    "3809082": [
        {
            "dateadded": "2026-03-31 12:09:06 UTC",
            "url": "http://27.217.89.192:44823/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809082/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809081": [
        {
            "dateadded": "2026-03-31 12:08:09 UTC",
            "url": "https://pu1s-trail.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809081/",
            "reporter": "anonymous"
        }
    ],
    "3809073": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.25/html/jade.ppc",
            "url_status": "offline",
            "last_online": "2026-04-03 09:30:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809073/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809074": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.25/html/jade.arm",
            "url_status": "offline",
            "last_online": "2026-04-03 10:15:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809074/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809075": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.25/html/jade.x86",
            "url_status": "offline",
            "last_online": "2026-04-03 09:29:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809075/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809076": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.25/html/jade.m68k",
            "url_status": "offline",
            "last_online": "2026-04-03 09:32:58 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809076/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809077": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.25/html/jade.arm7",
            "url_status": "offline",
            "last_online": "2026-04-03 10:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809077/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809078": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.74/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-02 17:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809078/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809079": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.25/html/jade.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-03 10:03:20 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809079/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809080": [
        {
            "dateadded": "2026-03-31 12:04:19 UTC",
            "url": "http://176.65.139.74/wget.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:53:52 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809080/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809072": [
        {
            "dateadded": "2026-03-31 12:04:17 UTC",
            "url": "http://176.65.139.74/sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809072/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809066": [
        {
            "dateadded": "2026-03-31 12:03:11 UTC",
            "url": "http://176.65.139.25/html/jade.arm5",
            "url_status": "offline",
            "last_online": "2026-04-03 10:54:06 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809066/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809067": [
        {
            "dateadded": "2026-03-31 12:03:11 UTC",
            "url": "http://176.65.139.25/html/jade.arm6",
            "url_status": "offline",
            "last_online": "2026-04-03 10:15:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809067/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809068": [
        {
            "dateadded": "2026-03-31 12:03:11 UTC",
            "url": "http://176.65.139.25/html/jade.mips",
            "url_status": "offline",
            "last_online": "2026-04-03 10:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809068/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809069": [
        {
            "dateadded": "2026-03-31 12:03:11 UTC",
            "url": "http://176.65.139.25/html/jade.sh4",
            "url_status": "offline",
            "last_online": "2026-04-03 11:02:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809069/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809070": [
        {
            "dateadded": "2026-03-31 12:03:11 UTC",
            "url": "http://176.65.139.25/html/jade.spc",
            "url_status": "offline",
            "last_online": "2026-04-03 10:25:45 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809070/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809071": [
        {
            "dateadded": "2026-03-31 12:03:11 UTC",
            "url": "http://176.65.139.25/html/jade.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-03 10:28:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809071/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809065": [
        {
            "dateadded": "2026-03-31 12:01:12 UTC",
            "url": "https://imagedis.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 12:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809065/",
            "reporter": "anonymous"
        }
    ],
    "3809064": [
        {
            "dateadded": "2026-03-31 11:57:32 UTC",
            "url": "http://117.146.92.46:51853/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:39:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809064/",
            "reporter": "geenensp"
        }
    ],
    "3809063": [
        {
            "dateadded": "2026-03-31 11:56:15 UTC",
            "url": "https://epkzg.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809063/",
            "reporter": "anonymous"
        }
    ],
    "3809062": [
        {
            "dateadded": "2026-03-31 11:51:10 UTC",
            "url": "https://alt-h0llow.premiumtos.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809062/",
            "reporter": "anonymous"
        }
    ],
    "3809061": [
        {
            "dateadded": "2026-03-31 11:48:09 UTC",
            "url": "http://117.146.92.46:51853/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 14:58:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809061/",
            "reporter": "geenensp"
        }
    ],
    "3809060": [
        {
            "dateadded": "2026-03-31 11:44:11 UTC",
            "url": "https://g38198.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809060/",
            "reporter": "anonymous"
        }
    ],
    "3809059": [
        {
            "dateadded": "2026-03-31 11:40:09 UTC",
            "url": "http://119.162.228.112:53422/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809059/",
            "reporter": "geenensp"
        }
    ],
    "3809058": [
        {
            "dateadded": "2026-03-31 11:39:16 UTC",
            "url": "http://120.37.212.67:43258/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:53:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809058/",
            "reporter": "geenensp"
        }
    ],
    "3809057": [
        {
            "dateadded": "2026-03-31 11:39:15 UTC",
            "url": "http://176.65.139.74/mipsel",
            "url_status": "offline",
            "last_online": "2026-04-02 15:25:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809057/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809055": [
        {
            "dateadded": "2026-03-31 11:39:11 UTC",
            "url": "https://clusterclinic.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809055/",
            "reporter": "anonymous"
        }
    ],
    "3809056": [
        {
            "dateadded": "2026-03-31 11:39:11 UTC",
            "url": "http://117.26.226.210:56557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 23:43:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809056/",
            "reporter": "geenensp"
        }
    ],
    "3809051": [
        {
            "dateadded": "2026-03-31 11:39:10 UTC",
            "url": "http://176.65.139.74/arm5",
            "url_status": "offline",
            "last_online": "2026-04-02 16:36:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809051/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809052": [
        {
            "dateadded": "2026-03-31 11:39:10 UTC",
            "url": "http://176.65.139.74/mips",
            "url_status": "offline",
            "last_online": "2026-04-02 15:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809052/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809053": [
        {
            "dateadded": "2026-03-31 11:39:10 UTC",
            "url": "http://176.65.139.74/arm",
            "url_status": "offline",
            "last_online": "2026-04-02 16:48:35 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809053/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809054": [
        {
            "dateadded": "2026-03-31 11:39:10 UTC",
            "url": "http://176.65.139.74/arm7",
            "url_status": "offline",
            "last_online": "2026-04-02 15:43:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809054/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809050": [
        {
            "dateadded": "2026-03-31 11:33:10 UTC",
            "url": "https://btkrpap.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:33:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809050/",
            "reporter": "anonymous"
        }
    ],
    "3809049": [
        {
            "dateadded": "2026-03-31 11:32:07 UTC",
            "url": "http://182.127.48.41:59514/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 11:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809049/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809048": [
        {
            "dateadded": "2026-03-31 11:29:12 UTC",
            "url": "https://canyonfresh.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809048/",
            "reporter": "anonymous"
        }
    ],
    "3809047": [
        {
            "dateadded": "2026-03-31 11:26:10 UTC",
            "url": "http://60.23.203.149:51381/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:23:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809047/",
            "reporter": "geenensp"
        }
    ],
    "3809046": [
        {
            "dateadded": "2026-03-31 11:22:11 UTC",
            "url": "https://summitgeyser.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809046/",
            "reporter": "anonymous"
        }
    ],
    "3809045": [
        {
            "dateadded": "2026-03-31 11:17:17 UTC",
            "url": "http://121.37.40.52/cat.sh",
            "url_status": "offline",
            "last_online": "2026-04-18 11:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809045/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809044": [
        {
            "dateadded": "2026-03-31 11:17:09 UTC",
            "url": "https://xehramf.batkascript.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809044/",
            "reporter": "anonymous"
        }
    ],
    "3809043": [
        {
            "dateadded": "2026-03-31 11:15:11 UTC",
            "url": "http://110.39.239.111:35582/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:21:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809043/",
            "reporter": "geenensp"
        }
    ],
    "3809042": [
        {
            "dateadded": "2026-03-31 11:12:20 UTC",
            "url": "http://113.228.240.50:54543/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:45:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809042/",
            "reporter": "geenensp"
        }
    ],
    "3809041": [
        {
            "dateadded": "2026-03-31 11:12:19 UTC",
            "url": "http://119.162.228.112:53422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:51:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809041/",
            "reporter": "geenensp"
        }
    ],
    "3809040": [
        {
            "dateadded": "2026-03-31 11:11:09 UTC",
            "url": "https://ahus.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809040/",
            "reporter": "anonymous"
        }
    ],
    "3809039": [
        {
            "dateadded": "2026-03-31 11:07:07 UTC",
            "url": "http://117.223.1.224:41751/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:21:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809039/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809038": [
        {
            "dateadded": "2026-03-31 11:07:05 UTC",
            "url": "http://83.168.69.118/run.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 11:07:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809038/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809037": [
        {
            "dateadded": "2026-03-31 11:06:19 UTC",
            "url": "http://60.23.203.149:51381/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:10:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809037/",
            "reporter": "geenensp"
        }
    ],
    "3809036": [
        {
            "dateadded": "2026-03-31 11:05:11 UTC",
            "url": "https://cqnvpcp.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809036/",
            "reporter": "anonymous"
        }
    ],
    "3809035": [
        {
            "dateadded": "2026-03-31 11:00:11 UTC",
            "url": "https://11szohw.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 11:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809035/",
            "reporter": "anonymous"
        }
    ],
    "3809034": [
        {
            "dateadded": "2026-03-31 10:59:17 UTC",
            "url": "http://176.65.139.64/spc",
            "url_status": "offline",
            "last_online": "2026-04-14 23:39:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809034/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809033": [
        {
            "dateadded": "2026-03-31 10:58:13 UTC",
            "url": "http://176.65.139.64/arm4",
            "url_status": "offline",
            "last_online": "2026-04-14 22:55:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809033/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809031": [
        {
            "dateadded": "2026-03-31 10:57:25 UTC",
            "url": "http://hostphpwindowsappsconect.ydns.eu:8011/data/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-10 16:12:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809031/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809032": [
        {
            "dateadded": "2026-03-31 10:57:25 UTC",
            "url": "https://deposit-notification.com/Crypt/optimized_MSI.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809032/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809030": [
        {
            "dateadded": "2026-03-31 10:57:23 UTC",
            "url": "https://ia600708.us.archive.org/14/items/optimized_msi_20260324/optimized_MSI.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809030/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809029": [
        {
            "dateadded": "2026-03-31 10:57:22 UTC",
            "url": "http://inmbau.com/upload/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-18 05:50:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809029/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809028": [
        {
            "dateadded": "2026-03-31 10:57:20 UTC",
            "url": "http://83.217.209.98/logfile.pdf",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809028/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809027": [
        {
            "dateadded": "2026-03-31 10:57:17 UTC",
            "url": "http://176.65.139.64/i486",
            "url_status": "offline",
            "last_online": "2026-04-14 22:22:48 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809027/",
            "reporter": "BlinkzSec"
        }
    ],
    "3809023": [
        {
            "dateadded": "2026-03-31 10:57:13 UTC",
            "url": "https://fullclear-seven.vercel.app/mp.msi",
            "url_status": "offline",
            "last_online": "2026-04-01 09:42:39 UTC",
            "threat": "malware_download",
            "tags": [
                "GoToResolve",
                "LogMeIn",
                "msi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809023/",
            "reporter": "JoulK"
        }
    ],
    "3809024": [
        {
            "dateadded": "2026-03-31 10:57:13 UTC",
            "url": "https://reutilizemais.co.mz/sehhs_MSI.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:08:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809024/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809025": [
        {
            "dateadded": "2026-03-31 10:57:13 UTC",
            "url": "http://reutilizemais.co.mz/sehhs_MSI.png",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809025/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809026": [
        {
            "dateadded": "2026-03-31 10:57:13 UTC",
            "url": "https://prosingle.com.br/my_photo.png",
            "url_status": "offline",
            "last_online": "2026-04-04 22:21:46 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809026/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809022": [
        {
            "dateadded": "2026-03-31 10:57:10 UTC",
            "url": "http://198.12.83.76/img/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-26 23:22:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809022/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809018": [
        {
            "dateadded": "2026-03-31 10:57:09 UTC",
            "url": "http://216.9.225.38/img/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-04-02 03:57:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809018/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809019": [
        {
            "dateadded": "2026-03-31 10:57:09 UTC",
            "url": "https://digitalauralab.com/pictures/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-03-31 14:40:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809019/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809020": [
        {
            "dateadded": "2026-03-31 10:57:09 UTC",
            "url": "https://gateway.lighthouse.storage/ipfs/bafybeidt676k2hl7b7ayspwpxaexs3adgw5jyt7e2f62u3bfje3pk5u3ou/",
            "url_status": "offline",
            "last_online": "2026-04-15 12:07:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809020/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809021": [
        {
            "dateadded": "2026-03-31 10:57:09 UTC",
            "url": "https://gateway.lighthouse.storage/ipfs/bafybeidt676k2hl7b7ayspwpxaexs3adgw5jyt7e2f62u3bfje3pk5u3ou",
            "url_status": "offline",
            "last_online": "2026-04-15 10:15:48 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809021/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809017": [
        {
            "dateadded": "2026-03-31 10:57:08 UTC",
            "url": "https://vault88x.secure-efficient2.su/MSI_054600.png",
            "url_status": "offline",
            "last_online": "2026-04-21 14:28:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809017/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809015": [
        {
            "dateadded": "2026-03-31 10:57:07 UTC",
            "url": "https://mapshdi.wildscreeen.shop/MSI_073826.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809015/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809016": [
        {
            "dateadded": "2026-03-31 10:57:07 UTC",
            "url": "https://payable-notifications.org/RHpGTQwb/optimized_MSI.png",
            "url_status": "offline",
            "last_online": "2026-03-31 10:57:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809016/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809014": [
        {
            "dateadded": "2026-03-31 10:57:06 UTC",
            "url": "https://person.dians-store-ison.top/MSI_215033.png",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809014/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3809013": [
        {
            "dateadded": "2026-03-31 10:53:13 UTC",
            "url": "https://sterilelan.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:53:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809013/",
            "reporter": "anonymous"
        }
    ],
    "3809012": [
        {
            "dateadded": "2026-03-31 10:51:23 UTC",
            "url": "http://120.37.212.67:43258/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809012/",
            "reporter": "geenensp"
        }
    ],
    "3809011": [
        {
            "dateadded": "2026-03-31 10:49:22 UTC",
            "url": "http://110.37.87.223:56393/i",
            "url_status": "offline",
            "last_online": "2026-03-31 10:49:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809011/",
            "reporter": "geenensp"
        }
    ],
    "3809010": [
        {
            "dateadded": "2026-03-31 10:48:10 UTC",
            "url": "https://f4br2-scope.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809010/",
            "reporter": "anonymous"
        }
    ],
    "3809009": [
        {
            "dateadded": "2026-03-31 10:45:18 UTC",
            "url": "http://110.37.102.128:52610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809009/",
            "reporter": "geenensp"
        }
    ],
    "3809008": [
        {
            "dateadded": "2026-03-31 10:43:12 UTC",
            "url": "https://d3nse-gate.beltfloor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:43:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809008/",
            "reporter": "anonymous"
        }
    ],
    "3809007": [
        {
            "dateadded": "2026-03-31 10:42:12 UTC",
            "url": "http://117.223.1.224:41751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 00:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809007/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3809006": [
        {
            "dateadded": "2026-03-31 10:35:13 UTC",
            "url": "https://carg-man.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809006/",
            "reporter": "anonymous"
        }
    ],
    "3809005": [
        {
            "dateadded": "2026-03-31 10:29:11 UTC",
            "url": "https://waveque.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:29:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809005/",
            "reporter": "anonymous"
        }
    ],
    "3809004": [
        {
            "dateadded": "2026-03-31 10:22:11 UTC",
            "url": "https://verify-invoi.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:22:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809004/",
            "reporter": "anonymous"
        }
    ],
    "3809003": [
        {
            "dateadded": "2026-03-31 10:18:20 UTC",
            "url": "http://110.37.87.223:56393/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:18:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809003/",
            "reporter": "geenensp"
        }
    ],
    "3809002": [
        {
            "dateadded": "2026-03-31 10:17:12 UTC",
            "url": "http://110.136.33.111:44856/i",
            "url_status": "offline",
            "last_online": "2026-03-31 10:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809002/",
            "reporter": "geenensp"
        }
    ],
    "3809001": [
        {
            "dateadded": "2026-03-31 10:15:22 UTC",
            "url": "http://113.231.36.162:55536/i",
            "url_status": "offline",
            "last_online": "2026-03-31 17:10:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809001/",
            "reporter": "geenensp"
        }
    ],
    "3809000": [
        {
            "dateadded": "2026-03-31 10:15:18 UTC",
            "url": "https://5ucnd.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3809000/",
            "reporter": "anonymous"
        }
    ],
    "3808999": [
        {
            "dateadded": "2026-03-31 10:14:18 UTC",
            "url": "http://42.230.32.152:46663/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808999/",
            "reporter": "geenensp"
        }
    ],
    "3808998": [
        {
            "dateadded": "2026-03-31 10:10:18 UTC",
            "url": "https://vn06.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:10:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808998/",
            "reporter": "anonymous"
        }
    ],
    "3808997": [
        {
            "dateadded": "2026-03-31 10:02:24 UTC",
            "url": "http://167.250.158.32:39717/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:11:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808997/",
            "reporter": "geenensp"
        }
    ],
    "3808996": [
        {
            "dateadded": "2026-03-31 10:02:14 UTC",
            "url": "https://crawlerstor.radiatebeef.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 10:02:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808996/",
            "reporter": "anonymous"
        }
    ],
    "3808995": [
        {
            "dateadded": "2026-03-31 09:55:15 UTC",
            "url": "https://m0on-flow.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:55:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808995/",
            "reporter": "anonymous"
        }
    ],
    "3808994": [
        {
            "dateadded": "2026-03-31 09:48:12 UTC",
            "url": "https://taldrais3.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808994/",
            "reporter": "anonymous"
        }
    ],
    "3808992": [
        {
            "dateadded": "2026-03-31 09:46:13 UTC",
            "url": "http://42.224.67.171:43887/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808992/",
            "reporter": "geenensp"
        }
    ],
    "3808993": [
        {
            "dateadded": "2026-03-31 09:46:13 UTC",
            "url": "http://42.230.32.152:46663/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:59:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808993/",
            "reporter": "geenensp"
        }
    ],
    "3808991": [
        {
            "dateadded": "2026-03-31 09:44:18 UTC",
            "url": "http://60.18.50.197:50181/i",
            "url_status": "offline",
            "last_online": "2026-04-09 23:05:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808991/",
            "reporter": "geenensp"
        }
    ],
    "3808990": [
        {
            "dateadded": "2026-03-31 09:43:20 UTC",
            "url": "http://196.189.197.131:39690/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:43:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808990/",
            "reporter": "geenensp"
        }
    ],
    "3808989": [
        {
            "dateadded": "2026-03-31 09:42:23 UTC",
            "url": "http://42.6.253.116:46861/i",
            "url_status": "offline",
            "last_online": "2026-04-04 22:42:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808989/",
            "reporter": "geenensp"
        }
    ],
    "3808988": [
        {
            "dateadded": "2026-03-31 09:42:13 UTC",
            "url": "https://gr0v-hold.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808988/",
            "reporter": "anonymous"
        }
    ],
    "3808987": [
        {
            "dateadded": "2026-03-31 09:41:25 UTC",
            "url": "http://61.166.217.21:33418/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:52:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808987/",
            "reporter": "geenensp"
        }
    ],
    "3808986": [
        {
            "dateadded": "2026-03-31 09:35:16 UTC",
            "url": "https://protectsup.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:35:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808986/",
            "reporter": "anonymous"
        }
    ],
    "3808985": [
        {
            "dateadded": "2026-03-31 09:31:19 UTC",
            "url": "http://59.88.131.9:33918/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:31:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808985/",
            "reporter": "geenensp"
        }
    ],
    "3808984": [
        {
            "dateadded": "2026-03-31 09:30:23 UTC",
            "url": "http://217.208.164.149:45464/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808984/",
            "reporter": "geenensp"
        }
    ],
    "3808983": [
        {
            "dateadded": "2026-03-31 09:29:20 UTC",
            "url": "http://46.163.184.136:49029/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 04:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808983/",
            "reporter": "geenensp"
        }
    ],
    "3808982": [
        {
            "dateadded": "2026-03-31 09:29:12 UTC",
            "url": "https://basaltextend.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808982/",
            "reporter": "anonymous"
        }
    ],
    "3808981": [
        {
            "dateadded": "2026-03-31 09:23:13 UTC",
            "url": "https://decode-frame.chernomofnothes.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808981/",
            "reporter": "anonymous"
        }
    ],
    "3808980": [
        {
            "dateadded": "2026-03-31 09:22:09 UTC",
            "url": "http://117.215.208.100:50461/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808980/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808978": [
        {
            "dateadded": "2026-03-31 09:22:07 UTC",
            "url": "http://90.224.208.190:45821/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:54 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808978/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808979": [
        {
            "dateadded": "2026-03-31 09:22:07 UTC",
            "url": "http://110.39.231.36:52341/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:21:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808979/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808977": [
        {
            "dateadded": "2026-03-31 09:18:21 UTC",
            "url": "http://117.216.56.226:39292/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:18:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808977/",
            "reporter": "geenensp"
        }
    ],
    "3808976": [
        {
            "dateadded": "2026-03-31 09:15:21 UTC",
            "url": "http://117.216.56.226:39292/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808976/",
            "reporter": "geenensp"
        }
    ],
    "3808975": [
        {
            "dateadded": "2026-03-31 09:15:18 UTC",
            "url": "http://60.18.50.197:50181/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 22:26:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808975/",
            "reporter": "geenensp"
        }
    ],
    "3808974": [
        {
            "dateadded": "2026-03-31 09:15:12 UTC",
            "url": "https://vorforgeet.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808974/",
            "reporter": "anonymous"
        }
    ],
    "3808973": [
        {
            "dateadded": "2026-03-31 09:13:29 UTC",
            "url": "http://61.166.217.21:33418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 17:02:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808973/",
            "reporter": "geenensp"
        }
    ],
    "3808972": [
        {
            "dateadded": "2026-03-31 09:09:10 UTC",
            "url": "https://oasitre.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808972/",
            "reporter": "anonymous"
        }
    ],
    "3808971": [
        {
            "dateadded": "2026-03-31 09:08:09 UTC",
            "url": "http://180.245.47.80:41423/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:56:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808971/",
            "reporter": "geenensp"
        }
    ],
    "3808970": [
        {
            "dateadded": "2026-03-31 09:04:20 UTC",
            "url": "http://175.147.157.129:55169/i",
            "url_status": "offline",
            "last_online": "2026-04-05 15:58:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808970/",
            "reporter": "geenensp"
        }
    ],
    "3808969": [
        {
            "dateadded": "2026-03-31 09:03:09 UTC",
            "url": "https://dyn-valeal.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 09:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808969/",
            "reporter": "anonymous"
        }
    ],
    "3808968": [
        {
            "dateadded": "2026-03-31 08:56:10 UTC",
            "url": "https://hardexte.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808968/",
            "reporter": "anonymous"
        }
    ],
    "3808967": [
        {
            "dateadded": "2026-03-31 08:55:17 UTC",
            "url": "http://59.88.131.9:33918/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:24:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808967/",
            "reporter": "geenensp"
        }
    ],
    "3808966": [
        {
            "dateadded": "2026-03-31 08:55:16 UTC",
            "url": "http://105.186.172.191:42231/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:43:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808966/",
            "reporter": "geenensp"
        }
    ],
    "3808965": [
        {
            "dateadded": "2026-03-31 08:48:10 UTC",
            "url": "https://l4b-mesh.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808965/",
            "reporter": "anonymous"
        }
    ],
    "3808964": [
        {
            "dateadded": "2026-03-31 08:46:19 UTC",
            "url": "http://167.250.158.32:39717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:15:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808964/",
            "reporter": "geenensp"
        }
    ],
    "3808963": [
        {
            "dateadded": "2026-03-31 08:43:11 UTC",
            "url": "https://paui.paleontraglan.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808963/",
            "reporter": "anonymous"
        }
    ],
    "3808962": [
        {
            "dateadded": "2026-03-31 08:42:16 UTC",
            "url": "http://27.215.176.230:44425/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:30:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808962/",
            "reporter": "geenensp"
        }
    ],
    "3808961": [
        {
            "dateadded": "2026-03-31 08:35:14 UTC",
            "url": "https://mine-trace.metallurgiclink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808961/",
            "reporter": "anonymous"
        }
    ],
    "3808960": [
        {
            "dateadded": "2026-03-31 08:30:13 UTC",
            "url": "https://cast-iron.metallurgiclink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808960/",
            "reporter": "anonymous"
        }
    ],
    "3808959": [
        {
            "dateadded": "2026-03-31 08:24:13 UTC",
            "url": "https://blast-svc.metallurgiclink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808959/",
            "reporter": "anonymous"
        }
    ],
    "3808958": [
        {
            "dateadded": "2026-03-31 08:20:15 UTC",
            "url": "https://smelt-logic.metallurgiclink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808958/",
            "reporter": "anonymous"
        }
    ],
    "3808957": [
        {
            "dateadded": "2026-03-31 08:17:08 UTC",
            "url": "http://125.40.86.211:40376/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:28:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808957/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808956": [
        {
            "dateadded": "2026-03-31 08:15:22 UTC",
            "url": "http://27.215.176.230:44425/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:36:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808956/",
            "reporter": "geenensp"
        }
    ],
    "3808954": [
        {
            "dateadded": "2026-03-31 08:14:11 UTC",
            "url": "http://219.157.58.187:56676/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808954/",
            "reporter": "geenensp"
        }
    ],
    "3808955": [
        {
            "dateadded": "2026-03-31 08:14:11 UTC",
            "url": "https://steel-core.metallurgiclink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808955/",
            "reporter": "anonymous"
        }
    ],
    "3808953": [
        {
            "dateadded": "2026-03-31 08:12:19 UTC",
            "url": "http://115.57.254.103:44553/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:39:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808953/",
            "reporter": "geenensp"
        }
    ],
    "3808952": [
        {
            "dateadded": "2026-03-31 08:07:19 UTC",
            "url": "http://59.182.145.59:55856/i",
            "url_status": "offline",
            "last_online": "2026-03-31 08:07:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808952/",
            "reporter": "geenensp"
        }
    ],
    "3808951": [
        {
            "dateadded": "2026-03-31 08:07:11 UTC",
            "url": "https://alloy-forge.metallurgiclink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808951/",
            "reporter": "anonymous"
        }
    ],
    "3808950": [
        {
            "dateadded": "2026-03-31 08:05:20 UTC",
            "url": "http://60.22.176.44:39750/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:26:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808950/",
            "reporter": "geenensp"
        }
    ],
    "3808949": [
        {
            "dateadded": "2026-03-31 08:04:10 UTC",
            "url": "https://gas-storage.cryogenicbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808949/",
            "reporter": "anonymous"
        }
    ],
    "3808948": [
        {
            "dateadded": "2026-03-31 08:01:10 UTC",
            "url": "https://chilled-link.cryogenicbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 08:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808948/",
            "reporter": "anonymous"
        }
    ],
    "3808947": [
        {
            "dateadded": "2026-03-31 07:59:16 UTC",
            "url": "http://175.146.163.233:58676/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:30:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808947/",
            "reporter": "geenensp"
        }
    ],
    "3808946": [
        {
            "dateadded": "2026-03-31 07:52:07 UTC",
            "url": "http://110.37.53.236:60404/i",
            "url_status": "offline",
            "last_online": "2026-03-31 07:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808946/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808944": [
        {
            "dateadded": "2026-03-31 07:51:11 UTC",
            "url": "https://frost-node.cryogenicbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808944/",
            "reporter": "anonymous"
        }
    ],
    "3808945": [
        {
            "dateadded": "2026-03-31 07:51:11 UTC",
            "url": "http://59.182.145.59:55856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 07:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808945/",
            "reporter": "geenensp"
        }
    ],
    "3808943": [
        {
            "dateadded": "2026-03-31 07:46:09 UTC",
            "url": "https://zero-point.cryogenicbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808943/",
            "reporter": "anonymous"
        }
    ],
    "3808942": [
        {
            "dateadded": "2026-03-31 07:41:14 UTC",
            "url": "http://115.57.254.103:44553/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:36:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808942/",
            "reporter": "geenensp"
        }
    ],
    "3808941": [
        {
            "dateadded": "2026-03-31 07:40:15 UTC",
            "url": "http://60.22.176.44:39750/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:07:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808941/",
            "reporter": "geenensp"
        }
    ],
    "3808939": [
        {
            "dateadded": "2026-03-31 07:40:12 UTC",
            "url": "https://nitro-vault.cryogenicbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808939/",
            "reporter": "anonymous"
        }
    ],
    "3808940": [
        {
            "dateadded": "2026-03-31 07:40:12 UTC",
            "url": "http://110.37.39.88:51536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:58:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808940/",
            "reporter": "geenensp"
        }
    ],
    "3808938": [
        {
            "dateadded": "2026-03-31 07:35:17 UTC",
            "url": "http://123.12.238.198:39150/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808938/",
            "reporter": "geenensp"
        }
    ],
    "3808937": [
        {
            "dateadded": "2026-03-31 07:34:12 UTC",
            "url": "https://deep-freeze.cryogenicbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808937/",
            "reporter": "anonymous"
        }
    ],
    "3808936": [
        {
            "dateadded": "2026-03-31 07:30:18 UTC",
            "url": "http://175.146.163.233:58676/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:44:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808936/",
            "reporter": "geenensp"
        }
    ],
    "3808935": [
        {
            "dateadded": "2026-03-31 07:29:12 UTC",
            "url": "https://beam-portal.isotopecleaner.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808935/",
            "reporter": "anonymous"
        }
    ],
    "3808934": [
        {
            "dateadded": "2026-03-31 07:23:12 UTC",
            "url": "https://alpha-gate.isotopecleaner.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:23:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808934/",
            "reporter": "anonymous"
        }
    ],
    "3808933": [
        {
            "dateadded": "2026-03-31 07:17:10 UTC",
            "url": "https://radiant-log.isotopecleaner.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808933/",
            "reporter": "anonymous"
        }
    ],
    "3808932": [
        {
            "dateadded": "2026-03-31 07:17:05 UTC",
            "url": "http://110.37.53.236:60404/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 07:17:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808932/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808931": [
        {
            "dateadded": "2026-03-31 07:12:19 UTC",
            "url": "http://59.88.133.31:33008/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:15:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808931/",
            "reporter": "geenensp"
        }
    ],
    "3808930": [
        {
            "dateadded": "2026-03-31 07:12:10 UTC",
            "url": "https://decay-check.isotopecleaner.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808930/",
            "reporter": "anonymous"
        }
    ],
    "3808929": [
        {
            "dateadded": "2026-03-31 07:10:17 UTC",
            "url": "http://110.37.118.66:34574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:43:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808929/",
            "reporter": "geenensp"
        }
    ],
    "3808928": [
        {
            "dateadded": "2026-03-31 07:09:20 UTC",
            "url": "http://60.213.123.169:52883/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:22:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808928/",
            "reporter": "geenensp"
        }
    ],
    "3808927": [
        {
            "dateadded": "2026-03-31 07:08:24 UTC",
            "url": "http://123.12.238.198:39150/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:24:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808927/",
            "reporter": "geenensp"
        }
    ],
    "3808926": [
        {
            "dateadded": "2026-03-31 07:07:17 UTC",
            "url": "http://110.39.244.67:47809/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:56:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808926/",
            "reporter": "geenensp"
        }
    ],
    "3808925": [
        {
            "dateadded": "2026-03-31 07:07:07 UTC",
            "url": "http://179.43.186.246:14888/download/0e23d66b-d075-445a-bc56-e0d05a633724",
            "url_status": "offline",
            "last_online": "2026-04-04 10:15:54 UTC",
            "threat": "malware_download",
            "tags": [
                "clearwater",
                "Ransomware"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808925/",
            "reporter": "TheRavenFile"
        }
    ],
    "3808924": [
        {
            "dateadded": "2026-03-31 07:05:12 UTC",
            "url": "https://trace-element.isotopecleaner.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808924/",
            "reporter": "anonymous"
        }
    ],
    "3808923": [
        {
            "dateadded": "2026-03-31 07:04:19 UTC",
            "url": "http://27.37.60.190:52268/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:29:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808923/",
            "reporter": "geenensp"
        }
    ],
    "3808922": [
        {
            "dateadded": "2026-03-31 07:00:16 UTC",
            "url": "https://half-life.isotopecleaner.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 07:00:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808922/",
            "reporter": "anonymous"
        }
    ],
    "3808921": [
        {
            "dateadded": "2026-03-31 06:59:23 UTC",
            "url": "http://115.62.25.41:38187/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:18:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808921/",
            "reporter": "geenensp"
        }
    ],
    "3808920": [
        {
            "dateadded": "2026-03-31 06:59:19 UTC",
            "url": "http://124.234.174.62:36200/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 13:56:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808920/",
            "reporter": "geenensp"
        }
    ],
    "3808919": [
        {
            "dateadded": "2026-03-31 06:58:11 UTC",
            "url": "http://221.207.250.191:46536/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808919/",
            "reporter": "geenensp"
        }
    ],
    "3808918": [
        {
            "dateadded": "2026-03-31 06:57:19 UTC",
            "url": "http://222.134.173.170:43285/i",
            "url_status": "offline",
            "last_online": "2026-03-31 06:57:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808918/",
            "reporter": "geenensp"
        }
    ],
    "3808917": [
        {
            "dateadded": "2026-03-31 06:56:08 UTC",
            "url": "http://112.231.44.55:48069/i",
            "url_status": "offline",
            "last_online": "2026-04-14 10:11:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808917/",
            "reporter": "geenensp"
        }
    ],
    "3808916": [
        {
            "dateadded": "2026-03-31 06:54:19 UTC",
            "url": "http://110.37.97.32:42669/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:32:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808916/",
            "reporter": "geenensp"
        }
    ],
    "3808915": [
        {
            "dateadded": "2026-03-31 06:54:09 UTC",
            "url": "https://metal-trace.alkalineelement.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808915/",
            "reporter": "anonymous"
        }
    ],
    "3808914": [
        {
            "dateadded": "2026-03-31 06:49:13 UTC",
            "url": "https://reactive-hub.alkalineelement.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:49:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808914/",
            "reporter": "anonymous"
        }
    ],
    "3808913": [
        {
            "dateadded": "2026-03-31 06:47:17 UTC",
            "url": "http://59.88.133.31:33008/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:20:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808913/",
            "reporter": "geenensp"
        }
    ],
    "3808912": [
        {
            "dateadded": "2026-03-31 06:47:15 UTC",
            "url": "http://110.37.97.32:42669/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808912/",
            "reporter": "geenensp"
        }
    ],
    "3808911": [
        {
            "dateadded": "2026-03-31 06:44:11 UTC",
            "url": "http://60.213.123.169:52883/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:26:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808911/",
            "reporter": "geenensp"
        }
    ],
    "3808910": [
        {
            "dateadded": "2026-03-31 06:43:19 UTC",
            "url": "http://117.206.111.48:57377/i",
            "url_status": "offline",
            "last_online": "2026-03-31 06:43:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808910/",
            "reporter": "geenensp"
        }
    ],
    "3808909": [
        {
            "dateadded": "2026-03-31 06:43:13 UTC",
            "url": "https://caustic-api.alkalineelement.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808909/",
            "reporter": "anonymous"
        }
    ],
    "3808908": [
        {
            "dateadded": "2026-03-31 06:41:12 UTC",
            "url": "http://110.39.244.67:47809/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:26:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808908/",
            "reporter": "geenensp"
        }
    ],
    "3808907": [
        {
            "dateadded": "2026-03-31 06:40:15 UTC",
            "url": "https://salt-buffer.alkalineelement.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808907/",
            "reporter": "anonymous"
        }
    ],
    "3808906": [
        {
            "dateadded": "2026-03-31 06:37:10 UTC",
            "url": "https://ph-monitor.alkalineelement.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808906/",
            "reporter": "anonymous"
        }
    ],
    "3808905": [
        {
            "dateadded": "2026-03-31 06:34:28 UTC",
            "url": "http://112.231.44.55:48069/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 11:49:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808905/",
            "reporter": "geenensp"
        }
    ],
    "3808904": [
        {
            "dateadded": "2026-03-31 06:31:20 UTC",
            "url": "http://221.207.250.191:46536/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:48:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808904/",
            "reporter": "geenensp"
        }
    ],
    "3808903": [
        {
            "dateadded": "2026-03-31 06:27:19 UTC",
            "url": "http://117.209.9.210:42514/i",
            "url_status": "offline",
            "last_online": "2026-03-31 06:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808903/",
            "reporter": "geenensp"
        }
    ],
    "3808902": [
        {
            "dateadded": "2026-03-31 06:27:13 UTC",
            "url": "https://base-level.alkalineelement.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808902/",
            "reporter": "anonymous"
        }
    ],
    "3808901": [
        {
            "dateadded": "2026-03-31 06:21:14 UTC",
            "url": "https://fire-wall.refractorymatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:21:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808901/",
            "reporter": "anonymous"
        }
    ],
    "3808900": [
        {
            "dateadded": "2026-03-31 06:18:16 UTC",
            "url": "http://196.190.105.170:52231/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 06:18:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808900/",
            "reporter": "geenensp"
        }
    ],
    "3808899": [
        {
            "dateadded": "2026-03-31 06:17:22 UTC",
            "url": "http://117.206.111.48:57377/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 06:17:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808899/",
            "reporter": "geenensp"
        }
    ],
    "3808898": [
        {
            "dateadded": "2026-03-31 06:16:09 UTC",
            "url": "https://solid-state.refractorymatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808898/",
            "reporter": "anonymous"
        }
    ],
    "3808897": [
        {
            "dateadded": "2026-03-31 06:15:09 UTC",
            "url": "http://222.134.163.7:52361/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:37:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808897/",
            "reporter": "geenensp"
        }
    ],
    "3808896": [
        {
            "dateadded": "2026-03-31 06:13:18 UTC",
            "url": "http://180.245.47.80:41423/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808896/",
            "reporter": "geenensp"
        }
    ],
    "3808895": [
        {
            "dateadded": "2026-03-31 06:10:13 UTC",
            "url": "https://shield-base.refractorymatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808895/",
            "reporter": "anonymous"
        }
    ],
    "3808894": [
        {
            "dateadded": "2026-03-31 06:05:12 UTC",
            "url": "https://high-heat.refractorymatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 06:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808894/",
            "reporter": "anonymous"
        }
    ],
    "3808893": [
        {
            "dateadded": "2026-03-31 05:58:11 UTC",
            "url": "https://kiln-control.refractorymatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808893/",
            "reporter": "anonymous"
        }
    ],
    "3808892": [
        {
            "dateadded": "2026-03-31 05:53:10 UTC",
            "url": "https://brick-layer.refractorymatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808892/",
            "reporter": "anonymous"
        }
    ],
    "3808891": [
        {
            "dateadded": "2026-03-31 05:49:15 UTC",
            "url": "https://pump-gate.viscositycontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:49:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808891/",
            "reporter": "anonymous"
        }
    ],
    "3808890": [
        {
            "dateadded": "2026-03-31 05:47:10 UTC",
            "url": "http://117.211.149.180:56903/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 05:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808890/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808889": [
        {
            "dateadded": "2026-03-31 05:46:11 UTC",
            "url": "https://density-svc.viscositycontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:46:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808889/",
            "reporter": "anonymous"
        }
    ],
    "3808888": [
        {
            "dateadded": "2026-03-31 05:45:11 UTC",
            "url": "http://222.134.163.7:52361/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808888/",
            "reporter": "geenensp"
        }
    ],
    "3808887": [
        {
            "dateadded": "2026-03-31 05:44:19 UTC",
            "url": "http://103.164.128.50:33037/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-21 23:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808887/",
            "reporter": "geenensp"
        }
    ],
    "3808886": [
        {
            "dateadded": "2026-03-31 05:42:28 UTC",
            "url": "http://117.209.9.210:42514/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 05:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808886/",
            "reporter": "geenensp"
        }
    ],
    "3808885": [
        {
            "dateadded": "2026-03-31 05:42:18 UTC",
            "url": "http://120.28.199.24:55586/i",
            "url_status": "offline",
            "last_online": "2026-03-31 05:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808885/",
            "reporter": "geenensp"
        }
    ],
    "3808884": [
        {
            "dateadded": "2026-03-31 05:39:09 UTC",
            "url": "http://110.37.39.88:51536/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:51:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808884/",
            "reporter": "geenensp"
        }
    ],
    "3808883": [
        {
            "dateadded": "2026-03-31 05:37:14 UTC",
            "url": "https://friction-log.viscositycontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:37:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808883/",
            "reporter": "anonymous"
        }
    ],
    "3808882": [
        {
            "dateadded": "2026-03-31 05:31:09 UTC",
            "url": "https://flow-regulator.viscositycontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808882/",
            "reporter": "anonymous"
        }
    ],
    "3808881": [
        {
            "dateadded": "2026-03-31 05:30:19 UTC",
            "url": "http://196.190.69.149:56164/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:46:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808881/",
            "reporter": "geenensp"
        }
    ],
    "3808880": [
        {
            "dateadded": "2026-03-31 05:24:13 UTC",
            "url": "https://thick-layer.viscositycontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808880/",
            "reporter": "anonymous"
        }
    ],
    "3808879": [
        {
            "dateadded": "2026-03-31 05:19:11 UTC",
            "url": "https://fluid-path.viscositycontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:19:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808879/",
            "reporter": "anonymous"
        }
    ],
    "3808878": [
        {
            "dateadded": "2026-03-31 05:18:07 UTC",
            "url": "http://175.154.118.223:55245/i",
            "url_status": "offline",
            "last_online": "2026-04-03 17:23:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808878/",
            "reporter": "geenensp"
        }
    ],
    "3808867": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.powerpc-440fp",
            "url_status": "offline",
            "last_online": "2026-04-11 11:33:02 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808867/",
            "reporter": "adliwahid"
        }
    ],
    "3808868": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.sh4",
            "url_status": "offline",
            "last_online": "2026-04-11 10:41:16 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808868/",
            "reporter": "adliwahid"
        }
    ],
    "3808869": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-11 07:22:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808869/",
            "reporter": "adliwahid"
        }
    ],
    "3808870": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.i586",
            "url_status": "offline",
            "last_online": "2026-04-11 11:07:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808870/",
            "reporter": "adliwahid"
        }
    ],
    "3808871": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.armv6l",
            "url_status": "offline",
            "last_online": "2026-04-11 10:32:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808871/",
            "reporter": "adliwahid"
        }
    ],
    "3808872": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.armv4l",
            "url_status": "offline",
            "last_online": "2026-04-11 11:16:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808872/",
            "reporter": "adliwahid"
        }
    ],
    "3808873": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.powerpc",
            "url_status": "offline",
            "last_online": "2026-04-11 10:34:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808873/",
            "reporter": "adliwahid"
        }
    ],
    "3808874": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.i486",
            "url_status": "offline",
            "last_online": "2026-04-11 12:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808874/",
            "reporter": "adliwahid"
        }
    ],
    "3808875": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.mipsel",
            "url_status": "offline",
            "last_online": "2026-04-11 10:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808875/",
            "reporter": "adliwahid"
        }
    ],
    "3808876": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.m68k",
            "url_status": "offline",
            "last_online": "2026-04-11 11:06:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808876/",
            "reporter": "adliwahid"
        }
    ],
    "3808877": [
        {
            "dateadded": "2026-03-31 05:17:12 UTC",
            "url": "http://217.160.125.125:15527/bot.x86",
            "url_status": "offline",
            "last_online": "2026-04-11 06:36:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808877/",
            "reporter": "adliwahid"
        }
    ],
    "3808866": [
        {
            "dateadded": "2026-03-31 05:15:17 UTC",
            "url": "http://110.37.55.23:40200/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:28:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808866/",
            "reporter": "geenensp"
        }
    ],
    "3808865": [
        {
            "dateadded": "2026-03-31 05:15:12 UTC",
            "url": "https://blend-master.syntheticpolymer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808865/",
            "reporter": "anonymous"
        }
    ],
    "3808864": [
        {
            "dateadded": "2026-03-31 05:14:14 UTC",
            "url": "http://120.28.199.24:55586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 05:14:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808864/",
            "reporter": "geenensp"
        }
    ],
    "3808863": [
        {
            "dateadded": "2026-03-31 05:08:09 UTC",
            "url": "https://elastic-net.syntheticpolymer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808863/",
            "reporter": "anonymous"
        }
    ],
    "3808862": [
        {
            "dateadded": "2026-03-31 05:07:13 UTC",
            "url": "http://196.190.69.149:56164/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 14:14:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808862/",
            "reporter": "geenensp"
        }
    ],
    "3808861": [
        {
            "dateadded": "2026-03-31 05:04:15 UTC",
            "url": "http://115.52.112.174:35145/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:22:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808861/",
            "reporter": "geenensp"
        }
    ],
    "3808860": [
        {
            "dateadded": "2026-03-31 05:03:15 UTC",
            "url": "http://115.52.112.174:35145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:10:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808860/",
            "reporter": "geenensp"
        }
    ],
    "3808859": [
        {
            "dateadded": "2026-03-31 05:03:09 UTC",
            "url": "https://mold-engine.syntheticpolymer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 05:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808859/",
            "reporter": "anonymous"
        }
    ],
    "3808858": [
        {
            "dateadded": "2026-03-31 04:59:08 UTC",
            "url": "http://182.119.228.241:56948/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:35:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808858/",
            "reporter": "geenensp"
        }
    ],
    "3808857": [
        {
            "dateadded": "2026-03-31 04:57:09 UTC",
            "url": "https://plastic-dev.syntheticpolymer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808857/",
            "reporter": "anonymous"
        }
    ],
    "3808856": [
        {
            "dateadded": "2026-03-31 04:51:10 UTC",
            "url": "https://fiber-optic.syntheticpolymer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808856/",
            "reporter": "anonymous"
        }
    ],
    "3808855": [
        {
            "dateadded": "2026-03-31 04:45:12 UTC",
            "url": "https://resin-store.syntheticpolymer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808855/",
            "reporter": "anonymous"
        }
    ],
    "3808852": [
        {
            "dateadded": "2026-03-31 04:44:09 UTC",
            "url": "https://raw.githubusercontent.com/cradzz14/Gamification-In-Software-Project-Management/refs/heads/main/unmeltableness/Management_Project_Gamification_In_Software_2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:29:01 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808852/",
            "reporter": "tcains1"
        }
    ],
    "3808853": [
        {
            "dateadded": "2026-03-31 04:44:09 UTC",
            "url": "https://github.com/tribalwarsaaa/vfio-windows-aio/raw/refs/heads/main/assets/windows-vfio-aio-3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:20:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808853/",
            "reporter": "tcains1"
        }
    ],
    "3808854": [
        {
            "dateadded": "2026-03-31 04:44:09 UTC",
            "url": "https://raw.githubusercontent.com/tribalwarsaaa/vfio-windows-aio/refs/heads/main/assets/windows-vfio-aio-3.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:27:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808854/",
            "reporter": "tcains1"
        }
    ],
    "3808851": [
        {
            "dateadded": "2026-03-31 04:44:07 UTC",
            "url": "https://github.com/cradzz14/Gamification-In-Software-Project-Management/raw/refs/heads/main/unmeltableness/Management_Project_Gamification_In_Software_2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:01:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808851/",
            "reporter": "tcains1"
        }
    ],
    "3808849": [
        {
            "dateadded": "2026-03-31 04:44:06 UTC",
            "url": "https://raw.githubusercontent.com/cradzz14/Gamification-In-Software-Project-Management/refs/heads/main/unmeltableness/Software_Management_Project_In_Gamification_v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:41:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808849/",
            "reporter": "tcains1"
        }
    ],
    "3808850": [
        {
            "dateadded": "2026-03-31 04:44:06 UTC",
            "url": "https://github.com/cradzz14/Gamification-In-Software-Project-Management/raw/refs/heads/main/unmeltableness/Software_Management_Project_In_Gamification_v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808850/",
            "reporter": "tcains1"
        }
    ],
    "3808843": [
        {
            "dateadded": "2026-03-31 04:42:09 UTC",
            "url": "https://github.com/sethudevasenapathy92/GTAO_SoloSession/raw/refs/heads/main/GTAO_SoloSession/Solo-Session-GTA-v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808843/",
            "reporter": "tcains1"
        }
    ],
    "3808844": [
        {
            "dateadded": "2026-03-31 04:42:09 UTC",
            "url": "https://raw.githubusercontent.com/sethudevasenapathy92/GTAO_SoloSession/refs/heads/main/GTAO_SoloSession/Solo-Session-GTA-v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808844/",
            "reporter": "tcains1"
        }
    ],
    "3808845": [
        {
            "dateadded": "2026-03-31 04:42:09 UTC",
            "url": "https://github.com/sethudevasenapathy92/sethudevasenapathy92.github.io/raw/refs/heads/main/cultigen/sethudevasenapathy-io-github-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:09:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808845/",
            "reporter": "tcains1"
        }
    ],
    "3808846": [
        {
            "dateadded": "2026-03-31 04:42:09 UTC",
            "url": "https://raw.githubusercontent.com/sethudevasenapathy92/sethudevasenapathy92.github.io/refs/heads/main/cultigen/sethudevasenapathy-io-github-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:44:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808846/",
            "reporter": "tcains1"
        }
    ],
    "3808847": [
        {
            "dateadded": "2026-03-31 04:42:09 UTC",
            "url": "https://github.com/light-077/chatbot-gaming-assistant/raw/refs/heads/main/my_agent/chatbot_assistant_gaming_v1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:30:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808847/",
            "reporter": "tcains1"
        }
    ],
    "3808848": [
        {
            "dateadded": "2026-03-31 04:42:09 UTC",
            "url": "https://raw.githubusercontent.com/light-077/chatbot-gaming-assistant/refs/heads/main/my_agent/chatbot_assistant_gaming_v1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:29:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808848/",
            "reporter": "tcains1"
        }
    ],
    "3808841": [
        {
            "dateadded": "2026-03-31 04:42:08 UTC",
            "url": "https://github.com/sethudevasenapathy92/sethudevasenapathy92.github.io/raw/refs/heads/main/cultigen/sethudevasenapathy_github_io_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808841/",
            "reporter": "tcains1"
        }
    ],
    "3808842": [
        {
            "dateadded": "2026-03-31 04:42:08 UTC",
            "url": "https://raw.githubusercontent.com/sethudevasenapathy92/sethudevasenapathy92.github.io/refs/heads/main/cultigen/sethudevasenapathy_github_io_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:30:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808842/",
            "reporter": "tcains1"
        }
    ],
    "3808840": [
        {
            "dateadded": "2026-03-31 04:40:12 UTC",
            "url": "http://42.228.195.148:52121/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:46:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808840/",
            "reporter": "geenensp"
        }
    ],
    "3808839": [
        {
            "dateadded": "2026-03-31 04:39:16 UTC",
            "url": "http://182.119.228.241:56948/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808839/",
            "reporter": "geenensp"
        }
    ],
    "3808838": [
        {
            "dateadded": "2026-03-31 04:39:10 UTC",
            "url": "https://range-finder.isothermalmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808838/",
            "reporter": "anonymous"
        }
    ],
    "3808837": [
        {
            "dateadded": "2026-03-31 04:38:12 UTC",
            "url": "http://110.37.65.64:59911/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808837/",
            "reporter": "geenensp"
        }
    ],
    "3808836": [
        {
            "dateadded": "2026-03-31 04:36:14 UTC",
            "url": "http://110.38.218.176:47971/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:36:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808836/",
            "reporter": "geenensp"
        }
    ],
    "3808835": [
        {
            "dateadded": "2026-03-31 04:35:13 UTC",
            "url": "https://thermal-sync.isothermalmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808835/",
            "reporter": "anonymous"
        }
    ],
    "3808828": [
        {
            "dateadded": "2026-03-31 04:29:10 UTC",
            "url": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/Mode_Wars_ON_Developer_Resolution_P_Lego_Star_FI_v3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:58:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808828/",
            "reporter": "tcains1"
        }
    ],
    "3808829": [
        {
            "dateadded": "2026-03-31 04:29:10 UTC",
            "url": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/lib/x64/Developer-Wars-FI-Star-ON-Resolution-P-Mode-Lego-v1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:04:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808829/",
            "reporter": "tcains1"
        }
    ],
    "3808830": [
        {
            "dateadded": "2026-03-31 04:29:10 UTC",
            "url": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/lib/x86/ON-P-Mode-Developer-Lego-FI-Star-Resolution-Wars-1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808830/",
            "reporter": "tcains1"
        }
    ],
    "3808831": [
        {
            "dateadded": "2026-03-31 04:29:10 UTC",
            "url": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/lib/x86/ON-P-Mode-Developer-Lego-FI-Star-Resolution-Wars-1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:47:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808831/",
            "reporter": "tcains1"
        }
    ],
    "3808832": [
        {
            "dateadded": "2026-03-31 04:29:10 UTC",
            "url": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/lib/x64/Developer-Wars-FI-Star-ON-Resolution-P-Mode-Lego-v1.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:55:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808832/",
            "reporter": "tcains1"
        }
    ],
    "3808833": [
        {
            "dateadded": "2026-03-31 04:29:10 UTC",
            "url": "https://temp-archive.isothermalmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808833/",
            "reporter": "anonymous"
        }
    ],
    "3808827": [
        {
            "dateadded": "2026-03-31 04:29:09 UTC",
            "url": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/Mode_Wars_ON_Developer_Resolution_P_Lego_Star_FI_v3.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808827/",
            "reporter": "tcains1"
        }
    ],
    "3808826": [
        {
            "dateadded": "2026-03-31 04:23:13 UTC",
            "url": "https://cold-bridge.isothermalmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808826/",
            "reporter": "anonymous"
        }
    ],
    "3808823": [
        {
            "dateadded": "2026-03-31 04:23:08 UTC",
            "url": "https://github.com/talangojames51/io5/raw/refs/heads/main/5/83.txt",
            "url_status": "offline",
            "last_online": "2026-04-01 05:29:40 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808823/",
            "reporter": "tcains1"
        }
    ],
    "3808824": [
        {
            "dateadded": "2026-03-31 04:23:08 UTC",
            "url": "https://raw.githubusercontent.com/talangojames51/io5/refs/heads/main/5/86.txt",
            "url_status": "offline",
            "last_online": "2026-04-01 06:26:05 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808824/",
            "reporter": "tcains1"
        }
    ],
    "3808825": [
        {
            "dateadded": "2026-03-31 04:23:08 UTC",
            "url": "https://github.com/talangojames51/io5/raw/refs/heads/main/5/86.txt",
            "url_status": "offline",
            "last_online": "2026-04-01 05:18:49 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808825/",
            "reporter": "tcains1"
        }
    ],
    "3808822": [
        {
            "dateadded": "2026-03-31 04:23:07 UTC",
            "url": "https://raw.githubusercontent.com/talangojames51/io5/refs/heads/main/5/83.txt",
            "url_status": "offline",
            "last_online": "2026-04-01 06:33:38 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808822/",
            "reporter": "tcains1"
        }
    ],
    "3808820": [
        {
            "dateadded": "2026-03-31 04:22:09 UTC",
            "url": "https://raw.githubusercontent.com/skidgang/discord-lanyard-activity/refs/heads/main/demo/src/discord-activity-lanyard-tour.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808820/",
            "reporter": "tcains1"
        }
    ],
    "3808821": [
        {
            "dateadded": "2026-03-31 04:22:09 UTC",
            "url": "https://github.com/aslekarii/proxmox-nvidia-vfio-handoff/raw/refs/heads/main/autogeneal/vfio-proxmox-handoff-nvidia-v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:54:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808821/",
            "reporter": "tcains1"
        }
    ],
    "3808818": [
        {
            "dateadded": "2026-03-31 04:22:08 UTC",
            "url": "https://raw.githubusercontent.com/aslekarii/proxmox-nvidia-vfio-handoff/refs/heads/main/autogeneal/vfio-proxmox-handoff-nvidia-v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:23:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808818/",
            "reporter": "tcains1"
        }
    ],
    "3808819": [
        {
            "dateadded": "2026-03-31 04:22:08 UTC",
            "url": "https://github.com/skidgang/discord-lanyard-activity/raw/refs/heads/main/demo/src/discord-activity-lanyard-tour.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808819/",
            "reporter": "tcains1"
        }
    ],
    "3808816": [
        {
            "dateadded": "2026-03-31 04:21:07 UTC",
            "url": "https://raw.githubusercontent.com/HarryRyanBarr/yarpe/refs/heads/main/renpy/Software-3.5-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:42 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808816/",
            "reporter": "tcains1"
        }
    ],
    "3808817": [
        {
            "dateadded": "2026-03-31 04:21:07 UTC",
            "url": "https://github.com/HarryRyanBarr/yarpe/raw/refs/heads/main/renpy/Software-3.5-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:08:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808817/",
            "reporter": "tcains1"
        }
    ],
    "3808815": [
        {
            "dateadded": "2026-03-31 04:18:10 UTC",
            "url": "https://constant-io.isothermalmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808815/",
            "reporter": "anonymous"
        }
    ],
    "3808814": [
        {
            "dateadded": "2026-03-31 04:13:09 UTC",
            "url": "http://110.37.65.64:59911/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 07:24:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808814/",
            "reporter": "geenensp"
        }
    ],
    "3808813": [
        {
            "dateadded": "2026-03-31 04:12:10 UTC",
            "url": "https://heat-sensor.isothermalmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808813/",
            "reporter": "anonymous"
        }
    ],
    "3808812": [
        {
            "dateadded": "2026-03-31 04:12:08 UTC",
            "url": "http://42.228.195.148:52121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:02:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808812/",
            "reporter": "geenensp"
        }
    ],
    "3808811": [
        {
            "dateadded": "2026-03-31 04:09:15 UTC",
            "url": "http://110.38.218.176:47971/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:09:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808811/",
            "reporter": "geenensp"
        }
    ],
    "3808810": [
        {
            "dateadded": "2026-03-31 04:07:10 UTC",
            "url": "https://force-field.molecularbonding.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808810/",
            "reporter": "anonymous"
        }
    ],
    "3808809": [
        {
            "dateadded": "2026-03-31 04:02:16 UTC",
            "url": "http://119.187.55.28:39334/i",
            "url_status": "offline",
            "last_online": "2026-04-02 21:30:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808809/",
            "reporter": "geenensp"
        }
    ],
    "3808808": [
        {
            "dateadded": "2026-03-31 04:02:09 UTC",
            "url": "http://123.4.244.236:33143/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808808/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808807": [
        {
            "dateadded": "2026-03-31 04:00:15 UTC",
            "url": "https://stable-node.molecularbonding.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 04:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808807/",
            "reporter": "anonymous"
        }
    ],
    "3808806": [
        {
            "dateadded": "2026-03-31 03:57:07 UTC",
            "url": "http://58.255.46.51:34711/i",
            "url_status": "offline",
            "last_online": "2026-04-03 22:02:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808806/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808805": [
        {
            "dateadded": "2026-03-31 03:55:14 UTC",
            "url": "https://ion-channel.molecularbonding.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:55:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808805/",
            "reporter": "anonymous"
        }
    ],
    "3808804": [
        {
            "dateadded": "2026-03-31 03:54:05 UTC",
            "url": "http://110.37.107.41:51045/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808804/",
            "reporter": "adliwahid"
        }
    ],
    "3808803": [
        {
            "dateadded": "2026-03-31 03:53:16 UTC",
            "url": "http://175.154.118.223:55245/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:30:07 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808803/",
            "reporter": "adliwahid"
        }
    ],
    "3808800": [
        {
            "dateadded": "2026-03-31 03:53:15 UTC",
            "url": "http://42.57.180.81:48800/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 05:57:09 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808800/",
            "reporter": "adliwahid"
        }
    ],
    "3808801": [
        {
            "dateadded": "2026-03-31 03:53:15 UTC",
            "url": "http://42.235.77.150:58388/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:27:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808801/",
            "reporter": "adliwahid"
        }
    ],
    "3808802": [
        {
            "dateadded": "2026-03-31 03:53:15 UTC",
            "url": "http://110.37.88.34:53224/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808802/",
            "reporter": "adliwahid"
        }
    ],
    "3808799": [
        {
            "dateadded": "2026-03-31 03:53:09 UTC",
            "url": "http://110.37.107.41:51045/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:44:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808799/",
            "reporter": "adliwahid"
        }
    ],
    "3808798": [
        {
            "dateadded": "2026-03-31 03:52:21 UTC",
            "url": "http://59.89.72.198:55888/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808798/",
            "reporter": "adliwahid"
        }
    ],
    "3808794": [
        {
            "dateadded": "2026-03-31 03:52:09 UTC",
            "url": "http://45.237.130.120:49016/i",
            "url_status": "offline",
            "last_online": "2026-04-09 22:38:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808794/",
            "reporter": "adliwahid"
        }
    ],
    "3808795": [
        {
            "dateadded": "2026-03-31 03:52:09 UTC",
            "url": "http://182.116.78.224:35473/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808795/",
            "reporter": "adliwahid"
        }
    ],
    "3808796": [
        {
            "dateadded": "2026-03-31 03:52:09 UTC",
            "url": "http://42.238.68.233:44121/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808796/",
            "reporter": "adliwahid"
        }
    ],
    "3808797": [
        {
            "dateadded": "2026-03-31 03:52:09 UTC",
            "url": "http://27.156.176.206:50260/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:34:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808797/",
            "reporter": "adliwahid"
        }
    ],
    "3808792": [
        {
            "dateadded": "2026-03-31 03:52:08 UTC",
            "url": "http://42.53.166.90:55722/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:37:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808792/",
            "reporter": "adliwahid"
        }
    ],
    "3808793": [
        {
            "dateadded": "2026-03-31 03:52:08 UTC",
            "url": "http://182.116.78.224:35473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808793/",
            "reporter": "adliwahid"
        }
    ],
    "3808791": [
        {
            "dateadded": "2026-03-31 03:52:07 UTC",
            "url": "http://77.247.88.72:46880/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:39:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808791/",
            "reporter": "adliwahid"
        }
    ],
    "3808790": [
        {
            "dateadded": "2026-03-31 03:52:06 UTC",
            "url": "http://77.247.88.72:46880/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:28:48 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808790/",
            "reporter": "adliwahid"
        }
    ],
    "3808784": [
        {
            "dateadded": "2026-03-31 03:51:09 UTC",
            "url": "http://42.235.77.150:58388/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:56:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808784/",
            "reporter": "adliwahid"
        }
    ],
    "3808785": [
        {
            "dateadded": "2026-03-31 03:51:09 UTC",
            "url": "http://59.92.68.67:41361/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808785/",
            "reporter": "adliwahid"
        }
    ],
    "3808786": [
        {
            "dateadded": "2026-03-31 03:51:09 UTC",
            "url": "http://59.92.68.67:41361/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808786/",
            "reporter": "adliwahid"
        }
    ],
    "3808787": [
        {
            "dateadded": "2026-03-31 03:51:09 UTC",
            "url": "http://101.58.64.161:9454/.i",
            "url_status": "offline",
            "last_online": "2026-04-15 04:15:43 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808787/",
            "reporter": "adliwahid"
        }
    ],
    "3808788": [
        {
            "dateadded": "2026-03-31 03:51:09 UTC",
            "url": "http://120.28.193.113:47832/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 23:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808788/",
            "reporter": "adliwahid"
        }
    ],
    "3808789": [
        {
            "dateadded": "2026-03-31 03:51:09 UTC",
            "url": "http://114.228.132.87:39486/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:34:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808789/",
            "reporter": "adliwahid"
        }
    ],
    "3808778": [
        {
            "dateadded": "2026-03-31 03:51:08 UTC",
            "url": "http://42.236.223.242:48800/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808778/",
            "reporter": "adliwahid"
        }
    ],
    "3808779": [
        {
            "dateadded": "2026-03-31 03:51:08 UTC",
            "url": "http://114.227.63.144:51956/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 19:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808779/",
            "reporter": "adliwahid"
        }
    ],
    "3808780": [
        {
            "dateadded": "2026-03-31 03:51:08 UTC",
            "url": "http://42.57.180.81:48800/i",
            "url_status": "offline",
            "last_online": "2026-04-06 04:12:58 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808780/",
            "reporter": "adliwahid"
        }
    ],
    "3808781": [
        {
            "dateadded": "2026-03-31 03:51:08 UTC",
            "url": "http://182.127.128.106:51457/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808781/",
            "reporter": "adliwahid"
        }
    ],
    "3808782": [
        {
            "dateadded": "2026-03-31 03:51:08 UTC",
            "url": "http://123.179.235.229:59423/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:03:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808782/",
            "reporter": "adliwahid"
        }
    ],
    "3808783": [
        {
            "dateadded": "2026-03-31 03:51:08 UTC",
            "url": "http://182.127.128.106:51457/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808783/",
            "reporter": "adliwahid"
        }
    ],
    "3808777": [
        {
            "dateadded": "2026-03-31 03:50:13 UTC",
            "url": "https://covalent-hub.molecularbonding.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808777/",
            "reporter": "anonymous"
        }
    ],
    "3808776": [
        {
            "dateadded": "2026-03-31 03:50:11 UTC",
            "url": "http://115.55.195.59:35343/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:14:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808776/",
            "reporter": "geenensp"
        }
    ],
    "3808774": [
        {
            "dateadded": "2026-03-31 03:50:08 UTC",
            "url": "https://raw.githubusercontent.com/Avhasei07/DevilConnection-Russian-Localization/refs/heads/main/heriot/Russian_Devil_Connection_Localization_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808774/",
            "reporter": "tcains1"
        }
    ],
    "3808775": [
        {
            "dateadded": "2026-03-31 03:50:08 UTC",
            "url": "https://github.com/Avhasei07/DevilConnection-Russian-Localization/raw/refs/heads/main/heriot/Russian_Devil_Connection_Localization_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:53:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808775/",
            "reporter": "tcains1"
        }
    ],
    "3808773": [
        {
            "dateadded": "2026-03-31 03:44:10 UTC",
            "url": "https://chain-logic.molecularbonding.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808773/",
            "reporter": "anonymous"
        }
    ],
    "3808772": [
        {
            "dateadded": "2026-03-31 03:40:15 UTC",
            "url": "http://117.217.196.124:44815/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:40:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808772/",
            "reporter": "geenensp"
        }
    ],
    "3808771": [
        {
            "dateadded": "2026-03-31 03:38:09 UTC",
            "url": "https://atom-lattice.molecularbonding.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808771/",
            "reporter": "anonymous"
        }
    ],
    "3808770": [
        {
            "dateadded": "2026-03-31 03:32:12 UTC",
            "url": "https://agent-proxy.catalyticprocess.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808770/",
            "reporter": "anonymous"
        }
    ],
    "3808769": [
        {
            "dateadded": "2026-03-31 03:32:09 UTC",
            "url": "http://58.255.46.51:34711/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 22:01:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808769/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808768": [
        {
            "dateadded": "2026-03-31 03:30:17 UTC",
            "url": "http://36.88.136.194:59043/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:15:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808768/",
            "reporter": "geenensp"
        }
    ],
    "3808767": [
        {
            "dateadded": "2026-03-31 03:27:09 UTC",
            "url": "https://batch-report.catalyticprocess.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808767/",
            "reporter": "anonymous"
        }
    ],
    "3808766": [
        {
            "dateadded": "2026-03-31 03:22:17 UTC",
            "url": "http://110.37.61.110:54582/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:22:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808766/",
            "reporter": "geenensp"
        }
    ],
    "3808765": [
        {
            "dateadded": "2026-03-31 03:22:10 UTC",
            "url": "https://filter-press.catalyticprocess.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808765/",
            "reporter": "anonymous"
        }
    ],
    "3808764": [
        {
            "dateadded": "2026-03-31 03:16:10 UTC",
            "url": "https://solvent-vault.catalyticprocess.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808764/",
            "reporter": "anonymous"
        }
    ],
    "3808763": [
        {
            "dateadded": "2026-03-31 03:11:10 UTC",
            "url": "https://yield-monitor.catalyticprocess.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808763/",
            "reporter": "anonymous"
        }
    ],
    "3808762": [
        {
            "dateadded": "2026-03-31 03:06:17 UTC",
            "url": "https://reaction-api.catalyticprocess.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 03:06:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808762/",
            "reporter": "anonymous"
        }
    ],
    "3808761": [
        {
            "dateadded": "2026-03-31 03:05:07 UTC",
            "url": "http://119.187.55.28:39334/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 21:50:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808761/",
            "reporter": "geenensp"
        }
    ],
    "3808760": [
        {
            "dateadded": "2026-03-31 03:03:08 UTC",
            "url": "http://36.88.136.194:59043/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:52:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808760/",
            "reporter": "geenensp"
        }
    ],
    "3808759": [
        {
            "dateadded": "2026-03-31 03:03:07 UTC",
            "url": "http://110.37.61.110:54582/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808759/",
            "reporter": "geenensp"
        }
    ],
    "3808758": [
        {
            "dateadded": "2026-03-31 02:59:11 UTC",
            "url": "https://orbit-path.cosmoforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808758/",
            "reporter": "anonymous"
        }
    ],
    "3808756": [
        {
            "dateadded": "2026-03-31 02:54:09 UTC",
            "url": "https://github.com/Valentindelahaye8/LeviLauncher-MaterialBinLoader/raw/refs/heads/master/Mediaqueries/LeviLauncher-MaterialBinLoader_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:27:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808756/",
            "reporter": "tcains1"
        }
    ],
    "3808757": [
        {
            "dateadded": "2026-03-31 02:54:09 UTC",
            "url": "https://raw.githubusercontent.com/Valentindelahaye8/LeviLauncher-MaterialBinLoader/refs/heads/master/Mediaqueries/LeviLauncher-MaterialBinLoader_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:47:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808757/",
            "reporter": "tcains1"
        }
    ],
    "3808750": [
        {
            "dateadded": "2026-03-31 02:54:08 UTC",
            "url": "https://github.com/Flipflip563/YICB/raw/refs/heads/main/airless/Software-2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:48:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808750/",
            "reporter": "tcains1"
        }
    ],
    "3808751": [
        {
            "dateadded": "2026-03-31 02:54:08 UTC",
            "url": "https://raw.githubusercontent.com/jasminahyperthermal488/utility-for-fortnite-noclip/refs/heads/main/Cheka/noclip-fortnite-utility-for-1.6-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:18:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808751/",
            "reporter": "tcains1"
        }
    ],
    "3808752": [
        {
            "dateadded": "2026-03-31 02:54:08 UTC",
            "url": "https://raw.githubusercontent.com/Flipflip563/YICB/refs/heads/main/airless/Software-2.8.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:12:33 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808752/",
            "reporter": "tcains1"
        }
    ],
    "3808753": [
        {
            "dateadded": "2026-03-31 02:54:08 UTC",
            "url": "https://github.com/eastgerman-internist198/raylib-template/raw/refs/heads/main/raylib-5.5_linux_amd64/lib/template_raylib_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:15:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808753/",
            "reporter": "tcains1"
        }
    ],
    "3808754": [
        {
            "dateadded": "2026-03-31 02:54:08 UTC",
            "url": "https://github.com/jasminahyperthermal488/utility-for-fortnite-noclip/raw/refs/heads/main/Cheka/noclip-fortnite-utility-for-1.6-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:07:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808754/",
            "reporter": "tcains1"
        }
    ],
    "3808755": [
        {
            "dateadded": "2026-03-31 02:54:08 UTC",
            "url": "https://raw.githubusercontent.com/eastgerman-internist198/raylib-template/refs/heads/main/raylib-5.5_linux_amd64/lib/template_raylib_3.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808755/",
            "reporter": "tcains1"
        }
    ],
    "3808749": [
        {
            "dateadded": "2026-03-31 02:53:12 UTC",
            "url": "https://dark-matter.cosmoforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:53:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808749/",
            "reporter": "anonymous"
        }
    ],
    "3808748": [
        {
            "dateadded": "2026-03-31 02:48:09 UTC",
            "url": "https://nova-core.cosmoforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808748/",
            "reporter": "anonymous"
        }
    ],
    "3808747": [
        {
            "dateadded": "2026-03-31 02:45:19 UTC",
            "url": "http://42.230.40.84:32883/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:31:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808747/",
            "reporter": "geenensp"
        }
    ],
    "3808746": [
        {
            "dateadded": "2026-03-31 02:43:09 UTC",
            "url": "https://void-gate.cosmoforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808746/",
            "reporter": "anonymous"
        }
    ],
    "3808745": [
        {
            "dateadded": "2026-03-31 02:37:12 UTC",
            "url": "https://star-field.cosmoforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808745/",
            "reporter": "anonymous"
        }
    ],
    "3808744": [
        {
            "dateadded": "2026-03-31 02:34:07 UTC",
            "url": "http://222.141.46.48:51990/i",
            "url_status": "offline",
            "last_online": "2026-03-31 17:06:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808744/",
            "reporter": "geenensp"
        }
    ],
    "3808742": [
        {
            "dateadded": "2026-03-31 02:33:07 UTC",
            "url": "https://github.com/Yns70/textgame/raw/refs/heads/main/brachiorrhachidian/Software-1.0-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 14:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808742/",
            "reporter": "tcains1"
        }
    ],
    "3808743": [
        {
            "dateadded": "2026-03-31 02:33:07 UTC",
            "url": "https://raw.githubusercontent.com/Yns70/textgame/refs/heads/main/brachiorrhachidian/Software-1.0-beta.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:22:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808743/",
            "reporter": "tcains1"
        }
    ],
    "3808741": [
        {
            "dateadded": "2026-03-31 02:32:15 UTC",
            "url": "http://110.37.52.81:59981/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:13:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808741/",
            "reporter": "geenensp"
        }
    ],
    "3808740": [
        {
            "dateadded": "2026-03-31 02:32:11 UTC",
            "url": "https://github.com/lovlovlo15/chronicles-of-aethergate/raw/refs/heads/main/saves/of-aethergate-chronicles-v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808740/",
            "reporter": "tcains1"
        }
    ],
    "3808739": [
        {
            "dateadded": "2026-03-31 02:32:09 UTC",
            "url": "https://github.com/MomenMatouk/ruby-vgr/raw/refs/heads/main/mnemotechnic/ruby_vgr_2.0.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:49:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808739/",
            "reporter": "tcains1"
        }
    ],
    "3808734": [
        {
            "dateadded": "2026-03-31 02:32:08 UTC",
            "url": "https://github.com/jayasuryapalagiri/Midterm-Website-Development-Jayasurya/raw/refs/heads/main/pedological/Development_Jayasurya_Midterm_Website_v1.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 14:43:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808734/",
            "reporter": "tcains1"
        }
    ],
    "3808735": [
        {
            "dateadded": "2026-03-31 02:32:08 UTC",
            "url": "https://raw.githubusercontent.com/jayasuryapalagiri/Midterm-Website-Development-Jayasurya/refs/heads/main/pedological/Development_Jayasurya_Midterm_Website_v1.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 14:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808735/",
            "reporter": "tcains1"
        }
    ],
    "3808736": [
        {
            "dateadded": "2026-03-31 02:32:08 UTC",
            "url": "https://github.com/Eman420-art/saywhat_menu/raw/refs/heads/main/pyracene/saywhat-menu-v3.0-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 14:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808736/",
            "reporter": "tcains1"
        }
    ],
    "3808737": [
        {
            "dateadded": "2026-03-31 02:32:08 UTC",
            "url": "https://github.com/jayasuryapalagiri/Alien-Nostromo-archives/raw/refs/heads/main/cradge/Nostromo-Alien-archives-3.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 14:29:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808737/",
            "reporter": "tcains1"
        }
    ],
    "3808738": [
        {
            "dateadded": "2026-03-31 02:32:08 UTC",
            "url": "https://raw.githubusercontent.com/jayasuryapalagiri/Alien-Nostromo-archives/refs/heads/main/cradge/Nostromo-Alien-archives-3.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808738/",
            "reporter": "tcains1"
        }
    ],
    "3808730": [
        {
            "dateadded": "2026-03-31 02:32:07 UTC",
            "url": "https://raw.githubusercontent.com/lovlovlo15/chronicles-of-aethergate/refs/heads/main/saves/of-aethergate-chronicles-v2.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 14:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808730/",
            "reporter": "tcains1"
        }
    ],
    "3808731": [
        {
            "dateadded": "2026-03-31 02:32:07 UTC",
            "url": "https://raw.githubusercontent.com/xplam-den/Snake-Game-with-RL/refs/heads/master/algophilist/RL_with_Game_Snake_v2.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:18:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808731/",
            "reporter": "tcains1"
        }
    ],
    "3808732": [
        {
            "dateadded": "2026-03-31 02:32:07 UTC",
            "url": "https://github.com/xplam-den/Snake-Game-with-RL/raw/refs/heads/master/algophilist/RL_with_Game_Snake_v2.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:24:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808732/",
            "reporter": "tcains1"
        }
    ],
    "3808733": [
        {
            "dateadded": "2026-03-31 02:32:07 UTC",
            "url": "https://raw.githubusercontent.com/Eman420-art/saywhat_menu/refs/heads/main/pyracene/saywhat-menu-v3.0-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808733/",
            "reporter": "tcains1"
        }
    ],
    "3808729": [
        {
            "dateadded": "2026-03-31 02:31:09 UTC",
            "url": "https://deep-space.cosmoforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808729/",
            "reporter": "anonymous"
        }
    ],
    "3808728": [
        {
            "dateadded": "2026-03-31 02:30:17 UTC",
            "url": "http://113.228.152.60:50583/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808728/",
            "reporter": "geenensp"
        }
    ],
    "3808726": [
        {
            "dateadded": "2026-03-31 02:28:15 UTC",
            "url": "http://61.52.44.86:58703/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808726/",
            "reporter": "geenensp"
        }
    ],
    "3808727": [
        {
            "dateadded": "2026-03-31 02:28:15 UTC",
            "url": "http://61.52.44.86:58703/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808727/",
            "reporter": "geenensp"
        }
    ],
    "3808725": [
        {
            "dateadded": "2026-03-31 02:26:10 UTC",
            "url": "https://fast-trace.dynaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808725/",
            "reporter": "anonymous"
        }
    ],
    "3808724": [
        {
            "dateadded": "2026-03-31 02:20:12 UTC",
            "url": "https://spin-relay.dynaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808724/",
            "reporter": "anonymous"
        }
    ],
    "3808723": [
        {
            "dateadded": "2026-03-31 02:14:11 UTC",
            "url": "https://motor-unit.dynaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808723/",
            "reporter": "anonymous"
        }
    ],
    "3808722": [
        {
            "dateadded": "2026-03-31 02:08:16 UTC",
            "url": "http://125.42.33.176:33525/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808722/",
            "reporter": "geenensp"
        }
    ],
    "3808721": [
        {
            "dateadded": "2026-03-31 02:08:09 UTC",
            "url": "https://torque-svc.dynaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:08:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808721/",
            "reporter": "anonymous"
        }
    ],
    "3808720": [
        {
            "dateadded": "2026-03-31 02:03:12 UTC",
            "url": "https://kinetic-io.dynaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 02:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808720/",
            "reporter": "anonymous"
        }
    ],
    "3808719": [
        {
            "dateadded": "2026-03-31 02:00:17 UTC",
            "url": "http://222.141.46.48:51990/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 17:59:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808719/",
            "reporter": "geenensp"
        }
    ],
    "3808718": [
        {
            "dateadded": "2026-03-31 01:58:11 UTC",
            "url": "https://power-drive.dynaflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808718/",
            "reporter": "anonymous"
        }
    ],
    "3808717": [
        {
            "dateadded": "2026-03-31 01:52:11 UTC",
            "url": "https://warm-cache.helioshaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:52:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808717/",
            "reporter": "anonymous"
        }
    ],
    "3808716": [
        {
            "dateadded": "2026-03-31 01:47:07 UTC",
            "url": "http://110.39.229.188:40952/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:33:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808716/",
            "reporter": "geenensp"
        }
    ],
    "3808715": [
        {
            "dateadded": "2026-03-31 01:46:14 UTC",
            "url": "https://bright-edge.helioshaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808715/",
            "reporter": "anonymous"
        }
    ],
    "3808714": [
        {
            "dateadded": "2026-03-31 01:44:13 UTC",
            "url": "http://125.42.33.176:33525/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:01:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808714/",
            "reporter": "geenensp"
        }
    ],
    "3808712": [
        {
            "dateadded": "2026-03-31 01:42:14 UTC",
            "url": "https://day-light.helioshaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:42:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808712/",
            "reporter": "anonymous"
        }
    ],
    "3808713": [
        {
            "dateadded": "2026-03-31 01:42:14 UTC",
            "url": "http://110.38.206.86:59947/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808713/",
            "reporter": "geenensp"
        }
    ],
    "3808711": [
        {
            "dateadded": "2026-03-31 01:38:11 UTC",
            "url": "https://solar-api.helioshaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808711/",
            "reporter": "anonymous"
        }
    ],
    "3808710": [
        {
            "dateadded": "2026-03-31 01:33:20 UTC",
            "url": "http://117.209.18.160:39927/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:31:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808710/",
            "reporter": "geenensp"
        }
    ],
    "3808709": [
        {
            "dateadded": "2026-03-31 01:30:15 UTC",
            "url": "https://heat-shield.helioshaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808709/",
            "reporter": "anonymous"
        }
    ],
    "3808708": [
        {
            "dateadded": "2026-03-31 01:24:10 UTC",
            "url": "https://sun-flare.helioshaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808708/",
            "reporter": "anonymous"
        }
    ],
    "3808707": [
        {
            "dateadded": "2026-03-31 01:20:14 UTC",
            "url": "https://ice-vault.polarisbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808707/",
            "reporter": "anonymous"
        }
    ],
    "3808706": [
        {
            "dateadded": "2026-03-31 01:14:10 UTC",
            "url": "https://cold-store.polarisbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808706/",
            "reporter": "anonymous"
        }
    ],
    "3808705": [
        {
            "dateadded": "2026-03-31 01:09:09 UTC",
            "url": "https://peak-access.polarisbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808705/",
            "reporter": "anonymous"
        }
    ],
    "3808704": [
        {
            "dateadded": "2026-03-31 01:06:14 UTC",
            "url": "https://top-render.polarisbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:06:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808704/",
            "reporter": "anonymous"
        }
    ],
    "3808703": [
        {
            "dateadded": "2026-03-31 01:02:06 UTC",
            "url": "http://81.230.148.181:55083/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808703/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808702": [
        {
            "dateadded": "2026-03-31 01:00:14 UTC",
            "url": "http://110.38.206.86:59947/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808702/",
            "reporter": "geenensp"
        }
    ],
    "3808701": [
        {
            "dateadded": "2026-03-31 00:57:13 UTC",
            "url": "https://guide-path.polarisbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 01:02:41 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808701/",
            "reporter": "anonymous"
        }
    ],
    "3808700": [
        {
            "dateadded": "2026-03-31 00:53:06 UTC",
            "url": "http://196.189.197.131:39690/i",
            "url_status": "offline",
            "last_online": "2026-03-31 10:36:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808700/",
            "reporter": "geenensp"
        }
    ],
    "3808698": [
        {
            "dateadded": "2026-03-31 00:52:06 UTC",
            "url": "http://110.37.37.129:51161/i",
            "url_status": "offline",
            "last_online": "2026-03-31 10:35:51 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808698/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808699": [
        {
            "dateadded": "2026-03-31 00:52:06 UTC",
            "url": "http://222.142.242.236:44360/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:44:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808699/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808697": [
        {
            "dateadded": "2026-03-31 00:51:14 UTC",
            "url": "https://north-star.polarisbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:51:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808697/",
            "reporter": "anonymous"
        }
    ],
    "3808696": [
        {
            "dateadded": "2026-03-31 00:46:13 UTC",
            "url": "http://113.237.101.50:33151/i",
            "url_status": "offline",
            "last_online": "2026-04-12 22:26:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808696/",
            "reporter": "geenensp"
        }
    ],
    "3808695": [
        {
            "dateadded": "2026-03-31 00:45:11 UTC",
            "url": "https://bus-bridge.circuitflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808695/",
            "reporter": "anonymous"
        }
    ],
    "3808694": [
        {
            "dateadded": "2026-03-31 00:40:26 UTC",
            "url": "http://27.37.63.74:49907/i",
            "url_status": "offline",
            "last_online": "2026-04-05 07:06:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808694/",
            "reporter": "geenensp"
        }
    ],
    "3808693": [
        {
            "dateadded": "2026-03-31 00:39:09 UTC",
            "url": "https://amp-control.circuitflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808693/",
            "reporter": "anonymous"
        }
    ],
    "3808692": [
        {
            "dateadded": "2026-03-31 00:37:07 UTC",
            "url": "http://182.126.117.162:54988/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:24:18 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808692/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808691": [
        {
            "dateadded": "2026-03-31 00:37:06 UTC",
            "url": "http://81.230.148.181:55083/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:19:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808691/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808690": [
        {
            "dateadded": "2026-03-31 00:34:13 UTC",
            "url": "https://wire-sync.circuitflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:34:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808690/",
            "reporter": "anonymous"
        }
    ],
    "3808689": [
        {
            "dateadded": "2026-03-31 00:27:10 UTC",
            "url": "https://signal-box.circuitflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808689/",
            "reporter": "anonymous"
        }
    ],
    "3808688": [
        {
            "dateadded": "2026-03-31 00:22:12 UTC",
            "url": "https://volt-power.circuitflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808688/",
            "reporter": "anonymous"
        }
    ],
    "3808687": [
        {
            "dateadded": "2026-03-31 00:20:14 UTC",
            "url": "http://110.37.38.176:45853/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808687/",
            "reporter": "geenensp"
        }
    ],
    "3808686": [
        {
            "dateadded": "2026-03-31 00:17:14 UTC",
            "url": "https://micro-chip.circuitflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808686/",
            "reporter": "anonymous"
        }
    ],
    "3808685": [
        {
            "dateadded": "2026-03-31 00:13:21 UTC",
            "url": "http://27.37.63.74:49907/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 04:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808685/",
            "reporter": "geenensp"
        }
    ],
    "3808684": [
        {
            "dateadded": "2026-03-31 00:11:15 UTC",
            "url": "https://stat-portal.axiomforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808684/",
            "reporter": "anonymous"
        }
    ],
    "3808683": [
        {
            "dateadded": "2026-03-31 00:09:06 UTC",
            "url": "http://113.237.101.50:33151/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 22:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808683/",
            "reporter": "geenensp"
        }
    ],
    "3808682": [
        {
            "dateadded": "2026-03-31 00:06:11 UTC",
            "url": "https://math-proc.axiomforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-31 00:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808682/",
            "reporter": "anonymous"
        }
    ],
    "3808681": [
        {
            "dateadded": "2026-03-30 23:59:08 UTC",
            "url": "https://main-frame.axiomforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808681/",
            "reporter": "anonymous"
        }
    ],
    "3808680": [
        {
            "dateadded": "2026-03-30 23:55:11 UTC",
            "url": "https://base-theory.axiomforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:55:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808680/",
            "reporter": "anonymous"
        }
    ],
    "3808679": [
        {
            "dateadded": "2026-03-30 23:50:14 UTC",
            "url": "https://proof-check.axiomforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808679/",
            "reporter": "anonymous"
        }
    ],
    "3808678": [
        {
            "dateadded": "2026-03-30 23:45:18 UTC",
            "url": "http://110.24.36.6:57191/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:11:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808678/",
            "reporter": "geenensp"
        }
    ],
    "3808677": [
        {
            "dateadded": "2026-03-30 23:43:09 UTC",
            "url": "https://logic-rule.axiomforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808677/",
            "reporter": "anonymous"
        }
    ],
    "3808676": [
        {
            "dateadded": "2026-03-30 23:42:07 UTC",
            "url": "http://123.9.244.178:33070/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:55:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808676/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808675": [
        {
            "dateadded": "2026-03-30 23:41:14 UTC",
            "url": "http://110.39.239.111:35582/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:01:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808675/",
            "reporter": "geenensp"
        }
    ],
    "3808674": [
        {
            "dateadded": "2026-03-30 23:40:05 UTC",
            "url": "http://85.239.147.6/files/638251020/aMe4P4o.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808674/",
            "reporter": "Bitsight"
        }
    ],
    "3808673": [
        {
            "dateadded": "2026-03-30 23:38:15 UTC",
            "url": "http://85.12.204.206:58288/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 07:23:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808673/",
            "reporter": "geenensp"
        }
    ],
    "3808672": [
        {
            "dateadded": "2026-03-30 23:38:11 UTC",
            "url": "https://leaf-proxy.orbitbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808672/",
            "reporter": "anonymous"
        }
    ],
    "3808671": [
        {
            "dateadded": "2026-03-30 23:32:12 UTC",
            "url": "https://root-cluster.orbitbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808671/",
            "reporter": "anonymous"
        }
    ],
    "3808670": [
        {
            "dateadded": "2026-03-30 23:26:11 UTC",
            "url": "https://plant-logic.orbitbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:26:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808670/",
            "reporter": "anonymous"
        }
    ],
    "3808669": [
        {
            "dateadded": "2026-03-30 23:21:10 UTC",
            "url": "https://green-node.orbitbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808669/",
            "reporter": "anonymous"
        }
    ],
    "3808668": [
        {
            "dateadded": "2026-03-30 23:15:13 UTC",
            "url": "https://eco-system.orbitbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808668/",
            "reporter": "anonymous"
        }
    ],
    "3808660": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://27.215.4.198:41494/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:31:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808660/",
            "reporter": "geenensp"
        }
    ],
    "3808661": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//arm5",
            "url_status": "offline",
            "last_online": "2026-04-14 22:17:56 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808661/",
            "reporter": "botnetkiller"
        }
    ],
    "3808662": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//arm7",
            "url_status": "offline",
            "last_online": "2026-04-14 23:14:30 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808662/",
            "reporter": "botnetkiller"
        }
    ],
    "3808663": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//sh4",
            "url_status": "offline",
            "last_online": "2026-04-14 22:26:50 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808663/",
            "reporter": "botnetkiller"
        }
    ],
    "3808664": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//x86",
            "url_status": "offline",
            "last_online": "2026-04-14 23:44:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808664/",
            "reporter": "botnetkiller"
        }
    ],
    "3808665": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//arc",
            "url_status": "offline",
            "last_online": "2026-04-14 22:14:01 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808665/",
            "reporter": "botnetkiller"
        }
    ],
    "3808666": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//mips",
            "url_status": "offline",
            "last_online": "2026-04-14 22:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808666/",
            "reporter": "botnetkiller"
        }
    ],
    "3808667": [
        {
            "dateadded": "2026-03-30 23:12:17 UTC",
            "url": "http://176.65.139.64//i686",
            "url_status": "offline",
            "last_online": "2026-04-14 22:42:36 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808667/",
            "reporter": "botnetkiller"
        }
    ],
    "3808654": [
        {
            "dateadded": "2026-03-30 23:11:14 UTC",
            "url": "http://110.37.3.239:35449/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:09:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808654/",
            "reporter": "geenensp"
        }
    ],
    "3808655": [
        {
            "dateadded": "2026-03-30 23:11:14 UTC",
            "url": "http://176.65.139.64//ppc",
            "url_status": "offline",
            "last_online": "2026-04-15 01:55:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808655/",
            "reporter": "botnetkiller"
        }
    ],
    "3808656": [
        {
            "dateadded": "2026-03-30 23:11:14 UTC",
            "url": "http://176.65.139.64//x86_64",
            "url_status": "offline",
            "last_online": "2026-04-14 22:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808656/",
            "reporter": "botnetkiller"
        }
    ],
    "3808657": [
        {
            "dateadded": "2026-03-30 23:11:14 UTC",
            "url": "http://176.65.139.64//m68k",
            "url_status": "offline",
            "last_online": "2026-04-14 23:44:55 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808657/",
            "reporter": "botnetkiller"
        }
    ],
    "3808658": [
        {
            "dateadded": "2026-03-30 23:11:14 UTC",
            "url": "http://176.65.139.64//arm6",
            "url_status": "offline",
            "last_online": "2026-04-15 01:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808658/",
            "reporter": "botnetkiller"
        }
    ],
    "3808659": [
        {
            "dateadded": "2026-03-30 23:11:14 UTC",
            "url": "http://176.65.139.64//mpsl",
            "url_status": "offline",
            "last_online": "2026-04-14 23:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808659/",
            "reporter": "botnetkiller"
        }
    ],
    "3808653": [
        {
            "dateadded": "2026-03-30 23:10:14 UTC",
            "url": "https://bio-growth.orbitbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808653/",
            "reporter": "anonymous"
        }
    ],
    "3808652": [
        {
            "dateadded": "2026-03-30 23:06:13 UTC",
            "url": "http://115.55.55.183:38418/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:38:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808652/",
            "reporter": "geenensp"
        }
    ],
    "3808651": [
        {
            "dateadded": "2026-03-30 23:05:31 UTC",
            "url": "http://39.74.81.110:40922/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808651/",
            "reporter": "geenensp"
        }
    ],
    "3808650": [
        {
            "dateadded": "2026-03-30 23:04:09 UTC",
            "url": "https://ion-stream.stellarflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 23:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808650/",
            "reporter": "anonymous"
        }
    ],
    "3808649": [
        {
            "dateadded": "2026-03-30 22:59:12 UTC",
            "url": "https://drift-sensor.stellarflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:59:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808649/",
            "reporter": "anonymous"
        }
    ],
    "3808648": [
        {
            "dateadded": "2026-03-30 22:52:09 UTC",
            "url": "https://pulse-gate.stellarflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808648/",
            "reporter": "anonymous"
        }
    ],
    "3808647": [
        {
            "dateadded": "2026-03-30 22:48:10 UTC",
            "url": "https://beam-target.stellarflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808647/",
            "reporter": "anonymous"
        }
    ],
    "3808646": [
        {
            "dateadded": "2026-03-30 22:45:19 UTC",
            "url": "http://110.37.3.239:35449/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808646/",
            "reporter": "geenensp"
        }
    ],
    "3808645": [
        {
            "dateadded": "2026-03-30 22:42:09 UTC",
            "url": "https://wave-monitor.stellarflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808645/",
            "reporter": "anonymous"
        }
    ],
    "3808644": [
        {
            "dateadded": "2026-03-30 22:35:11 UTC",
            "url": "https://light-speed.stellarflux.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808644/",
            "reporter": "anonymous"
        }
    ],
    "3808643": [
        {
            "dateadded": "2026-03-30 22:35:09 UTC",
            "url": "http://125.43.106.252:56161/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:12:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808643/",
            "reporter": "geenensp"
        }
    ],
    "3808642": [
        {
            "dateadded": "2026-03-30 22:31:11 UTC",
            "url": "https://relay-server.nexushaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808642/",
            "reporter": "anonymous"
        }
    ],
    "3808641": [
        {
            "dateadded": "2026-03-30 22:29:14 UTC",
            "url": "http://120.60.238.31:44957/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808641/",
            "reporter": "geenensp"
        }
    ],
    "3808640": [
        {
            "dateadded": "2026-03-30 22:25:14 UTC",
            "url": "https://secure-link.nexushaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:25:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808640/",
            "reporter": "anonymous"
        }
    ],
    "3808639": [
        {
            "dateadded": "2026-03-30 22:23:08 UTC",
            "url": "http://125.43.106.252:56161/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 22:08:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808639/",
            "reporter": "geenensp"
        }
    ],
    "3808638": [
        {
            "dateadded": "2026-03-30 22:20:17 UTC",
            "url": "https://backup-node.nexushaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:20:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808638/",
            "reporter": "anonymous"
        }
    ],
    "3808637": [
        {
            "dateadded": "2026-03-30 22:19:09 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:33:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808637/",
            "reporter": "botnetkiller"
        }
    ],
    "3808636": [
        {
            "dateadded": "2026-03-30 22:18:13 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 10:13:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808636/",
            "reporter": "botnetkiller"
        }
    ],
    "3808625": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 14:28:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808625/",
            "reporter": "botnetkiller"
        }
    ],
    "3808626": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnsh2xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:30:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808626/",
            "reporter": "botnetkiller"
        }
    ],
    "3808627": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnsh4xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808627/",
            "reporter": "botnetkiller"
        }
    ],
    "3808628": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808628/",
            "reporter": "botnetkiller"
        }
    ],
    "3808629": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:57:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808629/",
            "reporter": "botnetkiller"
        }
    ],
    "3808630": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxni386xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:32:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808630/",
            "reporter": "botnetkiller"
        }
    ],
    "3808631": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:27:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808631/",
            "reporter": "botnetkiller"
        }
    ],
    "3808632": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnm68kxnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 10:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808632/",
            "reporter": "botnetkiller"
        }
    ],
    "3808633": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:52:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "RISC-V",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808633/",
            "reporter": "botnetkiller"
        }
    ],
    "3808634": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnor1kxnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 14:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808634/",
            "reporter": "botnetkiller"
        }
    ],
    "3808635": [
        {
            "dateadded": "2026-03-30 22:18:12 UTC",
            "url": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnmipsxnxn",
            "url_status": "offline",
            "last_online": "2026-03-31 09:48:34 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808635/",
            "reporter": "botnetkiller"
        }
    ],
    "3808624": [
        {
            "dateadded": "2026-03-30 22:14:09 UTC",
            "url": "https://guest-access.nexushaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808624/",
            "reporter": "anonymous"
        }
    ],
    "3808623": [
        {
            "dateadded": "2026-03-30 22:12:24 UTC",
            "url": "http://123.12.224.245:40361/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:57:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808623/",
            "reporter": "geenensp"
        }
    ],
    "3808622": [
        {
            "dateadded": "2026-03-30 22:09:20 UTC",
            "url": "http://27.215.4.198:41494/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:17:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808622/",
            "reporter": "geenensp"
        }
    ],
    "3808621": [
        {
            "dateadded": "2026-03-30 22:08:10 UTC",
            "url": "https://cloud-vault.nexushaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:08:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808621/",
            "reporter": "anonymous"
        }
    ],
    "3808620": [
        {
            "dateadded": "2026-03-30 22:02:10 UTC",
            "url": "https://safe-harbor.nexushaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808620/",
            "reporter": "anonymous"
        }
    ],
    "3808619": [
        {
            "dateadded": "2026-03-30 22:00:15 UTC",
            "url": "https://auth-proxy.vectorforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 22:00:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808619/",
            "reporter": "anonymous"
        }
    ],
    "3808618": [
        {
            "dateadded": "2026-03-30 21:57:17 UTC",
            "url": "http://42.7.204.242:38970/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:26:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808618/",
            "reporter": "geenensp"
        }
    ],
    "3808617": [
        {
            "dateadded": "2026-03-30 21:51:21 UTC",
            "url": "http://42.232.230.226:45244/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:45:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808617/",
            "reporter": "geenensp"
        }
    ],
    "3808616": [
        {
            "dateadded": "2026-03-30 21:51:10 UTC",
            "url": "https://build-deploy.vectorforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808616/",
            "reporter": "anonymous"
        }
    ],
    "3808615": [
        {
            "dateadded": "2026-03-30 21:47:07 UTC",
            "url": "http://182.113.204.133:33884/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:22:54 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808615/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808614": [
        {
            "dateadded": "2026-03-30 21:45:14 UTC",
            "url": "https://data-pipeline.vectorforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:45:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808614/",
            "reporter": "anonymous"
        }
    ],
    "3808613": [
        {
            "dateadded": "2026-03-30 21:40:18 UTC",
            "url": "http://123.12.224.245:40361/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:21:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808613/",
            "reporter": "geenensp"
        }
    ],
    "3808612": [
        {
            "dateadded": "2026-03-30 21:40:12 UTC",
            "url": "https://api-endpoint.vectorforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808612/",
            "reporter": "anonymous"
        }
    ],
    "3808611": [
        {
            "dateadded": "2026-03-30 21:34:15 UTC",
            "url": "https://load-stress.vectorforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:34:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808611/",
            "reporter": "anonymous"
        }
    ],
    "3808610": [
        {
            "dateadded": "2026-03-30 21:33:22 UTC",
            "url": "http://115.55.162.33:42595/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:33:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808610/",
            "reporter": "geenensp"
        }
    ],
    "3808609": [
        {
            "dateadded": "2026-03-30 21:32:07 UTC",
            "url": "http://110.38.211.48:47296/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808609/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808608": [
        {
            "dateadded": "2026-03-30 21:29:10 UTC",
            "url": "https://core-engine.vectorforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808608/",
            "reporter": "anonymous"
        }
    ],
    "3808607": [
        {
            "dateadded": "2026-03-30 21:28:12 UTC",
            "url": "http://85.140.44.96:38108/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:22:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808607/",
            "reporter": "geenensp"
        }
    ],
    "3808606": [
        {
            "dateadded": "2026-03-30 21:23:27 UTC",
            "url": "http://115.55.55.183:38418/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:25:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808606/",
            "reporter": "geenensp"
        }
    ],
    "3808605": [
        {
            "dateadded": "2026-03-30 21:23:07 UTC",
            "url": "https://rpaizy.ashenkite.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:23:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808605/",
            "reporter": "anonymous"
        }
    ],
    "3808604": [
        {
            "dateadded": "2026-03-30 21:19:21 UTC",
            "url": "http://115.55.162.33:42595/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:19:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808604/",
            "reporter": "geenensp"
        }
    ],
    "3808603": [
        {
            "dateadded": "2026-03-30 21:17:08 UTC",
            "url": "https://185ez3.ashenkite.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808603/",
            "reporter": "anonymous"
        }
    ],
    "3808602": [
        {
            "dateadded": "2026-03-30 21:17:05 UTC",
            "url": "http://182.113.204.133:33884/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 11:07:35 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808602/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808601": [
        {
            "dateadded": "2026-03-30 21:15:24 UTC",
            "url": "http://110.37.0.211:49050/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:16:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808601/",
            "reporter": "geenensp"
        }
    ],
    "3808600": [
        {
            "dateadded": "2026-03-30 21:14:20 UTC",
            "url": "http://115.50.91.143:51727/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808600/",
            "reporter": "geenensp"
        }
    ],
    "3808599": [
        {
            "dateadded": "2026-03-30 21:12:08 UTC",
            "url": "https://pixelsola.ashenkite.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808599/",
            "reporter": "anonymous"
        }
    ],
    "3808598": [
        {
            "dateadded": "2026-03-30 21:07:08 UTC",
            "url": "https://cr4t-flow.ashenkite.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:48:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808598/",
            "reporter": "anonymous"
        }
    ],
    "3808597": [
        {
            "dateadded": "2026-03-30 21:00:10 UTC",
            "url": "https://uyr3.ashenkite.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:26:05 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808597/",
            "reporter": "anonymous"
        }
    ],
    "3808596": [
        {
            "dateadded": "2026-03-30 20:54:24 UTC",
            "url": "http://27.217.198.91:45909/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:23:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808596/",
            "reporter": "geenensp"
        }
    ],
    "3808595": [
        {
            "dateadded": "2026-03-30 20:54:08 UTC",
            "url": "https://arkmeshet6.ashenkite.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:47:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808595/",
            "reporter": "anonymous"
        }
    ],
    "3808594": [
        {
            "dateadded": "2026-03-30 20:50:10 UTC",
            "url": "http://115.50.91.143:51727/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:11:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808594/",
            "reporter": "geenensp"
        }
    ],
    "3808593": [
        {
            "dateadded": "2026-03-30 20:50:08 UTC",
            "url": "https://open-mesh.quillspire.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:42:43 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808593/",
            "reporter": "anonymous"
        }
    ],
    "3808592": [
        {
            "dateadded": "2026-03-30 20:45:10 UTC",
            "url": "https://bin4ry-ring.quillspire.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:25:49 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808592/",
            "reporter": "anonymous"
        }
    ],
    "3808591": [
        {
            "dateadded": "2026-03-30 20:42:08 UTC",
            "url": "https://m3rg-hinge.quillspire.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:16:26 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808591/",
            "reporter": "anonymous"
        }
    ],
    "3808590": [
        {
            "dateadded": "2026-03-30 20:33:08 UTC",
            "url": "https://nuaeftf.quillspire.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 20:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808590/",
            "reporter": "anonymous"
        }
    ],
    "3808589": [
        {
            "dateadded": "2026-03-30 20:27:07 UTC",
            "url": "https://mer-forgeex.quillspire.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 20:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808589/",
            "reporter": "anonymous"
        }
    ],
    "3808588": [
        {
            "dateadded": "2026-03-30 20:21:09 UTC",
            "url": "https://erpqy89.quillspire.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:49:58 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808588/",
            "reporter": "anonymous"
        }
    ],
    "3808587": [
        {
            "dateadded": "2026-03-30 20:15:10 UTC",
            "url": "https://primemicrobe.silvershade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:31:47 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808587/",
            "reporter": "anonymous"
        }
    ],
    "3808586": [
        {
            "dateadded": "2026-03-30 20:14:08 UTC",
            "url": "http://27.37.225.225:38495/i",
            "url_status": "offline",
            "last_online": "2026-04-05 05:19:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808586/",
            "reporter": "geenensp"
        }
    ],
    "3808585": [
        {
            "dateadded": "2026-03-30 20:10:10 UTC",
            "url": "https://blen-reef.silvershade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:33:28 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808585/",
            "reporter": "anonymous"
        }
    ],
    "3808584": [
        {
            "dateadded": "2026-03-30 20:09:07 UTC",
            "url": "http://115.52.19.48:59708/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:25:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808584/",
            "reporter": "geenensp"
        }
    ],
    "3808583": [
        {
            "dateadded": "2026-03-30 20:05:14 UTC",
            "url": "https://social-hau.silvershade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 20:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808583/",
            "reporter": "anonymous"
        }
    ],
    "3808582": [
        {
            "dateadded": "2026-03-30 19:58:09 UTC",
            "url": "https://5udd-glow.silvershade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808582/",
            "reporter": "anonymous"
        }
    ],
    "3808581": [
        {
            "dateadded": "2026-03-30 19:57:17 UTC",
            "url": "http://117.215.53.247:48402/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:21:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808581/",
            "reporter": "geenensp"
        }
    ],
    "3808580": [
        {
            "dateadded": "2026-03-30 19:53:11 UTC",
            "url": "http://113.206.14.6:60299/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:38:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808580/",
            "reporter": "geenensp"
        }
    ],
    "3808579": [
        {
            "dateadded": "2026-03-30 19:53:07 UTC",
            "url": "https://wolfpas.silvershade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 21:14:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808579/",
            "reporter": "anonymous"
        }
    ],
    "3808578": [
        {
            "dateadded": "2026-03-30 19:48:09 UTC",
            "url": "https://exp05e-crest.silvershade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808578/",
            "reporter": "anonymous"
        }
    ],
    "3808577": [
        {
            "dateadded": "2026-03-30 19:47:24 UTC",
            "url": "http://115.52.19.48:59708/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:22:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808577/",
            "reporter": "geenensp"
        }
    ],
    "3808576": [
        {
            "dateadded": "2026-03-30 19:42:26 UTC",
            "url": "http://117.215.53.247:48402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 19:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808576/",
            "reporter": "geenensp"
        }
    ],
    "3808575": [
        {
            "dateadded": "2026-03-30 19:41:08 UTC",
            "url": "https://partnerreb.mistlatch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 20:51:27 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808575/",
            "reporter": "anonymous"
        }
    ],
    "3808574": [
        {
            "dateadded": "2026-03-30 19:39:15 UTC",
            "url": "http://118.34.109.121:55433/i",
            "url_status": "offline",
            "last_online": "2026-03-31 10:36:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808574/",
            "reporter": "geenensp"
        }
    ],
    "3808573": [
        {
            "dateadded": "2026-03-30 19:36:08 UTC",
            "url": "https://2lripcrt.mistlatch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808573/",
            "reporter": "anonymous"
        }
    ],
    "3808572": [
        {
            "dateadded": "2026-03-30 19:34:18 UTC",
            "url": "http://113.206.14.6:60299/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 09:43:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808572/",
            "reporter": "geenensp"
        }
    ],
    "3808571": [
        {
            "dateadded": "2026-03-30 19:32:17 UTC",
            "url": "http://210.97.100.192:60672/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 19:32:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808571/",
            "reporter": "geenensp"
        }
    ],
    "3808570": [
        {
            "dateadded": "2026-03-30 19:32:08 UTC",
            "url": "https://fabric-plate.mistlatch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808570/",
            "reporter": "anonymous"
        }
    ],
    "3808569": [
        {
            "dateadded": "2026-03-30 19:32:07 UTC",
            "url": "http://222.140.212.129:48177/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:36:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808569/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808568": [
        {
            "dateadded": "2026-03-30 19:25:10 UTC",
            "url": "https://mossroad.mistlatch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808568/",
            "reporter": "anonymous"
        }
    ],
    "3808567": [
        {
            "dateadded": "2026-03-30 19:24:25 UTC",
            "url": "http://42.233.105.194:37177/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:46:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808567/",
            "reporter": "geenensp"
        }
    ],
    "3808566": [
        {
            "dateadded": "2026-03-30 19:20:09 UTC",
            "url": "https://arkmark4et.mistlatch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808566/",
            "reporter": "anonymous"
        }
    ],
    "3808565": [
        {
            "dateadded": "2026-03-30 19:17:16 UTC",
            "url": "http://83.254.236.2:50089/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:32:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808565/",
            "reporter": "geenensp"
        }
    ],
    "3808564": [
        {
            "dateadded": "2026-03-30 19:14:08 UTC",
            "url": "https://brokerpasture.mistlatch.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808564/",
            "reporter": "anonymous"
        }
    ],
    "3808563": [
        {
            "dateadded": "2026-03-30 19:08:07 UTC",
            "url": "https://po5a.skyl1tfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808563/",
            "reporter": "anonymous"
        }
    ],
    "3808562": [
        {
            "dateadded": "2026-03-30 19:03:18 UTC",
            "url": "http://196.190.105.170:52231/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808562/",
            "reporter": "geenensp"
        }
    ],
    "3808561": [
        {
            "dateadded": "2026-03-30 19:03:10 UTC",
            "url": "https://cur1o1-phase.skyl1tfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 19:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808561/",
            "reporter": "anonymous"
        }
    ],
    "3808560": [
        {
            "dateadded": "2026-03-30 19:02:06 UTC",
            "url": "http://222.140.212.129:48177/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:55:49 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808560/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808559": [
        {
            "dateadded": "2026-03-30 18:58:07 UTC",
            "url": "https://89n5b.skyl1tfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808559/",
            "reporter": "anonymous"
        }
    ],
    "3808558": [
        {
            "dateadded": "2026-03-30 18:56:08 UTC",
            "url": "https://5tud1o6-path.skyl1tfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808558/",
            "reporter": "anonymous"
        }
    ],
    "3808557": [
        {
            "dateadded": "2026-03-30 18:48:20 UTC",
            "url": "http://105.186.254.212:34465/i",
            "url_status": "offline",
            "last_online": "2026-03-30 18:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808557/",
            "reporter": "geenensp"
        }
    ],
    "3808556": [
        {
            "dateadded": "2026-03-30 18:46:19 UTC",
            "url": "http://83.254.236.2:50089/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808556/",
            "reporter": "geenensp"
        }
    ],
    "3808555": [
        {
            "dateadded": "2026-03-30 18:46:08 UTC",
            "url": "https://gatewayraven.skyl1tfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808555/",
            "reporter": "anonymous"
        }
    ],
    "3808554": [
        {
            "dateadded": "2026-03-30 18:44:13 UTC",
            "url": "http://118.34.109.121:55433/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:31:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808554/",
            "reporter": "geenensp"
        }
    ],
    "3808553": [
        {
            "dateadded": "2026-03-30 18:41:18 UTC",
            "url": "http://222.139.40.108:51272/i",
            "url_status": "offline",
            "last_online": "2026-03-31 17:01:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808553/",
            "reporter": "geenensp"
        }
    ],
    "3808552": [
        {
            "dateadded": "2026-03-30 18:40:10 UTC",
            "url": "https://cr4ft9-core.skyl1tfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808552/",
            "reporter": "anonymous"
        }
    ],
    "3808551": [
        {
            "dateadded": "2026-03-30 18:39:17 UTC",
            "url": "http://42.230.186.52:39461/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:19:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808551/",
            "reporter": "geenensp"
        }
    ],
    "3808550": [
        {
            "dateadded": "2026-03-30 18:35:08 UTC",
            "url": "https://sub-hau1.fabledrift.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:35:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808550/",
            "reporter": "anonymous"
        }
    ],
    "3808549": [
        {
            "dateadded": "2026-03-30 18:29:19 UTC",
            "url": "http://105.184.248.222:36165/i",
            "url_status": "offline",
            "last_online": "2026-03-30 18:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808549/",
            "reporter": "geenensp"
        }
    ],
    "3808548": [
        {
            "dateadded": "2026-03-30 18:29:07 UTC",
            "url": "https://quorspireum8.fabledrift.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808548/",
            "reporter": "anonymous"
        }
    ],
    "3808547": [
        {
            "dateadded": "2026-03-30 18:25:26 UTC",
            "url": "http://42.230.186.52:39461/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:16:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808547/",
            "reporter": "geenensp"
        }
    ],
    "3808546": [
        {
            "dateadded": "2026-03-30 18:23:09 UTC",
            "url": "https://storyfros.fabledrift.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808546/",
            "reporter": "anonymous"
        }
    ],
    "3808545": [
        {
            "dateadded": "2026-03-30 18:17:08 UTC",
            "url": "https://tpqicucp.fabledrift.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808545/",
            "reporter": "anonymous"
        }
    ],
    "3808544": [
        {
            "dateadded": "2026-03-30 18:12:14 UTC",
            "url": "https://securclea.fabledrift.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808544/",
            "reporter": "anonymous"
        }
    ],
    "3808543": [
        {
            "dateadded": "2026-03-30 18:11:22 UTC",
            "url": "http://117.200.178.98:51918/i",
            "url_status": "offline",
            "last_online": "2026-03-30 18:11:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808543/",
            "reporter": "geenensp"
        }
    ],
    "3808542": [
        {
            "dateadded": "2026-03-30 18:07:20 UTC",
            "url": "http://115.55.24.6:47501/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:38:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808542/",
            "reporter": "geenensp"
        }
    ],
    "3808541": [
        {
            "dateadded": "2026-03-30 18:06:10 UTC",
            "url": "https://arraynarrow.fabledrift.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808541/",
            "reporter": "anonymous"
        }
    ],
    "3808540": [
        {
            "dateadded": "2026-03-30 18:05:16 UTC",
            "url": "http://117.200.178.98:51918/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 18:05:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808540/",
            "reporter": "geenensp"
        }
    ],
    "3808539": [
        {
            "dateadded": "2026-03-30 18:02:12 UTC",
            "url": "http://37.157.219.158:32778/i",
            "url_status": "offline",
            "last_online": "2026-03-31 14:39:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808539/",
            "reporter": "geenensp"
        }
    ],
    "3808538": [
        {
            "dateadded": "2026-03-30 18:02:11 UTC",
            "url": "https://lumlithor9.thorncairn.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 18:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808538/",
            "reporter": "anonymous"
        }
    ],
    "3808537": [
        {
            "dateadded": "2026-03-30 18:00:13 UTC",
            "url": "http://105.184.248.222:36165/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 18:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808537/",
            "reporter": "geenensp"
        }
    ],
    "3808536": [
        {
            "dateadded": "2026-03-30 17:55:12 UTC",
            "url": "https://clif-lagoo.thorncairn.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808536/",
            "reporter": "anonymous"
        }
    ],
    "3808535": [
        {
            "dateadded": "2026-03-30 17:55:09 UTC",
            "url": "http://196.189.35.226:43409/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:27:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808535/",
            "reporter": "geenensp"
        }
    ],
    "3808534": [
        {
            "dateadded": "2026-03-30 17:52:05 UTC",
            "url": "http://85.239.147.6/files/8317177049/xG9J7pF.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808534/",
            "reporter": "c2hunter"
        }
    ],
    "3808533": [
        {
            "dateadded": "2026-03-30 17:49:20 UTC",
            "url": "http://115.55.24.6:47501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:52:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808533/",
            "reporter": "geenensp"
        }
    ],
    "3808532": [
        {
            "dateadded": "2026-03-30 17:49:09 UTC",
            "url": "https://kfem.thorncairn.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808532/",
            "reporter": "anonymous"
        }
    ],
    "3808531": [
        {
            "dateadded": "2026-03-30 17:44:09 UTC",
            "url": "https://ze2975m.thorncairn.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:44:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808531/",
            "reporter": "anonymous"
        }
    ],
    "3808530": [
        {
            "dateadded": "2026-03-30 17:39:10 UTC",
            "url": "https://vgge57l.thorncairn.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:39:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808530/",
            "reporter": "anonymous"
        }
    ],
    "3808529": [
        {
            "dateadded": "2026-03-30 17:36:20 UTC",
            "url": "http://37.157.219.158:32778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 14:40:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808529/",
            "reporter": "geenensp"
        }
    ],
    "3808528": [
        {
            "dateadded": "2026-03-30 17:35:14 UTC",
            "url": "https://solforgeor4.thorncairn.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:35:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808528/",
            "reporter": "anonymous"
        }
    ],
    "3808527": [
        {
            "dateadded": "2026-03-30 17:31:17 UTC",
            "url": "https://loyalreel.v7lora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808527/",
            "reporter": "anonymous"
        }
    ],
    "3808526": [
        {
            "dateadded": "2026-03-30 17:30:20 UTC",
            "url": "http://182.127.153.171:51092/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:21:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808526/",
            "reporter": "geenensp"
        }
    ],
    "3808525": [
        {
            "dateadded": "2026-03-30 17:29:19 UTC",
            "url": "http://123.4.147.72:36735/i",
            "url_status": "offline",
            "last_online": "2026-03-30 17:29:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808525/",
            "reporter": "geenensp"
        }
    ],
    "3808524": [
        {
            "dateadded": "2026-03-30 17:28:09 UTC",
            "url": "http://www.vame.be/kgb/ENCRYPT.Ps1",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "powershell",
                "ps1",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808524/",
            "reporter": "abuse_ch"
        }
    ],
    "3808523": [
        {
            "dateadded": "2026-03-30 17:28:08 UTC",
            "url": "http://www.vame.be/ftp/FrvbzpNxf99.bin",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808523/",
            "reporter": "abuse_ch"
        }
    ],
    "3808522": [
        {
            "dateadded": "2026-03-30 17:22:12 UTC",
            "url": "https://tr4ck-frame.v7lora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808522/",
            "reporter": "anonymous"
        }
    ],
    "3808521": [
        {
            "dateadded": "2026-03-30 17:16:56 UTC",
            "url": "https://tdp72.v7lora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-04 16:36:20 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake",
                "NetSupport"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808521/",
            "reporter": "anonymous"
        }
    ],
    "3808520": [
        {
            "dateadded": "2026-03-30 17:11:09 UTC",
            "url": "https://sswms.v7lora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808520/",
            "reporter": "anonymous"
        }
    ],
    "3808519": [
        {
            "dateadded": "2026-03-30 17:05:19 UTC",
            "url": "http://182.127.153.171:51092/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808519/",
            "reporter": "geenensp"
        }
    ],
    "3808518": [
        {
            "dateadded": "2026-03-30 17:05:11 UTC",
            "url": "https://surnm5-route.v7lora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 17:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808518/",
            "reporter": "anonymous"
        }
    ],
    "3808517": [
        {
            "dateadded": "2026-03-30 17:03:18 UTC",
            "url": "http://42.230.227.7:50551/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808517/",
            "reporter": "geenensp"
        }
    ],
    "3808516": [
        {
            "dateadded": "2026-03-30 17:00:09 UTC",
            "url": "http://222.127.75.70:57804/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808516/",
            "reporter": "geenensp"
        }
    ],
    "3808515": [
        {
            "dateadded": "2026-03-30 16:58:21 UTC",
            "url": "http://123.4.147.72:36735/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808515/",
            "reporter": "geenensp"
        }
    ],
    "3808514": [
        {
            "dateadded": "2026-03-30 16:58:09 UTC",
            "url": "https://r0ug3-stack.v7lora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808514/",
            "reporter": "anonymous"
        }
    ],
    "3808513": [
        {
            "dateadded": "2026-03-30 16:54:12 UTC",
            "url": "https://meta-pur3.glowhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:54:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808513/",
            "reporter": "anonymous"
        }
    ],
    "3808510": [
        {
            "dateadded": "2026-03-30 16:51:14 UTC",
            "url": "https://careersconnect.work/MYPHOTOMSI.JPG",
            "url_status": "offline",
            "last_online": "2026-03-30 16:51:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808510/",
            "reporter": "juroots"
        }
    ],
    "3808506": [
        {
            "dateadded": "2026-03-30 16:51:12 UTC",
            "url": "http://176.98.182.49/beta_evaluation_distribute_v4.4.1.bat",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808506/",
            "reporter": "juroots"
        }
    ],
    "3808507": [
        {
            "dateadded": "2026-03-30 16:51:12 UTC",
            "url": "https://epgoldsecurity.com/XWormClient.exe",
            "url_status": "offline",
            "last_online": "2026-03-30 22:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808507/",
            "reporter": "juroots"
        }
    ],
    "3808508": [
        {
            "dateadded": "2026-03-30 16:51:12 UTC",
            "url": "https://wet-envelope-beam-laser.trycloudflare.com/rechung.pdf",
            "url_status": "offline",
            "last_online": "2026-03-31 15:59:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808508/",
            "reporter": "juroots"
        }
    ],
    "3808509": [
        {
            "dateadded": "2026-03-30 16:51:12 UTC",
            "url": "https://epgoldsecurity.com/ShadoClient.exe",
            "url_status": "offline",
            "last_online": "2026-03-31 03:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808509/",
            "reporter": "juroots"
        }
    ],
    "3808504": [
        {
            "dateadded": "2026-03-30 16:51:11 UTC",
            "url": "https://epgoldsecurity.com/ShadowClient.exe",
            "url_status": "offline",
            "last_online": "2026-03-31 03:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "QuasarRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808504/",
            "reporter": "juroots"
        }
    ],
    "3808505": [
        {
            "dateadded": "2026-03-30 16:51:11 UTC",
            "url": "https://wet-envelope-beam-laser.trycloudflare.com/ombmh.dat",
            "url_status": "offline",
            "last_online": "2026-03-31 16:37:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808505/",
            "reporter": "juroots"
        }
    ],
    "3808501": [
        {
            "dateadded": "2026-03-30 16:51:10 UTC",
            "url": "https://getzoomupdate.com/download.php",
            "url_status": "offline",
            "last_online": "2026-03-30 16:51:10 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808501/",
            "reporter": "juroots"
        }
    ],
    "3808502": [
        {
            "dateadded": "2026-03-30 16:51:10 UTC",
            "url": "https://epgoldsecurity.com/XWormClient2.exe",
            "url_status": "offline",
            "last_online": "2026-03-31 04:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "AsyncRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808502/",
            "reporter": "juroots"
        }
    ],
    "3808503": [
        {
            "dateadded": "2026-03-30 16:51:10 UTC",
            "url": "https://jem-mialwe.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 11:28:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808503/",
            "reporter": "juroots"
        }
    ],
    "3808499": [
        {
            "dateadded": "2026-03-30 16:51:09 UTC",
            "url": "https://jem-mialwe.net/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 07:53:22 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808499/",
            "reporter": "juroots"
        }
    ],
    "3808500": [
        {
            "dateadded": "2026-03-30 16:51:09 UTC",
            "url": "https://inomanliner.org/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 15:54:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808500/",
            "reporter": "juroots"
        }
    ],
    "3808498": [
        {
            "dateadded": "2026-03-30 16:51:08 UTC",
            "url": "https://mlbkn.com/miumiu.7z",
            "url_status": "offline",
            "last_online": "2026-03-30 16:51:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808498/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808496": [
        {
            "dateadded": "2026-03-30 16:51:07 UTC",
            "url": "https://pub-eb752c5fc6fd4e21973d399eafb1844c.r2.dev/adobe_updated_27.092.3029.vbs",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808496/",
            "reporter": "juroots"
        }
    ],
    "3808497": [
        {
            "dateadded": "2026-03-30 16:51:07 UTC",
            "url": "https://careersconnect.work/STARTGO18.03.2026V/GOSTARTWORKSVBY.JPG",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808497/",
            "reporter": "juroots"
        }
    ],
    "3808495": [
        {
            "dateadded": "2026-03-30 16:48:29 UTC",
            "url": "http://163.142.95.5:46073/i",
            "url_status": "offline",
            "last_online": "2026-04-05 03:52:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808495/",
            "reporter": "geenensp"
        }
    ],
    "3808494": [
        {
            "dateadded": "2026-03-30 16:48:07 UTC",
            "url": "https://pr1v-zone.glowhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808494/",
            "reporter": "anonymous"
        }
    ],
    "3808493": [
        {
            "dateadded": "2026-03-30 16:43:23 UTC",
            "url": "http://1.189.26.217:50759/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:46:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808493/",
            "reporter": "geenensp"
        }
    ],
    "3808492": [
        {
            "dateadded": "2026-03-30 16:42:11 UTC",
            "url": "https://pin3-point.glowhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808492/",
            "reporter": "anonymous"
        }
    ],
    "3808491": [
        {
            "dateadded": "2026-03-30 16:39:18 UTC",
            "url": "http://42.229.218.108:48948/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:35:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808491/",
            "reporter": "geenensp"
        }
    ],
    "3808490": [
        {
            "dateadded": "2026-03-30 16:37:10 UTC",
            "url": "https://fz01ob.glowhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808490/",
            "reporter": "anonymous"
        }
    ],
    "3808489": [
        {
            "dateadded": "2026-03-30 16:31:10 UTC",
            "url": "https://quatrigge.glowhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808489/",
            "reporter": "anonymous"
        }
    ],
    "3808487": [
        {
            "dateadded": "2026-03-30 16:27:12 UTC",
            "url": "http://123.4.29.101:37405/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:27:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808487/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808488": [
        {
            "dateadded": "2026-03-30 16:27:12 UTC",
            "url": "http://123.4.29.101:37405/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:19:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808488/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808486": [
        {
            "dateadded": "2026-03-30 16:26:18 UTC",
            "url": "https://normesh0a.glowhaven.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808486/",
            "reporter": "anonymous"
        }
    ],
    "3808485": [
        {
            "dateadded": "2026-03-30 16:22:19 UTC",
            "url": "http://222.127.75.70:57804/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:06:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808485/",
            "reporter": "geenensp"
        }
    ],
    "3808484": [
        {
            "dateadded": "2026-03-30 16:21:22 UTC",
            "url": "http://110.37.66.64:59824/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:08:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808484/",
            "reporter": "geenensp"
        }
    ],
    "3808483": [
        {
            "dateadded": "2026-03-30 16:20:23 UTC",
            "url": "http://175.165.75.37:59704/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:57:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808483/",
            "reporter": "geenensp"
        }
    ],
    "3808482": [
        {
            "dateadded": "2026-03-30 16:20:12 UTC",
            "url": "https://triforgea4.cinderbay.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808482/",
            "reporter": "anonymous"
        }
    ],
    "3808481": [
        {
            "dateadded": "2026-03-30 16:14:08 UTC",
            "url": "https://velvetautu.cinderbay.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808481/",
            "reporter": "anonymous"
        }
    ],
    "3808480": [
        {
            "dateadded": "2026-03-30 16:12:25 UTC",
            "url": "http://1.189.26.217:50759/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 04:05:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808480/",
            "reporter": "geenensp"
        }
    ],
    "3808479": [
        {
            "dateadded": "2026-03-30 16:12:09 UTC",
            "url": "http://115.56.99.210:38056/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:15:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808479/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808478": [
        {
            "dateadded": "2026-03-30 16:09:15 UTC",
            "url": "https://coralsolid.cinderbay.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:09:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808478/",
            "reporter": "anonymous"
        }
    ],
    "3808477": [
        {
            "dateadded": "2026-03-30 16:06:30 UTC",
            "url": "http://60.23.238.136:53916/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:06:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808477/",
            "reporter": "geenensp"
        }
    ],
    "3808476": [
        {
            "dateadded": "2026-03-30 16:02:09 UTC",
            "url": "https://ziuyacdv.cinderbay.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 16:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808476/",
            "reporter": "anonymous"
        }
    ],
    "3808475": [
        {
            "dateadded": "2026-03-30 16:00:29 UTC",
            "url": "http://110.37.66.64:59824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 01:01:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808475/",
            "reporter": "geenensp"
        }
    ],
    "3808474": [
        {
            "dateadded": "2026-03-30 15:59:09 UTC",
            "url": "https://talline1is.cinderbay.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808474/",
            "reporter": "anonymous"
        }
    ],
    "3808473": [
        {
            "dateadded": "2026-03-30 15:56:16 UTC",
            "url": "https://poster-port.cinderbay.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:56:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808473/",
            "reporter": "anonymous"
        }
    ],
    "3808472": [
        {
            "dateadded": "2026-03-30 15:52:14 UTC",
            "url": "http://46.73.17.206:37496/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:52:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808472/",
            "reporter": "geenensp"
        }
    ],
    "3808471": [
        {
            "dateadded": "2026-03-30 15:48:20 UTC",
            "url": "http://175.165.75.37:59704/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 16:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808471/",
            "reporter": "geenensp"
        }
    ],
    "3808470": [
        {
            "dateadded": "2026-03-30 15:47:20 UTC",
            "url": "http://219.155.94.218:51427/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:47:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808470/",
            "reporter": "geenensp"
        }
    ],
    "3808469": [
        {
            "dateadded": "2026-03-30 15:47:09 UTC",
            "url": "http://115.56.99.210:38056/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:25:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808469/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808468": [
        {
            "dateadded": "2026-03-30 15:46:14 UTC",
            "url": "https://falldusk.mossbyte.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:46:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808468/",
            "reporter": "anonymous"
        }
    ],
    "3808467": [
        {
            "dateadded": "2026-03-30 15:41:14 UTC",
            "url": "https://wkilqh.mossbyte.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808467/",
            "reporter": "anonymous"
        }
    ],
    "3808466": [
        {
            "dateadded": "2026-03-30 15:35:12 UTC",
            "url": "https://wavrapi.mossbyte.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808466/",
            "reporter": "anonymous"
        }
    ],
    "3808465": [
        {
            "dateadded": "2026-03-30 15:29:07 UTC",
            "url": "https://gb3r.mossbyte.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:29:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808465/",
            "reporter": "anonymous"
        }
    ],
    "3808464": [
        {
            "dateadded": "2026-03-30 15:27:24 UTC",
            "url": "http://111.127.227.31:39783/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:14:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808464/",
            "reporter": "geenensp"
        }
    ],
    "3808463": [
        {
            "dateadded": "2026-03-30 15:24:10 UTC",
            "url": "https://r6cp.mossbyte.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808463/",
            "reporter": "anonymous"
        }
    ],
    "3808462": [
        {
            "dateadded": "2026-03-30 15:19:25 UTC",
            "url": "http://110.37.27.164:35329/i",
            "url_status": "offline",
            "last_online": "2026-03-31 07:56:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808462/",
            "reporter": "geenensp"
        }
    ],
    "3808461": [
        {
            "dateadded": "2026-03-30 15:18:23 UTC",
            "url": "http://222.142.240.179:45532/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:18:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808461/",
            "reporter": "geenensp"
        }
    ],
    "3808460": [
        {
            "dateadded": "2026-03-30 15:18:07 UTC",
            "url": "https://nor-lineor.mossbyte.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:18:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808460/",
            "reporter": "anonymous"
        }
    ],
    "3808459": [
        {
            "dateadded": "2026-03-30 15:16:24 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808459/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808453": [
        {
            "dateadded": "2026-03-30 15:16:21 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808453/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808454": [
        {
            "dateadded": "2026-03-30 15:16:21 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808454/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808455": [
        {
            "dateadded": "2026-03-30 15:16:21 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808455/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808456": [
        {
            "dateadded": "2026-03-30 15:16:21 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808456/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808457": [
        {
            "dateadded": "2026-03-30 15:16:21 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808457/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808458": [
        {
            "dateadded": "2026-03-30 15:16:21 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808458/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808452": [
        {
            "dateadded": "2026-03-30 15:16:16 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808452/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808451": [
        {
            "dateadded": "2026-03-30 15:15:25 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808451/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808449": [
        {
            "dateadded": "2026-03-30 15:15:24 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808449/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808450": [
        {
            "dateadded": "2026-03-30 15:15:24 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808450/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808447": [
        {
            "dateadded": "2026-03-30 15:15:23 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808447/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808448": [
        {
            "dateadded": "2026-03-30 15:15:23 UTC",
            "url": "http://87.121.84.19/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "elf",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808448/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3808446": [
        {
            "dateadded": "2026-03-30 15:13:10 UTC",
            "url": "https://handleramber.cl0verpeak.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808446/",
            "reporter": "anonymous"
        }
    ],
    "3808445": [
        {
            "dateadded": "2026-03-30 15:12:07 UTC",
            "url": "http://116.58.229.39:47979/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808445/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808444": [
        {
            "dateadded": "2026-03-30 15:07:09 UTC",
            "url": "https://scrip8-grid.cl0verpeak.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808444/",
            "reporter": "anonymous"
        }
    ],
    "3808443": [
        {
            "dateadded": "2026-03-30 15:06:07 UTC",
            "url": "http://196.189.198.173:40937/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:17:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808443/",
            "reporter": "geenensp"
        }
    ],
    "3808442": [
        {
            "dateadded": "2026-03-30 15:02:10 UTC",
            "url": "https://zennexos5.cl0verpeak.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 15:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808442/",
            "reporter": "anonymous"
        }
    ],
    "3808441": [
        {
            "dateadded": "2026-03-30 14:58:20 UTC",
            "url": "http://61.176.71.254:43827/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:49:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808441/",
            "reporter": "geenensp"
        }
    ],
    "3808440": [
        {
            "dateadded": "2026-03-30 14:57:07 UTC",
            "url": "http://182.126.124.121:60566/i",
            "url_status": "offline",
            "last_online": "2026-03-31 14:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808440/",
            "reporter": "geenensp"
        }
    ],
    "3808439": [
        {
            "dateadded": "2026-03-30 14:56:17 UTC",
            "url": "https://tri-coreen.cl0verpeak.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808439/",
            "reporter": "anonymous"
        }
    ],
    "3808438": [
        {
            "dateadded": "2026-03-30 14:54:18 UTC",
            "url": "http://111.127.227.31:39783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808438/",
            "reporter": "geenensp"
        }
    ],
    "3808437": [
        {
            "dateadded": "2026-03-30 14:51:44 UTC",
            "url": "https://dtlxmaf.cl0verpeak.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:51:44 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808437/",
            "reporter": "anonymous"
        }
    ],
    "3808436": [
        {
            "dateadded": "2026-03-30 14:51:18 UTC",
            "url": "http://175.9.165.160:39420/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:18:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808436/",
            "reporter": "geenensp"
        }
    ],
    "3808435": [
        {
            "dateadded": "2026-03-30 14:48:20 UTC",
            "url": "http://222.142.240.179:45532/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:25:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808435/",
            "reporter": "geenensp"
        }
    ],
    "3808434": [
        {
            "dateadded": "2026-03-30 14:46:09 UTC",
            "url": "http://27.207.184.58:54300/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:31:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808434/",
            "reporter": "geenensp"
        }
    ],
    "3808433": [
        {
            "dateadded": "2026-03-30 14:45:09 UTC",
            "url": "https://voyageinspect.cl0verpeak.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808433/",
            "reporter": "anonymous"
        }
    ],
    "3808432": [
        {
            "dateadded": "2026-03-30 14:42:17 UTC",
            "url": "http://175.165.77.252:44311/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:44:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808432/",
            "reporter": "geenensp"
        }
    ],
    "3808431": [
        {
            "dateadded": "2026-03-30 14:41:28 UTC",
            "url": "http://59.180.188.70:40729/i",
            "url_status": "offline",
            "last_online": "2026-03-30 14:41:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808431/",
            "reporter": "geenensp"
        }
    ],
    "3808430": [
        {
            "dateadded": "2026-03-30 14:39:08 UTC",
            "url": "https://solcresten3.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808430/",
            "reporter": "anonymous"
        }
    ],
    "3808429": [
        {
            "dateadded": "2026-03-30 14:36:15 UTC",
            "url": "http://125.41.231.39:59176/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808429/",
            "reporter": "geenensp"
        }
    ],
    "3808428": [
        {
            "dateadded": "2026-03-30 14:34:15 UTC",
            "url": "http://42.4.107.157:38819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:01:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808428/",
            "reporter": "geenensp"
        }
    ],
    "3808427": [
        {
            "dateadded": "2026-03-30 14:33:08 UTC",
            "url": "https://delta6-zone.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808427/",
            "reporter": "anonymous"
        }
    ],
    "3808426": [
        {
            "dateadded": "2026-03-30 14:32:10 UTC",
            "url": "http://61.176.71.254:43827/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:43:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808426/",
            "reporter": "geenensp"
        }
    ],
    "3808425": [
        {
            "dateadded": "2026-03-30 14:31:19 UTC",
            "url": "http://182.126.124.121:60566/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 14:35:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808425/",
            "reporter": "geenensp"
        }
    ],
    "3808424": [
        {
            "dateadded": "2026-03-30 14:28:08 UTC",
            "url": "https://roy4l-node.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808424/",
            "reporter": "anonymous"
        }
    ],
    "3808423": [
        {
            "dateadded": "2026-03-30 14:22:10 UTC",
            "url": "https://tru37-point.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808423/",
            "reporter": "anonymous"
        }
    ],
    "3808422": [
        {
            "dateadded": "2026-03-30 14:20:24 UTC",
            "url": "http://175.165.77.252:44311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 15:31:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808422/",
            "reporter": "geenensp"
        }
    ],
    "3808421": [
        {
            "dateadded": "2026-03-30 14:20:20 UTC",
            "url": "http://175.9.165.160:39420/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:36:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808421/",
            "reporter": "geenensp"
        }
    ],
    "3808420": [
        {
            "dateadded": "2026-03-30 14:16:09 UTC",
            "url": "https://d3ep-forge.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808420/",
            "reporter": "anonymous"
        }
    ],
    "3808419": [
        {
            "dateadded": "2026-03-30 14:12:16 UTC",
            "url": "http://42.227.205.21:50825/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 14:12:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808419/",
            "reporter": "geenensp"
        }
    ],
    "3808418": [
        {
            "dateadded": "2026-03-30 14:11:09 UTC",
            "url": "https://vzdgys.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808418/",
            "reporter": "anonymous"
        }
    ],
    "3808417": [
        {
            "dateadded": "2026-03-30 14:09:19 UTC",
            "url": "http://175.167.243.126:40716/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:02:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808417/",
            "reporter": "geenensp"
        }
    ],
    "3808416": [
        {
            "dateadded": "2026-03-30 14:08:09 UTC",
            "url": "http://222.127.154.221:48996/i",
            "url_status": "offline",
            "last_online": "2026-03-31 14:06:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808416/",
            "reporter": "geenensp"
        }
    ],
    "3808415": [
        {
            "dateadded": "2026-03-30 14:07:12 UTC",
            "url": "http://125.41.231.39:59176/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:13:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808415/",
            "reporter": "geenensp"
        }
    ],
    "3808414": [
        {
            "dateadded": "2026-03-30 14:05:14 UTC",
            "url": "http://36.70.234.148:38506/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:58:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808414/",
            "reporter": "geenensp"
        }
    ],
    "3808413": [
        {
            "dateadded": "2026-03-30 14:05:09 UTC",
            "url": "https://yx16l.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808413/",
            "reporter": "anonymous"
        }
    ],
    "3808412": [
        {
            "dateadded": "2026-03-30 14:00:13 UTC",
            "url": "https://sh1f-signal.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 14:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808412/",
            "reporter": "anonymous"
        }
    ],
    "3808410": [
        {
            "dateadded": "2026-03-30 13:59:08 UTC",
            "url": "http://222.142.197.135:59233/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:22:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808410/",
            "reporter": "geenensp"
        }
    ],
    "3808411": [
        {
            "dateadded": "2026-03-30 13:59:08 UTC",
            "url": "http://171.36.9.175:34472/i",
            "url_status": "offline",
            "last_online": "2026-04-07 05:27:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808411/",
            "reporter": "geenensp"
        }
    ],
    "3808409": [
        {
            "dateadded": "2026-03-30 13:58:09 UTC",
            "url": "http://88.249.70.76:58474/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:37:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808409/",
            "reporter": "geenensp"
        }
    ],
    "3808408": [
        {
            "dateadded": "2026-03-30 13:54:09 UTC",
            "url": "https://gl0ss-grid.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808408/",
            "reporter": "anonymous"
        }
    ],
    "3808406": [
        {
            "dateadded": "2026-03-30 13:52:20 UTC",
            "url": "http://27.193.230.64:40914/i",
            "url_status": "offline",
            "last_online": "2026-03-30 13:52:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808406/",
            "reporter": "geenensp"
        }
    ],
    "3808407": [
        {
            "dateadded": "2026-03-30 13:52:20 UTC",
            "url": "http://27.207.184.58:54300/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808407/",
            "reporter": "geenensp"
        }
    ],
    "3808405": [
        {
            "dateadded": "2026-03-30 13:50:24 UTC",
            "url": "http://36.70.234.148:38506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:47:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808405/",
            "reporter": "geenensp"
        }
    ],
    "3808404": [
        {
            "dateadded": "2026-03-30 13:50:20 UTC",
            "url": "http://117.235.123.214:38824/i",
            "url_status": "offline",
            "last_online": "2026-03-30 13:50:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808404/",
            "reporter": "geenensp"
        }
    ],
    "3808403": [
        {
            "dateadded": "2026-03-30 13:50:19 UTC",
            "url": "http://222.127.60.98:53927/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:59:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808403/",
            "reporter": "geenensp"
        }
    ],
    "3808402": [
        {
            "dateadded": "2026-03-30 13:49:18 UTC",
            "url": "http://222.127.154.221:48996/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808402/",
            "reporter": "geenensp"
        }
    ],
    "3808401": [
        {
            "dateadded": "2026-03-30 13:49:14 UTC",
            "url": "http://118.253.80.140:48921/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 16:31:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808401/",
            "reporter": "geenensp"
        }
    ],
    "3808400": [
        {
            "dateadded": "2026-03-30 13:49:12 UTC",
            "url": "https://hmndwk.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:49:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808400/",
            "reporter": "anonymous"
        }
    ],
    "3808399": [
        {
            "dateadded": "2026-03-30 13:42:23 UTC",
            "url": "http://182.139.3.232:33999/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:31:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808399/",
            "reporter": "geenensp"
        }
    ],
    "3808398": [
        {
            "dateadded": "2026-03-30 13:42:11 UTC",
            "url": "https://capitclou.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:42:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808398/",
            "reporter": "anonymous"
        }
    ],
    "3808397": [
        {
            "dateadded": "2026-03-30 13:38:16 UTC",
            "url": "http://171.36.9.175:34472/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-06 22:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808397/",
            "reporter": "geenensp"
        }
    ],
    "3808396": [
        {
            "dateadded": "2026-03-30 13:37:07 UTC",
            "url": "https://creekcargo.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:37:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808396/",
            "reporter": "anonymous"
        }
    ],
    "3808395": [
        {
            "dateadded": "2026-03-30 13:32:08 UTC",
            "url": "https://39vhl.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808395/",
            "reporter": "anonymous"
        }
    ],
    "3808394": [
        {
            "dateadded": "2026-03-30 13:31:16 UTC",
            "url": "http://222.139.40.108:51272/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:57:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808394/",
            "reporter": "geenensp"
        }
    ],
    "3808393": [
        {
            "dateadded": "2026-03-30 13:31:15 UTC",
            "url": "http://88.249.70.76:58474/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808393/",
            "reporter": "geenensp"
        }
    ],
    "3808392": [
        {
            "dateadded": "2026-03-30 13:31:06 UTC",
            "url": "http://182.121.227.73:39641/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:09:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808392/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808391": [
        {
            "dateadded": "2026-03-30 13:30:10 UTC",
            "url": "http://222.142.197.135:59233/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:46:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808391/",
            "reporter": "geenensp"
        }
    ],
    "3808390": [
        {
            "dateadded": "2026-03-30 13:27:18 UTC",
            "url": "http://27.193.230.64:40914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 13:27:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808390/",
            "reporter": "geenensp"
        }
    ],
    "3808389": [
        {
            "dateadded": "2026-03-30 13:26:11 UTC",
            "url": "http://42.231.91.184:34368/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:38:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808389/",
            "reporter": "geenensp"
        }
    ],
    "3808388": [
        {
            "dateadded": "2026-03-30 13:25:11 UTC",
            "url": "https://dpvvgwcg.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808388/",
            "reporter": "anonymous"
        }
    ],
    "3808387": [
        {
            "dateadded": "2026-03-30 13:22:07 UTC",
            "url": "http://182.121.227.73:39641/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:09:14 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808387/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808385": [
        {
            "dateadded": "2026-03-30 13:21:12 UTC",
            "url": "http://87.255.10.22:39229/i",
            "url_status": "offline",
            "last_online": "2026-03-30 13:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808385/",
            "reporter": "geenensp"
        }
    ],
    "3808386": [
        {
            "dateadded": "2026-03-30 13:21:12 UTC",
            "url": "http://110.36.27.244:46113/i",
            "url_status": "offline",
            "last_online": "2026-03-30 13:21:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808386/",
            "reporter": "geenensp"
        }
    ],
    "3808384": [
        {
            "dateadded": "2026-03-30 13:20:09 UTC",
            "url": "http://117.235.123.214:38824/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 13:20:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808384/",
            "reporter": "geenensp"
        }
    ],
    "3808383": [
        {
            "dateadded": "2026-03-30 13:18:09 UTC",
            "url": "https://sceneretainer.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808383/",
            "reporter": "anonymous"
        }
    ],
    "3808382": [
        {
            "dateadded": "2026-03-30 13:12:13 UTC",
            "url": "https://field-shoa.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:12:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808382/",
            "reporter": "anonymous"
        }
    ],
    "3808381": [
        {
            "dateadded": "2026-03-30 13:05:10 UTC",
            "url": "https://margingene.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 13:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808381/",
            "reporter": "anonymous"
        }
    ],
    "3808380": [
        {
            "dateadded": "2026-03-30 13:02:17 UTC",
            "url": "http://42.231.91.184:34368/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:33:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808380/",
            "reporter": "geenensp"
        }
    ],
    "3808379": [
        {
            "dateadded": "2026-03-30 12:58:08 UTC",
            "url": "https://cybdh.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808379/",
            "reporter": "anonymous"
        }
    ],
    "3808378": [
        {
            "dateadded": "2026-03-30 12:57:23 UTC",
            "url": "http://119.116.37.247:42610/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:16:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808378/",
            "reporter": "geenensp"
        }
    ],
    "3808377": [
        {
            "dateadded": "2026-03-30 12:57:13 UTC",
            "url": "http://110.36.27.244:46113/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808377/",
            "reporter": "geenensp"
        }
    ],
    "3808376": [
        {
            "dateadded": "2026-03-30 12:57:07 UTC",
            "url": "http://123.9.244.178:33070/i",
            "url_status": "offline",
            "last_online": "2026-04-01 10:00:30 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808376/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808375": [
        {
            "dateadded": "2026-03-30 12:55:12 UTC",
            "url": "http://110.24.36.14:45423/i",
            "url_status": "offline",
            "last_online": "2026-03-30 12:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808375/",
            "reporter": "geenensp"
        }
    ],
    "3808374": [
        {
            "dateadded": "2026-03-30 12:55:09 UTC",
            "url": "http://119.116.37.247:42610/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:26:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808374/",
            "reporter": "geenensp"
        }
    ],
    "3808373": [
        {
            "dateadded": "2026-03-30 12:55:08 UTC",
            "url": "https://solline0en.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808373/",
            "reporter": "anonymous"
        }
    ],
    "3808372": [
        {
            "dateadded": "2026-03-30 12:46:14 UTC",
            "url": "http://27.37.60.190:52268/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:27:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808372/",
            "reporter": "geenensp"
        }
    ],
    "3808371": [
        {
            "dateadded": "2026-03-30 12:46:07 UTC",
            "url": "https://atom-mount.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808371/",
            "reporter": "anonymous"
        }
    ],
    "3808369": [
        {
            "dateadded": "2026-03-30 12:45:24 UTC",
            "url": "http://36.70.199.0:34975/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:37:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808369/",
            "reporter": "geenensp"
        }
    ],
    "3808370": [
        {
            "dateadded": "2026-03-30 12:45:24 UTC",
            "url": "http://36.70.199.0:34975/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808370/",
            "reporter": "geenensp"
        }
    ],
    "3808368": [
        {
            "dateadded": "2026-03-30 12:44:11 UTC",
            "url": "http://87.255.10.22:39229/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 12:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808368/",
            "reporter": "geenensp"
        }
    ],
    "3808366": [
        {
            "dateadded": "2026-03-30 12:40:10 UTC",
            "url": "https://files.pythonhosted.org/packages/83/b7/5e93f51cd157cc8cf5599f387e587a1926d50fc7e54fb76d04b342341fb0/telnyx-4.87.1-py3-none-any.whl",
            "url_status": "online",
            "last_online": "2026-04-27 12:05:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808366/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808367": [
        {
            "dateadded": "2026-03-30 12:40:10 UTC",
            "url": "https://files.pythonhosted.org/packages/5a/73/87cb49434a1f89f253819b81993d3a4e65186ae08b013b9825633ceac359/telnyx-4.87.2-py3-none-any.whl",
            "url_status": "online",
            "last_online": "2026-04-27 12:41:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808367/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808365": [
        {
            "dateadded": "2026-03-30 12:40:08 UTC",
            "url": "http://176.65.139.64/ohshit.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:41:01 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808365/",
            "reporter": "geenensp"
        }
    ],
    "3808364": [
        {
            "dateadded": "2026-03-30 12:38:08 UTC",
            "url": "https://50ravelv.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808364/",
            "reporter": "anonymous"
        }
    ],
    "3808363": [
        {
            "dateadded": "2026-03-30 12:32:09 UTC",
            "url": "https://dispatchmemory.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808363/",
            "reporter": "anonymous"
        }
    ],
    "3808362": [
        {
            "dateadded": "2026-03-30 12:25:10 UTC",
            "url": "https://proto-tru5ted.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808362/",
            "reporter": "anonymous"
        }
    ],
    "3808361": [
        {
            "dateadded": "2026-03-30 12:23:18 UTC",
            "url": "http://123.168.208.78:50607/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:28:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808361/",
            "reporter": "geenensp"
        }
    ],
    "3808360": [
        {
            "dateadded": "2026-03-30 12:22:09 UTC",
            "url": "http://182.122.54.132:42333/i",
            "url_status": "offline",
            "last_online": "2026-03-31 22:33:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808360/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808359": [
        {
            "dateadded": "2026-03-30 12:20:10 UTC",
            "url": "https://runti5-flow.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808359/",
            "reporter": "anonymous"
        }
    ],
    "3808358": [
        {
            "dateadded": "2026-03-30 12:17:08 UTC",
            "url": "https://95abc92.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808358/",
            "reporter": "anonymous"
        }
    ],
    "3808357": [
        {
            "dateadded": "2026-03-30 12:15:18 UTC",
            "url": "http://110.37.9.151:48261/i",
            "url_status": "offline",
            "last_online": "2026-03-30 12:15:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808357/",
            "reporter": "geenensp"
        }
    ],
    "3808356": [
        {
            "dateadded": "2026-03-30 12:10:22 UTC",
            "url": "http://123.5.114.101:33257/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808356/",
            "reporter": "geenensp"
        }
    ],
    "3808355": [
        {
            "dateadded": "2026-03-30 12:05:13 UTC",
            "url": "https://yyin.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 12:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808355/",
            "reporter": "anonymous"
        }
    ],
    "3808354": [
        {
            "dateadded": "2026-03-30 12:01:18 UTC",
            "url": "http://110.36.30.247:48830/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 12:01:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808354/",
            "reporter": "geenensp"
        }
    ],
    "3808353": [
        {
            "dateadded": "2026-03-30 11:58:17 UTC",
            "url": "http://175.165.140.168:40007/i",
            "url_status": "offline",
            "last_online": "2026-04-02 22:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808353/",
            "reporter": "geenensp"
        }
    ],
    "3808352": [
        {
            "dateadded": "2026-03-30 11:58:07 UTC",
            "url": "https://geyseropti.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808352/",
            "reporter": "anonymous"
        }
    ],
    "3808351": [
        {
            "dateadded": "2026-03-30 11:57:14 UTC",
            "url": "http://175.167.243.126:40716/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:17:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808351/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808350": [
        {
            "dateadded": "2026-03-30 11:57:09 UTC",
            "url": "http://182.122.54.132:42333/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:33:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808350/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808349": [
        {
            "dateadded": "2026-03-30 11:55:29 UTC",
            "url": "http://59.125.55.230:53868/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:33:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808349/",
            "reporter": "geenensp"
        }
    ],
    "3808348": [
        {
            "dateadded": "2026-03-30 11:51:07 UTC",
            "url": "https://tranrur.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808348/",
            "reporter": "anonymous"
        }
    ],
    "3808347": [
        {
            "dateadded": "2026-03-30 11:49:06 UTC",
            "url": "http://196.190.1.39:52817/i",
            "url_status": "offline",
            "last_online": "2026-03-30 11:49:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808347/",
            "reporter": "geenensp"
        }
    ],
    "3808346": [
        {
            "dateadded": "2026-03-30 11:46:12 UTC",
            "url": "http://182.126.241.122:47701/i",
            "url_status": "offline",
            "last_online": "2026-03-30 11:46:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808346/",
            "reporter": "geenensp"
        }
    ],
    "3808345": [
        {
            "dateadded": "2026-03-30 11:45:08 UTC",
            "url": "https://meta-0rch.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:45:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808345/",
            "reporter": "anonymous"
        }
    ],
    "3808344": [
        {
            "dateadded": "2026-03-30 11:41:19 UTC",
            "url": "http://123.5.114.101:33257/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:42:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808344/",
            "reporter": "geenensp"
        }
    ],
    "3808343": [
        {
            "dateadded": "2026-03-30 11:41:18 UTC",
            "url": "http://175.165.140.168:40007/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:07:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808343/",
            "reporter": "geenensp"
        }
    ],
    "3808342": [
        {
            "dateadded": "2026-03-30 11:39:07 UTC",
            "url": "https://bzknn.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808342/",
            "reporter": "anonymous"
        }
    ],
    "3808341": [
        {
            "dateadded": "2026-03-30 11:38:16 UTC",
            "url": "http://196.190.1.39:52817/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 11:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808341/",
            "reporter": "geenensp"
        }
    ],
    "3808340": [
        {
            "dateadded": "2026-03-30 11:33:09 UTC",
            "url": "https://wu4747.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808340/",
            "reporter": "anonymous"
        }
    ],
    "3808339": [
        {
            "dateadded": "2026-03-30 11:32:06 UTC",
            "url": "http://221.1.224.168:56411/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:13:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808339/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808333": [
        {
            "dateadded": "2026-03-30 11:30:34 UTC",
            "url": "http://219.156.48.17:42209/i",
            "url_status": "offline",
            "last_online": "2026-03-30 11:30:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808333/",
            "reporter": "geenensp"
        }
    ],
    "3808334": [
        {
            "dateadded": "2026-03-30 11:30:34 UTC",
            "url": "http://42.229.218.108:48948/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808334/",
            "reporter": "geenensp"
        }
    ],
    "3808332": [
        {
            "dateadded": "2026-03-30 11:30:33 UTC",
            "url": "http://222.142.242.236:44360/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:24:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808332/",
            "reporter": "geenensp"
        }
    ],
    "3808331": [
        {
            "dateadded": "2026-03-30 11:30:31 UTC",
            "url": "https://pastebin.com/raw/GVqMqePp",
            "url_status": "offline",
            "last_online": "2026-03-30 11:30:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808331/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808329": [
        {
            "dateadded": "2026-03-30 11:30:29 UTC",
            "url": "https://www.shanmaocnhingkong-oss.top/sogou_pinyin_x64_v20_win.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 21:21:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Cybercrime",
                "SilverFox"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808329/",
            "reporter": "Ling"
        }
    ],
    "3808330": [
        {
            "dateadded": "2026-03-30 11:30:29 UTC",
            "url": "https://pastebin.com/GVqMqePp",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808330/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808325": [
        {
            "dateadded": "2026-03-30 11:30:28 UTC",
            "url": "https://62c013c91f7f8152044efae44a432404.r2.cloudflarestorage.com/urllink/www-win-sogou-com/windows/SG.Setupbiyi.5.16.11.5lln.zip",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "Cybercrime",
                "SilverFox"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808325/",
            "reporter": "Ling"
        }
    ],
    "3808326": [
        {
            "dateadded": "2026-03-30 11:30:28 UTC",
            "url": "https://pastebin.com/dl/NfAfGNH6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808326/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808327": [
        {
            "dateadded": "2026-03-30 11:30:28 UTC",
            "url": "https://pastebin.com/K9rHTWbB",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808327/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808328": [
        {
            "dateadded": "2026-03-30 11:30:28 UTC",
            "url": "https://pastebin.com/dl/WXsGaMUd",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808328/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808324": [
        {
            "dateadded": "2026-03-30 11:26:20 UTC",
            "url": "http://119.116.32.189:57819/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:57:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808324/",
            "reporter": "geenensp"
        }
    ],
    "3808323": [
        {
            "dateadded": "2026-03-30 11:25:09 UTC",
            "url": "https://guarmea.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808323/",
            "reporter": "anonymous"
        }
    ],
    "3808322": [
        {
            "dateadded": "2026-03-30 11:24:11 UTC",
            "url": "http://42.224.189.194:43188/i",
            "url_status": "offline",
            "last_online": "2026-03-31 10:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808322/",
            "reporter": "geenensp"
        }
    ],
    "3808321": [
        {
            "dateadded": "2026-03-30 11:21:28 UTC",
            "url": "http://182.126.241.122:47701/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 11:21:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808321/",
            "reporter": "geenensp"
        }
    ],
    "3808320": [
        {
            "dateadded": "2026-03-30 11:20:15 UTC",
            "url": "https://quick8-chain.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808320/",
            "reporter": "anonymous"
        }
    ],
    "3808319": [
        {
            "dateadded": "2026-03-30 11:17:08 UTC",
            "url": "https://decode-stead.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808319/",
            "reporter": "anonymous"
        }
    ],
    "3808318": [
        {
            "dateadded": "2026-03-30 11:13:18 UTC",
            "url": "http://115.49.208.233:58632/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:57:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808318/",
            "reporter": "geenensp"
        }
    ],
    "3808317": [
        {
            "dateadded": "2026-03-30 11:12:08 UTC",
            "url": "http://221.1.224.168:56411/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:46:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808317/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808316": [
        {
            "dateadded": "2026-03-30 11:06:09 UTC",
            "url": "https://3d1t-node.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 11:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808316/",
            "reporter": "anonymous"
        }
    ],
    "3808315": [
        {
            "dateadded": "2026-03-30 10:59:06 UTC",
            "url": "https://proto-p0rt.n0vabrook.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808315/",
            "reporter": "anonymous"
        }
    ],
    "3808314": [
        {
            "dateadded": "2026-03-30 10:58:23 UTC",
            "url": "http://117.217.226.220:36161/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:58:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808314/",
            "reporter": "geenensp"
        }
    ],
    "3808313": [
        {
            "dateadded": "2026-03-30 10:57:15 UTC",
            "url": "http://119.116.32.189:57819/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808313/",
            "reporter": "geenensp"
        }
    ],
    "3808312": [
        {
            "dateadded": "2026-03-30 10:57:09 UTC",
            "url": "http://85.166.152.13:39662/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:43:36 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808312/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808311": [
        {
            "dateadded": "2026-03-30 10:55:20 UTC",
            "url": "http://110.36.80.169:55780/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:55:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808311/",
            "reporter": "geenensp"
        }
    ],
    "3808310": [
        {
            "dateadded": "2026-03-30 10:54:22 UTC",
            "url": "http://115.49.208.233:58632/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:14:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808310/",
            "reporter": "geenensp"
        }
    ],
    "3808309": [
        {
            "dateadded": "2026-03-30 10:54:11 UTC",
            "url": "https://anch0r1-route.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:54:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808309/",
            "reporter": "anonymous"
        }
    ],
    "3808308": [
        {
            "dateadded": "2026-03-30 10:53:15 UTC",
            "url": "http://39.90.149.110:53432/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808308/",
            "reporter": "geenensp"
        }
    ],
    "3808307": [
        {
            "dateadded": "2026-03-30 10:51:09 UTC",
            "url": "https://we5ohkh2.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808307/",
            "reporter": "anonymous"
        }
    ],
    "3808306": [
        {
            "dateadded": "2026-03-30 10:49:23 UTC",
            "url": "http://121.9.66.50:44161/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:49:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808306/",
            "reporter": "geenensp"
        }
    ],
    "3808305": [
        {
            "dateadded": "2026-03-30 10:47:08 UTC",
            "url": "http://219.155.203.107:48310/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:18:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808305/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808304": [
        {
            "dateadded": "2026-03-30 10:44:19 UTC",
            "url": "http://118.175.206.228:52107/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:07:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808304/",
            "reporter": "geenensp"
        }
    ],
    "3808303": [
        {
            "dateadded": "2026-03-30 10:40:26 UTC",
            "url": "http://115.55.195.59:35343/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:33:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808303/",
            "reporter": "geenensp"
        }
    ],
    "3808302": [
        {
            "dateadded": "2026-03-30 10:40:12 UTC",
            "url": "https://ligh-stric.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:40:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808302/",
            "reporter": "anonymous"
        }
    ],
    "3808301": [
        {
            "dateadded": "2026-03-30 10:32:25 UTC",
            "url": "http://121.9.66.50:44161/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:32:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808301/",
            "reporter": "geenensp"
        }
    ],
    "3808300": [
        {
            "dateadded": "2026-03-30 10:32:21 UTC",
            "url": "http://118.175.206.228:52107/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:47:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808300/",
            "reporter": "geenensp"
        }
    ],
    "3808298": [
        {
            "dateadded": "2026-03-30 10:32:08 UTC",
            "url": "https://offecargo.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808298/",
            "reporter": "anonymous"
        }
    ],
    "3808299": [
        {
            "dateadded": "2026-03-30 10:32:08 UTC",
            "url": "http://117.209.88.134:55375/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:10:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808299/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808297": [
        {
            "dateadded": "2026-03-30 10:31:25 UTC",
            "url": "http://42.5.233.192:37282/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 12:35:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808297/",
            "reporter": "geenensp"
        }
    ],
    "3808296": [
        {
            "dateadded": "2026-03-30 10:26:09 UTC",
            "url": "https://quordra3os.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808296/",
            "reporter": "anonymous"
        }
    ],
    "3808295": [
        {
            "dateadded": "2026-03-30 10:22:13 UTC",
            "url": "http://113.238.249.145:36319/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:54:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808295/",
            "reporter": "geenensp"
        }
    ],
    "3808294": [
        {
            "dateadded": "2026-03-30 10:19:08 UTC",
            "url": "https://crimsonpublish.stormglade.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808294/",
            "reporter": "anonymous"
        }
    ],
    "3808293": [
        {
            "dateadded": "2026-03-30 10:17:21 UTC",
            "url": "http://59.182.93.183:58434/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:17:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808293/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808292": [
        {
            "dateadded": "2026-03-30 10:14:18 UTC",
            "url": "http://101.109.126.23:42718/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808292/",
            "reporter": "geenensp"
        }
    ],
    "3808291": [
        {
            "dateadded": "2026-03-30 10:13:08 UTC",
            "url": "https://nortideis.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808291/",
            "reporter": "anonymous"
        }
    ],
    "3808290": [
        {
            "dateadded": "2026-03-30 10:10:25 UTC",
            "url": "http://27.215.212.47:44383/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:36:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808290/",
            "reporter": "geenensp"
        }
    ],
    "3808289": [
        {
            "dateadded": "2026-03-30 10:07:10 UTC",
            "url": "http://117.209.88.134:55375/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808289/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808288": [
        {
            "dateadded": "2026-03-30 10:07:09 UTC",
            "url": "https://echo-draf.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 10:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808288/",
            "reporter": "anonymous"
        }
    ],
    "3808287": [
        {
            "dateadded": "2026-03-30 10:01:26 UTC",
            "url": "http://39.90.149.110:53432/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:44:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808287/",
            "reporter": "geenensp"
        }
    ],
    "3808286": [
        {
            "dateadded": "2026-03-30 09:59:09 UTC",
            "url": "https://refineterminal.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808286/",
            "reporter": "anonymous"
        }
    ],
    "3808285": [
        {
            "dateadded": "2026-03-30 09:57:21 UTC",
            "url": "http://113.238.249.145:36319/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 23:13:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808285/",
            "reporter": "geenensp"
        }
    ],
    "3808284": [
        {
            "dateadded": "2026-03-30 09:53:10 UTC",
            "url": "https://urbanvoya.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:53:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808284/",
            "reporter": "anonymous"
        }
    ],
    "3808283": [
        {
            "dateadded": "2026-03-30 09:52:30 UTC",
            "url": "http://59.93.72.156:54607/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:52:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808283/",
            "reporter": "geenensp"
        }
    ],
    "3808282": [
        {
            "dateadded": "2026-03-30 09:48:08 UTC",
            "url": "http://27.215.212.47:44383/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:58:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808282/",
            "reporter": "geenensp"
        }
    ],
    "3808281": [
        {
            "dateadded": "2026-03-30 09:47:09 UTC",
            "url": "https://lwvkfb.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808281/",
            "reporter": "anonymous"
        }
    ],
    "3808279": [
        {
            "dateadded": "2026-03-30 09:43:07 UTC",
            "url": "https://raw.githubusercontent.com/skullzoinks/RealDesk/refs/heads/main/lib/features/xbox/Real_Desk_nostrum.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 06:58:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808279/",
            "reporter": "tcains1"
        }
    ],
    "3808280": [
        {
            "dateadded": "2026-03-30 09:43:07 UTC",
            "url": "https://github.com/skullzoinks/RealDesk/raw/refs/heads/main/lib/features/xbox/Real_Desk_nostrum.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 04:33:52 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808280/",
            "reporter": "tcains1"
        }
    ],
    "3808269": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://github.com/Lordjos16/PixelBuddy/raw/refs/heads/main/PixelBuddy/Buddy_Pixel_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 04:24:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808269/",
            "reporter": "tcains1"
        }
    ],
    "3808270": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://raw.githubusercontent.com/Lordjos16/PixelBuddy/refs/heads/main/PixelBuddy/Buddy_Pixel_v2.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:49:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808270/",
            "reporter": "tcains1"
        }
    ],
    "3808271": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://raw.githubusercontent.com/aybibilalkali/nokia-book/refs/heads/master/03/minik/examples/book-nokia-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:14:29 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808271/",
            "reporter": "tcains1"
        }
    ],
    "3808272": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://raw.githubusercontent.com/Inevitable-Code101/game-hub/refs/heads/main/game-site-fire/src/components/UpdateInfo/hub_game_chloropalladates.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:46:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808272/",
            "reporter": "tcains1"
        }
    ],
    "3808273": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://raw.githubusercontent.com/Dannyjune79/TangNano20K-Pooyan/refs/heads/main/TN20K-Pooyan/schematics/Pooyan-Tang-Nano-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:04:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808273/",
            "reporter": "tcains1"
        }
    ],
    "3808274": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://raw.githubusercontent.com/aybibilalkali/blooket/refs/heads/master/thrasonic/Software_perfoliation.zip",
            "url_status": "online",
            "last_online": "2026-04-27 14:27:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808274/",
            "reporter": "tcains1"
        }
    ],
    "3808275": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://github.com/Inevitable-Code101/game-hub/raw/refs/heads/main/game-site-fire/src/components/UpdateInfo/hub_game_chloropalladates.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 04:26:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808275/",
            "reporter": "tcains1"
        }
    ],
    "3808276": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://github.com/aybibilalkali/nokia-book/raw/refs/heads/master/03/minik/examples/book-nokia-2.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:10:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808276/",
            "reporter": "tcains1"
        }
    ],
    "3808277": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://github.com/Dannyjune79/TangNano20K-Pooyan/raw/refs/heads/main/TN20K-Pooyan/schematics/Pooyan-Tang-Nano-v3.7.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808277/",
            "reporter": "tcains1"
        }
    ],
    "3808278": [
        {
            "dateadded": "2026-03-30 09:41:09 UTC",
            "url": "https://github.com/aybibilalkali/blooket/raw/refs/heads/master/thrasonic/Software_perfoliation.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808278/",
            "reporter": "tcains1"
        }
    ],
    "3808268": [
        {
            "dateadded": "2026-03-30 09:39:07 UTC",
            "url": "https://subtlsegme.foxrunet.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808268/",
            "reporter": "anonymous"
        }
    ],
    "3808267": [
        {
            "dateadded": "2026-03-30 09:33:07 UTC",
            "url": "https://11kzvq.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808267/",
            "reporter": "anonymous"
        }
    ],
    "3808266": [
        {
            "dateadded": "2026-03-30 09:32:08 UTC",
            "url": "http://117.215.63.228:58118/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:32:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808266/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808265": [
        {
            "dateadded": "2026-03-30 09:27:10 UTC",
            "url": "https://wpx3375n.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808265/",
            "reporter": "anonymous"
        }
    ],
    "3808264": [
        {
            "dateadded": "2026-03-30 09:24:29 UTC",
            "url": "http://27.37.78.58:40510/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:32:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808264/",
            "reporter": "geenensp"
        }
    ],
    "3808263": [
        {
            "dateadded": "2026-03-30 09:19:09 UTC",
            "url": "https://riverrefine.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808263/",
            "reporter": "anonymous"
        }
    ],
    "3808262": [
        {
            "dateadded": "2026-03-30 09:13:09 UTC",
            "url": "https://hyper-4uth.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 09:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808262/",
            "reporter": "anonymous"
        }
    ],
    "3808260": [
        {
            "dateadded": "2026-03-30 09:07:08 UTC",
            "url": "http://123.8.9.140:39071/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:13:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808260/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808261": [
        {
            "dateadded": "2026-03-30 09:07:08 UTC",
            "url": "https://filteglob.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:56:51 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808261/",
            "reporter": "anonymous"
        }
    ],
    "3808259": [
        {
            "dateadded": "2026-03-30 09:02:08 UTC",
            "url": "http://202.1.26.13:58399/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:18:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808259/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808258": [
        {
            "dateadded": "2026-03-30 08:59:08 UTC",
            "url": "https://runwaypublic.oakwhisper.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:59:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808258/",
            "reporter": "anonymous"
        }
    ],
    "3808257": [
        {
            "dateadded": "2026-03-30 08:53:09 UTC",
            "url": "https://vmcs.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808257/",
            "reporter": "anonymous"
        }
    ],
    "3808256": [
        {
            "dateadded": "2026-03-30 08:46:08 UTC",
            "url": "https://tal-venal.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808256/",
            "reporter": "anonymous"
        }
    ],
    "3808255": [
        {
            "dateadded": "2026-03-30 08:45:10 UTC",
            "url": "http://110.38.199.22:59415/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:21:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808255/",
            "reporter": "geenensp"
        }
    ],
    "3808254": [
        {
            "dateadded": "2026-03-30 08:43:16 UTC",
            "url": "http://123.130.205.114:46464/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:36:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808254/",
            "reporter": "geenensp"
        }
    ],
    "3808253": [
        {
            "dateadded": "2026-03-30 08:42:10 UTC",
            "url": "http://123.8.9.140:39071/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:47:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808253/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808252": [
        {
            "dateadded": "2026-03-30 08:40:11 UTC",
            "url": "https://wgyinknm.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808252/",
            "reporter": "anonymous"
        }
    ],
    "3808251": [
        {
            "dateadded": "2026-03-30 08:37:39 UTC",
            "url": "http://103.44.136.227:44665/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:24:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808251/",
            "reporter": "geenensp"
        }
    ],
    "3808250": [
        {
            "dateadded": "2026-03-30 08:34:19 UTC",
            "url": "http://46.163.134.250:57652/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:17:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808250/",
            "reporter": "geenensp"
        }
    ],
    "3808249": [
        {
            "dateadded": "2026-03-30 08:33:11 UTC",
            "url": "https://screennotify.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:33:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808249/",
            "reporter": "anonymous"
        }
    ],
    "3808248": [
        {
            "dateadded": "2026-03-30 08:32:07 UTC",
            "url": "http://85.12.204.206:58288/i",
            "url_status": "offline",
            "last_online": "2026-04-02 03:28:13 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808248/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808247": [
        {
            "dateadded": "2026-03-30 08:26:09 UTC",
            "url": "https://cell-plate.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808247/",
            "reporter": "anonymous"
        }
    ],
    "3808246": [
        {
            "dateadded": "2026-03-30 08:22:05 UTC",
            "url": "http://85.239.147.6/files/7411337060/M94scZj.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808246/",
            "reporter": "Bitsight"
        }
    ],
    "3808245": [
        {
            "dateadded": "2026-03-30 08:20:11 UTC",
            "url": "https://n73pw.br1ghtmere.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808245/",
            "reporter": "anonymous"
        }
    ],
    "3808244": [
        {
            "dateadded": "2026-03-30 08:13:08 UTC",
            "url": "https://aftwizk.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808244/",
            "reporter": "anonymous"
        }
    ],
    "3808243": [
        {
            "dateadded": "2026-03-30 08:12:17 UTC",
            "url": "http://117.209.19.85:51445/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:18:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808243/",
            "reporter": "geenensp"
        }
    ],
    "3808242": [
        {
            "dateadded": "2026-03-30 08:11:06 UTC",
            "url": "http://46.163.134.250:57652/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:25:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808242/",
            "reporter": "geenensp"
        }
    ],
    "3808241": [
        {
            "dateadded": "2026-03-30 08:06:08 UTC",
            "url": "https://zencrestal2.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808241/",
            "reporter": "anonymous"
        }
    ],
    "3808240": [
        {
            "dateadded": "2026-03-30 08:05:19 UTC",
            "url": "http://42.230.42.4:37422/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808240/",
            "reporter": "geenensp"
        }
    ],
    "3808239": [
        {
            "dateadded": "2026-03-30 08:04:18 UTC",
            "url": "http://42.228.34.149:43406/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:01:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808239/",
            "reporter": "geenensp"
        }
    ],
    "3808238": [
        {
            "dateadded": "2026-03-30 08:00:09 UTC",
            "url": "https://icegold.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 08:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808238/",
            "reporter": "anonymous"
        }
    ],
    "3808237": [
        {
            "dateadded": "2026-03-30 07:56:15 UTC",
            "url": "http://117.209.9.20:45431/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:56:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808237/",
            "reporter": "geenensp"
        }
    ],
    "3808236": [
        {
            "dateadded": "2026-03-30 07:54:07 UTC",
            "url": "https://80tlyi.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808236/",
            "reporter": "anonymous"
        }
    ],
    "3808235": [
        {
            "dateadded": "2026-03-30 07:52:22 UTC",
            "url": "http://61.1.238.186:42774/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:52:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808235/",
            "reporter": "geenensp"
        }
    ],
    "3808234": [
        {
            "dateadded": "2026-03-30 07:51:23 UTC",
            "url": "http://117.209.19.85:51445/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808234/",
            "reporter": "geenensp"
        }
    ],
    "3808233": [
        {
            "dateadded": "2026-03-30 07:47:08 UTC",
            "url": "https://vvave3-gate.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808233/",
            "reporter": "anonymous"
        }
    ],
    "3808232": [
        {
            "dateadded": "2026-03-30 07:45:14 UTC",
            "url": "http://110.38.199.22:59415/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:48:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808232/",
            "reporter": "geenensp"
        }
    ],
    "3808231": [
        {
            "dateadded": "2026-03-30 07:41:10 UTC",
            "url": "http://110.37.123.237:36170/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:09:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808231/",
            "reporter": "geenensp"
        }
    ],
    "3808230": [
        {
            "dateadded": "2026-03-30 07:40:10 UTC",
            "url": "https://lumvale8is.starforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808230/",
            "reporter": "anonymous"
        }
    ],
    "3808229": [
        {
            "dateadded": "2026-03-30 07:39:23 UTC",
            "url": "http://42.228.34.149:43406/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 03:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808229/",
            "reporter": "geenensp"
        }
    ],
    "3808228": [
        {
            "dateadded": "2026-03-30 07:38:21 UTC",
            "url": "http://222.246.43.2:37369/i",
            "url_status": "offline",
            "last_online": "2026-04-12 14:32:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808228/",
            "reporter": "geenensp"
        }
    ],
    "3808227": [
        {
            "dateadded": "2026-03-30 07:34:07 UTC",
            "url": "https://resource-api.infrastructurehub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808227/",
            "reporter": "anonymous"
        }
    ],
    "3808226": [
        {
            "dateadded": "2026-03-30 07:28:10 UTC",
            "url": "http://59.96.140.17:33548/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808226/",
            "reporter": "geenensp"
        }
    ],
    "3808225": [
        {
            "dateadded": "2026-03-30 07:27:10 UTC",
            "url": "https://power-plant.infrastructurehub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808225/",
            "reporter": "anonymous"
        }
    ],
    "3808224": [
        {
            "dateadded": "2026-03-30 07:22:09 UTC",
            "url": "http://27.215.80.14:57739/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:12:41 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808224/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808223": [
        {
            "dateadded": "2026-03-30 07:19:19 UTC",
            "url": "http://222.246.43.2:37369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 16:20:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808223/",
            "reporter": "geenensp"
        }
    ],
    "3808222": [
        {
            "dateadded": "2026-03-30 07:19:08 UTC",
            "url": "https://asset-track.infrastructurehub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808222/",
            "reporter": "anonymous"
        }
    ],
    "3808220": [
        {
            "dateadded": "2026-03-30 07:18:08 UTC",
            "url": "http://147.45.60.206/arm4k",
            "url_status": "offline",
            "last_online": "2026-04-18 04:55:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808220/",
            "reporter": "abuse_ch"
        }
    ],
    "3808221": [
        {
            "dateadded": "2026-03-30 07:18:08 UTC",
            "url": "http://192.227.183.143/ISIS.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 16:28:05 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808221/",
            "reporter": "adliwahid"
        }
    ],
    "3808219": [
        {
            "dateadded": "2026-03-30 07:17:37 UTC",
            "url": "http://117.212.52.53:59977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 07:17:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808219/",
            "reporter": "geenensp"
        }
    ],
    "3808218": [
        {
            "dateadded": "2026-03-30 07:17:15 UTC",
            "url": "http://cn.bossjy.cc.cd/bot.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808218/",
            "reporter": "adliwahid"
        }
    ],
    "3808210": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-27 06:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808210/",
            "reporter": "adliwahid"
        }
    ],
    "3808211": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.m68k",
            "url_status": "offline",
            "last_online": "2026-04-27 05:25:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808211/",
            "reporter": "adliwahid"
        }
    ],
    "3808212": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.ppc",
            "url_status": "offline",
            "last_online": "2026-04-27 05:38:59 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808212/",
            "reporter": "adliwahid"
        }
    ],
    "3808213": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.arm64",
            "url_status": "offline",
            "last_online": "2026-04-27 05:06:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808213/",
            "reporter": "adliwahid"
        }
    ],
    "3808214": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.x86",
            "url_status": "offline",
            "last_online": "2026-04-27 05:09:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808214/",
            "reporter": "adliwahid"
        }
    ],
    "3808215": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.arm",
            "url_status": "offline",
            "last_online": "2026-04-27 06:26:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808215/",
            "reporter": "adliwahid"
        }
    ],
    "3808216": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://142.248.80.144/lol.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:42:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808216/",
            "reporter": "adliwahid"
        }
    ],
    "3808217": [
        {
            "dateadded": "2026-03-30 07:17:12 UTC",
            "url": "http://83.142.209.47/x86_64",
            "url_status": "offline",
            "last_online": "2026-04-07 03:56:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808217/",
            "reporter": "adliwahid"
        }
    ],
    "3808201": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://194.163.151.12/all.sh",
            "url_status": "offline",
            "last_online": "2026-04-27 05:44:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808201/",
            "reporter": "adliwahid"
        }
    ],
    "3808202": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.arm7",
            "url_status": "offline",
            "last_online": "2026-04-27 05:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808202/",
            "reporter": "adliwahid"
        }
    ],
    "3808203": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.arm5",
            "url_status": "offline",
            "last_online": "2026-04-27 05:30:00 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808203/",
            "reporter": "adliwahid"
        }
    ],
    "3808204": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.i686",
            "url_status": "offline",
            "last_online": "2026-04-27 05:58:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808204/",
            "reporter": "adliwahid"
        }
    ],
    "3808205": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.arc",
            "url_status": "offline",
            "last_online": "2026-04-27 06:29:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808205/",
            "reporter": "adliwahid"
        }
    ],
    "3808206": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.mips",
            "url_status": "offline",
            "last_online": "2026-04-27 06:11:21 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808206/",
            "reporter": "adliwahid"
        }
    ],
    "3808207": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.arm6",
            "url_status": "offline",
            "last_online": "2026-04-27 06:24:37 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808207/",
            "reporter": "adliwahid"
        }
    ],
    "3808208": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.sh4",
            "url_status": "offline",
            "last_online": "2026-04-27 06:22:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808208/",
            "reporter": "adliwahid"
        }
    ],
    "3808209": [
        {
            "dateadded": "2026-03-30 07:17:11 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-27 05:27:04 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808209/",
            "reporter": "adliwahid"
        }
    ],
    "3808199": [
        {
            "dateadded": "2026-03-30 07:16:21 UTC",
            "url": "http://121.127.34.138/hiddenbin/boatnet.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808199/",
            "reporter": "abuse_ch"
        }
    ],
    "3808200": [
        {
            "dateadded": "2026-03-30 07:16:21 UTC",
            "url": "http://110.37.123.237:36170/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:57:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808200/",
            "reporter": "geenensp"
        }
    ],
    "3808194": [
        {
            "dateadded": "2026-03-30 07:16:20 UTC",
            "url": "http://87.120.191.32/nuclear.sparc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808194/",
            "reporter": "abuse_ch"
        }
    ],
    "3808195": [
        {
            "dateadded": "2026-03-30 07:16:20 UTC",
            "url": "http://87.120.191.32/nuclear.i586",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808195/",
            "reporter": "abuse_ch"
        }
    ],
    "3808196": [
        {
            "dateadded": "2026-03-30 07:16:20 UTC",
            "url": "http://165.22.252.236/windyloveyou/windy.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808196/",
            "reporter": "abuse_ch"
        }
    ],
    "3808197": [
        {
            "dateadded": "2026-03-30 07:16:20 UTC",
            "url": "http://121.127.34.138/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808197/",
            "reporter": "abuse_ch"
        }
    ],
    "3808198": [
        {
            "dateadded": "2026-03-30 07:16:20 UTC",
            "url": "http://121.127.34.138/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808198/",
            "reporter": "abuse_ch"
        }
    ],
    "3808189": [
        {
            "dateadded": "2026-03-30 07:16:08 UTC",
            "url": "http://147.45.60.206/arm7k",
            "url_status": "offline",
            "last_online": "2026-04-18 04:43:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808189/",
            "reporter": "abuse_ch"
        }
    ],
    "3808190": [
        {
            "dateadded": "2026-03-30 07:16:08 UTC",
            "url": "http://147.45.60.206/mpslk",
            "url_status": "offline",
            "last_online": "2026-04-18 05:33:26 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808190/",
            "reporter": "abuse_ch"
        }
    ],
    "3808191": [
        {
            "dateadded": "2026-03-30 07:16:08 UTC",
            "url": "http://147.45.60.206/mipsk",
            "url_status": "offline",
            "last_online": "2026-04-18 05:01:22 UTC",
            "threat": "malware_download",
            "tags": [
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808191/",
            "reporter": "abuse_ch"
        }
    ],
    "3808192": [
        {
            "dateadded": "2026-03-30 07:16:08 UTC",
            "url": "http://147.45.60.206/arm5k",
            "url_status": "offline",
            "last_online": "2026-04-18 04:47:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808192/",
            "reporter": "abuse_ch"
        }
    ],
    "3808193": [
        {
            "dateadded": "2026-03-30 07:16:08 UTC",
            "url": "http://45.139.104.122/arc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808193/",
            "reporter": "abuse_ch"
        }
    ],
    "3808186": [
        {
            "dateadded": "2026-03-30 07:16:07 UTC",
            "url": "http://194.163.151.12/titanjr.",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808186/",
            "reporter": "abuse_ch"
        }
    ],
    "3808187": [
        {
            "dateadded": "2026-03-30 07:16:07 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808187/",
            "reporter": "abuse_ch"
        }
    ],
    "3808188": [
        {
            "dateadded": "2026-03-30 07:16:07 UTC",
            "url": "http://142.248.80.144/lemperluvkurayami/kurayami.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808188/",
            "reporter": "abuse_ch"
        }
    ],
    "3808185": [
        {
            "dateadded": "2026-03-30 07:16:06 UTC",
            "url": "http://87.120.191.32/nuclear.mipsel",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808185/",
            "reporter": "abuse_ch"
        }
    ],
    "3808180": [
        {
            "dateadded": "2026-03-30 07:16:05 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.arc",
            "url_status": "offline",
            "last_online": "2026-04-13 11:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808180/",
            "reporter": "abuse_ch"
        }
    ],
    "3808181": [
        {
            "dateadded": "2026-03-30 07:16:05 UTC",
            "url": "http://176.65.139.81/huhu/titanjr.",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808181/",
            "reporter": "abuse_ch"
        }
    ],
    "3808182": [
        {
            "dateadded": "2026-03-30 07:16:05 UTC",
            "url": "http://143.20.185.225/dl.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808182/",
            "reporter": "abuse_ch"
        }
    ],
    "3808183": [
        {
            "dateadded": "2026-03-30 07:16:05 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808183/",
            "reporter": "abuse_ch"
        }
    ],
    "3808184": [
        {
            "dateadded": "2026-03-30 07:16:05 UTC",
            "url": "http://38.83.138.59:25884/nz.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808184/",
            "reporter": "abuse_ch"
        }
    ],
    "3808179": [
        {
            "dateadded": "2026-03-30 07:14:21 UTC",
            "url": "https://jieqaingdaolu.com/tc/FVDEHqlqwcSnwX33.bin",
            "url_status": "offline",
            "last_online": "2026-03-31 04:38:28 UTC",
            "threat": "malware_download",
            "tags": [
                "encrypted",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808179/",
            "reporter": "abuse_ch"
        }
    ],
    "3808178": [
        {
            "dateadded": "2026-03-30 07:14:07 UTC",
            "url": "https://jieqaingdaolu.com/tc.php",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ascii",
                "Encoded",
                "GuLoader",
                "rat",
                "RemcosRAT"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808178/",
            "reporter": "abuse_ch"
        }
    ],
    "3808176": [
        {
            "dateadded": "2026-03-30 07:12:08 UTC",
            "url": "https://base-build.infrastructurehub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808176/",
            "reporter": "anonymous"
        }
    ],
    "3808177": [
        {
            "dateadded": "2026-03-30 07:12:08 UTC",
            "url": "http://27.215.80.14:57739/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808177/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808175": [
        {
            "dateadded": "2026-03-30 07:09:11 UTC",
            "url": "http://222.127.76.40:50184/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:18:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808175/",
            "reporter": "geenensp"
        }
    ],
    "3808174": [
        {
            "dateadded": "2026-03-30 07:09:10 UTC",
            "url": "http://59.96.140.17:33548/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 07:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808174/",
            "reporter": "geenensp"
        }
    ],
    "3808173": [
        {
            "dateadded": "2026-03-30 07:07:07 UTC",
            "url": "http://85.140.44.96:38108/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:06:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808173/",
            "reporter": "adliwahid"
        }
    ],
    "3808170": [
        {
            "dateadded": "2026-03-30 07:06:07 UTC",
            "url": "http://125.44.43.117:52605/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:55:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808170/",
            "reporter": "adliwahid"
        }
    ],
    "3808171": [
        {
            "dateadded": "2026-03-30 07:06:07 UTC",
            "url": "http://124.129.179.12:35585/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:54:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808171/",
            "reporter": "adliwahid"
        }
    ],
    "3808172": [
        {
            "dateadded": "2026-03-30 07:06:07 UTC",
            "url": "http://27.37.76.184:53155/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 17:28:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808172/",
            "reporter": "adliwahid"
        }
    ],
    "3808169": [
        {
            "dateadded": "2026-03-30 07:05:12 UTC",
            "url": "http://59.183.140.157:55888/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:05:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808169/",
            "reporter": "adliwahid"
        }
    ],
    "3808168": [
        {
            "dateadded": "2026-03-30 07:05:11 UTC",
            "url": "http://124.129.179.12:35585/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:33:05 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808168/",
            "reporter": "adliwahid"
        }
    ],
    "3808166": [
        {
            "dateadded": "2026-03-30 07:05:10 UTC",
            "url": "http://42.6.54.107:57753/i",
            "url_status": "offline",
            "last_online": "2026-04-11 22:21:34 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808166/",
            "reporter": "adliwahid"
        }
    ],
    "3808167": [
        {
            "dateadded": "2026-03-30 07:05:10 UTC",
            "url": "http://114.233.77.23:52328/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 22:59:46 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808167/",
            "reporter": "adliwahid"
        }
    ],
    "3808165": [
        {
            "dateadded": "2026-03-30 07:05:09 UTC",
            "url": "http://212.39.79.233:1998/.i",
            "url_status": "offline",
            "last_online": "2026-04-13 22:12:53 UTC",
            "threat": "malware_download",
            "tags": [
                "hajime"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808165/",
            "reporter": "adliwahid"
        }
    ],
    "3808163": [
        {
            "dateadded": "2026-03-30 07:04:22 UTC",
            "url": "http://123.188.217.174:36511/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 10:23:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808163/",
            "reporter": "adliwahid"
        }
    ],
    "3808164": [
        {
            "dateadded": "2026-03-30 07:04:22 UTC",
            "url": "http://149.3.101.219:55900/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808164/",
            "reporter": "adliwahid"
        }
    ],
    "3808162": [
        {
            "dateadded": "2026-03-30 07:04:12 UTC",
            "url": "https://solid-state.infrastructurehub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 07:04:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808162/",
            "reporter": "anonymous"
        }
    ],
    "3808155": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://110.37.72.176:53178/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808155/",
            "reporter": "adliwahid"
        }
    ],
    "3808156": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://42.6.54.107:57753/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 21:59:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808156/",
            "reporter": "adliwahid"
        }
    ],
    "3808157": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://113.239.213.228:59874/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:55:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808157/",
            "reporter": "adliwahid"
        }
    ],
    "3808158": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://85.166.152.13:39662/i",
            "url_status": "offline",
            "last_online": "2026-03-31 21:29:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808158/",
            "reporter": "adliwahid"
        }
    ],
    "3808159": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://182.126.80.129:42972/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808159/",
            "reporter": "adliwahid"
        }
    ],
    "3808160": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://114.233.77.23:52328/i",
            "url_status": "offline",
            "last_online": "2026-04-10 22:45:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808160/",
            "reporter": "adliwahid"
        }
    ],
    "3808161": [
        {
            "dateadded": "2026-03-30 07:04:10 UTC",
            "url": "http://182.126.80.129:42972/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:38:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808161/",
            "reporter": "adliwahid"
        }
    ],
    "3808154": [
        {
            "dateadded": "2026-03-30 07:04:08 UTC",
            "url": "http://90.224.208.190:45821/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:45:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808154/",
            "reporter": "adliwahid"
        }
    ],
    "3808153": [
        {
            "dateadded": "2026-03-30 06:57:10 UTC",
            "url": "https://heavy-duty.infrastructurehub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808153/",
            "reporter": "anonymous"
        }
    ],
    "3808152": [
        {
            "dateadded": "2026-03-30 06:50:24 UTC",
            "url": "http://117.209.9.20:45431/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 06:50:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808152/",
            "reporter": "geenensp"
        }
    ],
    "3808151": [
        {
            "dateadded": "2026-03-30 06:50:19 UTC",
            "url": "http://42.54.200.69:58778/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808151/",
            "reporter": "geenensp"
        }
    ],
    "3808150": [
        {
            "dateadded": "2026-03-30 06:49:11 UTC",
            "url": "https://form-builder.municipalmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808150/",
            "reporter": "anonymous"
        }
    ],
    "3808149": [
        {
            "dateadded": "2026-03-30 06:47:07 UTC",
            "url": "http://24.44.175.24:32910/i",
            "url_status": "offline",
            "last_online": "2026-04-03 15:27:31 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808149/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808148": [
        {
            "dateadded": "2026-03-30 06:42:28 UTC",
            "url": "http://110.138.135.27:45248/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:03:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808148/",
            "reporter": "geenensp"
        }
    ],
    "3808147": [
        {
            "dateadded": "2026-03-30 06:42:10 UTC",
            "url": "http://24.44.175.24:32910/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 16:43:33 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808147/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808146": [
        {
            "dateadded": "2026-03-30 06:41:08 UTC",
            "url": "https://code-index.municipalmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808146/",
            "reporter": "anonymous"
        }
    ],
    "3808145": [
        {
            "dateadded": "2026-03-30 06:40:13 UTC",
            "url": "http://125.44.43.117:52605/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:28:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808145/",
            "reporter": "geenensp"
        }
    ],
    "3808144": [
        {
            "dateadded": "2026-03-30 06:38:23 UTC",
            "url": "http://106.58.126.176:49667/i",
            "url_status": "offline",
            "last_online": "2026-04-02 00:02:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808144/",
            "reporter": "geenensp"
        }
    ],
    "3808143": [
        {
            "dateadded": "2026-03-30 06:33:07 UTC",
            "url": "https://auth-trust.municipalmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808143/",
            "reporter": "anonymous"
        }
    ],
    "3808142": [
        {
            "dateadded": "2026-03-30 06:31:20 UTC",
            "url": "http://125.47.35.45:48777/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808142/",
            "reporter": "geenensp"
        }
    ],
    "3808141": [
        {
            "dateadded": "2026-03-30 06:29:20 UTC",
            "url": "http://42.5.79.95:55183/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:53:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808141/",
            "reporter": "geenensp"
        }
    ],
    "3808139": [
        {
            "dateadded": "2026-03-30 06:27:25 UTC",
            "url": "http://119.179.252.70:54627/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:57:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808139/",
            "reporter": "geenensp"
        }
    ],
    "3808140": [
        {
            "dateadded": "2026-03-30 06:27:25 UTC",
            "url": "http://42.224.170.125:44892/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:44:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808140/",
            "reporter": "geenensp"
        }
    ],
    "3808138": [
        {
            "dateadded": "2026-03-30 06:27:07 UTC",
            "url": "http://45.153.34.209:5000/storage/6f675d51cb094e0f.enc",
            "url_status": "offline",
            "last_online": "2026-03-30 06:27:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808138/",
            "reporter": "abuse_ch"
        }
    ],
    "3808134": [
        {
            "dateadded": "2026-03-30 06:27:06 UTC",
            "url": "http://45.153.34.209:5000/storage/a068699010734e6d.jar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808134/",
            "reporter": "abuse_ch"
        }
    ],
    "3808135": [
        {
            "dateadded": "2026-03-30 06:27:06 UTC",
            "url": "http://45.153.34.209:5000/storage/06d00e3f266343c0.jar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808135/",
            "reporter": "abuse_ch"
        }
    ],
    "3808136": [
        {
            "dateadded": "2026-03-30 06:27:06 UTC",
            "url": "http://45.153.34.209:5000/storage/3d98f65dbb44491e.jar",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808136/",
            "reporter": "abuse_ch"
        }
    ],
    "3808137": [
        {
            "dateadded": "2026-03-30 06:27:06 UTC",
            "url": "http://45.153.34.209:5000/storage/c68c92c7b9974302.enc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808137/",
            "reporter": "abuse_ch"
        }
    ],
    "3808133": [
        {
            "dateadded": "2026-03-30 06:26:08 UTC",
            "url": "https://citizen-dev.municipalmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808133/",
            "reporter": "anonymous"
        }
    ],
    "3808132": [
        {
            "dateadded": "2026-03-30 06:25:24 UTC",
            "url": "http://42.224.170.125:44892/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:10:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808132/",
            "reporter": "geenensp"
        }
    ],
    "3808121": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.x86_64",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808121/",
            "reporter": "adliwahid"
        }
    ],
    "3808122": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.i686",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808122/",
            "reporter": "adliwahid"
        }
    ],
    "3808123": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.arm7",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808123/",
            "reporter": "adliwahid"
        }
    ],
    "3808124": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.arm6",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808124/",
            "reporter": "adliwahid"
        }
    ],
    "3808125": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.arm",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808125/",
            "reporter": "adliwahid"
        }
    ],
    "3808126": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.spc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808126/",
            "reporter": "adliwahid"
        }
    ],
    "3808127": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.arm5",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808127/",
            "reporter": "adliwahid"
        }
    ],
    "3808128": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.ppc",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808128/",
            "reporter": "adliwahid"
        }
    ],
    "3808129": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.mpsl",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808129/",
            "reporter": "adliwahid"
        }
    ],
    "3808130": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.m68k",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808130/",
            "reporter": "adliwahid"
        }
    ],
    "3808131": [
        {
            "dateadded": "2026-03-30 06:22:22 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.sh4",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808131/",
            "reporter": "adliwahid"
        }
    ],
    "3808120": [
        {
            "dateadded": "2026-03-30 06:22:10 UTC",
            "url": "http://42.54.200.69:58778/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:50:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808120/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808119": [
        {
            "dateadded": "2026-03-30 06:22:09 UTC",
            "url": "http://125.44.193.224:41136/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 17:01:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808119/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808118": [
        {
            "dateadded": "2026-03-30 06:22:08 UTC",
            "url": "http://web-captcha.cc/verification.google",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808118/",
            "reporter": "JAMESWT_WT"
        }
    ],
    "3808117": [
        {
            "dateadded": "2026-03-30 06:19:08 UTC",
            "url": "https://town-council.municipalmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808117/",
            "reporter": "anonymous"
        }
    ],
    "3808116": [
        {
            "dateadded": "2026-03-30 06:11:08 UTC",
            "url": "https://public-serv.municipalmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808116/",
            "reporter": "anonymous"
        }
    ],
    "3808115": [
        {
            "dateadded": "2026-03-30 06:05:17 UTC",
            "url": "http://125.47.35.45:48777/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:34:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808115/",
            "reporter": "geenensp"
        }
    ],
    "3808114": [
        {
            "dateadded": "2026-03-30 06:04:08 UTC",
            "url": "https://reach-base.territoriallink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 06:04:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808114/",
            "reporter": "anonymous"
        }
    ],
    "3808113": [
        {
            "dateadded": "2026-03-30 06:03:37 UTC",
            "url": "http://106.58.126.176:49667/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808113/",
            "reporter": "geenensp"
        }
    ],
    "3808112": [
        {
            "dateadded": "2026-03-30 06:01:12 UTC",
            "url": "http://42.4.107.157:38819/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:37:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808112/",
            "reporter": "geenensp"
        }
    ],
    "3808111": [
        {
            "dateadded": "2026-03-30 05:57:07 UTC",
            "url": "http://69.173.182.43:48089/i",
            "url_status": "offline",
            "last_online": "2026-04-01 15:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808111/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808110": [
        {
            "dateadded": "2026-03-30 05:56:21 UTC",
            "url": "http://45.232.75.59:52767/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:31:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808110/",
            "reporter": "geenensp"
        }
    ],
    "3808109": [
        {
            "dateadded": "2026-03-30 05:56:11 UTC",
            "url": "https://map-anchor.territoriallink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808109/",
            "reporter": "anonymous"
        }
    ],
    "3808108": [
        {
            "dateadded": "2026-03-30 05:50:16 UTC",
            "url": "http://45.171.177.193:53471/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:47:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808108/",
            "reporter": "geenensp"
        }
    ],
    "3808107": [
        {
            "dateadded": "2026-03-30 05:48:09 UTC",
            "url": "https://site-connect.territoriallink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808107/",
            "reporter": "anonymous"
        }
    ],
    "3808106": [
        {
            "dateadded": "2026-03-30 05:41:09 UTC",
            "url": "https://land-mark.territoriallink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808106/",
            "reporter": "anonymous"
        }
    ],
    "3808105": [
        {
            "dateadded": "2026-03-30 05:39:18 UTC",
            "url": "http://120.61.70.227:43301/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 05:39:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808105/",
            "reporter": "geenensp"
        }
    ],
    "3808104": [
        {
            "dateadded": "2026-03-30 05:34:18 UTC",
            "url": "http://39.88.129.19:49537/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:56:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808104/",
            "reporter": "geenensp"
        }
    ],
    "3808103": [
        {
            "dateadded": "2026-03-30 05:32:10 UTC",
            "url": "https://proxy-edge.territoriallink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:32:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808103/",
            "reporter": "anonymous"
        }
    ],
    "3808102": [
        {
            "dateadded": "2026-03-30 05:31:23 UTC",
            "url": "http://42.5.79.95:55183/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 09:46:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808102/",
            "reporter": "geenensp"
        }
    ],
    "3808101": [
        {
            "dateadded": "2026-03-30 05:29:08 UTC",
            "url": "http://45.232.75.59:52767/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:49:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808101/",
            "reporter": "geenensp"
        }
    ],
    "3808100": [
        {
            "dateadded": "2026-03-30 05:25:19 UTC",
            "url": "http://110.37.91.29:50718/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808100/",
            "reporter": "geenensp"
        }
    ],
    "3808099": [
        {
            "dateadded": "2026-03-30 05:25:11 UTC",
            "url": "https://border-gate.territoriallink.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808099/",
            "reporter": "anonymous"
        }
    ],
    "3808098": [
        {
            "dateadded": "2026-03-30 05:17:11 UTC",
            "url": "https://remote-log.regionaltelemetry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:17:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808098/",
            "reporter": "anonymous"
        }
    ],
    "3808097": [
        {
            "dateadded": "2026-03-30 05:11:16 UTC",
            "url": "http://37.76.132.161:40384/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:04:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808097/",
            "reporter": "geenensp"
        }
    ],
    "3808096": [
        {
            "dateadded": "2026-03-30 05:09:09 UTC",
            "url": "http://37.76.132.161:40384/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808096/",
            "reporter": "geenensp"
        }
    ],
    "3808095": [
        {
            "dateadded": "2026-03-30 05:09:07 UTC",
            "url": "https://wave-form.regionaltelemetry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808095/",
            "reporter": "anonymous"
        }
    ],
    "3808094": [
        {
            "dateadded": "2026-03-30 05:08:09 UTC",
            "url": "http://176.226.183.22:50289/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:58:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808094/",
            "reporter": "geenensp"
        }
    ],
    "3808093": [
        {
            "dateadded": "2026-03-30 05:07:18 UTC",
            "url": "http://124.29.223.19:42623/i",
            "url_status": "offline",
            "last_online": "2026-03-30 06:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808093/",
            "reporter": "geenensp"
        }
    ],
    "3808092": [
        {
            "dateadded": "2026-03-30 05:07:06 UTC",
            "url": "http://39.88.129.19:49537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:29:14 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808092/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808091": [
        {
            "dateadded": "2026-03-30 05:05:11 UTC",
            "url": "http://110.37.91.29:50718/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808091/",
            "reporter": "geenensp"
        }
    ],
    "3808090": [
        {
            "dateadded": "2026-03-30 05:04:29 UTC",
            "url": "http://222.136.251.131:41707/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:26:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808090/",
            "reporter": "geenensp"
        }
    ],
    "3808089": [
        {
            "dateadded": "2026-03-30 05:02:10 UTC",
            "url": "https://data-packet.regionaltelemetry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 05:02:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808089/",
            "reporter": "anonymous"
        }
    ],
    "3808088": [
        {
            "dateadded": "2026-03-30 04:58:07 UTC",
            "url": "http://27.216.167.20:58590/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:16:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808088/",
            "reporter": "geenensp"
        }
    ],
    "3808087": [
        {
            "dateadded": "2026-03-30 04:55:09 UTC",
            "url": "https://signal-box.regionaltelemetry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808087/",
            "reporter": "anonymous"
        }
    ],
    "3808086": [
        {
            "dateadded": "2026-03-30 04:50:19 UTC",
            "url": "http://42.232.224.161:41242/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:23:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808086/",
            "reporter": "geenensp"
        }
    ],
    "3808085": [
        {
            "dateadded": "2026-03-30 04:46:07 UTC",
            "url": "https://field-report.regionaltelemetry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808085/",
            "reporter": "anonymous"
        }
    ],
    "3808084": [
        {
            "dateadded": "2026-03-30 04:38:09 UTC",
            "url": "https://wide-telemetry.regionaltelemetry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808084/",
            "reporter": "anonymous"
        }
    ],
    "3808083": [
        {
            "dateadded": "2026-03-30 04:32:12 UTC",
            "url": "https://tunnel-sync.centralizedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808083/",
            "reporter": "anonymous"
        }
    ],
    "3808082": [
        {
            "dateadded": "2026-03-30 04:24:26 UTC",
            "url": "http://115.55.167.26:51704/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:21:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808082/",
            "reporter": "geenensp"
        }
    ],
    "3808081": [
        {
            "dateadded": "2026-03-30 04:24:12 UTC",
            "url": "https://pressure-io.centralizedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:24:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808081/",
            "reporter": "anonymous"
        }
    ],
    "3808080": [
        {
            "dateadded": "2026-03-30 04:17:07 UTC",
            "url": "http://123.245.32.38:49439/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:13:11 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808080/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808079": [
        {
            "dateadded": "2026-03-30 04:16:08 UTC",
            "url": "https://flow-guide.centralizedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808079/",
            "reporter": "anonymous"
        }
    ],
    "3808078": [
        {
            "dateadded": "2026-03-30 04:08:25 UTC",
            "url": "http://124.234.174.62:36200/i",
            "url_status": "offline",
            "last_online": "2026-04-02 13:38:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808078/",
            "reporter": "geenensp"
        }
    ],
    "3808077": [
        {
            "dateadded": "2026-03-30 04:08:07 UTC",
            "url": "https://filter-proc.centralizedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808077/",
            "reporter": "anonymous"
        }
    ],
    "3808076": [
        {
            "dateadded": "2026-03-30 04:01:12 UTC",
            "url": "http://117.216.50.138:33657/i",
            "url_status": "offline",
            "last_online": "2026-03-30 04:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808076/",
            "reporter": "geenensp"
        }
    ],
    "3808075": [
        {
            "dateadded": "2026-03-30 04:00:11 UTC",
            "url": "https://outlet-node.centralizedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 04:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808075/",
            "reporter": "anonymous"
        }
    ],
    "3808074": [
        {
            "dateadded": "2026-03-30 03:52:07 UTC",
            "url": "https://inlet-valve.centralizedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808074/",
            "reporter": "anonymous"
        }
    ],
    "3808073": [
        {
            "dateadded": "2026-03-30 03:49:18 UTC",
            "url": "http://110.37.107.203:59596/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808073/",
            "reporter": "geenensp"
        }
    ],
    "3808072": [
        {
            "dateadded": "2026-03-30 03:46:19 UTC",
            "url": "http://115.55.167.26:51704/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:22:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808072/",
            "reporter": "geenensp"
        }
    ],
    "3808071": [
        {
            "dateadded": "2026-03-30 03:46:10 UTC",
            "url": "https://node-carrier.linearbackbone.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808071/",
            "reporter": "anonymous"
        }
    ],
    "3808070": [
        {
            "dateadded": "2026-03-30 03:42:18 UTC",
            "url": "http://39.87.239.190:47182/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:01:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808070/",
            "reporter": "geenensp"
        }
    ],
    "3808069": [
        {
            "dateadded": "2026-03-30 03:39:19 UTC",
            "url": "http://110.37.95.117:46773/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:01:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808069/",
            "reporter": "geenensp"
        }
    ],
    "3808068": [
        {
            "dateadded": "2026-03-30 03:38:13 UTC",
            "url": "https://main-frame.linearbackbone.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:38:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808068/",
            "reporter": "anonymous"
        }
    ],
    "3808067": [
        {
            "dateadded": "2026-03-30 03:36:22 UTC",
            "url": "http://112.248.114.151:60712/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:54:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808067/",
            "reporter": "geenensp"
        }
    ],
    "3808066": [
        {
            "dateadded": "2026-03-30 03:30:11 UTC",
            "url": "https://fiber-route.linearbackbone.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:30:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808066/",
            "reporter": "anonymous"
        }
    ],
    "3808065": [
        {
            "dateadded": "2026-03-30 03:28:22 UTC",
            "url": "http://38.52.142.194:54949/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:12:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808065/",
            "reporter": "geenensp"
        }
    ],
    "3808064": [
        {
            "dateadded": "2026-03-30 03:27:23 UTC",
            "url": "http://38.52.142.194:54949/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808064/",
            "reporter": "geenensp"
        }
    ],
    "3808063": [
        {
            "dateadded": "2026-03-30 03:23:08 UTC",
            "url": "https://trunk-line.linearbackbone.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808063/",
            "reporter": "anonymous"
        }
    ],
    "3808062": [
        {
            "dateadded": "2026-03-30 03:19:07 UTC",
            "url": "https://path-bridge.linearbackbone.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808062/",
            "reporter": "anonymous"
        }
    ],
    "3808061": [
        {
            "dateadded": "2026-03-30 03:17:18 UTC",
            "url": "http://39.87.239.190:47182/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:50:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808061/",
            "reporter": "geenensp"
        }
    ],
    "3808060": [
        {
            "dateadded": "2026-03-30 03:13:19 UTC",
            "url": "http://78.172.181.187:42299/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:13:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808060/",
            "reporter": "geenensp"
        }
    ],
    "3808059": [
        {
            "dateadded": "2026-03-30 03:11:34 UTC",
            "url": "http://123.130.205.114:46464/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808059/",
            "reporter": "geenensp"
        }
    ],
    "3808058": [
        {
            "dateadded": "2026-03-30 03:06:09 UTC",
            "url": "https://link-secure.linearbackbone.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 03:06:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808058/",
            "reporter": "anonymous"
        }
    ],
    "3808057": [
        {
            "dateadded": "2026-03-30 03:05:16 UTC",
            "url": "http://78.172.181.187:42299/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 04:02:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808057/",
            "reporter": "geenensp"
        }
    ],
    "3808056": [
        {
            "dateadded": "2026-03-30 03:01:09 UTC",
            "url": "http://61.53.90.238:58076/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:27:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808056/",
            "reporter": "geenensp"
        }
    ],
    "3808055": [
        {
            "dateadded": "2026-03-30 02:59:06 UTC",
            "url": "https://task-logic.sectoralcontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:59:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808055/",
            "reporter": "anonymous"
        }
    ],
    "3808054": [
        {
            "dateadded": "2026-03-30 02:51:07 UTC",
            "url": "https://switch-gear.sectoralcontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:51:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808054/",
            "reporter": "anonymous"
        }
    ],
    "3808053": [
        {
            "dateadded": "2026-03-30 02:48:11 UTC",
            "url": "http://110.39.244.198:40172/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:22:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808053/",
            "reporter": "geenensp"
        }
    ],
    "3808052": [
        {
            "dateadded": "2026-03-30 02:47:08 UTC",
            "url": "http://110.37.32.92:51410/i",
            "url_status": "offline",
            "last_online": "2026-03-30 02:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808052/",
            "reporter": "geenensp"
        }
    ],
    "3808051": [
        {
            "dateadded": "2026-03-30 02:44:07 UTC",
            "url": "https://system-core.sectoralcontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808051/",
            "reporter": "anonymous"
        }
    ],
    "3808050": [
        {
            "dateadded": "2026-03-30 02:43:10 UTC",
            "url": "http://61.53.90.238:58076/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:50:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808050/",
            "reporter": "geenensp"
        }
    ],
    "3808049": [
        {
            "dateadded": "2026-03-30 02:40:18 UTC",
            "url": "http://175.150.114.184:53561/i",
            "url_status": "offline",
            "last_online": "2026-04-05 06:07:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808049/",
            "reporter": "geenensp"
        }
    ],
    "3808048": [
        {
            "dateadded": "2026-03-30 02:36:08 UTC",
            "url": "https://remote-desk.sectoralcontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808048/",
            "reporter": "anonymous"
        }
    ],
    "3808047": [
        {
            "dateadded": "2026-03-30 02:35:18 UTC",
            "url": "http://115.62.15.6:60177/i",
            "url_status": "offline",
            "last_online": "2026-03-31 19:30:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808047/",
            "reporter": "geenensp"
        }
    ],
    "3808046": [
        {
            "dateadded": "2026-03-30 02:34:34 UTC",
            "url": "http://175.150.114.184:53561/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 03:54:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808046/",
            "reporter": "geenensp"
        }
    ],
    "3808045": [
        {
            "dateadded": "2026-03-30 02:34:20 UTC",
            "url": "http://59.96.141.178:56935/i",
            "url_status": "offline",
            "last_online": "2026-03-30 02:34:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808045/",
            "reporter": "geenensp"
        }
    ],
    "3808044": [
        {
            "dateadded": "2026-03-30 02:33:05 UTC",
            "url": "http://85.239.147.6/files/6560547276/Yzztzly.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808044/",
            "reporter": "c2hunter"
        }
    ],
    "3808043": [
        {
            "dateadded": "2026-03-30 02:32:07 UTC",
            "url": "http://115.55.235.145:45505/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:44:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808043/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808042": [
        {
            "dateadded": "2026-03-30 02:31:17 UTC",
            "url": "http://182.121.204.206:53755/i",
            "url_status": "offline",
            "last_online": "2026-04-01 09:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808042/",
            "reporter": "geenensp"
        }
    ],
    "3808041": [
        {
            "dateadded": "2026-03-30 02:30:08 UTC",
            "url": "https://unit-command.sectoralcontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808041/",
            "reporter": "anonymous"
        }
    ],
    "3808040": [
        {
            "dateadded": "2026-03-30 02:24:11 UTC",
            "url": "https://admin-panel.sectoralcontrol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808040/",
            "reporter": "anonymous"
        }
    ],
    "3808039": [
        {
            "dateadded": "2026-03-30 02:23:21 UTC",
            "url": "http://42.202.103.37:54151/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:30:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808039/",
            "reporter": "geenensp"
        }
    ],
    "3808038": [
        {
            "dateadded": "2026-03-30 02:20:19 UTC",
            "url": "http://110.39.244.198:40172/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:51:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808038/",
            "reporter": "geenensp"
        }
    ],
    "3808036": [
        {
            "dateadded": "2026-03-30 02:17:08 UTC",
            "url": "https://site-archive.districtbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808036/",
            "reporter": "anonymous"
        }
    ],
    "3808037": [
        {
            "dateadded": "2026-03-30 02:17:08 UTC",
            "url": "http://115.55.235.145:45505/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:19:00 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808037/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808035": [
        {
            "dateadded": "2026-03-30 02:14:13 UTC",
            "url": "http://115.62.15.6:60177/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 17:02:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808035/",
            "reporter": "geenensp"
        }
    ],
    "3808034": [
        {
            "dateadded": "2026-03-30 02:12:09 UTC",
            "url": "https://load-buffer.districtbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808034/",
            "reporter": "anonymous"
        }
    ],
    "3808033": [
        {
            "dateadded": "2026-03-30 02:06:09 UTC",
            "url": "http://182.121.204.206:53755/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:54:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808033/",
            "reporter": "geenensp"
        }
    ],
    "3808032": [
        {
            "dateadded": "2026-03-30 02:06:06 UTC",
            "url": "https://relay-point.districtbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:06:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808032/",
            "reporter": "anonymous"
        }
    ],
    "3808030": [
        {
            "dateadded": "2026-03-30 02:01:11 UTC",
            "url": "http://42.56.208.235:46771/i",
            "url_status": "offline",
            "last_online": "2026-04-04 07:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808030/",
            "reporter": "geenensp"
        }
    ],
    "3808031": [
        {
            "dateadded": "2026-03-30 02:01:11 UTC",
            "url": "https://queue-manager.districtbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 02:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808031/",
            "reporter": "anonymous"
        }
    ],
    "3808029": [
        {
            "dateadded": "2026-03-30 01:59:17 UTC",
            "url": "http://42.202.103.37:54151/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808029/",
            "reporter": "geenensp"
        }
    ],
    "3808028": [
        {
            "dateadded": "2026-03-30 01:55:09 UTC",
            "url": "https://temp-storage.districtbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808028/",
            "reporter": "anonymous"
        }
    ],
    "3808027": [
        {
            "dateadded": "2026-03-30 01:50:21 UTC",
            "url": "http://160.179.232.22:42545/i",
            "url_status": "offline",
            "last_online": "2026-03-30 01:50:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808027/",
            "reporter": "geenensp"
        }
    ],
    "3808026": [
        {
            "dateadded": "2026-03-30 01:49:08 UTC",
            "url": "https://local-cache.districtbuffer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808026/",
            "reporter": "anonymous"
        }
    ],
    "3808025": [
        {
            "dateadded": "2026-03-30 01:48:22 UTC",
            "url": "http://117.219.150.64:48974/i",
            "url_status": "offline",
            "last_online": "2026-03-30 01:48:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808025/",
            "reporter": "geenensp"
        }
    ],
    "3808024": [
        {
            "dateadded": "2026-03-30 01:45:09 UTC",
            "url": "https://topo-render.precisemapnode.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808024/",
            "reporter": "anonymous"
        }
    ],
    "3808023": [
        {
            "dateadded": "2026-03-30 01:43:20 UTC",
            "url": "http://110.37.89.210:56994/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:55:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808023/",
            "reporter": "geenensp"
        }
    ],
    "3808022": [
        {
            "dateadded": "2026-03-30 01:42:14 UTC",
            "url": "http://69.173.182.43:48089/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 15:30:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808022/",
            "reporter": "geenensp"
        }
    ],
    "3808021": [
        {
            "dateadded": "2026-03-30 01:38:10 UTC",
            "url": "https://view-finder.precisemapnode.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808021/",
            "reporter": "anonymous"
        }
    ],
    "3808020": [
        {
            "dateadded": "2026-03-30 01:37:06 UTC",
            "url": "http://125.41.229.32:59143/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:44:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808020/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808019": [
        {
            "dateadded": "2026-03-30 01:32:09 UTC",
            "url": "https://scale-vector.precisemapnode.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808019/",
            "reporter": "anonymous"
        }
    ],
    "3808018": [
        {
            "dateadded": "2026-03-30 01:27:10 UTC",
            "url": "https://layer-stack.precisemapnode.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808018/",
            "reporter": "anonymous"
        }
    ],
    "3808017": [
        {
            "dateadded": "2026-03-30 01:22:09 UTC",
            "url": "https://point-atlas.precisemapnode.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808017/",
            "reporter": "anonymous"
        }
    ],
    "3808016": [
        {
            "dateadded": "2026-03-30 01:19:18 UTC",
            "url": "http://117.219.150.64:48974/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808016/",
            "reporter": "geenensp"
        }
    ],
    "3808015": [
        {
            "dateadded": "2026-03-30 01:17:07 UTC",
            "url": "http://115.63.144.234:56511/i",
            "url_status": "offline",
            "last_online": "2026-03-30 04:22:36 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808015/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808013": [
        {
            "dateadded": "2026-03-30 01:15:22 UTC",
            "url": "http://182.124.236.110:47287/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:41:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808013/",
            "reporter": "geenensp"
        }
    ],
    "3808014": [
        {
            "dateadded": "2026-03-30 01:15:22 UTC",
            "url": "http://27.37.227.112:43810/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:41:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808014/",
            "reporter": "geenensp"
        }
    ],
    "3808012": [
        {
            "dateadded": "2026-03-30 01:15:10 UTC",
            "url": "https://coord-sync.precisemapnode.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808012/",
            "reporter": "anonymous"
        }
    ],
    "3808011": [
        {
            "dateadded": "2026-03-30 01:14:16 UTC",
            "url": "http://110.37.89.210:56994/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 01:14:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808011/",
            "reporter": "geenensp"
        }
    ],
    "3808010": [
        {
            "dateadded": "2026-03-30 01:12:07 UTC",
            "url": "http://110.37.55.92:35204/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808010/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808009": [
        {
            "dateadded": "2026-03-30 01:10:09 UTC",
            "url": "https://flow-master.urbanflowmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808009/",
            "reporter": "anonymous"
        }
    ],
    "3808008": [
        {
            "dateadded": "2026-03-30 01:05:10 UTC",
            "url": "https://drift-control.urbanflowmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808008/",
            "reporter": "anonymous"
        }
    ],
    "3808007": [
        {
            "dateadded": "2026-03-30 01:02:15 UTC",
            "url": "http://222.137.72.243:47068/i",
            "url_status": "offline",
            "last_online": "2026-03-30 01:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808007/",
            "reporter": "geenensp"
        }
    ],
    "3808006": [
        {
            "dateadded": "2026-03-30 01:01:09 UTC",
            "url": "https://pulse-check.urbanflowmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 01:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808006/",
            "reporter": "anonymous"
        }
    ],
    "3808005": [
        {
            "dateadded": "2026-03-30 01:00:13 UTC",
            "url": "http://182.124.236.110:47287/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:25:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808005/",
            "reporter": "geenensp"
        }
    ],
    "3808004": [
        {
            "dateadded": "2026-03-30 00:59:18 UTC",
            "url": "http://123.9.101.142:41784/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:47:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808004/",
            "reporter": "geenensp"
        }
    ],
    "3808003": [
        {
            "dateadded": "2026-03-30 00:58:07 UTC",
            "url": "https://surge-protect.urbanflowmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:58:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808003/",
            "reporter": "anonymous"
        }
    ],
    "3808002": [
        {
            "dateadded": "2026-03-30 00:57:07 UTC",
            "url": "http://117.209.20.195:48960/i",
            "url_status": "offline",
            "last_online": "2026-03-30 00:57:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808002/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3808001": [
        {
            "dateadded": "2026-03-30 00:48:08 UTC",
            "url": "https://stream-audit.urbanflowmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808001/",
            "reporter": "anonymous"
        }
    ],
    "3808000": [
        {
            "dateadded": "2026-03-30 00:45:19 UTC",
            "url": "http://27.37.109.177:36113/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3808000/",
            "reporter": "geenensp"
        }
    ],
    "3807999": [
        {
            "dateadded": "2026-03-30 00:43:18 UTC",
            "url": "http://123.9.101.142:41784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:25:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807999/",
            "reporter": "geenensp"
        }
    ],
    "3807998": [
        {
            "dateadded": "2026-03-30 00:42:08 UTC",
            "url": "https://traffic-api.urbanflowmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:45:32 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807998/",
            "reporter": "anonymous"
        }
    ],
    "3807997": [
        {
            "dateadded": "2026-03-30 00:42:05 UTC",
            "url": "http://125.41.229.32:59143/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 09:42:47 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807997/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807996": [
        {
            "dateadded": "2026-03-30 00:41:18 UTC",
            "url": "http://27.37.109.177:36113/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:03:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807996/",
            "reporter": "geenensp"
        }
    ],
    "3807995": [
        {
            "dateadded": "2026-03-30 00:38:07 UTC",
            "url": "https://urban-access.metropolitangrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807995/",
            "reporter": "anonymous"
        }
    ],
    "3807994": [
        {
            "dateadded": "2026-03-30 00:37:08 UTC",
            "url": "http://117.209.20.195:48960/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 00:37:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807994/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807993": [
        {
            "dateadded": "2026-03-30 00:31:09 UTC",
            "url": "https://zone-portal.metropolitangrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807993/",
            "reporter": "anonymous"
        }
    ],
    "3807992": [
        {
            "dateadded": "2026-03-30 00:26:09 UTC",
            "url": "https://block-sensor.metropolitangrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807992/",
            "reporter": "anonymous"
        }
    ],
    "3807977": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.arc",
            "url_status": "offline",
            "last_online": "2026-04-10 11:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "arc",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807977/",
            "reporter": "botnetkiller"
        }
    ],
    "3807978": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.mips",
            "url_status": "offline",
            "last_online": "2026-04-10 11:19:25 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807978/",
            "reporter": "botnetkiller"
        }
    ],
    "3807979": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.x86",
            "url_status": "offline",
            "last_online": "2026-04-10 10:28:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807979/",
            "reporter": "botnetkiller"
        }
    ],
    "3807980": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.arm6",
            "url_status": "offline",
            "last_online": "2026-04-10 11:31:35 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807980/",
            "reporter": "botnetkiller"
        }
    ],
    "3807981": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.arm7",
            "url_status": "offline",
            "last_online": "2026-04-10 10:05:30 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807981/",
            "reporter": "botnetkiller"
        }
    ],
    "3807982": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.ppc",
            "url_status": "offline",
            "last_online": "2026-04-10 10:37:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807982/",
            "reporter": "botnetkiller"
        }
    ],
    "3807983": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.sh4",
            "url_status": "offline",
            "last_online": "2026-04-10 09:55:30 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807983/",
            "reporter": "botnetkiller"
        }
    ],
    "3807984": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.arm",
            "url_status": "offline",
            "last_online": "2026-04-10 10:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807984/",
            "reporter": "botnetkiller"
        }
    ],
    "3807985": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.sh",
            "url_status": "offline",
            "last_online": "2026-04-10 09:54:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "opendir",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807985/",
            "reporter": "botnetkiller"
        }
    ],
    "3807986": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.spc",
            "url_status": "offline",
            "last_online": "2026-04-10 10:42:28 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807986/",
            "reporter": "botnetkiller"
        }
    ],
    "3807987": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-10 13:34:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807987/",
            "reporter": "botnetkiller"
        }
    ],
    "3807988": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.m68k",
            "url_status": "offline",
            "last_online": "2026-04-10 10:52:49 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807988/",
            "reporter": "botnetkiller"
        }
    ],
    "3807989": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-10 11:14:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807989/",
            "reporter": "botnetkiller"
        }
    ],
    "3807990": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.arm5",
            "url_status": "offline",
            "last_online": "2026-04-10 10:56:26 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "opendir",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807990/",
            "reporter": "botnetkiller"
        }
    ],
    "3807991": [
        {
            "dateadded": "2026-03-30 00:25:23 UTC",
            "url": "http://38.83.138.59:25884/nz.i686",
            "url_status": "offline",
            "last_online": "2026-04-10 11:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "opendir",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807991/",
            "reporter": "botnetkiller"
        }
    ],
    "3807976": [
        {
            "dateadded": "2026-03-30 00:20:10 UTC",
            "url": "https://area-scanner.metropolitangrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807976/",
            "reporter": "anonymous"
        }
    ],
    "3807975": [
        {
            "dateadded": "2026-03-30 00:15:09 UTC",
            "url": "https://street-logic.metropolitangrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:15:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807975/",
            "reporter": "anonymous"
        }
    ],
    "3807974": [
        {
            "dateadded": "2026-03-30 00:10:18 UTC",
            "url": "http://110.37.49.105:37108/i",
            "url_status": "offline",
            "last_online": "2026-03-30 00:10:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807974/",
            "reporter": "geenensp"
        }
    ],
    "3807973": [
        {
            "dateadded": "2026-03-30 00:10:09 UTC",
            "url": "https://city-monitor.metropolitangrid.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807973/",
            "reporter": "anonymous"
        }
    ],
    "3807972": [
        {
            "dateadded": "2026-03-30 00:09:27 UTC",
            "url": "http://59.180.138.113:39468/i",
            "url_status": "offline",
            "last_online": "2026-03-30 00:09:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807972/",
            "reporter": "geenensp"
        }
    ],
    "3807971": [
        {
            "dateadded": "2026-03-30 00:05:10 UTC",
            "url": "https://instant-msg.velocityterminal.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807971/",
            "reporter": "anonymous"
        }
    ],
    "3807970": [
        {
            "dateadded": "2026-03-30 00:01:08 UTC",
            "url": "https://quick-step.velocityterminal.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-30 00:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807970/",
            "reporter": "anonymous"
        }
    ],
    "3807969": [
        {
            "dateadded": "2026-03-29 23:56:19 UTC",
            "url": "http://110.37.49.105:37108/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 23:56:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807969/",
            "reporter": "geenensp"
        }
    ],
    "3807968": [
        {
            "dateadded": "2026-03-29 23:56:07 UTC",
            "url": "https://shift-ctrl.velocityterminal.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807968/",
            "reporter": "anonymous"
        }
    ],
    "3807967": [
        {
            "dateadded": "2026-03-29 23:52:07 UTC",
            "url": "https://boost-engine.velocityterminal.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:52:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807967/",
            "reporter": "anonymous"
        }
    ],
    "3807966": [
        {
            "dateadded": "2026-03-29 23:50:10 UTC",
            "url": "http://182.116.119.124:41788/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:21:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807966/",
            "reporter": "geenensp"
        }
    ],
    "3807965": [
        {
            "dateadded": "2026-03-29 23:46:07 UTC",
            "url": "https://rapid-fire.velocityterminal.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:46:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807965/",
            "reporter": "anonymous"
        }
    ],
    "3807964": [
        {
            "dateadded": "2026-03-29 23:44:08 UTC",
            "url": "https://fast-track.velocityterminal.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807964/",
            "reporter": "anonymous"
        }
    ],
    "3807963": [
        {
            "dateadded": "2026-03-29 23:33:07 UTC",
            "url": "https://codec-proxy.compressionlayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807963/",
            "reporter": "anonymous"
        }
    ],
    "3807962": [
        {
            "dateadded": "2026-03-29 23:32:11 UTC",
            "url": "http://112.198.140.250:47540/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 22:04:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807962/",
            "reporter": "geenensp"
        }
    ],
    "3807961": [
        {
            "dateadded": "2026-03-29 23:28:07 UTC",
            "url": "https://flat-buffer.compressionlayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807961/",
            "reporter": "anonymous"
        }
    ],
    "3807960": [
        {
            "dateadded": "2026-03-29 23:26:18 UTC",
            "url": "http://182.116.119.124:41788/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:27:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807960/",
            "reporter": "geenensp"
        }
    ],
    "3807959": [
        {
            "dateadded": "2026-03-29 23:25:19 UTC",
            "url": "http://110.37.34.154:53678/i",
            "url_status": "offline",
            "last_online": "2026-03-29 23:25:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807959/",
            "reporter": "geenensp"
        }
    ],
    "3807958": [
        {
            "dateadded": "2026-03-29 23:24:10 UTC",
            "url": "https://shrink-node.compressionlayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807958/",
            "reporter": "anonymous"
        }
    ],
    "3807957": [
        {
            "dateadded": "2026-03-29 23:20:11 UTC",
            "url": "https://zip-archive.compressionlayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807957/",
            "reporter": "anonymous"
        }
    ],
    "3807956": [
        {
            "dateadded": "2026-03-29 23:17:12 UTC",
            "url": "http://119.156.133.244:45454/i",
            "url_status": "offline",
            "last_online": "2026-03-29 23:17:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807956/",
            "reporter": "geenensp"
        }
    ],
    "3807955": [
        {
            "dateadded": "2026-03-29 23:14:09 UTC",
            "url": "https://dense-pack.compressionlayer.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807955/",
            "reporter": "anonymous"
        }
    ],
    "3807954": [
        {
            "dateadded": "2026-03-29 23:10:09 UTC",
            "url": "https://survey-data.topographictrace.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807954/",
            "reporter": "anonymous"
        }
    ],
    "3807953": [
        {
            "dateadded": "2026-03-29 23:05:09 UTC",
            "url": "https://contour-api.topographictrace.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807953/",
            "reporter": "anonymous"
        }
    ],
    "3807952": [
        {
            "dateadded": "2026-03-29 23:03:16 UTC",
            "url": "http://110.37.95.41:47382/i",
            "url_status": "offline",
            "last_online": "2026-03-29 23:03:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807952/",
            "reporter": "geenensp"
        }
    ],
    "3807933": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/p-p.c-.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 10:16:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807933/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807934": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/x-3.2-.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:01:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807934/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807935": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/a-r.m-4.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:56:11 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807935/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807936": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://158.94.208.83/bins/pmips",
            "url_status": "offline",
            "last_online": "2026-03-30 15:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807936/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807937": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://158.94.208.83/bins/pmpsl",
            "url_status": "offline",
            "last_online": "2026-03-30 16:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807937/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807938": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://158.94.208.83/bins/parm7",
            "url_status": "offline",
            "last_online": "2026-03-30 15:18:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807938/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807939": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/i-5.8-6.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:49:32 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807939/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807940": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://158.94.208.83/bins/parm6",
            "url_status": "offline",
            "last_online": "2026-03-30 15:18:23 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807940/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807941": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/m-6.8-k.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:02:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807941/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807942": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/s-h.4-.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:55:26 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807942/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807943": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/m-i.p-s.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:30:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807943/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807944": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/arm5",
            "url_status": "offline",
            "last_online": "2026-03-30 06:13:16 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807944/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807945": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/m68k",
            "url_status": "offline",
            "last_online": "2026-03-30 04:13:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807945/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807946": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/arm6",
            "url_status": "offline",
            "last_online": "2026-03-30 06:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807946/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807947": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/ppc",
            "url_status": "offline",
            "last_online": "2026-03-30 04:14:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807947/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807948": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/x86",
            "url_status": "offline",
            "last_online": "2026-03-30 03:16:18 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807948/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807949": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://87.121.79.97/x-8.6-.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:56:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807949/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807950": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/arm7",
            "url_status": "offline",
            "last_online": "2026-03-30 03:24:37 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807950/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807951": [
        {
            "dateadded": "2026-03-29 23:01:13 UTC",
            "url": "http://172.86.91.224/bins/mips",
            "url_status": "offline",
            "last_online": "2026-03-30 06:18:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807951/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807926": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://158.94.208.83/bins/parm5",
            "url_status": "offline",
            "last_online": "2026-03-30 15:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807926/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807927": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://87.121.79.97/a-r.m-6.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 12:25:00 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807927/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807928": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://158.94.208.83/bins/parm",
            "url_status": "offline",
            "last_online": "2026-03-30 16:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807928/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807929": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://87.121.79.97/a-r.m-7.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 16:17:42 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807929/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807930": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://87.121.79.97/m-p.s-l.SNOOPY",
            "url_status": "offline",
            "last_online": "2026-04-11 11:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "gafgyt",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807930/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807931": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://158.94.208.83/bins/px86",
            "url_status": "offline",
            "last_online": "2026-03-30 15:43:47 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807931/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807932": [
        {
            "dateadded": "2026-03-29 23:01:09 UTC",
            "url": "http://172.86.91.224/bins/sh4",
            "url_status": "offline",
            "last_online": "2026-03-30 04:30:40 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807932/",
            "reporter": "ClearlyNotB"
        }
    ],
    "3807925": [
        {
            "dateadded": "2026-03-29 23:00:11 UTC",
            "url": "https://relief-view.topographictrace.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 23:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807925/",
            "reporter": "anonymous"
        }
    ],
    "3807924": [
        {
            "dateadded": "2026-03-29 22:56:08 UTC",
            "url": "https://point-cloud.topographictrace.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807924/",
            "reporter": "anonymous"
        }
    ],
    "3807923": [
        {
            "dateadded": "2026-03-29 22:54:17 UTC",
            "url": "http://180.190.187.61:51605/i",
            "url_status": "offline",
            "last_online": "2026-04-23 06:03:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807923/",
            "reporter": "geenensp"
        }
    ],
    "3807922": [
        {
            "dateadded": "2026-03-29 22:53:18 UTC",
            "url": "http://113.221.77.197:37910/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:41:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807922/",
            "reporter": "geenensp"
        }
    ],
    "3807921": [
        {
            "dateadded": "2026-03-29 22:52:10 UTC",
            "url": "https://chart-plotter.topographictrace.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807921/",
            "reporter": "anonymous"
        }
    ],
    "3807920": [
        {
            "dateadded": "2026-03-29 22:49:06 UTC",
            "url": "http://85.239.147.6/files/8756257131/nbql7zY.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807920/",
            "reporter": "Bitsight"
        }
    ],
    "3807919": [
        {
            "dateadded": "2026-03-29 22:47:08 UTC",
            "url": "https://map-overlay.topographictrace.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807919/",
            "reporter": "anonymous"
        }
    ],
    "3807918": [
        {
            "dateadded": "2026-03-29 22:42:08 UTC",
            "url": "https://core-tunnel.integratedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807918/",
            "reporter": "anonymous"
        }
    ],
    "3807917": [
        {
            "dateadded": "2026-03-29 22:38:07 UTC",
            "url": "https://drain-gate.integratedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807917/",
            "reporter": "anonymous"
        }
    ],
    "3807916": [
        {
            "dateadded": "2026-03-29 22:37:08 UTC",
            "url": "http://117.253.69.102:50382/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:37:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807916/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807915": [
        {
            "dateadded": "2026-03-29 22:34:12 UTC",
            "url": "https://pipe-line.integratedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:34:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807915/",
            "reporter": "anonymous"
        }
    ],
    "3807914": [
        {
            "dateadded": "2026-03-29 22:32:07 UTC",
            "url": "http://124.29.223.148:52946/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:56:17 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807914/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807913": [
        {
            "dateadded": "2026-03-29 22:30:19 UTC",
            "url": "http://123.10.70.191:60783/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:46:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807913/",
            "reporter": "geenensp"
        }
    ],
    "3807912": [
        {
            "dateadded": "2026-03-29 22:29:06 UTC",
            "url": "https://vent-access.integratedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:29:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807912/",
            "reporter": "anonymous"
        }
    ],
    "3807911": [
        {
            "dateadded": "2026-03-29 22:28:15 UTC",
            "url": "http://45.205.1.19/nuts/poop",
            "url_status": "offline",
            "last_online": "2026-04-01 10:06:54 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807911/",
            "reporter": "botnetkiller"
        }
    ],
    "3807910": [
        {
            "dateadded": "2026-03-29 22:28:10 UTC",
            "url": "http://110.37.48.94:51957/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807910/",
            "reporter": "geenensp"
        }
    ],
    "3807909": [
        {
            "dateadded": "2026-03-29 22:26:24 UTC",
            "url": "http://180.190.187.61:51605/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-23 07:35:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807909/",
            "reporter": "geenensp"
        }
    ],
    "3807908": [
        {
            "dateadded": "2026-03-29 22:24:21 UTC",
            "url": "http://59.97.255.211:48481/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:24:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807908/",
            "reporter": "geenensp"
        }
    ],
    "3807907": [
        {
            "dateadded": "2026-03-29 22:24:11 UTC",
            "url": "https://flow-sensor.integratedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807907/",
            "reporter": "anonymous"
        }
    ],
    "3807906": [
        {
            "dateadded": "2026-03-29 22:22:21 UTC",
            "url": "http://117.205.175.142:60557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:22:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807906/",
            "reporter": "geenensp"
        }
    ],
    "3807905": [
        {
            "dateadded": "2026-03-29 22:20:38 UTC",
            "url": "http://112.248.114.151:60712/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:53:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807905/",
            "reporter": "geenensp"
        }
    ],
    "3807904": [
        {
            "dateadded": "2026-03-29 22:19:31 UTC",
            "url": "http://110.38.192.30:50587/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807904/",
            "reporter": "geenensp"
        }
    ],
    "3807903": [
        {
            "dateadded": "2026-03-29 22:19:09 UTC",
            "url": "https://main-conduit.integratedduct.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807903/",
            "reporter": "anonymous"
        }
    ],
    "3807902": [
        {
            "dateadded": "2026-03-29 22:15:10 UTC",
            "url": "https://pair-connect.symmetricalflow.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807902/",
            "reporter": "anonymous"
        }
    ],
    "3807901": [
        {
            "dateadded": "2026-03-29 22:13:17 UTC",
            "url": "http://27.37.27.70:42155/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:39:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807901/",
            "reporter": "geenensp"
        }
    ],
    "3807900": [
        {
            "dateadded": "2026-03-29 22:12:07 UTC",
            "url": "http://124.29.223.148:52946/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 06:02:49 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807900/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807899": [
        {
            "dateadded": "2026-03-29 22:10:14 UTC",
            "url": "https://match-point.symmetricalflow.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:10:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807899/",
            "reporter": "anonymous"
        }
    ],
    "3807898": [
        {
            "dateadded": "2026-03-29 22:08:25 UTC",
            "url": "http://110.37.44.158:52674/i",
            "url_status": "offline",
            "last_online": "2026-04-02 12:58:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807898/",
            "reporter": "geenensp"
        }
    ],
    "3807897": [
        {
            "dateadded": "2026-03-29 22:07:08 UTC",
            "url": "http://103.164.128.50:33037/i",
            "url_status": "offline",
            "last_online": "2026-04-21 23:06:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807897/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807896": [
        {
            "dateadded": "2026-03-29 22:05:10 UTC",
            "url": "https://equal-logic.symmetricalflow.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807896/",
            "reporter": "anonymous"
        }
    ],
    "3807895": [
        {
            "dateadded": "2026-03-29 22:02:08 UTC",
            "url": "https://dual-stream.symmetricalflow.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 22:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807895/",
            "reporter": "anonymous"
        }
    ],
    "3807894": [
        {
            "dateadded": "2026-03-29 22:00:21 UTC",
            "url": "http://123.10.70.191:60783/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:29:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807894/",
            "reporter": "geenensp"
        }
    ],
    "3807893": [
        {
            "dateadded": "2026-03-29 21:58:20 UTC",
            "url": "http://59.97.255.211:48481/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:58:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807893/",
            "reporter": "geenensp"
        }
    ],
    "3807892": [
        {
            "dateadded": "2026-03-29 21:57:09 UTC",
            "url": "https://mirror-sync.symmetricalflow.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807892/",
            "reporter": "anonymous"
        }
    ],
    "3807891": [
        {
            "dateadded": "2026-03-29 21:56:24 UTC",
            "url": "http://110.38.192.30:50587/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:56:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807891/",
            "reporter": "geenensp"
        }
    ],
    "3807890": [
        {
            "dateadded": "2026-03-29 21:52:12 UTC",
            "url": "http://121.238.240.83:3588/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 21:48:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807890/",
            "reporter": "geenensp"
        }
    ],
    "3807889": [
        {
            "dateadded": "2026-03-29 21:51:10 UTC",
            "url": "https://balanced-io.symmetricalflow.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807889/",
            "reporter": "anonymous"
        }
    ],
    "3807888": [
        {
            "dateadded": "2026-03-29 21:49:20 UTC",
            "url": "http://180.115.167.234:60666/i",
            "url_status": "offline",
            "last_online": "2026-04-02 09:49:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807888/",
            "reporter": "geenensp"
        }
    ],
    "3807887": [
        {
            "dateadded": "2026-03-29 21:47:32 UTC",
            "url": "http://59.184.246.34:39063/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:20:12 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807887/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807886": [
        {
            "dateadded": "2026-03-29 21:46:13 UTC",
            "url": "https://alt-server.elevationnodebox.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:46:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807886/",
            "reporter": "anonymous"
        }
    ],
    "3807885": [
        {
            "dateadded": "2026-03-29 21:43:21 UTC",
            "url": "http://61.53.81.193:35668/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:19:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807885/",
            "reporter": "geenensp"
        }
    ],
    "3807884": [
        {
            "dateadded": "2026-03-29 21:40:10 UTC",
            "url": "https://summit-dev.elevationnodebox.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807884/",
            "reporter": "anonymous"
        }
    ],
    "3807883": [
        {
            "dateadded": "2026-03-29 21:35:27 UTC",
            "url": "http://27.216.167.20:58590/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:54:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807883/",
            "reporter": "geenensp"
        }
    ],
    "3807882": [
        {
            "dateadded": "2026-03-29 21:35:22 UTC",
            "url": "http://176.226.205.220:37523/i",
            "url_status": "offline",
            "last_online": "2026-03-30 06:34:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807882/",
            "reporter": "geenensp"
        }
    ],
    "3807881": [
        {
            "dateadded": "2026-03-29 21:34:07 UTC",
            "url": "https://level-check.elevationnodebox.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807881/",
            "reporter": "anonymous"
        }
    ],
    "3807880": [
        {
            "dateadded": "2026-03-29 21:31:13 UTC",
            "url": "https://peak-traffic.elevationnodebox.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:31:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807880/",
            "reporter": "anonymous"
        }
    ],
    "3807879": [
        {
            "dateadded": "2026-03-29 21:28:08 UTC",
            "url": "https://top-tier.elevationnodebox.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807879/",
            "reporter": "anonymous"
        }
    ],
    "3807878": [
        {
            "dateadded": "2026-03-29 21:27:07 UTC",
            "url": "http://110.37.59.132:48632/i",
            "url_status": "offline",
            "last_online": "2026-04-07 14:04:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807878/",
            "reporter": "geenensp"
        }
    ],
    "3807877": [
        {
            "dateadded": "2026-03-29 21:19:23 UTC",
            "url": "http://180.115.167.234:60666/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 10:45:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807877/",
            "reporter": "geenensp"
        }
    ],
    "3807876": [
        {
            "dateadded": "2026-03-29 21:18:09 UTC",
            "url": "https://high-point.elevationnodebox.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807876/",
            "reporter": "anonymous"
        }
    ],
    "3807874": [
        {
            "dateadded": "2026-03-29 21:15:27 UTC",
            "url": "http://61.53.81.193:35668/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 16:32:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807874/",
            "reporter": "geenensp"
        }
    ],
    "3807875": [
        {
            "dateadded": "2026-03-29 21:15:27 UTC",
            "url": "http://182.121.80.108:52075/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:44:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807875/",
            "reporter": "geenensp"
        }
    ],
    "3807873": [
        {
            "dateadded": "2026-03-29 21:15:26 UTC",
            "url": "http://176.226.205.220:37523/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 06:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807873/",
            "reporter": "geenensp"
        }
    ],
    "3807872": [
        {
            "dateadded": "2026-03-29 21:12:14 UTC",
            "url": "https://arch-tunnel.cantileverbridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:12:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807872/",
            "reporter": "anonymous"
        }
    ],
    "3807871": [
        {
            "dateadded": "2026-03-29 21:07:08 UTC",
            "url": "https://truss-api.cantileverbridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807871/",
            "reporter": "anonymous"
        }
    ],
    "3807870": [
        {
            "dateadded": "2026-03-29 21:00:19 UTC",
            "url": "http://182.121.80.108:52075/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807870/",
            "reporter": "geenensp"
        }
    ],
    "3807869": [
        {
            "dateadded": "2026-03-29 21:00:11 UTC",
            "url": "https://beam-handler.cantileverbridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 21:00:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807869/",
            "reporter": "anonymous"
        }
    ],
    "3807868": [
        {
            "dateadded": "2026-03-29 20:59:17 UTC",
            "url": "http://110.37.59.132:48632/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 10:53:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807868/",
            "reporter": "geenensp"
        }
    ],
    "3807867": [
        {
            "dateadded": "2026-03-29 20:57:18 UTC",
            "url": "http://117.212.18.77:41273/i",
            "url_status": "offline",
            "last_online": "2026-03-29 20:57:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807867/",
            "reporter": "geenensp"
        }
    ],
    "3807866": [
        {
            "dateadded": "2026-03-29 20:56:08 UTC",
            "url": "https://stress-test.cantileverbridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807866/",
            "reporter": "anonymous"
        }
    ],
    "3807865": [
        {
            "dateadded": "2026-03-29 20:49:09 UTC",
            "url": "https://load-balancer.cantileverbridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807865/",
            "reporter": "anonymous"
        }
    ],
    "3807864": [
        {
            "dateadded": "2026-03-29 20:47:07 UTC",
            "url": "http://110.37.82.79:56951/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:21:21 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807864/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807863": [
        {
            "dateadded": "2026-03-29 20:44:11 UTC",
            "url": "https://span-control.cantileverbridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807863/",
            "reporter": "anonymous"
        }
    ],
    "3807862": [
        {
            "dateadded": "2026-03-29 20:42:07 UTC",
            "url": "http://113.221.77.197:37910/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:54:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807862/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807861": [
        {
            "dateadded": "2026-03-29 20:39:08 UTC",
            "url": "https://archive-site.alignmentstorage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807861/",
            "reporter": "anonymous"
        }
    ],
    "3807860": [
        {
            "dateadded": "2026-03-29 20:37:06 UTC",
            "url": "http://110.37.82.79:56951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:52:31 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807860/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807859": [
        {
            "dateadded": "2026-03-29 20:33:16 UTC",
            "url": "http://185.50.148.169:42129/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:02:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807859/",
            "reporter": "geenensp"
        }
    ],
    "3807858": [
        {
            "dateadded": "2026-03-29 20:32:08 UTC",
            "url": "https://backup-hub.alignmentstorage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807858/",
            "reporter": "anonymous"
        }
    ],
    "3807857": [
        {
            "dateadded": "2026-03-29 20:31:20 UTC",
            "url": "http://219.155.203.107:48310/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:01:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807857/",
            "reporter": "geenensp"
        }
    ],
    "3807856": [
        {
            "dateadded": "2026-03-29 20:27:07 UTC",
            "url": "https://cache-node.alignmentstorage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807856/",
            "reporter": "anonymous"
        }
    ],
    "3807855": [
        {
            "dateadded": "2026-03-29 20:23:21 UTC",
            "url": "http://59.103.121.32:52860/i",
            "url_status": "offline",
            "last_online": "2026-04-03 16:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807855/",
            "reporter": "geenensp"
        }
    ],
    "3807854": [
        {
            "dateadded": "2026-03-29 20:22:08 UTC",
            "url": "https://file-share.alignmentstorage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807854/",
            "reporter": "anonymous"
        }
    ],
    "3807853": [
        {
            "dateadded": "2026-03-29 20:17:10 UTC",
            "url": "https://block-storage.alignmentstorage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:17:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807853/",
            "reporter": "anonymous"
        }
    ],
    "3807852": [
        {
            "dateadded": "2026-03-29 20:11:07 UTC",
            "url": "https://sync-portal.alignmentstorage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807852/",
            "reporter": "anonymous"
        }
    ],
    "3807851": [
        {
            "dateadded": "2026-03-29 20:10:18 UTC",
            "url": "http://42.236.223.242:48800/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:30:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807851/",
            "reporter": "geenensp"
        }
    ],
    "3807850": [
        {
            "dateadded": "2026-03-29 20:05:10 UTC",
            "url": "https://index-master.foundationmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807850/",
            "reporter": "anonymous"
        }
    ],
    "3807849": [
        {
            "dateadded": "2026-03-29 20:00:12 UTC",
            "url": "https://legacy-bridge.foundationmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 20:00:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807849/",
            "reporter": "anonymous"
        }
    ],
    "3807848": [
        {
            "dateadded": "2026-03-29 19:57:07 UTC",
            "url": "http://110.37.38.176:54723/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:44:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807848/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807847": [
        {
            "dateadded": "2026-03-29 19:55:19 UTC",
            "url": "http://59.103.121.32:52860/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 15:41:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807847/",
            "reporter": "geenensp"
        }
    ],
    "3807846": [
        {
            "dateadded": "2026-03-29 19:53:09 UTC",
            "url": "https://stat-collector.foundationmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807846/",
            "reporter": "anonymous"
        }
    ],
    "3807845": [
        {
            "dateadded": "2026-03-29 19:50:18 UTC",
            "url": "http://185.50.148.169:42129/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:15:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807845/",
            "reporter": "geenensp"
        }
    ],
    "3807844": [
        {
            "dateadded": "2026-03-29 19:50:14 UTC",
            "url": "https://audit-trail.foundationmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807844/",
            "reporter": "anonymous"
        }
    ],
    "3807843": [
        {
            "dateadded": "2026-03-29 19:47:10 UTC",
            "url": "https://root-access.foundationmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807843/",
            "reporter": "anonymous"
        }
    ],
    "3807842": [
        {
            "dateadded": "2026-03-29 19:42:07 UTC",
            "url": "http://123.12.153.43:55444/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807842/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807841": [
        {
            "dateadded": "2026-03-29 19:39:21 UTC",
            "url": "http://115.49.27.49:38620/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:13:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807841/",
            "reporter": "geenensp"
        }
    ],
    "3807840": [
        {
            "dateadded": "2026-03-29 19:39:15 UTC",
            "url": "https://github.com/Camj020205/Telegram-XO-Game-Bot-PHP/raw/refs/heads/main/twangle/PHP-Game-Bot-X-Telegram-1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 09:17:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807840/",
            "reporter": "tcains1"
        }
    ],
    "3807832": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://github.com/O-FB/3DSConverters/raw/refs/heads/main/3DS-Converters/bin/3DSConverters_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 04:32:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807832/",
            "reporter": "tcains1"
        }
    ],
    "3807833": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://grid-backbone.reinforcedmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807833/",
            "reporter": "anonymous"
        }
    ],
    "3807834": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://raw.githubusercontent.com/syedsuleman07/Jonas-Review-Guesser/refs/heads/main/data/Review_Guesser_Jonas_2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807834/",
            "reporter": "tcains1"
        }
    ],
    "3807835": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://tensor-unit.reinforcedmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807835/",
            "reporter": "anonymous"
        }
    ],
    "3807836": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://github.com/anheoanthit/tmodloader-docker/raw/refs/heads/main/mindlessness/tmodloader_docker_2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 09:25:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807836/",
            "reporter": "tcains1"
        }
    ],
    "3807837": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://base-logic.foundationmetric.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:39:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807837/",
            "reporter": "anonymous"
        }
    ],
    "3807838": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://github.com/Josh-debug123/Jogo_da_Velha/raw/refs/heads/main/menometastasis/Jogo_da_Velha_3.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807838/",
            "reporter": "tcains1"
        }
    ],
    "3807839": [
        {
            "dateadded": "2026-03-29 19:39:14 UTC",
            "url": "https://github.com/Zak12810/GameHub/raw/refs/heads/main/ios/GameHub/Hub-Game-v3.2-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807839/",
            "reporter": "tcains1"
        }
    ],
    "3807830": [
        {
            "dateadded": "2026-03-29 19:39:13 UTC",
            "url": "https://github.com/syedsuleman07/Jonas-Review-Guesser/raw/refs/heads/main/data/Review_Guesser_Jonas_2.0.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 08:45:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807830/",
            "reporter": "tcains1"
        }
    ],
    "3807831": [
        {
            "dateadded": "2026-03-29 19:39:13 UTC",
            "url": "https://github.com/KMA66/Playtesters.API/raw/refs/heads/master/src/UseCases/API-Playtesters-1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:14:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807831/",
            "reporter": "tcains1"
        }
    ],
    "3807825": [
        {
            "dateadded": "2026-03-29 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/Zak12810/GameHub/refs/heads/main/ios/GameHub/Hub-Game-v3.2-beta.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:31:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807825/",
            "reporter": "tcains1"
        }
    ],
    "3807826": [
        {
            "dateadded": "2026-03-29 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/Camj020205/Telegram-XO-Game-Bot-PHP/refs/heads/main/twangle/PHP-Game-Bot-X-Telegram-1.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 09:19:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807826/",
            "reporter": "tcains1"
        }
    ],
    "3807827": [
        {
            "dateadded": "2026-03-29 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/Josh-debug123/Jogo_da_Velha/refs/heads/main/menometastasis/Jogo_da_Velha_3.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:31:43 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807827/",
            "reporter": "tcains1"
        }
    ],
    "3807828": [
        {
            "dateadded": "2026-03-29 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/KMA66/Playtesters.API/refs/heads/master/src/UseCases/API-Playtesters-1.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807828/",
            "reporter": "tcains1"
        }
    ],
    "3807829": [
        {
            "dateadded": "2026-03-29 19:39:12 UTC",
            "url": "https://raw.githubusercontent.com/anheoanthit/tmodloader-docker/refs/heads/main/mindlessness/tmodloader_docker_2.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 09:47:35 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807829/",
            "reporter": "tcains1"
        }
    ],
    "3807823": [
        {
            "dateadded": "2026-03-29 19:39:10 UTC",
            "url": "http://110.37.38.176:54723/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:47:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807823/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807824": [
        {
            "dateadded": "2026-03-29 19:39:10 UTC",
            "url": "https://raw.githubusercontent.com/gourav3365/MCBE-Mouse-Cursor/refs/heads/master/punchboard/Mouse_Cursor_MCB_2.7-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:21:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807824/",
            "reporter": "tcains1"
        }
    ],
    "3807822": [
        {
            "dateadded": "2026-03-29 19:39:07 UTC",
            "url": "http://85.239.147.6/files/7571480282/0ZsEYbN.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807822/",
            "reporter": "Bitsight"
        }
    ],
    "3807815": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://github.com/beamed123/open-source-games/raw/refs/heads/main/staphylomycosis/open_games_source_v2.7-alpha.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:12:31 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807815/",
            "reporter": "tcains1"
        }
    ],
    "3807816": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://github.com/tiendaunomx/wave-defender/raw/refs/heads/main/counterstatement/wave_defender_3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:37:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807816/",
            "reporter": "tcains1"
        }
    ],
    "3807817": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://raw.githubusercontent.com/axeldnd1980/infinity-paradox-game/refs/heads/main/life-scenarios/infinity_game_paradox_udo.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:07:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807817/",
            "reporter": "tcains1"
        }
    ],
    "3807818": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://github.com/gourav3365/MCBE-Mouse-Cursor/raw/refs/heads/master/punchboard/Mouse_Cursor_MCB_2.7-alpha.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:45:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807818/",
            "reporter": "tcains1"
        }
    ],
    "3807819": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://github.com/axeldnd1980/infinity-paradox-game/raw/refs/heads/main/life-scenarios/infinity_game_paradox_udo.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:30:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807819/",
            "reporter": "tcains1"
        }
    ],
    "3807820": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://github.com/ninjas21/gamehub-lite/raw/refs/heads/main/api/gamehub-lite-1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807820/",
            "reporter": "tcains1"
        }
    ],
    "3807821": [
        {
            "dateadded": "2026-03-29 19:23:12 UTC",
            "url": "https://raw.githubusercontent.com/ninjas21/gamehub-lite/refs/heads/main/api/gamehub-lite-1.4.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:27:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807821/",
            "reporter": "tcains1"
        }
    ],
    "3807810": [
        {
            "dateadded": "2026-03-29 19:23:11 UTC",
            "url": "https://raw.githubusercontent.com/andreyukzl/verl/refs/heads/main/verl/model_merger/Software-v1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807810/",
            "reporter": "tcains1"
        }
    ],
    "3807811": [
        {
            "dateadded": "2026-03-29 19:23:11 UTC",
            "url": "https://github.com/andreyukzl/verl/raw/refs/heads/main/verl/model_merger/Software-v1.3.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:55:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807811/",
            "reporter": "tcains1"
        }
    ],
    "3807812": [
        {
            "dateadded": "2026-03-29 19:23:11 UTC",
            "url": "https://raw.githubusercontent.com/O-FB/3DSConverters/refs/heads/main/3DS-Converters/bin/3DSConverters_3.2.zip",
            "url_status": "offline",
            "last_online": "2026-04-07 03:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807812/",
            "reporter": "tcains1"
        }
    ],
    "3807813": [
        {
            "dateadded": "2026-03-29 19:23:11 UTC",
            "url": "https://raw.githubusercontent.com/beamed123/open-source-games/refs/heads/main/staphylomycosis/open_games_source_v2.7-alpha.5.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:41:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807813/",
            "reporter": "tcains1"
        }
    ],
    "3807814": [
        {
            "dateadded": "2026-03-29 19:23:11 UTC",
            "url": "https://raw.githubusercontent.com/tiendaunomx/wave-defender/refs/heads/main/counterstatement/wave_defender_3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:29:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807814/",
            "reporter": "tcains1"
        }
    ],
    "3807809": [
        {
            "dateadded": "2026-03-29 19:20:10 UTC",
            "url": "https://shield-relay.reinforcedmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807809/",
            "reporter": "anonymous"
        }
    ],
    "3807806": [
        {
            "dateadded": "2026-03-29 19:19:10 UTC",
            "url": "https://github.com/Genuspedilanthusgroundsloth505/Osiris/raw/refs/heads/main/Source/Features/Visuals/ModelGlow/WeaponModelGlow/Software-unidolatrous.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:57:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807806/",
            "reporter": "tcains1"
        }
    ],
    "3807807": [
        {
            "dateadded": "2026-03-29 19:19:10 UTC",
            "url": "https://github.com/thunde5061/Discord-Twitch-Bot/raw/refs/heads/main/unspontaneous/Discord_Bot_Twitch_1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:35:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807807/",
            "reporter": "tcains1"
        }
    ],
    "3807808": [
        {
            "dateadded": "2026-03-29 19:19:10 UTC",
            "url": "https://raw.githubusercontent.com/Genuspedilanthusgroundsloth505/Osiris/refs/heads/main/Source/Features/Visuals/ModelGlow/WeaponModelGlow/Software-unidolatrous.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:31:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807808/",
            "reporter": "tcains1"
        }
    ],
    "3807798": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/Pharyngeal-haredi673/twitch-account-creator/refs/heads/main/results/twitch_account_creator_require.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 05:33:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807798/",
            "reporter": "tcains1"
        }
    ],
    "3807799": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/provosaintbride913/TwitchFollowers/refs/heads/main/recoast/Followers-Twitch-counterpray.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:24:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807799/",
            "reporter": "tcains1"
        }
    ],
    "3807800": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://github.com/Pharyngeal-haredi673/twitch-account-creator/raw/refs/heads/main/results/twitch_account_creator_require.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:16:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807800/",
            "reporter": "tcains1"
        }
    ],
    "3807801": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://github.com/commonsdisintegration93/Rust-Stability-Companion/raw/refs/heads/main/shoppy/Rust-Stability-Companion_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807801/",
            "reporter": "tcains1"
        }
    ],
    "3807802": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/a-ettahri/NullRAT/refs/heads/main/NullRAT/RAT_Null_1.4-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:10:47 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807802/",
            "reporter": "tcains1"
        }
    ],
    "3807803": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://raw.githubusercontent.com/commonsdisintegration93/Rust-Stability-Companion/refs/heads/main/shoppy/Rust-Stability-Companion_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 04:58:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807803/",
            "reporter": "tcains1"
        }
    ],
    "3807804": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://github.com/a-ettahri/NullRAT/raw/refs/heads/main/NullRAT/RAT_Null_1.4-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:22:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807804/",
            "reporter": "tcains1"
        }
    ],
    "3807805": [
        {
            "dateadded": "2026-03-29 19:19:09 UTC",
            "url": "https://github.com/provosaintbride913/TwitchFollowers/raw/refs/heads/main/recoast/Followers-Twitch-counterpray.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:42:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807805/",
            "reporter": "tcains1"
        }
    ],
    "3807797": [
        {
            "dateadded": "2026-03-29 19:19:08 UTC",
            "url": "https://raw.githubusercontent.com/thunde5061/Discord-Twitch-Bot/refs/heads/main/unspontaneous/Discord_Bot_Twitch_1.1.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 06:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807797/",
            "reporter": "tcains1"
        }
    ],
    "3807796": [
        {
            "dateadded": "2026-03-29 19:17:07 UTC",
            "url": "http://123.12.153.43:55444/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:35:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807796/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807795": [
        {
            "dateadded": "2026-03-29 19:14:08 UTC",
            "url": "https://mesh-gateway.reinforcedmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807795/",
            "reporter": "anonymous"
        }
    ],
    "3807794": [
        {
            "dateadded": "2026-03-29 19:13:18 UTC",
            "url": "http://115.49.27.49:38620/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:45:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807794/",
            "reporter": "geenensp"
        }
    ],
    "3807792": [
        {
            "dateadded": "2026-03-29 19:12:07 UTC",
            "url": "https://raw.githubusercontent.com/zouag94/map/refs/heads/main/or/75.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:13:20 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807792/",
            "reporter": "tcains1"
        }
    ],
    "3807793": [
        {
            "dateadded": "2026-03-29 19:12:07 UTC",
            "url": "https://github.com/zouag94/map/raw/refs/heads/main/or/75.txt",
            "url_status": "online",
            "last_online": "2026-04-27 12:12:07 UTC",
            "threat": "malware_download",
            "tags": [
                "lua",
                "SmartLoader"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807793/",
            "reporter": "tcains1"
        }
    ],
    "3807791": [
        {
            "dateadded": "2026-03-29 19:09:06 UTC",
            "url": "https://fiber-optic.reinforcedmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:09:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807791/",
            "reporter": "anonymous"
        }
    ],
    "3807784": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://raw.githubusercontent.com/Kupcsi/bounce_zero/refs/heads/main/lang/bounce_zero_v1.0.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:52:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807784/",
            "reporter": "tcains1"
        }
    ],
    "3807785": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://github.com/mustkimkureshi/CAFE-ERP-SYSTEM/raw/refs/heads/main/css/SYSTEM-ER-CAF-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:42:57 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807785/",
            "reporter": "tcains1"
        }
    ],
    "3807786": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://raw.githubusercontent.com/Nopaleafifo630/Tic-Tac-Toe-Game/refs/heads/main/nepotistical/Game_Tac_Toe_Tic_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 15:04:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807786/",
            "reporter": "tcains1"
        }
    ],
    "3807787": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://raw.githubusercontent.com/mustkimkureshi/CAFE-ERP-SYSTEM/refs/heads/main/css/SYSTEM-ER-CAF-v3.3.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:36:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807787/",
            "reporter": "tcains1"
        }
    ],
    "3807788": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://github.com/Nopaleafifo630/Tic-Tac-Toe-Game/raw/refs/heads/main/nepotistical/Game_Tac_Toe_Tic_v1.2.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:13:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807788/",
            "reporter": "tcains1"
        }
    ],
    "3807789": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://github.com/FauzanOktavianto/typing-game/raw/refs/heads/main/app/api/leaderboard/top/game_typing_2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 12:04:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807789/",
            "reporter": "tcains1"
        }
    ],
    "3807790": [
        {
            "dateadded": "2026-03-29 19:07:10 UTC",
            "url": "https://github.com/jeckef/unnamed_game_1_v2/raw/refs/heads/main/epidictical/game-unnamed-v-1.3-beta.4.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:40:44 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807790/",
            "reporter": "tcains1"
        }
    ],
    "3807776": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "http://182.114.48.68:59286/i",
            "url_status": "offline",
            "last_online": "2026-03-29 19:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807776/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807777": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://github.com/tadiseeek/FineSweeper/raw/refs/heads/main/camass/Sweeper-Fine-v1.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:29:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807777/",
            "reporter": "tcains1"
        }
    ],
    "3807778": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://raw.githubusercontent.com/tadiseeek/FineSweeper/refs/heads/main/camass/Sweeper-Fine-v1.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:52:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807778/",
            "reporter": "tcains1"
        }
    ],
    "3807779": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://raw.githubusercontent.com/mustkimkureshi/blood-donation-sql-project/refs/heads/main/reference/project-blood-sql-donation-1.4-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:48:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807779/",
            "reporter": "tcains1"
        }
    ],
    "3807780": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://raw.githubusercontent.com/ImkozZ/Microverse/refs/heads/main/scene/characters/Software-v1.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:27:48 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807780/",
            "reporter": "tcains1"
        }
    ],
    "3807781": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://github.com/mustkimkureshi/blood-donation-sql-project/raw/refs/heads/main/reference/project-blood-sql-donation-1.4-beta.5.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:32:14 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807781/",
            "reporter": "tcains1"
        }
    ],
    "3807782": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://raw.githubusercontent.com/FauzanOktavianto/typing-game/refs/heads/main/app/api/leaderboard/top/game_typing_2.7.zip",
            "url_status": "offline",
            "last_online": "2026-04-14 10:26:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807782/",
            "reporter": "tcains1"
        }
    ],
    "3807783": [
        {
            "dateadded": "2026-03-29 19:07:09 UTC",
            "url": "https://github.com/ImkozZ/Microverse/raw/refs/heads/main/scene/characters/Software-v1.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:52:36 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807783/",
            "reporter": "tcains1"
        }
    ],
    "3807775": [
        {
            "dateadded": "2026-03-29 19:03:11 UTC",
            "url": "https://core-lattice.reinforcedmatrix.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 19:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807775/",
            "reporter": "anonymous"
        }
    ],
    "3807774": [
        {
            "dateadded": "2026-03-29 19:01:21 UTC",
            "url": "http://96.245.232.251:54940/i",
            "url_status": "offline",
            "last_online": "2026-04-07 10:14:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807774/",
            "reporter": "geenensp"
        }
    ],
    "3807773": [
        {
            "dateadded": "2026-03-29 19:00:19 UTC",
            "url": "http://222.137.161.32:42982/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:48:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807773/",
            "reporter": "geenensp"
        }
    ],
    "3807772": [
        {
            "dateadded": "2026-03-29 18:58:09 UTC",
            "url": "https://mapping-svc.navigationalpath.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807772/",
            "reporter": "anonymous"
        }
    ],
    "3807771": [
        {
            "dateadded": "2026-03-29 18:56:10 UTC",
            "url": "https://github.com/El1asz/osu-on-linux/raw/refs/heads/main/tint2/on-osu-linux-2.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:30:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807771/",
            "reporter": "tcains1"
        }
    ],
    "3807765": [
        {
            "dateadded": "2026-03-29 18:56:09 UTC",
            "url": "https://github.com/Jaisinghchoudhary/Finales-Abschlussprojekt/raw/refs/heads/main/sellable/Abschlussprojekt_Finales_v3.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807765/",
            "reporter": "tcains1"
        }
    ],
    "3807766": [
        {
            "dateadded": "2026-03-29 18:56:09 UTC",
            "url": "https://github.com/gooberbenzenoid132/interactive-sora/raw/refs/heads/main/frontend/node_modules/rollup/dist/bin/sora_interactive_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:41:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807766/",
            "reporter": "tcains1"
        }
    ],
    "3807767": [
        {
            "dateadded": "2026-03-29 18:56:09 UTC",
            "url": "https://raw.githubusercontent.com/gooberbenzenoid132/interactive-sora/refs/heads/main/frontend/node_modules/rollup/dist/bin/sora_interactive_2.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807767/",
            "reporter": "tcains1"
        }
    ],
    "3807768": [
        {
            "dateadded": "2026-03-29 18:56:09 UTC",
            "url": "https://raw.githubusercontent.com/Jaisinghchoudhary/Apocalust007-UpdateForge/refs/heads/main/isopropyl/Apocalust-Update-Forge-v3.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:32:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807768/",
            "reporter": "tcains1"
        }
    ],
    "3807769": [
        {
            "dateadded": "2026-03-29 18:56:09 UTC",
            "url": "https://github.com/xtancordy/DX12BindlessUnity/raw/refs/heads/master/Assets/Bindless-Unity-D-1.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807769/",
            "reporter": "tcains1"
        }
    ],
    "3807770": [
        {
            "dateadded": "2026-03-29 18:56:09 UTC",
            "url": "https://github.com/gilmariog12/osu-on-linux/raw/refs/heads/master/Rhenish/linux_osu_on_3.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:04:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807770/",
            "reporter": "tcains1"
        }
    ],
    "3807761": [
        {
            "dateadded": "2026-03-29 18:56:08 UTC",
            "url": "https://raw.githubusercontent.com/gilmariog12/osu-on-linux/refs/heads/master/Rhenish/linux_osu_on_3.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:52:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807761/",
            "reporter": "tcains1"
        }
    ],
    "3807762": [
        {
            "dateadded": "2026-03-29 18:56:08 UTC",
            "url": "https://raw.githubusercontent.com/gilmariog12/exemplos-qua209030/refs/heads/master/.vscode/qua_exemplos_1.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:22:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807762/",
            "reporter": "tcains1"
        }
    ],
    "3807763": [
        {
            "dateadded": "2026-03-29 18:56:08 UTC",
            "url": "https://github.com/gilmariog12/exemplos-qua209030/raw/refs/heads/master/.vscode/qua_exemplos_1.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807763/",
            "reporter": "tcains1"
        }
    ],
    "3807764": [
        {
            "dateadded": "2026-03-29 18:56:08 UTC",
            "url": "https://github.com/Jaisinghchoudhary/Apocalust007-UpdateForge/raw/refs/heads/main/isopropyl/Apocalust-Update-Forge-v3.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:28:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807764/",
            "reporter": "tcains1"
        }
    ],
    "3807760": [
        {
            "dateadded": "2026-03-29 18:56:07 UTC",
            "url": "https://raw.githubusercontent.com/xtancordy/DX12BindlessUnity/refs/heads/master/Assets/Bindless-Unity-D-1.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807760/",
            "reporter": "tcains1"
        }
    ],
    "3807751": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://raw.githubusercontent.com/Shiraori879/PUBG-Mobile-Bypass-Source-fixed/refs/heads/main/packages/System.Numerics.Vectors.4.4.0/ref/xamarinwatchos10/Bypass_Source_PUB_Mobile_fixed_v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:57:30 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807751/",
            "reporter": "tcains1"
        }
    ],
    "3807752": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://github.com/Shiraori879/PUBG-Mobile-Bypass-Source-fixed/raw/refs/heads/main/packages/System.Numerics.Vectors.4.4.0/ref/xamarinwatchos10/Bypass_Source_PUB_Mobile_fixed_v1.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:35:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807752/",
            "reporter": "tcains1"
        }
    ],
    "3807753": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://github.com/Cheat360/rank-no-taisen-front/raw/refs/heads/main/public/no-taisen-front-rank-3.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:15:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807753/",
            "reporter": "tcains1"
        }
    ],
    "3807754": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://github.com/kalbou/BMO-AI-Chatbot/raw/refs/heads/main/frontend/src/components/BM-A-Chatbot-3.0.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:45:13 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807754/",
            "reporter": "tcains1"
        }
    ],
    "3807755": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://vector-base.navigationalpath.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:52:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807755/",
            "reporter": "anonymous"
        }
    ],
    "3807756": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://github.com/Jaspreet-1234/gaming-website/raw/refs/heads/master/assets/gaming-website-v2.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:30:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807756/",
            "reporter": "tcains1"
        }
    ],
    "3807757": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://github.com/Sergioam1/Elden-ring-leetcode-extension/raw/refs/heads/main/public/sounds/extension_leetcode_Elden_ring_v3.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807757/",
            "reporter": "tcains1"
        }
    ],
    "3807758": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://raw.githubusercontent.com/Jaspreet-1234/gaming-website/refs/heads/master/assets/gaming-website-v2.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:30:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807758/",
            "reporter": "tcains1"
        }
    ],
    "3807759": [
        {
            "dateadded": "2026-03-29 18:52:12 UTC",
            "url": "https://raw.githubusercontent.com/Sergioam1/Elden-ring-leetcode-extension/refs/heads/main/public/sounds/extension_leetcode_Elden_ring_v3.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 07:18:25 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807759/",
            "reporter": "tcains1"
        }
    ],
    "3807746": [
        {
            "dateadded": "2026-03-29 18:52:11 UTC",
            "url": "https://github.com/xyinia/Super-Mario-Bros.-Remastered-Public/raw/refs/heads/main/Scripts/Classes/Entities/Public_Bros_Super_Mario_Remastered_A.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 07:20:40 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807746/",
            "reporter": "tcains1"
        }
    ],
    "3807747": [
        {
            "dateadded": "2026-03-29 18:52:11 UTC",
            "url": "https://raw.githubusercontent.com/xyinia/Super-Mario-Bros.-Remastered-Public/refs/heads/main/Scripts/Classes/Entities/Public_Bros_Super_Mario_Remastered_A.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:27:19 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807747/",
            "reporter": "tcains1"
        }
    ],
    "3807748": [
        {
            "dateadded": "2026-03-29 18:52:11 UTC",
            "url": "https://github.com/REUBENLAMPTEY/Nova-Arcade-HTML-5-Game-Portal-CMS-PHP-Script/raw/refs/heads/main/technographically/Game-Nova-PH-Arcade-HTM-Portal-CM-Script-incessably.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:32:58 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807748/",
            "reporter": "tcains1"
        }
    ],
    "3807749": [
        {
            "dateadded": "2026-03-29 18:52:11 UTC",
            "url": "https://raw.githubusercontent.com/kalbou/BMO-AI-Chatbot/refs/heads/main/frontend/src/components/BM-A-Chatbot-3.0.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 09:29:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807749/",
            "reporter": "tcains1"
        }
    ],
    "3807750": [
        {
            "dateadded": "2026-03-29 18:52:11 UTC",
            "url": "https://raw.githubusercontent.com/Cheat360/rank-no-taisen-front/refs/heads/main/public/no-taisen-front-rank-3.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 10:43:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807750/",
            "reporter": "tcains1"
        }
    ],
    "3807745": [
        {
            "dateadded": "2026-03-29 18:52:07 UTC",
            "url": "https://raw.githubusercontent.com/REUBENLAMPTEY/Nova-Arcade-HTML-5-Game-Portal-CMS-PHP-Script/refs/heads/main/technographically/Game-Nova-PH-Arcade-HTM-Portal-CM-Script-incessably.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:14:03 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807745/",
            "reporter": "tcains1"
        }
    ],
    "3807744": [
        {
            "dateadded": "2026-03-29 18:46:09 UTC",
            "url": "https://trace-beacon.navigationalpath.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807744/",
            "reporter": "anonymous"
        }
    ],
    "3807743": [
        {
            "dateadded": "2026-03-29 18:41:08 UTC",
            "url": "https://geo-spatial.navigationalpath.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807743/",
            "reporter": "anonymous"
        }
    ],
    "3807741": [
        {
            "dateadded": "2026-03-29 18:37:10 UTC",
            "url": "https://raw.githubusercontent.com/MohdSardar/Python-Libraries-for-Data-Science-/refs/heads/main/Asilidae/for-Science-Data-Libraries-Python-alkalimetry.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 07:04:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807741/",
            "reporter": "tcains1"
        }
    ],
    "3807742": [
        {
            "dateadded": "2026-03-29 18:37:10 UTC",
            "url": "https://raw.githubusercontent.com/MohdSardar/raylib4PlayStation2/refs/heads/main/samples/shapes/mix/Play-raylib-Station-v1.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:19:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807742/",
            "reporter": "tcains1"
        }
    ],
    "3807733": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://github.com/MohdSardar/Python-Libraries-for-Data-Science-/raw/refs/heads/main/Asilidae/for-Science-Data-Libraries-Python-alkalimetry.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 07:40:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807733/",
            "reporter": "tcains1"
        }
    ],
    "3807734": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://raw.githubusercontent.com/MohdSardar/GenAI_App-AI-Code-Reviewer/refs/heads/main/anthracnose/Gen-Code-Reviewer-A-App-2.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:23:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807734/",
            "reporter": "tcains1"
        }
    ],
    "3807735": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://github.com/cosggg/Simon-Says-RAG-Android/raw/refs/heads/main/app/src/main/res/drawable/Android-RA-Says-Simon-transparentness.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:17:28 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807735/",
            "reporter": "tcains1"
        }
    ],
    "3807736": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://raw.githubusercontent.com/MohdSardar/Uber-Data-Analysis/refs/heads/main/chlorochromic/Analysis_Data_Uber_v2.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:24:02 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807736/",
            "reporter": "tcains1"
        }
    ],
    "3807737": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://github.com/MohdSardar/Uber-Data-Analysis/raw/refs/heads/main/chlorochromic/Analysis_Data_Uber_v2.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:20:38 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807737/",
            "reporter": "tcains1"
        }
    ],
    "3807738": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://github.com/MohdSardar/GenAI_App-AI-Code-Reviewer/raw/refs/heads/main/anthracnose/Gen-Code-Reviewer-A-App-2.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 06:48:12 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807738/",
            "reporter": "tcains1"
        }
    ],
    "3807739": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://raw.githubusercontent.com/cosggg/Simon-Says-RAG-Android/refs/heads/main/app/src/main/res/drawable/Android-RA-Says-Simon-transparentness.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:06:37 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807739/",
            "reporter": "tcains1"
        }
    ],
    "3807740": [
        {
            "dateadded": "2026-03-29 18:37:08 UTC",
            "url": "https://github.com/MohdSardar/raylib4PlayStation2/raw/refs/heads/main/samples/shapes/mix/Play-raylib-Station-v1.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-30 07:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807740/",
            "reporter": "tcains1"
        }
    ],
    "3807732": [
        {
            "dateadded": "2026-03-29 18:35:10 UTC",
            "url": "https://route-engine.navigationalpath.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807732/",
            "reporter": "anonymous"
        }
    ],
    "3807731": [
        {
            "dateadded": "2026-03-29 18:33:12 UTC",
            "url": "http://222.137.161.32:42982/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:09:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807731/",
            "reporter": "geenensp"
        }
    ],
    "3807729": [
        {
            "dateadded": "2026-03-29 18:31:20 UTC",
            "url": "http://27.215.80.254:32973/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807729/",
            "reporter": "geenensp"
        }
    ],
    "3807728": [
        {
            "dateadded": "2026-03-29 18:31:07 UTC",
            "url": "http://144.31.156.1:4477/CheatClients/rata.exe",
            "url_status": "offline",
            "last_online": "2026-03-30 21:19:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807728/",
            "reporter": "seven7174"
        }
    ],
    "3807727": [
        {
            "dateadded": "2026-03-29 18:30:09 UTC",
            "url": "https://waypoint-alfa.navigationalpath.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807727/",
            "reporter": "anonymous"
        }
    ],
    "3807726": [
        {
            "dateadded": "2026-03-29 18:27:17 UTC",
            "url": "http://110.37.27.87:35208/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:29:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807726/",
            "reporter": "geenensp"
        }
    ],
    "3807725": [
        {
            "dateadded": "2026-03-29 18:25:07 UTC",
            "url": "https://edge-proxy.structuralgridhub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:25:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807725/",
            "reporter": "anonymous"
        }
    ],
    "3807724": [
        {
            "dateadded": "2026-03-29 18:21:09 UTC",
            "url": "http://45.177.33.135:59736/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:01:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807724/",
            "reporter": "geenensp"
        }
    ],
    "3807723": [
        {
            "dateadded": "2026-03-29 18:18:09 UTC",
            "url": "https://log-monitor.structuralgridhub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807723/",
            "reporter": "anonymous"
        }
    ],
    "3807722": [
        {
            "dateadded": "2026-03-29 18:13:08 UTC",
            "url": "https://cdn-static.structuralgridhub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807722/",
            "reporter": "anonymous"
        }
    ],
    "3807721": [
        {
            "dateadded": "2026-03-29 18:08:07 UTC",
            "url": "https://data-vault.structuralgridhub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807721/",
            "reporter": "anonymous"
        }
    ],
    "3807720": [
        {
            "dateadded": "2026-03-29 18:07:20 UTC",
            "url": "http://27.215.80.254:32973/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:58:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807720/",
            "reporter": "geenensp"
        }
    ],
    "3807719": [
        {
            "dateadded": "2026-03-29 18:01:08 UTC",
            "url": "https://api-cluster.structuralgridhub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 18:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807719/",
            "reporter": "anonymous"
        }
    ],
    "3807718": [
        {
            "dateadded": "2026-03-29 17:57:13 UTC",
            "url": "http://117.216.184.179:55889/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:48:41 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807718/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807717": [
        {
            "dateadded": "2026-03-29 17:57:08 UTC",
            "url": "http://42.232.76.175:48346/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:00:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807717/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807716": [
        {
            "dateadded": "2026-03-29 17:57:07 UTC",
            "url": "http://59.176.103.94:49905/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:44:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807716/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807715": [
        {
            "dateadded": "2026-03-29 17:56:09 UTC",
            "url": "https://auth-secure.structuralgridhub.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:56:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807715/",
            "reporter": "anonymous"
        }
    ],
    "3807714": [
        {
            "dateadded": "2026-03-29 17:53:04 UTC",
            "url": "http://85.239.147.6/files/1781548144/ebJvLxF.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807714/",
            "reporter": "c2hunter"
        }
    ],
    "3807713": [
        {
            "dateadded": "2026-03-29 17:50:19 UTC",
            "url": "http://45.177.33.135:59736/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:29:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807713/",
            "reporter": "geenensp"
        }
    ],
    "3807712": [
        {
            "dateadded": "2026-03-29 17:50:08 UTC",
            "url": "https://hruckb.radiantventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:50:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807712/",
            "reporter": "anonymous"
        }
    ],
    "3807711": [
        {
            "dateadded": "2026-03-29 17:47:14 UTC",
            "url": "http://112.198.239.194:52823/i",
            "url_status": "offline",
            "last_online": "2026-04-04 09:48:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807711/",
            "reporter": "geenensp"
        }
    ],
    "3807710": [
        {
            "dateadded": "2026-03-29 17:45:09 UTC",
            "url": "https://opt1-chain.radiantventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807710/",
            "reporter": "anonymous"
        }
    ],
    "3807709": [
        {
            "dateadded": "2026-03-29 17:42:07 UTC",
            "url": "http://47.160.151.251:60697/i",
            "url_status": "offline",
            "last_online": "2026-04-11 16:08:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807709/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807708": [
        {
            "dateadded": "2026-03-29 17:39:13 UTC",
            "url": "https://snbz.radiantventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807708/",
            "reporter": "anonymous"
        }
    ],
    "3807707": [
        {
            "dateadded": "2026-03-29 17:35:59 UTC",
            "url": "http://196.189.198.193:41989/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:42:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807707/",
            "reporter": "geenensp"
        }
    ],
    "3807706": [
        {
            "dateadded": "2026-03-29 17:34:07 UTC",
            "url": "https://qhsgsm.radiantventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:34:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807706/",
            "reporter": "anonymous"
        }
    ],
    "3807705": [
        {
            "dateadded": "2026-03-29 17:32:11 UTC",
            "url": "http://59.176.103.94:49905/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 17:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807705/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807704": [
        {
            "dateadded": "2026-03-29 17:28:13 UTC",
            "url": "http://42.5.53.147:51709/i",
            "url_status": "offline",
            "last_online": "2026-04-05 04:52:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807704/",
            "reporter": "geenensp"
        }
    ],
    "3807703": [
        {
            "dateadded": "2026-03-29 17:28:10 UTC",
            "url": "https://soli-cast.radiantventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:28:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807703/",
            "reporter": "anonymous"
        }
    ],
    "3807701": [
        {
            "dateadded": "2026-03-29 17:26:18 UTC",
            "url": "http://110.37.121.43:44715/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:49:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807701/",
            "reporter": "geenensp"
        }
    ],
    "3807702": [
        {
            "dateadded": "2026-03-29 17:26:18 UTC",
            "url": "http://110.37.121.43:44715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:57:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807702/",
            "reporter": "geenensp"
        }
    ],
    "3807699": [
        {
            "dateadded": "2026-03-29 17:22:09 UTC",
            "url": "http://110.37.100.152:60191/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807699/",
            "reporter": "geenensp"
        }
    ],
    "3807700": [
        {
            "dateadded": "2026-03-29 17:22:09 UTC",
            "url": "https://curiousdrift.radiantventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807700/",
            "reporter": "anonymous"
        }
    ],
    "3807698": [
        {
            "dateadded": "2026-03-29 17:20:23 UTC",
            "url": "http://219.155.210.59:43889/i",
            "url_status": "offline",
            "last_online": "2026-03-29 17:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807698/",
            "reporter": "geenensp"
        }
    ],
    "3807697": [
        {
            "dateadded": "2026-03-29 17:18:17 UTC",
            "url": "http://110.37.65.205:59034/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:09:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807697/",
            "reporter": "geenensp"
        }
    ],
    "3807696": [
        {
            "dateadded": "2026-03-29 17:16:08 UTC",
            "url": "https://adapterlog.latticeharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807696/",
            "reporter": "anonymous"
        }
    ],
    "3807695": [
        {
            "dateadded": "2026-03-29 17:13:39 UTC",
            "url": "http://196.189.198.193:41989/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807695/",
            "reporter": "geenensp"
        }
    ],
    "3807694": [
        {
            "dateadded": "2026-03-29 17:12:05 UTC",
            "url": "http://60.19.71.200:59561/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:23:20 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807694/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807693": [
        {
            "dateadded": "2026-03-29 17:11:08 UTC",
            "url": "https://sampl-cav.latticeharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807693/",
            "reporter": "anonymous"
        }
    ],
    "3807691": [
        {
            "dateadded": "2026-03-29 17:10:19 UTC",
            "url": "http://110.37.118.241:38063/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:15:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807691/",
            "reporter": "geenensp"
        }
    ],
    "3807692": [
        {
            "dateadded": "2026-03-29 17:10:19 UTC",
            "url": "http://42.5.53.147:51709/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 05:03:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807692/",
            "reporter": "geenensp"
        }
    ],
    "3807690": [
        {
            "dateadded": "2026-03-29 17:05:18 UTC",
            "url": "http://42.59.197.45:36986/i",
            "url_status": "offline",
            "last_online": "2026-04-12 16:05:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807690/",
            "reporter": "geenensp"
        }
    ],
    "3807689": [
        {
            "dateadded": "2026-03-29 17:05:11 UTC",
            "url": "https://travelwes.latticeharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807689/",
            "reporter": "anonymous"
        }
    ],
    "3807688": [
        {
            "dateadded": "2026-03-29 17:00:08 UTC",
            "url": "https://wswzw.latticeharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 17:00:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807688/",
            "reporter": "anonymous"
        }
    ],
    "3807687": [
        {
            "dateadded": "2026-03-29 16:59:16 UTC",
            "url": "http://59.97.181.179:35388/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:59:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807687/",
            "reporter": "geenensp"
        }
    ],
    "3807686": [
        {
            "dateadded": "2026-03-29 16:58:09 UTC",
            "url": "http://59.97.181.179:35388/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807686/",
            "reporter": "geenensp"
        }
    ],
    "3807685": [
        {
            "dateadded": "2026-03-29 16:56:20 UTC",
            "url": "http://117.244.79.12:37634/i",
            "url_status": "offline",
            "last_online": "2026-03-30 06:34:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807685/",
            "reporter": "geenensp"
        }
    ],
    "3807684": [
        {
            "dateadded": "2026-03-29 16:55:12 UTC",
            "url": "https://drawvall.latticeharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807684/",
            "reporter": "anonymous"
        }
    ],
    "3807683": [
        {
            "dateadded": "2026-03-29 16:54:17 UTC",
            "url": "http://219.155.210.59:43889/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:54:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807683/",
            "reporter": "geenensp"
        }
    ],
    "3807682": [
        {
            "dateadded": "2026-03-29 16:50:13 UTC",
            "url": "http://115.63.49.148:44854/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:53:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807682/",
            "reporter": "geenensp"
        }
    ],
    "3807681": [
        {
            "dateadded": "2026-03-29 16:50:10 UTC",
            "url": "https://vor-lineet.latticeharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807681/",
            "reporter": "anonymous"
        }
    ],
    "3807680": [
        {
            "dateadded": "2026-03-29 16:47:08 UTC",
            "url": "https://mz48d.apexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807680/",
            "reporter": "anonymous"
        }
    ],
    "3807679": [
        {
            "dateadded": "2026-03-29 16:44:18 UTC",
            "url": "http://110.39.246.84:33231/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:18:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807679/",
            "reporter": "geenensp"
        }
    ],
    "3807678": [
        {
            "dateadded": "2026-03-29 16:40:21 UTC",
            "url": "http://38.196.90.139:40459/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:35:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807678/",
            "reporter": "geenensp"
        }
    ],
    "3807676": [
        {
            "dateadded": "2026-03-29 16:39:18 UTC",
            "url": "http://110.37.103.93:37633/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:49:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807676/",
            "reporter": "geenensp"
        }
    ],
    "3807677": [
        {
            "dateadded": "2026-03-29 16:39:18 UTC",
            "url": "http://117.244.79.12:37634/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 06:23:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807677/",
            "reporter": "geenensp"
        }
    ],
    "3807674": [
        {
            "dateadded": "2026-03-29 16:39:17 UTC",
            "url": "http://110.37.118.241:38063/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807674/",
            "reporter": "geenensp"
        }
    ],
    "3807675": [
        {
            "dateadded": "2026-03-29 16:39:17 UTC",
            "url": "http://118.232.137.101:35565/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:11:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807675/",
            "reporter": "geenensp"
        }
    ],
    "3807672": [
        {
            "dateadded": "2026-03-29 16:39:11 UTC",
            "url": "https://merfluxar8.apexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807672/",
            "reporter": "anonymous"
        }
    ],
    "3807673": [
        {
            "dateadded": "2026-03-29 16:39:11 UTC",
            "url": "https://pcep.apexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:39:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807673/",
            "reporter": "anonymous"
        }
    ],
    "3807671": [
        {
            "dateadded": "2026-03-29 16:39:09 UTC",
            "url": "https://69hjs0.apexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807671/",
            "reporter": "anonymous"
        }
    ],
    "3807670": [
        {
            "dateadded": "2026-03-29 16:39:06 UTC",
            "url": "http://85.239.147.6/files/8042875554/Abyf8rb.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807670/",
            "reporter": "Bitsight"
        }
    ],
    "3807669": [
        {
            "dateadded": "2026-03-29 16:24:43 UTC",
            "url": "http://39.40.151.56:49098/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807669/",
            "reporter": "geenensp"
        }
    ],
    "3807668": [
        {
            "dateadded": "2026-03-29 16:24:30 UTC",
            "url": "http://206.0.183.28:48994/i",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807668/",
            "reporter": "geenensp"
        }
    ],
    "3807665": [
        {
            "dateadded": "2026-03-29 16:24:20 UTC",
            "url": "http://110.39.246.84:33231/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807665/",
            "reporter": "geenensp"
        }
    ],
    "3807666": [
        {
            "dateadded": "2026-03-29 16:24:20 UTC",
            "url": "http://182.121.41.96:36911/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:32:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807666/",
            "reporter": "geenensp"
        }
    ],
    "3807667": [
        {
            "dateadded": "2026-03-29 16:24:20 UTC",
            "url": "http://38.196.90.139:40459/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:07:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807667/",
            "reporter": "geenensp"
        }
    ],
    "3807664": [
        {
            "dateadded": "2026-03-29 16:24:18 UTC",
            "url": "http://118.232.137.101:35565/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:13:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807664/",
            "reporter": "geenensp"
        }
    ],
    "3807661": [
        {
            "dateadded": "2026-03-29 16:24:17 UTC",
            "url": "https://raw.githubusercontent.com/mondry1013/Delta-Menu-Force-Hack/refs/heads/main/Tshi/Delta-Force-Hack-Menu-1.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:19:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807661/",
            "reporter": "tcains1"
        }
    ],
    "3807662": [
        {
            "dateadded": "2026-03-29 16:24:17 UTC",
            "url": "https://lgwdtq.paragonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807662/",
            "reporter": "anonymous"
        }
    ],
    "3807663": [
        {
            "dateadded": "2026-03-29 16:24:17 UTC",
            "url": "https://sparrowpine.apexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807663/",
            "reporter": "anonymous"
        }
    ],
    "3807659": [
        {
            "dateadded": "2026-03-29 16:24:16 UTC",
            "url": "https://raw.githubusercontent.com/Komfuu0963/Latency-Minimizer/refs/heads/main/cloudward/Minimizer_Latency_3.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807659/",
            "reporter": "tcains1"
        }
    ],
    "3807660": [
        {
            "dateadded": "2026-03-29 16:24:16 UTC",
            "url": "https://github.com/Komfuu0963/Latency-Minimizer/raw/refs/heads/main/cloudward/Minimizer_Latency_3.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:17:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807660/",
            "reporter": "tcains1"
        }
    ],
    "3807656": [
        {
            "dateadded": "2026-03-29 16:24:15 UTC",
            "url": "https://raw.githubusercontent.com/Dean12345644533/gamepulse-rawg-ml-api/refs/heads/main/sql/gamepulse_api_ml_rawg_v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:24:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807656/",
            "reporter": "tcains1"
        }
    ],
    "3807657": [
        {
            "dateadded": "2026-03-29 16:24:15 UTC",
            "url": "https://raw.githubusercontent.com/zorddddsd/zorddddsd.github.io/refs/heads/main/anthribid/github-io-zorddddsd-3.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 04:37:27 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807657/",
            "reporter": "tcains1"
        }
    ],
    "3807658": [
        {
            "dateadded": "2026-03-29 16:24:15 UTC",
            "url": "https://github.com/Dean12345644533/gamepulse-rawg-ml-api/raw/refs/heads/main/sql/gamepulse_api_ml_rawg_v3.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 04:42:49 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807658/",
            "reporter": "tcains1"
        }
    ],
    "3807654": [
        {
            "dateadded": "2026-03-29 16:24:14 UTC",
            "url": "https://github.com/zorddddsd/zorddddsd.github.io/raw/refs/heads/main/anthribid/github-io-zorddddsd-3.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:01:45 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807654/",
            "reporter": "tcains1"
        }
    ],
    "3807655": [
        {
            "dateadded": "2026-03-29 16:24:14 UTC",
            "url": "https://github.com/lanjingwei2026-maker/fps-ping-booster-new/raw/refs/heads/main/yusdrum/booster_fps_ping_new_v1.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:59:59 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807655/",
            "reporter": "tcains1"
        }
    ],
    "3807643": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://raw.githubusercontent.com/anonymss642/James-Bond-Quantum-of-Solace-PC-Fix-Controller-Support/refs/heads/main/build/obj/Win32/Debug/Quantum-Fix-of-Controller-Solace-Bond-Support-P-James-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807643/",
            "reporter": "tcains1"
        }
    ],
    "3807644": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/ShweGyi0000/shwegyi0000.github.io/raw/refs/heads/main/unframed/shwegyi_github_io_3.0.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:24:01 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807644/",
            "reporter": "tcains1"
        }
    ],
    "3807645": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/mondry1013/Delta-Menu-Force-Hack/raw/refs/heads/main/Tshi/Delta-Force-Hack-Menu-1.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:13:51 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807645/",
            "reporter": "tcains1"
        }
    ],
    "3807646": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/bhoomagopala28/sd2-slus-move-editor/raw/refs/heads/master/assets/editor_sd_slus_move_1.7-alpha.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:49:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807646/",
            "reporter": "tcains1"
        }
    ],
    "3807647": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/ShweGyi0000/hytale2mc/raw/refs/heads/main/event-stream/src/main/mc_hytale_1.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:13:06 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807647/",
            "reporter": "tcains1"
        }
    ],
    "3807648": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/zorddddsd/ArcPass/raw/refs/heads/main/unharbored/Pass-Arc-Centricae.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:13:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807648/",
            "reporter": "tcains1"
        }
    ],
    "3807649": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/anonymss642/James-Bond-Quantum-of-Solace-PC-Fix-Controller-Support/raw/refs/heads/main/build/obj/Win32/Debug/Quantum-Fix-of-Controller-Solace-Bond-Support-P-James-2.6.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807649/",
            "reporter": "tcains1"
        }
    ],
    "3807650": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://raw.githubusercontent.com/bhoomagopala28/sd2-slus-move-editor/refs/heads/master/assets/editor_sd_slus_move_1.7-alpha.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:13:39 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807650/",
            "reporter": "tcains1"
        }
    ],
    "3807651": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://g51vxer.paragonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807651/",
            "reporter": "anonymous"
        }
    ],
    "3807652": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/araykusuma/Gaming-Fix-Hub-2026/raw/refs/heads/main/excitosecretory/Hub-Fix-Gaming-3.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 04:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807652/",
            "reporter": "tcains1"
        }
    ],
    "3807653": [
        {
            "dateadded": "2026-03-29 16:24:13 UTC",
            "url": "https://github.com/mondry1013/Delta-Menu-Force-Hack/raw/refs/heads/main/Tshi/Hack_Force_Delta_Menu_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:01:54 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807653/",
            "reporter": "tcains1"
        }
    ],
    "3807640": [
        {
            "dateadded": "2026-03-29 16:24:12 UTC",
            "url": "https://github.com/anonymss642/anonymss642.github.io/raw/refs/heads/main/butterwort/github-io-anonymss-1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:46 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807640/",
            "reporter": "tcains1"
        }
    ],
    "3807641": [
        {
            "dateadded": "2026-03-29 16:24:12 UTC",
            "url": "https://raw.githubusercontent.com/ShweGyi0000/shwegyi0000.github.io/refs/heads/main/unframed/shwegyi_github_io_3.0.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:21:18 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807641/",
            "reporter": "tcains1"
        }
    ],
    "3807642": [
        {
            "dateadded": "2026-03-29 16:24:12 UTC",
            "url": "https://raw.githubusercontent.com/zorddddsd/ArcPass/refs/heads/main/unharbored/Pass-Arc-Centricae.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:37:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807642/",
            "reporter": "tcains1"
        }
    ],
    "3807639": [
        {
            "dateadded": "2026-03-29 16:24:11 UTC",
            "url": "https://raw.githubusercontent.com/lanjingwei2026-maker/fps-ping-booster-new/refs/heads/main/yusdrum/booster_fps_ping_new_v1.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807639/",
            "reporter": "tcains1"
        }
    ],
    "3807636": [
        {
            "dateadded": "2026-03-29 16:24:10 UTC",
            "url": "https://raw.githubusercontent.com/mondry1013/Delta-Menu-Force-Hack/refs/heads/main/Tshi/Hack_Force_Delta_Menu_2.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:09:55 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807636/",
            "reporter": "tcains1"
        }
    ],
    "3807637": [
        {
            "dateadded": "2026-03-29 16:24:10 UTC",
            "url": "https://raw.githubusercontent.com/ShweGyi0000/hytale2mc/refs/heads/main/event-stream/src/main/mc_hytale_1.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807637/",
            "reporter": "tcains1"
        }
    ],
    "3807638": [
        {
            "dateadded": "2026-03-29 16:24:10 UTC",
            "url": "https://raw.githubusercontent.com/anonymss642/anonymss642.github.io/refs/heads/main/butterwort/github-io-anonymss-1.8.zip",
            "url_status": "online",
            "last_online": "2026-04-27 11:38:21 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807638/",
            "reporter": "tcains1"
        }
    ],
    "3807635": [
        {
            "dateadded": "2026-03-29 16:08:21 UTC",
            "url": "http://110.37.103.93:37633/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:13:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807635/",
            "reporter": "geenensp"
        }
    ],
    "3807634": [
        {
            "dateadded": "2026-03-29 16:08:11 UTC",
            "url": "https://raw.githubusercontent.com/araykusuma/css/refs/heads/main/sarlak/Software-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:52:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807634/",
            "reporter": "tcains1"
        }
    ],
    "3807620": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/nate90911/dodhacks/refs/heads/main/dodhacks-module-src/microsoft/Release.AVX2/Software-v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:13:32 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807620/",
            "reporter": "tcains1"
        }
    ],
    "3807621": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/TanveerMalik97/steam-badges-db/refs/heads/main/mogitocia/steam_badges_db_2.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:34:17 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807621/",
            "reporter": "tcains1"
        }
    ],
    "3807622": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/human172/RPG.Game/raw/refs/heads/main/capocchia/Game_RP_1.4-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:22:56 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807622/",
            "reporter": "tcains1"
        }
    ],
    "3807623": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/TanveerMalik97/steam-badges-db/raw/refs/heads/main/mogitocia/steam_badges_db_2.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:08:11 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807623/",
            "reporter": "tcains1"
        }
    ],
    "3807624": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/human172/RPG.Game/refs/heads/main/capocchia/Game_RP_1.4-alpha.3.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:51:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807624/",
            "reporter": "tcains1"
        }
    ],
    "3807625": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/nate90911/dodhacks/raw/refs/heads/main/dodhacks-module-src/microsoft/Release.AVX2/Software-v2.6.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:56:41 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807625/",
            "reporter": "tcains1"
        }
    ],
    "3807626": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/GASSNY/NagaKeyMapper/raw/refs/heads/main/src/Key_Mapper_Naga_1.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:29:04 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807626/",
            "reporter": "tcains1"
        }
    ],
    "3807627": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/GRAHHHHH99/MiniVitaTV/raw/refs/heads/main/dunch/Vita_Mini_TV_2.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:08:16 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807627/",
            "reporter": "tcains1"
        }
    ],
    "3807628": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/GASSNY/NagaKeyMapper/refs/heads/main/src/Key_Mapper_Naga_1.5.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:45:53 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807628/",
            "reporter": "tcains1"
        }
    ],
    "3807629": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/mraflyaditya/hytale-server/raw/refs/heads/main/docs/en/server_hytale_2.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:36:26 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807629/",
            "reporter": "tcains1"
        }
    ],
    "3807630": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/mraflyaditya/hytale-server/refs/heads/main/docs/en/server_hytale_2.9.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:20:23 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807630/",
            "reporter": "tcains1"
        }
    ],
    "3807631": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/GRAHHHHH99/MiniVitaTV/refs/heads/main/dunch/Vita_Mini_TV_2.2.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807631/",
            "reporter": "tcains1"
        }
    ],
    "3807632": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://raw.githubusercontent.com/araykusuma/Gaming-Fix-Hub-2026/refs/heads/main/excitosecretory/Hub-Fix-Gaming-3.4.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:52:24 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807632/",
            "reporter": "tcains1"
        }
    ],
    "3807633": [
        {
            "dateadded": "2026-03-29 16:08:10 UTC",
            "url": "https://github.com/araykusuma/css/raw/refs/heads/main/sarlak/Software-v1.1.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 03:56:07 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807633/",
            "reporter": "tcains1"
        }
    ],
    "3807619": [
        {
            "dateadded": "2026-03-29 16:05:18 UTC",
            "url": "http://42.59.197.45:36986/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-12 14:02:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807619/",
            "reporter": "geenensp"
        }
    ],
    "3807618": [
        {
            "dateadded": "2026-03-29 16:01:10 UTC",
            "url": "https://solvale4a.paragonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 16:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807618/",
            "reporter": "anonymous"
        }
    ],
    "3807616": [
        {
            "dateadded": "2026-03-29 16:00:11 UTC",
            "url": "https://github.com/itsyxc/now.gg-roblox-in-browser/raw/refs/heads/main/Turkomanic/browser-gg-roblox-in-now-1.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 10:37:34 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807616/",
            "reporter": "tcains1"
        }
    ],
    "3807617": [
        {
            "dateadded": "2026-03-29 16:00:11 UTC",
            "url": "https://raw.githubusercontent.com/itsyxc/now.gg-roblox-in-browser/refs/heads/main/Turkomanic/browser-gg-roblox-in-now-1.8.zip",
            "url_status": "offline",
            "last_online": "2026-03-31 09:50:00 UTC",
            "threat": "malware_download",
            "tags": [
                "SmartLoader",
                "zip"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807617/",
            "reporter": "tcains1"
        }
    ],
    "3807615": [
        {
            "dateadded": "2026-03-29 15:58:24 UTC",
            "url": "http://110.37.61.44:44511/i",
            "url_status": "offline",
            "last_online": "2026-03-30 04:14:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807615/",
            "reporter": "geenensp"
        }
    ],
    "3807614": [
        {
            "dateadded": "2026-03-29 15:56:10 UTC",
            "url": "https://blenddense.paragonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:56:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807614/",
            "reporter": "anonymous"
        }
    ],
    "3807613": [
        {
            "dateadded": "2026-03-29 15:53:12 UTC",
            "url": "https://github.com/sharrend/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "offline",
            "last_online": "2026-03-31 10:07:34 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807613/",
            "reporter": "tcains1"
        }
    ],
    "3807612": [
        {
            "dateadded": "2026-03-29 15:53:10 UTC",
            "url": "https://raw.githubusercontent.com/sharrend/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe",
            "url_status": "offline",
            "last_online": "2026-03-31 10:11:50 UTC",
            "threat": "malware_download",
            "tags": [
                "BRAT",
                "exe"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807612/",
            "reporter": "tcains1"
        }
    ],
    "3807611": [
        {
            "dateadded": "2026-03-29 15:50:13 UTC",
            "url": "https://noblebalan.paragonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807611/",
            "reporter": "anonymous"
        }
    ],
    "3807610": [
        {
            "dateadded": "2026-03-29 15:47:14 UTC",
            "url": "https://b7vwxeo.paragonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807610/",
            "reporter": "anonymous"
        }
    ],
    "3807609": [
        {
            "dateadded": "2026-03-29 15:46:16 UTC",
            "url": "http://115.55.128.28:46018/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:46:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807609/",
            "reporter": "geenensp"
        }
    ],
    "3807608": [
        {
            "dateadded": "2026-03-29 15:38:08 UTC",
            "url": "https://dz0ly973.quantumpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807608/",
            "reporter": "anonymous"
        }
    ],
    "3807607": [
        {
            "dateadded": "2026-03-29 15:35:19 UTC",
            "url": "http://125.113.156.251:39635/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:40:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807607/",
            "reporter": "geenensp"
        }
    ],
    "3807606": [
        {
            "dateadded": "2026-03-29 15:32:18 UTC",
            "url": "http://110.37.61.44:44511/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:37:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807606/",
            "reporter": "geenensp"
        }
    ],
    "3807605": [
        {
            "dateadded": "2026-03-29 15:32:09 UTC",
            "url": "https://impor-hinge.quantumpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807605/",
            "reporter": "anonymous"
        }
    ],
    "3807604": [
        {
            "dateadded": "2026-03-29 15:32:07 UTC",
            "url": "http://61.53.149.230:56810/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:26:56 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807604/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807603": [
        {
            "dateadded": "2026-03-29 15:29:20 UTC",
            "url": "http://5.165.103.185:35163/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:29:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807603/",
            "reporter": "geenensp"
        }
    ],
    "3807602": [
        {
            "dateadded": "2026-03-29 15:28:22 UTC",
            "url": "http://5.165.103.185:35163/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:28:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807602/",
            "reporter": "geenensp"
        }
    ],
    "3807601": [
        {
            "dateadded": "2026-03-29 15:27:20 UTC",
            "url": "http://202.111.130.60:55074/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:53:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807601/",
            "reporter": "geenensp"
        }
    ],
    "3807600": [
        {
            "dateadded": "2026-03-29 15:27:08 UTC",
            "url": "https://vorcoreen8.quantumpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807600/",
            "reporter": "anonymous"
        }
    ],
    "3807599": [
        {
            "dateadded": "2026-03-29 15:23:22 UTC",
            "url": "http://115.55.128.28:46018/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:23:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807599/",
            "reporter": "geenensp"
        }
    ],
    "3807598": [
        {
            "dateadded": "2026-03-29 15:22:07 UTC",
            "url": "http://112.237.192.167:38972/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:32:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807598/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807597": [
        {
            "dateadded": "2026-03-29 15:21:26 UTC",
            "url": "http://95.165.187.102:56551/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 11:15:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807597/",
            "reporter": "geenensp"
        }
    ],
    "3807596": [
        {
            "dateadded": "2026-03-29 15:21:10 UTC",
            "url": "https://br0o-wave.quantumpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807596/",
            "reporter": "anonymous"
        }
    ],
    "3807595": [
        {
            "dateadded": "2026-03-29 15:17:20 UTC",
            "url": "http://115.61.97.252:33035/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:49:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807595/",
            "reporter": "geenensp"
        }
    ],
    "3807594": [
        {
            "dateadded": "2026-03-29 15:16:19 UTC",
            "url": "http://61.53.149.230:56810/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 07:40:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807594/",
            "reporter": "geenensp"
        }
    ],
    "3807593": [
        {
            "dateadded": "2026-03-29 15:15:10 UTC",
            "url": "https://gidwwlm.quantumpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807593/",
            "reporter": "anonymous"
        }
    ],
    "3807592": [
        {
            "dateadded": "2026-03-29 15:10:25 UTC",
            "url": "http://125.113.156.251:39635/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:24:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807592/",
            "reporter": "geenensp"
        }
    ],
    "3807591": [
        {
            "dateadded": "2026-03-29 15:09:10 UTC",
            "url": "https://quorvale2or.quantumpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:09:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807591/",
            "reporter": "anonymous"
        }
    ],
    "3807590": [
        {
            "dateadded": "2026-03-29 15:04:06 UTC",
            "url": "https://sfjgv.momentumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 15:04:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807590/",
            "reporter": "anonymous"
        }
    ],
    "3807589": [
        {
            "dateadded": "2026-03-29 15:03:18 UTC",
            "url": "http://114.226.127.57:46202/i",
            "url_status": "offline",
            "last_online": "2026-04-05 11:04:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807589/",
            "reporter": "geenensp"
        }
    ],
    "3807588": [
        {
            "dateadded": "2026-03-29 15:02:31 UTC",
            "url": "http://112.237.192.167:38972/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:21:44 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807588/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807587": [
        {
            "dateadded": "2026-03-29 14:58:10 UTC",
            "url": "https://visu-line.momentumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:58:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807587/",
            "reporter": "anonymous"
        }
    ],
    "3807586": [
        {
            "dateadded": "2026-03-29 14:56:18 UTC",
            "url": "http://59.88.12.200:58557/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:46:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807586/",
            "reporter": "geenensp"
        }
    ],
    "3807585": [
        {
            "dateadded": "2026-03-29 14:54:09 UTC",
            "url": "http://117.245.136.13:39786/i",
            "url_status": "offline",
            "last_online": "2026-04-01 04:56:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807585/",
            "reporter": "geenensp"
        }
    ],
    "3807584": [
        {
            "dateadded": "2026-03-29 14:53:08 UTC",
            "url": "https://fierter.momentumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807584/",
            "reporter": "anonymous"
        }
    ],
    "3807583": [
        {
            "dateadded": "2026-03-29 14:52:09 UTC",
            "url": "http://60.211.45.156:45103/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:39:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807583/",
            "reporter": "geenensp"
        }
    ],
    "3807582": [
        {
            "dateadded": "2026-03-29 14:50:26 UTC",
            "url": "http://117.193.170.47:41629/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:24:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807582/",
            "reporter": "geenensp"
        }
    ],
    "3807581": [
        {
            "dateadded": "2026-03-29 14:47:20 UTC",
            "url": "http://58.242.20.192:43063/i",
            "url_status": "offline",
            "last_online": "2026-04-01 11:03:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807581/",
            "reporter": "geenensp"
        }
    ],
    "3807580": [
        {
            "dateadded": "2026-03-29 14:47:08 UTC",
            "url": "https://hpi496.momentumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:47:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807580/",
            "reporter": "anonymous"
        }
    ],
    "3807579": [
        {
            "dateadded": "2026-03-29 14:43:15 UTC",
            "url": "http://114.226.127.57:46202/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 10:24:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807579/",
            "reporter": "geenensp"
        }
    ],
    "3807578": [
        {
            "dateadded": "2026-03-29 14:42:10 UTC",
            "url": "https://hlhni.momentumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807578/",
            "reporter": "anonymous"
        }
    ],
    "3807577": [
        {
            "dateadded": "2026-03-29 14:39:18 UTC",
            "url": "http://60.211.45.156:45103/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:27:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807577/",
            "reporter": "geenensp"
        }
    ],
    "3807576": [
        {
            "dateadded": "2026-03-29 14:36:11 UTC",
            "url": "http://61.1.26.99:39180/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 14:36:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807576/",
            "reporter": "geenensp"
        }
    ],
    "3807575": [
        {
            "dateadded": "2026-03-29 14:36:07 UTC",
            "url": "https://ytun75fm.momentumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:36:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807575/",
            "reporter": "anonymous"
        }
    ],
    "3807574": [
        {
            "dateadded": "2026-03-29 14:34:07 UTC",
            "url": "http://115.61.97.252:33035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:28:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807574/",
            "reporter": "geenensp"
        }
    ],
    "3807573": [
        {
            "dateadded": "2026-03-29 14:31:10 UTC",
            "url": "https://019a.covenantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807573/",
            "reporter": "anonymous"
        }
    ],
    "3807572": [
        {
            "dateadded": "2026-03-29 14:25:20 UTC",
            "url": "http://196.191.231.12:36897/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:27:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807572/",
            "reporter": "geenensp"
        }
    ],
    "3807571": [
        {
            "dateadded": "2026-03-29 14:24:08 UTC",
            "url": "https://velmarkon.covenantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807571/",
            "reporter": "anonymous"
        }
    ],
    "3807570": [
        {
            "dateadded": "2026-03-29 14:20:21 UTC",
            "url": "http://110.186.229.137:33344/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:38:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807570/",
            "reporter": "geenensp"
        }
    ],
    "3807569": [
        {
            "dateadded": "2026-03-29 14:20:11 UTC",
            "url": "https://gpkvcvl.covenantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807569/",
            "reporter": "anonymous"
        }
    ],
    "3807568": [
        {
            "dateadded": "2026-03-29 14:19:18 UTC",
            "url": "http://196.191.231.12:36897/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:15:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807568/",
            "reporter": "geenensp"
        }
    ],
    "3807567": [
        {
            "dateadded": "2026-03-29 14:19:10 UTC",
            "url": "http://42.242.128.121:50917/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:40:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807567/",
            "reporter": "geenensp"
        }
    ],
    "3807566": [
        {
            "dateadded": "2026-03-29 14:18:13 UTC",
            "url": "http://59.88.12.200:58557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807566/",
            "reporter": "geenensp"
        }
    ],
    "3807565": [
        {
            "dateadded": "2026-03-29 14:16:20 UTC",
            "url": "http://27.37.27.70:42155/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:58:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807565/",
            "reporter": "geenensp"
        }
    ],
    "3807564": [
        {
            "dateadded": "2026-03-29 14:15:18 UTC",
            "url": "http://182.239.81.126:44367/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:50:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807564/",
            "reporter": "geenensp"
        }
    ],
    "3807563": [
        {
            "dateadded": "2026-03-29 14:14:19 UTC",
            "url": "http://58.242.20.192:43063/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:00:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807563/",
            "reporter": "geenensp"
        }
    ],
    "3807562": [
        {
            "dateadded": "2026-03-29 14:12:16 UTC",
            "url": "http://182.239.81.126:44367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807562/",
            "reporter": "geenensp"
        }
    ],
    "3807561": [
        {
            "dateadded": "2026-03-29 14:11:10 UTC",
            "url": "https://362fon24.covenantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807561/",
            "reporter": "anonymous"
        }
    ],
    "3807560": [
        {
            "dateadded": "2026-03-29 14:08:08 UTC",
            "url": "https://otzv.covenantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 14:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807560/",
            "reporter": "anonymous"
        }
    ],
    "3807559": [
        {
            "dateadded": "2026-03-29 14:04:13 UTC",
            "url": "http://110.37.5.55:34278/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:23:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807559/",
            "reporter": "geenensp"
        }
    ],
    "3807556": [
        {
            "dateadded": "2026-03-29 14:00:17 UTC",
            "url": "https://fidels.b-cdn.net/ScreenConnect.ClientSetup.msi",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:17 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807556/",
            "reporter": "juroots"
        }
    ],
    "3807552": [
        {
            "dateadded": "2026-03-29 14:00:14 UTC",
            "url": "https://ilonermailc.net/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:45:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807552/",
            "reporter": "juroots"
        }
    ],
    "3807553": [
        {
            "dateadded": "2026-03-29 14:00:14 UTC",
            "url": "https://in-oman-liner.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:36:02 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807553/",
            "reporter": "juroots"
        }
    ],
    "3807554": [
        {
            "dateadded": "2026-03-29 14:00:14 UTC",
            "url": "https://pub-b4da4442f31f48e59847169454eb667a.r2.dev/SOCIAL-SECURITY_DOCUMENT_2025.exe",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "DattoRMM"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807554/",
            "reporter": "juroots"
        }
    ],
    "3807555": [
        {
            "dateadded": "2026-03-29 14:00:14 UTC",
            "url": "https://rigpacket.com/COUTURE_LOGISTICS_ONLINE_PACKET_PORTAL_2026.exe",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:14 UTC",
            "threat": "malware_download",
            "tags": [
                "DattoRMM"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807555/",
            "reporter": "juroots"
        }
    ],
    "3807546": [
        {
            "dateadded": "2026-03-29 14:00:13 UTC",
            "url": "http://206.189.22.92/1.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807546/",
            "reporter": "geenensp"
        }
    ],
    "3807547": [
        {
            "dateadded": "2026-03-29 14:00:13 UTC",
            "url": "https://hemailsendlin.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:56:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807547/",
            "reporter": "juroots"
        }
    ],
    "3807548": [
        {
            "dateadded": "2026-03-29 14:00:13 UTC",
            "url": "https://hemailsendlin.org/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 16:27:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807548/",
            "reporter": "juroots"
        }
    ],
    "3807549": [
        {
            "dateadded": "2026-03-29 14:00:13 UTC",
            "url": "https://ilonermailc.org/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-01 17:37:00 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807549/",
            "reporter": "juroots"
        }
    ],
    "3807550": [
        {
            "dateadded": "2026-03-29 14:00:13 UTC",
            "url": "https://inomanliner.net/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 11:20:15 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807550/",
            "reporter": "juroots"
        }
    ],
    "3807551": [
        {
            "dateadded": "2026-03-29 14:00:13 UTC",
            "url": "https://ilonermailc.com/WORDPRESS%202026.zip",
            "url_status": "offline",
            "last_online": "2026-04-20 16:51:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807551/",
            "reporter": "juroots"
        }
    ],
    "3807545": [
        {
            "dateadded": "2026-03-29 14:00:12 UTC",
            "url": "http://46.203.233.35/m68k",
            "url_status": "offline",
            "last_online": "2026-03-29 16:08:50 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807545/",
            "reporter": "juroots"
        }
    ],
    "3807542": [
        {
            "dateadded": "2026-03-29 14:00:10 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.mips",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807542/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807543": [
        {
            "dateadded": "2026-03-29 14:00:10 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.arc",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807543/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807544": [
        {
            "dateadded": "2026-03-29 14:00:10 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.x86",
            "url_status": "offline",
            "last_online": "2026-03-29 14:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807544/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807541": [
        {
            "dateadded": "2026-03-29 14:00:09 UTC",
            "url": "https://puremartbd.shop/zzms/ZoomWorkspace_JViVMy7g_installer.msi",
            "url_status": "offline",
            "last_online": "2026-04-01 16:26:36 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807541/",
            "reporter": "juroots"
        }
    ],
    "3807540": [
        {
            "dateadded": "2026-03-29 14:00:08 UTC",
            "url": "http://206.189.22.92/windyloveyou/windy.i468",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807540/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807539": [
        {
            "dateadded": "2026-03-29 13:58:20 UTC",
            "url": "http://110.186.229.137:33344/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 05:41:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807539/",
            "reporter": "geenensp"
        }
    ],
    "3807538": [
        {
            "dateadded": "2026-03-29 13:57:13 UTC",
            "url": "https://794kd31.covenantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:57:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807538/",
            "reporter": "anonymous"
        }
    ],
    "3807537": [
        {
            "dateadded": "2026-03-29 13:48:10 UTC",
            "url": "https://ss86rj.latticeprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807537/",
            "reporter": "anonymous"
        }
    ],
    "3807536": [
        {
            "dateadded": "2026-03-29 13:41:08 UTC",
            "url": "https://massivepatte.latticeprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807536/",
            "reporter": "anonymous"
        }
    ],
    "3807535": [
        {
            "dateadded": "2026-03-29 13:38:16 UTC",
            "url": "http://42.242.128.121:50917/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 15:38:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807535/",
            "reporter": "geenensp"
        }
    ],
    "3807534": [
        {
            "dateadded": "2026-03-29 13:33:12 UTC",
            "url": "https://pingla.latticeprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:33:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807534/",
            "reporter": "anonymous"
        }
    ],
    "3807533": [
        {
            "dateadded": "2026-03-29 13:31:18 UTC",
            "url": "http://204.137.166.139:42101/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:35:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807533/",
            "reporter": "geenensp"
        }
    ],
    "3807532": [
        {
            "dateadded": "2026-03-29 13:26:10 UTC",
            "url": "https://vzf6.latticeprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807532/",
            "reporter": "anonymous"
        }
    ],
    "3807531": [
        {
            "dateadded": "2026-03-29 13:20:20 UTC",
            "url": "http://123.189.149.14:40270/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:45:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807531/",
            "reporter": "geenensp"
        }
    ],
    "3807530": [
        {
            "dateadded": "2026-03-29 13:18:10 UTC",
            "url": "https://warm-grid.latticeprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807530/",
            "reporter": "anonymous"
        }
    ],
    "3807529": [
        {
            "dateadded": "2026-03-29 13:11:05 UTC",
            "url": "http://85.239.147.6/files/6849343518/kYApj4E.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807529/",
            "reporter": "c2hunter"
        }
    ],
    "3807528": [
        {
            "dateadded": "2026-03-29 13:10:09 UTC",
            "url": "https://binsap.latticeprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807528/",
            "reporter": "anonymous"
        }
    ],
    "3807527": [
        {
            "dateadded": "2026-03-29 13:08:10 UTC",
            "url": "http://204.137.166.139:42101/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807527/",
            "reporter": "geenensp"
        }
    ],
    "3807526": [
        {
            "dateadded": "2026-03-29 13:03:09 UTC",
            "url": "https://rybfb.radiantharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 13:03:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807526/",
            "reporter": "anonymous"
        }
    ],
    "3807525": [
        {
            "dateadded": "2026-03-29 13:00:38 UTC",
            "url": "http://116.55.64.167:35466/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:41:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807525/",
            "reporter": "geenensp"
        }
    ],
    "3807524": [
        {
            "dateadded": "2026-03-29 12:55:10 UTC",
            "url": "https://plassplit.radiantharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807524/",
            "reporter": "anonymous"
        }
    ],
    "3807523": [
        {
            "dateadded": "2026-03-29 12:47:07 UTC",
            "url": "https://hyper-tr4cke.radiantharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807523/",
            "reporter": "anonymous"
        }
    ],
    "3807522": [
        {
            "dateadded": "2026-03-29 12:39:09 UTC",
            "url": "https://sparr04-path.radiantharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:39:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807522/",
            "reporter": "anonymous"
        }
    ],
    "3807521": [
        {
            "dateadded": "2026-03-29 12:32:09 UTC",
            "url": "https://gloscarrie.radiantharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807521/",
            "reporter": "anonymous"
        }
    ],
    "3807520": [
        {
            "dateadded": "2026-03-29 12:25:12 UTC",
            "url": "https://8aij4a.radiantharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:25:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807520/",
            "reporter": "anonymous"
        }
    ],
    "3807518": [
        {
            "dateadded": "2026-03-29 12:17:07 UTC",
            "url": "http://110.36.15.18:37109/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:12:01 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807518/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807519": [
        {
            "dateadded": "2026-03-29 12:17:07 UTC",
            "url": "https://1earn-scope.zenithventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807519/",
            "reporter": "anonymous"
        }
    ],
    "3807517": [
        {
            "dateadded": "2026-03-29 12:12:06 UTC",
            "url": "http://110.36.15.18:37109/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:00:24 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807517/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807516": [
        {
            "dateadded": "2026-03-29 12:10:12 UTC",
            "url": "http://117.247.209.183:46825/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 12:10:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807516/",
            "reporter": "geenensp"
        }
    ],
    "3807515": [
        {
            "dateadded": "2026-03-29 12:09:08 UTC",
            "url": "https://p4yl-phase.zenithventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807515/",
            "reporter": "anonymous"
        }
    ],
    "3807514": [
        {
            "dateadded": "2026-03-29 12:02:09 UTC",
            "url": "https://microbecip.zenithventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 12:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807514/",
            "reporter": "anonymous"
        }
    ],
    "3807513": [
        {
            "dateadded": "2026-03-29 11:54:10 UTC",
            "url": "https://lumvale4en.zenithventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807513/",
            "reporter": "anonymous"
        }
    ],
    "3807512": [
        {
            "dateadded": "2026-03-29 11:47:07 UTC",
            "url": "http://112.198.132.186:42747/i",
            "url_status": "offline",
            "last_online": "2026-03-31 04:01:44 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807512/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807511": [
        {
            "dateadded": "2026-03-29 11:46:09 UTC",
            "url": "https://tri-crestar.zenithventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807511/",
            "reporter": "anonymous"
        }
    ],
    "3807510": [
        {
            "dateadded": "2026-03-29 11:40:19 UTC",
            "url": "http://39.74.57.29:55438/i",
            "url_status": "offline",
            "last_online": "2026-03-29 20:01:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807510/",
            "reporter": "geenensp"
        }
    ],
    "3807509": [
        {
            "dateadded": "2026-03-29 11:39:12 UTC",
            "url": "http://59.180.186.247:40729/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:23:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807509/",
            "reporter": "geenensp"
        }
    ],
    "3807508": [
        {
            "dateadded": "2026-03-29 11:38:08 UTC",
            "url": "https://arkspireix.zenithventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807508/",
            "reporter": "anonymous"
        }
    ],
    "3807507": [
        {
            "dateadded": "2026-03-29 11:31:08 UTC",
            "url": "https://vor-crestex.ironvale.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807507/",
            "reporter": "anonymous"
        }
    ],
    "3807506": [
        {
            "dateadded": "2026-03-29 11:27:08 UTC",
            "url": "http://125.44.193.224:41136/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:43:30 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807506/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807505": [
        {
            "dateadded": "2026-03-29 11:23:11 UTC",
            "url": "https://brandpale.ironvale.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:23:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807505/",
            "reporter": "anonymous"
        }
    ],
    "3807504": [
        {
            "dateadded": "2026-03-29 11:16:08 UTC",
            "url": "https://0colppvc.ironvale.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807504/",
            "reporter": "anonymous"
        }
    ],
    "3807503": [
        {
            "dateadded": "2026-03-29 11:12:07 UTC",
            "url": "http://112.198.132.186:42747/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:12:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807503/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807502": [
        {
            "dateadded": "2026-03-29 11:07:08 UTC",
            "url": "https://nor-lithor.cr0wnfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807502/",
            "reporter": "anonymous"
        }
    ],
    "3807501": [
        {
            "dateadded": "2026-03-29 11:03:19 UTC",
            "url": "http://39.74.57.29:55438/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:23:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807501/",
            "reporter": "geenensp"
        }
    ],
    "3807500": [
        {
            "dateadded": "2026-03-29 11:01:13 UTC",
            "url": "https://mof4x8.cr0wnfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 11:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807500/",
            "reporter": "anonymous"
        }
    ],
    "3807499": [
        {
            "dateadded": "2026-03-29 10:53:07 UTC",
            "url": "https://dynmarkon.cr0wnfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807499/",
            "reporter": "anonymous"
        }
    ],
    "3807498": [
        {
            "dateadded": "2026-03-29 10:51:10 UTC",
            "url": "http://59.97.252.186:53332/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:51:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807498/",
            "reporter": "geenensp"
        }
    ],
    "3807496": [
        {
            "dateadded": "2026-03-29 10:50:25 UTC",
            "url": "http://222.137.73.213:59696/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807496/",
            "reporter": "geenensp"
        }
    ],
    "3807497": [
        {
            "dateadded": "2026-03-29 10:50:25 UTC",
            "url": "http://221.225.225.55:34502/i",
            "url_status": "offline",
            "last_online": "2026-04-01 21:57:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807497/",
            "reporter": "geenensp"
        }
    ],
    "3807495": [
        {
            "dateadded": "2026-03-29 10:49:19 UTC",
            "url": "http://221.11.172.25:46427/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:36:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807495/",
            "reporter": "geenensp"
        }
    ],
    "3807494": [
        {
            "dateadded": "2026-03-29 10:45:11 UTC",
            "url": "https://spruc39-dock.cr0wnfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807494/",
            "reporter": "anonymous"
        }
    ],
    "3807493": [
        {
            "dateadded": "2026-03-29 10:37:09 UTC",
            "url": "https://storefield.cr0wnfern.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807493/",
            "reporter": "anonymous"
        }
    ],
    "3807492": [
        {
            "dateadded": "2026-03-29 10:32:21 UTC",
            "url": "http://110.37.35.89:34070/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:22:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807492/",
            "reporter": "geenensp"
        }
    ],
    "3807491": [
        {
            "dateadded": "2026-03-29 10:31:08 UTC",
            "url": "https://alignaudio.mosslark.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807491/",
            "reporter": "anonymous"
        }
    ],
    "3807490": [
        {
            "dateadded": "2026-03-29 10:28:13 UTC",
            "url": "http://221.11.172.25:46427/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:29:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807490/",
            "reporter": "geenensp"
        }
    ],
    "3807489": [
        {
            "dateadded": "2026-03-29 10:22:08 UTC",
            "url": "https://fabv2b.mosslark.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:22:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807489/",
            "reporter": "anonymous"
        }
    ],
    "3807488": [
        {
            "dateadded": "2026-03-29 10:15:09 UTC",
            "url": "http://221.225.225.55:34502/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 21:42:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807488/",
            "reporter": "geenensp"
        }
    ],
    "3807487": [
        {
            "dateadded": "2026-03-29 10:14:09 UTC",
            "url": "https://brigh-orche.mosslark.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807487/",
            "reporter": "anonymous"
        }
    ],
    "3807486": [
        {
            "dateadded": "2026-03-29 10:12:06 UTC",
            "url": "http://85.12.229.54:33369/i",
            "url_status": "offline",
            "last_online": "2026-03-30 06:22:50 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807486/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807485": [
        {
            "dateadded": "2026-03-29 10:07:19 UTC",
            "url": "http://123.5.125.71:42784/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:11:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807485/",
            "reporter": "geenensp"
        }
    ],
    "3807484": [
        {
            "dateadded": "2026-03-29 10:07:08 UTC",
            "url": "https://authcraft.mosslark.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 10:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807484/",
            "reporter": "anonymous"
        }
    ],
    "3807483": [
        {
            "dateadded": "2026-03-29 10:04:12 UTC",
            "url": "http://222.127.171.38:58479/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:40:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807483/",
            "reporter": "geenensp"
        }
    ],
    "3807482": [
        {
            "dateadded": "2026-03-29 10:03:23 UTC",
            "url": "http://123.185.34.154:41929/i",
            "url_status": "offline",
            "last_online": "2026-04-01 03:24:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807482/",
            "reporter": "geenensp"
        }
    ],
    "3807481": [
        {
            "dateadded": "2026-03-29 09:59:09 UTC",
            "url": "https://icegri.mosslark.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807481/",
            "reporter": "anonymous"
        }
    ],
    "3807480": [
        {
            "dateadded": "2026-03-29 09:52:10 UTC",
            "url": "https://wint-node.foxwhirl.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807480/",
            "reporter": "anonymous"
        }
    ],
    "3807479": [
        {
            "dateadded": "2026-03-29 09:49:22 UTC",
            "url": "http://115.56.98.89:41048/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:49:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807479/",
            "reporter": "geenensp"
        }
    ],
    "3807478": [
        {
            "dateadded": "2026-03-29 09:46:18 UTC",
            "url": "http://123.185.34.154:41929/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 10:21:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807478/",
            "reporter": "geenensp"
        }
    ],
    "3807477": [
        {
            "dateadded": "2026-03-29 09:46:17 UTC",
            "url": "http://222.137.73.213:59696/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 10:25:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807477/",
            "reporter": "geenensp"
        }
    ],
    "3807476": [
        {
            "dateadded": "2026-03-29 09:45:17 UTC",
            "url": "http://112.140.191.204:58703/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 09:54:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807476/",
            "reporter": "geenensp"
        }
    ],
    "3807475": [
        {
            "dateadded": "2026-03-29 09:44:08 UTC",
            "url": "https://azuregrowth.foxwhirl.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807475/",
            "reporter": "anonymous"
        }
    ],
    "3807474": [
        {
            "dateadded": "2026-03-29 09:42:07 UTC",
            "url": "http://85.12.229.54:33369/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 07:36:32 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807474/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807473": [
        {
            "dateadded": "2026-03-29 09:38:24 UTC",
            "url": "http://222.127.171.38:58479/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-07 21:46:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807473/",
            "reporter": "geenensp"
        }
    ],
    "3807472": [
        {
            "dateadded": "2026-03-29 09:37:21 UTC",
            "url": "http://123.5.125.71:42784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 15:27:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807472/",
            "reporter": "geenensp"
        }
    ],
    "3807471": [
        {
            "dateadded": "2026-03-29 09:36:20 UTC",
            "url": "http://110.37.5.55:34278/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:37:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807471/",
            "reporter": "geenensp"
        }
    ],
    "3807470": [
        {
            "dateadded": "2026-03-29 09:36:10 UTC",
            "url": "https://oohdvj.foxwhirl.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:36:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807470/",
            "reporter": "anonymous"
        }
    ],
    "3807469": [
        {
            "dateadded": "2026-03-29 09:29:08 UTC",
            "url": "https://0dxtenvl.foxwhirl.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807469/",
            "reporter": "anonymous"
        }
    ],
    "3807468": [
        {
            "dateadded": "2026-03-29 09:22:09 UTC",
            "url": "http://182.122.223.237:33129/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:30:20 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807468/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807467": [
        {
            "dateadded": "2026-03-29 09:21:08 UTC",
            "url": "https://raven-core.foxwhirl.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807467/",
            "reporter": "anonymous"
        }
    ],
    "3807466": [
        {
            "dateadded": "2026-03-29 09:13:07 UTC",
            "url": "https://norspireen5.stormcove.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:13:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807466/",
            "reporter": "anonymous"
        }
    ],
    "3807464": [
        {
            "dateadded": "2026-03-29 09:11:15 UTC",
            "url": "http://162.250.16.76:40084/i",
            "url_status": "offline",
            "last_online": "2026-03-30 06:28:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807464/",
            "reporter": "geenensp"
        }
    ],
    "3807465": [
        {
            "dateadded": "2026-03-29 09:11:15 UTC",
            "url": "http://110.37.28.119:48256/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:31:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807465/",
            "reporter": "geenensp"
        }
    ],
    "3807463": [
        {
            "dateadded": "2026-03-29 09:10:22 UTC",
            "url": "http://162.250.16.76:40084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 07:03:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807463/",
            "reporter": "geenensp"
        }
    ],
    "3807462": [
        {
            "dateadded": "2026-03-29 09:09:24 UTC",
            "url": "http://59.88.234.108:51775/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807462/",
            "reporter": "geenensp"
        }
    ],
    "3807461": [
        {
            "dateadded": "2026-03-29 09:07:08 UTC",
            "url": "http://27.206.35.240:50622/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:37:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807461/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807460": [
        {
            "dateadded": "2026-03-29 09:06:07 UTC",
            "url": "https://qu1c-mesh.stormcove.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 09:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807460/",
            "reporter": "anonymous"
        }
    ],
    "3807459": [
        {
            "dateadded": "2026-03-29 09:05:23 UTC",
            "url": "http://27.202.73.219:55495/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:32:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807459/",
            "reporter": "geenensp"
        }
    ],
    "3807458": [
        {
            "dateadded": "2026-03-29 08:58:08 UTC",
            "url": "https://ahbn5c.stormcove.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:58:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807458/",
            "reporter": "anonymous"
        }
    ],
    "3807457": [
        {
            "dateadded": "2026-03-29 08:50:10 UTC",
            "url": "https://quorfluxet.stormcove.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:50:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807457/",
            "reporter": "anonymous"
        }
    ],
    "3807456": [
        {
            "dateadded": "2026-03-29 08:44:12 UTC",
            "url": "http://59.89.65.192:41113/i",
            "url_status": "offline",
            "last_online": "2026-03-29 08:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807456/",
            "reporter": "geenensp"
        }
    ],
    "3807455": [
        {
            "dateadded": "2026-03-29 08:43:11 UTC",
            "url": "http://59.89.65.192:41113/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 08:43:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807455/",
            "reporter": "geenensp"
        }
    ],
    "3807453": [
        {
            "dateadded": "2026-03-29 08:43:10 UTC",
            "url": "http://27.207.206.229:44131/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:19:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807453/",
            "reporter": "geenensp"
        }
    ],
    "3807454": [
        {
            "dateadded": "2026-03-29 08:43:10 UTC",
            "url": "http://59.88.234.108:51775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:37:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807454/",
            "reporter": "geenensp"
        }
    ],
    "3807452": [
        {
            "dateadded": "2026-03-29 08:42:08 UTC",
            "url": "https://woodspeci.stormcove.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807452/",
            "reporter": "anonymous"
        }
    ],
    "3807451": [
        {
            "dateadded": "2026-03-29 08:39:13 UTC",
            "url": "http://110.37.28.119:48256/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:47:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807451/",
            "reporter": "geenensp"
        }
    ],
    "3807450": [
        {
            "dateadded": "2026-03-29 08:35:10 UTC",
            "url": "https://arnb3r-line.n1ghtbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807450/",
            "reporter": "anonymous"
        }
    ],
    "3807449": [
        {
            "dateadded": "2026-03-29 08:27:10 UTC",
            "url": "https://import-loop.n1ghtbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807449/",
            "reporter": "anonymous"
        }
    ],
    "3807448": [
        {
            "dateadded": "2026-03-29 08:23:13 UTC",
            "url": "http://115.202.189.41:59146/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807448/",
            "reporter": "geenensp"
        }
    ],
    "3807447": [
        {
            "dateadded": "2026-03-29 08:23:09 UTC",
            "url": "http://117.253.151.212:60235/i",
            "url_status": "offline",
            "last_online": "2026-03-29 08:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807447/",
            "reporter": "geenensp"
        }
    ],
    "3807446": [
        {
            "dateadded": "2026-03-29 08:20:11 UTC",
            "url": "https://geyserclient.n1ghtbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:20:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807446/",
            "reporter": "anonymous"
        }
    ],
    "3807445": [
        {
            "dateadded": "2026-03-29 08:19:17 UTC",
            "url": "http://113.238.102.56:34587/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:47:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807445/",
            "reporter": "geenensp"
        }
    ],
    "3807444": [
        {
            "dateadded": "2026-03-29 08:17:07 UTC",
            "url": "http://42.6.32.230:38376/i",
            "url_status": "offline",
            "last_online": "2026-04-04 10:14:52 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807444/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807443": [
        {
            "dateadded": "2026-03-29 08:16:08 UTC",
            "url": "http://222.140.187.197:37177/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:43:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807443/",
            "reporter": "geenensp"
        }
    ],
    "3807442": [
        {
            "dateadded": "2026-03-29 08:13:17 UTC",
            "url": "http://125.44.19.100:49561/i",
            "url_status": "offline",
            "last_online": "2026-03-30 22:21:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807442/",
            "reporter": "geenensp"
        }
    ],
    "3807441": [
        {
            "dateadded": "2026-03-29 08:13:08 UTC",
            "url": "https://wlikkfq.n1ghtbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-04-01 15:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807441/",
            "reporter": "anonymous"
        }
    ],
    "3807440": [
        {
            "dateadded": "2026-03-29 08:04:09 UTC",
            "url": "https://trustedotter.n1ghtbloom.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 08:04:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807440/",
            "reporter": "anonymous"
        }
    ],
    "3807439": [
        {
            "dateadded": "2026-03-29 07:57:17 UTC",
            "url": "http://120.28.194.30:54484/i",
            "url_status": "offline",
            "last_online": "2026-04-04 04:23:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807439/",
            "reporter": "geenensp"
        }
    ],
    "3807438": [
        {
            "dateadded": "2026-03-29 07:57:10 UTC",
            "url": "https://r9y47.quillridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807438/",
            "reporter": "anonymous"
        }
    ],
    "3807437": [
        {
            "dateadded": "2026-03-29 07:56:19 UTC",
            "url": "http://196.189.101.82:39387/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:06:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807437/",
            "reporter": "geenensp"
        }
    ],
    "3807436": [
        {
            "dateadded": "2026-03-29 07:54:12 UTC",
            "url": "http://115.202.189.41:59146/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:39:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807436/",
            "reporter": "geenensp"
        }
    ],
    "3807435": [
        {
            "dateadded": "2026-03-29 07:53:17 UTC",
            "url": "http://113.238.102.56:34587/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:09:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807435/",
            "reporter": "geenensp"
        }
    ],
    "3807434": [
        {
            "dateadded": "2026-03-29 07:49:08 UTC",
            "url": "https://shadowdispatch.quillridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807434/",
            "reporter": "anonymous"
        }
    ],
    "3807433": [
        {
            "dateadded": "2026-03-29 07:47:07 UTC",
            "url": "http://42.59.114.164:39179/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:27:28 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807433/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807432": [
        {
            "dateadded": "2026-03-29 07:44:09 UTC",
            "url": "http://125.44.19.100:49561/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:41:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807432/",
            "reporter": "geenensp"
        }
    ],
    "3807431": [
        {
            "dateadded": "2026-03-29 07:42:09 UTC",
            "url": "https://processblo.quillridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:42:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807431/",
            "reporter": "anonymous"
        }
    ],
    "3807430": [
        {
            "dateadded": "2026-03-29 07:37:07 UTC",
            "url": "http://42.6.32.230:38376/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 21:33:55 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807430/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807429": [
        {
            "dateadded": "2026-03-29 07:34:10 UTC",
            "url": "http://222.127.214.87:32954/i",
            "url_status": "offline",
            "last_online": "2026-04-08 22:36:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807429/",
            "reporter": "geenensp"
        }
    ],
    "3807428": [
        {
            "dateadded": "2026-03-29 07:33:07 UTC",
            "url": "https://manif-graph.quillridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:33:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807428/",
            "reporter": "anonymous"
        }
    ],
    "3807427": [
        {
            "dateadded": "2026-03-29 07:31:15 UTC",
            "url": "http://117.207.203.251:33063/i",
            "url_status": "offline",
            "last_online": "2026-03-29 07:31:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807427/",
            "reporter": "geenensp"
        }
    ],
    "3807426": [
        {
            "dateadded": "2026-03-29 07:31:11 UTC",
            "url": "http://120.28.194.30:54484/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 04:58:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807426/",
            "reporter": "geenensp"
        }
    ],
    "3807424": [
        {
            "dateadded": "2026-03-29 07:30:13 UTC",
            "url": "http://117.253.151.212:60235/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 07:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807424/",
            "reporter": "geenensp"
        }
    ],
    "3807425": [
        {
            "dateadded": "2026-03-29 07:30:13 UTC",
            "url": "https://torren5-plate.quillridge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:30:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807425/",
            "reporter": "anonymous"
        }
    ],
    "3807423": [
        {
            "dateadded": "2026-03-29 07:28:20 UTC",
            "url": "http://110.37.11.215:59096/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:12:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807423/",
            "reporter": "geenensp"
        }
    ],
    "3807422": [
        {
            "dateadded": "2026-03-29 07:19:07 UTC",
            "url": "https://arkvenum2.silvermuse.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:19:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807422/",
            "reporter": "anonymous"
        }
    ],
    "3807421": [
        {
            "dateadded": "2026-03-29 07:16:20 UTC",
            "url": "http://196.189.101.82:39387/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:08:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807421/",
            "reporter": "geenensp"
        }
    ],
    "3807420": [
        {
            "dateadded": "2026-03-29 07:11:08 UTC",
            "url": "https://my07cfit.silvermuse.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807420/",
            "reporter": "anonymous"
        }
    ],
    "3807419": [
        {
            "dateadded": "2026-03-29 07:07:07 UTC",
            "url": "http://110.37.106.206:50383/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:28:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807419/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807418": [
        {
            "dateadded": "2026-03-29 07:06:21 UTC",
            "url": "http://222.127.214.87:32954/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-09 00:20:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807418/",
            "reporter": "geenensp"
        }
    ],
    "3807417": [
        {
            "dateadded": "2026-03-29 07:03:08 UTC",
            "url": "https://gzcj.silvermuse.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 07:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807417/",
            "reporter": "anonymous"
        }
    ],
    "3807416": [
        {
            "dateadded": "2026-03-29 07:01:09 UTC",
            "url": "http://110.37.35.89:34070/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:11:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807416/",
            "reporter": "geenensp"
        }
    ],
    "3807415": [
        {
            "dateadded": "2026-03-29 06:56:21 UTC",
            "url": "http://219.154.172.227:52478/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807415/",
            "reporter": "geenensp"
        }
    ],
    "3807414": [
        {
            "dateadded": "2026-03-29 06:55:09 UTC",
            "url": "https://solarcres.si1vermuse.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 06:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807414/",
            "reporter": "anonymous"
        }
    ],
    "3807413": [
        {
            "dateadded": "2026-03-29 06:52:07 UTC",
            "url": "http://42.229.240.197:54791/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:30:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807413/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807412": [
        {
            "dateadded": "2026-03-29 06:49:10 UTC",
            "url": "http://221.203.253.220:44248/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:58:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807412/",
            "reporter": "geenensp"
        }
    ],
    "3807411": [
        {
            "dateadded": "2026-03-29 06:48:16 UTC",
            "url": "http://182.173.199.8:35114/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:59:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807411/",
            "reporter": "geenensp"
        }
    ],
    "3807410": [
        {
            "dateadded": "2026-03-29 06:48:11 UTC",
            "url": "https://silve-scale.si1vermuse.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 06:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807410/",
            "reporter": "anonymous"
        }
    ],
    "3807409": [
        {
            "dateadded": "2026-03-29 06:47:24 UTC",
            "url": "http://219.154.172.227:52478/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:23:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807409/",
            "reporter": "geenensp"
        }
    ],
    "3807408": [
        {
            "dateadded": "2026-03-29 06:47:06 UTC",
            "url": "http://196.190.133.180:54221/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:30:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807408/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807407": [
        {
            "dateadded": "2026-03-29 06:42:09 UTC",
            "url": "http://115.56.98.89:41048/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:52:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807407/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807406": [
        {
            "dateadded": "2026-03-29 06:40:14 UTC",
            "url": "https://merfluxen2.si1vermuse.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 06:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807406/",
            "reporter": "anonymous"
        }
    ],
    "3807405": [
        {
            "dateadded": "2026-03-29 06:28:08 UTC",
            "url": "http://42.229.240.197:54791/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 10:18:55 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807405/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807403": [
        {
            "dateadded": "2026-03-29 06:27:08 UTC",
            "url": "http://111.50.70.34:48986/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:11:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807403/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807404": [
        {
            "dateadded": "2026-03-29 06:27:08 UTC",
            "url": "http://111.50.70.34:48986/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:30:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807404/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807402": [
        {
            "dateadded": "2026-03-29 06:21:17 UTC",
            "url": "http://123.13.38.236:57833/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:17:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807402/",
            "reporter": "geenensp"
        }
    ],
    "3807401": [
        {
            "dateadded": "2026-03-29 06:20:13 UTC",
            "url": "http://196.188.135.20:34589/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:59:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807401/",
            "reporter": "geenensp"
        }
    ],
    "3807400": [
        {
            "dateadded": "2026-03-29 06:18:09 UTC",
            "url": "https://densrunw.vertexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 06:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807400/",
            "reporter": "anonymous"
        }
    ],
    "3807399": [
        {
            "dateadded": "2026-03-29 06:12:17 UTC",
            "url": "http://219.155.200.53:56583/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:46:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807399/",
            "reporter": "geenensp"
        }
    ],
    "3807398": [
        {
            "dateadded": "2026-03-29 06:07:06 UTC",
            "url": "http://115.55.4.10:36422/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:42:26 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807398/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807397": [
        {
            "dateadded": "2026-03-29 06:06:07 UTC",
            "url": "https://k3rne8-phase.luminousventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 06:06:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807397/",
            "reporter": "anonymous"
        }
    ],
    "3807396": [
        {
            "dateadded": "2026-03-29 06:02:08 UTC",
            "url": "http://115.55.4.10:36422/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 04:09:37 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807396/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807395": [
        {
            "dateadded": "2026-03-29 06:01:23 UTC",
            "url": "http://123.14.37.70:43647/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:38:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807395/",
            "reporter": "geenensp"
        }
    ],
    "3807394": [
        {
            "dateadded": "2026-03-29 05:59:14 UTC",
            "url": "http://196.188.135.20:34589/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 05:59:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807394/",
            "reporter": "geenensp"
        }
    ],
    "3807393": [
        {
            "dateadded": "2026-03-29 05:59:07 UTC",
            "url": "https://jk6kmhz.luminousventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:59:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807393/",
            "reporter": "anonymous"
        }
    ],
    "3807392": [
        {
            "dateadded": "2026-03-29 05:58:20 UTC",
            "url": "http://123.14.37.70:43647/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807392/",
            "reporter": "geenensp"
        }
    ],
    "3807391": [
        {
            "dateadded": "2026-03-29 05:52:18 UTC",
            "url": "http://123.13.38.236:57833/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:40:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807391/",
            "reporter": "geenensp"
        }
    ],
    "3807390": [
        {
            "dateadded": "2026-03-29 05:51:20 UTC",
            "url": "http://182.173.199.8:35114/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 04:05:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807390/",
            "reporter": "geenensp"
        }
    ],
    "3807389": [
        {
            "dateadded": "2026-03-29 05:51:18 UTC",
            "url": "http://39.81.43.185:50349/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:23:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807389/",
            "reporter": "geenensp"
        }
    ],
    "3807388": [
        {
            "dateadded": "2026-03-29 05:51:11 UTC",
            "url": "https://icfsj.keystonepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:51:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807388/",
            "reporter": "anonymous"
        }
    ],
    "3807387": [
        {
            "dateadded": "2026-03-29 05:46:16 UTC",
            "url": "http://182.116.79.89:52003/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:26:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807387/",
            "reporter": "geenensp"
        }
    ],
    "3807386": [
        {
            "dateadded": "2026-03-29 05:44:24 UTC",
            "url": "http://219.155.200.53:56583/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 10:33:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807386/",
            "reporter": "geenensp"
        }
    ],
    "3807385": [
        {
            "dateadded": "2026-03-29 05:43:09 UTC",
            "url": "https://1nsight-route.keystonepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807385/",
            "reporter": "anonymous"
        }
    ],
    "3807384": [
        {
            "dateadded": "2026-03-29 05:35:10 UTC",
            "url": "https://cap1ta-flow.spectrumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807384/",
            "reporter": "anonymous"
        }
    ],
    "3807383": [
        {
            "dateadded": "2026-03-29 05:28:08 UTC",
            "url": "https://dr80gbyv.spectrumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807383/",
            "reporter": "anonymous"
        }
    ],
    "3807382": [
        {
            "dateadded": "2026-03-29 05:24:08 UTC",
            "url": "http://123.9.91.152:43498/i",
            "url_status": "offline",
            "last_online": "2026-03-29 05:24:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807382/",
            "reporter": "geenensp"
        }
    ],
    "3807381": [
        {
            "dateadded": "2026-03-29 05:21:09 UTC",
            "url": "https://tensor-line.paragonharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807381/",
            "reporter": "anonymous"
        }
    ],
    "3807380": [
        {
            "dateadded": "2026-03-29 05:20:12 UTC",
            "url": "http://123.9.91.152:43498/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 05:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807380/",
            "reporter": "geenensp"
        }
    ],
    "3807379": [
        {
            "dateadded": "2026-03-29 05:20:11 UTC",
            "url": "http://39.81.43.185:50349/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:28:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807379/",
            "reporter": "geenensp"
        }
    ],
    "3807377": [
        {
            "dateadded": "2026-03-29 05:18:20 UTC",
            "url": "http://115.63.49.148:44854/i",
            "url_status": "offline",
            "last_online": "2026-03-30 05:10:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807377/",
            "reporter": "geenensp"
        }
    ],
    "3807378": [
        {
            "dateadded": "2026-03-29 05:18:20 UTC",
            "url": "http://115.61.102.84:47655/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:36:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807378/",
            "reporter": "geenensp"
        }
    ],
    "3807376": [
        {
            "dateadded": "2026-03-29 05:14:30 UTC",
            "url": "http://27.37.108.178:60330/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:00:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807376/",
            "reporter": "geenensp"
        }
    ],
    "3807375": [
        {
            "dateadded": "2026-03-29 05:13:08 UTC",
            "url": "https://rave-branch.paragonharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807375/",
            "reporter": "anonymous"
        }
    ],
    "3807374": [
        {
            "dateadded": "2026-03-29 05:12:07 UTC",
            "url": "http://60.23.194.17:36814/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:32:40 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807374/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807373": [
        {
            "dateadded": "2026-03-29 05:07:08 UTC",
            "url": "https://islelaunch.quantumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:07:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807373/",
            "reporter": "anonymous"
        }
    ],
    "3807372": [
        {
            "dateadded": "2026-03-29 05:01:09 UTC",
            "url": "http://221.15.16.194:45784/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:51:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807372/",
            "reporter": "geenensp"
        }
    ],
    "3807371": [
        {
            "dateadded": "2026-03-29 05:01:08 UTC",
            "url": "https://du5k-cast.quantumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 05:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807371/",
            "reporter": "anonymous"
        }
    ],
    "3807370": [
        {
            "dateadded": "2026-03-29 04:58:19 UTC",
            "url": "http://27.200.15.27:34393/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-11 11:09:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807370/",
            "reporter": "geenensp"
        }
    ],
    "3807369": [
        {
            "dateadded": "2026-03-29 04:57:06 UTC",
            "url": "http://42.5.69.103:52212/i",
            "url_status": "offline",
            "last_online": "2026-04-02 04:00:42 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807369/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807368": [
        {
            "dateadded": "2026-03-29 04:54:08 UTC",
            "url": "https://sol-lithos.nexusprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807368/",
            "reporter": "anonymous"
        }
    ],
    "3807367": [
        {
            "dateadded": "2026-03-29 04:51:19 UTC",
            "url": "http://115.61.102.84:47655/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:14:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807367/",
            "reporter": "geenensp"
        }
    ],
    "3807366": [
        {
            "dateadded": "2026-03-29 04:47:10 UTC",
            "url": "https://spk77w.nexusprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807366/",
            "reporter": "anonymous"
        }
    ],
    "3807365": [
        {
            "dateadded": "2026-03-29 04:43:19 UTC",
            "url": "http://117.192.37.240:51848/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:43:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807365/",
            "reporter": "geenensp"
        }
    ],
    "3807364": [
        {
            "dateadded": "2026-03-29 04:43:06 UTC",
            "url": "http://85.239.147.6/files/7903503838/7k3hpXA.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807364/",
            "reporter": "Bitsight"
        }
    ],
    "3807363": [
        {
            "dateadded": "2026-03-29 04:42:07 UTC",
            "url": "http://60.23.194.17:36814/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:35:39 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807363/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807362": [
        {
            "dateadded": "2026-03-29 04:41:08 UTC",
            "url": "https://wgnh.vectorpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807362/",
            "reporter": "anonymous"
        }
    ],
    "3807361": [
        {
            "dateadded": "2026-03-29 04:36:18 UTC",
            "url": "http://117.206.108.202:44416/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:36:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807361/",
            "reporter": "geenensp"
        }
    ],
    "3807360": [
        {
            "dateadded": "2026-03-29 04:34:20 UTC",
            "url": "http://221.15.16.194:45784/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:35:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807360/",
            "reporter": "geenensp"
        }
    ],
    "3807359": [
        {
            "dateadded": "2026-03-29 04:33:08 UTC",
            "url": "https://1ukqsofb.vectorpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807359/",
            "reporter": "anonymous"
        }
    ],
    "3807358": [
        {
            "dateadded": "2026-03-29 04:27:08 UTC",
            "url": "https://grasand.momentumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:27:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807358/",
            "reporter": "anonymous"
        }
    ],
    "3807357": [
        {
            "dateadded": "2026-03-29 04:27:07 UTC",
            "url": "http://42.5.69.103:52212/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 03:45:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807357/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807356": [
        {
            "dateadded": "2026-03-29 04:24:17 UTC",
            "url": "http://117.206.108.202:44416/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:24:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807356/",
            "reporter": "geenensp"
        }
    ],
    "3807355": [
        {
            "dateadded": "2026-03-29 04:21:09 UTC",
            "url": "https://hyper-opt1.momentumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807355/",
            "reporter": "anonymous"
        }
    ],
    "3807354": [
        {
            "dateadded": "2026-03-29 04:14:08 UTC",
            "url": "https://loadmatr.apexventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807354/",
            "reporter": "anonymous"
        }
    ],
    "3807353": [
        {
            "dateadded": "2026-03-29 04:08:07 UTC",
            "url": "https://pitchreed.apexventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807353/",
            "reporter": "anonymous"
        }
    ],
    "3807352": [
        {
            "dateadded": "2026-03-29 04:02:07 UTC",
            "url": "https://compi-vault.covenantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 04:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807352/",
            "reporter": "anonymous"
        }
    ],
    "3807351": [
        {
            "dateadded": "2026-03-29 03:58:17 UTC",
            "url": "http://117.216.63.154:56506/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:04:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807351/",
            "reporter": "geenensp"
        }
    ],
    "3807350": [
        {
            "dateadded": "2026-03-29 03:55:12 UTC",
            "url": "https://reviewglyph.covenantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807350/",
            "reporter": "anonymous"
        }
    ],
    "3807349": [
        {
            "dateadded": "2026-03-29 03:52:08 UTC",
            "url": "https://apgjh.latticeharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807349/",
            "reporter": "anonymous"
        }
    ],
    "3807348": [
        {
            "dateadded": "2026-03-29 03:52:07 UTC",
            "url": "http://182.121.41.96:36911/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:51:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807348/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807347": [
        {
            "dateadded": "2026-03-29 03:43:21 UTC",
            "url": "http://117.81.38.146:57904/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:15:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807347/",
            "reporter": "geenensp"
        }
    ],
    "3807346": [
        {
            "dateadded": "2026-03-29 03:41:08 UTC",
            "url": "https://lfgs.latticeharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:41:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807346/",
            "reporter": "anonymous"
        }
    ],
    "3807345": [
        {
            "dateadded": "2026-03-29 03:36:08 UTC",
            "url": "https://rende-trig.radiantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807345/",
            "reporter": "anonymous"
        }
    ],
    "3807344": [
        {
            "dateadded": "2026-03-29 03:33:09 UTC",
            "url": "https://cliencampa.radiantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807344/",
            "reporter": "anonymous"
        }
    ],
    "3807343": [
        {
            "dateadded": "2026-03-29 03:32:31 UTC",
            "url": "http://117.216.63.154:56506/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 10:12:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807343/",
            "reporter": "geenensp"
        }
    ],
    "3807342": [
        {
            "dateadded": "2026-03-29 03:30:20 UTC",
            "url": "http://117.81.38.146:57904/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 16:08:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807342/",
            "reporter": "geenensp"
        }
    ],
    "3807341": [
        {
            "dateadded": "2026-03-29 03:26:20 UTC",
            "url": "http://196.189.197.131:39004/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:26:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807341/",
            "reporter": "geenensp"
        }
    ],
    "3807340": [
        {
            "dateadded": "2026-03-29 03:23:10 UTC",
            "url": "https://binarydelive.zenithprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:23:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807340/",
            "reporter": "anonymous"
        }
    ],
    "3807339": [
        {
            "dateadded": "2026-03-29 03:20:20 UTC",
            "url": "http://61.1.194.130:53596/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:20:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807339/",
            "reporter": "geenensp"
        }
    ],
    "3807338": [
        {
            "dateadded": "2026-03-29 03:18:09 UTC",
            "url": "https://proto-wi1d.zenithprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807338/",
            "reporter": "anonymous"
        }
    ],
    "3807337": [
        {
            "dateadded": "2026-03-29 03:14:15 UTC",
            "url": "http://196.189.197.131:39004/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:14:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807337/",
            "reporter": "geenensp"
        }
    ],
    "3807336": [
        {
            "dateadded": "2026-03-29 03:11:15 UTC",
            "url": "https://svc4link.vertexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:11:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807336/",
            "reporter": "anonymous"
        }
    ],
    "3807335": [
        {
            "dateadded": "2026-03-29 03:07:07 UTC",
            "url": "http://42.228.246.157:50227/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807335/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807334": [
        {
            "dateadded": "2026-03-29 03:06:10 UTC",
            "url": "https://svc3user.vertexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:06:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807334/",
            "reporter": "anonymous"
        }
    ],
    "3807333": [
        {
            "dateadded": "2026-03-29 03:02:06 UTC",
            "url": "http://113.237.241.90:53823/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:21:45 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807333/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807332": [
        {
            "dateadded": "2026-03-29 03:00:09 UTC",
            "url": "https://svc2base.vertexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 03:00:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807332/",
            "reporter": "anonymous"
        }
    ],
    "3807331": [
        {
            "dateadded": "2026-03-29 02:58:19 UTC",
            "url": "http://117.221.25.33:41326/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:08:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807331/",
            "reporter": "geenensp"
        }
    ],
    "3807330": [
        {
            "dateadded": "2026-03-29 02:58:14 UTC",
            "url": "http://61.1.194.130:53596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:27:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807330/",
            "reporter": "geenensp"
        }
    ],
    "3807329": [
        {
            "dateadded": "2026-03-29 02:58:09 UTC",
            "url": "https://svc1infra.vertexharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 02:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807329/",
            "reporter": "anonymous"
        }
    ],
    "3807328": [
        {
            "dateadded": "2026-03-29 02:52:32 UTC",
            "url": "http://112.248.105.184:40158/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:38:31 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807328/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807327": [
        {
            "dateadded": "2026-03-29 02:51:16 UTC",
            "url": "http://42.235.51.166:47120/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:37:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807327/",
            "reporter": "geenensp"
        }
    ],
    "3807326": [
        {
            "dateadded": "2026-03-29 02:34:30 UTC",
            "url": "http://117.221.25.33:41326/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 02:34:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807326/",
            "reporter": "geenensp"
        }
    ],
    "3807325": [
        {
            "dateadded": "2026-03-29 02:31:19 UTC",
            "url": "http://42.235.51.166:47120/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:31:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807325/",
            "reporter": "geenensp"
        }
    ],
    "3807324": [
        {
            "dateadded": "2026-03-29 02:28:11 UTC",
            "url": "https://cl4link.luminousventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 02:28:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807324/",
            "reporter": "anonymous"
        }
    ],
    "3807323": [
        {
            "dateadded": "2026-03-29 02:21:06 UTC",
            "url": "https://cl3dev.luminousventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 02:21:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807323/",
            "reporter": "anonymous"
        }
    ],
    "3807322": [
        {
            "dateadded": "2026-03-29 02:17:09 UTC",
            "url": "https://cl2remote.luminousventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 02:17:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807322/",
            "reporter": "anonymous"
        }
    ],
    "3807320": [
        {
            "dateadded": "2026-03-29 02:17:06 UTC",
            "url": "http://196.190.69.149:34552/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:34:24 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807320/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807321": [
        {
            "dateadded": "2026-03-29 02:17:06 UTC",
            "url": "http://124.95.8.227:46020/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:39:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807321/",
            "reporter": "geenensp"
        }
    ],
    "3807319": [
        {
            "dateadded": "2026-03-29 02:12:08 UTC",
            "url": "http://182.122.208.236:48138/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:58:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807319/",
            "reporter": "geenensp"
        }
    ],
    "3807318": [
        {
            "dateadded": "2026-03-29 02:10:13 UTC",
            "url": "https://cl1store.luminousventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 02:10:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807318/",
            "reporter": "anonymous"
        }
    ],
    "3807316": [
        {
            "dateadded": "2026-03-29 02:05:19 UTC",
            "url": "http://27.37.113.10:42841/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 10:55:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807316/",
            "reporter": "geenensp"
        }
    ],
    "3807317": [
        {
            "dateadded": "2026-03-29 02:05:19 UTC",
            "url": "http://61.0.98.134:40236/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:52:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807317/",
            "reporter": "geenensp"
        }
    ],
    "3807315": [
        {
            "dateadded": "2026-03-29 02:04:07 UTC",
            "url": "https://ext4sync.keystonepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 02:04:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807315/",
            "reporter": "anonymous"
        }
    ],
    "3807314": [
        {
            "dateadded": "2026-03-29 02:02:06 UTC",
            "url": "http://123.7.220.96:55847/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:32:47 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807314/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807313": [
        {
            "dateadded": "2026-03-29 02:01:28 UTC",
            "url": "http://117.209.27.222:32923/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 02:01:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807313/",
            "reporter": "geenensp"
        }
    ],
    "3807312": [
        {
            "dateadded": "2026-03-29 01:59:11 UTC",
            "url": "https://ext3gate.keystonepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:59:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807312/",
            "reporter": "anonymous"
        }
    ],
    "3807311": [
        {
            "dateadded": "2026-03-29 01:53:07 UTC",
            "url": "https://ext2proc.keystonepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807311/",
            "reporter": "anonymous"
        }
    ],
    "3807310": [
        {
            "dateadded": "2026-03-29 01:48:07 UTC",
            "url": "https://ext1meta.keystonepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:48:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807310/",
            "reporter": "anonymous"
        }
    ],
    "3807309": [
        {
            "dateadded": "2026-03-29 01:44:11 UTC",
            "url": "http://182.122.208.236:48138/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:09:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807309/",
            "reporter": "geenensp"
        }
    ],
    "3807308": [
        {
            "dateadded": "2026-03-29 01:42:08 UTC",
            "url": "https://cl4static.spectrumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807308/",
            "reporter": "anonymous"
        }
    ],
    "3807307": [
        {
            "dateadded": "2026-03-29 01:37:09 UTC",
            "url": "https://cl3edge.spectrumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807307/",
            "reporter": "anonymous"
        }
    ],
    "3807306": [
        {
            "dateadded": "2026-03-29 01:37:07 UTC",
            "url": "http://123.7.220.96:55847/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 07:53:25 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807306/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807305": [
        {
            "dateadded": "2026-03-29 01:31:08 UTC",
            "url": "https://cl2data.spectrumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807305/",
            "reporter": "anonymous"
        }
    ],
    "3807304": [
        {
            "dateadded": "2026-03-29 01:26:17 UTC",
            "url": "http://110.37.78.200:51492/i",
            "url_status": "offline",
            "last_online": "2026-03-31 03:27:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807304/",
            "reporter": "geenensp"
        }
    ],
    "3807303": [
        {
            "dateadded": "2026-03-29 01:26:07 UTC",
            "url": "https://cl1sync.spectrumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:26:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807303/",
            "reporter": "anonymous"
        }
    ],
    "3807302": [
        {
            "dateadded": "2026-03-29 01:20:10 UTC",
            "url": "https://ext4point.paragonharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807302/",
            "reporter": "anonymous"
        }
    ],
    "3807301": [
        {
            "dateadded": "2026-03-29 01:14:16 UTC",
            "url": "http://219.157.62.44:43694/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:32:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807301/",
            "reporter": "geenensp"
        }
    ],
    "3807300": [
        {
            "dateadded": "2026-03-29 01:14:09 UTC",
            "url": "https://ext3data.paragonharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807300/",
            "reporter": "anonymous"
        }
    ],
    "3807299": [
        {
            "dateadded": "2026-03-29 01:12:08 UTC",
            "url": "http://59.97.248.162:48976/i",
            "url_status": "offline",
            "last_online": "2026-03-29 01:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807299/",
            "reporter": "geenensp"
        }
    ],
    "3807298": [
        {
            "dateadded": "2026-03-29 01:10:19 UTC",
            "url": "http://182.126.113.22:54888/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:52:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807298/",
            "reporter": "geenensp"
        }
    ],
    "3807297": [
        {
            "dateadded": "2026-03-29 01:08:07 UTC",
            "url": "https://ext2proxy.paragonharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:08:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807297/",
            "reporter": "anonymous"
        }
    ],
    "3807296": [
        {
            "dateadded": "2026-03-29 01:03:16 UTC",
            "url": "http://115.62.177.68:56872/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:05:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807296/",
            "reporter": "geenensp"
        }
    ],
    "3807295": [
        {
            "dateadded": "2026-03-29 01:02:09 UTC",
            "url": "http://110.37.78.200:51492/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807295/",
            "reporter": "geenensp"
        }
    ],
    "3807294": [
        {
            "dateadded": "2026-03-29 01:02:08 UTC",
            "url": "https://ext1infra.paragonharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 01:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807294/",
            "reporter": "anonymous"
        }
    ],
    "3807293": [
        {
            "dateadded": "2026-03-29 00:58:09 UTC",
            "url": "https://svc4sat.quantumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807293/",
            "reporter": "anonymous"
        }
    ],
    "3807292": [
        {
            "dateadded": "2026-03-29 00:53:06 UTC",
            "url": "https://svc3core.quantumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:53:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807292/",
            "reporter": "anonymous"
        }
    ],
    "3807291": [
        {
            "dateadded": "2026-03-29 00:52:08 UTC",
            "url": "http://200.115.102.16:39145/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:49:57 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807291/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807290": [
        {
            "dateadded": "2026-03-29 00:47:11 UTC",
            "url": "http://59.97.248.162:48976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 00:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807290/",
            "reporter": "geenensp"
        }
    ],
    "3807289": [
        {
            "dateadded": "2026-03-29 00:46:10 UTC",
            "url": "https://svc2steel.quantumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:46:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807289/",
            "reporter": "anonymous"
        }
    ],
    "3807288": [
        {
            "dateadded": "2026-03-29 00:45:09 UTC",
            "url": "http://182.126.113.22:54888/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807288/",
            "reporter": "geenensp"
        }
    ],
    "3807287": [
        {
            "dateadded": "2026-03-29 00:41:09 UTC",
            "url": "https://svc1proc.quantumventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807287/",
            "reporter": "anonymous"
        }
    ],
    "3807286": [
        {
            "dateadded": "2026-03-29 00:35:11 UTC",
            "url": "https://dev4space.nexusprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807286/",
            "reporter": "anonymous"
        }
    ],
    "3807285": [
        {
            "dateadded": "2026-03-29 00:33:17 UTC",
            "url": "http://115.63.11.247:43248/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:41:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807285/",
            "reporter": "geenensp"
        }
    ],
    "3807284": [
        {
            "dateadded": "2026-03-29 00:33:08 UTC",
            "url": "https://dev3field.nexusprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807284/",
            "reporter": "anonymous"
        }
    ],
    "3807283": [
        {
            "dateadded": "2026-03-29 00:29:11 UTC",
            "url": "http://27.215.109.219:35574/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807283/",
            "reporter": "geenensp"
        }
    ],
    "3807282": [
        {
            "dateadded": "2026-03-29 00:28:16 UTC",
            "url": "http://95.32.111.24:48837/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:12:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807282/",
            "reporter": "geenensp"
        }
    ],
    "3807281": [
        {
            "dateadded": "2026-03-29 00:28:13 UTC",
            "url": "http://115.55.147.49:36372/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:13:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807281/",
            "reporter": "geenensp"
        }
    ],
    "3807280": [
        {
            "dateadded": "2026-03-29 00:25:11 UTC",
            "url": "https://dev2outer.nexusprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807280/",
            "reporter": "anonymous"
        }
    ],
    "3807279": [
        {
            "dateadded": "2026-03-29 00:22:21 UTC",
            "url": "http://95.32.111.24:48837/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 00:22:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807279/",
            "reporter": "geenensp"
        }
    ],
    "3807278": [
        {
            "dateadded": "2026-03-29 00:22:09 UTC",
            "url": "https://dev1proc.nexusprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807278/",
            "reporter": "anonymous"
        }
    ],
    "3807277": [
        {
            "dateadded": "2026-03-29 00:20:07 UTC",
            "url": "http://85.239.147.6/files/1781548144/3UFJ4Lc.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807277/",
            "reporter": "c2hunter"
        }
    ],
    "3807276": [
        {
            "dateadded": "2026-03-29 00:12:08 UTC",
            "url": "https://cl4path.vectorpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807276/",
            "reporter": "anonymous"
        }
    ],
    "3807275": [
        {
            "dateadded": "2026-03-29 00:07:11 UTC",
            "url": "https://cl3view.vectorpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807275/",
            "reporter": "anonymous"
        }
    ],
    "3807274": [
        {
            "dateadded": "2026-03-29 00:03:18 UTC",
            "url": "http://115.55.147.49:36372/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:13:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807274/",
            "reporter": "geenensp"
        }
    ],
    "3807273": [
        {
            "dateadded": "2026-03-29 00:02:18 UTC",
            "url": "http://117.253.156.207:40223/i",
            "url_status": "offline",
            "last_online": "2026-03-29 00:02:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807273/",
            "reporter": "geenensp"
        }
    ],
    "3807272": [
        {
            "dateadded": "2026-03-29 00:01:12 UTC",
            "url": "https://cl2point.vectorpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-29 00:01:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807272/",
            "reporter": "anonymous"
        }
    ],
    "3807271": [
        {
            "dateadded": "2026-03-28 23:57:07 UTC",
            "url": "http://123.8.172.228:33143/i",
            "url_status": "offline",
            "last_online": "2026-03-31 02:28:04 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807271/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807270": [
        {
            "dateadded": "2026-03-28 23:56:08 UTC",
            "url": "https://cl1proc.vectorpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807270/",
            "reporter": "anonymous"
        }
    ],
    "3807269": [
        {
            "dateadded": "2026-03-28 23:50:13 UTC",
            "url": "https://ext4view.momentumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:50:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807269/",
            "reporter": "anonymous"
        }
    ],
    "3807268": [
        {
            "dateadded": "2026-03-28 23:45:10 UTC",
            "url": "https://ext3ghost.momentumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:45:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807268/",
            "reporter": "anonymous"
        }
    ],
    "3807267": [
        {
            "dateadded": "2026-03-28 23:39:07 UTC",
            "url": "https://ext2core.momentumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807267/",
            "reporter": "anonymous"
        }
    ],
    "3807266": [
        {
            "dateadded": "2026-03-28 23:37:06 UTC",
            "url": "http://85.239.147.6/files/8042875554/V5VVpk2.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807266/",
            "reporter": "Bitsight"
        }
    ],
    "3807265": [
        {
            "dateadded": "2026-03-28 23:35:13 UTC",
            "url": "https://ext1proc.momentumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807265/",
            "reporter": "anonymous"
        }
    ],
    "3807264": [
        {
            "dateadded": "2026-03-28 23:27:11 UTC",
            "url": "https://svc4link.apexventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807264/",
            "reporter": "anonymous"
        }
    ],
    "3807263": [
        {
            "dateadded": "2026-03-28 23:22:18 UTC",
            "url": "http://110.37.48.94:51957/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:09:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807263/",
            "reporter": "geenensp"
        }
    ],
    "3807260": [
        {
            "dateadded": "2026-03-28 23:22:09 UTC",
            "url": "https://svc3user.apexventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807260/",
            "reporter": "anonymous"
        }
    ],
    "3807261": [
        {
            "dateadded": "2026-03-28 23:22:09 UTC",
            "url": "http://42.224.177.115:48731/i",
            "url_status": "offline",
            "last_online": "2026-03-28 23:22:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807261/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807262": [
        {
            "dateadded": "2026-03-28 23:22:09 UTC",
            "url": "http://221.200.208.192:54706/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:32:05 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807262/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807259": [
        {
            "dateadded": "2026-03-28 23:18:19 UTC",
            "url": "http://115.48.239.102:38252/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:00:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807259/",
            "reporter": "geenensp"
        }
    ],
    "3807258": [
        {
            "dateadded": "2026-03-28 23:16:09 UTC",
            "url": "https://svc2base.apexventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:16:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807258/",
            "reporter": "anonymous"
        }
    ],
    "3807257": [
        {
            "dateadded": "2026-03-28 23:11:07 UTC",
            "url": "https://svc1infra.apexventurex.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:11:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807257/",
            "reporter": "anonymous"
        }
    ],
    "3807256": [
        {
            "dateadded": "2026-03-28 23:05:11 UTC",
            "url": "https://dev4work.covenantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 23:05:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807256/",
            "reporter": "anonymous"
        }
    ],
    "3807255": [
        {
            "dateadded": "2026-03-28 22:59:09 UTC",
            "url": "https://dev3local.covenantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807255/",
            "reporter": "anonymous"
        }
    ],
    "3807254": [
        {
            "dateadded": "2026-03-28 22:58:16 UTC",
            "url": "http://115.48.239.102:38252/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:28:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807254/",
            "reporter": "geenensp"
        }
    ],
    "3807253": [
        {
            "dateadded": "2026-03-28 22:54:10 UTC",
            "url": "http://59.91.172.253:46603/i",
            "url_status": "offline",
            "last_online": "2026-03-28 22:54:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807253/",
            "reporter": "geenensp"
        }
    ],
    "3807252": [
        {
            "dateadded": "2026-03-28 22:53:08 UTC",
            "url": "https://dev2power.covenantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807252/",
            "reporter": "anonymous"
        }
    ],
    "3807251": [
        {
            "dateadded": "2026-03-28 22:50:10 UTC",
            "url": "http://219.157.62.44:43694/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:42:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807251/",
            "reporter": "geenensp"
        }
    ],
    "3807250": [
        {
            "dateadded": "2026-03-28 22:49:09 UTC",
            "url": "https://dev1proc.covenantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807250/",
            "reporter": "anonymous"
        }
    ],
    "3807248": [
        {
            "dateadded": "2026-03-28 22:48:14 UTC",
            "url": "http://61.53.237.14:42105/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 22:48:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807248/",
            "reporter": "geenensp"
        }
    ],
    "3807249": [
        {
            "dateadded": "2026-03-28 22:48:14 UTC",
            "url": "http://175.168.253.206:46688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-04 09:37:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807249/",
            "reporter": "geenensp"
        }
    ],
    "3807247": [
        {
            "dateadded": "2026-03-28 22:44:07 UTC",
            "url": "https://cl4link.latticeharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807247/",
            "reporter": "anonymous"
        }
    ],
    "3807246": [
        {
            "dateadded": "2026-03-28 22:41:17 UTC",
            "url": "http://110.37.120.17:58586/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:33:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807246/",
            "reporter": "geenensp"
        }
    ],
    "3807245": [
        {
            "dateadded": "2026-03-28 22:41:09 UTC",
            "url": "https://cl3dev.latticeharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807245/",
            "reporter": "anonymous"
        }
    ],
    "3807244": [
        {
            "dateadded": "2026-03-28 22:34:11 UTC",
            "url": "https://cl2remote.latticeharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:34:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807244/",
            "reporter": "anonymous"
        }
    ],
    "3807243": [
        {
            "dateadded": "2026-03-28 22:25:11 UTC",
            "url": "https://cl1store.latticeharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:25:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807243/",
            "reporter": "anonymous"
        }
    ],
    "3807242": [
        {
            "dateadded": "2026-03-28 22:21:15 UTC",
            "url": "http://61.53.237.14:42105/i",
            "url_status": "offline",
            "last_online": "2026-03-28 22:21:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807242/",
            "reporter": "geenensp"
        }
    ],
    "3807241": [
        {
            "dateadded": "2026-03-28 22:20:21 UTC",
            "url": "http://42.236.223.132:48800/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:08:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807241/",
            "reporter": "geenensp"
        }
    ],
    "3807240": [
        {
            "dateadded": "2026-03-28 22:20:12 UTC",
            "url": "https://ext4sync.radiantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:20:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807240/",
            "reporter": "anonymous"
        }
    ],
    "3807239": [
        {
            "dateadded": "2026-03-28 22:19:32 UTC",
            "url": "http://59.91.172.253:46603/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 22:19:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807239/",
            "reporter": "geenensp"
        }
    ],
    "3807238": [
        {
            "dateadded": "2026-03-28 22:19:30 UTC",
            "url": "http://110.37.120.17:58586/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807238/",
            "reporter": "geenensp"
        }
    ],
    "3807237": [
        {
            "dateadded": "2026-03-28 22:15:12 UTC",
            "url": "https://ext3gate.radiantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807237/",
            "reporter": "anonymous"
        }
    ],
    "3807236": [
        {
            "dateadded": "2026-03-28 22:13:19 UTC",
            "url": "http://92.38.51.64:45709/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:54:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807236/",
            "reporter": "geenensp"
        }
    ],
    "3807235": [
        {
            "dateadded": "2026-03-28 22:09:08 UTC",
            "url": "https://ext2proc.radiantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807235/",
            "reporter": "anonymous"
        }
    ],
    "3807234": [
        {
            "dateadded": "2026-03-28 22:03:10 UTC",
            "url": "https://ext1meta.radiantpatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 22:03:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807234/",
            "reporter": "anonymous"
        }
    ],
    "3807232": [
        {
            "dateadded": "2026-03-28 22:02:07 UTC",
            "url": "http://110.37.35.235:59236/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:21:21 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807232/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807233": [
        {
            "dateadded": "2026-03-28 22:02:07 UTC",
            "url": "http://42.236.213.216:38541/i",
            "url_status": "offline",
            "last_online": "2026-04-02 16:15:50 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807233/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807231": [
        {
            "dateadded": "2026-03-28 21:57:08 UTC",
            "url": "https://svc4static.zenithprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807231/",
            "reporter": "anonymous"
        }
    ],
    "3807230": [
        {
            "dateadded": "2026-03-28 21:55:17 UTC",
            "url": "http://110.37.3.227:59501/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:48:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807230/",
            "reporter": "geenensp"
        }
    ],
    "3807229": [
        {
            "dateadded": "2026-03-28 21:52:20 UTC",
            "url": "http://92.38.51.64:45709/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:16:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807229/",
            "reporter": "geenensp"
        }
    ],
    "3807228": [
        {
            "dateadded": "2026-03-28 21:52:10 UTC",
            "url": "https://svc3edge.zenithprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807228/",
            "reporter": "anonymous"
        }
    ],
    "3807227": [
        {
            "dateadded": "2026-03-28 21:47:21 UTC",
            "url": "http://110.37.28.220:55801/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:07:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807227/",
            "reporter": "geenensp"
        }
    ],
    "3807226": [
        {
            "dateadded": "2026-03-28 21:47:14 UTC",
            "url": "https://svc2data.zenithprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:47:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807226/",
            "reporter": "anonymous"
        }
    ],
    "3807225": [
        {
            "dateadded": "2026-03-28 21:41:09 UTC",
            "url": "https://svc1sync.zenithprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807225/",
            "reporter": "anonymous"
        }
    ],
    "3807224": [
        {
            "dateadded": "2026-03-28 21:37:22 UTC",
            "url": "http://42.236.213.216:38541/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 16:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807224/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807222": [
        {
            "dateadded": "2026-03-28 21:37:21 UTC",
            "url": "http://110.37.35.235:59236/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:37:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807222/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807223": [
        {
            "dateadded": "2026-03-28 21:37:21 UTC",
            "url": "http://60.19.7.73:46106/i",
            "url_status": "offline",
            "last_online": "2026-04-01 05:16:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807223/",
            "reporter": "geenensp"
        }
    ],
    "3807221": [
        {
            "dateadded": "2026-03-28 21:36:19 UTC",
            "url": "http://115.49.6.55:46312/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:36:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807221/",
            "reporter": "geenensp"
        }
    ],
    "3807220": [
        {
            "dateadded": "2026-03-28 21:35:13 UTC",
            "url": "https://ext4point.authenticoperation.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:35:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807220/",
            "reporter": "anonymous"
        }
    ],
    "3807219": [
        {
            "dateadded": "2026-03-28 21:31:18 UTC",
            "url": "http://60.19.7.73:46106/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 04:52:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807219/",
            "reporter": "geenensp"
        }
    ],
    "3807218": [
        {
            "dateadded": "2026-03-28 21:29:10 UTC",
            "url": "https://ext3data.authenticoperation.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:29:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807218/",
            "reporter": "anonymous"
        }
    ],
    "3807217": [
        {
            "dateadded": "2026-03-28 21:26:06 UTC",
            "url": "http://85.239.147.6/files/7260582679/3AqaBYF.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "dropped-by-amadey",
                "fbf543"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807217/",
            "reporter": "Bitsight"
        }
    ],
    "3807216": [
        {
            "dateadded": "2026-03-28 21:24:10 UTC",
            "url": "https://ext2proxy.authenticoperation.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:24:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807216/",
            "reporter": "anonymous"
        }
    ],
    "3807215": [
        {
            "dateadded": "2026-03-28 21:21:10 UTC",
            "url": "https://ext1infra.authenticoperation.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807215/",
            "reporter": "anonymous"
        }
    ],
    "3807214": [
        {
            "dateadded": "2026-03-28 21:12:08 UTC",
            "url": "https://svc3core.fundamentaldivision.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807214/",
            "reporter": "anonymous"
        }
    ],
    "3807213": [
        {
            "dateadded": "2026-03-28 21:05:24 UTC",
            "url": "http://113.221.24.138:40886/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:29:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807213/",
            "reporter": "geenensp"
        }
    ],
    "3807212": [
        {
            "dateadded": "2026-03-28 21:02:07 UTC",
            "url": "https://svc2steel.fundamentaldivision.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 21:02:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807212/",
            "reporter": "anonymous"
        }
    ],
    "3807210": [
        {
            "dateadded": "2026-03-28 20:57:07 UTC",
            "url": "http://115.58.163.212:51435/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:39:28 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807210/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807211": [
        {
            "dateadded": "2026-03-28 20:57:07 UTC",
            "url": "https://svc1proc.fundamentaldivision.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807211/",
            "reporter": "anonymous"
        }
    ],
    "3807209": [
        {
            "dateadded": "2026-03-28 20:51:08 UTC",
            "url": "https://dev4space.permanentancillary.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:51:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807209/",
            "reporter": "anonymous"
        }
    ],
    "3807208": [
        {
            "dateadded": "2026-03-28 20:49:06 UTC",
            "url": "http://85.239.147.6/files/7359455182/GqzS5NO.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807208/",
            "reporter": "c2hunter"
        }
    ],
    "3807207": [
        {
            "dateadded": "2026-03-28 20:47:07 UTC",
            "url": "https://dev3field.permanentancillary.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:47:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807207/",
            "reporter": "anonymous"
        }
    ],
    "3807206": [
        {
            "dateadded": "2026-03-28 20:44:07 UTC",
            "url": "https://dev2outer.permanentancillary.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807206/",
            "reporter": "anonymous"
        }
    ],
    "3807205": [
        {
            "dateadded": "2026-03-28 20:42:15 UTC",
            "url": "http://117.216.178.96:44006/i",
            "url_status": "offline",
            "last_online": "2026-03-28 20:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807205/",
            "reporter": "geenensp"
        }
    ],
    "3807204": [
        {
            "dateadded": "2026-03-28 20:39:16 UTC",
            "url": "http://113.221.24.138:40886/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:38:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807204/",
            "reporter": "geenensp"
        }
    ],
    "3807203": [
        {
            "dateadded": "2026-03-28 20:33:14 UTC",
            "url": "https://dev1proc.permanentancillary.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:33:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807203/",
            "reporter": "anonymous"
        }
    ],
    "3807202": [
        {
            "dateadded": "2026-03-28 20:32:18 UTC",
            "url": "http://110.37.61.34:55188/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807202/",
            "reporter": "geenensp"
        }
    ],
    "3807201": [
        {
            "dateadded": "2026-03-28 20:29:15 UTC",
            "url": "http://115.58.163.212:51435/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:40:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807201/",
            "reporter": "geenensp"
        }
    ],
    "3807200": [
        {
            "dateadded": "2026-03-28 20:28:08 UTC",
            "url": "https://cl4path.ubiquitousfoundry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807200/",
            "reporter": "anonymous"
        }
    ],
    "3807199": [
        {
            "dateadded": "2026-03-28 20:25:23 UTC",
            "url": "http://27.215.109.219:35574/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:07:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807199/",
            "reporter": "geenensp"
        }
    ],
    "3807198": [
        {
            "dateadded": "2026-03-28 20:22:07 UTC",
            "url": "https://cl3view.ubiquitousfoundry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807198/",
            "reporter": "anonymous"
        }
    ],
    "3807197": [
        {
            "dateadded": "2026-03-28 20:20:25 UTC",
            "url": "http://117.216.178.96:44006/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 20:20:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807197/",
            "reporter": "geenensp"
        }
    ],
    "3807196": [
        {
            "dateadded": "2026-03-28 20:20:07 UTC",
            "url": "https://5eed8sf5.covenantventure.digital/?=check&&actmn=myJGOqngWIVrLfSA",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807196/",
            "reporter": "anonymous"
        }
    ],
    "3807195": [
        {
            "dateadded": "2026-03-28 20:17:08 UTC",
            "url": "https://cl2point.ubiquitousfoundry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:17:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807195/",
            "reporter": "anonymous"
        }
    ],
    "3807194": [
        {
            "dateadded": "2026-03-28 20:14:07 UTC",
            "url": "https://cl1proc.ubiquitousfoundry.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:14:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807194/",
            "reporter": "anonymous"
        }
    ],
    "3807193": [
        {
            "dateadded": "2026-03-28 20:10:09 UTC",
            "url": "https://ext4view.resonantcommercial.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:10:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807193/",
            "reporter": "anonymous"
        }
    ],
    "3807192": [
        {
            "dateadded": "2026-03-28 20:05:17 UTC",
            "url": "http://110.37.61.34:55188/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:10:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807192/",
            "reporter": "geenensp"
        }
    ],
    "3807191": [
        {
            "dateadded": "2026-03-28 20:01:07 UTC",
            "url": "https://ext3ghost.resonantcommercial.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 20:01:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807191/",
            "reporter": "anonymous"
        }
    ],
    "3807190": [
        {
            "dateadded": "2026-03-28 19:59:25 UTC",
            "url": "http://222.142.241.29:50447/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:19:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807190/",
            "reporter": "geenensp"
        }
    ],
    "3807189": [
        {
            "dateadded": "2026-03-28 19:54:17 UTC",
            "url": "http://61.53.108.199:35895/i",
            "url_status": "offline",
            "last_online": "2026-03-31 09:51:40 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807189/",
            "reporter": "geenensp"
        }
    ],
    "3807188": [
        {
            "dateadded": "2026-03-28 19:54:09 UTC",
            "url": "https://ext2core.resonantcommercial.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:54:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807188/",
            "reporter": "anonymous"
        }
    ],
    "3807187": [
        {
            "dateadded": "2026-03-28 19:50:18 UTC",
            "url": "http://222.142.241.29:50447/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 09:17:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807187/",
            "reporter": "geenensp"
        }
    ],
    "3807185": [
        {
            "dateadded": "2026-03-28 19:49:17 UTC",
            "url": "http://117.211.209.140:36604/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 19:49:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807185/",
            "reporter": "geenensp"
        }
    ],
    "3807186": [
        {
            "dateadded": "2026-03-28 19:49:17 UTC",
            "url": "http://61.53.108.199:35895/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 10:13:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807186/",
            "reporter": "geenensp"
        }
    ],
    "3807183": [
        {
            "dateadded": "2026-03-28 19:48:19 UTC",
            "url": "http://125.41.220.58:51856/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 19:48:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807183/",
            "reporter": "geenensp"
        }
    ],
    "3807184": [
        {
            "dateadded": "2026-03-28 19:48:19 UTC",
            "url": "http://180.115.166.171:57187/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:25:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807184/",
            "reporter": "geenensp"
        }
    ],
    "3807182": [
        {
            "dateadded": "2026-03-28 19:48:18 UTC",
            "url": "http://42.55.41.89:49208/i",
            "url_status": "offline",
            "last_online": "2026-04-04 16:05:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807182/",
            "reporter": "geenensp"
        }
    ],
    "3807181": [
        {
            "dateadded": "2026-03-28 19:48:09 UTC",
            "url": "https://ext1proc.resonantcommercial.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807181/",
            "reporter": "anonymous"
        }
    ],
    "3807180": [
        {
            "dateadded": "2026-03-28 19:44:18 UTC",
            "url": "http://123.9.196.22:49285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:14:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807180/",
            "reporter": "geenensp"
        }
    ],
    "3807179": [
        {
            "dateadded": "2026-03-28 19:43:08 UTC",
            "url": "https://svc4link.absolutecontinuity.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807179/",
            "reporter": "anonymous"
        }
    ],
    "3807177": [
        {
            "dateadded": "2026-03-28 19:42:07 UTC",
            "url": "http://222.219.74.234:35285/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:02:23 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807177/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807178": [
        {
            "dateadded": "2026-03-28 19:42:07 UTC",
            "url": "http://42.225.228.61:58140/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 19:42:07 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807178/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807176": [
        {
            "dateadded": "2026-03-28 19:38:07 UTC",
            "url": "https://svc3user.absolutecontinuity.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:38:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807176/",
            "reporter": "anonymous"
        }
    ],
    "3807175": [
        {
            "dateadded": "2026-03-28 19:37:17 UTC",
            "url": "http://222.219.74.234:35285/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:47:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807175/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807174": [
        {
            "dateadded": "2026-03-28 19:32:08 UTC",
            "url": "https://svc2base.absolutecontinuity.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:32:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807174/",
            "reporter": "anonymous"
        }
    ],
    "3807173": [
        {
            "dateadded": "2026-03-28 19:32:07 UTC",
            "url": "http://222.142.208.17:34890/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:13:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807173/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807172": [
        {
            "dateadded": "2026-03-28 19:27:06 UTC",
            "url": "https://svc1infra.absolutecontinuity.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807172/",
            "reporter": "anonymous"
        }
    ],
    "3807171": [
        {
            "dateadded": "2026-03-28 19:21:06 UTC",
            "url": "https://dev4work.manifestdelivery.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:21:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807171/",
            "reporter": "anonymous"
        }
    ],
    "3807170": [
        {
            "dateadded": "2026-03-28 19:15:12 UTC",
            "url": "https://dev3local.manifestdelivery.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807170/",
            "reporter": "anonymous"
        }
    ],
    "3807169": [
        {
            "dateadded": "2026-03-28 19:12:06 UTC",
            "url": "https://dev2power.manifestdelivery.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:12:06 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807169/",
            "reporter": "anonymous"
        }
    ],
    "3807168": [
        {
            "dateadded": "2026-03-28 19:08:08 UTC",
            "url": "https://dev1proc.manifestdelivery.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 19:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807168/",
            "reporter": "anonymous"
        }
    ],
    "3807167": [
        {
            "dateadded": "2026-03-28 19:03:28 UTC",
            "url": "http://113.231.92.89:36861/i",
            "url_status": "offline",
            "last_online": "2026-04-05 17:10:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807167/",
            "reporter": "geenensp"
        }
    ],
    "3807166": [
        {
            "dateadded": "2026-03-28 18:58:09 UTC",
            "url": "https://cl4link.sovereignprotocol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807166/",
            "reporter": "anonymous"
        }
    ],
    "3807165": [
        {
            "dateadded": "2026-03-28 18:52:09 UTC",
            "url": "http://222.142.208.17:34890/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:41:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807165/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807164": [
        {
            "dateadded": "2026-03-28 18:52:08 UTC",
            "url": "https://cl3dev.sovereignprotocol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:52:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807164/",
            "reporter": "anonymous"
        }
    ],
    "3807163": [
        {
            "dateadded": "2026-03-28 18:47:09 UTC",
            "url": "https://cl2remote.sovereignprotocol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:47:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807163/",
            "reporter": "anonymous"
        }
    ],
    "3807162": [
        {
            "dateadded": "2026-03-28 18:42:07 UTC",
            "url": "http://125.47.212.110:45672/i",
            "url_status": "offline",
            "last_online": "2026-03-28 18:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807162/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807161": [
        {
            "dateadded": "2026-03-28 18:41:07 UTC",
            "url": "https://cl1store.sovereignprotocol.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:41:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807161/",
            "reporter": "anonymous"
        }
    ],
    "3807160": [
        {
            "dateadded": "2026-03-28 18:36:08 UTC",
            "url": "https://ext4sync.intrinsiclogistics.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807160/",
            "reporter": "anonymous"
        }
    ],
    "3807159": [
        {
            "dateadded": "2026-03-28 18:33:24 UTC",
            "url": "http://119.116.35.76:36288/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807159/",
            "reporter": "geenensp"
        }
    ],
    "3807158": [
        {
            "dateadded": "2026-03-28 18:30:15 UTC",
            "url": "https://ext3gate.intrinsiclogistics.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807158/",
            "reporter": "anonymous"
        }
    ],
    "3807157": [
        {
            "dateadded": "2026-03-28 18:25:08 UTC",
            "url": "https://ext2proc.intrinsiclogistics.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:25:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807157/",
            "reporter": "anonymous"
        }
    ],
    "3807156": [
        {
            "dateadded": "2026-03-28 18:19:09 UTC",
            "url": "https://ext1meta.intrinsiclogistics.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807156/",
            "reporter": "anonymous"
        }
    ],
    "3807154": [
        {
            "dateadded": "2026-03-28 18:17:20 UTC",
            "url": "http://178.16.52.148/rebirth.mips",
            "url_status": "offline",
            "last_online": "2026-04-03 03:27:54 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807154/",
            "reporter": "botnetkiller"
        }
    ],
    "3807155": [
        {
            "dateadded": "2026-03-28 18:17:20 UTC",
            "url": "http://178.16.52.148/rebirth.arm7",
            "url_status": "offline",
            "last_online": "2026-04-03 03:27:34 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807155/",
            "reporter": "botnetkiller"
        }
    ],
    "3807153": [
        {
            "dateadded": "2026-03-28 18:14:09 UTC",
            "url": "https://svc4static.primordialconsensus.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:14:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807153/",
            "reporter": "anonymous"
        }
    ],
    "3807152": [
        {
            "dateadded": "2026-03-28 18:08:08 UTC",
            "url": "https://svc3edge.primordialconsensus.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807152/",
            "reporter": "anonymous"
        }
    ],
    "3807151": [
        {
            "dateadded": "2026-03-28 18:03:11 UTC",
            "url": "https://svc2data.primordialconsensus.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 18:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807151/",
            "reporter": "anonymous"
        }
    ],
    "3807150": [
        {
            "dateadded": "2026-03-28 17:57:14 UTC",
            "url": "http://125.40.86.155:34773/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 17:57:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807150/",
            "reporter": "geenensp"
        }
    ],
    "3807149": [
        {
            "dateadded": "2026-03-28 17:57:10 UTC",
            "url": "https://svc1sync.primordialconsensus.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807149/",
            "reporter": "anonymous"
        }
    ],
    "3807148": [
        {
            "dateadded": "2026-03-28 17:51:13 UTC",
            "url": "https://1dxll.keystoneprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:51:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807148/",
            "reporter": "anonymous"
        }
    ],
    "3807145": [
        {
            "dateadded": "2026-03-28 17:49:19 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.i686",
            "url_status": "offline",
            "last_online": "2026-04-13 11:06:57 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807145/",
            "reporter": "botnetkiller"
        }
    ],
    "3807146": [
        {
            "dateadded": "2026-03-28 17:49:19 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.ppc",
            "url_status": "offline",
            "last_online": "2026-04-13 11:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "PowerPC",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807146/",
            "reporter": "botnetkiller"
        }
    ],
    "3807147": [
        {
            "dateadded": "2026-03-28 17:49:19 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.x86",
            "url_status": "offline",
            "last_online": "2026-04-13 11:43:56 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807147/",
            "reporter": "botnetkiller"
        }
    ],
    "3807144": [
        {
            "dateadded": "2026-03-28 17:49:10 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.spc",
            "url_status": "offline",
            "last_online": "2026-04-13 10:33:46 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "sparc",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807144/",
            "reporter": "botnetkiller"
        }
    ],
    "3807143": [
        {
            "dateadded": "2026-03-28 17:48:15 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.arm6",
            "url_status": "offline",
            "last_online": "2026-04-13 11:13:24 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807143/",
            "reporter": "botnetkiller"
        }
    ],
    "3807141": [
        {
            "dateadded": "2026-03-28 17:48:13 UTC",
            "url": "http://176.65.139.81/ohshit.sh",
            "url_status": "offline",
            "last_online": "2026-04-13 10:20:49 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai",
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807141/",
            "reporter": "botnetkiller"
        }
    ],
    "3807142": [
        {
            "dateadded": "2026-03-28 17:48:13 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.sh4",
            "url_status": "offline",
            "last_online": "2026-04-13 10:11:05 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "SuperH",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807142/",
            "reporter": "botnetkiller"
        }
    ],
    "3807134": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.m68k",
            "url_status": "offline",
            "last_online": "2026-04-13 11:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "m68k",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807134/",
            "reporter": "botnetkiller"
        }
    ],
    "3807135": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.arm",
            "url_status": "offline",
            "last_online": "2026-04-13 10:10:52 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807135/",
            "reporter": "botnetkiller"
        }
    ],
    "3807136": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.arm5",
            "url_status": "offline",
            "last_online": "2026-04-13 10:13:59 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807136/",
            "reporter": "botnetkiller"
        }
    ],
    "3807137": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.x86_64",
            "url_status": "offline",
            "last_online": "2026-04-13 10:10:33 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807137/",
            "reporter": "botnetkiller"
        }
    ],
    "3807138": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-13 10:15:08 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807138/",
            "reporter": "botnetkiller"
        }
    ],
    "3807139": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.mips",
            "url_status": "offline",
            "last_online": "2026-04-13 10:31:17 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mips",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807139/",
            "reporter": "botnetkiller"
        }
    ],
    "3807140": [
        {
            "dateadded": "2026-03-28 17:48:11 UTC",
            "url": "http://176.65.139.81/hiddenbin/boatnet.arm7",
            "url_status": "offline",
            "last_online": "2026-04-13 10:59:27 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807140/",
            "reporter": "botnetkiller"
        }
    ],
    "3807133": [
        {
            "dateadded": "2026-03-28 17:48:10 UTC",
            "url": "http://94.240.216.78:60740/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:23:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807133/",
            "reporter": "geenensp"
        }
    ],
    "3807132": [
        {
            "dateadded": "2026-03-28 17:47:08 UTC",
            "url": "http://114.227.63.144:51956/i",
            "url_status": "offline",
            "last_online": "2026-04-14 19:30:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807132/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807131": [
        {
            "dateadded": "2026-03-28 17:47:05 UTC",
            "url": "http://77.247.93.86:46594/i",
            "url_status": "online",
            "last_online": "2026-04-27 12:36:15 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807131/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807130": [
        {
            "dateadded": "2026-03-28 17:46:08 UTC",
            "url": "https://yzl9.keystoneprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807130/",
            "reporter": "anonymous"
        }
    ],
    "3807129": [
        {
            "dateadded": "2026-03-28 17:40:09 UTC",
            "url": "https://unpf0.spectrumforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807129/",
            "reporter": "anonymous"
        }
    ],
    "3807128": [
        {
            "dateadded": "2026-03-28 17:37:07 UTC",
            "url": "http://60.19.71.200:59561/i",
            "url_status": "offline",
            "last_online": "2026-04-03 05:08:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807128/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807127": [
        {
            "dateadded": "2026-03-28 17:35:12 UTC",
            "url": "http://110.37.102.128:41601/i",
            "url_status": "offline",
            "last_online": "2026-03-28 17:35:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807127/",
            "reporter": "geenensp"
        }
    ],
    "3807126": [
        {
            "dateadded": "2026-03-28 17:34:09 UTC",
            "url": "https://j7pyx.spectrumforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807126/",
            "reporter": "anonymous"
        }
    ],
    "3807125": [
        {
            "dateadded": "2026-03-28 17:30:10 UTC",
            "url": "https://qudo8h54.paragonventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807125/",
            "reporter": "anonymous"
        }
    ],
    "3807124": [
        {
            "dateadded": "2026-03-28 17:27:11 UTC",
            "url": "http://221.203.253.220:44248/i",
            "url_status": "offline",
            "last_online": "2026-04-01 06:13:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807124/",
            "reporter": "geenensp"
        }
    ],
    "3807123": [
        {
            "dateadded": "2026-03-28 17:23:09 UTC",
            "url": "https://ser-crestal.paragonventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807123/",
            "reporter": "anonymous"
        }
    ],
    "3807122": [
        {
            "dateadded": "2026-03-28 17:22:07 UTC",
            "url": "http://39.89.174.35:47979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807122/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807121": [
        {
            "dateadded": "2026-03-28 17:19:19 UTC",
            "url": "http://94.240.216.78:60740/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 04:28:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807121/",
            "reporter": "geenensp"
        }
    ],
    "3807120": [
        {
            "dateadded": "2026-03-28 17:18:10 UTC",
            "url": "https://zenven2ix.quantumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:18:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807120/",
            "reporter": "anonymous"
        }
    ],
    "3807119": [
        {
            "dateadded": "2026-03-28 17:11:11 UTC",
            "url": "https://linkstudi.quantumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807119/",
            "reporter": "anonymous"
        }
    ],
    "3807118": [
        {
            "dateadded": "2026-03-28 17:08:13 UTC",
            "url": "http://110.37.102.128:41601/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 17:08:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807118/",
            "reporter": "geenensp"
        }
    ],
    "3807117": [
        {
            "dateadded": "2026-03-28 17:07:09 UTC",
            "url": "https://vvatch9-array.nexusharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807117/",
            "reporter": "anonymous"
        }
    ],
    "3807116": [
        {
            "dateadded": "2026-03-28 17:00:13 UTC",
            "url": "https://r2tf.nexusharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 17:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807116/",
            "reporter": "anonymous"
        }
    ],
    "3807115": [
        {
            "dateadded": "2026-03-28 16:55:09 UTC",
            "url": "https://scuh266.luminouspatron.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807115/",
            "reporter": "anonymous"
        }
    ],
    "3807114": [
        {
            "dateadded": "2026-03-28 16:52:17 UTC",
            "url": "http://219.156.7.40:39726/i",
            "url_status": "offline",
            "last_online": "2026-03-30 16:26:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807114/",
            "reporter": "geenensp"
        }
    ],
    "3807113": [
        {
            "dateadded": "2026-03-28 16:50:11 UTC",
            "url": "https://print6-lab.luminouspatron.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:50:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807113/",
            "reporter": "anonymous"
        }
    ],
    "3807112": [
        {
            "dateadded": "2026-03-28 16:45:12 UTC",
            "url": "https://zd3cs.apexbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:45:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807112/",
            "reporter": "anonymous"
        }
    ],
    "3807111": [
        {
            "dateadded": "2026-03-28 16:38:08 UTC",
            "url": "https://columnbinary.apexbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807111/",
            "reporter": "anonymous"
        }
    ],
    "3807110": [
        {
            "dateadded": "2026-03-28 16:37:07 UTC",
            "url": "http://116.138.44.176:49328/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:56:23 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807110/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807109": [
        {
            "dateadded": "2026-03-28 16:35:25 UTC",
            "url": "http://117.209.80.214:34946/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:35:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807109/",
            "reporter": "geenensp"
        }
    ],
    "3807108": [
        {
            "dateadded": "2026-03-28 16:32:11 UTC",
            "url": "https://rvfh.horizonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807108/",
            "reporter": "anonymous"
        }
    ],
    "3807107": [
        {
            "dateadded": "2026-03-28 16:30:18 UTC",
            "url": "http://116.248.120.213:58539/i",
            "url_status": "offline",
            "last_online": "2026-04-02 15:22:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807107/",
            "reporter": "geenensp"
        }
    ],
    "3807106": [
        {
            "dateadded": "2026-03-28 16:28:12 UTC",
            "url": "https://gather-line.horizonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:28:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807106/",
            "reporter": "anonymous"
        }
    ],
    "3807105": [
        {
            "dateadded": "2026-03-28 16:27:46 UTC",
            "url": "http://87.121.84.56/nuts/poop",
            "url_status": "offline",
            "last_online": "2026-03-28 21:10:37 UTC",
            "threat": "malware_download",
            "tags": [
                "CoinMiner",
                "elf",
                "ua-wget",
                "x86"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807105/",
            "reporter": "botnetkiller"
        }
    ],
    "3807104": [
        {
            "dateadded": "2026-03-28 16:24:13 UTC",
            "url": "https://cgnnhw.catalystventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:24:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807104/",
            "reporter": "anonymous"
        }
    ],
    "3807103": [
        {
            "dateadded": "2026-03-28 16:20:14 UTC",
            "url": "https://trivenen2.catalystventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:20:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807103/",
            "reporter": "anonymous"
        }
    ],
    "3807102": [
        {
            "dateadded": "2026-03-28 16:18:31 UTC",
            "url": "http://182.127.128.113:42688/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:20:38 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807102/",
            "reporter": "geenensp"
        }
    ],
    "3807101": [
        {
            "dateadded": "2026-03-28 16:18:21 UTC",
            "url": "http://59.97.252.217:41205/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807101/",
            "reporter": "geenensp"
        }
    ],
    "3807100": [
        {
            "dateadded": "2026-03-28 16:12:24 UTC",
            "url": "http://117.209.80.214:34946/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:12:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807100/",
            "reporter": "geenensp"
        }
    ],
    "3807099": [
        {
            "dateadded": "2026-03-28 16:12:09 UTC",
            "url": "http://59.88.133.192:54820/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807099/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807098": [
        {
            "dateadded": "2026-03-28 16:12:07 UTC",
            "url": "http://116.138.44.176:49328/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:51:29 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807098/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807097": [
        {
            "dateadded": "2026-03-28 16:11:26 UTC",
            "url": "http://120.86.71.216:43364/i",
            "url_status": "offline",
            "last_online": "2026-04-03 09:58:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807097/",
            "reporter": "geenensp"
        }
    ],
    "3807096": [
        {
            "dateadded": "2026-03-28 16:11:09 UTC",
            "url": "https://ultra-r0ug.vectorharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:11:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807096/",
            "reporter": "anonymous"
        }
    ],
    "3807095": [
        {
            "dateadded": "2026-03-28 16:07:37 UTC",
            "url": "http://116.248.120.213:58539/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 12:32:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807095/",
            "reporter": "geenensp"
        }
    ],
    "3807094": [
        {
            "dateadded": "2026-03-28 16:05:13 UTC",
            "url": "https://c0lo-scope.vectorharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 16:05:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807094/",
            "reporter": "anonymous"
        }
    ],
    "3807093": [
        {
            "dateadded": "2026-03-28 15:59:09 UTC",
            "url": "https://neurafor.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807093/",
            "reporter": "anonymous"
        }
    ],
    "3807092": [
        {
            "dateadded": "2026-03-28 15:55:27 UTC",
            "url": "http://59.97.252.217:41205/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:08:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807092/",
            "reporter": "geenensp"
        }
    ],
    "3807091": [
        {
            "dateadded": "2026-03-28 15:54:31 UTC",
            "url": "http://182.126.126.235:50537/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:54:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807091/",
            "reporter": "geenensp"
        }
    ],
    "3807090": [
        {
            "dateadded": "2026-03-28 15:53:08 UTC",
            "url": "https://scanque.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807090/",
            "reporter": "anonymous"
        }
    ],
    "3807089": [
        {
            "dateadded": "2026-03-28 15:52:19 UTC",
            "url": "http://182.127.128.113:42688/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:44:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807089/",
            "reporter": "geenensp"
        }
    ],
    "3807088": [
        {
            "dateadded": "2026-03-28 15:52:18 UTC",
            "url": "http://110.38.201.154:60945/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:52:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807088/",
            "reporter": "geenensp"
        }
    ],
    "3807087": [
        {
            "dateadded": "2026-03-28 15:48:09 UTC",
            "url": "https://59fxy.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:48:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807087/",
            "reporter": "anonymous"
        }
    ],
    "3807086": [
        {
            "dateadded": "2026-03-28 15:47:21 UTC",
            "url": "http://175.149.113.54:54382/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:26:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807086/",
            "reporter": "geenensp"
        }
    ],
    "3807085": [
        {
            "dateadded": "2026-03-28 15:47:07 UTC",
            "url": "https://ypmd72xu.latticepatronage.digital/?=check&&actmn=mCJWEHcuLYoWVKFg",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807085/",
            "reporter": "anonymous"
        }
    ],
    "3807084": [
        {
            "dateadded": "2026-03-28 15:43:38 UTC",
            "url": "http://110.37.44.158:52674/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 14:05:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807084/",
            "reporter": "geenensp"
        }
    ],
    "3807083": [
        {
            "dateadded": "2026-03-28 15:43:09 UTC",
            "url": "https://triforgeix.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:43:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807083/",
            "reporter": "anonymous"
        }
    ],
    "3807082": [
        {
            "dateadded": "2026-03-28 15:37:09 UTC",
            "url": "https://dyn-tidear.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:37:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807082/",
            "reporter": "anonymous"
        }
    ],
    "3807081": [
        {
            "dateadded": "2026-03-28 15:31:11 UTC",
            "url": "https://thifleet.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807081/",
            "reporter": "anonymous"
        }
    ],
    "3807080": [
        {
            "dateadded": "2026-03-28 15:30:27 UTC",
            "url": "http://182.126.126.235:50537/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:09:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807080/",
            "reporter": "geenensp"
        }
    ],
    "3807079": [
        {
            "dateadded": "2026-03-28 15:27:11 UTC",
            "url": "http://219.70.95.15:37817/i",
            "url_status": "offline",
            "last_online": "2026-04-06 21:46:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807079/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807078": [
        {
            "dateadded": "2026-03-28 15:27:09 UTC",
            "url": "http://110.37.3.227:59501/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:14:56 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807078/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807077": [
        {
            "dateadded": "2026-03-28 15:25:15 UTC",
            "url": "https://gridfocus.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:25:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807077/",
            "reporter": "anonymous"
        }
    ],
    "3807076": [
        {
            "dateadded": "2026-03-28 15:24:24 UTC",
            "url": "http://175.149.113.54:54382/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 03:52:42 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807076/",
            "reporter": "geenensp"
        }
    ],
    "3807075": [
        {
            "dateadded": "2026-03-28 15:21:10 UTC",
            "url": "https://336yzvub.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:21:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807075/",
            "reporter": "anonymous"
        }
    ],
    "3807074": [
        {
            "dateadded": "2026-03-28 15:17:22 UTC",
            "url": "http://120.28.195.142:60380/i",
            "url_status": "online",
            "last_online": "2026-04-27 11:47:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807074/",
            "reporter": "geenensp"
        }
    ],
    "3807073": [
        {
            "dateadded": "2026-03-28 15:14:10 UTC",
            "url": "https://zenmarken4.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807073/",
            "reporter": "anonymous"
        }
    ],
    "3807072": [
        {
            "dateadded": "2026-03-28 15:11:08 UTC",
            "url": "https://tw9hk.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:11:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807072/",
            "reporter": "anonymous"
        }
    ],
    "3807071": [
        {
            "dateadded": "2026-03-28 15:09:28 UTC",
            "url": "http://27.37.215.195:36801/i",
            "url_status": "offline",
            "last_online": "2026-04-03 21:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807071/",
            "reporter": "geenensp"
        }
    ],
    "3807070": [
        {
            "dateadded": "2026-03-28 15:07:12 UTC",
            "url": "https://binscree.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 15:07:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807070/",
            "reporter": "anonymous"
        }
    ],
    "3807069": [
        {
            "dateadded": "2026-03-28 15:05:06 UTC",
            "url": "http://85.239.147.6/files/7048186296/a8cOT32.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807069/",
            "reporter": "c2hunter"
        }
    ],
    "3807068": [
        {
            "dateadded": "2026-03-28 14:58:11 UTC",
            "url": "https://git33.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:58:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807068/",
            "reporter": "anonymous"
        }
    ],
    "3807067": [
        {
            "dateadded": "2026-03-28 14:58:05 UTC",
            "url": "http://85.239.147.6/files/7359455182/S5AKPxu.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807067/",
            "reporter": "c2hunter"
        }
    ],
    "3807066": [
        {
            "dateadded": "2026-03-28 14:52:10 UTC",
            "url": "https://patternprint.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:52:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807066/",
            "reporter": "anonymous"
        }
    ],
    "3807065": [
        {
            "dateadded": "2026-03-28 14:52:06 UTC",
            "url": "http://120.28.222.207:55994/i",
            "url_status": "offline",
            "last_online": "2026-04-01 16:11:18 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807065/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807064": [
        {
            "dateadded": "2026-03-28 14:50:24 UTC",
            "url": "http://120.28.197.150:60037/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 21:07:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807064/",
            "reporter": "geenensp"
        }
    ],
    "3807063": [
        {
            "dateadded": "2026-03-28 14:45:09 UTC",
            "url": "https://circuittraile.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:45:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807063/",
            "reporter": "anonymous"
        }
    ],
    "3807062": [
        {
            "dateadded": "2026-03-28 14:41:10 UTC",
            "url": "https://merlithex.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:41:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807062/",
            "reporter": "anonymous"
        }
    ],
    "3807061": [
        {
            "dateadded": "2026-03-28 14:37:06 UTC",
            "url": "http://27.206.35.240:50622/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 10:23:51 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807061/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807060": [
        {
            "dateadded": "2026-03-28 14:35:09 UTC",
            "url": "https://emberbroker.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:35:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807060/",
            "reporter": "anonymous"
        }
    ],
    "3807059": [
        {
            "dateadded": "2026-03-28 14:30:09 UTC",
            "url": "https://gr0w-grid.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:30:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807059/",
            "reporter": "anonymous"
        }
    ],
    "3807058": [
        {
            "dateadded": "2026-03-28 14:24:11 UTC",
            "url": "https://lumforgea.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:24:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807058/",
            "reporter": "anonymous"
        }
    ],
    "3807057": [
        {
            "dateadded": "2026-03-28 14:23:15 UTC",
            "url": "http://119.179.249.67:52244/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:06:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807057/",
            "reporter": "geenensp"
        }
    ],
    "3807056": [
        {
            "dateadded": "2026-03-28 14:20:10 UTC",
            "url": "http://119.162.228.112:60556/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807056/",
            "reporter": "geenensp"
        }
    ],
    "3807055": [
        {
            "dateadded": "2026-03-28 14:19:10 UTC",
            "url": "https://capitalultra.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807055/",
            "reporter": "anonymous"
        }
    ],
    "3807054": [
        {
            "dateadded": "2026-03-28 14:14:08 UTC",
            "url": "http://110.36.86.84:58715/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 14:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807054/",
            "reporter": "geenensp"
        }
    ],
    "3807053": [
        {
            "dateadded": "2026-03-28 14:12:09 UTC",
            "url": "https://hyperobs.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807053/",
            "reporter": "anonymous"
        }
    ],
    "3807052": [
        {
            "dateadded": "2026-03-28 14:06:08 UTC",
            "url": "https://cleanrain.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:06:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807052/",
            "reporter": "anonymous"
        }
    ],
    "3807051": [
        {
            "dateadded": "2026-03-28 14:02:06 UTC",
            "url": "http://42.227.176.23:38866/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:38:11 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807051/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807050": [
        {
            "dateadded": "2026-03-28 14:01:08 UTC",
            "url": "https://568sx.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 14:01:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807050/",
            "reporter": "anonymous"
        }
    ],
    "3807049": [
        {
            "dateadded": "2026-03-28 13:55:12 UTC",
            "url": "http://119.179.249.67:52244/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:22:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807049/",
            "reporter": "geenensp"
        }
    ],
    "3807048": [
        {
            "dateadded": "2026-03-28 13:55:10 UTC",
            "url": "https://24dw.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:55:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807048/",
            "reporter": "anonymous"
        }
    ],
    "3807047": [
        {
            "dateadded": "2026-03-28 13:54:10 UTC",
            "url": "http://42.228.43.250:35412/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807047/",
            "reporter": "geenensp"
        }
    ],
    "3807046": [
        {
            "dateadded": "2026-03-28 13:52:17 UTC",
            "url": "http://42.228.43.250:35412/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807046/",
            "reporter": "geenensp"
        }
    ],
    "3807045": [
        {
            "dateadded": "2026-03-28 13:49:08 UTC",
            "url": "https://meta-latt1c.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807045/",
            "reporter": "anonymous"
        }
    ],
    "3807044": [
        {
            "dateadded": "2026-03-28 13:47:13 UTC",
            "url": "http://42.224.172.121:56327/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807044/",
            "reporter": "geenensp"
        }
    ],
    "3807043": [
        {
            "dateadded": "2026-03-28 13:47:07 UTC",
            "url": "http://221.15.224.250:60117/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:39:33 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807043/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807042": [
        {
            "dateadded": "2026-03-28 13:44:10 UTC",
            "url": "https://vect01-gate.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:44:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807042/",
            "reporter": "anonymous"
        }
    ],
    "3807041": [
        {
            "dateadded": "2026-03-28 13:42:17 UTC",
            "url": "http://libss.0x504.com/xlh/cccc.sh",
            "url_status": "online",
            "last_online": "2026-04-27 12:28:17 UTC",
            "threat": "malware_download",
            "tags": [
                "sh",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807041/",
            "reporter": "botnetkiller"
        }
    ],
    "3807040": [
        {
            "dateadded": "2026-03-28 13:38:08 UTC",
            "url": "https://arkmeshum2.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807040/",
            "reporter": "anonymous"
        }
    ],
    "3807039": [
        {
            "dateadded": "2026-03-28 13:37:14 UTC",
            "url": "http://123.7.240.22:56534/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:50:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807039/",
            "reporter": "geenensp"
        }
    ],
    "3807038": [
        {
            "dateadded": "2026-03-28 13:34:08 UTC",
            "url": "https://sync-route.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807038/",
            "reporter": "anonymous"
        }
    ],
    "3807037": [
        {
            "dateadded": "2026-03-28 13:28:09 UTC",
            "url": "https://mm52vg.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:28:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807037/",
            "reporter": "anonymous"
        }
    ],
    "3807036": [
        {
            "dateadded": "2026-03-28 13:22:07 UTC",
            "url": "https://boldoffe.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:22:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807036/",
            "reporter": "anonymous"
        }
    ],
    "3807035": [
        {
            "dateadded": "2026-03-28 13:13:10 UTC",
            "url": "https://notmar.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:13:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807035/",
            "reporter": "anonymous"
        }
    ],
    "3807034": [
        {
            "dateadded": "2026-03-28 13:12:07 UTC",
            "url": "http://42.227.176.23:38866/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:21:43 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807034/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807033": [
        {
            "dateadded": "2026-03-28 13:06:08 UTC",
            "url": "https://kjpf3o93.radiantprospera.digital/?=check&&actmn=pJMOHCsZoEDmHUgU",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807033/",
            "reporter": "anonymous"
        }
    ],
    "3807032": [
        {
            "dateadded": "2026-03-28 13:02:08 UTC",
            "url": "http://45.168.22.54:44879/i",
            "url_status": "offline",
            "last_online": "2026-03-28 13:02:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807032/",
            "reporter": "geenensp"
        }
    ],
    "3807031": [
        {
            "dateadded": "2026-03-28 13:01:15 UTC",
            "url": "http://110.36.95.252:33222/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:29:31 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807031/",
            "reporter": "geenensp"
        }
    ],
    "3807030": [
        {
            "dateadded": "2026-03-28 13:01:10 UTC",
            "url": "https://daemondeli.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 13:01:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807030/",
            "reporter": "anonymous"
        }
    ],
    "3807029": [
        {
            "dateadded": "2026-03-28 12:57:06 UTC",
            "url": "http://77.236.74.65:35923/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:06:53 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807029/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807028": [
        {
            "dateadded": "2026-03-28 12:55:09 UTC",
            "url": "https://oi52ewc.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807028/",
            "reporter": "anonymous"
        }
    ],
    "3807027": [
        {
            "dateadded": "2026-03-28 12:52:07 UTC",
            "url": "http://182.116.38.6:53546/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:14:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807027/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807026": [
        {
            "dateadded": "2026-03-28 12:50:09 UTC",
            "url": "https://sun-line.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:50:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807026/",
            "reporter": "anonymous"
        }
    ],
    "3807024": [
        {
            "dateadded": "2026-03-28 12:44:16 UTC",
            "url": "http://124.6.167.18:46984/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:18:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807024/",
            "reporter": "geenensp"
        }
    ],
    "3807025": [
        {
            "dateadded": "2026-03-28 12:44:16 UTC",
            "url": "http://45.168.22.54:44879/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 12:44:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807025/",
            "reporter": "geenensp"
        }
    ],
    "3807023": [
        {
            "dateadded": "2026-03-28 12:44:07 UTC",
            "url": "https://dyn-coreal.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:44:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807023/",
            "reporter": "anonymous"
        }
    ],
    "3807022": [
        {
            "dateadded": "2026-03-28 12:42:12 UTC",
            "url": "http://77.245.107.223:34597/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:08:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807022/",
            "reporter": "geenensp"
        }
    ],
    "3807021": [
        {
            "dateadded": "2026-03-28 12:38:10 UTC",
            "url": "https://dockswitch.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:38:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807021/",
            "reporter": "anonymous"
        }
    ],
    "3807020": [
        {
            "dateadded": "2026-03-28 12:34:18 UTC",
            "url": "http://182.116.38.6:53546/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:36:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807020/",
            "reporter": "geenensp"
        }
    ],
    "3807019": [
        {
            "dateadded": "2026-03-28 12:33:09 UTC",
            "url": "https://cfp1laq8.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:33:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807019/",
            "reporter": "anonymous"
        }
    ],
    "3807018": [
        {
            "dateadded": "2026-03-28 12:32:15 UTC",
            "url": "http://110.36.95.252:33222/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:18:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807018/",
            "reporter": "geenensp"
        }
    ],
    "3807017": [
        {
            "dateadded": "2026-03-28 12:27:16 UTC",
            "url": "http://110.36.15.1:52084/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:36:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807017/",
            "reporter": "geenensp"
        }
    ],
    "3807016": [
        {
            "dateadded": "2026-03-28 12:27:09 UTC",
            "url": "https://velflux0or.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807016/",
            "reporter": "anonymous"
        }
    ],
    "3807015": [
        {
            "dateadded": "2026-03-28 12:22:07 UTC",
            "url": "http://125.41.109.105:42271/i",
            "url_status": "offline",
            "last_online": "2026-03-28 17:05:39 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807015/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3807014": [
        {
            "dateadded": "2026-03-28 12:21:14 UTC",
            "url": "http://124.6.167.18:46984/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:42:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807014/",
            "reporter": "geenensp"
        }
    ],
    "3807013": [
        {
            "dateadded": "2026-03-28 12:21:11 UTC",
            "url": "https://duskgrand.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:21:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807013/",
            "reporter": "anonymous"
        }
    ],
    "3807012": [
        {
            "dateadded": "2026-03-28 12:20:16 UTC",
            "url": "http://218.59.105.0:54583/i",
            "url_status": "offline",
            "last_online": "2026-03-28 17:04:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807012/",
            "reporter": "geenensp"
        }
    ],
    "3807011": [
        {
            "dateadded": "2026-03-28 12:16:14 UTC",
            "url": "http://77.245.107.223:34597/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:36:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807011/",
            "reporter": "geenensp"
        }
    ],
    "3807010": [
        {
            "dateadded": "2026-03-28 12:15:14 UTC",
            "url": "https://optic5-dock.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:15:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807010/",
            "reporter": "anonymous"
        }
    ],
    "3807009": [
        {
            "dateadded": "2026-03-28 12:13:12 UTC",
            "url": "http://110.36.15.1:52084/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 10:43:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807009/",
            "reporter": "geenensp"
        }
    ],
    "3807008": [
        {
            "dateadded": "2026-03-28 12:10:10 UTC",
            "url": "https://2woz.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:10:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807008/",
            "reporter": "anonymous"
        }
    ],
    "3807007": [
        {
            "dateadded": "2026-03-28 12:07:09 UTC",
            "url": "https://hnz4q1fw.zenithharbinger.digital/?=check&&actmn=ssfTNKJvkmecvvKT",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807007/",
            "reporter": "anonymous"
        }
    ],
    "3807006": [
        {
            "dateadded": "2026-03-28 12:04:21 UTC",
            "url": "http://42.224.172.121:56327/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:41:53 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807006/",
            "reporter": "geenensp"
        }
    ],
    "3807005": [
        {
            "dateadded": "2026-03-28 12:04:10 UTC",
            "url": "https://arkline9ar.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807005/",
            "reporter": "anonymous"
        }
    ],
    "3807004": [
        {
            "dateadded": "2026-03-28 12:02:16 UTC",
            "url": "http://59.96.140.111:51367/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:40:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807004/",
            "reporter": "geenensp"
        }
    ],
    "3807003": [
        {
            "dateadded": "2026-03-28 12:00:13 UTC",
            "url": "https://pol43-plate.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 12:00:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807003/",
            "reporter": "anonymous"
        }
    ],
    "3807002": [
        {
            "dateadded": "2026-03-28 11:57:10 UTC",
            "url": "https://lecbyj6.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:57:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807002/",
            "reporter": "anonymous"
        }
    ],
    "3807001": [
        {
            "dateadded": "2026-03-28 11:56:32 UTC",
            "url": "http://103.70.167.206:52080/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:10:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807001/",
            "reporter": "geenensp"
        }
    ],
    "3807000": [
        {
            "dateadded": "2026-03-28 11:55:17 UTC",
            "url": "http://182.113.201.144:40446/i",
            "url_status": "offline",
            "last_online": "2026-03-29 10:24:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3807000/",
            "reporter": "geenensp"
        }
    ],
    "3806999": [
        {
            "dateadded": "2026-03-28 11:52:06 UTC",
            "url": "http://110.36.27.244:57931/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:15:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806999/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806998": [
        {
            "dateadded": "2026-03-28 11:49:14 UTC",
            "url": "http://218.59.105.0:54583/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:46:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806998/",
            "reporter": "geenensp"
        }
    ],
    "3806997": [
        {
            "dateadded": "2026-03-28 11:48:08 UTC",
            "url": "https://zwyyuczn.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:48:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806997/",
            "reporter": "anonymous"
        }
    ],
    "3806996": [
        {
            "dateadded": "2026-03-28 11:47:16 UTC",
            "url": "http://110.37.27.87:35208/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:07:52 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806996/",
            "reporter": "geenensp"
        }
    ],
    "3806995": [
        {
            "dateadded": "2026-03-28 11:47:06 UTC",
            "url": "http://116.140.73.201:36845/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:12:04 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806995/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806994": [
        {
            "dateadded": "2026-03-28 11:42:08 UTC",
            "url": "https://wylzkl.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806994/",
            "reporter": "anonymous"
        }
    ],
    "3806993": [
        {
            "dateadded": "2026-03-28 11:37:11 UTC",
            "url": "https://serdraos.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806993/",
            "reporter": "anonymous"
        }
    ],
    "3806992": [
        {
            "dateadded": "2026-03-28 11:35:21 UTC",
            "url": "http://119.162.228.112:60556/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:32:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806992/",
            "reporter": "geenensp"
        }
    ],
    "3806991": [
        {
            "dateadded": "2026-03-28 11:32:11 UTC",
            "url": "http://59.96.140.111:51367/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 22:20:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806991/",
            "reporter": "geenensp"
        }
    ],
    "3806990": [
        {
            "dateadded": "2026-03-28 11:31:07 UTC",
            "url": "https://pale-line.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806990/",
            "reporter": "anonymous"
        }
    ],
    "3806989": [
        {
            "dateadded": "2026-03-28 11:26:09 UTC",
            "url": "https://nimblestitch.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:26:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806989/",
            "reporter": "anonymous"
        }
    ],
    "3806988": [
        {
            "dateadded": "2026-03-28 11:24:12 UTC",
            "url": "http://182.113.201.144:40446/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 10:45:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806988/",
            "reporter": "geenensp"
        }
    ],
    "3806987": [
        {
            "dateadded": "2026-03-28 11:19:09 UTC",
            "url": "https://proto-pub1.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:19:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806987/",
            "reporter": "anonymous"
        }
    ],
    "3806986": [
        {
            "dateadded": "2026-03-28 11:18:18 UTC",
            "url": "http://113.221.47.10:48596/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:38:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806986/",
            "reporter": "geenensp"
        }
    ],
    "3806985": [
        {
            "dateadded": "2026-03-28 11:13:09 UTC",
            "url": "https://roufal.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806985/",
            "reporter": "anonymous"
        }
    ],
    "3806984": [
        {
            "dateadded": "2026-03-28 11:12:11 UTC",
            "url": "https://ukswf.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806984/",
            "reporter": "anonymous"
        }
    ],
    "3806983": [
        {
            "dateadded": "2026-03-28 11:08:16 UTC",
            "url": "http://110.39.237.16:44311/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:37:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806983/",
            "reporter": "geenensp"
        }
    ],
    "3806982": [
        {
            "dateadded": "2026-03-28 11:05:27 UTC",
            "url": "http://117.206.101.160:38578/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 11:05:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806982/",
            "reporter": "geenensp"
        }
    ],
    "3806981": [
        {
            "dateadded": "2026-03-28 11:03:11 UTC",
            "url": "https://c0upon1-sheet.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 11:03:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806981/",
            "reporter": "anonymous"
        }
    ],
    "3806980": [
        {
            "dateadded": "2026-03-28 11:03:10 UTC",
            "url": "http://222.142.196.246:59233/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:09:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806980/",
            "reporter": "geenensp"
        }
    ],
    "3806979": [
        {
            "dateadded": "2026-03-28 11:01:16 UTC",
            "url": "http://110.37.78.177:53621/i",
            "url_status": "offline",
            "last_online": "2026-03-28 11:01:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806979/",
            "reporter": "geenensp"
        }
    ],
    "3806977": [
        {
            "dateadded": "2026-03-28 10:57:08 UTC",
            "url": "http://123.12.18.236:58165/i",
            "url_status": "offline",
            "last_online": "2026-03-30 21:11:29 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806977/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806978": [
        {
            "dateadded": "2026-03-28 10:57:08 UTC",
            "url": "https://focu-stream.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806978/",
            "reporter": "anonymous"
        }
    ],
    "3806976": [
        {
            "dateadded": "2026-03-28 10:54:11 UTC",
            "url": "http://123.144.89.68:58717/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:34:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806976/",
            "reporter": "geenensp"
        }
    ],
    "3806975": [
        {
            "dateadded": "2026-03-28 10:51:16 UTC",
            "url": "http://110.37.72.176:59477/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 15:26:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806975/",
            "reporter": "geenensp"
        }
    ],
    "3806974": [
        {
            "dateadded": "2026-03-28 10:51:09 UTC",
            "url": "https://xuyk.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:51:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806974/",
            "reporter": "anonymous"
        }
    ],
    "3806973": [
        {
            "dateadded": "2026-03-28 10:50:16 UTC",
            "url": "http://110.37.72.176:59477/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:30:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806973/",
            "reporter": "geenensp"
        }
    ],
    "3806972": [
        {
            "dateadded": "2026-03-28 10:49:09 UTC",
            "url": "http://113.221.47.10:48596/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:17:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806972/",
            "reporter": "geenensp"
        }
    ],
    "3806971": [
        {
            "dateadded": "2026-03-28 10:48:16 UTC",
            "url": "http://110.36.18.167:52977/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:42:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806971/",
            "reporter": "geenensp"
        }
    ],
    "3806970": [
        {
            "dateadded": "2026-03-28 10:47:11 UTC",
            "url": "https://tal-marka.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:47:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806970/",
            "reporter": "anonymous"
        }
    ],
    "3806969": [
        {
            "dateadded": "2026-03-28 10:46:22 UTC",
            "url": "http://110.39.237.16:44311/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:39:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806969/",
            "reporter": "geenensp"
        }
    ],
    "3806967": [
        {
            "dateadded": "2026-03-28 10:45:24 UTC",
            "url": "http://41.248.16.180:39340/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:52:03 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806967/",
            "reporter": "geenensp"
        }
    ],
    "3806968": [
        {
            "dateadded": "2026-03-28 10:45:24 UTC",
            "url": "http://41.248.16.180:39340/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:42:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806968/",
            "reporter": "geenensp"
        }
    ],
    "3806966": [
        {
            "dateadded": "2026-03-28 10:45:23 UTC",
            "url": "http://117.209.95.42:54706/i",
            "url_status": "offline",
            "last_online": "2026-03-28 10:45:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806966/",
            "reporter": "geenensp"
        }
    ],
    "3806965": [
        {
            "dateadded": "2026-03-28 10:44:22 UTC",
            "url": "http://117.235.225.145:32879/i",
            "url_status": "offline",
            "last_online": "2026-03-28 10:44:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806965/",
            "reporter": "geenensp"
        }
    ],
    "3806964": [
        {
            "dateadded": "2026-03-28 10:42:18 UTC",
            "url": "http://222.142.196.246:59233/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:29:05 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806964/",
            "reporter": "geenensp"
        }
    ],
    "3806963": [
        {
            "dateadded": "2026-03-28 10:42:07 UTC",
            "url": "http://123.12.18.236:58165/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 22:02:53 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806963/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806962": [
        {
            "dateadded": "2026-03-28 10:40:09 UTC",
            "url": "https://railglyph.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:40:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806962/",
            "reporter": "anonymous"
        }
    ],
    "3806961": [
        {
            "dateadded": "2026-03-28 10:35:11 UTC",
            "url": "https://lqlk.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806961/",
            "reporter": "anonymous"
        }
    ],
    "3806960": [
        {
            "dateadded": "2026-03-28 10:34:16 UTC",
            "url": "http://78.171.123.16:42188/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:08:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806960/",
            "reporter": "geenensp"
        }
    ],
    "3806959": [
        {
            "dateadded": "2026-03-28 10:30:18 UTC",
            "url": "http://110.37.78.177:53621/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 10:30:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806959/",
            "reporter": "geenensp"
        }
    ],
    "3806958": [
        {
            "dateadded": "2026-03-28 10:29:35 UTC",
            "url": "http://124.95.8.227:46020/i",
            "url_status": "offline",
            "last_online": "2026-04-03 04:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806958/",
            "reporter": "geenensp"
        }
    ],
    "3806957": [
        {
            "dateadded": "2026-03-28 10:29:21 UTC",
            "url": "http://45.164.179.97:10080/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:24:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806957/",
            "reporter": "geenensp"
        }
    ],
    "3806956": [
        {
            "dateadded": "2026-03-28 10:29:08 UTC",
            "url": "https://2xxws.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806956/",
            "reporter": "anonymous"
        }
    ],
    "3806955": [
        {
            "dateadded": "2026-03-28 10:25:22 UTC",
            "url": "http://61.52.82.225:33925/i",
            "url_status": "offline",
            "last_online": "2026-03-30 09:11:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806955/",
            "reporter": "geenensp"
        }
    ],
    "3806954": [
        {
            "dateadded": "2026-03-28 10:23:21 UTC",
            "url": "http://110.36.18.167:52977/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:09:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806954/",
            "reporter": "geenensp"
        }
    ],
    "3806953": [
        {
            "dateadded": "2026-03-28 10:23:13 UTC",
            "url": "https://linkclie.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806953/",
            "reporter": "anonymous"
        }
    ],
    "3806952": [
        {
            "dateadded": "2026-03-28 10:19:22 UTC",
            "url": "http://175.165.85.133:41598/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:51:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806952/",
            "reporter": "geenensp"
        }
    ],
    "3806951": [
        {
            "dateadded": "2026-03-28 10:19:08 UTC",
            "url": "https://e457.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806951/",
            "reporter": "anonymous"
        }
    ],
    "3806950": [
        {
            "dateadded": "2026-03-28 10:17:14 UTC",
            "url": "http://78.171.123.16:42188/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 15:09:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806950/",
            "reporter": "geenensp"
        }
    ],
    "3806949": [
        {
            "dateadded": "2026-03-28 10:13:22 UTC",
            "url": "http://117.209.95.42:54706/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 10:13:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806949/",
            "reporter": "geenensp"
        }
    ],
    "3806948": [
        {
            "dateadded": "2026-03-28 10:13:09 UTC",
            "url": "https://1att0-crest.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806948/",
            "reporter": "anonymous"
        }
    ],
    "3806947": [
        {
            "dateadded": "2026-03-28 10:06:17 UTC",
            "url": "http://115.62.159.144:51272/i",
            "url_status": "offline",
            "last_online": "2026-03-29 16:40:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806947/",
            "reporter": "geenensp"
        }
    ],
    "3806946": [
        {
            "dateadded": "2026-03-28 10:06:11 UTC",
            "url": "https://soltidea3.pozellant.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:06:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806946/",
            "reporter": "anonymous"
        }
    ],
    "3806945": [
        {
            "dateadded": "2026-03-28 10:01:13 UTC",
            "url": "https://kelvenon1.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 10:01:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806945/",
            "reporter": "anonymous"
        }
    ],
    "3806944": [
        {
            "dateadded": "2026-03-28 09:59:17 UTC",
            "url": "http://45.164.179.97:10080/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:48:44 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806944/",
            "reporter": "geenensp"
        }
    ],
    "3806943": [
        {
            "dateadded": "2026-03-28 09:58:23 UTC",
            "url": "http://61.52.82.225:33925/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:27:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806943/",
            "reporter": "geenensp"
        }
    ],
    "3806942": [
        {
            "dateadded": "2026-03-28 09:55:09 UTC",
            "url": "https://ffvwks.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:55:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806942/",
            "reporter": "anonymous"
        }
    ],
    "3806941": [
        {
            "dateadded": "2026-03-28 09:54:24 UTC",
            "url": "http://182.114.48.68:59286/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:01:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806941/",
            "reporter": "geenensp"
        }
    ],
    "3806940": [
        {
            "dateadded": "2026-03-28 09:51:12 UTC",
            "url": "http://222.246.41.89:35002/i",
            "url_status": "offline",
            "last_online": "2026-04-07 22:29:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806940/",
            "reporter": "geenensp"
        }
    ],
    "3806939": [
        {
            "dateadded": "2026-03-28 09:50:43 UTC",
            "url": "http://112.248.186.172:48317/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:50:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806939/",
            "reporter": "geenensp"
        }
    ],
    "3806938": [
        {
            "dateadded": "2026-03-28 09:50:12 UTC",
            "url": "https://0iwbrl.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806938/",
            "reporter": "anonymous"
        }
    ],
    "3806937": [
        {
            "dateadded": "2026-03-28 09:49:20 UTC",
            "url": "http://182.113.234.132:48228/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:51:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806937/",
            "reporter": "geenensp"
        }
    ],
    "3806936": [
        {
            "dateadded": "2026-03-28 09:46:22 UTC",
            "url": "http://196.190.1.39:43032/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:46:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806936/",
            "reporter": "geenensp"
        }
    ],
    "3806935": [
        {
            "dateadded": "2026-03-28 09:44:11 UTC",
            "url": "https://vehb.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:44:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806935/",
            "reporter": "anonymous"
        }
    ],
    "3806934": [
        {
            "dateadded": "2026-03-28 09:38:11 UTC",
            "url": "https://nortideix9.chromeflack.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:38:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806934/",
            "reporter": "anonymous"
        }
    ],
    "3806933": [
        {
            "dateadded": "2026-03-28 09:35:17 UTC",
            "url": "http://182.113.234.132:48228/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 15:02:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806933/",
            "reporter": "geenensp"
        }
    ],
    "3806932": [
        {
            "dateadded": "2026-03-28 09:33:13 UTC",
            "url": "https://pilhar.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:33:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806932/",
            "reporter": "anonymous"
        }
    ],
    "3806931": [
        {
            "dateadded": "2026-03-28 09:31:17 UTC",
            "url": "http://180.191.230.61:51275/i",
            "url_status": "offline",
            "last_online": "2026-04-14 22:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806931/",
            "reporter": "geenensp"
        }
    ],
    "3806930": [
        {
            "dateadded": "2026-03-28 09:27:10 UTC",
            "url": "https://compi1e-well.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:27:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806930/",
            "reporter": "anonymous"
        }
    ],
    "3806929": [
        {
            "dateadded": "2026-03-28 09:27:06 UTC",
            "url": "http://112.251.87.12:57219/i",
            "url_status": "offline",
            "last_online": "2026-03-31 16:53:51 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806929/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806928": [
        {
            "dateadded": "2026-03-28 09:22:10 UTC",
            "url": "https://decodeass.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:22:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806928/",
            "reporter": "anonymous"
        }
    ],
    "3806927": [
        {
            "dateadded": "2026-03-28 09:19:25 UTC",
            "url": "http://115.62.159.144:51272/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:12:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806927/",
            "reporter": "geenensp"
        }
    ],
    "3806926": [
        {
            "dateadded": "2026-03-28 09:17:24 UTC",
            "url": "http://112.251.87.12:57219/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 15:52:47 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806926/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806925": [
        {
            "dateadded": "2026-03-28 09:16:19 UTC",
            "url": "http://219.155.201.138:56070/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:12:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806925/",
            "reporter": "geenensp"
        }
    ],
    "3806924": [
        {
            "dateadded": "2026-03-28 09:16:10 UTC",
            "url": "https://sertideos6.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:16:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806924/",
            "reporter": "anonymous"
        }
    ],
    "3806923": [
        {
            "dateadded": "2026-03-28 09:13:25 UTC",
            "url": "http://123.144.89.68:58717/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 22:21:41 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806923/",
            "reporter": "geenensp"
        }
    ],
    "3806922": [
        {
            "dateadded": "2026-03-28 09:11:11 UTC",
            "url": "https://f0x8-frame.dockhype.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:11:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806922/",
            "reporter": "anonymous"
        }
    ],
    "3806921": [
        {
            "dateadded": "2026-03-28 09:09:21 UTC",
            "url": "http://182.112.12.70:38474/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:32:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806921/",
            "reporter": "geenensp"
        }
    ],
    "3806920": [
        {
            "dateadded": "2026-03-28 09:08:18 UTC",
            "url": "http://180.191.230.61:51275/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-14 22:41:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806920/",
            "reporter": "geenensp"
        }
    ],
    "3806919": [
        {
            "dateadded": "2026-03-28 09:05:10 UTC",
            "url": "https://59zvgq.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 09:05:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806919/",
            "reporter": "anonymous"
        }
    ],
    "3806918": [
        {
            "dateadded": "2026-03-28 09:02:07 UTC",
            "url": "http://119.167.27.116:60256/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:24:59 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806918/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806917": [
        {
            "dateadded": "2026-03-28 08:59:09 UTC",
            "url": "https://broa-glow.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806917/",
            "reporter": "anonymous"
        }
    ],
    "3806916": [
        {
            "dateadded": "2026-03-28 08:54:08 UTC",
            "url": "https://flowmer.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:54:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806916/",
            "reporter": "anonymous"
        }
    ],
    "3806914": [
        {
            "dateadded": "2026-03-28 08:52:08 UTC",
            "url": "http://110.39.244.189:56858/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:08:49 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806914/",
            "reporter": "geenensp"
        }
    ],
    "3806915": [
        {
            "dateadded": "2026-03-28 08:52:08 UTC",
            "url": "http://110.37.39.146:49339/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 09:15:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806915/",
            "reporter": "geenensp"
        }
    ],
    "3806913": [
        {
            "dateadded": "2026-03-28 08:50:19 UTC",
            "url": "http://90.224.208.161:48263/bin.sh",
            "url_status": "online",
            "last_online": "2026-04-27 11:27:00 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806913/",
            "reporter": "geenensp"
        }
    ],
    "3806912": [
        {
            "dateadded": "2026-03-28 08:48:11 UTC",
            "url": "https://pur34-grid.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:48:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806912/",
            "reporter": "anonymous"
        }
    ],
    "3806911": [
        {
            "dateadded": "2026-03-28 08:45:19 UTC",
            "url": "http://42.58.124.72:45797/i",
            "url_status": "offline",
            "last_online": "2026-04-03 03:40:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806911/",
            "reporter": "geenensp"
        }
    ],
    "3806910": [
        {
            "dateadded": "2026-03-28 08:42:10 UTC",
            "url": "https://chorusschema.cloudfloot.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:42:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806910/",
            "reporter": "anonymous"
        }
    ],
    "3806909": [
        {
            "dateadded": "2026-03-28 08:37:12 UTC",
            "url": "http://119.167.27.116:60256/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:16:24 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806909/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806908": [
        {
            "dateadded": "2026-03-28 08:37:10 UTC",
            "url": "https://fi3ld-mount.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:37:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806908/",
            "reporter": "anonymous"
        }
    ],
    "3806907": [
        {
            "dateadded": "2026-03-28 08:36:17 UTC",
            "url": "http://120.28.139.94:57035/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:43:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806907/",
            "reporter": "geenensp"
        }
    ],
    "3806906": [
        {
            "dateadded": "2026-03-28 08:32:09 UTC",
            "url": "http://110.39.244.189:56858/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 08:32:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806906/",
            "reporter": "geenensp"
        }
    ],
    "3806905": [
        {
            "dateadded": "2026-03-28 08:31:18 UTC",
            "url": "http://27.37.62.32:46073/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 16:13:36 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806905/",
            "reporter": "geenensp"
        }
    ],
    "3806904": [
        {
            "dateadded": "2026-03-28 08:31:11 UTC",
            "url": "https://bxorbuj.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:31:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806904/",
            "reporter": "anonymous"
        }
    ],
    "3806903": [
        {
            "dateadded": "2026-03-28 08:26:10 UTC",
            "url": "https://5tor-bridge.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:26:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806903/",
            "reporter": "anonymous"
        }
    ],
    "3806902": [
        {
            "dateadded": "2026-03-28 08:20:10 UTC",
            "url": "https://datadir.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:20:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806902/",
            "reporter": "anonymous"
        }
    ],
    "3806901": [
        {
            "dateadded": "2026-03-28 08:15:11 UTC",
            "url": "https://vor-draa.hostyard.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806901/",
            "reporter": "anonymous"
        }
    ],
    "3806900": [
        {
            "dateadded": "2026-03-28 08:11:08 UTC",
            "url": "http://42.58.124.72:45797/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-03 04:16:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806900/",
            "reporter": "geenensp"
        }
    ],
    "3806899": [
        {
            "dateadded": "2026-03-28 08:09:08 UTC",
            "url": "https://ibdav4vt.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:09:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806899/",
            "reporter": "anonymous"
        }
    ],
    "3806898": [
        {
            "dateadded": "2026-03-28 08:03:08 UTC",
            "url": "https://meta-qu4nt.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 08:03:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806898/",
            "reporter": "anonymous"
        }
    ],
    "3806897": [
        {
            "dateadded": "2026-03-28 08:02:06 UTC",
            "url": "http://200.115.102.16:39145/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:54:25 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806897/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806896": [
        {
            "dateadded": "2026-03-28 07:57:08 UTC",
            "url": "https://ressilen.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806896/",
            "reporter": "anonymous"
        }
    ],
    "3806895": [
        {
            "dateadded": "2026-03-28 07:57:07 UTC",
            "url": "http://125.40.86.155:34773/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:20:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806895/",
            "reporter": "geenensp"
        }
    ],
    "3806894": [
        {
            "dateadded": "2026-03-28 07:56:10 UTC",
            "url": "http://123.8.5.28:36155/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:05:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806894/",
            "reporter": "geenensp"
        }
    ],
    "3806893": [
        {
            "dateadded": "2026-03-28 07:55:21 UTC",
            "url": "http://182.112.12.70:38474/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:29:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806893/",
            "reporter": "geenensp"
        }
    ],
    "3806892": [
        {
            "dateadded": "2026-03-28 07:53:09 UTC",
            "url": "https://lafc2.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:53:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806892/",
            "reporter": "anonymous"
        }
    ],
    "3806891": [
        {
            "dateadded": "2026-03-28 07:47:17 UTC",
            "url": "http://110.37.54.31:34473/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:40:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806891/",
            "reporter": "geenensp"
        }
    ],
    "3806890": [
        {
            "dateadded": "2026-03-28 07:46:09 UTC",
            "url": "https://9uclkz8z.matchexact.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806890/",
            "reporter": "anonymous"
        }
    ],
    "3806889": [
        {
            "dateadded": "2026-03-28 07:44:16 UTC",
            "url": "http://110.37.52.73:35664/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:33:59 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806889/",
            "reporter": "geenensp"
        }
    ],
    "3806888": [
        {
            "dateadded": "2026-03-28 07:40:10 UTC",
            "url": "https://stitchreed.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806888/",
            "reporter": "anonymous"
        }
    ],
    "3806887": [
        {
            "dateadded": "2026-03-28 07:37:07 UTC",
            "url": "http://110.36.89.2:52557/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:44:18 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806887/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806886": [
        {
            "dateadded": "2026-03-28 07:35:11 UTC",
            "url": "https://rjpx.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:35:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806886/",
            "reporter": "anonymous"
        }
    ],
    "3806885": [
        {
            "dateadded": "2026-03-28 07:32:16 UTC",
            "url": "http://123.8.5.28:36155/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:28:32 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806885/",
            "reporter": "geenensp"
        }
    ],
    "3806884": [
        {
            "dateadded": "2026-03-28 07:31:08 UTC",
            "url": "https://me5h-sheet.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:31:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806884/",
            "reporter": "anonymous"
        }
    ],
    "3806883": [
        {
            "dateadded": "2026-03-28 07:28:07 UTC",
            "url": "https://geo-thr3.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:28:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806883/",
            "reporter": "anonymous"
        }
    ],
    "3806882": [
        {
            "dateadded": "2026-03-28 07:27:16 UTC",
            "url": "http://219.140.6.233:59311/i",
            "url_status": "offline",
            "last_online": "2026-03-28 10:29:12 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806882/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806881": [
        {
            "dateadded": "2026-03-28 07:26:18 UTC",
            "url": "http://117.222.166.66:53775/i",
            "url_status": "offline",
            "last_online": "2026-03-28 07:26:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806881/",
            "reporter": "geenensp"
        }
    ],
    "3806880": [
        {
            "dateadded": "2026-03-28 07:19:10 UTC",
            "url": "https://pe4k-chain.productter.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:19:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806880/",
            "reporter": "anonymous"
        }
    ],
    "3806879": [
        {
            "dateadded": "2026-03-28 07:16:08 UTC",
            "url": "http://110.37.54.31:34473/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 22:03:01 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806879/",
            "reporter": "geenensp"
        }
    ],
    "3806878": [
        {
            "dateadded": "2026-03-28 07:13:08 UTC",
            "url": "https://69woakx5.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:13:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806878/",
            "reporter": "anonymous"
        }
    ],
    "3806877": [
        {
            "dateadded": "2026-03-28 07:10:18 UTC",
            "url": "http://39.89.174.35:47979/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:27:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806877/",
            "reporter": "geenensp"
        }
    ],
    "3806876": [
        {
            "dateadded": "2026-03-28 07:08:08 UTC",
            "url": "https://48bc.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806876/",
            "reporter": "anonymous"
        }
    ],
    "3806875": [
        {
            "dateadded": "2026-03-28 07:07:09 UTC",
            "url": "http://42.238.248.100:33782/i",
            "url_status": "offline",
            "last_online": "2026-03-28 07:07:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806875/",
            "reporter": "geenensp"
        }
    ],
    "3806874": [
        {
            "dateadded": "2026-03-28 07:07:08 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl",
            "url_status": "offline",
            "last_online": "2026-04-08 17:06:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806874/",
            "reporter": "abuse_ch"
        }
    ],
    "3806863": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc",
            "url_status": "offline",
            "last_online": "2026-04-08 17:00:38 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806863/",
            "reporter": "abuse_ch"
        }
    ],
    "3806864": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5",
            "url_status": "offline",
            "last_online": "2026-04-08 17:22:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806864/",
            "reporter": "abuse_ch"
        }
    ],
    "3806865": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc",
            "url_status": "offline",
            "last_online": "2026-04-08 16:43:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806865/",
            "reporter": "abuse_ch"
        }
    ],
    "3806866": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7",
            "url_status": "offline",
            "last_online": "2026-04-08 15:50:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806866/",
            "reporter": "abuse_ch"
        }
    ],
    "3806867": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686",
            "url_status": "offline",
            "last_online": "2026-04-08 16:15:13 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806867/",
            "reporter": "abuse_ch"
        }
    ],
    "3806868": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4",
            "url_status": "offline",
            "last_online": "2026-04-08 16:10:04 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806868/",
            "reporter": "abuse_ch"
        }
    ],
    "3806869": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm",
            "url_status": "offline",
            "last_online": "2026-04-08 17:23:15 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806869/",
            "reporter": "abuse_ch"
        }
    ],
    "3806870": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k",
            "url_status": "offline",
            "last_online": "2026-04-08 16:46:41 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806870/",
            "reporter": "abuse_ch"
        }
    ],
    "3806871": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6",
            "url_status": "offline",
            "last_online": "2026-04-08 16:11:19 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806871/",
            "reporter": "abuse_ch"
        }
    ],
    "3806872": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips",
            "url_status": "offline",
            "last_online": "2026-04-08 16:46:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806872/",
            "reporter": "abuse_ch"
        }
    ],
    "3806873": [
        {
            "dateadded": "2026-03-28 07:06:18 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x64",
            "url_status": "offline",
            "last_online": "2026-04-08 17:23:39 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806873/",
            "reporter": "abuse_ch"
        }
    ],
    "3806861": [
        {
            "dateadded": "2026-03-28 07:06:07 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86",
            "url_status": "offline",
            "last_online": "2026-04-08 16:34:09 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806861/",
            "reporter": "abuse_ch"
        }
    ],
    "3806862": [
        {
            "dateadded": "2026-03-28 07:06:07 UTC",
            "url": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc",
            "url_status": "offline",
            "last_online": "2026-04-08 16:00:43 UTC",
            "threat": "malware_download",
            "tags": [
                "elf",
                "mirai",
                "ua-wget"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806862/",
            "reporter": "abuse_ch"
        }
    ],
    "3806860": [
        {
            "dateadded": "2026-03-28 07:05:14 UTC",
            "url": "http://117.222.166.66:53775/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 07:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806860/",
            "reporter": "geenensp"
        }
    ],
    "3806858": [
        {
            "dateadded": "2026-03-28 07:03:17 UTC",
            "url": "http://79.124.59.142/index.ps1",
            "url_status": "online",
            "last_online": "2026-04-27 11:39:04 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ascii",
                "powershell",
                "ps1",
                "ZigClipper"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806858/",
            "reporter": "abuse_ch"
        }
    ],
    "3806859": [
        {
            "dateadded": "2026-03-28 07:03:17 UTC",
            "url": "http://219.156.174.89:58798/i",
            "url_status": "offline",
            "last_online": "2026-03-28 07:03:17 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806859/",
            "reporter": "geenensp"
        }
    ],
    "3806857": [
        {
            "dateadded": "2026-03-28 07:02:09 UTC",
            "url": "https://quorcrestum4.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 07:02:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806857/",
            "reporter": "anonymous"
        }
    ],
    "3806856": [
        {
            "dateadded": "2026-03-28 07:01:15 UTC",
            "url": "http://110.36.89.2:52557/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:12:21 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806856/",
            "reporter": "geenensp"
        }
    ],
    "3806854": [
        {
            "dateadded": "2026-03-28 06:59:05 UTC",
            "url": "http://144.31.191.28/MvRWIgmy.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806854/",
            "reporter": "abuse_ch"
        }
    ],
    "3806855": [
        {
            "dateadded": "2026-03-28 06:59:05 UTC",
            "url": "http://144.31.191.28/user_h7Hgn7SD9Jm/ZurfeZKG.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806855/",
            "reporter": "abuse_ch"
        }
    ],
    "3806853": [
        {
            "dateadded": "2026-03-28 06:56:08 UTC",
            "url": "https://sprble.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:56:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806853/",
            "reporter": "anonymous"
        }
    ],
    "3806852": [
        {
            "dateadded": "2026-03-28 06:53:17 UTC",
            "url": "http://182.112.233.85:42504/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:13:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806852/",
            "reporter": "geenensp"
        }
    ],
    "3806851": [
        {
            "dateadded": "2026-03-28 06:52:12 UTC",
            "url": "http://110.36.86.0:51117/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:48:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806851/",
            "reporter": "geenensp"
        }
    ],
    "3806850": [
        {
            "dateadded": "2026-03-28 06:52:09 UTC",
            "url": "https://primefierc.tockentrue.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806850/",
            "reporter": "anonymous"
        }
    ],
    "3806849": [
        {
            "dateadded": "2026-03-28 06:51:16 UTC",
            "url": "http://219.156.174.89:58798/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 06:51:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806849/",
            "reporter": "geenensp"
        }
    ],
    "3806848": [
        {
            "dateadded": "2026-03-28 06:49:09 UTC",
            "url": "https://ext4point.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:49:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806848/",
            "reporter": "anonymous"
        }
    ],
    "3806847": [
        {
            "dateadded": "2026-03-28 06:48:11 UTC",
            "url": "http://182.127.176.191:35668/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:08:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806847/",
            "reporter": "geenensp"
        }
    ],
    "3806846": [
        {
            "dateadded": "2026-03-28 06:47:05 UTC",
            "url": "http://45.137.70.27:8080/arm",
            "url_status": "offline",
            "last_online": "2026-03-28 09:33:38 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806846/",
            "reporter": "soncraft"
        }
    ],
    "3806844": [
        {
            "dateadded": "2026-03-28 06:46:19 UTC",
            "url": "http://91.92.243.119/steam/lemon.exe",
            "url_status": "offline",
            "last_online": "2026-04-03 03:31:09 UTC",
            "threat": "malware_download",
            "tags": [
                "exe",
                "LemonStealer"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806844/",
            "reporter": "burger"
        }
    ],
    "3806845": [
        {
            "dateadded": "2026-03-28 06:46:19 UTC",
            "url": "http://185.244.182.35/arm7",
            "url_status": "offline",
            "last_online": "2026-04-26 23:45:20 UTC",
            "threat": "malware_download",
            "tags": [
                "arm",
                "mirai",
                "mossadbotnet"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806845/",
            "reporter": "malwarereport"
        }
    ],
    "3806839": [
        {
            "dateadded": "2026-03-28 06:46:08 UTC",
            "url": "http://45.137.70.27:8080/mips",
            "url_status": "offline",
            "last_online": "2026-03-28 10:18:39 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806839/",
            "reporter": "soncraft"
        }
    ],
    "3806840": [
        {
            "dateadded": "2026-03-28 06:46:08 UTC",
            "url": "http://45.137.70.27:8080/aarch64",
            "url_status": "offline",
            "last_online": "2026-03-28 09:50:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806840/",
            "reporter": "soncraft"
        }
    ],
    "3806841": [
        {
            "dateadded": "2026-03-28 06:46:08 UTC",
            "url": "http://167.148.41.234:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=",
            "url_status": "offline",
            "last_online": "2026-03-28 06:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "connectwise",
                "screenconnect"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806841/",
            "reporter": "points"
        }
    ],
    "3806842": [
        {
            "dateadded": "2026-03-28 06:46:08 UTC",
            "url": "http://45.137.70.27:8080/mipsel",
            "url_status": "offline",
            "last_online": "2026-03-28 10:15:28 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806842/",
            "reporter": "soncraft"
        }
    ],
    "3806843": [
        {
            "dateadded": "2026-03-28 06:46:08 UTC",
            "url": "https://download-version.1-7-2.com/claude",
            "url_status": "offline",
            "last_online": "2026-03-28 06:46:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806843/",
            "reporter": "tanner"
        }
    ],
    "3806838": [
        {
            "dateadded": "2026-03-28 06:46:07 UTC",
            "url": "http://115.63.11.200:34206/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 21:28:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806838/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806837": [
        {
            "dateadded": "2026-03-28 06:46:04 UTC",
            "url": "http://206.189.22.92/all.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "script"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806837/",
            "reporter": "geenensp"
        }
    ],
    "3806836": [
        {
            "dateadded": "2026-03-28 06:45:11 UTC",
            "url": "http://117.196.7.158:39509/i",
            "url_status": "offline",
            "last_online": "2026-03-28 06:45:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806836/",
            "reporter": "geenensp"
        }
    ],
    "3806835": [
        {
            "dateadded": "2026-03-28 06:40:11 UTC",
            "url": "https://ext3data.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:40:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806835/",
            "reporter": "anonymous"
        }
    ],
    "3806834": [
        {
            "dateadded": "2026-03-28 06:39:07 UTC",
            "url": "http://42.238.248.100:33782/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 06:39:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806834/",
            "reporter": "geenensp"
        }
    ],
    "3806833": [
        {
            "dateadded": "2026-03-28 06:36:11 UTC",
            "url": "http://42.225.228.61:58140/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:30:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806833/",
            "reporter": "geenensp"
        }
    ],
    "3806832": [
        {
            "dateadded": "2026-03-28 06:34:08 UTC",
            "url": "https://ext2proxy.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:34:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806832/",
            "reporter": "anonymous"
        }
    ],
    "3806831": [
        {
            "dateadded": "2026-03-28 06:29:08 UTC",
            "url": "https://ext1infra.paragonbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806831/",
            "reporter": "anonymous"
        }
    ],
    "3806830": [
        {
            "dateadded": "2026-03-28 06:27:08 UTC",
            "url": "http://115.63.11.200:34206/i",
            "url_status": "offline",
            "last_online": "2026-03-28 22:34:25 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806830/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806829": [
        {
            "dateadded": "2026-03-28 06:23:13 UTC",
            "url": "http://110.37.52.73:35664/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 22:03:30 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806829/",
            "reporter": "geenensp"
        }
    ],
    "3806828": [
        {
            "dateadded": "2026-03-28 06:22:12 UTC",
            "url": "https://svc4sat.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:22:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806828/",
            "reporter": "anonymous"
        }
    ],
    "3806827": [
        {
            "dateadded": "2026-03-28 06:16:08 UTC",
            "url": "https://svc3core.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:16:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806827/",
            "reporter": "anonymous"
        }
    ],
    "3806826": [
        {
            "dateadded": "2026-03-28 06:13:09 UTC",
            "url": "http://117.196.7.158:39509/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 06:13:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806826/",
            "reporter": "geenensp"
        }
    ],
    "3806825": [
        {
            "dateadded": "2026-03-28 06:11:10 UTC",
            "url": "https://svc2steel.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806825/",
            "reporter": "anonymous"
        }
    ],
    "3806824": [
        {
            "dateadded": "2026-03-28 06:05:14 UTC",
            "url": "https://svc1proc.quantumharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:05:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806824/",
            "reporter": "anonymous"
        }
    ],
    "3806823": [
        {
            "dateadded": "2026-03-28 06:00:15 UTC",
            "url": "http://182.112.233.85:42504/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:07:37 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806823/",
            "reporter": "geenensp"
        }
    ],
    "3806822": [
        {
            "dateadded": "2026-03-28 06:00:10 UTC",
            "url": "https://dev4space.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 06:00:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806822/",
            "reporter": "anonymous"
        }
    ],
    "3806821": [
        {
            "dateadded": "2026-03-28 05:58:09 UTC",
            "url": "https://dev3field.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:58:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806821/",
            "reporter": "anonymous"
        }
    ],
    "3806820": [
        {
            "dateadded": "2026-03-28 05:57:07 UTC",
            "url": "http://110.39.249.140:39687/i",
            "url_status": "offline",
            "last_online": "2026-03-28 05:57:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806820/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806819": [
        {
            "dateadded": "2026-03-28 05:56:13 UTC",
            "url": "http://182.127.176.191:35668/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 17:09:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806819/",
            "reporter": "geenensp"
        }
    ],
    "3806818": [
        {
            "dateadded": "2026-03-28 05:52:06 UTC",
            "url": "http://110.39.249.140:39687/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 05:52:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806818/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806817": [
        {
            "dateadded": "2026-03-28 05:49:08 UTC",
            "url": "https://dev2outer.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:49:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806817/",
            "reporter": "anonymous"
        }
    ],
    "3806816": [
        {
            "dateadded": "2026-03-28 05:48:07 UTC",
            "url": "http://120.28.215.129:56751/i",
            "url_status": "offline",
            "last_online": "2026-03-30 10:38:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806816/",
            "reporter": "geenensp"
        }
    ],
    "3806815": [
        {
            "dateadded": "2026-03-28 05:43:08 UTC",
            "url": "https://dev1proc.nexuspatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:43:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806815/",
            "reporter": "anonymous"
        }
    ],
    "3806814": [
        {
            "dateadded": "2026-03-28 05:40:08 UTC",
            "url": "http://110.38.221.182:50047/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:25:25 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806814/",
            "reporter": "geenensp"
        }
    ],
    "3806813": [
        {
            "dateadded": "2026-03-28 05:37:11 UTC",
            "url": "https://cl4path.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:37:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806813/",
            "reporter": "anonymous"
        }
    ],
    "3806812": [
        {
            "dateadded": "2026-03-28 05:36:13 UTC",
            "url": "http://110.39.242.156:55753/i",
            "url_status": "offline",
            "last_online": "2026-03-28 05:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806812/",
            "reporter": "geenensp"
        }
    ],
    "3806811": [
        {
            "dateadded": "2026-03-28 05:34:14 UTC",
            "url": "https://cl3view.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:34:14 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806811/",
            "reporter": "anonymous"
        }
    ],
    "3806810": [
        {
            "dateadded": "2026-03-28 05:32:07 UTC",
            "url": "http://110.39.242.156:55753/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 05:32:07 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806810/",
            "reporter": "geenensp"
        }
    ],
    "3806809": [
        {
            "dateadded": "2026-03-28 05:31:10 UTC",
            "url": "https://cl2point.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:31:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806809/",
            "reporter": "anonymous"
        }
    ],
    "3806808": [
        {
            "dateadded": "2026-03-28 05:27:06 UTC",
            "url": "http://123.188.114.222:45402/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-02 22:18:06 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806808/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806807": [
        {
            "dateadded": "2026-03-28 05:24:14 UTC",
            "url": "http://117.247.109.76:50301/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:38:04 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806807/",
            "reporter": "geenensp"
        }
    ],
    "3806806": [
        {
            "dateadded": "2026-03-28 05:21:09 UTC",
            "url": "https://cl1proc.vectorprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:21:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806806/",
            "reporter": "anonymous"
        }
    ],
    "3806805": [
        {
            "dateadded": "2026-03-28 05:17:13 UTC",
            "url": "http://39.40.188.128:49098/i",
            "url_status": "offline",
            "last_online": "2026-03-28 05:17:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806805/",
            "reporter": "geenensp"
        }
    ],
    "3806804": [
        {
            "dateadded": "2026-03-28 05:16:13 UTC",
            "url": "http://120.28.215.129:56751/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 09:23:58 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806804/",
            "reporter": "geenensp"
        }
    ],
    "3806803": [
        {
            "dateadded": "2026-03-28 05:15:11 UTC",
            "url": "https://ext4view.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:15:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806803/",
            "reporter": "anonymous"
        }
    ],
    "3806802": [
        {
            "dateadded": "2026-03-28 05:11:13 UTC",
            "url": "http://110.38.221.182:50047/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:14:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806802/",
            "reporter": "geenensp"
        }
    ],
    "3806801": [
        {
            "dateadded": "2026-03-28 05:10:14 UTC",
            "url": "http://175.165.80.194:36221/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:27:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806801/",
            "reporter": "geenensp"
        }
    ],
    "3806800": [
        {
            "dateadded": "2026-03-28 05:09:09 UTC",
            "url": "https://ext3ghost.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:09:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806800/",
            "reporter": "anonymous"
        }
    ],
    "3806799": [
        {
            "dateadded": "2026-03-28 05:05:07 UTC",
            "url": "http://110.37.24.11:41012/i",
            "url_status": "offline",
            "last_online": "2026-03-29 21:21:48 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806799/",
            "reporter": "geenensp"
        }
    ],
    "3806798": [
        {
            "dateadded": "2026-03-28 05:04:10 UTC",
            "url": "https://ext2core.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 05:04:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806798/",
            "reporter": "anonymous"
        }
    ],
    "3806797": [
        {
            "dateadded": "2026-03-28 05:01:12 UTC",
            "url": "http://110.36.80.173:52559/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:12:09 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806797/",
            "reporter": "geenensp"
        }
    ],
    "3806796": [
        {
            "dateadded": "2026-03-28 04:59:09 UTC",
            "url": "https://ext1proc.momentumbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:59:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806796/",
            "reporter": "anonymous"
        }
    ],
    "3806795": [
        {
            "dateadded": "2026-03-28 04:56:20 UTC",
            "url": "http://39.40.188.128:49098/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 04:56:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806795/",
            "reporter": "geenensp"
        }
    ],
    "3806794": [
        {
            "dateadded": "2026-03-28 04:55:12 UTC",
            "url": "http://60.162.207.49:59356/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:39:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806794/",
            "reporter": "geenensp"
        }
    ],
    "3806793": [
        {
            "dateadded": "2026-03-28 04:55:11 UTC",
            "url": "http://60.162.207.49:59356/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:49:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806793/",
            "reporter": "geenensp"
        }
    ],
    "3806792": [
        {
            "dateadded": "2026-03-28 04:53:08 UTC",
            "url": "https://svc4link.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:53:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806792/",
            "reporter": "anonymous"
        }
    ],
    "3806791": [
        {
            "dateadded": "2026-03-28 04:50:09 UTC",
            "url": "http://175.165.80.194:36221/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:16:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806791/",
            "reporter": "geenensp"
        }
    ],
    "3806790": [
        {
            "dateadded": "2026-03-28 04:47:10 UTC",
            "url": "https://svc3user.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:47:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806790/",
            "reporter": "anonymous"
        }
    ],
    "3806789": [
        {
            "dateadded": "2026-03-28 04:45:15 UTC",
            "url": "http://59.96.141.250:41205/i",
            "url_status": "offline",
            "last_online": "2026-03-28 04:45:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806789/",
            "reporter": "geenensp"
        }
    ],
    "3806788": [
        {
            "dateadded": "2026-03-28 04:41:09 UTC",
            "url": "https://svc2base.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:41:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806788/",
            "reporter": "anonymous"
        }
    ],
    "3806787": [
        {
            "dateadded": "2026-03-28 04:39:13 UTC",
            "url": "http://117.253.152.49:40223/i",
            "url_status": "offline",
            "last_online": "2026-03-28 04:39:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806787/",
            "reporter": "geenensp"
        }
    ],
    "3806786": [
        {
            "dateadded": "2026-03-28 04:37:08 UTC",
            "url": "http://42.234.75.160:49372/i",
            "url_status": "offline",
            "last_online": "2026-03-28 04:37:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806786/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806785": [
        {
            "dateadded": "2026-03-28 04:36:08 UTC",
            "url": "https://svc1infra.apexharvestor.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:36:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806785/",
            "reporter": "anonymous"
        }
    ],
    "3806784": [
        {
            "dateadded": "2026-03-28 04:31:07 UTC",
            "url": "http://182.123.199.207:59522/i",
            "url_status": "offline",
            "last_online": "2026-03-30 03:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806784/",
            "reporter": "geenensp"
        }
    ],
    "3806783": [
        {
            "dateadded": "2026-03-28 04:30:10 UTC",
            "url": "https://dev4work.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:30:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806783/",
            "reporter": "anonymous"
        }
    ],
    "3806782": [
        {
            "dateadded": "2026-03-28 04:28:11 UTC",
            "url": "http://125.41.225.108:59914/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:35:19 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806782/",
            "reporter": "geenensp"
        }
    ],
    "3806781": [
        {
            "dateadded": "2026-03-28 04:25:10 UTC",
            "url": "https://dev3local.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:25:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806781/",
            "reporter": "anonymous"
        }
    ],
    "3806780": [
        {
            "dateadded": "2026-03-28 04:23:14 UTC",
            "url": "http://182.123.199.207:59522/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:19:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806780/",
            "reporter": "geenensp"
        }
    ],
    "3806779": [
        {
            "dateadded": "2026-03-28 04:22:06 UTC",
            "url": "http://123.235.242.150:58241/i",
            "url_status": "offline",
            "last_online": "2026-03-29 15:34:58 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806779/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806778": [
        {
            "dateadded": "2026-03-28 04:19:12 UTC",
            "url": "https://dev2power.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:19:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806778/",
            "reporter": "anonymous"
        }
    ],
    "3806777": [
        {
            "dateadded": "2026-03-28 04:17:14 UTC",
            "url": "http://117.253.152.49:40223/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 04:17:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806777/",
            "reporter": "geenensp"
        }
    ],
    "3806776": [
        {
            "dateadded": "2026-03-28 04:17:07 UTC",
            "url": "http://42.234.75.160:49372/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 04:17:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806776/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806775": [
        {
            "dateadded": "2026-03-28 04:14:08 UTC",
            "url": "https://dev1proc.covenantventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:14:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806775/",
            "reporter": "anonymous"
        }
    ],
    "3806774": [
        {
            "dateadded": "2026-03-28 04:12:07 UTC",
            "url": "http://123.235.242.150:58241/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 15:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806774/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806773": [
        {
            "dateadded": "2026-03-28 04:08:08 UTC",
            "url": "https://cl4link.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:08:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806773/",
            "reporter": "anonymous"
        }
    ],
    "3806772": [
        {
            "dateadded": "2026-03-28 04:02:11 UTC",
            "url": "https://cl3dev.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 04:02:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806772/",
            "reporter": "anonymous"
        }
    ],
    "3806771": [
        {
            "dateadded": "2026-03-28 04:01:18 UTC",
            "url": "http://125.41.225.108:59914/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 10:14:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806771/",
            "reporter": "geenensp"
        }
    ],
    "3806769": [
        {
            "dateadded": "2026-03-28 03:57:08 UTC",
            "url": "http://182.96.165.80:52373/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 06:12:27 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806769/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806770": [
        {
            "dateadded": "2026-03-28 03:57:08 UTC",
            "url": "https://cl2remote.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:57:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806770/",
            "reporter": "anonymous"
        }
    ],
    "3806768": [
        {
            "dateadded": "2026-03-28 03:55:08 UTC",
            "url": "http://110.37.40.14:60839/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:55:08 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806768/",
            "reporter": "geenensp"
        }
    ],
    "3806767": [
        {
            "dateadded": "2026-03-28 03:54:07 UTC",
            "url": "https://cl1store.latticepatronage.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:54:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806767/",
            "reporter": "anonymous"
        }
    ],
    "3806766": [
        {
            "dateadded": "2026-03-28 03:52:07 UTC",
            "url": "http://219.155.210.6:34979/i",
            "url_status": "offline",
            "last_online": "2026-03-31 15:24:57 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806766/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806765": [
        {
            "dateadded": "2026-03-28 03:44:12 UTC",
            "url": "https://ext4sync.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:44:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806765/",
            "reporter": "anonymous"
        }
    ],
    "3806764": [
        {
            "dateadded": "2026-03-28 03:44:07 UTC",
            "url": "http://110.37.73.69:32906/i",
            "url_status": "offline",
            "last_online": "2026-03-28 16:52:29 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806764/",
            "reporter": "geenensp"
        }
    ],
    "3806763": [
        {
            "dateadded": "2026-03-28 03:43:14 UTC",
            "url": "http://182.114.189.127:52671/i",
            "url_status": "offline",
            "last_online": "2026-03-28 22:42:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806763/",
            "reporter": "geenensp"
        }
    ],
    "3806762": [
        {
            "dateadded": "2026-03-28 03:43:12 UTC",
            "url": "http://110.37.73.69:32906/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:15:56 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806762/",
            "reporter": "geenensp"
        }
    ],
    "3806761": [
        {
            "dateadded": "2026-03-28 03:42:07 UTC",
            "url": "http://117.223.143.73:52428/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:42:07 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806761/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806760": [
        {
            "dateadded": "2026-03-28 03:38:08 UTC",
            "url": "https://ext3gate.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:38:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806760/",
            "reporter": "anonymous"
        }
    ],
    "3806759": [
        {
            "dateadded": "2026-03-28 03:32:16 UTC",
            "url": "https://ext2proc.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:32:16 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806759/",
            "reporter": "anonymous"
        }
    ],
    "3806758": [
        {
            "dateadded": "2026-03-28 03:31:16 UTC",
            "url": "http://117.253.154.211:34591/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:31:16 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806758/",
            "reporter": "geenensp"
        }
    ],
    "3806757": [
        {
            "dateadded": "2026-03-28 03:27:13 UTC",
            "url": "http://110.37.98.220:49877/i",
            "url_status": "offline",
            "last_online": "2026-03-29 09:15:22 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806757/",
            "reporter": "geenensp"
        }
    ],
    "3806756": [
        {
            "dateadded": "2026-03-28 03:27:11 UTC",
            "url": "https://ext1meta.radiantprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:27:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806756/",
            "reporter": "anonymous"
        }
    ],
    "3806755": [
        {
            "dateadded": "2026-03-28 03:27:06 UTC",
            "url": "http://110.36.95.252:58319/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 03:27:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806755/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806753": [
        {
            "dateadded": "2026-03-28 03:24:11 UTC",
            "url": "http://27.215.180.182:42951/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:32:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806753/",
            "reporter": "geenensp"
        }
    ],
    "3806754": [
        {
            "dateadded": "2026-03-28 03:24:11 UTC",
            "url": "http://118.253.80.156:48921/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:56:26 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806754/",
            "reporter": "geenensp"
        }
    ],
    "3806752": [
        {
            "dateadded": "2026-03-28 03:24:10 UTC",
            "url": "http://27.215.180.182:42951/i",
            "url_status": "offline",
            "last_online": "2026-03-28 15:35:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806752/",
            "reporter": "geenensp"
        }
    ],
    "3806751": [
        {
            "dateadded": "2026-03-28 03:22:08 UTC",
            "url": "http://219.155.210.6:34979/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-31 17:17:44 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806751/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806750": [
        {
            "dateadded": "2026-03-28 03:21:08 UTC",
            "url": "https://svc4static.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:21:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806750/",
            "reporter": "anonymous"
        }
    ],
    "3806749": [
        {
            "dateadded": "2026-03-28 03:15:12 UTC",
            "url": "https://svc3edge.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:15:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806749/",
            "reporter": "anonymous"
        }
    ],
    "3806748": [
        {
            "dateadded": "2026-03-28 03:12:10 UTC",
            "url": "http://117.223.143.73:52428/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 03:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806748/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806747": [
        {
            "dateadded": "2026-03-28 03:09:13 UTC",
            "url": "https://svc2data.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:09:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806747/",
            "reporter": "anonymous"
        }
    ],
    "3806746": [
        {
            "dateadded": "2026-03-28 03:07:08 UTC",
            "url": "http://221.225.238.133:34049/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:34:03 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806746/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806745": [
        {
            "dateadded": "2026-03-28 03:07:06 UTC",
            "url": "http://182.127.53.90:48976/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:07:06 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806745/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806744": [
        {
            "dateadded": "2026-03-28 03:05:17 UTC",
            "url": "http://118.253.80.156:48921/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 16:27:54 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806744/",
            "reporter": "geenensp"
        }
    ],
    "3806743": [
        {
            "dateadded": "2026-03-28 03:05:15 UTC",
            "url": "https://svc1sync.zenithharbinger.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 03:05:15 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806743/",
            "reporter": "anonymous"
        }
    ],
    "3806742": [
        {
            "dateadded": "2026-03-28 03:02:13 UTC",
            "url": "http://110.37.96.168:49364/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806742/",
            "reporter": "geenensp"
        }
    ],
    "3806741": [
        {
            "dateadded": "2026-03-28 03:00:16 UTC",
            "url": "http://42.56.218.24:32964/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:32:55 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806741/",
            "reporter": "geenensp"
        }
    ],
    "3806740": [
        {
            "dateadded": "2026-03-28 02:59:10 UTC",
            "url": "https://ext4point.keystoneprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:59:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806740/",
            "reporter": "anonymous"
        }
    ],
    "3806739": [
        {
            "dateadded": "2026-03-28 02:53:07 UTC",
            "url": "https://ext3data.keystoneprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:53:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806739/",
            "reporter": "anonymous"
        }
    ],
    "3806738": [
        {
            "dateadded": "2026-03-28 02:52:06 UTC",
            "url": "http://120.28.218.245:60982/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 21:08:30 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806738/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806737": [
        {
            "dateadded": "2026-03-28 02:49:15 UTC",
            "url": "http://60.18.122.186:45482/i",
            "url_status": "offline",
            "last_online": "2026-04-01 22:44:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806737/",
            "reporter": "geenensp"
        }
    ],
    "3806736": [
        {
            "dateadded": "2026-03-28 02:48:27 UTC",
            "url": "http://110.37.98.220:49877/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 03:25:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806736/",
            "reporter": "geenensp"
        }
    ],
    "3806735": [
        {
            "dateadded": "2026-03-28 02:48:10 UTC",
            "url": "https://ext2proxy.keystoneprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:48:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806735/",
            "reporter": "anonymous"
        }
    ],
    "3806734": [
        {
            "dateadded": "2026-03-28 02:46:15 UTC",
            "url": "http://27.202.30.50:48021/i",
            "url_status": "offline",
            "last_online": "2026-03-30 07:16:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806734/",
            "reporter": "geenensp"
        }
    ],
    "3806731": [
        {
            "dateadded": "2026-03-28 02:42:08 UTC",
            "url": "https://ext1infra.keystoneprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806731/",
            "reporter": "anonymous"
        }
    ],
    "3806732": [
        {
            "dateadded": "2026-03-28 02:42:08 UTC",
            "url": "http://180.190.189.204:56375/i",
            "url_status": "offline",
            "last_online": "2026-04-05 22:07:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806732/",
            "reporter": "geenensp"
        }
    ],
    "3806733": [
        {
            "dateadded": "2026-03-28 02:42:08 UTC",
            "url": "http://182.127.53.90:48976/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 02:42:08 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806733/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806730": [
        {
            "dateadded": "2026-03-28 02:36:13 UTC",
            "url": "https://svc4sat.spectrumforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:36:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806730/",
            "reporter": "anonymous"
        }
    ],
    "3806728": [
        {
            "dateadded": "2026-03-28 02:33:06 UTC",
            "url": "http://117.253.154.211:34591/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 02:33:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806728/",
            "reporter": "geenensp"
        }
    ],
    "3806729": [
        {
            "dateadded": "2026-03-28 02:33:06 UTC",
            "url": "http://42.56.218.24:32964/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-29 04:12:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806729/",
            "reporter": "geenensp"
        }
    ],
    "3806727": [
        {
            "dateadded": "2026-03-28 02:31:07 UTC",
            "url": "https://svc3core.spectrumforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:31:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806727/",
            "reporter": "anonymous"
        }
    ],
    "3806726": [
        {
            "dateadded": "2026-03-28 02:28:15 UTC",
            "url": "http://110.37.96.168:49364/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 02:59:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806726/",
            "reporter": "geenensp"
        }
    ],
    "3806725": [
        {
            "dateadded": "2026-03-28 02:25:18 UTC",
            "url": "http://112.231.134.13:56814/i",
            "url_status": "offline",
            "last_online": "2026-03-28 02:25:18 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806725/",
            "reporter": "geenensp"
        }
    ],
    "3806724": [
        {
            "dateadded": "2026-03-28 02:25:09 UTC",
            "url": "https://svc2steel.spectrumforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:25:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806724/",
            "reporter": "anonymous"
        }
    ],
    "3806722": [
        {
            "dateadded": "2026-03-28 02:23:15 UTC",
            "url": "http://110.37.65.205:36745/i",
            "url_status": "offline",
            "last_online": "2026-03-28 04:22:57 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806722/",
            "reporter": "geenensp"
        }
    ],
    "3806723": [
        {
            "dateadded": "2026-03-28 02:23:15 UTC",
            "url": "http://60.18.122.186:45482/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-01 22:01:39 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806723/",
            "reporter": "geenensp"
        }
    ],
    "3806721": [
        {
            "dateadded": "2026-03-28 02:19:08 UTC",
            "url": "https://svc1proc.spectrumforge.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:19:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806721/",
            "reporter": "anonymous"
        }
    ],
    "3806720": [
        {
            "dateadded": "2026-03-28 02:17:47 UTC",
            "url": "http://112.231.134.13:56814/bin.sh",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806720/",
            "reporter": "geenensp"
        }
    ],
    "3806719": [
        {
            "dateadded": "2026-03-28 02:14:16 UTC",
            "url": "http://125.41.109.105:42271/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 17:10:35 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806719/",
            "reporter": "geenensp"
        }
    ],
    "3806718": [
        {
            "dateadded": "2026-03-28 02:14:15 UTC",
            "url": "http://180.190.189.204:56375/bin.sh",
            "url_status": "offline",
            "last_online": "2026-04-05 21:37:34 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806718/",
            "reporter": "geenensp"
        }
    ],
    "3806717": [
        {
            "dateadded": "2026-03-28 02:14:10 UTC",
            "url": "https://dev4space.paragonventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:14:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806717/",
            "reporter": "anonymous"
        }
    ],
    "3806716": [
        {
            "dateadded": "2026-03-28 02:12:14 UTC",
            "url": "http://110.37.89.129:49857/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:22:24 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806716/",
            "reporter": "geenensp"
        }
    ],
    "3806715": [
        {
            "dateadded": "2026-03-28 02:12:08 UTC",
            "url": "https://dev3field.paragonventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:12:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806715/",
            "reporter": "anonymous"
        }
    ],
    "3806714": [
        {
            "dateadded": "2026-03-28 02:10:14 UTC",
            "url": "http://42.56.155.190:38798/i",
            "url_status": "offline",
            "last_online": "2026-03-28 10:11:10 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806714/",
            "reporter": "geenensp"
        }
    ],
    "3806713": [
        {
            "dateadded": "2026-03-28 02:04:12 UTC",
            "url": "http://110.37.65.205:36745/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 03:55:13 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806713/",
            "reporter": "geenensp"
        }
    ],
    "3806712": [
        {
            "dateadded": "2026-03-28 02:02:13 UTC",
            "url": "https://dev2outer.paragonventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 02:02:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806712/",
            "reporter": "anonymous"
        }
    ],
    "3806711": [
        {
            "dateadded": "2026-03-28 02:02:10 UTC",
            "url": "http://182.60.12.214:39237/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:18:26 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806711/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806710": [
        {
            "dateadded": "2026-03-28 02:02:06 UTC",
            "url": "http://110.36.95.252:58319/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:44:02 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806710/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806709": [
        {
            "dateadded": "2026-03-28 01:58:13 UTC",
            "url": "http://27.202.30.50:48021/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 04:30:15 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806709/",
            "reporter": "geenensp"
        }
    ],
    "3806708": [
        {
            "dateadded": "2026-03-28 01:57:09 UTC",
            "url": "https://dev1proc.paragonventure.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:57:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806708/",
            "reporter": "anonymous"
        }
    ],
    "3806707": [
        {
            "dateadded": "2026-03-28 01:54:13 UTC",
            "url": "http://42.56.155.190:38798/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 09:51:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806707/",
            "reporter": "geenensp"
        }
    ],
    "3806706": [
        {
            "dateadded": "2026-03-28 01:52:09 UTC",
            "url": "https://cl4path.quantumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:52:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806706/",
            "reporter": "anonymous"
        }
    ],
    "3806705": [
        {
            "dateadded": "2026-03-28 01:48:11 UTC",
            "url": "http://110.37.89.129:49857/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 09:15:02 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806705/",
            "reporter": "geenensp"
        }
    ],
    "3806704": [
        {
            "dateadded": "2026-03-28 01:46:15 UTC",
            "url": "http://115.50.42.80:36101/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:17:50 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806704/",
            "reporter": "geenensp"
        }
    ],
    "3806703": [
        {
            "dateadded": "2026-03-28 01:46:08 UTC",
            "url": "https://cl3view.quantumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:46:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806703/",
            "reporter": "anonymous"
        }
    ],
    "3806702": [
        {
            "dateadded": "2026-03-28 01:40:13 UTC",
            "url": "http://112.198.140.250:47540/i",
            "url_status": "offline",
            "last_online": "2026-04-05 21:39:51 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806702/",
            "reporter": "geenensp"
        }
    ],
    "3806701": [
        {
            "dateadded": "2026-03-28 01:40:10 UTC",
            "url": "https://cl2point.quantumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:40:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806701/",
            "reporter": "anonymous"
        }
    ],
    "3806700": [
        {
            "dateadded": "2026-03-28 01:37:07 UTC",
            "url": "http://115.55.241.16:49325/i",
            "url_status": "offline",
            "last_online": "2026-03-29 22:02:45 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806700/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806699": [
        {
            "dateadded": "2026-03-28 01:35:10 UTC",
            "url": "https://cl1proc.quantumprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:35:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806699/",
            "reporter": "anonymous"
        }
    ],
    "3806698": [
        {
            "dateadded": "2026-03-28 01:29:08 UTC",
            "url": "https://ext4view.nexusharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:29:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806698/",
            "reporter": "anonymous"
        }
    ],
    "3806697": [
        {
            "dateadded": "2026-03-28 01:23:09 UTC",
            "url": "https://ext3ghost.nexusharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:23:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806697/",
            "reporter": "anonymous"
        }
    ],
    "3806696": [
        {
            "dateadded": "2026-03-28 01:23:08 UTC",
            "url": "http://115.50.42.80:36101/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 03:38:33 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806696/",
            "reporter": "geenensp"
        }
    ],
    "3806695": [
        {
            "dateadded": "2026-03-28 01:18:11 UTC",
            "url": "https://ext2core.nexusharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:18:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806695/",
            "reporter": "anonymous"
        }
    ],
    "3806694": [
        {
            "dateadded": "2026-03-28 01:13:16 UTC",
            "url": "http://59.177.108.44:51130/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:29:46 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806694/",
            "reporter": "geenensp"
        }
    ],
    "3806693": [
        {
            "dateadded": "2026-03-28 01:12:10 UTC",
            "url": "https://ext1proc.nexusharbora.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:12:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806693/",
            "reporter": "anonymous"
        }
    ],
    "3806692": [
        {
            "dateadded": "2026-03-28 01:12:08 UTC",
            "url": "http://124.148.224.41:39098/i",
            "url_status": "offline",
            "last_online": "2026-03-28 01:12:08 UTC",
            "threat": "malware_download",
            "tags": null,
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806692/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806691": [
        {
            "dateadded": "2026-03-28 01:11:06 UTC",
            "url": "http://117.212.168.67:60175/i",
            "url_status": "offline",
            "last_online": "2026-03-28 01:11:06 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806691/",
            "reporter": "geenensp"
        }
    ],
    "3806690": [
        {
            "dateadded": "2026-03-28 01:09:14 UTC",
            "url": "http://117.205.92.22:44723/i",
            "url_status": "offline",
            "last_online": "2026-03-28 01:09:14 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806690/",
            "reporter": "geenensp"
        }
    ],
    "3806689": [
        {
            "dateadded": "2026-03-28 01:07:07 UTC",
            "url": "https://svc4link.luminouspatron.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:07:07 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806689/",
            "reporter": "anonymous"
        }
    ],
    "3806688": [
        {
            "dateadded": "2026-03-28 01:04:13 UTC",
            "url": "http://196.189.68.239:58922/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:34:43 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806688/",
            "reporter": "geenensp"
        }
    ],
    "3806687": [
        {
            "dateadded": "2026-03-28 01:03:12 UTC",
            "url": "http://117.205.92.22:44723/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 01:03:12 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806687/",
            "reporter": "geenensp"
        }
    ],
    "3806686": [
        {
            "dateadded": "2026-03-28 01:02:06 UTC",
            "url": "http://42.224.22.108:33129/i",
            "url_status": "offline",
            "last_online": "2026-03-29 03:32:46 UTC",
            "threat": "malware_download",
            "tags": [
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806686/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806685": [
        {
            "dateadded": "2026-03-28 01:01:11 UTC",
            "url": "https://svc3user.luminouspatron.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 01:01:11 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806685/",
            "reporter": "anonymous"
        }
    ],
    "3806684": [
        {
            "dateadded": "2026-03-28 00:57:06 UTC",
            "url": "http://110.38.220.112:48037/i",
            "url_status": "offline",
            "last_online": "2026-03-28 03:48:05 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806684/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806683": [
        {
            "dateadded": "2026-03-28 00:55:13 UTC",
            "url": "http://110.38.223.5:43479/i",
            "url_status": "offline",
            "last_online": "2026-03-28 09:06:45 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806683/",
            "reporter": "geenensp"
        }
    ],
    "3806682": [
        {
            "dateadded": "2026-03-28 00:55:12 UTC",
            "url": "https://svc2base.luminouspatron.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:55:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806682/",
            "reporter": "anonymous"
        }
    ],
    "3806681": [
        {
            "dateadded": "2026-03-28 00:52:06 UTC",
            "url": "http://110.38.220.112:48037/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 03:55:32 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806681/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806680": [
        {
            "dateadded": "2026-03-28 00:50:12 UTC",
            "url": "https://svc1infra.luminouspatron.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:50:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806680/",
            "reporter": "anonymous"
        }
    ],
    "3806679": [
        {
            "dateadded": "2026-03-28 00:49:14 UTC",
            "url": "http://110.38.223.5:43479/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-28 09:32:11 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "elf",
                "mips",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806679/",
            "reporter": "geenensp"
        }
    ],
    "3806678": [
        {
            "dateadded": "2026-03-28 00:44:08 UTC",
            "url": "https://dev4work.apexbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:44:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806678/",
            "reporter": "anonymous"
        }
    ],
    "3806677": [
        {
            "dateadded": "2026-03-28 00:39:07 UTC",
            "url": "http://113.94.58.172:41687/i",
            "url_status": "offline",
            "last_online": "2026-03-30 15:12:20 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806677/",
            "reporter": "geenensp"
        }
    ],
    "3806676": [
        {
            "dateadded": "2026-03-28 00:38:09 UTC",
            "url": "https://dev3local.apexbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:38:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806676/",
            "reporter": "anonymous"
        }
    ],
    "3806675": [
        {
            "dateadded": "2026-03-28 00:35:13 UTC",
            "url": "http://115.49.156.235:38187/i",
            "url_status": "offline",
            "last_online": "2026-03-30 04:23:23 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806675/",
            "reporter": "geenensp"
        }
    ],
    "3806674": [
        {
            "dateadded": "2026-03-28 00:33:08 UTC",
            "url": "https://dev2power.apexbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:33:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806674/",
            "reporter": "anonymous"
        }
    ],
    "3806673": [
        {
            "dateadded": "2026-03-28 00:28:08 UTC",
            "url": "https://dev1proc.apexbloomera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:28:08 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806673/",
            "reporter": "anonymous"
        }
    ],
    "3806672": [
        {
            "dateadded": "2026-03-28 00:23:13 UTC",
            "url": "https://cl4link.horizonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:23:13 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806672/",
            "reporter": "anonymous"
        }
    ],
    "3806671": [
        {
            "dateadded": "2026-03-28 00:20:05 UTC",
            "url": "http://85.239.147.6/files/8316621590/q4bDNVB.exe",
            "url_status": "offline",
            "last_online": null,
            "threat": "malware_download",
            "tags": [
                "c2-monitor-auto",
                "dropped-by-amadey"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806671/",
            "reporter": "c2hunter"
        }
    ],
    "3806670": [
        {
            "dateadded": "2026-03-28 00:18:09 UTC",
            "url": "https://cl3dev.horizonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:18:09 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806670/",
            "reporter": "anonymous"
        }
    ],
    "3806669": [
        {
            "dateadded": "2026-03-28 00:15:10 UTC",
            "url": "https://cl2remote.horizonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:15:10 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806669/",
            "reporter": "anonymous"
        }
    ],
    "3806668": [
        {
            "dateadded": "2026-03-28 00:09:16 UTC",
            "url": "http://124.130.70.134:56245/i",
            "url_status": "offline",
            "last_online": "2026-03-28 21:18:47 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806668/",
            "reporter": "geenensp"
        }
    ],
    "3806667": [
        {
            "dateadded": "2026-03-28 00:09:13 UTC",
            "url": "http://115.49.156.235:38187/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 03:22:28 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806667/",
            "reporter": "geenensp"
        }
    ],
    "3806666": [
        {
            "dateadded": "2026-03-28 00:08:12 UTC",
            "url": "http://113.94.58.172:41687/bin.sh",
            "url_status": "offline",
            "last_online": "2026-03-30 21:24:27 UTC",
            "threat": "malware_download",
            "tags": [
                "32-bit",
                "arm",
                "elf",
                "mirai",
                "Mozi"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806666/",
            "reporter": "geenensp"
        }
    ],
    "3806665": [
        {
            "dateadded": "2026-03-28 00:07:06 UTC",
            "url": "http://27.121.83.226:44966/i",
            "url_status": "offline",
            "last_online": "2026-03-29 04:02:40 UTC",
            "threat": "malware_download",
            "tags": [
                "mirai"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806665/",
            "reporter": "GAYINT_DOT_ORG"
        }
    ],
    "3806664": [
        {
            "dateadded": "2026-03-28 00:05:12 UTC",
            "url": "https://cl1store.horizonprospera.in.net/verification.google",
            "url_status": "offline",
            "last_online": "2026-03-28 00:05:12 UTC",
            "threat": "malware_download",
            "tags": [
                "ACRStealer",
                "ClearFake"
            ],
            "urlhaus_link": "https://urlhaus.abuse.ch/url/3806664/",
            "reporter": "anonymous"
        }
    ]
}